tcp

Documentation

Index

• Constants
• type FETAnalyzer
  • func (a *FETAnalyzer) Limit() int
  • func (a *FETAnalyzer) Name() string
  • func (a *FETAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream
• type HTTPAnalyzer
  • func (a *HTTPAnalyzer) Limit() int
  • func (a *HTTPAnalyzer) Name() string
  • func (a *HTTPAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream
• type SSHAnalyzer
  • func (a *SSHAnalyzer) Limit() int
  • func (a *SSHAnalyzer) Name() string
  • func (a *SSHAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream
• type SocksAnalyzer
  • func (a *SocksAnalyzer) Limit() int
  • func (a *SocksAnalyzer) Name() string
  • func (a *SocksAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream
• type TLSAnalyzer
  • func (a *TLSAnalyzer) Limit() int
  • func (a *TLSAnalyzer) Name() string
  • func (a *TLSAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream
• type TrojanAnalyzer
  • func (a *TrojanAnalyzer) Limit() int
  • func (a *TrojanAnalyzer) Name() string
  • func (a *TrojanAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream

Constants

const (
	SocksInvalid = iota
	Socks4
	Socks4A
	Socks5

	Socks4Version = 0x04
	Socks5Version = 0x05

	Socks4ReplyVN = 0x00

	Socks4CmdTCPConnect = 0x01
	Socks4CmdTCPBind    = 0x02

	Socks4ReqGranted        = 0x5A
	Socks4ReqRejectOrFailed = 0x5B
	Socks4ReqRejectIdentd   = 0x5C
	Socks4ReqRejectUser     = 0x5D

	Socks5CmdTCPConnect   = 0x01
	Socks5CmdTCPBind      = 0x02
	Socks5CmdUDPAssociate = 0x03

	Socks5AuthNotRequired      = 0x00
	Socks5AuthPassword         = 0x02
	Socks5AuthNoMatchingMethod = 0xFF

	Socks5AuthSuccess = 0x00
	Socks5AuthFailure = 0x01

	Socks5AddrTypeIPv4   = 0x01
	Socks5AddrTypeDomain = 0x03
	Socks5AddrTypeIPv6   = 0x04
)

Types

type FETAnalyzer

type FETAnalyzer struct{}

FETAnalyzer stands for "Fully Encrypted Traffic" analyzer. It implements an algorithm to detect fully encrypted proxy protocols such as Shadowsocks, mentioned in the following paper: https://gfw.report/publications/usenixsecurity23/data/paper/paper.pdf

func (*FETAnalyzer) Limit

func (a *FETAnalyzer) Limit() int

func (*FETAnalyzer) Name

func (a *FETAnalyzer) Name() string

func (*FETAnalyzer) NewTCP

func (a *FETAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream

type HTTPAnalyzer

type HTTPAnalyzer struct{}

func (*HTTPAnalyzer) Limit

func (a *HTTPAnalyzer) Limit() int

func (*HTTPAnalyzer) Name

func (a *HTTPAnalyzer) Name() string

func (*HTTPAnalyzer) NewTCP

func (a *HTTPAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream

type SSHAnalyzer

type SSHAnalyzer struct{}

func (*SSHAnalyzer) Limit

func (a *SSHAnalyzer) Limit() int

func (*SSHAnalyzer) Name

func (a *SSHAnalyzer) Name() string

func (*SSHAnalyzer) NewTCP

func (a *SSHAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream

type SocksAnalyzer

type SocksAnalyzer struct{}

func (*SocksAnalyzer) Limit

func (a *SocksAnalyzer) Limit() int

func (*SocksAnalyzer) Name

func (a *SocksAnalyzer) Name() string

func (*SocksAnalyzer) NewTCP

func (a *SocksAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream

type TLSAnalyzer

type TLSAnalyzer struct{}

func (*TLSAnalyzer) Limit

func (a *TLSAnalyzer) Limit() int

func (*TLSAnalyzer) Name

func (a *TLSAnalyzer) Name() string

func (*TLSAnalyzer) NewTCP

func (a *TLSAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream

type TrojanAnalyzer

type TrojanAnalyzer struct{}

TrojanAnalyzer uses a very simple packet length based check to determine if a TLS connection is actually the Trojan proxy protocol. The algorithm is from the following project, with small modifications: https://github.com/XTLS/Trojan-killer Warning: Experimental only. This method is known to have significant false positives and false negatives.

func (*TrojanAnalyzer) Limit

func (a *TrojanAnalyzer) Limit() int

func (*TrojanAnalyzer) Name

func (a *TrojanAnalyzer) Name() string

func (*TrojanAnalyzer) NewTCP

func (a *TrojanAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) analyzer.TCPStream