38 lines
989 B
Markdown
38 lines
989 B
Markdown
|
# 【新疆现场】目前QQ通过HOST、SNI等无法进行阻断，但配置payload数量太多，需要系统增加识别OICQ协议的功能
|
|||
|
|
|
|||
|
|
| ID | Creation Date | Assignee | Status |
|
|||
|
|
|----|----------------|----------|--------|
|
|||
|
|
| OMPUB-556 | 2022-07-13T19:58:24.000+0800 | 杨威 | 完成 |
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
【新疆现场】目前QQ通过HOST、SNI等无法进行阻断，但配置payload数量太多，需要系统增加识别OICQ协议的功能**zhengchao** commented on *2022-09-17T22:21:38.246+0800*:
|
|||
|
|
|
|||
|
|
[~yangwei] 处置方案？
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**yangwei** commented on *2022-09-17T22:43:36.015+0800*:
|
|||
|
|
|
|||
|
|
已在app_proto_identify L7协议识别插件中，提取lpi库识别wechat和oicq协议的结果，输出为App识别结果，更新版本见：
|
|||
|
|
|
|||
|
|
[https://git.mesalab.cn/appsketch/app_proto_identify/-/tags/v2.1.3]
|
|||
|
|
|
|||
|
|
已于22.08版本发布
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
涉及QQ与OICQ协议相关的补充特征，可以选择父应用为QQ，或者直接在QQ下补充用户自定义特征
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Attachments
|
|||
|
|
|