[prev in list] [next in list] [prev in thread] [next in thread]
List: l7-filter-developers
Subject: Re: [l7-filter-developers] Categorisation of patterns
From: "Weisskopf Beat" <weisb () bfh ! ch>
Date: 2005-11-26 12:26:06
Message-ID: 4388545E.9010004 () bfh ! ch
[Download RAW message or body]
Hi Matthew
Ok so i have gone through the patterns and changed them. For protocols
like dhcp, dns and snmp I have named the category "networking". I
thought this fits best.
beat
Matthew Strait schrieb:
>> I am currently doing a traffic shaper application and I would like to
>> present the users of the application an easy interface.
>
> [...]
>
>> I am currently doing some regex searches in .pat files, for keywords
>> like P2P or voice but this doesn't always work. Another thing I
>> thought about was to use different directories, but having a category
>> would be the simplest way.
>
>
> There are two ways to implement what you want. The first is for your
> application to maintain its own list of which patterns go in which
> groups. The second is for the patterns to identify themselves as being
> in groups and for your application to read that information. I had been
> thinking that it would be done the first way, but the second has merit.
>
> I propose the following format: Keep the first two lines of the pattern
> files as thery are, and make the third line like this:
>
> # Protocol groups: [p2p|voip|streaming_video|internet_standard|...]*
>
> where there can be any number of groups listed and we try to be as
> descriptive as possible. Examples:
>
> # AIM - AOL instant messenger (OSCAR and TOC)
> # Pattern quality: good notsofast
> # Protocol groups: proprietary chat
>
> # SSH - Secure SHell
> # Pattern quality: great veryfast
> # Protocol groups: internet_draft secure remote_access
>
> # Gopher - A precursor to HTTP - RFC 1436
> # Pattern quality: good notsofast undermatch
> # Protocol groups: obsolete document_retrieval
>
> You have volunteered to take on the task of categorization, so how about
> you do as much as you can and send me a diff.
>
> -matthew
["l7-protocols-2005-11-05.patch" (text/plain)]
Index: extra/audiogalaxy.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/audiogalaxy.pat,v
retrieving revision 1.1
diff -u -r1.1 audiogalaxy.pat
--- extra/audiogalaxy.pat 2005/11/15 07:49:08 1.1
+++ extra/audiogalaxy.pat 2005/11/26 12:12:02
@@ -1,5 +1,6 @@
# Audiogalaxy - (defunct) Peer to Peer filesharing
# Pattern quality: ok veryfast
+# Protocol groups: p2p
#
# http://www.movspclr.co.uk/info/agprotocol.html
#
Index: extra/http-itunes.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/http-itunes.pat,v
retrieving revision 1.1
diff -u -r1.1 http-itunes.pat
--- extra/http-itunes.pat 2005/11/15 07:49:08 1.1
+++ extra/http-itunes.pat 2005/11/26 12:12:02
@@ -1,5 +1,7 @@
# HTTP - iTunes (Apple's music program)
# Pattern-quality: good fast
+# Protocol groups: streaming_audio
+#
# Port 80
# iTunes program basically uses the HTTP protocol for its initial
# communication.
Index: extra/httpaudio.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/httpaudio.pat,v
retrieving revision 1.1
diff -u -r1.1 httpaudio.pat
--- extra/httpaudio.pat 2005/11/15 07:49:11 1.1
+++ extra/httpaudio.pat 2005/11/26 12:12:02
@@ -1,5 +1,7 @@
# HTTP - Audio over HyperText Transfer Protocol (RFC 2616)
# Pattern quality: good fast
+# Protocol groups: internet_standard streaming_audio document_retrieval
+#
# Usually runs on port 80
#
# Contributed by Deepak Seshadri <dseshadri AT broadbandmaritime.com>
Index: extra/httpcachehit.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/httpcachehit.pat,v
retrieving revision 1.1
diff -u -r1.1 httpcachehit.pat
--- extra/httpcachehit.pat 2005/11/15 07:49:09 1.1
+++ extra/httpcachehit.pat 2005/11/26 12:12:02
@@ -1,5 +1,7 @@
# HTTP - Proxy Cache hit for HyperText Transfer Protocol (RFC 2616)
# Pattern quality: good fast
+# Protocol groups: internet_standard document_retrieval
+#
# Usually runs on port 80
#
# Contributed by Francesco Del Degan <fdeldegan AT libero.it>
Index: extra/httpcachemiss.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/httpcachemiss.pat,v
retrieving revision 1.1
diff -u -r1.1 httpcachemiss.pat
--- extra/httpcachemiss.pat 2005/11/15 07:49:10 1.1
+++ extra/httpcachemiss.pat 2005/11/26 12:12:02
@@ -1,5 +1,7 @@
# HTTP - Proxy Cache miss for HyperText Transfer Protocol (RFC 2616)
# Pattern quality: good fast
+# Protocol groups: internet_standard document_retrieval
+#
# Usually runs on port 80
#
# This pattern has been tested and is believed to work well. If it does not
Index: extra/httpvideo.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/httpvideo.pat,v
retrieving revision 1.1
diff -u -r1.1 httpvideo.pat
--- extra/httpvideo.pat 2005/11/15 07:49:11 1.1
+++ extra/httpvideo.pat 2005/11/26 12:12:02
@@ -1,5 +1,7 @@
# HTTP - Video over HyperText Transfer Protocol (RFC 2616)
# Pattern quality: good fast
+# Protocol groups: internet_standard streaming_video document_retrieval
+#
# Usually runs on port 80
#
# Contributed by Deepak Seshadri <dseshadri AT broadbandmaritime.com>
Index: extra/quicktime.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/quicktime.pat,v
retrieving revision 1.1
diff -u -r1.1 quicktime.pat
--- extra/quicktime.pat 2005/11/15 07:49:10 1.1
+++ extra/quicktime.pat 2005/11/26 12:12:02
@@ -1,5 +1,6 @@
# Quicktime HTTP
# Pattern quality: good fast
+# Protocol groups: streaming_video streaming_audio
#
# This pattern has been tested and is believed to work well.
# (Quick Time v6.5.1 downloading from www.apple.com/trailers) If it does not
Index: extra/snmp-mon.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/snmp-mon.pat,v
retrieving revision 1.1
diff -u -r1.1 snmp-mon.pat
--- extra/snmp-mon.pat 2005/11/15 07:49:09 1.1
+++ extra/snmp-mon.pat 2005/11/26 12:12:03
@@ -1,5 +1,7 @@
# SNMP Monitoring - Simple Network Management Protocol (RFC1157)
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# Usually runs on UDP ports 161
#
# These filters match SNMPv1 packets without fail, and are made
Index: extra/snmp-trap.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/extra/snmp-trap.pat,v
retrieving revision 1.1
diff -u -r1.1 snmp-trap.pat
--- extra/snmp-trap.pat 2005/11/15 07:49:09 1.1
+++ extra/snmp-trap.pat 2005/11/26 12:12:03
@@ -1,5 +1,7 @@
# SNMP Traps - Simple Network Management Protocol (RFC1157)
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# Usually runs on UDP ports 162
#
# These filters match SNMPv1 packets without fail, and are made
Index: file_types/exe.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/exe.pat,v
retrieving revision 1.1
diff -u -r1.1 exe.pat
--- file_types/exe.pat 2005/11/15 07:48:58 1.1
+++ file_types/exe.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Executable - Microsoft PE file format.
