Documentation ¶
Overview ¶
Package types contains the basic types used by the library.
Index ¶
- Constants
- func BenchmarkModule(dumpsDir string, module Module, times int) error
- func DestroyCache()
- func FlushTrackedFlows()
- func InitCache(expirationTime time.Duration)
- type Category
- type Classification
- type ClassificationResult
- type ClassificationSource
- type Flow
- func (flow *Flow) AddPacket(packet gopacket.Packet)
- func (flow *Flow) GetClassificationResult() (result ClassificationResult)
- func (flow *Flow) GetDirection(packet gopacket.Packet) int
- func (flow *Flow) GetPackets() (packets []gopacket.Packet)
- func (flow *Flow) SetClassificationResult(protocol Protocol, source ClassificationSource)
- type MockModule
- type Module
- type Protocol
Constants ¶
const NoSource = ""
NoSource is returned if no classification was made.
Variables ¶
This section is empty.
Functions ¶
func BenchmarkModule ¶
BenchmarkModule runs a module on all available dump files. It is used for benchmarking the modules.
func FlushTrackedFlows ¶
func FlushTrackedFlows()
FlushTrackedFlows flushes the map used for tracking flows. Any new packets that arrive after this operation will be considered new flows.
Types ¶
type Category ¶
type Category string
const ( CATEGORY_WEB Category = "WEB" CATEGORY_CHAT Category = "CHAT" CATEGORY_MAIL Category = "MAIL" CATEGORY_P2P Category = "P2P" CATEGORY_P2P_STRUCTURE Category = "P2P_STRUCTURE" CATEGORY_KEY_EXCHANGE Category = "KEY_EXCHANGE" CATEGORY_ECOMMERCE Category = "ECOMMERCE" CATEGORY_GAMING Category = "GAMING" CATEGORY_ENCRYPT Category = "ENCRYPT" CATEGORY_MONITORING Category = "MONITORING" CATEGORY_NEWS Category = "NEWS" CATEGORY_MALWARE Category = "MALWARE" CATEGORY_SECURITY Category = "SECURITY" CATEGORY_ANTISPAM Category = "ANTISPAM" CATEGORY_VOIP Category = "VOIP" CATEGORY_TUNNELLING Category = "TUNNELLING" CATEGORY_NAT Category = "NAT" CATEGORY_STREAMING Category = "STREAMING" CATEGORY_SERVICES Category = "SERVICES" CATEGORY_DATABASES Category = "DATABASES" CATEGORY_FILES Category = "FILES" CATEGORY_REMOTE Category = "REMOTE" CATEGORY_TELCO Category = "TELCO" CATEGORY_P2PTV Category = "P2PTV" CATEGORY_RCS Category = "RCS" CATEGORY_LOGGING Category = "LOGGING" CATEGORY_PRINTING Category = "PRINTING" CATEGORY_TRANSLATION Category = "TRANSLATION" CATEGORY_CDN Category = "CDN" CATEGORY_CLOUD Category = "CLOUD" CATEGORY_NOTIFICATION Category = "NOTIFICATION" CATEGORY_SERIALISATION Category = "SERIALISATION" CATEGORY_BROADCAST Category = "BROADCAST" CATEGORY_LOCATION Category = "LOCATION" CATEGORY_CACHING Category = "CACHING" CATEGORY_MOBILE_APP Category = "MOBILE_APP" CATEGORY_ICS Category = "ICS" CATEGORY_IPCAMERAS Category = "IPCAMERAS" CATEGORY_MESSAGE_QUEUE Category = "MESSAGE_QUEUE" CATEGORY_EDUCATIONAL Category = "EDUCATIONAL" CATEGORY_ICMP Category = "ICMP" CATEGORY_MIXED Category = "MIXED" CATEGORY_NOPAYLOAD Category = "NOPAYLOAD" CATEGORY_UNSUPPORTED Category = "UNSUPPORTED" CATEGORY_UNKNOWN Category = "UNKNOWN" CATEGORY_NO_CATEGORY Category = "NO_CATEGORY" )
type Classification ¶
type ClassificationResult ¶
type ClassificationResult struct { Protocol Protocol Class Category Source ClassificationSource }
ClassificationResult contains the detected protocol and the source of the classification from a classification attempt.
func (ClassificationResult) String ¶
func (result ClassificationResult) String() string
type ClassificationSource ¶
type ClassificationSource string
ClassificationSource is the module of the library that is responsible for the classification of a flow.
type Flow ¶
type Flow struct {
// contains filtered or unexported fields
}
Flow contains sufficient information to classify a flow.
func CreateFlowFromPacket ¶
CreateFlowFromPacket creates a flow with a single packet.
func GetFlowForPacket ¶
GetFlowForPacket finds any previous flow that the packet belongs to. It adds the packet to that flow and returns the flow. If no such flow is found, a new one is created.
func (*Flow) GetClassificationResult ¶
func (flow *Flow) GetClassificationResult() (result ClassificationResult)
GetClassificationResult returns the currently detected protocol for this flow and the source of that detection.
func (*Flow) GetDirection ¶
AddPacket adds a new packet to the flow.
func (*Flow) GetPackets ¶
GetPackets returns the list of packets in a thread-safe way.
func (*Flow) SetClassificationResult ¶
func (flow *Flow) SetClassificationResult(protocol Protocol, source ClassificationSource)
SetClassificationResult sets the detected protocol and classification source for this flow.
type MockModule ¶
type MockModule struct { InitSuccess bool InitCalled int DestroySuccess bool DestroyCalled int ClassifySuccess bool ClassifyCalled int SourceName string }
MockModule is used in tests in order to test the functionality of modules.
func (*MockModule) ClassifyFlow ¶
func (module *MockModule) ClassifyFlow(flow *Flow) (result ClassificationResult)
ClassifyFlow logs the classification by the mock module.
func (*MockModule) ClassifyFlowAll ¶
func (module *MockModule) ClassifyFlowAll(flow *Flow) (results []ClassificationResult)
ClassifyFlowAll logs the multiple classification by the mock module.
func (*MockModule) Destroy ¶
func (module *MockModule) Destroy() error
Destroy logs the destruction of the mock module.
