AmneziaWG?

[efaden]

Anyone happen to know a regex pattern to use for AmneziaWG? Thanks

[molivier-io]

According to Amnesia documentation:

In AmneziaWG, the headers of all packets are modified: the handshake packet (Initiator to Responder), the response packet (Responder to Initiator), the data packet, and a special "Under Load" packet — these are randomized values, but they can be changed in the settings. Because each user has different headers, it's virtually impossible to devise a universal rule based on headers alone to detect and block the protocol.

It looks very difficult to identify AmneziaWG unless the protocol is weakened by settings. However that's the wanted purpose of this implementation.

The only way I see is to define every others protocols and then catch the rest with anyprot probe toward AmneziaWG endpoint.