diff --git a/protofiles/Applications.proto b/protofiles/Applications.proto index 8f1c71d719cd4e..fa933b307df93c 100644 --- a/protofiles/Applications.proto +++ b/protofiles/Applications.proto @@ -2325,4 +2325,29 @@ optional string wsop = 2323 [default = "Mobile game."]; optional string zendesk = 2324 [default = "Zendesk is a cloud-based customer service platform that includes ticketing self-service options and customer support features."]; optional string magicjack = 2325 [default = "MagicJack is a VoIP service for home and business use available as a mobile application and also with a proprietary device (magicJack PLUS)."]; optional string adobe = 2326 [default = "Adobe Systems is a computer software company. It develops graphic designer software and Andio and Video editing and visual effects. This plug-in classifies traffic to the website."]; +optional string carbonite = 2327 [default = "This signature detects Carbonite a service that manages online backups."]; +optional string _5pmweb = 2328 [default = "5pmweb is a web-based project and task management software for teams."]; +optional string yodiz = 2329 [default = "Yodiz is online Agile Project Management tool consisting of Product Backlog Management Kanban Scrum Board Issue Tracking Software Team Discussions and issues."]; +optional string inneractive = 2330 [default = "Inneractive is a monetizer for cross-platform mobile applications."]; +optional string sabameeting = 2331 [default = "Saba Meeting is a web conferencing and desktop sharing service."]; +optional string qoo10 = 2332 [default = "Singaporian online fashion and trend shopping market."]; +optional string digitalriver = 2333 [default = "Digital River is a public company that provides internet commerce services."]; +optional string tigerair = 2334 [default = "Singaporian online travel agency."]; +optional string naver_blog = 2335 [default = "Naver Blog is a South Korean blog hosting website."]; +optional string egloos = 2336 [default = "Egloos is a South Korean blog hosting website."]; +optional string teltel = 2337 [default = "VOIP software which allows calling other teltel users."]; +optional string flurry = 2338 [default = "Flurry provides services to optimize customer's mobile experience through apps and personalized ads."]; +optional string sgcarmart = 2339 [default = "Singaporean online car market."]; +optional string samsung = 2340 [default = "Samsung is a South Korean multinational company."]; +optional string goplan = 2341 [default = "Goplan is an online project management and collaboration tool for individuals and teams."]; +optional string golden_village = 2342 [default = "Singaporian online cinema ticket booking."]; +optional string jobsdb = 2343 [default = "Job seeking website."]; +optional string wrike = 2344 [default = "Wrike is web based project management software that gives you full visibility and control over your projects."]; +optional string zuji = 2345 [default = "Singaporean online travel agency."]; +optional string mailru_agent = 2346 [default = "Mail.ru Agent is a cross-platform mobile messaging application supporting text audio and video. It is featured by Mail.ru."]; +optional string toggle = 2347 [default = "Singaporian video streaming website."]; +optional string nate_mail = 2348 [default = "Nate Mail is a South Korea webmail."]; +optional string hungrygowhere = 2349 [default = "Singaporean fooding website."]; +optional string crittercism = 2350 [default = "Crittercism is a mobile application for performance management."]; +optional string dhcp6 = 2351 [default = "The DHCPv6 protocol is used to automatically configure the network parameters of a station in an IPv6 network."]; } diff --git a/protofiles/DpiMsgLRproto.proto b/protofiles/DpiMsgLRproto.proto index 5d66058310c302..a8507c6da906ea 100644 --- a/protofiles/DpiMsgLRproto.proto +++ b/protofiles/DpiMsgLRproto.proto @@ -2699,8 +2699,14 @@ optional uint32 sr_dlsrQ_PROTO_RTCP = 3007; // QOSMOS:Q_PROTO_RTCP,Q_RTCP_SR_DLS optional string mapped_address_ipv4Q_PROTO_STUN = 3008; // QOSMOS:Q_PROTO_STUN,Q_STUN_MAPPED_ADDRESS_IPV4,uint32,ip_addrToString optional string xor_mapped_address_ipv4Q_PROTO_STUN = 3009; // QOSMOS:Q_PROTO_STUN,Q_STUN_XOR_MAPPED_ADDRESS_IPV4,uint32,ip_addrToString optional string framed_ip_netmaskQ_PROTO_RADIUS = 3010; // QOSMOS:Q_PROTO_RADIUS,Q_RADIUS_FRAMED_IP_NETMASK,uint32,ip_addrToString -optional uint32 magic_cookieQ_PROTO_STUN = 3011; // QOSMOS:Q_PROTO_STUN,Q_STUN_MAGIC_COOKIE -repeated bytes conference_idQ_PROTO_YMSG = 3012; // QOSMOS:Q_PROTO_YMSG,Q_YMSG_CONFERENCE_ID -repeated bytes video_typeQ_PROTO_YOUTUBE = 3013; // QOSMOS:Q_PROTO_YOUTUBE,Q_MPA_VIDEO_TYPE optional uint32 video_avgdatarateQ_PROTO_YOUTUBE = 3014; // QOSMOS:Q_PROTO_YOUTUBE,Q_MPA_VIDEO_AVGDATARATE +repeated bytes file_idQ_PROTO_MAILRU_AGENT = 3015; // QOSMOS:Q_PROTO_MAILRU_AGENT,Q_MAILRU_AGENT_FILE_ID +repeated bytes msg_receiverQ_PROTO_MAILRU_AGENT = 3016; // QOSMOS:Q_PROTO_MAILRU_AGENT,Q_MAILRU_AGENT_MSG_RECEIVER +repeated bytes msgQ_PROTO_MAILRU_AGENT = 3017; // QOSMOS:Q_PROTO_MAILRU_AGENT,Q_MAILRU_AGENT_MSG +repeated bytes conference_idQ_PROTO_MAILRU_AGENT = 3018; // QOSMOS:Q_PROTO_MAILRU_AGENT,Q_MAILRU_AGENT_CONFERENCE_ID +repeated bytes im_actionQ_PROTO_MAILRU_AGENT = 3019; // QOSMOS:Q_PROTO_MAILRU_AGENT,Q_MAILRU_AGENT_IM_ACTION +repeated bytes userQ_PROTO_MAILRU_AGENT = 3020; // QOSMOS:Q_PROTO_MAILRU_AGENT,Q_MAILRU_AGENT_USER +optional uint32 magic_cookieQ_PROTO_STUN = 3021; // QOSMOS:Q_PROTO_STUN,Q_STUN_MAGIC_COOKIE +repeated bytes conference_idQ_PROTO_YMSG = 3022; // QOSMOS:Q_PROTO_YMSG,Q_YMSG_CONFERENCE_ID +repeated bytes video_typeQ_PROTO_YOUTUBE = 3023; // QOSMOS:Q_PROTO_YOUTUBE,Q_MPA_VIDEO_TYPE } diff --git a/resources/Applications.csv b/resources/Applications.csv index 0af91085edb5d2..8d20465af06625 100644 --- a/resources/Applications.csv +++ b/resources/Applications.csv @@ -2318,3 +2318,28 @@ wsop,2323,"Mobile game." zendesk,2324,"Zendesk is a cloud-based customer service platform that includes ticketing self-service options and customer support features." magicjack,2325,"MagicJack is a VoIP service for home and business use available as a mobile application and also with a proprietary device (magicJack PLUS)." adobe,2326,"Adobe Systems is a computer software company. It develops graphic designer software and Andio and Video editing and visual effects. This plug-in classifies traffic to the website." +carbonite,2327,"This signature detects Carbonite a service that manages online backups." +_5pmweb,2328,"5pmweb is a web-based project and task management software for teams." +yodiz,2329,"Yodiz is online Agile Project Management tool consisting of Product Backlog Management Kanban Scrum Board Issue Tracking Software Team Discussions and issues." +inneractive,2330,"Inneractive is a monetizer for cross-platform mobile applications." +sabameeting,2331,"Saba Meeting is a web conferencing and desktop