Changes between Version 6 and Version 7 of doc/OONI/censorshipwiki/CensorshipDetection/PcapAnalysis


Ignore:
Timestamp:
Feb 5, 2013, 11:29:06 PM (7 years ago)
Author:
phw
Comment:

Added filter expression for the new cipher list.

Legend:

Unmodified
Added
Removed
Modified
  • doc/OONI/censorshipwiki/CensorshipDetection/PcapAnalysis

    v6 v7  
    1414}}}
    1515
    16 == Finding Tor-specific TLS client hellos ==
     16== Finding Tor-specific TLS client hellos (1/2) ==
    1717The following filter shows all frames which contain the Tor-specific TLS client hello (for versions < 0.2.3.17-beta). The filter looks for the unique cipher list.
    1818{{{
    1919frame contains c0:0a:c0:14:00:39:00:38:c0:0f:c0:05:00:35:c0:07:c0:09:c0:11:c0:13:00:33:00:32:c0:0c:c0:0e:c0:02:c0:04:00:04:00:05:00:2f:c0:08:c0:12:00:16:00:13:c0:0d:c0:03:fe:ff:00:0a:00:ff
     20}}}
     21
     22== Finding Tor-specific TLS client hellos (2/2) ==
     23The following filter shows all frames which contain the Tor-specific TLS client hello (for versions >= 0.2.3.17-beta). The filter looks for the cipher list.
     24{{{
     25frame contains c0:0a:c0:14:00:88:00:87:00:39:00:38:c0:0f:c0:05:00:84:00:35:c0:07:c0:09:c0:11:c0:13:00:45:00:44:00:33:00:32:c0:0c:c0:0e:c0:02:c0:04:00:96:00:41:00:04:00:05:00:2f:c0:08:c0:12:00:16:00:13:c0:0d:c0:03:fe:ff:00:0a:00:ff
    2026}}}
    2127