Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [deep-packet-inspection]

The tag has no usage guidance.

0
votes
1answer
20 views

Chrome google certificate with deep inspection

I enabled deepinspection from my firewall for HTTPS connections using a company root CA. It is well working for all sites and browsers but I found a strange behaviour by Google Chrome. When I open ...
1
vote
0answers
60 views

TLS websocket proxy with deep packet inspection/traffic logging

I have a very specific scenario in which maschines (IoT) are communicating with a central server over websockets. I need to inspect the websockets traffic (wss/tls) for audit and monitoring reasons (...
1
vote
0answers
85 views

altering packet content of forwarded packets with nft or iptables using queues

I need to create a moderatly large application that changes the content of forwarded packets quite drastically. I was wondering whether or not I could alter the content of a packet that is intended ...
2
votes
0answers
2k views

Clarification regarding Deep Packet Inspection in the Linux Kernel's Netfilter section

The Linux Kernel provides Netfilter as a mechanism for both NAT and firewall functionality. Both of those functionalities require analysis and classification of incoming packets, which is dubbed "...
-4
votes
2answers
92 views

What is the reason to use SSL on websites if it can be decrypted easily?

Since SSL can be decrypted easily using a basic man in the middle node, whats the reason to continue using it? Don't most ISPs decrypt on a daily basis using Deep Packet Inspection? And isn't it ...
0
votes
1answer
29 views

Is it possible to obtain a list of https hosts that users have visited from a Sonicwall before DPI-SSL is implemented?

The reason I ask is that if one could do this, is because one could use the logs to find a list of https sites to white list by counting the number of visits prior to implementation. But something ...
0
votes
1answer
1k views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
7
votes
1answer
3k views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
3
votes
1answer
261 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
0
votes
1answer
798 views

ow to get protocol signatures?

Does anyone know how can we get signatures for various protocols e.g. BGP, DHCP, VxLAN etc? By signatures, I actually mean the pattern (e.g. something like 0x234557888) used for pattern-matching in a ...
0
votes
1answer
84 views

Content-based packet filtering proxy

I want to set up a proxy server, which upon getting specific pattern in HTTP response body (a 403 Forbidden, with some special content), reroutes the packet some other way (through another proxy, for ...
4
votes
4answers
713 views

Capture network traffic of a single application?

I am looking for a method / hack / kernel module to capture network traffic of a PID and all it's forks / child processes. I have a firefox applications that opens some web pages and starts to stream ...
0
votes
1answer
154 views

Deep packet Inspection

Recently it came across me that some of the users might be abusing our platform not conform to our rules. Basically what we run is a platform for students by students. We sell shell accounts and VPS ...