sharing service." +qoo10,2332,"Singaporian online fashion and trend shopping market." +digitalriver,2333,"Digital River is a public company that provides internet commerce services." +tigerair,2334,"Singaporian online travel agency." +naver_blog,2335,"Naver Blog is a South Korean blog hosting website." +egloos,2336,"Egloos is a South Korean blog hosting website." +teltel,2337,"VOIP software which allows calling other teltel users." +flurry,2338,"Flurry provides services to optimize customer's mobile experience through apps and personalized ads." +sgcarmart,2339,"Singaporean online car market." +samsung,2340,"Samsung is a South Korean multinational company." +goplan,2341,"Goplan is an online project management and collaboration tool for individuals and teams." +golden_village,2342,"Singaporian online cinema ticket booking." +jobsdb,2343,"Job seeking website." +wrike,2344,"Wrike is web based project management software that gives you full visibility and control over your projects." +zuji,2345,"Singaporean online travel agency." +mailru_agent,2346,"Mail.ru Agent is a cross-platform mobile messaging application supporting text audio and video. It is featured by Mail.ru." +toggle,2347,"Singaporian video streaming website." +nate_mail,2348,"Nate Mail is a South Korea webmail." +hungrygowhere,2349,"Singaporean fooding website." +crittercism,2350,"Crittercism is a mobile application for performance management." +dhcp6,2351,"The DHCPv6 protocol is used to automatically configure the network parameters of a station in an IPv6 network." diff --git a/resources/NetMonFieldNames.csv b/resources/NetMonFieldNames.csv index e2eb2bca03d668..c91ceaa70b74e4 100644 --- a/resources/NetMonFieldNames.csv +++ b/resources/NetMonFieldNames.csv @@ -1275,6 +1275,12 @@ MAILRU,senderQ_PROTO_MAILRU,sender,Sender,Sender,sender,,Sender,,1st Rev MAILRU,sender_aliasQ_PROTO_MAILRU,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, MAILRU,sender_emailQ_PROTO_MAILRU,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, MAILRU,subjectQ_PROTO_MAILRU,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU_AGENT,file_idQ_PROTO_MAILRU_AGENT,file_id,FileId,File Id,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU_AGENT,msg_receiverQ_PROTO_MAILRU_AGENT,msg_receiver,MsgReceiver,Msg Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU_AGENT,msgQ_PROTO_MAILRU_AGENT,msg,Msg,Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU_AGENT,conference_idQ_PROTO_MAILRU_AGENT,conference_id,ConferenceId,Conference Id,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU_AGENT,im_actionQ_PROTO_MAILRU_AGENT,im_action,IMAction,IM Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU_AGENT,userQ_PROTO_MAILRU_AGENT,user,User,User,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, MAKTOOB,actionQ_PROTO_MAKTOOB,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, MAKTOOB,attach_idQ_PROTO_MAKTOOB,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, MAKTOOB,attach_sizeQ_PROTO_MAKTOOB,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, diff --git a/resources/ProtocolDescriptions.csv b/resources/ProtocolDescriptions.csv index cfc1ebf03d988e..010821dbf3e9d0 100644 --- a/resources/ProtocolDescriptions.csv +++ b/resources/ProtocolDescriptions.csv @@ -177,7 +177,7 @@ s1ap,S1 Application Protocol,#ep_value_raw,Elementary Procedure raw value. s1ap,S1 Application Protocol,#ep_ie_value_raw,Information Element raw value. sccp,Skinny Client Control Protocol,#inherit_parent,"Parent inheritance key secondlife,SecondLife.com,#login_id,Id of virtual character. -secondlife,SecondLife.com,#sender,Sender Id. +secondlife,SecondLife.com,#sender,Contains the identity of the sender of a chat session or a file transfer. secondlife,SecondLife.com,#source_id,Source Id. secondlife,SecondLife.com,#session_id,Uniquely identifies the current user session. sip,Session Initiation Protocol,#inherit_key,"Candidate inheritance key diff --git a/resources/ProtocolFilters b/resources/ProtocolFilters index d8449675fb59b1..220422068eab82 100644 --- a/resources/ProtocolFilters +++ b/resources/ProtocolFilters @@ -2,7 +2,7 @@ !NA,NA| !Q_IP_SRC_ADDR32| !buffer| -!,,,,,| +!,\.,,,,,| !binary| !Q_IP_DST_ADDR32| !Q_BASE_DELAY| diff --git a/resources/Qosmos_Protobook.csv b/resources/Qosmos_Protobook.csv index be4446dc748cac..2e87e883c48d96 100755 --- a/resources/Qosmos_Protobook.csv +++ b/resources/Qosmos_Protobook.csv @@ -1,4102 +1,4110 @@ -protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_name,attr_name,deprecated,attr_type,attr_desc,stream,pkt/session,content. -.,,,,,-1,Q_GEN_TOT_LEN,tot_len,,uint32,Remaining data length starting from the defined protocol layer (including header).,0,pkt,0 -.,,,,,-2,Q_GEN_HDR_LEN,hdr_len,,uint32,Packet length for the considered protocol.,0,pkt,0 -.,,,,,-3,Q_GEN_PAYLOAD_LEN,payload_len,,uint32,"Length of data contained by the selected protocol, excluding the header.",0,pkt,0 -.,,,,,-4,Q_GEN_HDR64,hdr64,,binary,"Contains, in a hexa format, the first 64 bytes of a packet (with header), starting from the defined protocol layer. This attribute is no more extracted.",0,pkt,0 -.,,,,,-5,Q_GEN_TEXT64,text64,,string,"Contains, in ASCII characters, all bytes of a packet, starting from the defined protocol layer. If the content is extracted then this attribute will contain the decompressed text.",0,pkt,0 -.,,,,,-6,Q_GEN_FRAG_OFF,frag_off,,uint32,Indicates the offset if the packet is fragmented.,0,pkt,0 -.,,,,,-7,Q_GEN_BYTE_VAL,byte_val,,binary,Contains data defined by given offset parameters starting from the header of the protocol level considered.,0,pkt,0 -.,,,,,-8,Q_GEN_NB_OVER_PROTO,nb_over_proto,,uint32,Number of protocols existing above this level in the protocol stack (path).,0,pkt,0 -.,,,,,-9,Q_GEN_LAYER_DESC,layer_desc,,string,Description of this protocol.,0,pkt,0 -.,,,,,-10,Q_GEN_LAYER_NAME,layer_name,,string,Name of this protocol.,0,pkt,0 -.,,,,,-11,Q_GEN_LAYER_FAMILY,layer_family,,string,Family of this protocol.,0,pkt,0 -.,,,,,-14,Q_GEN_FRAME,frame,,ptr,"Contains packet data, starting from the defined protocol layer.",0,pkt,0 -.,,,,,-12,Q_GEN_PARENT_USER_HANDLE,parent_user_handle,,ptr,User data associated to one parent session.,0,pkt,0 -.,,,,,-13,Q_GEN_GEN_PARENT_LAYER,gen_parent_layer,,uint32,"This is not an event, it is used only to indicate the parent of this protocol is needed.",0,session_mod,0 -.,,,,,-15,Q_GEN_DATA,data,,buffer,"Contains packet data, starting from the defined protocol layer, excluding the header.",0,session_mod,1 -.,,,,,-17,Q_GEN_GEN_INHERIT_SUCCESS,gen_inherit_success,,uint32,Id of parent protocol when inheritance is successful.,0,session_mod,0 -.,,,,,-18,Q_GEN_CLASSIFICATION_MATCH,classification_match,,,This attribute compares the classification states of both half-sessions.,0,session_mod,0 -.,,,,,-19,Q_GEN_STATEMACHINE_ANOMALY,statemachine_anomaly,,,We check if we are in a final node when we cleanup the statemachine.