feature request

[am0o0]

Thanks for the awesome updx tool
Can you please tell me How Can I add a probe by myself, please?
I want to add HTTP3/QUIC probes that I think are based on the UDP.

[nullt3r]

Good idea, I will look into it. Documentation is still work in progress, but there is this little section. I am thinking about adding YML templates.

[am0o0]

Thanks, I want to know How can I find out whats the packet data (hex-encoded) of the specific protocol is? should I log UDP packets or read their RFC ?

[nullt3r]

The poor's man solution is to capture the data via netcat, e. g. nc -ul PORT > /tmp/out.pkt and then convert the packet to hex data cat /tmp/out.pkt | hexdump -e '512/1 "%02X"'. Just make sure to share it so we can add it to the next release.

[am0o0]

I think http3 is based on TLS so I couldn't reuse the same packet and got error in server logs too:

on first run

on second run(failed)

[nullt3r]

Yep, I realised there is TLS 1.3 by design in QUICK, so thats expected.

[nullt3r]

This is why, e. g. Wireguard and such is not included in probes. I will need to make actual module for TLS. If you have any idea, let me know.