Skip to content

Commit 9bfce31

Browse files
committed
Make mode -9 the default, instead of -5
Auto-ttl gives many false positives in TTL detection, which breaks non-blocked websites. Use the combination of wrong-seq and wrong-chksum and hope to the best. Also block QUIC to workaround possible throttling, as right now it is not dissected.
1 parent f736209 commit 9bfce31

File tree

2 files changed

+8
-6
lines changed

2 files changed

+8
-6
lines changed

README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -78,11 +78,11 @@ LEGACY modesets:
7878
-4 -p -r -s (best speed)
7979
8080
Modern modesets (more stable, more compatible, faster):
81-
-5 -f 2 -e 2 --auto-ttl --reverse-frag --max-payload (this is the default)
81+
-5 -f 2 -e 2 --auto-ttl --reverse-frag --max-payload
8282
-6 -f 2 -e 2 --wrong-seq --reverse-frag --max-payload
8383
-7 -f 2 -e 2 --wrong-chksum --reverse-frag --max-payload
8484
-8 -f 2 -e 2 --wrong-seq --wrong-chksum --reverse-frag --max-payload
85-
-9 -f 2 -e 2 --wrong-seq --wrong-chksum --reverse-frag --max-payload -q
85+
-9 -f 2 -e 2 --wrong-seq --wrong-chksum --reverse-frag --max-payload -q (this is the default)
8686
8787
Note: combination of --wrong-seq and --wrong-chksum generates two different fake packets.
8888
```

src/goodbyedpi.c

+6-4
Original file line numberDiff line numberDiff line change
@@ -638,13 +638,15 @@ int main(int argc, char *argv[]) {
638638
);
639639

640640
if (argc == 1) {
641-
/* enable mode -5 by default */
641+
/* enable mode -9 by default */
642642
do_fragment_http = do_fragment_https = 1;
643643
do_reverse_frag = do_native_frag = 1;
644644
http_fragment_size = https_fragment_size = 2;
645645
do_fragment_http_persistent = do_fragment_http_persistent_nowait = 1;
646646
do_fake_packet = 1;
647-
do_auto_ttl = 1;
647+
do_wrong_chksum = 1;
648+
do_wrong_seq = 1;
649+
do_block_quic = 1;
648650
max_payload_size = 1200;
649651
}
650652

@@ -964,11 +966,11 @@ int main(int argc, char *argv[]) {
964966
" -4 -p -r -s (best speed)"
965967
"\n"
966968
"Modern modesets (more stable, more compatible, faster):\n"
967-
" -5 -f 2 -e 2 --auto-ttl --reverse-frag --max-payload (this is the default)\n"
969+
" -5 -f 2 -e 2 --auto-ttl --reverse-frag --max-payload\n"
968970
" -6 -f 2 -e 2 --wrong-seq --reverse-frag --max-payload\n"
969971
" -7 -f 2 -e 2 --wrong-chksum --reverse-frag --max-payload\n"
970972
" -8 -f 2 -e 2 --wrong-seq --wrong-chksum --reverse-frag --max-payload\n"
971-
" -9 -f 2 -e 2 --wrong-seq --wrong-chksum --reverse-frag --max-payload -q\n\n"
973+
" -9 -f 2 -e 2 --wrong-seq --wrong-chksum --reverse-frag --max-payload -q (this is the default)\n\n"
972974
"Note: combination of --wrong-seq and --wrong-chksum generates two different fake packets.\n"
973975
);
974976
exit(EXIT_FAILURE);

0 commit comments

Comments
 (0)