nfqws: detect Discord Voice IP Discovery packets

This commit is contained in:
Ivan Trubach
2025-04-03 04:23:49 +03:00
parent cbdee74e5f
commit 4b288643ac
9 changed files with 120 additions and 79 deletions

View File

@@ -2079,6 +2079,12 @@ static uint8_t dpi_desync_udp_packet_play(bool replay, size_t reasm_offset, uint
l7proto = DHT;
if (ctrack && ctrack->l7proto==UNKNOWN) ctrack->l7proto = l7proto;
}
else if (IsDiscordIpDiscoveryRequest(dis->data_payload,dis->len_payload))
{
DLOG("packet contains Discord Voice IP Discovery\n");
l7proto = DISCORD;
if (ctrack && ctrack->l7proto==UNKNOWN) ctrack->l7proto = l7proto;
}
else
{
if (!dp->desync_any_proto)
@@ -2191,6 +2197,9 @@ static uint8_t dpi_desync_udp_packet_play(bool replay, size_t reasm_offset, uint
case DHT:
fake = &dp->fake_dht;
break;
case DISCORD:
fake = &dp->fake_discord;
break;
default:
fake = &dp->fake_unknown_udp;
break;