func (*MockModule) Initialize ¶
func (module *MockModule) Initialize() error
Initialize logs the initialization of the mock module.
type Module ¶
type Module interface { Initialize() error Destroy() error ClassifyFlow(*Flow) ClassificationResult ClassifyFlowAll(*Flow) []ClassificationResult }
Module is implemented by every classification module provided by the library. Each module has its own initialization and destruction methods, as well as their own method for classifying a flow. They may also be enabled or disabled and usually will also provide a configuration method.
type Protocol ¶
type Protocol string
Protocol is the type of each of the detected protocols.
const ( RPC Protocol = "RPC" FTP Protocol = "FTP" NetBIOS Protocol = "NetBIOS" JABBER Protocol = "JABBER" Unknown Protocol = "" MAIL_POP Protocol = "MAIL_POP" MAIL_SMTP Protocol = "MAIL_SMTP" MAIL_IMAP Protocol = "MAIL_IMAP" IPP Protocol = "IPP" MDNS Protocol = "MDNS" NTP Protocol = "NTP" NFS Protocol = "NFS" SSDP Protocol = "SSDP" BGP Protocol = "BGP" SNMP Protocol = "SNMP" XDMCP Protocol = "XDMCP" SMBV1 Protocol = "SMBV1" SYSLOG Protocol = "SYSLOG" DHCP Protocol = "DHCP" POSTGRES Protocol = "POSTGRES" HOTMAIL Protocol = "HOTMAIL" DIRECT_DOWNLOAD_LINK Protocol = "DIRECT_DOWNLOAD_LINK" MAIL_POPS Protocol = "MAIL_POPS" APPLEJUICE Protocol = "APPLEJUICE" DIRECTCONNECT Protocol = "DIRECTCONNECT" NTOP Protocol = "NTOP" COAP Protocol = "COAP" MAIL_SMTPS Protocol = "MAIL_SMTPS" FBZERO Protocol = "FBZERO" UBNTAC2 Protocol = "UBNTAC2" KONTIKI Protocol = "KONTIKI" OPENFT Protocol = "OPENFT" FASTTRACK Protocol = "FASTTRACK" EDONKEY Protocol = "EDONKEY" SKYPE_CALL Protocol = "SKYPE_CALL" SIGNAL Protocol = "SIGNAL" MEMCACHED Protocol = "MEMCACHED" SMBV23 Protocol = "SMBV23" MINING Protocol = "MINING" NEST_LOG_SINK Protocol = "NEST_LOG_SINK" MODBUS Protocol = "MODBUS" WHATSAPP_CALL Protocol = "WHATSAPP_CALL" DATASAVER Protocol = "DATASAVER" XBOX Protocol = "XBOX" TIKTOK Protocol = "TIKTOK" MAIL_IMAPS Protocol = "MAIL_IMAPS" ICECAST Protocol = "ICECAST" PPLIVE Protocol = "PPLIVE" PPSTREAM Protocol = "PPSTREAM" ZATTOO Protocol = "ZATTOO" SOPCAST Protocol = "SOPCAST" TVANTS Protocol = "TVANTS" TVUPLAYER Protocol = "TVUPLAYER" HTTP_DOWNLOAD Protocol = "HTTP_DOWNLOAD" THUNDER Protocol = "THUNDER" SOULSEEK Protocol = "SOULSEEK" PS_VUE Protocol = "PS_VUE" AYIYA Protocol = "AYIYA" UNENCRYPTED_JABBER Protocol = "UNENCRYPTED_JABBER" OSCAR Protocol = "OSCAR" BATTLEFIELD Protocol = "BATTLEFIELD" GOOGLE_PLUS Protocol = "GOOGLE_PLUS" IP_VRRP Protocol = "IP_VRRP" HALFLIFE2 Protocol = "HALFLIFE2" WORLDOFWARCRAFT Protocol = "WORLDOFWARCRAFT" IP_IPSEC Protocol = "IP_IPSEC" IP_GRE Protocol = "IP_GRE" IP_ICMP Protocol = "IP_ICMP" IP_IGMP Protocol = "IP_IGMP" IP_EGP Protocol = "IP_EGP" IP_SCTP Protocol = "IP_SCTP" IP_OSPF Protocol = "IP_OSPF" IP_IP_IN_IP Protocol = "IP_IP_IN_IP" PANDO Protocol = "PANDO" RTP Protocol = "RTP" VNC Protocol = "VNC" PCANYWHERE Protocol = "PCANYWHERE" TLS Protocol = "TLS" USENET Protocol = "USENET" MGCP Protocol = "MGCP" IAX Protocol = "IAX" TFTP Protocol = "TFTP" STEALTHNET Protocol = "STEALTHNET" AIMINI Protocol = "AIMINI" TRUPHONE Protocol = "TRUPHONE" IP_ICMPV6 Protocol = "IP_ICMPV6" DHCPV6 Protocol = "DHCPV6" ARMAGETRON Protocol = "ARMAGETRON" DOFUS Protocol = "DOFUS" FIESTA Protocol = "FIESTA" FLORENSIA Protocol = "FLORENSIA" GUILDWARS Protocol = "GUILDWARS" HTTP_ACTIVESYNC Protocol = "HTTP_ACTIVESYNC" KERBEROS Protocol = "KERBEROS" MAPLESTORY Protocol = "MAPLESTORY" MSSQL_TDS Protocol = "MSSQL_TDS" WORLD_OF_KUNG_FU Protocol = "WORLD_OF_KUNG_FU" SLACK