LinkQUIC is a novel framework capable of distinguishing QUIC from normal UDP streams in kernel space without kernel modification, decrypting QUIC payloads, or prior knowledge of QUIC protocol implementations in user space. This framework can identify QUIC in both endpoints and middleboxes.
privacy kernel network udp protocol network-monitoring quic ebpf heuristics network-analysis kernel-space network-traffic identify distinguish linkquic
-
Updated
Nov 24, 2025 - C