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/flash.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/flash.pat,v
retrieving revision 1.1
diff -u -r1.1 flash.pat
--- file_types/flash.pat 2005/11/15 07:49:02 1.1
+++ file_types/flash.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Flash - Macromedia Flash.
# Pattern quality: good veryfast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/gif.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/gif.pat,v
retrieving revision 1.1
diff -u -r1.1 gif.pat
--- file_types/gif.pat 2005/11/15 07:49:00 1.1
+++ file_types/gif.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# GIF - Popular Image format.
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/html.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/html.pat,v
retrieving revision 1.1
diff -u -r1.1 html.pat
--- file_types/html.pat 2005/11/15 07:49:04 1.1
+++ file_types/html.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# (X)HTML - (Extensible) Hypertext Markup Language - http://w3.org
# Pattern quality: good fast
+# Protocol groups: file
#
# This pattern has been tested and is believe to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: file_types/jpeg.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/jpeg.pat,v
retrieving revision 1.1
diff -u -r1.1 jpeg.pat
--- file_types/jpeg.pat 2005/11/15 07:49:00 1.1
+++ file_types/jpeg.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# JPEG - Joint Picture Expert Group image format.
# Pattern quality: ok fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/ogg.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/ogg.pat,v
retrieving revision 1.1
diff -u -r1.1 ogg.pat
--- file_types/ogg.pat 2005/11/15 07:49:02 1.1
+++ file_types/ogg.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Ogg - Ogg Vorbis music format (not any ogg file, just vorbis)
# Pattern quality: ok fast
+# Protocol groups: file
#
# If this pattern does not work for you,
# or you believe it could be improved, please post to
Index: file_types/pdf.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/pdf.pat,v
retrieving revision 1.1
diff -u -r1.1 pdf.pat
--- file_types/pdf.pat 2005/11/15 07:49:02 1.1
+++ file_types/pdf.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# PDF - Portable Document Format - Postscript-like format by Adobe
# Pattern quality: good fast
+# Protocol groups: file
#
# This pattern has been tested and is believe to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: file_types/perl.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/perl.pat,v
retrieving revision 1.1
diff -u -r1.1 perl.pat
--- file_types/perl.pat 2005/11/15 07:49:03 1.1
+++ file_types/perl.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Perl - A scripting language by Larry Wall.
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not work for you, or you believe it could be
# improved, please post to l7-filter-developers@lists.sf.net .
Index: file_types/postscript.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/postscript.pat,v
retrieving revision 1.1
diff -u -r1.1 postscript.pat
--- file_types/postscript.pat 2005/11/15 07:49:04 1.1
+++ file_types/postscript.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Postscript - Printing Language
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/rar.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/rar.pat,v
retrieving revision 1.1
diff -u -r1.1 rar.pat
--- file_types/rar.pat 2005/11/15 07:49:01 1.1
+++ file_types/rar.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# RAR - The WinRAR archive format
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not work for you, or you believe it could be
# improved, please post to l7-filter-developers@lists.sf.net . This
Index: file_types/rpm.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/rpm.pat,v
retrieving revision 1.1
diff -u -r1.1 rpm.pat
--- file_types/rpm.pat 2005/11/15 07:49:01 1.1
+++ file_types/rpm.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# RPM - Redhat Package Management packages
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/rtf.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/rtf.pat,v
retrieving revision 1.1
diff -u -r1.1 rtf.pat
--- file_types/rtf.pat 2005/11/15 07:49:03 1.1
+++ file_types/rtf.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# RTF - Rich Text Format - an open document format
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/tar.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/tar.pat,v
retrieving revision 1.1
diff -u -r1.1 tar.pat
--- file_types/tar.pat 2005/11/15 07:48:59 1.1
+++ file_types/tar.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Tar - tape archive. Standard UNIX file archiver, not just for tapes.
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not
# work for you, or you believe it could be improved, please post to
Index: file_types/zip.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/file_types/zip.pat,v
retrieving revision 1.1
diff -u -r1.1 zip.pat
--- file_types/zip.pat 2005/11/15 07:48:59 1.1
+++ file_types/zip.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# ZIP - (PK|Win)Zip archive format
# Pattern quality: good fast
+# Protocol groups: file
#
# If this pattern does not work for you, or you believe it could be
# improved, please post to l7-filter-developers@lists.sf.net . This
Index: protocols/100bao.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/100bao.pat,v
retrieving revision 1.1
diff -u -r1.1 100bao.pat
--- protocols/100bao.pat 2005/11/15 07:48:44 1.1
+++ protocols/100bao.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# 100bao - a Chinese P2P protocol/program - http://www.100bao.com
# Pattern quality: ok veryfast
+# Protocol groups: p2p
#
# The author of this pattern says it works, but this is unconfirmed. If
# this pattern does not work for you, or you believe it could be
Index: protocols/aim.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/aim.pat,v