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,643,Q_MPA_REQUEST,request,,parent,Contains information which is in http request.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,4,Q_0ZZ0_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,1,Q_0ZZ0_SIDC,sidc,,string,Session identifier used to find information about file which has been uploaded.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,2,Q_0ZZ0_SID,sid,,string,Session identifier used to find user information.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,5,Q_0ZZ0_EMAIL_ADDRESS,email_address,,string,User's email address.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,6,Q_0ZZ0_EMAIL_INVITED,email_invited,,string,Email to whom the invitation has been sent.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,7,Q_0ZZ0_NAME_INVITED,name_invited,,string,Name of the user to whom the invitation has been sent.,0,session_mod,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,8,Q_0ZZ0_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,1,Q_3GPP_LI_HI3_DOMAIN_ID,hi3_domain_id,,binary,3gpp_li HI3 Domain,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,2,Q_3GPP_LI_VERSION,version,,uint32,Version,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,3,Q_3GPP_LI_LIID,liid,,string,Lawful Interception Identifier,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,4,Q_3GPP_LI_CORRELATION_NUMBER,correlation_number,,binary,GPRS correlation number,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,5,Q_3GPP_LI_TIMESTAMP,timestamp,,string,Timestamp,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,6,Q_3GPP_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,7,Q_3GPP_LI_T_PDU_DIRECTION,t_pdu_direction,,uint32,T-PDU direction,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,8,Q_3GPP_LI_COUNTRY_CODE,country_code,,string,Country code according to ISO 3166-1,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,9,Q_3GPP_LI_ICE_TYPE,ice_type,,uint32,Intercepting Control Element type,0,session_mod,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,10,Q_3GPP_LI_NATIONAL_PARAMS,national_params,,binary,National parameters (other than country) in ASN.1 format,0,session_mod,0 -7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,1,Q_8021Q_PRIORITY,priority,,uint8,Packet priority.,0,session_fix,0 -7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,2,Q_8021Q_CFI,cfi,,uint8,Flag used for compatibility reason between Ethernet type network and Token Ring type network. Canonical Format Indicator is always set to zero for Ethernet switches.,0,session_fix,0 -7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,3,Q_8021Q_VLAN_ID,vlan_id,,uint16,VLAN Identifier of the frame.,0,session_fix,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint8,Tells whether a file is compressed.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,6,Q_ADC_CLIENT_VERSION,client_version,,string,Name and version of the client used by the peer.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,5,Q_ADC_PEER_HASH,peer_hash,,string,"Hash of the user ID, used to communicate with the hub and the other clients.",0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,4,Q_ADC_PEER_ID,peer_id,,string,User id assigned by the hub to the client and notified through a SID command.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,3,Q_ADC_COMMAND_CODE,command_code,,string,"Message action, as extracted from the three letters following the message type.",0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,2,Q_ADC_COMMAND_TYPE,command_type,,string,Command type extracted from the first character of the message.,0,session_mod,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,1,Q_ADC_COMMAND,command,,parent,Parent attribute denoting the start of a message of the protocol.,0,session_mod,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,6,Q_ADOBE_UPDATE_COMPONENT_LIST_ENTRY,component_list_entry,,parent,Update server's answer entry.,0,session_fix,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,7,Q_ADOBE_UPDATE_COMPONENT_LIST_NAME,component_list_name,,string,Name of a piece of Adobe software we have a new version for.,0,session_prt,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,8,Q_ADOBE_UPDATE_COMPONENT_LIST_DESC,component_list_desc,,string,"Short component update description, including version number.",0,session_prt,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,9,Q_ADOBE_UPDATE_COMPONENT_LIST_VERSION,component_list_version,,string,"Last component version available.""",0,session_prt,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,10,Q_ADOBE_UPDATE_COMPONENT_LIST_URL,component_list_url,,string,"Component update download link.""",0,session_prt,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,5,Q_ADOBE_UPDATE_UPDATE_REQUEST,update_request,,parent,Client's component update request to the update server.,0,session_fix,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,4,Q_ADOBE_UPDATE_UPDATE_MANAGER,update_manager,,string,Adobe Update Manager version and identifier.,0,session_prt,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,11,Q_ADOBE_UPDATE_PRODUCT_NAME,product_name,,string,User's request for a product update.,0,session_prt,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),537,Q_MPA_ENCODING,encoding,,string_index,Message encoding.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),638,Q_MPA_USER_EMAIL,user_email,,string,Email Address of an AIN user.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_fix,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),608,Q_MPA_VERSION,version,,string,AIM software version.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),1,Q_AIM_ICON_DATA,icon_data,,buffer,Binary data containing a contact's icon.,0,session_mod,1 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),2,Q_AIM_ICON_BUDDY,icon_buddy,,string,The contact whose icon was downloaded.,0,session_mod,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),3,Q_AIM_INTERNAL_IP_ADDRESS,internal_ip_address,,ip_addr,Internal IP address of the contact.