1 *** WHAT'S GOING ON? ***
3 These are patterns (protocol definitions) for the Linux layer 7 packet
4 classifier (l7-filter). To use them, you need the kernel and iptables
5 patches (or l7-filter userspace version) available at
6 http://sf.net/projects/l7-filter/ . See the HOWTOs.
8 To install these patterns into their default location, say "make install".
10 For a nice way to view these patterns: http://l7-filter.sf.net/protocols
12 More information on the patterns can be found at http://protocolinfo.org
13 This wiki is intended to make it easy for the community to pool its
14 knowledge of how to identify network protocols.
17 *** WHAT'S IN HERE? ***
19 The patterns in the "protocols" directory are the mainstream ones. They
20 match protocols like HTTP, FTP, eDonkey2000, Kazaa, and so on.
22 "extra" is for patterns of less general interest.
24 "malware" contains patterns for viruses and worms.
26 "file_types" contains patterns for file types.
28 "testing" contains programs for testing the speed & accuracy of the patterns.
33 Please report your experience with these patterns at http://protocolinfo.org
34 Or you can write to: l7-filter-developers@lists.sf.net . (You must subscribe at
35 http://lists.sourceforge.net/lists/listinfo/l7-filter-developers to post.)
37 You can also e-mail Matthew Strait directly at quadong AT users.sf.net
39 Please note that many of these patterns were NOT written by experts. So
40 if you think a pattern is broken and you know better, you may be right!