mirror of
https://github.com/bol-van/zapret2.git
synced 2026-03-14 06:13:09 +00:00
update docs
This commit is contained in:
@@ -707,7 +707,7 @@ LOGICAL NETWORK FILTER:
|
||||
## Protocol detection
|
||||
|
||||
nfqws2 signatures the payload types of individual packets or groups of packets.
|
||||
All packets without data have payload empty, undetected - unknown.
|
||||
All packets without data have payload empty. Undetermined payloads have payload type "unknown".
|
||||
The flow protocol is assigned after receiving the first known payload and remains with the flow for the rest of its existence.
|
||||
In this case, subsequent payloads can have both a known type and an unknown one.
|
||||
In payload and flow protocol filters special values are available - "all" and "known". "all" means any, "known" - not "empty" and not "unknown".
|
||||
@@ -1304,8 +1304,8 @@ desync
|
||||
| replay_piece | number | index of the part being replayed | 1-based indexing |
|
||||
| replay_piece_count | number | total number of parts being replayed | |
|
||||
| replay_piece_last | bool | indicates the last part being replayed | |
|
||||
| l7payload | string | payload type of the current packet or packet group; see nfqws2 help for the list | defaults to "unknown" if undetermined |
|
||||
| l7proto | string | stream protocol type | defaults to "unknown" if undetermined |
|
||||
| l7payload | string | [payload type](#protocol-detection) of the current packet or packet group | defaults to "unknown" if undetermined |
|
||||
| l7proto | string | [flow protocol(#protocol-detection) | defaults to "unknown" if undetermined |
|
||||
|
||||
| reasm_data | string | result of reassembling a multi-packet message, or the payload itself if no reassembly occurred | currently applied only to TCP |
|
||||
| reasm_offset | string | offset of the current replayed packet within the reassembled data | currently applied only to TCP |
|
||||
|
||||
@@ -776,11 +776,11 @@ nfqws2 сигнатурно распознает типы пейлоадов о
|
||||
| tls | tcp | tls_client_hello<br>tls_server_hello |
|
||||
| xmpp | tcp | xmpp_stream<br>xmpp_starttls<br>xmpp_proceed<br>xmpp_features |
|
||||
| quic | udp | quic_initial |
|
||||
| wireguarв | udp | wireguard_initiation<br>wireguard_response<br>wireguard_cookie<br>wireguard_keepalive |
|
||||
| wireguard | udp | wireguard_initiation<br>wireguard_response<br>wireguard_cookie<br>wireguard_keepalive |
|
||||
| dht | udp | dht |
|
||||
| discord | udp | discord_ip_discovery |
|
||||
| stun | udp | stun |
|
||||
| dns | udp | dns_query dns_response |
|
||||
| dns | udp | dns_query<br>dns_response |
|
||||
| mtproto | udp | mtproto_initial |
|
||||
| dtls | udp | dtls_client_hello<br>dtls_server_hello |
|
||||
|
||||
@@ -1444,7 +1444,7 @@ desync
|
||||
| replay_piece_count | number | количество проигрываемых частей | |
|
||||
| replay_piece_last | bool | последняя проигрываемая часть | |
|
||||
| l7payload | string | [тип пейлоада](#распознавание-протоколов) текущего пакета или группы пакетов | если неизвестно - unknown |
|
||||
| l7proto | string | тип протокола потока | если неизвестно - unknown |
|
||||
| l7proto | string | тип [протокола потока](#распознавание-протоколов) | если неизвестно - unknown |
|
||||
| reasm_data | string | результат сборки многопакетного сообщения, либо сам пейлоад, если сборки не было | пока применяется только для tcp |
|
||||
| reasm_offset | string | смещение текущего переигрываемого пакета в сборке | пока применяется только для tcp |
|
||||
| decrypt_data | string | результат сборки и дешифровки пейлоада или пейлоадов нескольких пакетов | применяется для quic |
|
||||
|
||||
Reference in New Issue
Block a user