0000 16 03 01 02 00 01 00 01 fc 03 03 d8 b6 4d 7f 5e .............M.^ 0010 2a 4f 9c b1 7e 32 a5 c8 19 4b f3 6d 88 c7 14 e5 *O..~2...K.m.... 0020 21 9a 03 b6 7c 4d 5f 19 8e 24 6f 90 1a 20 88 36 !...|M_..$o.. .6 0030 df 91 7c 5b 2e 8a 4d 9c b3 7f 18 22 4b a5 c1 e9 ..|[..M...."K... 0040 cd ee 91 1f 64 2a 8c 03 20 1a fb 80 75 d8 4f 1c ....d*.. ...u.O. 0050 00 22 13 01 13 02 13 03 c0 2b c0 2c c0 30 cc a8 .".......+.,.0.. 0060 cc a9 c0 13 c0 14 00 9c 00 9d 00 2f 00 35 00 0a .........../.5.. 0070 01 00 00 ff 01 00 01 00 00 33 04 7f 03 1d 00 20 .........3..... 0080 12 34 01 20 00 01 00 00 00 00 00 00 03 77 77 77 .4. .........www 0090 06 67 6f 6f 67 6c 65 03 63 6f 6d 00 00 01 00 01 .google.com..... 00a0 ab cd 81 80 00 01 00 01 00 00 00 00 03 77 77 77 .............www 00b0 45 00 00 3c 1c 46 40 00 40 06 b1 e6 c0 a8 01 64 E..<.F@[email protected] 00c0 ac d9 1f 78 00 50 d0 c5 4f 21 0c f5 a3 e8 9f 14 ...x.P..O!...... 00d0 00 00 0c 04 00 00 00 00 00 00 03 00 00 00 64 00 ..............d. 00e0 00 00 1c 01 25 00 00 00 01 82 84 87 5c 8e 9b ca ....%.......\... 00f0 4d a8 14 c9 00 04 f3 e1 00 00 27 ab 80 ed 90 33 M.........'....3 0100 12 fe 3c 4a c1 8f 27 ab bd a4 61 5e cd 90 28 11 ..<J..'...a^..(. 0110 01 00 00 00 0c 4a fe 92 3b a1 7d 04 e6 88 f5 31 .....J..;.}....1 0120 55 9c 23 d8 60 1e 4a b7 cf 28 91 0d 3e 7c f4 2b U.#.`.J..(..>|.+ 0130 8b f7 c2 19 4a 6e d3 81 77 b9 22 9c f0 e4 56 23 ....Jn..w."...V# 0140 1f 95 c4 0d 7e 88 32 a6 bd 11 4f 60 da 38 e9 c7 ....~.2...O`.8.. 0150 c0 00 00 00 01 08 fe d6 87 1d 9a 4c 28 ef 00 00 ...........L(... 0160 00 41 00 00 00 02 03 03 00 00 b1 c4 9d 25 38 a7 .A...........%8. 0170 16 03 03 00 7a 02 00 00 76 03 03 92 a4 51 e8 7c ....z...v....Q.| 0180 5e 18 33 a0 4d 9b 7c 22 88 fb 04 e6 1a 35 c9 71 ^.3.M.|".....5.q 0000 16 03 01 02 00 01 00 01 fc 03 03 d8 b6 4d 7f 5e .............M.^ 0010 2a 4f 9c b1 7e 32 a5 c8 19 4b f3 6d 88 c7 14 e5 *O..~2...K.m.... 0020 21 9a 03 b6 7c 4d 5f 19 8e 24 6f 90 1a 20 88 36 !...|M_..$o.. .6 0030 df 91 7c 5b 2e 8a 4d 9c b3 7f 18 22 4b a5 c1 e9 ..|[..M...."K... 0040 cd ee 91 1f 64 2a 8c 03 20 1a fb 80 75 d8 4f 1c ....d*.. ...u.O. 0050 00 22 13 01 13 02 13 03 c0 2b c0 2c c0 30 cc a8 .".......+.,.0.. 0060 cc a9 c0 13 c0 14 00 9c 00 9d 00 2f 00 35 00 0a .........../.5.. 0070 01 00 00 ff 01 00 01 00 00 33 04 7f 03 1d 00 20 .........3..... 0080 12 34 01 20 00 01 00 00 00 00 00 00 03 77 77 77 .4. .........www 0090 06 67 6f 6f 67 6c 65 03 63 6f 6d 00 00 01 00 01 .google.com..... 00a0 ab cd 81 80 00 01 00 01 00 00 00 00 03 77 77 77 .............www 00b0 45 00 00 3c 1c 46 40 00 40 06 b1 e6 c0 a8 01 64 E..<.F@[email protected] 00c0 ac d9 1f 78 00 50 d0 c5 4f 21 0c f5 a3 e8 9f 14 ...x.P..O!...... 00d0 00 00 0c 04 00 00 00 00 00 00 03 00 00 00 64 00 ..............d. 00e0 00 00 1c 01 25 00 00 00 01 82 84 87 5c 8e 9b ca ....%.......\... 00f0 4d a8 14 c9 00 04 f3 e1 00 00 27 ab 80 ed 90 33 M.........'....3 0100 12 fe 3c 4a c1 8f 27 ab bd a4 61 5e cd 90 28 11 ..<J..'...a^..(. 0110 01 00 00 00 0c 4a fe 92 3b a1 7d 04 e6 88 f5 31 .....J..;.}....1 0120 55 9c 23 d8 60 1e 4a b7 cf 28 91 0d 3e 7c f4 2b U.#.`.J..(..>|.+ 0130 8b f7 c2 19 4a 6e d3 81 77 b9 22 9c f0 e4 56 23 ....Jn..w."...V# 0140 1f 95 c4 0d 7e 88 32 a6 bd 11 4f 60 da 38 e9 c7 ....~.2...O`.8.. 0150 c0 00 00 00 01 08 fe d6 87 1d 9a 4c 28 ef 00 00 ...........L(... 0160 00 41 00 00 00 02 03 03 00 00 b1 c4 9d 25 38 a7 .A...........%8. 0170 16 03 03 00 7a 02 00 00 76 03 03 92 a4 51 e8 7c ....z...v....Q.| 0180 5e 18 33 a0 4d 9b 7c 22 88 fb 04 e6 1a 35 c9 71 ^.3.M.|".....5.q ipv4 header — rfc 791 0 8 16 24 32 ver ihl type/svc total length identification flg fragment offset ttl protocol header checksum source ip address destination ip address
gfw active-probing — ensafi 2015 / alice 2020 client gfw proxy tls clienthello serverhello + cert encrypted application data gfw fingerprints flow probe clienthello serverhello probe (variant) → block proxy ip dns header — rfc 1035 0 4 8 12 16 id opcode z rcode qdcount ancount nscount / arcount