# M22 Demo 环境wireguard和openvpn协议未识别

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-1209 | 2024-03-31T19:22:21.000+0800 | 雷军 | 已关闭 |


---

M22酒店Demo环境测试VPN阻断功能，出现openvpn及wireguard协议未识别情况。

pcap包及对应session record导出结果见附件**liuyang** commented on *2024-03-31T21:12:08.630+0800*:

 !screenshot-1.png|thumbnail! 
内置的APPID在demo环境导入后，变成自定义的ID段了
wireguard在京版是3700，demo环境变成15022了
 !screenshot-2.png|thumbnail! 
 !screenshot-3.png|thumbnail! 



---

**yangwei** commented on *2024-03-31T21:17:56.174+0800*:

附件中提供的两个pcap包，使用glimpse_detector本地读包都能正确识别对应的APP，分析现场的日志，存在以下问题：

问题1：第三方DPI未获得授权

问题2：CM下发的APPID中，wireguard与内置定义（ID=3700）不符，定义变为15022

 

wireguard会话未在session_record中识别原因
 * 测试时qdpi未工作
 * 内置wireguard APPID值变更，导致glimpse_detector即使识别出wireguard，firewall也无法转换为正确的APPID

OPENVPN会话未在session_record中识别原因
 * glimpse_detector可以正常识别，推测原因为APPID映射
 * 待进一步排查

 

 

 



---

**zhangwei** commented on *2024-04-01T09:30:39.282+0800*:

# M22 Demo环境删除或者重命名用户自定义的wireguard（id=15022)
 # 然后安装Appsketch DB 24.02（sha1：{color:#262626}515501dcca00c3b59696347f9994a150e7a97d80{color}）
 # 修改VPN Unlimited的特征wireguard的条件common.app_id，改为引用id为3700的wireguard，作为特征条件



---

**leijun** commented on *2024-04-03T13:38:59.579+0800*:

M22 Demo 环境
 * wireguard（id=15022) 已删除
 * Appsketch DB 24.02 已安装
 * VPN Unlimited的特征条件已引用内置的wireguard



---

**zhangwei** commented on *2024-04-22T13:29:45.458+0800*:

新的生产环境部署后，需优先进行Appsketch DB升级，然后再继续导入自定义的App及其Signature.



---



# Attachments

Attachment: openvpn_sessionid_290547104835077634.pcap

[openvpn_sessionid_290547104835077634.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/54407/openvpn_sessionid_290547104835077634.pcap)



Attachment: screenshot-1.png

![screenshot-1.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/54409/screenshot-1.png)



Attachment: screenshot-2.png

![screenshot-2.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/54410/screenshot-2.png)



Attachment: screenshot-3.png

![screenshot-3.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/54411/screenshot-3.png)



Attachment: session_record.xlsx

[session_record.xlsx](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/54408/session_record.xlsx)



Attachment: wireguard_sessionid_290520716472254730.pcap

[wireguard_sessionid_290520716472254730.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/54406/wireguard_sessionid_290520716472254730.pcap)