From 6be399f59e15549d883701a40916a1875cfcbabe Mon Sep 17 00:00:00 2001 From: Zxilly Date: Sun, 3 Dec 2023 21:11:32 +0800 Subject: [PATCH] fix: remove possible false positive --- src/handler.c | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/src/handler.c b/src/handler.c index 0093d1b..182a464 100644 --- a/src/handler.c +++ b/src/handler.c @@ -255,10 +255,13 @@ void handle_packet(const struct nf_queue* queue,const struct nf_packet* pkt) { goto end; } - if (!is_http_protocol(tcp_payload, tcp_payload_len)) { - send_verdict(queue, pkt, get_next_mark(pkt, false), NULL); - goto end; - } +// FIXME: can lead to false positive, +// should also get CTA_COUNTERS_ORIG to check if this packet is a initial tcp packet + +// if (!is_http_protocol(tcp_payload, tcp_payload_len)) { +// send_verdict(queue, pkt, get_next_mark(pkt, false), NULL); +// goto end; +// } count_http_packet(); const void* search_start = tcp_payload;