readme: UDP desync methods update

This commit is contained in:
bol-van
2022-02-06 12:47:07 +03:00
parent ed1c6143ee
commit 3228ee4a78
2 changed files with 4 additions and 2 deletions

View File

@@ -405,7 +405,8 @@ Set conntrack timeouts appropriately.
### UDP support
UDP attacks are limited. Its not possible to fragment UDP on transport level, only on network (ip) level.
Only desync modes `fake` and `ipfrag2` are applicable. Both can be used in combo.
Only desync modes `fake`,`hopbyhop`,`destopt`,`ipfrag1` and `ipfrag2` are applicable.
`fake`,`hopbyhop`,`destopt` can be used in combo with `ipfrag2`.
No protocol recognition is implemented yet so only `--dpi-desync-any-protocol` will work.
Conntrack supports udp. `--dpi-desync-cutoff` will work. UDP conntrack timeout can be set in the 4th
parameter of `--ctrack-timeouts`.