retrieving revision 1.1
diff -u -r1.1 aim.pat
--- protocols/aim.pat 2005/11/15 07:48:46 1.1
+++ protocols/aim.pat 2005/11/26 12:12:03
@@ -1,6 +1,8 @@
# AIM - AOL instant messenger (OSCAR and TOC)
# Pattern quality: good notsofast
-# Usually runs on port 5190
+# Protocol groups: proprietary chat
+#
+#Usually runs on port 5190
#
# This may also match ICQ traffic.
#
Index: protocols/aimwebcontent.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/aimwebcontent.pat,v
retrieving revision 1.1
diff -u -r1.1 aimwebcontent.pat
--- protocols/aimwebcontent.pat 2005/11/15 07:48:27 1.1
+++ protocols/aimwebcontent.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# AIM web content - ads/news content downloaded by AOL Instant Messenger
# Pattern quality: good fast
+# Protocol groups: proprietary document_retrieval
#
# This pattern has been tested and is believed to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/applejuice.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/applejuice.pat,v
retrieving revision 1.1
diff -u -r1.1 applejuice.pat
--- protocols/applejuice.pat 2005/11/15 07:48:30 1.1
+++ protocols/applejuice.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Apple Juice - P2P filesharing - http://www.applejuicenet.de
# Pattern quality: great veryfast
+# Protocol groups: p2p
#
# This pattern has been tested with the Linux version (version
# 0,29,142,229). It matches search reqests and file transfers. If it
Index: protocols/ares.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ares.pat,v
retrieving revision 1.1
diff -u -r1.1 ares.pat
--- protocols/ares.pat 2005/11/15 07:48:29 1.1
+++ protocols/ares.pat 2005/11/26 12:12:03
@@ -1,5 +1,6 @@
# Ares - P2P filesharing - http://www.aresgalaxy.org
# Pattern quality: good veryfast undermatch
+# Protocol groups: p2p
# This pattern catches only client-server connect messages. This is
# sufficient for blocking, but not for shaping, since it doesn't catch
Index: protocols/battlefield1942.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/battlefield1942.pat,v
retrieving revision 1.1
diff -u -r1.1 battlefield1942.pat
--- protocols/battlefield1942.pat 2005/11/15 07:48:25 1.1
+++ protocols/battlefield1942.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Battlefield 1942 - An EA game
# Pattern quality: ok veryfast
+# Protocol groups: proprietary game
#
# Contributed by Myles Uyema <mylesuyema AT gmail.com>
#
Index: protocols/battlefield2.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/battlefield2.pat,v
retrieving revision 1.1
diff -u -r1.1 battlefield2.pat
--- protocols/battlefield2.pat 2005/11/15 07:48:23 1.1
+++ protocols/battlefield2.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Battlefield 2 - An EA game.
# Pattern quality: ok notsofast
+# Protocol groups: proprietary game
#
# This pattern is unconfirmed.
# Please post to l7-filter-developers@lists.sf.net as to whether it works
Index: protocols/bgp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/bgp.pat,v
retrieving revision 1.1
diff -u -r1.1 bgp.pat
--- protocols/bgp.pat 2005/11/15 07:48:33 1.1
+++ protocols/bgp.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# BGP - Border Gateway Protocol - RFC 1771
# Pattern quality: ok veryfast
+# Protocol groups: internet_standard networking
#
# This pattern is UNTESTED.
#
Index: protocols/biff.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/biff.pat,v
retrieving revision 1.1
diff -u -r1.1 biff.pat
--- protocols/biff.pat 2005/11/15 07:48:23 1.1
+++ protocols/biff.pat 2005/11/26 12:12:04
@@ -1,5 +1,7 @@
# Biff - new mail notification
# Pattern quality: good veryfast undermatch overmatch
+# Protocol groups: networking
+#
# Usually runs on port 512
#
# This pattern is untested. If it does not
Index: protocols/bittorrent.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/bittorrent.pat,v
retrieving revision 1.1
diff -u -r1.1 bittorrent.pat
--- protocols/bittorrent.pat 2005/11/15 07:48:22 1.1
+++ protocols/bittorrent.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Bittorrent - P2P filesharing / publishing tool - http://www.bittorrent.com
# Pattern quality: great veryfast
+# Protocol groups: p2p
#
# This pattern has been tested and is believed to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/ciscovpn.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ciscovpn.pat,v
retrieving revision 1.1
diff -u -r1.1 ciscovpn.pat
--- protocols/ciscovpn.pat 2005/11/15 07:48:39 1.1
+++ protocols/ciscovpn.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Cisco VPN - VPN client software to a Cisco VPN server
# Pattern quality: ok veryfast
+# Protocol groups: proprietary remote_access
#
# This pattern contributed by Myles Uyema <myles AT uyema.net>
#
Index: protocols/citrix.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/citrix.pat,v
retrieving revision 1.1
diff -u -r1.1 citrix.pat
--- protocols/citrix.pat 2005/11/15 07:48:34 1.1
+++ protocols/citrix.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Citrix ICA - proprietary remote desktop application - http://citrix.com
# Pattern quality: marginal fast
+# Protocol groups: proprietary remote_access
#
# This pattern is UNTESTED. Please report your experience with it to
# l7-filter-developers@lists.sf.net . This list may be subscribed to at
Index: protocols/counterstrike-source.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/counterstrike-source.pat,v
retrieving revision 1.1
diff -u -r1.1 counterstrike-source.pat
--- protocols/counterstrike-source.pat 2005/11/15 07:48:36 1.1
+++ protocols/counterstrike-source.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Counterstrike (using the new "Source" engine) - network game
# Pattern quality: good veryfast
+# Protocol groups: proprietary game
#
# By adam.randazzoATgmail.com
#
Index: protocols/cvs.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/cvs.pat,v
retrieving revision 1.1
diff -u -r1.1 cvs.pat
--- protocols/cvs.pat 2005/11/15 07:48:26 1.1
+++ protocols/cvs.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# CVS - Concurrent Versions System
# Pattern quality: good veryfast
+# Protocol groups: version_control
#
# Please post to l7-filter-developers@lists.sf.net as to whether this pattern
# works for you or not. If you believe it could be improved please post your
Index: protocols/dayofdefeat-source.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/dayofdefeat-source.pat,v
retrieving revision 1.1
diff -u -r1.1 dayofdefeat-source.pat
--- protocols/dayofdefeat-source.pat 2005/11/15 07:48:54 1.1
+++ protocols/dayofdefeat-source.pat 2005/11/26 12:12:04
@@ -1,5 +1,6 @@
# Day of Defeat - network game
# Pattern quality: good veryfast
+# Protocol groups: proprietary game
#
# By Clayton Macleod <cherry twist at gmail dot com>
#
Index: protocols/dhcp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/dhcp.pat,v
retrieving revision 1.1
diff -u -r1.1 dhcp.pat
--- protocols/dhcp.pat 2005/11/15 07:48:47 1.1
+++ protocols/dhcp.pat 2005/11/26 12:12:04
@@ -1,5 +1,7 @@
# DHCP - Dynamic Host Configuration Protocol - RFC 1541
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# Usually runs on ports 67 (server) and 68 (client)
#
# Also matches BOOTP (Bootstrap Protocol (RFC 951)) in the case that
Index: protocols/directconnect.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/directconnect.pat,v
retrieving revision 1.1
diff -u -r1.1 directconnect.pat
--- protocols/directconnect.pat 2005/11/15 07:48:40 1.1
+++ protocols/directconnect.pat 2005/11/26 12:12:04
@@ -1,5 +1,7 @@
# Direct Connect - P2P filesharing - http://www.neo-modus.com
# Pattern quality: good veryfast
+# Protocol groups: p2p
+#
# Direct Connect "hubs" listen on port 411
# Protocol info: http://wza.digitalbrains.com/DC/doc/Introduction.html
#
Index: protocols/dns.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/dns.pat,v
retrieving revision 1.1
diff -u -r1.1 dns.pat
--- protocols/dns.pat 2005/11/15 07:48:33 1.1
+++ protocols/dns.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# DNS - Domain Name System - RFC 1035
# Pattern quality: great notsofast
+# Protocol groups: internet_standard networking
#
# Please post to l7-filter-developers@lists.sf.net as to whether this pattern
# works for you or not. If you believe it could be improved please post your
Index: protocols/doom3.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/doom3.pat,v
retrieving revision 1.1
diff -u -r1.1 doom3.pat
--- protocols/doom3.pat 2005/11/15 07:48:35 1.1
+++ protocols/doom3.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# Doom 3 - computer game
