From 880b5da2314971b883f99128e2d3948d01b681a8 Mon Sep 17 00:00:00 2001
From: Brad Warren <bmw@eff.org>
Date: Thu, 30 Jul 2026 14:43:15 -0700
Subject: [PATCH] search full vector

---
 lib/src/analysis/imsi_requested.rs | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/lib/src/analysis/imsi_requested.rs b/lib/src/analysis/imsi_requested.rs
index 7311196..58ec07f 100644
--- a/lib/src/analysis/imsi_requested.rs
+++ b/lib/src/analysis/imsi_requested.rs
@@ -90,9 +90,11 @@ impl ImsiRequestedAnalyzer {
 
             // IMSI to Disconnect without AuthAccept
             (State::IdentityRequest, State::Disconnect) => {
-                if self.likely_ue_plmn.as_ref().is_some_and(|p| {
-                    self.likely_enb_plmns.len() == 1 && self.likely_enb_plmns.contains(p)
-                }) {
+                if self
+                    .likely_ue_plmn
+                    .as_ref()
+                    .is_some_and(|p| self.likely_enb_plmns.contains(p))
+                {
                     self.flag = Some(Event {
                         event_type: EventType::High,
                         message: "Disconnected after Identity Request without Auth Accept on home network!".to_string(),