0000
16 03 01 02 00 01 00 01 fc 03 03 d8 b6 4d 7f 5e
.............M.^
0010
2a 4f 9c b1 7e 32 a5 c8 19 4b f3 6d 88 c7 14 e5
*O..~2...K.m....
0020
21 9a 03 b6 7c 4d 5f 19 8e 24 6f 90 1a 20 88 36
!...|M_..$o.. .6
0030
df 91 7c 5b 2e 8a 4d 9c b3 7f 18 22 4b a5 c1 e9
..|[..M...."K...
0040
cd ee 91 1f 64 2a 8c 03 20 1a fb 80 75 d8 4f 1c
....d*.. ...u.O.
0050
00 22 13 01 13 02 13 03 c0 2b c0 2c c0 30 cc a8
.".......+.,.0..
0060
cc a9 c0 13 c0 14 00 9c 00 9d 00 2f 00 35 00 0a
.........../.5..
0070
01 00 00 ff 01 00 01 00 00 33 04 7f 03 1d 00 20
.........3.....
0080
12 34 01 20 00 01 00 00 00 00 00 00 03 77 77 77
.4. .........www
0090
06 67 6f 6f 67 6c 65 03 63 6f 6d 00 00 01 00 01
.google.com.....
00a0
ab cd 81 80 00 01 00 01 00 00 00 00 03 77 77 77
.............www
00b0
45 00 00 3c 1c 46 40 00 40 06 b1 e6 c0 a8 01 64
E..<.F@
[email protected]
00c0
ac d9 1f 78 00 50 d0 c5 4f 21 0c f5 a3 e8 9f 14
...x.P..O!......
00d0
00 00 0c 04 00 00 00 00 00 00 03 00 00 00 64 00
..............d.
00e0
00 00 1c 01 25 00 00 00 01 82 84 87 5c 8e 9b ca
....%.......\...
00f0
4d a8 14 c9 00 04 f3 e1 00 00 27 ab 80 ed 90 33
M.........'....3
0100
12 fe 3c 4a c1 8f 27 ab bd a4 61 5e cd 90 28 11
..<J..'...a^..(.
0110
01 00 00 00 0c 4a fe 92 3b a1 7d 04 e6 88 f5 31
.....J..;.}....1
0120
55 9c 23 d8 60 1e 4a b7 cf 28 91 0d 3e 7c f4 2b
U.#.`.J..(..>|.+
0130
8b f7 c2 19 4a 6e d3 81 77 b9 22 9c f0 e4 56 23
....Jn..w."...V#
0140
1f 95 c4 0d 7e 88 32 a6 bd 11 4f 60 da 38 e9 c7
....~.2...O`.8..
0150
c0 00 00 00 01 08 fe d6 87 1d 9a 4c 28 ef 00 00
...........L(...
0160
00 41 00 00 00 02 03 03 00 00 b1 c4 9d 25 38 a7
.A...........%8.
0170
16 03 03 00 7a 02 00 00 76 03 03 92 a4 51 e8 7c
....z...v....Q.|
0180
5e 18 33 a0 4d 9b 7c 22 88 fb 04 e6 1a 35 c9 71
^.3.M.|".....5.q
0000
16 03 01 02 00 01 00 01 fc 03 03 d8 b6 4d 7f 5e
.............M.^
0010
2a 4f 9c b1 7e 32 a5 c8 19 4b f3 6d 88 c7 14 e5
*O..~2...K.m....
0020
21 9a 03 b6 7c 4d 5f 19 8e 24 6f 90 1a 20 88 36
!...|M_..$o.. .6
0030
df 91 7c 5b 2e 8a 4d 9c b3 7f 18 22 4b a5 c1 e9
..|[..M...."K...
0040
cd ee 91 1f 64 2a 8c 03 20 1a fb 80 75 d8 4f 1c
....d*.. ...u.O.
0050
00 22 13 01 13 02 13 03 c0 2b c0 2c c0 30 cc a8
.".......+.,.0..
0060
cc a9 c0 13 c0 14 00 9c 00 9d 00 2f 00 35 00 0a
.........../.5..
0070
01 00 00 ff 01 00 01 00 00 33 04 7f 03 1d 00 20
.........3.....
