diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2021-01-07 10:56:39 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-01-07 10:56:39 +0100 |
| commit | 2080cc73655a55a25b7d643b8c194d450425e753 (patch) | |
| tree | 97d3500fa80ea02084aaecc1c1fc4c22774d85da /tests/result/doq_adguard.pcapng.out | |
| parent | 00dabce65e526a99e7848fe7ab53ac3bd9a68b92 (diff) | |
QUIC: add suppport for DNS-over-QUIC (#1107)
Even if it is only an early internet draft, DoQ has already (at least)
one deployed implementation.
See: https://www.zdnet.com/article/ad-blocker-adguard-deploys-worlds-first-dns-over-quic-resolver/
Draft: https://tools.ietf.org/html/draft-huitema-dprive-dnsoquic-00
In the future, if this protocol will be really used, it might be worth to
rename NDPI_PROTOCOL_DOH_DOT in NDPI_PROTOCOL_DOH_DOT_DOQ
Diffstat (limited to 'tests/result/doq_adguard.pcapng.out')
| -rw-r--r-- | tests/result/doq_adguard.pcapng.out | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/tests/result/doq_adguard.pcapng.out b/tests/result/doq_adguard.pcapng.out new file mode 100644 index 000000000..4618b41ee --- /dev/null +++ b/tests/result/doq_adguard.pcapng.out @@ -0,0 +1,8 @@ +DoH_DoT 296 44445 1 + +JA3 Host Stats: + IP Address # JA3C + 1 192.168.12.169 1 + + + 1 UDP 192.168.12.169:41070 <-> 94.140.14.14:784 [proto: 188.196/QUIC.DoH_DoT][cat: Network/14][164 pkts/17196 bytes <-> 132 pkts/27249 bytes][Goodput ratio: 60/80][38.08 sec][ALPN: doq-i00][TLS Supported Versions: TLSv1.3][bytes ratio: -0.226 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 232/242 2999/3045 449/458][Pkt Len c2s/s2c min/avg/max/stddev: 72/81 105/206 1274/1294 132/268][TLSv1.3][Client: dns.adguard.com][JA3C: 1e022f87823477abd6a79c31d70062d7][PLAIN TEXT (AKToSb)][Plen Bins: 15,47,16,9,4,0,2,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0] |