# Pattern quality: good veryfast
+# Protocol groups: proprietary game
#
# Thanks to Clayton Macleod (cherrytwist at gmail.com).
#
Index: protocols/edonkey.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/edonkey.pat,v
retrieving revision 1.1
diff -u -r1.1 edonkey.pat
--- protocols/edonkey.pat 2005/11/15 07:48:48 1.1
+++ protocols/edonkey.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# eDonkey2000 - P2P filesharing - http://edonkey2000.com
# Pattern quality: good veryfast overmatch
+# Protocol groups: p2p
#
# Please post to l7-filter-developers@lists.sf.net as to whether this pattern
# works for you or not. If you believe it could be improved please post your
Index: protocols/fasttrack.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/fasttrack.pat,v
retrieving revision 1.1
diff -u -r1.1 fasttrack.pat
--- protocols/fasttrack.pat 2005/11/15 07:48:26 1.1
+++ protocols/fasttrack.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# FastTrack - P2P filesharing (Kazaa, Morpheus, iMesh, Grokster, etc)
# Pattern quality: good notsofast
+# Protocol groups: p2p
#
# Tested with Kazaa Lite Resurrection 0.0.7.6F
#
Index: protocols/finger.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/finger.pat,v
retrieving revision 1.1
diff -u -r1.1 finger.pat
--- protocols/finger.pat 2005/11/15 07:48:36 1.1
+++ protocols/finger.pat 2005/11/26 12:12:05
@@ -1,5 +1,7 @@
# Finger - User information server - RFC 1288
# Pattern quality: good notsofast undermatch overmatch
+# Protocol groups: internet_standard networking
+#
# Usually runs on port 79
#
# This pattern is lightly tested. If it does not
Index: protocols/freenet.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/freenet.pat,v
retrieving revision 1.1
diff -u -r1.1 freenet.pat
--- protocols/freenet.pat 2005/11/15 07:48:43 1.1
+++ protocols/freenet.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# Freenet - Anonymous information retrieval - http://freenetproject.org
# Pattern quality: marginal veryfast
+# Protocol groups: document_retrieval
freenet
# Freenet is intentionally hard to identify...
Index: protocols/ftp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ftp.pat,v
retrieving revision 1.1
diff -u -r1.1 ftp.pat
--- protocols/ftp.pat 2005/11/15 07:48:37 1.1
+++ protocols/ftp.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# FTP - File Transfer Protocol - RFC 959
# Pattern quality: great fast
+# Protocol groups: internet_standard document_retrieval
#
# Usually runs on port 21. Note that the data stream is on a dynamically
# assigned port, which means that you will need the FTP connection
Index: protocols/gkrellm.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/gkrellm.pat,v
retrieving revision 1.1
diff -u -r1.1 gkrellm.pat
--- protocols/gkrellm.pat 2005/11/15 07:48:46 1.1
+++ protocols/gkrellm.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# Gkrellm - a system monitor - http://gkrellm.net
# Pattern quality: good veryfast
+# Protocol groups: networking
#
# This pattern has been tested and is believed to work well. If you have
# trouble with this pattern, or you believe it could be improved please
Index: protocols/gnucleuslan.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/gnucleuslan.pat,v
retrieving revision 1.1
diff -u -r1.1 gnucleuslan.pat
--- protocols/gnucleuslan.pat 2005/11/15 07:48:27 1.1
+++ protocols/gnucleuslan.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# GnucleusLAN - LAN-only P2P filesharing
# Pattern quality: good fast
+# Protocol groups: p2p
#
# This pattern has been tested and is believed to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/gnutella.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/gnutella.pat,v
retrieving revision 1.1
diff -u -r1.1 gnutella.pat
--- protocols/gnutella.pat 2005/11/15 07:48:43 1.1
+++ protocols/gnutella.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# Gnutella - P2P filesharing
# Pattern quality: good fast
+# Protocol groups: p2p
#
# This should match both Gnutella and "Gnutella2" ("Mike's protocol")
#
Index: protocols/goboogy.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/goboogy.pat,v
retrieving revision 1.1
diff -u -r1.1 goboogy.pat
--- protocols/goboogy.pat 2005/11/15 07:48:54 1.1
+++ protocols/goboogy.pat 2005/11/26 12:12:05
@@ -1,5 +1,6 @@
# GoBoogy - A Japanese (?) P2P protocol
# pattern quality: marginal notsofast
+# Protocol groups: p2p
#
# This pattern is untested and likely does not work in all cases! If it
# does not work for you, or you believe it could be improved, please
Index: protocols/gopher.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/gopher.pat,v
retrieving revision 1.1
diff -u -r1.1 gopher.pat
--- protocols/gopher.pat 2005/11/15 07:48:39 1.1
+++ protocols/gopher.pat 2005/11/26 12:12:06
@@ -1,5 +1,7 @@
# Gopher - A precursor to HTTP - RFC 1436
# Pattern quality: good notsofast undermatch
+# Protocol groups: obsolete internet_standard document_retrieval
+#
# Usually runs on port 70
#
# This pattern is untested. If it does not
Index: protocols/h323.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/h323.pat,v
retrieving revision 1.1
diff -u -r1.1 h323.pat
--- protocols/h323.pat 2005/11/15 07:48:56 1.1
+++ protocols/h323.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# H.323 - Voice over IP.
