Dissection of QUIC protocol

Urvek

I uploaded a QUIC packet pcap to trishul and tried to explore it. Trishul identifies all packets as HTTPS packets and not QUIC packets. I also tried explore flows option by giving tag=QUIC but the system could not able to identify the QUIC packets.

QUIC packets have version Q046. What could be the reason not to identify the QUIC? Kindly guide.

admin

Hi,

Were you able to install the QUIC script https://github.com/trisulnsm/bitmaul/tree/master/examples/quic ?

It is odd that it is identified as HTTPS. Is your QUIC traffic over TCP or UDP?

Thanks
VIvek

Urvek

Hi,
Thanks. Your suggestion about installing QUIC scripts resolves the issue.