Protocol = "SLACK" FACEBOOK Protocol = "FACEBOOK" TWITTER Protocol = "TWITTER" DROPBOX Protocol = "DROPBOX" GMAIL Protocol = "GMAIL" GOOGLE_MAPS Protocol = "GOOGLE_MAPS" YOUTUBE Protocol = "YOUTUBE" SKYPE Protocol = "SKYPE" GOOGLE Protocol = "GOOGLE" DCERPC Protocol = "DCERPC" NETFLOW Protocol = "NETFLOW" SFLOW Protocol = "SFLOW" HTTP_CONNECT Protocol = "HTTP_CONNECT" HTTP_PROXY Protocol = "HTTP_PROXY" CITRIX Protocol = "CITRIX" NETFLIX Protocol = "NETFLIX" LASTFM Protocol = "LASTFM" WAZE Protocol = "WAZE" YOUTUBE_UPLOAD Protocol = "YOUTUBE_UPLOAD" HULU Protocol = "HULU" CHECKMK Protocol = "CHECKMK" AJP Protocol = "AJP" APPLE Protocol = "APPLE" WEBEX Protocol = "WEBEX" APPLE_ICLOUD Protocol = "APPLE_ICLOUD" VIBER Protocol = "VIBER" APPLE_ITUNES Protocol = "APPLE_ITUNES" RADIUS Protocol = "RADIUS" WINDOWS_UPDATE Protocol = "WINDOWS_UPDATE" TEAMVIEWER Protocol = "TEAMVIEWER" TUENTI Protocol = "TUENTI" LOTUS_NOTES Protocol = "LOTUS_NOTES" SAP Protocol = "SAP" GTP Protocol = "GTP" UPNP Protocol = "UPNP" LLMNR Protocol = "LLMNR" REMOTE_SCAN Protocol = "REMOTE_SCAN" SPOTIFY Protocol = "SPOTIFY" MESSENGER Protocol = "MESSENGER" H323 Protocol = "H323" NOE Protocol = "NOE" CISCOVPN Protocol = "CISCOVPN" TEAMSPEAK Protocol = "TEAMSPEAK" SKINNY Protocol = "SKINNY" RTCP Protocol = "RTCP" ORACLE Protocol = "ORACLE" CORBA Protocol = "CORBA" UBUNTUONE Protocol = "UBUNTUONE" WHOIS_DAS Protocol = "WHOIS_DAS" COLLECTD Protocol = "COLLECTD" SOCKS Protocol = "SOCKS" NINTENDO Protocol = "NINTENDO" WIKIPEDIA Protocol = "WIKIPEDIA" ZMQ Protocol = "ZMQ" AMAZON Protocol = "AMAZON" EBAY Protocol = "EBAY" CNN Protocol = "CNN" MEGACO Protocol = "MEGACO" REDIS Protocol = "REDIS" VHUA Protocol = "VHUA" VEVO Protocol = "VEVO" PANDORA Protocol = "PANDORA" QUIC Protocol = "QUIC" EAQ Protocol = "EAQ" OOKLA Protocol = "OOKLA" AMQP Protocol = "AMQP" KAKAOTALK Protocol = "KAKAOTALK" KAKAOTALK_VOICE Protocol = "KAKAOTALK_VOICE" TWITCH Protocol = "TWITCH" DNS_OVER_HTTPS Protocol = "DNS_OVER_HTTPS" MPEGTS Protocol = "MPEGTS" SNAPCHAT Protocol = "SNAPCHAT" SINA Protocol = "SINA" HANGOUT_DUO Protocol = "HANGOUT_DUO" IFLIX Protocol = "IFLIX" GITHUB Protocol = "GITHUB" BJNP Protocol = "BJNP" WIREGUARD Protocol = "WIREGUARD" SMPP Protocol = "SMPP" DNSCRYPT Protocol = "DNSCRYPT" TINC Protocol = "TINC" DEEZER Protocol = "DEEZER" INSTAGRAM Protocol = "INSTAGRAM" MICROSOFT Protocol = "MICROSOFT" STARCRAFT Protocol = "STARCRAFT" TEREDO Protocol = "TEREDO" HOTSPOT_SHIELD Protocol = "HOTSPOT_SHIELD" IMO Protocol = "IMO" GOOGLE_DRIVE Protocol = "GOOGLE_DRIVE" OCS Protocol = "OCS" OFFICE_365 Protocol = "OFFICE_365" CLOUDFLARE Protocol = "CLOUDFLARE" MS_ONE_DRIVE Protocol = "MS_ONE_DRIVE" MQTT Protocol = "MQTT" RX Protocol = "RX" APPLESTORE Protocol = "APPLESTORE" OPENDNS Protocol = "OPENDNS" DRDA Protocol = "DRDA" PLAYSTORE Protocol = "PLAYSTORE" SOMEIP Protocol = "SOMEIP" FIX Protocol = "FIX" PLAYSTATION Protocol = "PLAYSTATION" PASTEBIN Protocol = "PASTEBIN" LINKEDIN Protocol = "LINKEDIN" SOUNDCLOUD Protocol = "SOUNDCLOUD" CSGO Protocol = "CSGO" LISP Protocol = "LISP" DIAMETER Protocol = "DIAMETER" GOOGLE_SERVICES Protocol = "GOOGLE_SERVICES" AMAZON_VIDEO Protocol = "AMAZON_VIDEO" GOOGLE_DOCS Protocol = "GOOGLE_DOCS" WHATSAPP_FILES Protocol = "WHATSAPP_FILES" TARGUS_GETDATA Protocol = "TARGUS_GETDATA" DNP3 Protocol = "DNP3" HTTP Protocol = "HTTP" SMTP Protocol = "SMTP" BITTORRENT Protocol = "BITTORRENT" IRC Protocol = "IRC" NCSOFT Protocol = "NCSOFT" DC Protocol = "DC" EMULE Protocol = "EMULE" GNUTELLA Protocol = "GNUTELLA" SSH Protocol = "SSH" HTTPS Protocol = "HTTPS" RAZOR Protocol = "RAZOR" POP3 Protocol = "POP3" SSL Protocol = "SSL" MSN Protocol = "MSN" DNS Protocol = "DNS" IMAP Protocol = "IMAP" RTSP Protocol = "RTSP" ID Protocol = "ID" YAHOO Protocol = "YAHOO" ICQ Protocol = "ICQ" TELNET Protocol = "TELNET" RDP Protocol = "RDP" TDS Protocol = "TDS" RPC_SCAN Protocol = "RPC_SCAN" SMB Protocol = "SMB" WARCRAFT3 Protocol = "WARCRAFT3" ETRUST Protocol = "ETRUST" FTP_CONTROL Protocol = "FTP_CONTROL" FTP_DATA Protocol = "FTP_DATA" EYE Protocol = "EYE" ARES Protocol = "ARES" NNTP Protocol = "NNTP" NAPSTER Protocol = "NAPSTER" BNCS Protocol = "BNCS" RFB Protocol = "RFB" YAHOO_WEBCAM Protocol = "YAHOO_WEBCAM" ICA Protocol = "ICA" NETBIOS Protocol = "NETBIOS" KMS Protocol = "KMS" MS_DS Protocol = "MS_DS" SIP Protocol = "SIP" MZINGA Protocol = "MZINGA" GOKUCHAT Protocol = "GOKUCHAT" XUNLEI Protocol = "XUNLEI" DXP Protocol = "DXP" HAMACHI Protocol = "HAMACHI" BLIZZARD Protocol = "BLIZZARD" MSNV Protocol = "MSNV" BITEXT Protocol = "BITEXT" MITGLIEDER Protocol = "MITGLIEDER" TOR Protocol = "TOR" MYSQL Protocol = "MYSQL" HTTP_TUNNEL Protocol = "HTTP_TUNNEL" RSYNC Protocol = "RSYNC" NOTES_RPC Protocol = "NOTES_RPC" AZUREUS Protocol = "AZUREUS" FLASH Protocol = "FLASH" STEAM Protocol = "STEAM" TRACKMANIA Protocol = "TRACKMANIA" CONQUER Protocol = "CONQUER" RTMP Protocol = "RTMP" TIP Protocol = "TIP" NONSTANDARD_HTTP Protocol = "NONSTANDARD_HTTP" HARVEYS Protocol = "HARVEYS" SHOUTCAST Protocol = "SHOUTCAST" HTTP_BADPORT Protocol = "HTTP_BADPORT" POSTGRESQL Protocol = "POSTGRESQL" WOW Protocol = "WOW" M4U Protocol = "M4U" RBLS Protocol = "RBLS" OPENVPN Protocol = "OPENVPN" TELECOMKEY Protocol = "TELECOMKEY" IMAPS Protocol = "IMAPS" MSNC Protocol = "MSNC" YAHOO_ERROR Protocol = "YAHOO_ERROR" IMESH Protocol = "IMESH" PPTP Protocol = "PPTP" AFP Protocol = "AFP" PDBOX Protocol = "PDBOX" EA_GAMES Protocol = "EA_GAMES" ZYNGA Protocol = "ZYNGA" CLUBBOX Protocol = "CLUBBOX" WINMX Protocol = "WINMX" INVALID_BT Protocol = "INVALID_BT" WEBLOGIC Protocol = "WEBLOGIC" INVALID_HTTP Protocol = "INVALID_HTTP" COD_WAW Protocol = "COD_WAW" MP2P Protocol = "MP2P" SVN Protocol = "SVN" SOCKS5 Protocol = "SOCKS5" SOCKS4 Protocol = "SOCKS4" INVALID_SMTP Protocol = "INVALID_SMTP" MMS Protocol = "MMS" CISCO_VPN Protocol = "CISCO_VPN" WEB_JUNK Protocol = "WEB_JUNK" CVS Protocol = "CVS" LDAP Protocol = "LDAP" INVALID_POP3 Protocol = "INVALID_POP3" XMPP Protocol = "XMPP" SECONDLIFE Protocol = "SECONDLIFE" KASEYA Protocol = "KASEYA" KASPERSKY Protocol = "KASPERSKY" JEDI Protocol = "JEDI" CGP Protocol = "CGP" YOUKU Protocol = "YOUKU" STUN Protocol = "STUN" XYMON Protocol = "XYMON" MUNIN Protocol = "MUNIN" TROJAN_WIN32_GENERIC_SB Protocol = "TROJAN_WIN32_GENERIC_SB" PALTALK Protocol = "PALTALK" ZABBIX Protocol = "ZABBIX" AKAMAI Protocol = "AKAMAI" GAMESPY Protocol = "GAMESPY" WUALA Protocol = "WUALA" TROJAN_ZEROACCESS Protocol = "TROJAN_ZEROACCESS" DVRNS Protocol = "DVRNS" CHATANGO Protocol = "CHATANGO" OMEGLE Protocol = "OMEGLE" TELNET_EXPLOIT Protocol = "TELNET_EXPLOIT" POP3S Protocol = "POP3S" PSN_STORE Protocol = "PSN_STORE" SKYPE_TCP Protocol = "SKYPE_TCP" APPLE_PUSH Protocol = "APPLE_PUSH" XMPPS Protocol = "XMPPS" SMTPS Protocol = "SMTPS" NNTPS Protocol = "NNTPS" JAVA Protocol = "JAVA" IPOP Protocol = "IPOP" RUNESCAPE Protocol = "RUNESCAPE" WHOIS Protocol = "WHOIS" FRING Protocol = "FRING" PALRINGO Protocol = "PALRINGO" CRYPTIC Protocol = "CRYPTIC" SUPL Protocol = "SUPL" MINECRAFT Protocol = "MINECRAFT" TPKT Protocol = "TPKT" QVOD Protocol = "QVOD" KIK Protocol = "KIK" WHATSAPP Protocol = "WHATSAPP" WECHAT Protocol = "WECHAT" FUNSHION Protocol = "FUNSHION" BTSYNC Protocol = "BTSYNC" SPEEDTEST Protocol = "SPEEDTEST" GIT Protocol = "GIT" DUELING_NETWORK Protocol = "DUELING_NETWORK" LINE Protocol = "LINE" AMP Protocol = "AMP" SPDY Protocol = "SPDY" YAHOO_GAMES Protocol = "YAHOO_GAMES" DELL_BACKUP Protocol = "DELL_BACKUP" REVOLVER_NBLBT Protocol = "REVOLVER_NBLBT" CRASHPLAN Protocol = "CRASHPLAN" CLASH_OF_CLANS Protocol = "CLASH_OF_CLANS" TRION Protocol = "TRION" MONGO Protocol = "MONGO" LLP2P Protocol = "LLP2P" HEARTHSTONE Protocol = "HEARTHSTONE" DIABLO3 Protocol = "DIABLO3" CACAOWEB Protocol = "CACAOWEB" TAOBAO Protocol = "TAOBAO" TERA Protocol = "TERA" SILKROADONLINE Protocol = "SILKROADONLINE" GOOGLE_HANGOUTS Protocol = "GOOGLE_HANGOUTS" HOLA Protocol = "HOLA" GUILDWARS2 Protocol = "GUILDWARS2" QQ Protocol = "QQ" TETRISONLINE Protocol = "TETRISONLINE" TWITCH_IRC Protocol = "TWITCH_IRC" QQLIVE Protocol = "QQLIVE" TENCENT_GAMES Protocol = "TENCENT_GAMES" VODLOCKER Protocol = "VODLOCKER" TELEGRAM Protocol = "TELEGRAM" XUNLEI_ACCEL Protocol = "XUNLEI_ACCEL" SAFEGUARD360 Protocol = "SAFEGUARD360" NORTON_BACKUP Protocol = "NORTON_BACKUP" BADBAIDU Protocol = "BADBAIDU" KAKAO Protocol = "KAKAO" WEIBO Protocol = "WEIBO" TENSAFE Protocol = "TENSAFE" KANKAN Protocol = "KANKAN" AIRDROID Protocol = "AIRDROID" KUAIBO Protocol = "KUAIBO" DIANPING Protocol = "DIANPING" XIAMI Protocol = "XIAMI" QQDOWNLOAD Protocol = "QQDOWNLOAD" ZERO_FACEBOOK Protocol = "ZERO_FACEBOOK" FINALFANTASY_XIV Protocol = "FINALFANTASY_XIV" FACEBOOK_MESSENGER Protocol = "FACEBOOK_MESSENGER" YY Protocol = "YY" NETCAT_CCTV Protocol = "NETCAT_CCTV" ZOOM Protocol = "ZOOM" S7COMM Protocol = "S7COMM" MAXICLOUD Protocol = "MAXICLOUD" GLUPTEBA Protocol = "GLUPTEBA" WNS Protocol = "WNS" PANDATV Protocol = "PANDATV" FACEBOOK_TURN Protocol = "FACEBOOK_TURN" DESTINY Protocol = "DESTINY" QCLOUD_ILVB Protocol = "QCLOUD_ILVB" BITCOIN Protocol = "BITCOIN" LIFEFORGE Protocol = "LIFEFORGE" ACESTREAM Protocol = "ACESTREAM" MAPLESTORY_CHINA Protocol = "MAPLESTORY_CHINA" NDT_TPUT Protocol = "NDT_TPUT" RELAY Protocol = "RELAY" DOUYU Protocol = "DOUYU" IDRIVE_SYNC Protocol = "IDRIVE_SYNC" TWITCASTING Protocol = "TWITCASTING" THE_DIVISION Protocol = "THE_DIVISION" BLACKDESERT Protocol = "BLACKDESERT" REALVNC Protocol = "REALVNC" DOGECOIN Protocol = "DOGECOIN" FUCKCOIN Protocol = "FUCKCOIN" OURWORLD Protocol = "OURWORLD" GRAAL_ONLINE_ERA Protocol = "GRAAL_ONLINE_ERA" APPEAR_IN Protocol = "APPEAR_IN" VAINGLORY Protocol = "VAINGLORY" WEIQI Protocol = "WEIQI" FOURD Protocol = "FOURD" TANKIX Protocol = "TANKIX" IPSHARKK Protocol = "IPSHARKK" NET_MFP Protocol = "NET_MFP" SPEEDIN Protocol = "SPEEDIN" CROSSFIRE Protocol = "CROSSFIRE" DASH Protocol = "DASH" AIRMEDIA Protocol = "AIRMEDIA" GIOP Protocol = "GIOP" VPN_UNLIMITED Protocol = "VPN_UNLIMITED" TENFIVECOIN Protocol = "TENFIVECOIN" BAOFENG Protocol = "BAOFENG" TALESRUNNER Protocol = "TALESRUNNER" ANTCOIN Protocol = "ANTCOIN" FBCDN_SSL Protocol = "FBCDN_SSL" SAPROUTER Protocol = "SAPROUTER" FLIGGY Protocol = "FLIGGY" SMITE Protocol = "SMITE" VPNROBOT Protocol = "VPNROBOT" VMWARE Protocol = "VMWARE" DOUYU_CHAT Protocol = "DOUYU_CHAT" JX3ONLINE Protocol = "JX3ONLINE" LITECOIN Protocol = "LITECOIN" STRATUM Protocol = "STRATUM" WIZARD101 Protocol = "WIZARD101" KINGOFGLORY Protocol = "KINGOFGLORY" SAS_ZOMBIE_ASSAULT_4 Protocol = "SAS_ZOMBIE_ASSAULT_4" DNF Protocol = "DNF" IHEXIN Protocol = "IHEXIN" NAVER_P2P Protocol = "NAVER_P2P" GCAFE_UPDATER Protocol = "GCAFE_UPDATER" BWSYNC Protocol = "BWSYNC" TANKIONLINE Protocol = "TANKIONLINE" REALMOFTHEMADGOD