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),4,Q_AIM_EXTERNAL_IP_ADDRESS,external_ip_address,,ip_addr,External IP address of the contact.,0,session_prt,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),5,Q_AIM_EXTERNAL_LISTENING_PORT,external_listening_port,,uint16,External listening TCP port address of the contact.,0,session_prt,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,1,Q_AIM_EXPRESS_CHAT_TYPE,chat_type,,string,Message type.,0,session_prt,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,608,Q_MPA_VERSION,version,,string,Client version.,0,session_fix,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_prt,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_prt,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session_prt,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -281,Q_PROTO_AIMS,Instant Messaging,aims,Secure AIM,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,1,Q_AMQP_MAJOR_VERSION,major_version,,uint32,Major version of the protocol.,0,session_fix,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,2,Q_AMQP_MINOR_VERSION,minor_version,,uint32,Minor version of the protocol.,0,session_fix,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,3,Q_AMQP_METHOD,method,,string_index,Command launched.,0,session_mod,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,4,Q_AMQP_RESPONSE_TIME,response_time,,timeval,Server response time.,0,session_mod,0 -563,Q_PROTO_APPLE_UPDATE,Web,apple_update,Apple Update,1,Q_APPLE_UPDATE_PKG_NAME,pkg_name,,string,pkg_name (package name) is the name of the software being updated.,0,session_mod,0 -1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,3,Q_APPSTORE_DEVICE_TYPE,device_type,,string,"Target device (iPhone, iPod,...).",0,session_mod,0 -1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,2,Q_APPSTORE_CONNECTION_TYPE,connection_type,,string,Type of the connection.,0,session_mod,0 -1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,1,Q_APPSTORE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,537,Q_MPA_ENCODING,encoding,,string,Server encoding.,0,session_mod,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,2,Q_ARCHIVE_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,3,Q_ARCHIVE_TITLE,title,,string,File title.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,4,Q_ARCHIVE_DESCRIPTION,description,,string,File description.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,5,Q_ARCHIVE_SUBJECT,subject,,string,File subject.,0,session_prt,0 -564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,6,Q_ARCHIVE_CREATOR,creator,,string,File creator.,0,session_prt,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares,704,Q_MPA_NICKNAME,nickname,,string,Contains the user identity of the Ares connection.,0,session_fix,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_mod,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,1,Q_ARP_HARDWARE,hardware,,uint16,Specify the hardware type for which the request is sent. A value of 1 indicates an Ethernet address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,2,Q_ARP_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,3,Q_ARP_HARDSIZE,hardsize,,uint8,MAC address length.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,4,Q_ARP_PROTOSIZE,protosize,,uint8,Size in bytes of the logical address requested. Example: 4 for IP.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,5,Q_ARP_OPCODE,opcode,,uint16,"Operation Code: Request = 1, Response = 2.",0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,6,Q_ARP_SRC_HARD,src_hard,,binary,Source MAC address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,7,Q_ARP_SRC_PROTO,src_proto,,binary,Source IP address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,8,Q_ARP_DST_HARD,dst_hard,,binary,Destination MAC address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,9,Q_ARP_DST_PROTO,dst_proto,,binary,Destination IP address.,0,pkt,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,4,Q_BADONGO_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,704,Q_MPA_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Unique contact ID for a receiver.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,1,Q_BASE_CNX_TYPE,cnx_type,,uint8,Packet transfer direction in a client/server flow.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,2,Q_BASE_PATH,path,,path,Protocol stack of a packet.,0,session_prt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,3,Q_BASE_APPLICATION,application,,string,Name of the application to which the packet belongs.,0,session_prt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,4,Q_BASE_TIME,time,,uint32,"Elapsed time since 1st January 1970, displayed in seconds/ minutes/ hours/ days according to the value of the given parameter.",0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,5,Q_BASE_DAYTIME,daytime,,uint16,Current time characteristics according to the given parameter: second (s)/ minute (m)/ hour (h)/ day (D)/ month (M)/ year (Y).,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,6,Q_BASE_UTIME,utime,,timeval,"Elapsed time since 1st January 1970, displayed in microseconds.",0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,7,Q_BASE_FLOW_ID,flow_id,,uint64,Unique connection ID.,0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,8,Q_BASE_CLASSIFIED,classified,,uint8,"Attribute showing whether the classification process (AFC) has been completed or not for the given packet. A value of 1 indicates a complete classification, a value of 0 indicates that the classification process is still running.",0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,9,Q_BASE_DELAY,delay,,timeval,Elapsed time between consecutive packets processing.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,10,Q_BASE_JITTER,jitter,,timeval,Variation of delay compared to the last processed packet (calculated per half-session).,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,11,Q_BASE_FAMILY,family,,string,Family to which the uppermost protocol of the protocol stack belongs to.,0,session_prt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,14,Q_BASE_APPLICATION_ID,application_id,,uint32,Unique ID of application to which the packet belongs.,0,session_prt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,32,Q_BASE_PATH_LEN,path_len,,uint32,Contains the number of protocols in the packet protocol stack (path).,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,33,Q_BASE_PACKET_COUNTER,packet_counter,,uint32,Number of packets received.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,36,Q_BASE_SESSION_PACKET_COUNTER,session_packet_counter,,uint32,Number of packets received. This attribute data cannot be retreived in externalized versions.,0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,37,Q_BASE_USER_HANDLE,user_handle,,ptr,User data associated to this session. This attribute data cannot be retreived in externalized versions.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,38,Q_BASE_PEER_USER_HANDLE,peer_user_handle,,ptr,User data associated to the peer half-session. This attribute data cannot be retreived in externalized versions.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,39,Q_BASE_DEV,dev,,string,Name of the device used to establish the connection for an interface. This attribute data cannot be retreived in externalized versions.,0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,40,Q_BASE_WAY,way,,uint8,Way of half connection.,0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,41,Q_BASE_PROTOCOL,protocol,,parent,"Empty parent attribute for path, application_id, application and family.",0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,42,Q_BASE_PACKET,packet,,buffer,Packet data.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,62,Q_BASE_PACKET_IP,packet_ip,,buffer,Packet data from first IP layer.