# Pattern quality: ok veryfast
+# Protocol groups: voip
#
# This pattern is written without knowledge of the principles of H.323.
# It has only been tested with gnomemeeting and may not work for other
Index: protocols/halflife2-deathmatch.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/halflife2-deathmatch.pat,v
retrieving revision 1.1
diff -u -r1.1 halflife2-deathmatch.pat
--- protocols/halflife2-deathmatch.pat 2005/11/15 07:48:53 1.1
+++ protocols/halflife2-deathmatch.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# Half-Life 2 Deathmatch - popular computer game
# Pattern quality: good veryfast
+# Protocol groups: proprietary game
#
# By Clayton Macleod <cherrytwist TA gmail.com>
#
Index: protocols/hddtemp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/hddtemp.pat,v
retrieving revision 1.1
diff -u -r1.1 hddtemp.pat
--- protocols/hddtemp.pat 2005/11/15 07:48:23 1.1
+++ protocols/hddtemp.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# hddtemp - Hard drive temperature reporting
# Pattern quality: great veryfast
+# Protocol groups: networking
#
# Usually runs on port 7634
#
Index: protocols/hotline.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/hotline.pat,v
retrieving revision 1.1
diff -u -r1.1 hotline.pat
--- protocols/hotline.pat 2005/11/15 07:48:41 1.1
+++ protocols/hotline.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# Hotline - An old P2P filesharing protocol
# pattern quality: marginal veryfast
+# Protocol groups: p2p
#
# This pattern is untested! If it does not work for you, or you believe
# it could be improved, please post to l7-filter-developers@lists.sf.net
Index: protocols/http.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/http.pat,v
retrieving revision 1.1
diff -u -r1.1 http.pat
--- protocols/http.pat 2005/11/15 07:48:28 1.1
+++ protocols/http.pat 2005/11/26 12:12:06
@@ -1,5 +1,7 @@
# HTTP - HyperText Transfer Protocol - RFC 2616
# Pattern quality: great notsofast
+# Protocol groups: internet_standard document_retrieval
+#
# Usually runs on port 80
#
# This pattern has been tested and is believed to work well. If it does not
Index: protocols/ident.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ident.pat,v
retrieving revision 1.1
diff -u -r1.1 ident.pat
--- protocols/ident.pat 2005/11/15 07:48:53 1.1
+++ protocols/ident.pat 2005/11/26 12:12:06
@@ -1,5 +1,7 @@
# Ident - Identification Protocol - RFC 1413
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# Usually runs on port 113
#
# This pattern is believed to work. If it does not
Index: protocols/imap.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/imap.pat,v
retrieving revision 1.1
diff -u -r1.1 imap.pat
--- protocols/imap.pat 2005/11/15 07:48:38 1.1
+++ protocols/imap.pat 2005/11/26 12:12:06
@@ -1,5 +1,7 @@
# IMAP - Internet Message Access Protocol (A common e-mail protocol)
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# This matches IMAP4 (RFC 3501) and probably IMAP2 (RFC 1176)
#
# This pattern has been tested and is believed to work well. If it does not
Index: protocols/ipp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ipp.pat,v
retrieving revision 1.1
diff -u -r1.1 ipp.pat
--- protocols/ipp.pat 2005/11/15 07:48:55 1.1
+++ protocols/ipp.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# IP printing - a new standard for UNIX printing - RFC 2911
# Pattern quality: good fast
+# Protocol groups: internet_standard networking
#
# This pattern has been tested and is believed to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/irc.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/irc.pat,v
retrieving revision 1.1
diff -u -r1.1 irc.pat
--- protocols/irc.pat 2005/11/15 07:48:56 1.1
+++ protocols/irc.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# IRC - Internet Relay Chat - RFC 1459
# Pattern quality: good veryfast
+# Protocol groups: internet_standard chat
#
# Usually runs on port 6666 or 6667
# Note that chat traffic runs on these ports, but IRC-DCC traffic (which
Index: protocols/jabber.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/jabber.pat,v
retrieving revision 1.1
diff -u -r1.1 jabber.pat
--- protocols/jabber.pat 2005/11/15 07:48:48 1.1
+++ protocols/jabber.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# Jabber (XMPP) - an open instant messenger protocol - http://jabber.org
# Pattern quality: good fast
+# Protocol groups: internet_standard chat
#
# This pattern has been tested with Gaim and Gabber. It is only tested
# with non-SSL mode Jabber with no proxies. If it does not
Index: protocols/kugoo.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/kugoo.pat,v
retrieving revision 1.1
diff -u -r1.1 kugoo.pat
--- protocols/kugoo.pat 2005/11/15 07:48:30 1.1
+++ protocols/kugoo.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# KuGoo - a Chinese P2P program - http://www.kugoo.com
# Pattern quality: ok veryfast
+# Protocol groups: p2p
#
# The author of this pattern says it works, but this is unconfirmed. If
# this pattern does not work for you, or you believe it could be
Index: protocols/live365.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/live365.pat,v
retrieving revision 1.1
diff -u -r1.1 live365.pat
--- protocols/live365.pat 2005/11/15 07:48:40 1.1
+++ protocols/live365.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# live365 - An Internet radio site - http://live365.com
# Pattern quality: marginal fast
+# Protocol groups: streaming_audio
#
# This pattern was "contributed" (taken with permission) by the bandwidth
# arbitrator project (www.bandwidtharbitrator.com).
Index: protocols/lpd.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/lpd.pat,v
retrieving revision 1.1
diff -u -r1.1 lpd.pat
--- protocols/lpd.pat 2005/11/15 07:48:32 1.1
+++ protocols/lpd.pat 2005/11/26 12:12:06
@@ -1,5 +1,6 @@
# LPD - Line Printer Daemon Protocol (old-style UNIX printing) - RFC 1179
# Pattern quality: ok veryfast
+# Protocol groups: internet_standard networking
#
# This pattern is untested. If it does not work for you, or you believe
# it could be improved, please post to l7-filter-developers@lists.sf.net
Index: protocols/msn-filetransfer.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/msn-filetransfer.pat,v
retrieving revision 1.1
diff -u -r1.1 msn-filetransfer.pat
--- protocols/msn-filetransfer.pat 2005/11/15 07:48:28 1.1
+++ protocols/msn-filetransfer.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# MSN Filetransfers - Filetransfers as used by MSN Messenger
# Pattern quality: good veryfast
+# Protocol groups: proprietary document_retrieval
#
# http://www.hypothetic.org/docs/msn/client/file_transfer.php
#
Index: protocols/msnmessenger.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/msnmessenger.pat,v
retrieving revision 1.1
diff -u -r1.1 msnmessenger.pat
--- protocols/msnmessenger.pat 2005/11/15 07:48:51 1.1
+++ protocols/msnmessenger.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# MSN Messenger - Microsoft Network chat client
# Pattern quality: good veryfast
+# Protocol groups: proprietary chat
#
# Usually uses port 1863
# http://www.hypothetic.org/docs/msn/index.php
Index: protocols/mute.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/mute.pat,v
retrieving revision 1.1
diff -u -r1.1 mute.pat
--- protocols/mute.pat 2005/11/15 07:48:24 1.1
+++ protocols/mute.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# MUTE - P2P filesharing - http://mute-net.sourceforge.net
# Pattern quality: marginal veryfast
+# Protocol groups: p2p
#
# This pattern is lightly tested. I don't know for sure that it will
# match the actual file transfers.
Index: protocols/napster.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/napster.pat,v