Protocol = "REALMOFTHEMADGOD" PATHOFEXILE Protocol = "PATHOFEXILE" SSJJ Protocol = "SSJJ" SPEEDIFY Protocol = "SPEEDIFY" NSQ Protocol = "NSQ" SKYFORGE Protocol = "SKYFORGE" HOTS Protocol = "HOTS" NOMACHINE Protocol = "NOMACHINE" QQSPEEDMOBILE Protocol = "QQSPEEDMOBILE" DAHUA Protocol = "DAHUA" UTHERVERSE Protocol = "UTHERVERSE" HEROES300 Protocol = "HEROES300" FILENORI Protocol = "FILENORI" IPFS Protocol = "IPFS" REMOTE_MANIPULATOR Protocol = "REMOTE_MANIPULATOR" WEBEX_STUN Protocol = "WEBEX_STUN" RRTV Protocol = "RRTV" RABBITMQ Protocol = "RABBITMQ" ICEP Protocol = "ICEP" BEAM Protocol = "BEAM" VHDP2P Protocol = "VHDP2P" CLASSIN Protocol = "CLASSIN" UDP Protocol = "UDP" UDP_SIP Protocol = "UDP_SIP" UDP_BTDHT Protocol = "UDP_BTDHT" UDP_GNUTELLA Protocol = "UDP_GNUTELLA" UDP_DNS Protocol = "UDP_DNS" UDP_DHCP Protocol = "UDP_DHCP" UDP_QUAKE Protocol = "UDP_QUAKE" UDP_STEAM Protocol = "UDP_STEAM" UDP_STEAM_FRIENDS Protocol = "UDP_STEAM_FRIENDS" UDP_STEAM_INHOMEBROADCAST Protocol = "UDP_STEAM_INHOMEBROADCAST" UDP_WIN_MESSAGE Protocol = "UDP_WIN_MESSAGE" UDP_GAMESPY Protocol = "UDP_GAMESPY" UDP_EMULE Protocol = "UDP_EMULE" UDP_EYE Protocol = "UDP_EYE" UDP_RTP Protocol = "UDP_RTP" UDP_MSN_VIDEO Protocol = "UDP_MSN_VIDEO" UDP_COD Protocol = "UDP_COD" UDP_NTP Protocol = "UDP_NTP" UDP_MP2P Protocol = "UDP_MP2P" UDP_SPAMFIGHTER Protocol = "UDP_SPAMFIGHTER" UDP_TRACEROUTE Protocol = "UDP_TRACEROUTE" UDP_SECONDLIFE Protocol = "UDP_SECONDLIFE" UDP_HL Protocol = "UDP_HL" UDP_XLSP Protocol = "UDP_XLSP" UDP_DEMONWARE Protocol = "UDP_DEMONWARE" UDP_IMESH Protocol = "UDP_IMESH" UDP_OPASERV Protocol = "UDP_OPASERV" UDP_STUN Protocol = "UDP_STUN" UDP_SQLEXP Protocol = "UDP_SQLEXP" UDP_MSN_CACHE Protocol = "UDP_MSN_CACHE" UDP_DIABLO2 Protocol = "UDP_DIABLO2" UDP_IPV6 Protocol = "UDP_IPV6" UDP_ORBIT Protocol = "UDP_ORBIT" UDP_TEREDO Protocol = "UDP_TEREDO" UDP_KADEMLIA Protocol = "UDP_KADEMLIA" UDP_PANDO Protocol = "UDP_PANDO" UDP_ESP Protocol = "UDP_ESP" UDP_PSN Protocol = "UDP_PSN" UDP_REAL Protocol = "UDP_REAL" UDP_GNUTELLA2 Protocol = "UDP_GNUTELLA2" UDP_PYZOR Protocol = "UDP_PYZOR" UDP_SKYPE Protocol = "UDP_SKYPE" UDP_ISAKMP Protocol = "UDP_ISAKMP" UDP_SNMP Protocol = "UDP_SNMP" UDP_BACKWEB Protocol = "UDP_BACKWEB" UDP_STARCRAFT Protocol = "UDP_STARCRAFT" UDP_XFIRE_P2P Protocol = "UDP_XFIRE_P2P" UDP_THQ Protocol = "UDP_THQ" UDP_NEWERTH Protocol = "UDP_NEWERTH" UDP_LINKPROOF Protocol = "UDP_LINKPROOF" UDP_WORM_22105 Protocol = "UDP_WORM_22105" UDP_QQ Protocol = "UDP_QQ" UDP_SLP Protocol = "UDP_SLP" UDP_ESO Protocol = "UDP_ESO" UDP_SSDP Protocol = "UDP_SSDP" UDP_NETBIOS Protocol = "UDP_NETBIOS" UDP_CP_RDP Protocol = "UDP_CP_RDP" UDP_VENTRILO Protocol = "UDP_VENTRILO" UDP_MTA Protocol = "UDP_MTA" UDP_PPLIVE Protocol = "UDP_PPLIVE" UDP_JEDI_ACADEMY Protocol = "UDP_JEDI_ACADEMY" UDP_MOH Protocol = "UDP_MOH" UDP_TREMULOUS Protocol = "UDP_TREMULOUS" UDP_VIVOX Protocol = "UDP_VIVOX" UDP_IPMSG Protocol = "UDP_IPMSG" UDP_TEAMSPEAK Protocol = "UDP_TEAMSPEAK" UDP_DC Protocol = "UDP_DC" UDP_FREECHAL Protocol = "UDP_FREECHAL" UDP_XUNLEI Protocol = "UDP_XUNLEI" UDP_KAZAA Protocol = "UDP_KAZAA" UDP_NORTON Protocol = "UDP_NORTON" UDP_CISCO_VPN Protocol = "UDP_CISCO_VPN" UDP_RTCP Protocol = "UDP_RTCP" UDP_UNREAL Protocol = "UDP_UNREAL" UDP_TFTP Protocol = "UDP_TFTP" UDP_GARENA Protocol = "UDP_GARENA" UDP_PPSTREAM Protocol = "UDP_PPSTREAM" UDP_FORTINET Protocol = "UDP_FORTINET" UDP_TVANTS Protocol = "UDP_TVANTS" UDP_STORM_WORM Protocol = "UDP_STORM_WORM" UDP_BATTLEFIELD Protocol = "UDP_BATTLEFIELD" UDP_SOPCAST Protocol = "UDP_SOPCAST" UDP_SERIALNUMBERD