https://github.com/fiddyschmitt/udp_dedupe
Deduplicate UDP datagrams
https://github.com/fiddyschmitt/udp_dedupe
deduplication duplicates udp windivert
Last synced: 3 months ago
JSON representation
Deduplicate UDP datagrams
- Host: GitHub
- URL: https://github.com/fiddyschmitt/udp_dedupe
- Owner: fiddyschmitt
- Created: 2024-01-17T13:35:31.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2024-02-11T06:59:23.000Z (over 2 years ago)
- Last Synced: 2024-02-11T08:31:07.516Z (over 2 years ago)
- Topics: deduplication, duplicates, udp, windivert
- Language: C#
- Homepage:
- Size: 36.1 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# UDP Dedupe
This program inspects network packets and drops any which are duplicates.
# Download
Download from the [releases](https://github.com/fiddyschmitt/udp_dedupe/releases) section.
# Usage
Edit `settings.json`.
The `Filter` specifies what packets to inspect.
### Example 1 - Inspect all UDP packets
```
{
"Checks": [
{
"Filter": "udp",
"TimeWindowInMilliseconds": 5000
}
]
}
```
### Example 2 - Inspect incoming IPV4 UDP packets with destination port 15000
```
{
"Checks": [
{
"Filter": "inbound && !ipv6 && udp && udp.DstPort == 15000",
"TimeWindowInMilliseconds": 5000
}
]
}
```
More info about the WinDivert Filter Language [here](https://www.reqrypt.org/windivert-doc.html#filter_language).
### Run the program
`udp_dedupe.exe`
# How does it work?
The program uses the [WinDivert](https://github.com/basil00/Divert) library to capture the packets specified in the filter. If it sees the same payload in a certain window of time, it will drop the packet.