🐞 fix(identify_gtp): try fix TSG-20998, 识别GTP排除DNS和QUIC服务端口v4.3.51

1 files changed, 3 insertions, 0 deletions

diff --git a/src/dealpkt/deal_gprs_tunnel.c b/src/dealpkt/deal_gprs_tunnel.c
index 17b67f5..ab03d78 100644
--- a/src/dealpkt/deal_gprs_tunnel.c
+++ b/src/dealpkt/deal_gprs_tunnel.c
@@ -222,6 +222,9 @@ int identify_gtp(const struct streaminfo *pstream,const char *payload, unsigned
             source = ntohs(pstream->addr.ipv4->source);
         }
 
+        // exclude well knonwn ports, DNS 53, QUIC 443, 
+        if(source == 53 || dest == 53 || source == 443 || dest == 443)return 0;
+
         if ((source == gtp_u) || (dest == gtp_u) || ((source == gtp_v0) || (dest == gtp_v0))) {
             struct gtp_hdr *gtp = (struct gtp_hdr *) payload;
             unsigned short gtp_version = (gtp->flags & 0xE0) >> 5;