gargoyle-ispy 2018-February-22 22:31

Want to share your OpenWrt / Gargoyle knowledge? Implemented a new feature? Let us know here.

Moderator: Moderators

Lantis
Moderator
Posts: 6735
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: gargoyle-ispy 2018-February-22 22:31

Post by Lantis »

threehappypenguins wrote:I'm completely new to Gargoyle. I am coming from using Tomato. Somebody linked this page, saying that the beta has https monitoring. Is this true? I thought that https monitoring wasn't really possible.

If this version does indeed have https monitoring, what about the stable 1.10.0 versions from the download page? I already have one installed on my TP-Link Archer C7 v2 and I don't see any https monitoring. Just the same web monitor feature that logs http only. Am I missing something? Or is it only the 1.10.x beta that has it?
It is only included in the latest 1.10.x betas, can’t recall exactly when it came in. It will be included moving forward into 1.11.0 and further (until it breaks).

It isn’t possible to read HTTPS packet contents. But what it is possible to do is infer what the contents are based on a protocol called SNI (Server Name Indication). This is what Gargoyle does.
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

fifonik
Posts: 124
Joined: Fri Dec 02, 2016 3:52 am
Location: Brisbane, AU

Re: gargoyle-ispy 2018-February-22 22:31

Post by fifonik »

With Encrypted SNI rolling out it will stop to work in the nearest future I think.

Post Reply