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,43,Q_BASE_UPACKET,upacket,,ptr,Address where there is the packet data.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,44,Q_BASE_FILTER_STATE_CHANGE,filter_state_change,,filter_state,"When a filter's state changes, id and state of that filter.",0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,45,Q_BASE_FILTER_RULE_MATCHES,filter_rule_matches,,filter_state,When a filter is matched.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,35,Q_BASE_SESSION_END,session_end,,uint8,Triggered when the session is finished.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,46,Q_BASE_DECLASSIFIED,declassified,,uint32,"Attribute showing whether a declassification is happened in a packet, the raised value is the protocol id.",0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,47,Q_BASE_USER_HANDLE_PKT,user_handle_pkt,,ptr,User data associated to this session containing ctb_ppacket user_handle.,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,48,Q_BASE_SYS_PKT_HEADER,sys_pkt_header,,binary,A binary buffer container data inserted in the head of the real packet,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,49,Q_BASE_SYS_PKT_FOOTER,sys_pkt_footer,,binary,A binary buffer container data inserted in the tail of the real packet,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,59,Q_BASE_PROTOCOL_END,protocol_end,,parent,"Empty parent attribute for path_end, application_end_id, application_end and family_end.",0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,55,Q_BASE_PATH_END,path_end,,path,Contains the latest value for the attribute path,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,58,Q_BASE_APPLICATION_END,application_end,,string,Contains the latest value for the attribute application,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,56,Q_BASE_FAMILY_END,family_end,,string,Contains the latest value for the attribute family,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,57,Q_BASE_APPLICATION_ID_END,application_id_end,,uint32,Contains the latest value for the attribute application_id,0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,63,Q_BASE_SESSION_LEN,session_len,,uint64,"Contains the total length exchanged, in Bytes, over this session. This attribute data cannot be retreived in externalized versions.",0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,31,Q_BASE_CREATE_TIME,create_time,,timeval,Contains the timestamp of the first packet of the flow.,0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,64,Q_BASE_SPLIT,split,,ptr,"When a flow is split, address of the uapp_cnx that was associated to the current one",0,session_mod,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,66,Q_BASE_SESSION_UNIDIR,session_unidir,,uint8,Extracted when unidirectional traffic is detected.,0,session_fix,0 -3,Q_PROTO_BASE,Standard,base,Base virtual protocol,67,Q_BASE_MULTI_MATCH_PROTO_ID,multi_match_proto_id,,uint32,"When multiple pdata rules do match the same packet, the highest priority rule is classified. The protocol ids of the lesser priority rules are shown in deacreasing priority order through this protocol.",0,session_mod,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,1,Q_BGP_MESSAGE_ENTRY,message_entry,,parent,Parent entry for the attributes of a BGP message,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,2,Q_BGP_AS,as,,uint16,Autonomous System Identifier,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,3,Q_BGP_IDENTIFIER,identifier,,ip_addr,BGP Identifier of the sender,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,4,Q_BGP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,5,Q_BGP_HOLD_TIME,hold_time,,uint16,The number of seconds proposed by the sender for the value of the Hold Timer,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,6,Q_BGP_ERROR_CODE,error_code,,uint8,This attribute indicates the type of NOTIFICATION,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,7,Q_BGP_ERROR_SUBCODE,error_subcode,,uint8,This attribute provides more specific information about the nature of the reported error,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,36,Q_BGP_ERROR_NOTIFICATION_DATA,error_notification_data,,binary,Raw error data notification.,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,8,Q_BGP_PATH_ATTR_ENTRY,path_attr_entry,,parent,Parent entry for path attributes,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,9,Q_BGP_PATH_ATTR_TYPE,path_attr_type,,string_index,The code of the attribute type,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,24,Q_BGP_PATH_ATTR_VALUE_ENTRY,path_attr_value_entry,,parent,Parent entry for path_attr_value_... attributes,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,10,Q_BGP_PATH_ATTR_VALUE,path_attr_value,,binary,Content of the attribute,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,32,Q_BGP_PATH_ATTR_VALUE_LOCAL_PREF,path_attr_value_local_pref,,uint32,Local preference value,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,28,Q_BGP_PATH_ATTR_VALUE_AS_NUM,path_attr_value_as_num,,uint32,As number,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,29,Q_BGP_PATH_ATTR_VALUE_NEXT_HOP_IP,path_attr_value_next_hop_ip,,ip_addr,IP address of the next hop,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,11,Q_BGP_WITHDRAWN,withdrawn,,parent,Parent entry for the attributes withdrawn_prefix and withdrawn_prefix_len,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,12,Q_BGP_WITHDRAWN_PREFIX_LEN,withdrawn_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,13,Q_BGP_WITHDRAWN_PREFIX,withdrawn_prefix,,ip_addr,Contains Ip addresses Prefixes,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,14,Q_BGP_NLRI,nlri,,parent,Parent entry for the attributes nlri_prefix and nlri_prefix_len,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,15,Q_BGP_NLRI_PREFIX_LEN,nlri_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,16,Q_BGP_NLRI_PREFIX,nlri_prefix,,ip_addr,Contains IP addresses prefix,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,17,Q_BGP_AUTH_ENTRY,auth_entry,,parent,Parent entry for the attributes of the authentication,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,18,Q_BGP_AUTH_CODE,auth_code,,uint8,A code that indicates the type of authentication,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,19,Q_BGP_AUTH_MESSAGE,auth_message,,binary,The content of the authentication,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,20,Q_BGP_AFI,afi,,uint16,In a route refresh packet this field is an address family identifier.,0,session_mod,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,21,Q_BGP_SAFI,safi,,uint8,In a route refresh packet this field is a subsequent address family identifier.,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,792,Q_MPA_SIGNALIZATION_OVERRIDE,signalization_override,,uint8,Attribute used to specify whether the current session may provide incoming flows information or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,1,Q_BITTORRENT_TRACKER,tracker,,string,BitTorrent tracker URL.