0080
12 34 01 20 00 01 00 00 00 00 00 00 03 77 77 77
.4. .........www
0090
06 67 6f 6f 67 6c 65 03 63 6f 6d 00 00 01 00 01
.google.com.....
00a0
ab cd 81 80 00 01 00 01 00 00 00 00 03 77 77 77
.............www
00b0
45 00 00 3c 1c 46 40 00 40 06 b1 e6 c0 a8 01 64
E..<.F@
[email protected]
00c0
ac d9 1f 78 00 50 d0 c5 4f 21 0c f5 a3 e8 9f 14
...x.P..O!......
00d0
00 00 0c 04 00 00 00 00 00 00 03 00 00 00 64 00
..............d.
00e0
00 00 1c 01 25 00 00 00 01 82 84 87 5c 8e 9b ca
....%.......\...
00f0
4d a8 14 c9 00 04 f3 e1 00 00 27 ab 80 ed 90 33
M.........'....3
0100
12 fe 3c 4a c1 8f 27 ab bd a4 61 5e cd 90 28 11
..<J..'...a^..(.
0110
01 00 00 00 0c 4a fe 92 3b a1 7d 04 e6 88 f5 31
.....J..;.}....1
0120
55 9c 23 d8 60 1e 4a b7 cf 28 91 0d 3e 7c f4 2b
U.#.`.J..(..>|.+
0130
8b f7 c2 19 4a 6e d3 81 77 b9 22 9c f0 e4 56 23
....Jn..w."...V#
0140
1f 95 c4 0d 7e 88 32 a6 bd 11 4f 60 da 38 e9 c7
....~.2...O`.8..
0150
c0 00 00 00 01 08 fe d6 87 1d 9a 4c 28 ef 00 00
...........L(...
0160
00 41 00 00 00 02 03 03 00 00 b1 c4 9d 25 38 a7
.A...........%8.
0170
16 03 03 00 7a 02 00 00 76 03 03 92 a4 51 e8 7c
....z...v....Q.|
0180
5e 18 33 a0 4d 9b 7c 22 88 fb 04 e6 1a 35 c9 71
^.3.M.|".....5.q
ipv4 header — rfc 791
0
8
16
24
32
ver
ihl
type/svc
total length
identification
flg
fragment offset
ttl
protocol
header checksum
source ip address
destination ip address
gfw active-probing — ensafi 2015 / alice 2020
client
gfw
proxy
tls clienthello
serverhello + cert
encrypted application data
gfw fingerprints flow
probe clienthello
serverhello
probe (variant)
→ block proxy ip
dns header — rfc 1035
0
4
8
12
16
id
opcode
z
rcode
qdcount
ancount
nscount / arcount
circumvention
·
corpus
/
ask
papers
findings
censors
techniques
defenses
taxonomy
use
contribute
github →
CONTROLLED VOCABULARY · TECHNIQUES
By techniques
Sorted by paper count.
dpi
Deep Packet Inspection
261 papers
ip-blocking
IP-list blocking
85 papers
dns-poisoning
DNS injection / poisoning
69 papers
measurement-platform
Censorship measurement platform
62 papers
traffic-shape
Traffic-shape / statistical fingerprinting
50 papers
keyword-filtering
Keyword filtering
44 papers
active-probing
Active probing
30 papers
ml-classifier
ML / statistical classifier
29 papers
sni-blocking
SNI-based blocking
28 papers
tls-fingerprint
TLS ClientHello fingerprinting
22 papers
rst-injection
TCP RST injection
18 papers
asn-blackholing
ASN / prefix blackholing
13 papers
flow-correlation
Flow-correlation traffic analysis
12 papers
throttling
Throttling / bandwidth shaping
11 papers
esni-eh-blocking
Encrypted ClientHello / ESNI blocking
10 papers
fully-encrypted-detect
Fully-encrypted protocol detection
10 papers
middlebox-interference
Middlebox / TCP normalization
10 papers
packet-injection
Packet injection (general)
10 papers
website-fingerprint
Website fingerprinting
9 papers
http3-quic-block
QUIC / HTTP/3 blocking
8 papers
bgp-hijack
BGP / route manipulation
6 papers
port-blocking
Port-based blocking
5 papers
random-payload-detect
Random / high-entropy payload detection
4 papers