Project

General

Profile

Feature #3440

Add QUIC Protocol Analysis and CYU Fingerprinting

Added by John Althouse over 1 year ago. Updated 9 months ago.

Status:
In Review
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Protocol

Description

QUIC traffic could be up to 20% of an organizations network traffic if they use Google products, like Chrome. Background:
https://engineering.salesforce.com/gquic-protocol-analysis-and-fingerprinting-in-zeek-a4178855d75f

Here's the protocol analyzer and fingerprinting script for Zeek for reference:
https://github.com/salesforce/GQUIC_Protocol_Analyzer


Files

GQUIC1.pcapng (7.93 KB) GQUIC1.pcapng Caleb Yu, 09/02/2020 04:22 PM
GQUIC2.pcapng (9.84 KB) GQUIC2.pcapng Caleb Yu, 09/02/2020 04:22 PM

Also available in: Atom PDF