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,3,Q_BITTORRENT_FILE_HASH_RAW,file_hash_raw,,buffer,Content whose SHA1 hash is the file_hash ('info' section of the torrent file).,1,session_mod,1 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,4,Q_BITTORRENT_PEER_ID,peer_id,,binary,Unique ID containing information about the software and the version used.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,6,Q_BITTORRENT_CLIENT_VERSION,client_version,,string,Version of the software.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,8,Q_BITTORRENT_CANCELED_CHUNK,canceled_chunk,,parent,A piece of a canceled file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,9,Q_BITTORRENT_CANCELED_CHUNK_NUMBER,canceled_chunk_number,,uint32,Number of the canceled piece.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,10,Q_BITTORRENT_CANCELED_CHUNK_LENGTH,canceled_chunk_length,,uint32,Size of the canceled piece.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,11,Q_BITTORRENT_CANCELED_CHUNK_DATA_OFFSET,canceled_chunk_data_offset,,uint32,Offset of the canceled data.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,16,Q_BITTORRENT_TORRENT_FILENAME,torrent_filename,,string,Name of the torrent file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,17,Q_BITTORRENT_PIECE_LENGTH,piece_length,,uint32,"Chunk size, for the specified file.",0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,24,Q_BITTORRENT_PEER_SHARE_IP,peer_share_ip,,ip_addr,IP address used by a peer to share his files.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,29,Q_BITTORRENT_PEER_SHARE_IP6,peer_share_ip6,,ip6_addr,IPv6 address used by a peer to share his files.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,25,Q_BITTORRENT_PEER_SHARE_PORT,peer_share_port,,uint16,Port used by a peer to share his files.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,26,Q_BITTORRENT_PEER_SHARE_ID,peer_share_id,,string,ID used by a peer to share his files.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,23,Q_BITTORRENT_PEER_PORT,peer_port,x,string,Port used by a peer to share his files.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,20,Q_BITTORRENT_FILE_COMPLETED,file_completed,,string,Completed file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,19,Q_BITTORRENT_FILE_DOWNLOADED,file_downloaded,,string,Downloaded file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,21,Q_BITTORRENT_FILE_INCOMPLETE,file_incomplete,,string,Incomplete file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,22,Q_BITTORRENT_FILE_LEFT,file_left,,string,Left file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,18,Q_BITTORRENT_FILE_UPLOADED,file_uploaded,,string,Uploaded file.,0,session_mod,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,27,Q_BITTORRENT_FLOW_TYPE,flow_type,,string_index,Information about the flow encryption level.,0,session_fix,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,28,Q_BITTORRENT_CLASSIFICATION_TYPE,classification_type,,string,"How the protocol has been classified. Always returns Deterministic"" if the port list has not been set.""",0,session_fix,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,783,Q_MPA_VIDEO_UUID,video_uuid,,string,Universally unique identifier.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_prt,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each BSSAP message,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,530,Q_MPA_CONTENT,content,,string,Message content,0,session_mod,1 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,1,Q_BSSAP_TIMESTAMP,timestamp,,timeval,Message timestamp,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,3,Q_BSSAP_VALIDITY_PERIOD,validity_period,,string,Validity period for the message,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,Message receiver,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,4,Q_BSSAP_IMSI_RECEIVER,imsi_receiver,,string,International Mobile Subscriber Identity of the receiver,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,5,Q_BSSAP_IMEI_RECEIVER,imei_receiver,,string,International Mobile Equipment Identity of the receiver,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,6,Q_BSSAP_MSISDN_RECEIVER,msisdn_receiver,,string,Mobile Subscriber Integrated Services Digital Network Number of the receiver,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,Message sender,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,7,Q_BSSAP_IMSI_SENDER,imsi_sender,,string,International Mobile Subscriber Identity of the sender,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,8,Q_BSSAP_IMEI_SENDER,imei_sender,,string,International Mobile Equipment Identity of the sender,0,session_mod,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,9,Q_BSSAP_MSISDN_SENDER,msisdn_sender,,string,Mobile Subscriber Integrated Services Digital Network Number of the sender,0,session_mod,0 -16,Q_PROTO_BXML,Wap,bxml,WAP Binary XML,1,Q_BXML_VERSION,version,,string,Protocol version.,0,pkt,0 -16,Q_PROTO_BXML,Wap,bxml,WAP Binary XML,2,Q_BXML_PUBLIC_ID,public_id,,uint8,Public ID of the connection.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,1,Q_CDP_TTL,ttl,,uint8,"The Time-to-Live field indicates the amount of time, in seconds, that a receiver should retain the information contained in the CDP message.",0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,2,Q_CDP_DEVICE_ID,device_id,,string,Unique ID of the sending device.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,3,Q_CDP_ADDRESS,address,,ip_addr,List of network addresses assigned to the interface on which the CDP message was sent.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,4,Q_CDP_PORT_ID,port_id,,string,Unique port ID on which the CDP message was sent.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,5,Q_CDP_SOFTWARE_VERSION,software_version,,string,Version of the Cisco IOS running on the sending device.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,6,Q_CDP_PLATFORM,platform,,string,Name of the platform of the sending device.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,7,Q_CDP_PREFIX,prefix,,ip_net,List of network prefixes to which the sending device can forward IP packets.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,8,Q_CDP_VTP_MGMT_DOMAIN,VTP_mgmt_domain,,string,VTP management domain name-string to which the sending device belongs.