eDonkey: improve/update classification (#2410)

eDonkey is definitely not as used as >10 years ago, but it seems it is
still active.

While having a basic TCP support seems easy, identification over UDP doesn't
work and it is hard to do it rightly (packets might be only 2 bytes long):
remove it.

Credits to V.G <v.gavrilov@securitycode.ru>
This commit is contained in:
Ivan Nardi 2024-05-04 19:11:31 +02:00 committed by GitHub
parent 57ecbf38c0
commit a6fd981fcf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
145 changed files with 167 additions and 318 deletions

View file

@ -6,7 +6,7 @@ DPI Packets (other): 4 (1.00 pkts/flow)
Confidence Match by port : 2 (flows)
Confidence DPI : 60 (flows)
Confidence Match by IP : 1 (flows)
Num dissector calls: 246 (3.90 diss/flow)
Num dissector calls: 240 (3.81 diss/flow)
LRU cache ookla: 0/0/0 (insert/search/found)
LRU cache bittorrent: 0/9/0 (insert/search/found)
LRU cache zoom: 0/0/0 (insert/search/found)