cablelabs / transparent-security

Transparent Security is a solution for identify the source devices of a DDoS attack and mitigates the attack in the customer premises or the access network. This solution leverages a P4 based programmable data plane for add in-band network telemetry (INT) for device identification and in-band mitigation.
https://www.cablelabs.com/vaccinate-your-network-to-prevent-the-spread-of-ddos-attacks
Apache License 2.0
32 stars 4 forks source link

Lua plugin does display the proper INT UDP header for TRPTs generated from a TCP packet #393

Closed spisarski closed 3 years ago

spisarski commented 3 years ago

Please ensure that a UDP packet has been parsed after the INT Ethernet Header/IP headers. the IP header contains the next proto of TCP which is probably the root cause of the problem. As the IPv6 header will mostly be reused, ensure that the original values have been returned onto the regular packet after INT has been stripped off.