mirror of
https://github.com/vel21ripn/nDPI.git
synced 2026-04-29 15:39:42 +00:00
41 lines
1.3 KiB
Text
41 lines
1.3 KiB
Text
# Format:
|
|
# <tcp|udp>:<port>,<tcp|udp>:<port>,.....@<proto>
|
|
|
|
tcp:81,tcp:8181@HTTP
|
|
udp:5061-5062@SIP
|
|
tcp:860,udp:860,tcp:3260,udp:3260@iSCSI
|
|
tcp:3000@ntop
|
|
|
|
# Subprotocols
|
|
# Format:
|
|
# host:"<value>",host:"<value>",.....@<subproto>
|
|
|
|
host:"disneyplus.com",host:"cdn.registerdisney.go.com",host:"disney-portal.my.onetrust.com",host:"disneyplus.bn5x.net",host:"disney-plus.net"@DisneyPlus
|
|
host:"*.lvlt.dash.us.aiv-cdn.net.c.footprint.net"@AmazonVideo
|
|
host:"api-global.netflix.com"@Netflix
|
|
# IP based Subprotocols
|
|
# Format:
|
|
# ip:<value>,ip:<value>,.....@<subproto>
|
|
|
|
#
|
|
# NOTES
|
|
# 1) the port of a custom protocol is optional but if
|
|
# specified it must match the port.
|
|
# 2) you can specify up to 1 port per IP address
|
|
# 3) if you specify a custom ip:<IP>:<PORT> rule,
|
|
# even if the <PORT> doesn't match the <IP>
|
|
# (if best match during the search) will
|
|
# have priority as best match. Example if
|
|
# you specify a <Google IP>:<port 9999> and
|
|
# in your traffic have match for such IP but
|
|
# with a port other than 9999, the IP address
|
|
# begin a best match will hve preference over
|
|
# <Google IP> so this protocol will not be
|
|
# detected as <L7 proto>.Google but only
|
|
# as <L7 proto>
|
|
#
|
|
|
|
ip:213.75.170.11/32:443@CustomProtocol
|
|
ip:8.248.73.247:443@AmazonPrime
|
|
ip:54.80.47.130@AmazonPrime
|
|
|