Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] прекращает писаться nfqws.log вскоре после установки - OpenWrt #167

Open
LimpingK opened this issue Jan 30, 2025 · 4 comments
Open

[BUG] прекращает писаться nfqws.log вскоре после установки - OpenWrt #167

LimpingK opened this issue Jan 30, 2025 · 4 comments

Comments

@LimpingK
Copy link

В первые минуты посте установки и запуска в nfqws.log появляются строки.
Смотрю в web-интерфейсе. Но когда набирается десяток строк за первые минуты, лог становится пустой. Я сначала думал, что проблема с веб-интерфейсом.
Но собственно файл тоже пустой, 0b.
Остальные файлы,
nfqws.conf
user.list
exclude.list
auto.list

  • сохраняю из веб-интерфейса нормально.

GL.iNet GL-MT3000
OpenWrt 21.02-SNAPSHOT r15812+908-46b6ee7ffc / LuCI openwrt-21.02 branch git-22.245.77575-63bfee6
Kernel Version 5.4.211

Провайдер
Повторяется в разных случаях: USB-модем, Repeater WiFi, ethernet.

Выполните команды и приложите их вывод
opkg info nfqws-keenetic

root@GL-MT3000:~# opkg info nfqws-keenetic
Package: nfqws-keenetic
Version: 2.7.6
Depends: libc, iptables, iptables-mod-extra, iptables-mod-nfqueue, iptables-mod-filter, iptables-mod-ipopt, iptables-mod-conntrack-extra, ip6tables, ip6tables-mod-nat, ip6tables-extra
Conflicts: tpws-keenetic
Status: install user installed
Architecture: all
Conffiles:
 /etc/nfqws/auto.list e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
 /etc/nfqws/exclude.list 7b1d1ef573fe736f132520989a4b8534c611c0a7fdc9d10c323f4589f5e99e94
 /etc/nfqws/nfqws.conf 0e435265380ff191db056cea27e2472ab74cd8e3ef4d3facb994cf69e121393c
 /etc/nfqws/user.list 45dc2adaa172b86d73369c6ed12a8a0e648b851b66293b11514c3b1d4bd3fce6
Installed-Time: 1738174256

/opt/etc/init.d/S51nfqws restart

root@GL-MT3000:~# /etc/init.d/S51nfqws restart
-ash: /etc/init.d/S51nfqws: not found

cat /opt/etc/nfqws/nfqws.conf

root@GL-MT3000:~# cat /etc/nfqws/nfqws.conf
# Provider network interface, e.g. eth3
# You can specify multiple interfaces separated by space, e.g. ISP_INTERFACE="eth3 nwg1"
ISP_INTERFACE="eth2 eth1 br-lan"

# All arguments here: https://github.com/bol-van/zapret (search for `nfqws` on the page)
# HTTP(S) strategy
NFQWS_ARGS="--dpi-desync=fake --dpi-desync-ttl=12 --dpi-desync-fake-http=0x00000000"

# QUIC strategy
NFQWS_ARGS_QUIC="--filter-udp=443 --dpi-desync=fake --dpi-desync-repeats=11 --dpi-desync-fake-quic=/etc/nfqws/quic_initial.bin"

# UDP strategy (doesn't use lists from NFQWS_EXTRA_ARGS)
NFQWS_ARGS_UDP="--filter-udp=50000-50099 --dpi-desync=fake --dpi-desync-any-protocol --dpi-desync-repeats=6 --dpi-desync-cutoff=n2"

# auto - automatically detects blocked resources and adds them to the auto.list
NFQWS_EXTRA_ARGS="--hostlist=/etc/nfqws/user.list --hostlist-auto=/etc/nfqws/auto.list --hostlist-auto-debug=/var/log/nfqws.log --hostlist-exclude=/etc/nfqws/exclude.list"

# list - applies rules only to domains in the user.list
#NFQWS_EXTRA_ARGS="--hostlist=/etc/nfqws/user.list"

# all  - applies rules to all traffic except domains from exclude.list
#NFQWS_EXTRA_ARGS="--hostlist-exclude=/etc/nfqws/exclude.list"

# IPv6 support
IPV6_ENABLED=0

# TCP ports for iptables rules
TCP_PORTS=443

# UDP ports for iptables rules
UDP_PORTS=443,50000:50099

# Keenetic policy name
POLICY_NAME="nfqws"
# Policy mode (0 - include, 1 - exclude)
POLICY_EXCLUDE=0

# Syslog logging level (0 - silent, 1 - debug)
LOG_LEVEL=0

NFQUEUE_NUM=200
USER=nobody
CONFIG_VERSION=5

ps | grep nfqws

root@GL-MT3000:~# ps | grep nfqws
 4787 nobody     660 S    /usr/bin/nfqws --user=nobody --qnum=200 --bind-fix4 --filter-udp=50000-50099 --dpi-desync=fake --dpi-desync-any-p
20627 root      1232 S    grep nfqws

iptables-save | grep 200

root@GL-MT3000:~# iptables-save | grep 200
-A OUTPUT -m owner --gid-owner 20000 -m comment --comment "!fw3: process_explict_vpn" -j MARK --set-xmark 0x20000/0x20000
-A POSTROUTING -o eth2 -p udp -m multiport --dports 443,50000:50099 -m mark --mark 0x40000000/0x40000000 -j MARK --set-xmark 0x20000000/0x20000000
-A POSTROUTING -o eth2 -p udp -m multiport --dports 443,50000:50099 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x20000000/0x20000000 -j NFQUEUE --queue-num 200 --queue-bypass
-A POSTROUTING -o eth2 -p tcp -m multiport --dports 443 -m mark --mark 0x40000000/0x40000000 -j MARK --set-xmark 0x20000000/0x20000000
-A POSTROUTING -o eth2 -p tcp -m multiport --dports 443 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x20000000/0x20000000 -j NFQUEUE --queue-num 200 --queue-bypass
-A POSTROUTING -o eth1 -p udp -m multiport --dports 443,50000:50099 -m mark --mark 0x40000000/0x40000000 -j MARK --set-xmark 0x20000000/0x20000000
-A POSTROUTING -o eth1 -p udp -m multiport --dports 443,50000:50099 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x20000000/0x20000000 -j NFQUEUE --queue-num 200 --queue-bypass
-A POSTROUTING -o eth1 -p tcp -m multiport --dports 443 -m mark --mark 0x40000000/0x40000000 -j MARK --set-xmark 0x20000000/0x20000000
-A POSTROUTING -o eth1 -p tcp -m multiport --dports 443 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x20000000/0x20000000 -j NFQUEUE --queue-num 200 --queue-bypass
-A POSTROUTING -o br-lan -p udp -m multiport --dports 443,50000:50099 -m mark --mark 0x40000000/0x40000000 -j MARK --set-xmark 0x20000000/0x20000000
-A POSTROUTING -o br-lan -p udp -m multiport --dports 443,50000:50099 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x20000000/0x20000000 -j NFQUEUE --queue-num 200 --queue-bypass
-A POSTROUTING -o br-lan -p tcp -m multiport --dports 443 -m mark --mark 0x40000000/0x40000000 -j MARK --set-xmark 0x20000000/0x20000000
-A POSTROUTING -o br-lan -p tcp -m multiport --dports 443 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x20000000/0x20000000 -j NFQUEUE --queue-num 200 --queue-bypass

sysctl net.netfilter.nf_conntrack_checksum

root@GL-MT3000:~# sysctl net.netfilter.nf_conntrack_checksum
net.netfilter.nf_conntrack_checksum = 0
@vemneyy
Copy link

vemneyy commented Feb 10, 2025

Такое ощущение, что проблема смежная c #141

@LimpingK
Copy link
Author

LimpingK commented Feb 11, 2025 •
edited
Loading

Такое ощущение, что проблема смежная c #141

Ох, спасибо!
На второй месяц Зоркий глаз заметил, что LOG_LEVEL=0 [рыдает]
переделаю сегодня на LOG_LEVEL=1

@LimpingK
Copy link
Author

P.S. Нет, выставил

# Syslog logging level (0 - silent, 1 - debug)
LOG_LEVEL=1

но всё равно nfqws.log остаётся пустой.
При этом сабж точно работает, на yota играет yputube.

