Re: DNS over https
George Jones <[email protected]> Thu, 12 Sep 2019 17:06:31 -0400
| Newsgroups | gmane.network.argus |
|---|---|
| Message-ID | <CALv3B7b6iDxQfawFgm6kdBYKU7FXOV=4jKAn4N6MrP5JRaFEWg@mail.gmail.com> |
--000000000000b2ee2605926183e3 Content-Type: text/plain; charset="UTF-8" Easiest way would be to look for traffic to cloudflare server (1.1.1.1) or other DoH servers. https://developers.cloudflare.com/1.1.1.1/dns-over-https/cloudflared-proxy/ Configure Firefox to use it and break out Wireshark (or Argus) to get more clues. ---george jones On Thu, Sep 12, 2019, 4:58 PM Monah Baki <[email protected]> wrote: > Hi all, > > With all the hype with DNS over HTTPS, is there a way for argus to detect > this? I don't mind if its encrypted just wanted to see if it will detect > some form of communication, or how can I tell if there is any machine using > dns over https. > > > Thanks > Monah > --000000000000b2ee2605926183e3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"auto">Easiest way would be to look for traffic to cloudflare se= rver (1.1.1.1) or other DoH servers.<div dir=3D"auto"><div dir=3D"auto"><br= ></div><div dir=3D"auto"><a href=3D"https://developers.cloudflare.com/1.1.1= .1/dns-over-https/cloudflared-proxy/">https://developers.cloudflare.com/1.1= .1.1/dns-over-https/cloudflared-proxy/</a><br></div><div dir=3D"auto"><br><= /div><div dir=3D"auto">Configure Firefox to use it and break out Wireshark = (or Argus) to get more clues.</div><div dir=3D"auto"><br></div><div dir=3D"= auto">---george jones</div></div></div><br><div class=3D"gmail_quote"><div = dir=3D"ltr" class=3D"gmail_attr">On Thu, Sep 12, 2019, 4:58 PM Monah Baki &= lt;<a href=3D"mailto:[email protected]" target=3D"_blank" rel=3D"noreferr= er">[email protected]</a>> wrote:<br></div><blockquote class=3D"gmail_= quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1= ex"><div dir=3D"ltr">Hi all,<br><div><br></div><div>With all the hype with = DNS over HTTPS, is there a way for argus to detect this? I don't mind i= f its encrypted just wanted to see if it will detect some form of communica= tion, or how can I tell if there is any machine=C2=A0using dns over https.<= /div><div><br></div><div><br></div><div>Thanks</div><div>Monah</div></div> </blockquote></div> --000000000000b2ee2605926183e3--