Ivan Nardi 0ddbda1f82 Add an heuristic to detect encrypted/obfuscated OpenVPN flows (#2547) ... Based on the paper: "OpenVPN is Open to VPN Fingerprinting" See: https://www.usenix.org/conference/usenixsecurity22/presentation/xue-diwen Basic idea: * the distribution of the first byte of the messages (i.e. the distribution of the op-codes) is quite unique * this fingerprint might be still detectable even if the OpenVPN packets are somehow fully encrypted/obfuscated The heuristic is disabled by default.		2024-09-16 18:38:26 +02:00
..
openvpn_obfuscated.pcapng	Add an heuristic to detect encrypted/obfuscated OpenVPN flows (#2547)	2024-09-16 18:38:26 +02:00