@LimpingK
Copy link
Author 

Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:49004 dst=142.250.181.170:443
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 48 04 23 D9 D8 81 3D 03 7C 55 C7 31 EF A4 5B 93 53 41 3B 73 A4 ... : ........�..H.#...=.|U.1..[.SA;s. ...
Tue Feb 11 13:57:10 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:10 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:10 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:10 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: packet: id=136978 drop
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: packet: id=136979 len=60 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 192.178.24.170 proto=tcp ttl=62 sport=49060 dport=443 flags=S seq=3055924087 ack_seq=0
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: desync profile search for tcp target=192.178.24.170:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:10 2025 user.debug nfqws[17427]: packet: id=136979 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136980 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 192.178.24.170 proto=tcp ttl=62 sport=49060 dport=443 flags=A seq=3055924088 ack_seq=4261219264
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136980 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136981 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 192.178.24.170 proto=tcp ttl=62 sport=49060 dport=443 flags=AP seq=3055924088 ack_seq=4261219264
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 EB 76 43 0A 7A E9 59 E2 65 B5 DD 4D E3 CE 65 AA CC 31 5E 95 50 ... : ............vC.z.Y.e..M..e..1^.P ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: req retrans : seq interval 3055924088-3055924604
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostname: firebaseinstallations.googleapis.com
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile search for tcp target=192.178.24.170:443 l7proto=tls hostname='firebaseinstallations.googleapis.com'
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for firebaseinstallations.googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for firebaseinstallations.googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for firebaseinstallations.googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:49060 dst=192.178.24.170:443
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 C3 D9 2B C6 24 DF 40 2F F2 F7 13 84 9B C2 45 39 4E F7 40 E5 3D ... : ........�....+.$.@/......E9N.@.= ...
Tue Feb 11 13:57:11 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:11 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136981 drop
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136982 len=64 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=S seq=1228169023 ack_seq=0
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.163.59.251:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136982 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136983 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=A seq=1228169024 ack_seq=2975168363
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136983 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136984 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=AP seq=1228169024 ack_seq=2975168363
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 3E 9E BD 5D 57 BE 1F A9 04 BC E1 89 8D B7 D4 EB 86 86 75 32 66 ... : ...........>..]W.............u2f ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: req retrans : seq interval 1228169024-1228169540
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostname: cloud.radar.imgsmail.ru
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.163.59.251:443 l7proto=tls hostname='cloud.radar.imgsmail.ru'
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for cloud.radar.imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for radar.imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for cloud.radar.imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for radar.imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for cloud.radar.imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for radar.imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for imgsmail.ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for ru : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: not applying tampering to this request
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136984 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136985 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=A seq=1228169541 ack_seq=2975168520
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136985 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136986 len=103 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=AP seq=1228169541 ack_seq=2975168520
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=51 : 14 03 03 00 01 01 16 03 03 00 28 D7 52 DD E9 95 C4 F1 B8 94 D0 F0 83 CB 1D 86 83 B7 BB 1B 27 CF ... : ..........(.R.................'. ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: req retrans : tcp seq 1228169541 not within the req range 1228169024-1228169540. stop tracking.
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136986 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136987 len=315 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=AP seq=1228169592 ack_seq=2975168520
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=263 : 17 03 03 01 02 D7 52 DD E9 95 C4 F1 B9 C2 9B DD C9 1D BC 02 91 D6 43 F0 0E CA 3D 56 5A 6D 48 05 ... : ......R...............C...=VZmH. ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136987 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136988 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=A seq=1228169855 ack_seq=2975168950
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136988 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136989 len=327 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.251 proto=tcp ttl=62 sport=63803 dport=443 flags=AP seq=1228169855 ack_seq=2975168950