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,9,Q_CDP_NATIVE_VLAN,native_vlan,,binary,The assumed VLAN for untagged packets on the interface which sent the CDP packet.,0,pkt,0 -18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,10,Q_CDP_DUPLEX,duplex,,binary,Duplex configuration of the interface which sent the CDP message.,0,pkt,0 -20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,1,Q_CHAP_CHALLENGE,challenge,,binary,Challenge sent by the peer initiating the authentication process.,0,session_mod,0 -20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,2,Q_CHAP_CHALLENGE_NAME,challenge_name,,string,Hostname of the peer initiating the authentication process.,0,session_mod,0 -20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,3,Q_CHAP_RESPONSE,response,,binary,Response to the challenge.,0,session_mod,0 -20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,4,Q_CHAP_RESPONSE_NAME,response_name,,string,Hostname of the peer responding to challenge.,0,session_mod,0 -20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,5,Q_CHAP_MESSAGE_TYPE,message_type,,string,Type of message sent.,0,session_mod,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session_fix,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current version installed on the host.,0,session_fix,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,1,Q_CHROME_UPDATE_PLUGIN,plugin,,parent,"Parent attribute which contains the attributes plugin_id, plugin_new_version and plugin_current_version.",0,session_fix,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,2,Q_CHROME_UPDATE_PLUGIN_ID,plugin_id,,string,Plugin Id for the updated plugin.,0,session_prt,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,3,Q_CHROME_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,New version number returned by the server for the plugin.,0,session_prt,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,4,Q_CHROME_UPDATE_PLUGIN_CURRENT_VERSION,plugin_current_version,,string,Plugin version number currently installed.,0,session_prt,0 -22,Q_PROTO_COTP,Network Service,cotp,Connection Oriented Transfer Protocol,1,Q_COTP_TPDU_CODE,tpdu_code,,uint8,TPDU (Transport Protocol Data Unit) code as defined by the ITU in the X.224 recommendations.,0,session_mod,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,1,Q_CUPS_PRINTER,printer,,string,URI addressing the CUPS printer.,0,session_mod,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,2,Q_CUPS_LOCATION,location,,string,Location of the Printer.,0,session_mod,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,3,Q_CUPS_INFORMATION,information,,string,Information on Printer.,0,session_mod,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,4,Q_CUPS_MODEL,model,,string,Printer model.,0,session_mod,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,535,Q_MPA_EMAIL,email,,string,"Parent entry, for fields belonging to the same email.",0,session_prt,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment - Remote Procedure Call,1,Q_DCERPC_SERVICE,service,,string,Service used.,0,session_mod,0 -26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment - Remote Procedure Call,2,Q_DCERPC_INTERFACE_UUID,interface_uuid,,string,ID of the interface.,0,session_mod,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Repository packet version.,0,session_mod,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Debian packet name.,0,session_mod,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,718,Q_MPA_PACKAGE,package,,parent,Debian packet.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,23,Q_DHCP_REQUEST,request,,parent,An empty parent for the other attributes. a request per dhcp packet.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,1,Q_DHCP_CIADDR,ciaddr,,ip_addr,Current client ip address.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,2,Q_DHCP_YIADDR,yiaddr,,ip_addr,New ip address attributed to the client.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,3,Q_DHCP_SIADDR,siaddr,,ip_addr,Ip address of next server (used when booting via a server).,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,4,Q_DHCP_GIADDR,giaddr,,ip_addr,Relay agent ip address (used when booting via a relay agent).,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,5,Q_DHCP_CHADDR,chaddr,,mac_addr,Client hardware address.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,6,Q_DHCP_SNAME,sname,,string,Server host name (optional).,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,7,Q_DHCP_MESSAGE_TYPE,message_type,,string_index,Type of the dhcp message.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,8,Q_DHCP_SUBNETMASK,subnetmask,,ip_addr,Subnet mask assigned to the client.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,9,Q_DHCP_ROUTER,router,,ip_addr,List of gateway's ip addresses.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,10,Q_DHCP_DNS_SERVER,dns_server,,ip_addr,List of dns server's ip addresses.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,11,Q_DHCP_BOOTFILENAME,bootfilename,,string,File name used when initializing,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,12,Q_DHCP_OPTION,option,,parent,An empty parent attribute,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,13,Q_DHCP_OPTION_TYPE,option_type,,uint8,Option type,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,14,Q_DHCP_OPTION_VALUE,option_value,,binary,Content or value of the option,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,15,Q_DHCP_AGENT,agent,,parent,A parent attribute for agent information,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,16,Q_DHCP_CIRCUIT_ID,circuit_id,,string,A suboption that contains the circuit identifier,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,20,Q_DHCP_REMOTE_ID,remote_id,,string,The remote agent,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,17,Q_DHCP_REMOTE_ID_TYPE,remote_id_type,,string,An suboption that contains the remote agent identifier.,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,18,Q_DHCP_REMOTE_ID_SUBTYPE,remote_id_subtype,,string,Subtype for the remote agent,0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,19,Q_DHCP_IP_LEASE_TIME,ip_lease_time,,uint32,"In a server reply (dhcpoffer), a dhcp server uses this option to specify the lease time it is willing to offer. the time is in seconds",0,session_mod,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,22,Q_DHCP_END_STATUS,end_status,,uint32,An event sent when dhcp session expires. it's equal to 1 when a release message was observed and 0 if not,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,25,Q_DIAMETER_ACCT_RECORD_NUMBER,acct_record_number,,uint32,Unique identifier for one record within a session,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,24,Q_DIAMETER_ACCT_RECORD_TYPE,acct_record_type,,uint32,Record type,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,23,Q_DIAMETER_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint64,Indicates how many octets have been sent to the port in the course of delivering this service,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,22,Q_DIAMETER_ACCT_INPUT_OCTETS,acct_input_octets,,uint64,Indicates how many octets have been received from the port over the course of this service being