Protocol = "UDP_SERIALNUMBERD" UDP_LDAP_AD Protocol = "UDP_LDAP_AD" UDP_RTMFP Protocol = "UDP_RTMFP" UDP_L2TP Protocol = "UDP_L2TP" UDP_SYSLOG Protocol = "UDP_SYSLOG" UDP_AKAMAI Protocol = "UDP_AKAMAI" UDP_RADIUS Protocol = "UDP_RADIUS" UDP_HAMACHI Protocol = "UDP_HAMACHI" UDP_BJNP Protocol = "UDP_BJNP" UDP_KASPERSKY Protocol = "UDP_KASPERSKY" UDP_GSM Protocol = "UDP_GSM" UDP_JEDI Protocol = "UDP_JEDI" UDP_YOUKU Protocol = "UDP_YOUKU" UDP_YOUDAO_DICT Protocol = "UDP_YOUDAO_DICT" UDP_DRIVESHARE Protocol = "UDP_DRIVESHARE" UDP_CIRN Protocol = "UDP_CIRN" UDP_NEVERWINTER Protocol = "UDP_NEVERWINTER" UDP_QQLIVE Protocol = "UDP_QQLIVE" UDP_TEAMVIEWER Protocol = "UDP_TEAMVIEWER" UDP_ARES Protocol = "UDP_ARES" UDP_EPSON Protocol = "UDP_EPSON" UDP_AKAMAI_TRANSFER Protocol = "UDP_AKAMAI_TRANSFER" UDP_DCC Protocol = "UDP_DCC" UDP_AMANDA Protocol = "UDP_AMANDA" UDP_NETFLOW Protocol = "UDP_NETFLOW" UDP_ZEROACCESS Protocol = "UDP_ZEROACCESS" UDP_VXWORKS_EXPLOIT Protocol = "UDP_VXWORKS_EXPLOIT" UDP_APPLE_FACETIME_INIT Protocol = "UDP_APPLE_FACETIME_INIT" UDP_STEAM_LOCALBROADCAST Protocol = "UDP_STEAM_LOCALBROADCAST" UDP_LANSYNC Protocol = "UDP_LANSYNC" UDP_BTSYNC Protocol = "UDP_BTSYNC" UDP_MSOFFICE_MAC Protocol = "UDP_MSOFFICE_MAC" UDP_SPOTIFY_BROADCAST Protocol = "UDP_SPOTIFY_BROADCAST" UDP_MDNS Protocol = "UDP_MDNS" UDP_FASP Protocol = "UDP_FASP" UDP_RAKNET Protocol = "UDP_RAKNET" UDP_OPENVPN Protocol = "UDP_OPENVPN" UDP_NOE Protocol = "UDP_NOE" UDP_VIBER Protocol = "UDP_VIBER" UDP_DTLS Protocol = "UDP_DTLS" UDP_ICP Protocol = "UDP_ICP" UDP_LOL Protocol = "UDP_LOL" UDP_SANANDREAS Protocol = "UDP_SANANDREAS" UDP_MFNP Protocol = "UDP_MFNP" UDP_FUNSHION Protocol = "UDP_FUNSHION" UDP_QUIC Protocol = "UDP_QUIC" UDP_AVAST_DNS Protocol = "UDP_AVAST_DNS" UDP_DB2 Protocol = "UDP_DB2" UDP_NATPMP Protocol = "UDP_NATPMP" UDP_GPRS_TUNNEL Protocol = "UDP_GPRS_TUNNEL" UDP_WECHAT Protocol = "UDP_WECHAT" UDP_NOCTION Protocol = "UDP_NOCTION" UDP_ARMA_SERVER Protocol = "UDP_ARMA_SERVER" UDP_PLANETSIDE2 Protocol = "UDP_PLANETSIDE2" UDP_RWTH_AACHEN Protocol = "UDP_RWTH_AACHEN" UDP_BMDP Protocol = "UDP_BMDP" UDP_DOTA2 Protocol = "UDP_DOTA2" UDP_LINE Protocol = "UDP_LINE" UDP_ZOOM Protocol = "UDP_ZOOM" UDP_HEROES_GENERALS Protocol = "UDP_HEROES_GENERALS" UDP_WARTHUNDER Protocol = "UDP_WARTHUNDER" UDP_H1Z1 Protocol = "UDP_H1Z1" UDP_CS_GLOBAL_OFFENSIVE Protocol = "UDP_CS_GLOBAL_OFFENSIVE" UDP_NTP_REFLECT Protocol = "UDP_NTP_REFLECT" UDP_PUNKBUSTER Protocol = "UDP_PUNKBUSTER" UDP_ROBOCRAFT Protocol = "UDP_ROBOCRAFT" UDP_CISCO_SSLVPN Protocol = "UDP_CISCO_SSLVPN" UDP_ACERCLOUD Protocol = "UDP_ACERCLOUD" UDP_360CN Protocol = "UDP_360CN" UDP_WOLF_ET Protocol = "UDP_WOLF_ET" UDP_KUGOU Protocol = "UDP_KUGOU" UDP_XUNLEI_JSQ Protocol = "UDP_XUNLEI_JSQ" UDP_KANKAN Protocol = "UDP_KANKAN" UDP_QQPCMGR Protocol = "UDP_QQPCMGR" UDP_DIANPING Protocol = "UDP_DIANPING" UDP_XUNYOU Protocol = "UDP_XUNYOU" UDP_FORTICLIENT_SSLVPN Protocol = "UDP_FORTICLIENT_SSLVPN" UDP_DISCORD Protocol = "UDP_DISCORD" UDP_NETCORE Protocol = "UDP_NETCORE" UDP_ARMA3_SERVER Protocol = "UDP_ARMA3_SERVER" UDP_BAIDU_YUN_P2P Protocol = "UDP_BAIDU_YUN_P2P" UDP_YY Protocol = "UDP_YY" UDP_OVERWATCH Protocol = "UDP_OVERWATCH" UDP_BACNET Protocol = "UDP_BACNET" UDP_ARK_SURVIVAL Protocol = "UDP_ARK_SURVIVAL" UDP_360P2P Protocol = "UDP_360P2P" UDP_PORTMAP_RPC Protocol = "UDP_PORTMAP_RPC" UDP_NINTENDO Protocol = "UDP_NINTENDO" UDP_CHIVALRY Protocol = "UDP_CHIVALRY" UDP_DOYO Protocol = "UDP_DOYO" UDP_NETCAT_CCTV Protocol = "UDP_NETCAT_CCTV" UDP_N2PING Protocol = "UDP_N2PING" UDP_RAMSEY_DASH Protocol = "UDP_RAMSEY_DASH" UDP_UBISOFT_GAMES Protocol = "UDP_UBISOFT_GAMES" UDP_THE_CREW Protocol = "UDP_THE_CREW" UDP_TURBOVPN Protocol = "UDP_TURBOVPN" UDP_GEARSOFWAR Protocol = "UDP_GEARSOFWAR" UDP_RDP Protocol = "UDP_RDP" UDP_HOTS Protocol = "UDP_HOTS" UDP_VPNMASTER Protocol = "UDP_VPNMASTER" UDP_DIANSHIJIA Protocol = "UDP_DIANSHIJIA" UDP_PS4_REMOTEPLAY Protocol = "UDP_PS4_REMOTEPLAY" UDP_STARCITIZEN Protocol = "UDP_STARCITIZEN" UDP_WEBEX Protocol = "UDP_WEBEX" UDP_HALO_ONLINE Protocol = "UDP_HALO_ONLINE" UDP_GOTOMEETING Protocol = "UDP_GOTOMEETING" UDP_CROSSOUT Protocol = "UDP_CROSSOUT" UDP_UMEYE Protocol = "UDP_UMEYE" UDP_RISING_STORM Protocol = "UDP_RISING_STORM" UDP_CROSSFIRE Protocol = "UDP_CROSSFIRE" UDP_MERAKICLOUD Protocol = "UDP_MERAKICLOUD" UDP_SNAPVPN Protocol = "UDP_SNAPVPN" UDP_DAHUA Protocol = "UDP_DAHUA" UDP_STARLEAF Protocol = "UDP_STARLEAF" UDP_FOSCAM Protocol = "UDP_FOSCAM" UDP_DESTINY Protocol = "UDP_DESTINY" UDP_BAOFENG Protocol = "UDP_BAOFENG" UDP_TORCHLIGHT2 Protocol = "UDP_TORCHLIGHT2" UDP_SMITE Protocol = "UDP_SMITE" UDP_COUNTERSTRIKE_16 Protocol = "UDP_COUNTERSTRIKE_16" UDP_VPNROBOT Protocol = "UDP_VPNROBOT" UDP_TF2 Protocol = "UDP_TF2" UDP_GANGSOFSPACE Protocol = "UDP_GANGSOFSPACE" UDP_COMBATARMS Protocol = "UDP_COMBATARMS" UDP_COMBATARMS_P2P Protocol = "UDP_COMBATARMS_P2P" UDP_PANIPANI Protocol = "UDP_PANIPANI" UDP_FEITWO Protocol = "UDP_FEITWO" UDP_MOONHUNTERS Protocol = "UDP_MOONHUNTERS" UDP_HELIBORNE Protocol = "UDP_HELIBORNE" UDP_KINGOFGLORY Protocol = "UDP_KINGOFGLORY" UDP_ASSETTO_CORSA Protocol = "UDP_ASSETTO_CORSA" UDP_CACAOWEB Protocol = "UDP_CACAOWEB" UDP_ZALO_CALL Protocol = "UDP_ZALO_CALL" UDP_PALADINS Protocol = "UDP_PALADINS" UDP_CHARGEN_EXPLOIT Protocol = "UDP_CHARGEN_EXPLOIT" UDP_TOX Protocol = "UDP_TOX" UDP_HOLLA Protocol = "UDP_HOLLA" UDP_RRSHARE Protocol = "UDP_RRSHARE" UDP_QQSPEEDMOBILE Protocol = "UDP_QQSPEEDMOBILE" UDP_LOADOUT Protocol = "UDP_LOADOUT" UDP_GANGLIA Protocol = "UDP_GANGLIA" UDP_TALESRUNNER Protocol = "UDP_TALESRUNNER" UDP_FREEFIRE Protocol = "UDP_FREEFIRE" UDP_HEROES_EVOLVED Protocol = "UDP_HEROES_EVOLVED" UDP_RULES_OF_SURVIVAL Protocol = "UDP_RULES_OF_SURVIVAL" UDP_CONTRACT_WARS Protocol = "UDP_CONTRACT_WARS" UDP_ARD Protocol = "UDP_ARD" UDP_QVOD Protocol = "UDP_QVOD" UDP_YUANFUDAO Protocol = "UDP_YUANFUDAO" UDP_ROCKET_LEAGUE Protocol = "UDP_ROCKET_LEAGUE" UDP_CLOUDFLARE_WARP Protocol = "UDP_CLOUDFLARE_WARP" UDP_WIREGUARD Protocol = "UDP_WIREGUARD" UDP_COD_MOBILE Protocol = "UDP_COD_MOBILE" UDP_NVIDIA_GAMESTREAM Protocol = "UDP_NVIDIA_GAMESTREAM" UDP_CLASSIN Protocol = "UDP_CLASSIN" REJECTION Protocol = "REJECTION" //MYSTERY_9000 Protocol = "MYSTERY_9000" //MYSTERY_PSPR Protocol = "MYSTERY_PSPR" //MYSTERY_8000 Protocol = "MYSTERY_8000" //MYSTERY_IG Protocol = "MYSTERY_IG" //MYSTERY_CONN Protocol = "MYSTERY_CONN" //MYSTERY_SYMANTEC Protocol = "MYSTERY_SYMANTEC" //MYSTERY_RXXF Protocol = "MYSTERY_RXXF" //UDP_MYSTERY_0D Protocol = "UDP_MYSTERY_0D" //UDP_MYSTERY_99 Protocol = "UDP_MYSTERY_99" //UDP_MYSTERY_8000 Protocol = "UDP_MYSTERY_8000" //UDP_MYSTERY_45 Protocol = "UDP_MYSTERY_45" //UDP_MYSTERY_0660 Protocol = "UDP_MYSTERY_0660" //UDP_MYSTERY_E9 Protocol = "UDP_MYSTERY_E9" //UDP_MYSTERY_QQ Protocol = "UDP_MYSTERY_QQ" //UDP_MYSTERY_61_72 Protocol = "UDP_MYSTERY_61_72" //UDP_MYSTERY_05 Protocol = "UDP_MYSTERY_05" ICMP Protocol = "ICMP" INVALID Protocol = "INVALID" NO_PAYLOAD Protocol = "NO_PAYLOAD" NO_FIRSTPKT Protocol = "NO_FIRSTPKT" UNSUPPORTED Protocol = "UNSUPPORTED" UNKNOWN Protocol = "UNKNOWN" )
Protocol identifiers for the supported protocols