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=275 : 17 03 03 01 0E D7 52 DD E9 95 C4 F1 BA B8 CB D5 24 22 A2 7E AC 4E 4B E2 71 A9 D5 F0 C8 B7 26 A2 ... : ......R.........$".~.NK.q.....&. ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136989 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136990 len=64 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63804 dport=443 flags=S seq=1921303854 ack_seq=0
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.161.76.101:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136990 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136991 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63804 dport=443 flags=A seq=1921303855 ack_seq=3794345391
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136991 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136992 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63804 dport=443 flags=AP seq=1921303855 ack_seq=3794345391
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 02 AA 30 47 32 62 62 B3 24 40 D2 1E 9C F1 D8 E4 7E 10 3F AC 7E ... : .............0G2bb.$@......~.?.~ ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: req retrans : seq interval 1921303855-1921304371
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostname: www.google.com
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.161.76.101:443 l7proto=tls hostname='www.google.com'
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for www.google.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for google.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for www.google.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for google.com : positive
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:63804 dst=95.161.76.101:443
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 C9 D6 07 86 AE 12 BB CE 1B 0A 4A D5 01 08 69 01 8A BA 3E DB 7A ... : ........�............J...i...>.z ...
Tue Feb 11 13:57:11 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:11 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136992 drop
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136993 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 192.178.24.170 proto=tcp ttl=62 sport=49060 dport=443 flags=AP seq=3055924088 ack_seq=4261219264
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 EB 76 43 0A 7A E9 59 E2 65 B5 DD 4D E3 CE 65 AA CC 31 5E 95 50 ... : ............vC.z.Y.e..M..e..1^.P ...
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostname: firebaseinstallations.googleapis.com
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for firebaseinstallations.googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for firebaseinstallations.googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for firebaseinstallations.googleapis.com : negative
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:49060 dst=192.178.24.170:443
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 ED D1 5D 15 B3 85 08 DC A7 EA B4 8D 71 DD 31 A5 F2 68 EC D9 3D ... : ........�....].........q.1..h..= ...
Tue Feb 11 13:57:11 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:11 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136993 drop
Tue Feb 11 13:57:11 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136994 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63804 dport=443 flags=A seq=1921304372 ack_seq=3794345391
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136994 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136995 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63804 dport=443 flags=A seq=1921304372 ack_seq=3794345391
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136995 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136996 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63804 dport=443 flags=A seq=1921304372 ack_seq=3794345391
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136996 pass unmodified
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136997 len=60 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.180.42 proto=tcp ttl=62 sport=41546 dport=443 flags=S seq=4029119181 ack_seq=0
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile search for tcp target=142.250.180.42:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:11 2025 user.debug nfqws[17427]: packet: id=136997 pass unmodified
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet: id=136998 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.180.42 proto=tcp ttl=62 sport=41546 dport=443 flags=A seq=4029119182 ack_seq=288503872
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet: id=136998 pass unmodified
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet: id=136999 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.180.42 proto=tcp ttl=62 sport=41546 dport=443 flags=AP seq=4029119182 ack_seq=288503872
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 12 31 01 3A 1D B9 28 40 40 ED 1C BB 99 D9 9E 35 45 A7 69 79 7B ... : ............1.:..(@@......5E.iy{ ...
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: req retrans : seq interval 4029119182-4029119698
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostname: people-pa.googleapis.com
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: desync profile search for tcp target=142.250.180.42:443 l7proto=tls hostname='people-pa.googleapis.com'
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:41546 dst=142.250.180.42:443
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 DB 60 A8 BF 12 53 82 4B 5C 4D 83 30 B3 F0 4F B6 6F 0A F0 B4 F5 ... : ........�...`...S.K\M.0..O.o.... ...
Tue Feb 11 13:57:12 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:12 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet: id=136999 drop
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet: id=137000 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.180.42 proto=tcp ttl=62 sport=41546 dport=443 flags=AP seq=4029119182 ack_seq=288503872
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 12 31 01 3A 1D B9 28 40 40 ED 1C BB 99 D9 9E 35 45 A7 69 79 7B ... : ............1.:..(@@......5E.iy{ ...