retrieving revision 1.1
diff -u -r1.1 napster.pat
--- protocols/napster.pat 2005/11/15 07:48:32 1.1
+++ protocols/napster.pat 2005/11/26 12:12:07
@@ -1,5 +1,7 @@
# Napster - P2P filesharing
# Pattern quality: good veryfast
+# Protocol groups: p2p
+#
# All my tests show that this pattern is fast, but one user has reported that
# it is slow. Your milage may vary.
#
Index: protocols/nbns.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/nbns.pat,v
retrieving revision 1.1
diff -u -r1.1 nbns.pat
--- protocols/nbns.pat 2005/11/15 07:48:24 1.1
+++ protocols/nbns.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# NBNS - Netbios name service
# Pattern quality: good notsofast
+# Protocol groups: networking
#
# This pattern has been tested and is believed to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/ncp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ncp.pat,v
retrieving revision 1.1
diff -u -r1.1 ncp.pat
--- protocols/ncp.pat 2005/11/15 07:48:38 1.1
+++ protocols/ncp.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# NCP - Novell Core Protocol
# Pattern quality: good veryfast
+# Protocol groups: networking
#
# This pattern has been tested and is believed to work well. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/netbios.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/netbios.pat,v
retrieving revision 1.1
diff -u -r1.1 netbios.pat
--- protocols/netbios.pat 2005/11/15 07:48:26 1.1
+++ protocols/netbios.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# NetBIOS - Network Basic Input Output System
# Pattern quality: marginal fast
+# Protocol groups: proprietary networking
#
# As mentioned in smb.pat:
#
Index: protocols/nntp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/nntp.pat,v
retrieving revision 1.1
diff -u -r1.1 nntp.pat
--- protocols/nntp.pat 2005/11/15 07:48:51 1.1
+++ protocols/nntp.pat 2005/11/26 12:12:07
@@ -1,5 +1,7 @@
# NNTP - Network News Transfer Protocol - RFCs 977 and 2980
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# usually runs on port 119
# This pattern is tested and is believed to work well (but could use
Index: protocols/ntp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ntp.pat,v
retrieving revision 1.1
diff -u -r1.1 ntp.pat
--- protocols/ntp.pat 2005/11/15 07:48:53 1.1
+++ protocols/ntp.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# (S)NTP - (Simple) Network Time Protocol - RFCs 1305 and 2030
# Pattern quality: good veryfast overmatch
+# Protocol groups: internet_standard networking
#
# This pattern is tested and is believed to work. If this does not work
# for you, or you believe it could be improved, please post to
Index: protocols/openft.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/openft.pat,v
retrieving revision 1.1
diff -u -r1.1 openft.pat
--- protocols/openft.pat 2005/11/15 07:48:45 1.1
+++ protocols/openft.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# OpenFT - P2P filesharing (implemented in giFT library)
# Pattern quality: good fast
+# Protocol groups: p2p
#
# Please post to l7-filter-developers@lists.sf.net as to whether it works
# for you or not. If you believe it could be improved please post your
Index: protocols/poco.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/poco.pat,v
retrieving revision 1.1
diff -u -r1.1 poco.pat
--- protocols/poco.pat 2005/11/15 07:48:29 1.1
+++ protocols/poco.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# POCO and PP365 - Chinese P2P filesharing - http://pp365.com http://poco.cn
# Pattern quality: ok veryfast
+# Protocol groups: p2p
#
# The author of this pattern says it works, but this is unconfirmed. If
# this pattern does not work for you, or you believe it could be
Index: protocols/pop3.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/pop3.pat,v
retrieving revision 1.1
diff -u -r1.1 pop3.pat
--- protocols/pop3.pat 2005/11/15 07:48:25 1.1
+++ protocols/pop3.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# POP3 - Post Office Protocol version 3 (popular e-mail protocol) - RFC 1939
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
#
# This pattern has been tested somewhat. If it does not
# work for you, or you believe it could be improved, please post to
Index: protocols/pressplay.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/pressplay.pat,v
retrieving revision 1.1
diff -u -r1.1 pressplay.pat
--- protocols/pressplay.pat 2005/11/15 07:48:37 1.1
+++ protocols/pressplay.pat 2005/11/26 12:12:07
@@ -1,5 +1,6 @@
# pressplay - A legal music distribution site - http://pressplay.com
# Pattern quality: ok fast
+# Protocol groups: proprietary document_retrieval
#
# This pattern was "contributed" (taken with permission) by the bandwidth
# arbitrator project (www.bandwidtharbitrator.com).
Index: protocols/qq.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/qq.pat,v
retrieving revision 1.1
diff -u -r1.1 qq.pat
--- protocols/qq.pat 2005/11/15 07:48:50 1.1
+++ protocols/qq.pat 2005/11/26 12:12:08
@@ -1,5 +1,6 @@
# Tencent QQ Protocol - Chinese instant messenger protocol - http://www.qq.com
# Pattern quality: good veryfast
+# Protocol groups: chat
#
# Over six million people use QQ in China, according to wsgtrsys.
#
Index: protocols/quake-halflife.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/quake-halflife.pat,v
retrieving revision 1.1
diff -u -r1.1 quake-halflife.pat
--- protocols/quake-halflife.pat 2005/11/15 07:48:43 1.1
+++ protocols/quake-halflife.pat 2005/11/26 12:12:08
@@ -1,5 +1,6 @@
# Half Life 1 engine games (HL 1, Quake 2/3/World, Counterstrike 1.6, etc.)
# Pattern quality: good veryfast
+# Protocol groups: proprietary game
#
# Contributed by Laurens Blankers <laurens AT blankersfamily.com>, who says:
#
Index: protocols/quake1.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/quake1.pat,v
retrieving revision 1.1
diff -u -r1.1 quake1.pat
--- protocols/quake1.pat 2005/11/15 07:48:42 1.1
+++ protocols/quake1.pat 2005/11/26 12:12:08
@@ -1,5 +1,6 @@
# Quake 1 - A popular computer game.
# Pattern quality: marginal veryfast
+# Protocol groups: proprietary game
#
# This pattern is untested and unconfirmed.
# Please post to l7-filter-developers@lists.sf.net as to whether it works
Index: protocols/rdp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/rdp.pat,v
retrieving revision 1.1
diff -u -r1.1 rdp.pat
--- protocols/rdp.pat 2005/11/15 07:48:27 1.1
+++ protocols/rdp.pat 2005/11/26 12:12:08
@@ -1,5 +1,6 @@
# RDP - Remote Desktop Protocol (used in Windows Terminal Services)
# Pattern quality: ok fast
+# Protocol groups: proprietary remote_access
#
# This pattern was submitted by Michael Leong. It has been tested under the
# following conditions: "WinXP Pro with all the patches, rdesktop server
Index: protocols/rlogin.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/rlogin.pat,v
retrieving revision 1.1
diff -u -r1.1 rlogin.pat
--- protocols/rlogin.pat 2005/11/15 07:48:44 1.1
+++ protocols/rlogin.pat 2005/11/26 12:12:08
@@ -1,5 +1,6 @@
# rlogin - remote login - RFC 1282
# Pattern quality: ok veryfast
+# Protocol groups: internet_standard remote_access
#
# usually runs on port 443
#
Index: protocols/rtsp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/rtsp.pat,v
retrieving revision 1.1
diff -u -r1.1 rtsp.pat
--- protocols/rtsp.pat 2005/11/15 07:48:47 1.1
+++ protocols/rtsp.pat 2005/11/26 12:12:08
@@ -1,5 +1,7 @@
# RTSP - Real Time Streaming Protocol - http://www.rtsp.org
# Pattern quality: good fast
+# Protocol groups: internet_standard streaming_video
+#
# usually runs on port 554
#
# To take full advantage of this pattern, please see the RTSP connection
Index: protocols/shoutcast.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/shoutcast.pat,v
retrieving revision 1.1
diff -u -r1.1 shoutcast.pat
--- protocols/shoutcast.pat 2005/11/15 07:48:36 1.1
+++ protocols/shoutcast.pat 2005/11/26 12:12:08
@@ -1,5 +1,7 @@
# Shoutcast & Icecast - streaming audio
# Pattern quality: good fast
+# Protocol groups: streaming_audio
+#
# usually runs on port 80
#
# Pattern contributed by Deepak Seshadri <dseshadri AT broadbandmaritime.com>
Index: protocols/sip.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/sip.pat,v
