EFForg / EFForg/rayhunter

shove unparsed 3g/2g traffic into pcap

Open
#1,013 0 comments 0 reactions 2 assignees Claimed by @wgreenberg View on GitHub
enhancement parsing
Dominant language
Rust
Stars
5.8k
Forks
490
Avg merge
3d 10h
Merged PRs (30d)
23

Description

### Prerequisites

- [x] I have read [CONTRIBUTING.md](https://github.com/EFForg/rayhunter/blob/main/CONTRIBUTING.md)

### What problem does this feature solve or what does it enhance?

Right now we ignore 3g/2g traffic and we silently drop it (or send an error about not being able to parse it) but we don't put it into the pcap, we should fix this

### Proposed Solution

We should wrap 3g/2g traffic in a gsmtap header and shove it in the PCAP so it can be manually analyzed! We should also remove the extraneous error messages about not parsing from rayhunter check, as this is terrible UI. Between this and #1012 we effectively can't review international pcaps.

### Alternatives Considered

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.