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostname: people-pa.googleapis.com
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:41546 dst=142.250.180.42:443
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 46 D3 76 11 63 F9 A2 20 F9 41 17 EA F1 D6 69 4C 07 9F E6 01 59 ... : ........�..F.v.c.. .A....iL....Y ...
Tue Feb 11 13:57:12 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:12 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:12 2025 user.debug nfqws[17427]: packet: id=137000 drop
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137001 len=1278 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.201.131 proto=udp ttl=62 sport=54507 dport=443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: UDP: len=1250 : CC 00 00 00 01 08 A5 55 03 5C C4 4B 92 EC 00 40 47 00 D6 B3 54 A0 86 E2 CD C2 DF 66 B8 D7 C4 02 ... : .......U.\[email protected].... ...
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: desync profile search for udp target=142.250.201.131:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: desync profile 2 matches
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet contains QUIC initial
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet contains partial TLS ClientHello
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: starting reassemble. now we have 1143/16384
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: DELAY desync until reasm is complete (#1)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: applying linux postnat conntrack workaround
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137001 pass modified. len=28
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137002 len=1278 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.201.131 proto=udp ttl=62 sport=54507 dport=443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: UDP: len=1250 : C2 00 00 00 01 08 A5 55 03 5C C4 4B 92 EC 00 40 47 00 D6 B3 54 A0 86 E2 CD C2 DF 66 B8 D7 C4 02 ... : .......U.\[email protected].... ...
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: using cached desync profile 2
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet contains QUIC initial
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: reassemble : feeding data payload size=1143. now we have 2286/16384
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: DELAY desync until reasm is complete (#2)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: REPLAYING delayed packet #1 offset 0
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: REPLAY IP4: 192.168.9.140 => 142.250.201.131 proto=udp ttl=62 sport=54507 dport=443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: UDP: len=1250 : CC 00 00 00 01 08 A5 55 03 5C C4 4B 92 EC 00 40 47 00 D6 B3 54 A0 86 E2 CD C2 DF 66 B8 D7 C4 02 ... : .......U.\[email protected].... ...
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: using cached desync profile 2
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet contains QUIC initial
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: hostname: ssl.gstatic.com
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: desync profile search for udp target=142.250.201.131:443 l7proto=quic hostname='ssl.gstatic.com'
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: desync profile 2 matches
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: * hostlist check for profile 2
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for ssl.gstatic.com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: hostlist check for gstatic.com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for ssl.gstatic.com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: hostlist check for gstatic.com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for ssl.gstatic.com : negative
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: hostlist check for gstatic.com : positive
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:54507 dst=142.250.201.131:443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: sending fake : C3 00 00 00 01 08 78 E7 98 46 BB F3 79 84 00 00 44 9E B2 E2 1B 4D 8B CC 2F C9 3E EF 81 49 95 4A ... : ......x..F..y...D....M../.>..I.J ...
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: reinjecting original packet. len=1278 len_payload=1250
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: DROPPING delayed packet #1
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: REPLAYING delayed packet #2 offset 1250
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: REPLAY IP4: 192.168.9.140 => 142.250.201.131 proto=udp ttl=62 sport=54507 dport=443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: UDP: len=1250 : C2 00 00 00 01 08 A5 55 03 5C C4 4B 92 EC 00 40 47 00 D6 B3 54 A0 86 E2 CD C2 DF 66 B8 D7 C4 02 ... : .......U.\[email protected].... ...
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: SENDING delayed packet #2 unmodified
Tue Feb 11 13:57:15 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: reassemble session finished
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137002 drop
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137003 len=107 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.201.131 proto=udp ttl=62 sport=54507 dport=443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: UDP: len=79 : DC 00 00 00 01 08 A5 55 03 5C C4 4B 92 EC 00 40 3E 83 2F 0D 20 D7 05 83 84 1C 10 97 DB EA 9A 39 ... : .......U.\.K...@>./. ..........9 ...
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: using cached desync profile 2
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137003 pass unmodified
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137004 len=592 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 142.250.201.131 proto=udp ttl=62 sport=54507 dport=443
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: UDP: len=564 : D0 00 00 00 01 08 A5 55 03 5C C4 4B 92 EC 00 42 23 7C 29 A3 4C D7 EB 9B 3D 8A FA 4B C7 2A C7 C3 ... : .......U.\.K...B#|).L...=..K.*.. ...
