![]() With other matches, such as port or IP number. In other words, use of this pattern is likely to yield false positives, so you should probably only use it in conjunction That reliably matches only the intended protocol. Overmatching pattern: It is either hard or impossible to write a pattern for this protocol.Slow: >100 seconds (worst as of this writing was 1750s for the kernel library That is, its slowest patterns are faster and itsįastest patterns are slower than the kernel version. Note that the userspace version has a smaller Used in userspace (with the modern GNU library). When used in the kernel (with the old V8 regular expression library). ![]() The first speed shown for a pattern in the tables below is the speed It tests them against 122 samples of actual network data (as of the The protocol package includes a tool for testing pattern performance. What variety of situations the pattern has been tested and (4) whatįraction of identifiable traffic is identified correctly.įor details, read the pattern file or the protocol's wiki entry. Protocol is understood (2) how much the pattern has been tested (3) in Is a conglomerate measure of several things, including (1) how well the The "quality" gives a rough idea of how well the pattern works. To help add support for more protocols, see the Pattern Writing HOWTO. The easiest way to do this is to follow the Protocols are listed as needing more testing. These pages are out of date, but willīack to l7-filter main page L7-filter Supported Protocolsīelow is the list of supported protocols.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |