STUN/RTP: extend extracted metadata (#2798)

Author: IvanNardi

src/include/ndpi_typedefs.h

@@ -1417,6 +1417,7 @@ struct ndpi_flow_struct {
     u_int8_t num_xor_relayed_addresses, num_xor_mapped_addresses;
     u_int8_t num_non_stun_pkt, non_stun_pkt_len[2];
     u_int16_t rtp_counters[2];
+    u_int32_t t_start, t_end;
   } stun;
 
   struct {

src/lib/protocols/stun.c

@@ -973,6 +973,13 @@ static int stun_search_again(struct ndpi_detection_module_struct *ndpi_struct,
       /* TODO: store RTP information in 'struct rtp_info' */
       NDPI_LOG_INFO(ndpi_struct, "Found RTP over STUN\n");
 
+      if(flow->stun.t_start != 0) {
+        flow->stun.t_end = ndpi_get_current_time(flow);
+      } else if(flow->stun.rtp_counters[0] != 0 && flow->stun.rtp_counters[1] != 0) {
+        flow->stun.t_start = ndpi_get_current_time(flow);
+        flow->stun.t_end = ndpi_get_current_time(flow);
+      }
+
       rtp_get_stream_type(packet->payload[1] & 0x7F, &flow->flow_multimedia_types, flow->detected_protocol_stack[0]);
 
       if(flow->detected_protocol_stack[0] != NDPI_PROTOCOL_RTP &&