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: using cached desync profile 2
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137004 pass unmodified
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137005 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: IP4: 192.168.9.248 => 76.76.2.22 proto=tcp ttl=63 sport=65497 dport=443 flags=A seq=2647772786 ack_seq=2416056258
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:15 2025 user.debug nfqws[17427]: packet: id=137005 pass unmodified
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137006 len=60 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 172.217.18.138 proto=tcp ttl=62 sport=41802 dport=443 flags=S seq=3063944039 ack_seq=0
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: desync profile search for tcp target=172.217.18.138:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137006 pass unmodified
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137007 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 172.217.18.138 proto=tcp ttl=62 sport=41802 dport=443 flags=A seq=3063944040 ack_seq=3759416263
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137007 pass unmodified
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137008 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 172.217.18.138 proto=tcp ttl=62 sport=41802 dport=443 flags=AP seq=3063944040 ack_seq=3759416263
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 70 EE 7F 9B D3 48 90 F6 4C E3 F1 98 1B 90 E3 79 17 00 47 CC CA ... : ...........p.�..H..L......y..G.. ...
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: req retrans : seq interval 3063944040-3063944556
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostname: people-pa.googleapis.com
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: desync profile search for tcp target=172.217.18.138:443 l7proto=tls hostname='people-pa.googleapis.com'
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:41802 dst=172.217.18.138:443
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 0D B8 7C 2E 65 9B 06 FA 93 18 56 72 6F 46 9B B7 3D 74 C8 04 BF ... : ........�....|.e.....VroF..=t... ...
Tue Feb 11 13:57:16 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:16 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137008 drop
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137009 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 172.217.18.138 proto=tcp ttl=62 sport=41802 dport=443 flags=AP seq=3063944040 ack_seq=3759416263
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 70 EE 7F 9B D3 48 90 F6 4C E3 F1 98 1B 90 E3 79 17 00 47 CC CA ... : ...........p.�..H..L......y..G.. ...
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostname: people-pa.googleapis.com
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for people-pa.googleapis.com : negative
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: hostlist check for googleapis.com : positive
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:41802 dst=172.217.18.138:443
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 4C B8 B6 F2 6E D4 DF D0 0C 65 DD 1A 7A 88 49 D9 A6 1F 39 A6 28 ... : ........�..L...n....e..z.I...9.( ...
Tue Feb 11 13:57:16 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:16 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:16 2025 user.debug nfqws[17427]: packet: id=137009 drop
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137010 len=64 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63808 dport=443 flags=S seq=685943278 ack_seq=0
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.161.76.101:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137010 pass unmodified
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137011 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63808 dport=443 flags=A seq=685943279 ack_seq=749398694
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137011 pass unmodified
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137012 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63808 dport=443 flags=AP seq=685943279 ack_seq=749398694
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 32 B4 31 01 6C C2 56 AD 05 34 7A 53 11 5A C6 1D C6 AE B2 4A E7 ... : ...........2.1.l.V..4zS.Z.....J. ...
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: req retrans : seq interval 685943279-685943795
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: hostname: www.google.com
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.161.76.101:443 l7proto=tls hostname='www.google.com'
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for www.google.com : negative
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: hostlist check for google.com : negative
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: hostlist check for com : negative
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for www.google.com : negative
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: hostlist check for google.com : positive
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: dpi desync src=192.168.9.140:63808 dst=95.161.76.101:443
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: sending fake : 16 03 01 02 83 01 00 02 7F 03 03 C4 5A 15 AC F0 C0 D0 BF F3 C6 6B 49 1A 99 99 E6 A4 EF 42 5C 0D ... : ........�...Z........kI......B\. ...
Tue Feb 11 13:57:17 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:17 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: reinjecting original packet. len=569 len_payload=517
Tue Feb 11 13:57:17 2025 user.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137012 drop
Tue Feb 11 13:57:17 2025 daemon.err nfqws[17427]: rawsend: bind (ignoring): Address not available
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137013 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63808 dport=443 flags=A seq=685943796 ack_seq=749398694
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137013 pass unmodified
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137014 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63808 dport=443 flags=A seq=685943796 ack_seq=749398694
