readme: UDP desync modes notes

This commit is contained in:
bol-van
2022-01-29 17:56:12 +03:00
parent 438df5e5ac
commit 2c1871cc44
2 changed files with 4 additions and 2 deletions

View File

@@ -389,7 +389,7 @@ Set conntrack timeouts appropriately.
### UDP support
UDP attacks are limited. Its not possible to fragment UDP on transport level, only on network (ip) level.
IP fragmentation is not implemented now.
Only desync modes `fake` and `ipfrag2` are applicable. Both can be used in combo.
No protocol recognition is implemented yet so only `--dpi-desync-any-protocol` will work.
Conntrack supports udp. `--dpi-desync-cutoff` will work. UDP conntrack timeout can be set in the 4th
parameter of `--ctrack-timeouts`.