retrieving revision 1.1
diff -u -r1.1 sip.pat
--- protocols/sip.pat 2005/11/15 07:48:31 1.1
+++ protocols/sip.pat 2005/11/26 12:12:08
@@ -1,5 +1,6 @@
# SIP - Internet telephony - RFC 3261
# Pattern quality: ok veryfast
+# Protocol groups: internet_standard voip
#
# This pattern has been tested with the Ubiquity SIP user agent.
#
Index: protocols/skypeout.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/skypeout.pat,v
retrieving revision 1.1
diff -u -r1.1 skypeout.pat
--- protocols/skypeout.pat 2005/11/15 07:48:34 1.1
+++ protocols/skypeout.pat 2005/11/26 12:12:09
@@ -1,5 +1,6 @@
# Skype to phone - UDP voice call (program to POTS phone) - http://skype.com
# Pattern Quality : ok fast undermatch overmatch
+# Protocol groups: proprietary voip
# Thanks to Myles Uyema, mylesuyema AT gmail.com
Index: protocols/skypetoskype.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/skypetoskype.pat,v
retrieving revision 1.1
diff -u -r1.1 skypetoskype.pat
--- protocols/skypetoskype.pat 2005/11/15 07:48:41 1.1
+++ protocols/skypetoskype.pat 2005/11/26 12:12:09
@@ -1,5 +1,6 @@
# Skype to Skype - UDP voice call (program to program) - http://skype.com
# Pattern Quality : good veryfast overmatch
+# Protocol groups: proprietary voip
# Thanks to Myles Uyema, mylesuyema AT gmail.com
Index: protocols/smb.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/smb.pat,v
retrieving revision 1.1
diff -u -r1.1 smb.pat
--- protocols/smb.pat 2005/11/15 07:48:41 1.1
+++ protocols/smb.pat 2005/11/26 12:12:09
@@ -1,5 +1,6 @@
# Samba/SMB - Server Message Block - Microsoft Windows filesharing
# Pattern quality: good fast
+# Protocol groups: proprietary document_retrieval networking
#
# "This protocol is sometimes also referred to as the Common Internet File
# System (CIFS), LanManager or NetBIOS protocol." -- "man samba"
Index: protocols/smtp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/smtp.pat,v
retrieving revision 1.1
diff -u -r1.1 smtp.pat
--- protocols/smtp.pat 2005/11/15 07:48:37 1.1
+++ protocols/smtp.pat 2005/11/26 12:12:09
@@ -1,5 +1,7 @@
# SMTP - Simple Mail Transfer Protocol - RFC 2821 (See also RFC 1869)
# Pattern quality: great fast
+# Protocol groups: internet_standard networking
+#
# usually runs on port 25
#
# This pattern has been tested and is believed to work well. If it does not
Index: protocols/snmp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/snmp.pat,v
retrieving revision 1.1
diff -u -r1.1 snmp.pat
--- protocols/snmp.pat 2005/11/15 07:48:45 1.1
+++ protocols/snmp.pat 2005/11/26 12:12:09
@@ -1,5 +1,7 @@
# SNMP - Simple Network Management Protocol - RFC 1157
# Pattern quality: good veryfast
+# Protocol groups: internet_standard networking
+#
# Usually runs on UDP ports 161 (monitoring) and 162 (traps)
#
# These filters match SNMPv1 packets without fail, and are made
Index: protocols/socks.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/socks.pat,v
retrieving revision 1.1
diff -u -r1.1 socks.pat
--- protocols/socks.pat 2005/11/15 07:48:34 1.1
+++ protocols/socks.pat 2005/11/26 12:12:09
@@ -1,5 +1,7 @@
# SOCKS Version 5 - Firewall traversal protocol - RFC 1928
# Pattern quality: marginal fast
+# Protocol groups: internet_standard networking
+#
# Usually runs on port 1080
# Also useful: http://www.iana.org/assignments/socks-methods
#
Index: protocols/soribada.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/soribada.pat,v
retrieving revision 1.1
diff -u -r1.1 soribada.pat
--- protocols/soribada.pat 2005/11/15 07:48:42 1.1
+++ protocols/soribada.pat 2005/11/26 12:12:09
@@ -1,5 +1,6 @@
# Soribada - A Korean P2P filesharing program/protocol - http://www.soribada.com
# Pattern quality: good notsofast
+# Protocol groups: p2p
# I am told that there are three versions of this protocol, the first no
# longer being used. That would probably explain why incoming searches
Index: protocols/soulseek.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/soulseek.pat,v
retrieving revision 1.1
diff -u -r1.1 soulseek.pat
--- protocols/soulseek.pat 2005/11/15 07:48:51 1.1
+++ protocols/soulseek.pat 2005/11/26 12:12:09
@@ -1,5 +1,7 @@
# Soulseek - P2P filesharing - http://slsknet.org
# Pattern quality: good veryfast
+# Protocol groups: p2p
+#
# All my tests show that this pattern is fast, but one user has reported that
# it is slow. Your milage may vary.
Index: protocols/ssdp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ssdp.pat,v
retrieving revision 1.1
diff -u -r1.1 ssdp.pat
--- protocols/ssdp.pat 2005/11/15 07:48:55 1.1
+++ protocols/ssdp.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# SSDP - Simple Service Discovery Protocol - easy discovery of network devices
# Pattern quality: good notsofast
+# Protocol groups: networking
#
# If this pattern does not work for you, or you believe it could be
# improved, please post to l7-filter-developers@lists.sf.net . Subscribe:
Index: protocols/ssh.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ssh.pat,v
retrieving revision 1.1
diff -u -r1.1 ssh.pat
--- protocols/ssh.pat 2005/11/15 07:48:31 1.1
+++ protocols/ssh.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# SSH - Secure SHell
# Pattern quality: great veryfast
+# Protocol groups: internet_standard remote_access secure
+#
# usually runs on port 22
#
# http://www.ietf.org/internet-drafts/draft-ietf-secsh-transport-22.txt
Index: protocols/ssl.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/ssl.pat,v
retrieving revision 1.1
diff -u -r1.1 ssl.pat
--- protocols/ssl.pat 2005/11/15 07:48:56 1.1
+++ protocols/ssl.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# SSL and TLS - Secure Socket Layer / Transport Layer Security - RFC 2246
# Pattern quality: good fast
+# Protocol groups: internet_standard document_retrieval secure
+#
# Usually runs on port 443
#
# This is a superset validcertssl. For it to match, it must be first.
Index: protocols/subspace.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/subspace.pat,v
retrieving revision 1.1
diff -u -r1.1 subspace.pat
--- protocols/subspace.pat 2005/11/15 07:48:31 1.1
+++ protocols/subspace.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# Subspace - 2D asteroids-style multiplayer space game - http://subspacehq.com
# Pattern quality: marginal veryfast
+# Protocol groups: game
#
# By Myles Uyema <mylesuyema AT gmail.com>
#
Index: protocols/telnet.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/telnet.pat,v
retrieving revision 1.1
diff -u -r1.1 telnet.pat
--- protocols/telnet.pat 2005/11/15 07:48:35 1.1
+++ protocols/telnet.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# Telnet - Insecure remote login - RFC 854
# Pattern quality: good veryfast
+# Protocol groups: internet_standard remote_access
+#
# Usually runs on port 23
#
# This pattern is lightly tested. If it does not work for you, or you
Index: protocols/tesla.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/tesla.pat,v
retrieving revision 1.1
diff -u -r1.1 tesla.pat
--- protocols/tesla.pat 2005/11/15 07:48:39 1.1
+++ protocols/tesla.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# Tesla Advanced Communication - P2P filesharing (?)
# Pattern quality: marginal notsofast
+# Protocol groups: p2p
#
# This pattern is untested!
# Please report on how this pattern works for you at
Index: protocols/tftp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/tftp.pat,v
retrieving revision 1.1
diff -u -r1.1 tftp.pat
--- protocols/tftp.pat 2005/11/15 07:48:32 1.1
+++ protocols/tftp.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# TFTP - Trivial File Transfer Protocol - used for bootstrapping - RFC 1350
# Pattern quality: marginal veryfast
+# Protocol groups: internet_standard document_retrieval
+#
# usually runs on port 69
#
# This pattern is unconfirmed.
Index: protocols/tsp.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/tsp.pat,v
retrieving revision 1.1
diff -u -r1.1 tsp.pat
--- protocols/tsp.pat 2005/11/15 07:48:22 1.1
+++ protocols/tsp.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# TSP - Time Synchronization Protocol
# Pattern quality: good veryfast overmatch
+# Protocol groups: networking
#
# http://ftp.svbug.com/ftp/pub/manuals/pdf/smm.22.timed.pdf
#
Index: protocols/validcertssl.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/validcertssl.pat,v
retrieving revision 1.1
diff -u -r1.1 validcertssl.pat
--- protocols/validcertssl.pat 2005/11/15 07:48:45 1.1
+++ protocols/validcertssl.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# Valid certificate SSL
# Pattern quality: good notsofast
+# Protocol groups: networking secure
# This matches anything claiming to use a valid certificate from a well
# known certificate authority.
Index: protocols/vnc.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/vnc.pat,v
retrieving revision 1.1
diff -u -r1.1 vnc.pat
--- protocols/vnc.pat 2005/11/15 07:48:49 1.1
+++ protocols/vnc.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# VNC - Virtual Network Computing. Also known as RFB - Remote Frame Buffer
# Pattern quality: good fast
+# Protocol groups: remote_access
+#
# http://www.realvnc.com/documentation.html
#
# This pattern has been verified with vnc v3.3.7 on WinXP and Linux
Index: protocols/whois.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/whois.pat,v
retrieving revision 1.1
diff -u -r1.1 whois.pat
--- protocols/whois.pat 2005/11/15 07:48:50 1.1
+++ protocols/whois.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# Whois - query/response system, usually used for domain name info - RFC 3912
# Pattern quality: good fast overmatch
+# Protocol groups: internet_standard networking
+#
# Usually runs on TCP port 43
#
# This pattern has been tested and is believed to work well. If it does not
Index: protocols/x11.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/x11.pat,v
retrieving revision 1.1
diff -u -r1.1 x11.pat
--- protocols/x11.pat 2005/11/15 07:48:29 1.1
+++ protocols/x11.pat 2005/11/26 12:12:10
@@ -1,5 +1,7 @@
# X Windows Version 11 - Networked GUI system used in most Unices
# Pattern quality: good veryfast
+# Protocol groups: networking
+#
# specification: http://www.msu.edu/~huntharo/xwin/docs/xwindows/PROTO.pdf
# Usually runs on port 6000 (6001 for the second server on a host, etc)
#
Index: protocols/xboxlive.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/xboxlive.pat,v
retrieving revision 1.1
diff -u -r1.1 xboxlive.pat
--- protocols/xboxlive.pat 2005/11/15 07:48:52 1.1
+++ protocols/xboxlive.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# XBoxLive - Console gaming
# pattern quality: marginal notsofast
+# Protocol groups: proprietary game
#
# This may match all XBox traffic, or may only match Halo 2 traffic.
# We don't know yet. Please post on l7-filter-developers@lists.sf.net
Index: protocols/xunlei.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/xunlei.pat,v
retrieving revision 1.1
diff -u -r1.1 xunlei.pat
--- protocols/xunlei.pat 2005/11/15 07:48:52 1.1
+++ protocols/xunlei.pat 2005/11/26 12:12:10
@@ -1,5 +1,6 @@
# Xunlei - Chinese P2P filesharing - http://xunlei.com
# Pattern quality: ok veryfast
+# Protocol groups: p2p
#
# This has been tested by two people. It definitely catches some
# streams, but may miss others. If this pattern does not work for you,
Index: protocols/yahoo.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/yahoo.pat,v
retrieving revision 1.1
diff -u -r1.1 yahoo.pat
--- protocols/yahoo.pat 2005/11/15 07:48:24 1.1
+++ protocols/yahoo.pat 2005/11/26 12:12:11
@@ -1,5 +1,7 @@
# Yahoo messenger - an instant messenger protocol - http://yahoo.com
# Pattern quality: good veryfast
+# Protocol groups: proprietary chat
+#
# Usually runs on port 5050
#
# This pattern has been tested and is believed to work well.
Index: protocols/zmaap.pat
===================================================================
RCS file: /var/cvsreps/projects/c329/2005/coap/diplomarbeit/src/webgui/coap/l7filter/l7-protocols-2005-11-05/protocols/zmaap.pat,v
retrieving revision 1.1
diff -u -r1.1 zmaap.pat
--- protocols/zmaap.pat 2005/11/15 07:48:49 1.1
+++ protocols/zmaap.pat 2005/11/26 12:12:11
@@ -1,5 +1,6 @@
# ZMAAP - Zeroconf Multicast Address Allocation Protocol
# Pattern quality: ok veryfast
+# Protocol groups: networking
#
# http://files.zeroconf.org/draft-ietf-zeroconf-zmaap-02.txt
# (Note that this reference is an Internet-Draft, and therefore must
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
L7-filter-developers mailing list
L7-filter-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/l7-filter-developers
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic