udpx icon indicating copy to clipboard operation
udpx copied to clipboard

feature request

Open am0o0 opened this issue 3 years ago • 6 comments

Thanks for the awesome updx tool Can you please tell me How Can I add a probe by myself, please? I want to add HTTP3/QUIC probes that I think are based on the UDP.

am0o0 avatar Nov 20 '22 10:11 am0o0

Good idea, I will look into it. Documentation is still work in progress, but there is this little section. I am thinking about adding YML templates.

nullt3r avatar Nov 20 '22 10:11 nullt3r

Thanks, I want to know How can I find out whats the packet data (hex-encoded) of the specific protocol is? should I log UDP packets or read their RFC ?

am0o0 avatar Nov 20 '22 10:11 am0o0

The poor's man solution is to capture the data via netcat, e. g. nc -ul PORT > /tmp/out.pkt and then convert the packet to hex data cat /tmp/out.pkt | hexdump -e '512/1 "%02X"'. Just make sure to share it so we can add it to the next release.

nullt3r avatar Nov 20 '22 10:11 nullt3r

I think http3 is based on TLS so I couldn't reuse the same packet and got error in server logs too: image on first run image

on second run(failed) image

am0o0 avatar Nov 20 '22 10:11 am0o0

Yep, I realised there is TLS 1.3 by design in QUICK, so thats expected.

nullt3r avatar Nov 20 '22 10:11 nullt3r

This is why, e. g. Wireguard and such is not included in probes. I will need to make actual module for TLS. If you have any idea, let me know.

nullt3r avatar Nov 20 '22 10:11 nullt3r