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137014 pass unmodified
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137015 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.161.76.101 proto=tcp ttl=62 sport=63808 dport=443 flags=A seq=685943796 ack_seq=749398694
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:17 2025 user.debug nfqws[17427]: packet: id=137015 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137016 len=64 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=S seq=1525048984 ack_seq=0
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile search for tcp target=149.112.112.112:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137016 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137017 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=AP seq=1525048985 ack_seq=3430047515
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 FF 23 47 7C B0 F2 CF 6A A7 FB EC 3D 21 C6 69 F7 88 93 F8 02 AD ... : ............#G|...j...=!.i...... ...
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: req retrans : seq interval 1525048985-1525049501
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostname: dns.quad9.net
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile search for tcp target=149.112.112.112:443 l7proto=tls hostname='dns.quad9.net'
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for dns.quad9.net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for quad9.net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for dns.quad9.net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for quad9.net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for dns.quad9.net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for quad9.net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for net : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: not applying tampering to this request
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137017 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137018 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=A seq=1525049502 ack_seq=3430050211
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137018 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137019 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=A seq=1525049502 ack_seq=3430051122
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137019 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137020 len=132 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=AP seq=1525049502 ack_seq=3430051122
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: TCP: len=80 : 14 03 03 00 01 01 17 03 03 00 45 4D EE 0A F5 E6 2E 94 C7 38 C6 CF 55 F8 0E 29 F7 BA BE A1 E9 31 ... : ..........EM.......8..U..).....1 ...
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: req retrans : tcp seq 1525049502 not within the req range 1525048985-1525049501. stop tracking.
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137020 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137021 len=349 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=AP seq=1525049582 ack_seq=3430051122
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: TCP: len=297 : 17 03 03 01 24 4E 2D DD AE 71 87 F1 D8 CF 10 C2 F6 F0 C3 7A 03 1D 0F 96 E5 E3 E9 CC 86 B5 4F 7B ... : ....$N-..q.........z..........O{ ...
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137021 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137022 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=A seq=1525049879 ack_seq=3430051664
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137022 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137023 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 149.112.112.112 proto=tcp ttl=62 sport=63110 dport=443 flags=A seq=1525049879 ack_seq=3430051912
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137023 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137024 len=64 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=S seq=3829705485 ack_seq=0
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.163.59.244:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137024 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137025 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=A seq=3829705486 ack_seq=2513073082
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137025 pass unmodified
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137026 len=569 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=AP seq=3829705486 ack_seq=2513073082
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: TCP: len=517 : 16 03 01 02 00 01 00 01 FC 03 03 E8 19 03 D3 DC EF 4D D7 FF 77 D9 BD 16 C7 56 47 CD F6 57 37 AD ... : .................M..w....VG..W7. ...
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: req retrans : seq interval 3829705486-3829706002
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostname: cloud.radar.imgsmail.ru
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile search for tcp target=95.163.59.244:443 l7proto=tls hostname='cloud.radar.imgsmail.ru'
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for cloud.radar.imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for radar.imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for cloud.radar.imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for radar.imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for cloud.radar.imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for radar.imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for imgsmail.ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: hostlist check for ru : negative
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: not applying tampering to this request
Tue Feb 11 13:57:18 2025 user.debug nfqws[17427]: packet: id=137026 pass unmodified
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137027 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=A seq=3829706003 ack_seq=2513074430
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137027 pass unmodified
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137028 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=A seq=3829706003 ack_seq=2513075778
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137028 pass unmodified
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137029 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=A seq=3829706003 ack_seq=2513077405
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137029 pass unmodified
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137030 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=A seq=3829706003 ack_seq=2513077405
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137030 pass unmodified
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137031 len=178 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 95.163.59.244 proto=tcp ttl=62 sport=63811 dport=443 flags=AP seq=3829706003 ack_seq=2513077405
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: TCP: len=126 : 16 03 03 00 46 10 00 00 42 41 04 8A 3E 4C 06 C3 8D 48 21 DD 03 E1 FA 9A 92 B9 28 42 B9 27 F9 14 ... : ....F...BA..>L...H!.......(B.'.. ...
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: req retrans : tcp seq 3829706003 not within the req range 3829705486-3829706002. stop tracking.
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:19 2025 user.debug nfqws[17427]: packet: id=137031 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137032 len=64 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=S seq=2547124852 ack_seq=0
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: desync profile search for tcp target=104.22.75.213:443 l7proto=unknown hostname=''
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137032 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137033 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=A seq=2547124853 ack_seq=3491025666
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137033 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137034 len=240 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=AP seq=2547124853 ack_seq=3491025666
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: TCP: len=188 : 16 03 01 00 B7 01 00 00 B3 03 03 67 AB 2D 10 40 DC D0 87 A1 00 6F 06 AE EE F2 B6 ED 33 AA 75 1E ... : [email protected]. ...
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet contains full TLS ClientHello
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: req retrans : seq interval 2547124853-2547125040
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostname: api.imem.app
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: discovered l7 protocol
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: discovered hostname
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: desync profile search for tcp target=104.22.75.213:443 l7proto=tls hostname='api.imem.app'
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: desync profile 3 matches
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: * hostlist check for profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: [/etc/nfqws/exclude.list] exclude hostlist check for api.imem.app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostlist check for imem.app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostlist check for app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: [/etc/nfqws/auto.list] include hostlist check for api.imem.app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostlist check for imem.app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostlist check for app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: [/etc/nfqws/user.list] include hostlist check for api.imem.app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostlist check for imem.app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: hostlist check for app : negative
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: not applying tampering to this request
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137034 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137035 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=A seq=2547125041 ack_seq=3491027014
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137035 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137036 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=A seq=2547125041 ack_seq=3491028693
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137036 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137037 len=178 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=AP seq=2547125041 ack_seq=3491028693
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: TCP: len=126 : 16 03 03 00 46 10 00 00 42 41 04 B0 F0 96 3C 62 85 74 42 27 CF B0 5A 4B 76 40 7E 0E 68 32 C5 08 ... : ....F...BA....<b.tB'..ZKv@~.h2.. ...
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: req retrans : tcp seq 2547125041 not within the req range 2547124853-2547125040. stop tracking.
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137037 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137038 len=52 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=A seq=2547125167 ack_seq=3491028813
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137038 pass unmodified
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137039 len=496 mark=00000000 ifin=(0) ifout=eth2(5)
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: IP4: 192.168.9.140 => 104.22.75.213 proto=tcp ttl=62 sport=63812 dport=443 flags=AP seq=2547125167 ack_seq=3491028813
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: TCP: len=444 : 17 03 03 01 B7 61 8C F7 74 A4 A4 39 2A 8F 12 D2 DE AB AC D4 A3 09 19 0B FF D5 B0 EA 90 F3 0E 68 ... : .....a..t..9*..................h ...
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: using cached desync profile 3
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: not applying tampering to unknown protocol
Tue Feb 11 13:57:20 2025 user.debug nfqws[17427]: packet: id=137039 pass unmodified

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@LimpingK @vemneyy