diff --git a/binaries/aarch64/nfqws b/binaries/aarch64/nfqws index c234d76..255a6cf 100755 Binary files a/binaries/aarch64/nfqws and b/binaries/aarch64/nfqws differ diff --git a/binaries/arm/nfqws b/binaries/arm/nfqws index 3b0bf2b..a5b6689 100755 Binary files a/binaries/arm/nfqws and b/binaries/arm/nfqws differ diff --git a/binaries/mips32r1-lsb/nfqws b/binaries/mips32r1-lsb/nfqws index 8bd83d2..23faad9 100755 Binary files a/binaries/mips32r1-lsb/nfqws and b/binaries/mips32r1-lsb/nfqws differ diff --git a/binaries/mips32r1-msb/nfqws b/binaries/mips32r1-msb/nfqws index 5a9360a..0034203 100755 Binary files a/binaries/mips32r1-msb/nfqws and b/binaries/mips32r1-msb/nfqws differ diff --git a/binaries/mips64r2-msb/nfqws b/binaries/mips64r2-msb/nfqws index 8ee143f..f1a5ccf 100755 Binary files a/binaries/mips64r2-msb/nfqws and b/binaries/mips64r2-msb/nfqws differ diff --git a/binaries/ppc/nfqws b/binaries/ppc/nfqws index 6e88a3c..e37512b 100755 Binary files a/binaries/ppc/nfqws and b/binaries/ppc/nfqws differ diff --git a/binaries/x86/nfqws b/binaries/x86/nfqws index 9320685..8069433 100755 Binary files a/binaries/x86/nfqws and b/binaries/x86/nfqws differ diff --git a/binaries/x86_64/nfqws b/binaries/x86_64/nfqws index 58a3252..36efcd7 100755 Binary files a/binaries/x86_64/nfqws and b/binaries/x86_64/nfqws differ diff --git a/docs/readme.eng.md b/docs/readme.eng.md index 51d7b17..dba3840 100644 --- a/docs/readme.eng.md +++ b/docs/readme.eng.md @@ -149,7 +149,7 @@ nfqws takes the following parameters: --dpi-desync-skip-nosni=0|1 ; 1(default)=do not apply desync to requests without hostname in the SNI --dpi-desync-split-pos=<1..1500> ; (for split* and disorder* only) split TCP packet at specified position --dpi-desync-badseq-increment= ; badseq fooling seq signed increment. default -10000 - --dpi-desync-badack-increment= ; badseq fooling ackseq signed increment. default -65000 + --dpi-desync-badack-increment= ; badseq fooling ackseq signed increment. default -66000 --dpi-desync-any-protocol=0|1 ; 0(default)=desync only http and tls 1=desync any nonempty data packet --dpi-desync-fake-http= ; file containing fake http request. replacement for built-in --dpi-desync-fake-tls= ; file containing fake TLS ClientHello (for https). replacement for built-in diff --git a/docs/readme.txt b/docs/readme.txt index 6bdd8d8..eaa1364 100644 --- a/docs/readme.txt +++ b/docs/readme.txt @@ -197,7 +197,7 @@ nfqws --dpi-desync-skip-nosni=0|1 ; 1(default)=не применять dpi desync для запросов без hostname в SNI, в частности для ESNI --dpi-desync-split-pos=<1..1500> ; (только для split*, disorder*) разбивать пакет на указанной позиции --dpi-desync-badseq-increment= ; инкремент sequence number для badseq. по умолчанию -10000 - --dpi-desync-badack-increment= ; инкремент ack sequence number для badseq. по умолчанию -65000 + --dpi-desync-badack-increment= ; инкремент ack sequence number для badseq. по умолчанию -66000 --dpi-desync-any-protocol=0|1 ; 0(default)=работать только по http request и tls clienthello 1=по всем непустым пакетам данных --dpi-desync-fake-http= ; файл, содержащий фейковый http запрос для dpi-desync=fake, на замену стандартному w3.org --dpi-desync-fake-tls= ; файл, содержащий фейковый tls clienthello для dpi-desync=fake, на замену стандартному w3.org diff --git a/nfq/params.h b/nfq/params.h index 83298e3..f957478 100644 --- a/nfq/params.h +++ b/nfq/params.h @@ -18,7 +18,7 @@ #define Q_MAXLEN 1024 // in packets #define BADSEQ_INCREMENT_DEFAULT -10000 -#define BADSEQ_ACK_INCREMENT_DEFAULT -65000 +#define BADSEQ_ACK_INCREMENT_DEFAULT -66000 struct params_s {