Template
1
0
mirror of https://github.com/bol-van/zapret2.git synced 2026-03-14 06:13:09 +00:00

update docs

This commit is contained in:
bol-van
2026-01-12 10:09:02 +03:00
parent 3e724c3810
commit 9eb308d84c
2 changed files with 6 additions and 6 deletions

View File

@@ -707,7 +707,7 @@ LOGICAL NETWORK FILTER:
## Protocol detection
nfqws2 signatures the payload types of individual packets or groups of packets.
All packets without data have payload empty, undetected - unknown.
All packets without data have payload empty. Undetermined payloads have payload type "unknown".
The flow protocol is assigned after receiving the first known payload and remains with the flow for the rest of its existence.
In this case, subsequent payloads can have both a known type and an unknown one.
In payload and flow protocol filters special values are available - "all" and "known". "all" means any, "known" - not "empty" and not "unknown".
@@ -1304,8 +1304,8 @@ desync
| replay_piece | number | index of the part being replayed | 1-based indexing |
| replay_piece_count | number | total number of parts being replayed | |
| replay_piece_last | bool | indicates the last part being replayed | |
| l7payload | string | payload type of the current packet or packet group; see nfqws2 help for the list | defaults to "unknown" if undetermined |
| l7proto | string | stream protocol type | defaults to "unknown" if undetermined |
| l7payload | string | [payload type](#protocol-detection) of the current packet or packet group | defaults to "unknown" if undetermined |
| l7proto | string | [flow protocol(#protocol-detection) | defaults to "unknown" if undetermined |
| reasm_data | string | result of reassembling a multi-packet message, or the payload itself if no reassembly occurred | currently applied only to TCP |
| reasm_offset | string | offset of the current replayed packet within the reassembled data | currently applied only to TCP |

View File

@@ -776,11 +776,11 @@ nfqws2 сигнатурно распознает типы пейлоадов о
| tls | tcp | tls_client_hello<br>tls_server_hello |
| xmpp | tcp | xmpp_stream<br>xmpp_starttls<br>xmpp_proceed<br>xmpp_features |
| quic | udp | quic_initial |
| wireguarв | udp | wireguard_initiation<br>wireguard_response<br>wireguard_cookie<br>wireguard_keepalive |
| wireguard | udp | wireguard_initiation<br>wireguard_response<br>wireguard_cookie<br>wireguard_keepalive |
| dht | udp | dht |
| discord | udp | discord_ip_discovery |
| stun | udp | stun |
| dns | udp | dns_query dns_response |
| dns | udp | dns_query<br>dns_response |
| mtproto | udp | mtproto_initial |
| dtls | udp | dtls_client_hello<br>dtls_server_hello |
@@ -1444,7 +1444,7 @@ desync
| replay_piece_count | number | количество проигрываемых частей | |
| replay_piece_last | bool | последняя проигрываемая часть | |
| l7payload | string | [тип пейлоада](#распознавание-протоколов) текущего пакета или группы пакетов | если неизвестно - unknown |
| l7proto | string | тип протокола потока | если неизвестно - unknown |
| l7proto | string | тип [протокола потока](#распознавание-протоколов) | если неизвестно - unknown |
| reasm_data | string | результат сборки многопакетного сообщения, либо сам пейлоад, если сборки не было | пока применяется только для tcp |
| reasm_offset | string | смещение текущего переигрываемого пакета в сборке | пока применяется только для tcp |
| decrypt_data | string | результат сборки и дешифровки пейлоада или пейлоадов нескольких пакетов | применяется для quic |