provided,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,21,Q_DIAMETER_ACCT_SUB_SESSION_ID,acct_sub_session_id,,uint64,Sub-session identifier,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,20,Q_DIAMETER_ACCT_MULTI_SESSION_ID,acct_multi_session_id,,string,Link between multiple accounting sessions,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,19,Q_DIAMETER_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,7,Q_DIAMETER_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,15,Q_DIAMETER_DESTINATION_HOST,destination_host,,string,Destination Diameter host for the current message,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,18,Q_DIAMETER_AUTH_REQUEST_TYPE,auth_request_type,,uint32,Requested authentication type,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,17,Q_DIAMETER_RESULT_CODE,result_code,,uint32,Indicates whether a particular Diameter request was completed successfully not,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,14,Q_DIAMETER_ORIGIN_HOST,origin_host,,string,Source Diameter host for the current message,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,6,Q_DIAMETER_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,11,Q_DIAMETER_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,10,Q_DIAMETER_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,5,Q_DIAMETER_FRAMED_IP,framed_ip,,string,IP address.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,13,Q_DIAMETER_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,16,Q_DIAMETER_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of the physical port of the NAS that is authenticating the user.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,9,Q_DIAMETER_NAS_PORT_ID,nas_port_id,,string,Indicates the physical port number of the NAS that is authenticating the user.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,8,Q_DIAMETER_NAS_IP,nas_ip,,string,IP address of the NAS originating the Access-Request,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,12,Q_DIAMETER_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,4,Q_DIAMETER_END_TO_END_ID,end_to_end_id,,uint32,Used to detect duplicate messages,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,3,Q_DIAMETER_HOP_BY_HOP_ID,hop_by_hop_id,,uint32,Used to match Diameter request and reply messages,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,2,Q_DIAMETER_APPLICATION_ID,application_id,,uint32,Identify which application the message is applicable for,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,1,Q_DIAMETER_COMMAND_CODE,command_code,,uint32,Command associated with the Diameter request,0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,26,Q_DIAMETER_COMMAND_FLAGS,command_flags,,uint8,"Bitfield which defines some attributes of a command on one byte as follows: [RPE.....] ('R'equest/answer, 'P'roxiable, 'E'rror).",0,session_mod,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,643,Q_MPA_REQUEST,request,,parent,A Diameter request.,0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,x,uint32,This attribute is deprecated,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,x,parent,This attribute is deprecated,0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,x,string,This attribute is deprecated,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),1,Q_DIRECTCONNECT_QUERY_WAY,query_way,,string,Way of the query.,0,session_mod,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),2,Q_DIRECTCONNECT_SEARCH_RESULT,search_result,,parent,The result of a query.,0,session_mod,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),3,Q_DIRECTCONNECT_SR_FILENAME,sr_filename,,string,The name of a file returned by a search query.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),4,Q_DIRECTCONNECT_SR_FILESIZE,sr_filesize,,string,The size of a file returned by a search query.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),5,Q_DIRECTCONNECT_SR_FILEHASH,sr_filehash,,string,The hash of a file returned by a search query.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,1,Q_DNS_DNS_ENTRY,dns_entry,,parent,"DNS entry, in a reply.",0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,18,Q_DNS_DNS_QUERY,dns_query,,parent,DNS query.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,581,Q_MPA_QUERY,query,,string,DNS Query sent.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,DNS Query type.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,2,Q_DNS_QDCOUNT,qdcount,,uint32,Number of queries.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,3,Q_DNS_ANCOUNT,ancount,,uint32,Number of answers.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,4,Q_DNS_NSCOUNT,nscount,,uint32,Number of answers in the 'authority' section.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,5,Q_DNS_ARCOUNT,arcount,,uint32,Number of additional answers.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,6,Q_DNS_TRANSACTION_ID,transaction_id,,uint32,DNS unique transaction ID.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,7,Q_DNS_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,8,Q_DNS_NAME,name,,string,Name of the request,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,9,Q_DNS_HOST,host,,string,Host name,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,10,Q_DNS_HOST_ADDR,host_addr,,ip_addr,IPV4 Host address,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,11,Q_DNS_HOST_ADDR6,host_addr6,,ip6_addr,IPV6 Host address,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,12,Q_DNS_REVERSE_ADDR,reverse_addr,,ip_addr,IP address returned to the PTR request.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,13,Q_DNS_REVERSE_ADDR6,reverse_addr6,,ip6_addr,IPv6 address returned to the PTR request.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,14,Q_DNS_HOST_TYPE,host_type,,string_index,DNS response type,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,15,Q_DNS_REPLY_CODE,reply_code,,string_index,Return Message,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,16,Q_DNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,17,Q_DNS_TTL,ttl,,uint32,Time (in seconds) a DNS information returned by the server will be kept in cache.,0,session_mod,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,67,Q_DNS_WEB_APPLICATION_INFO,web_application_info,,,"Structure containing metadata for classification of known HTTP-based web applications. These metadata are based on Type A (IPv4) DNS responses returned from the server. The ul3l4_addr_t structure contains the web application protocol path, classified using the requested host name, and the IPv4 address resolved by the server. The hostname lookup is performed on Q_HTTP_SERVER registered PDATA signatures only.",0,session_mod,0 -34,Q_PROTO_EBAY,Web,ebay,eBay.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -34,Q_PROTO_EBAY,Web,ebay,eBay.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -34,Q_PROTO_EBAY,Web,ebay,eBay.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -34,Q_PROTO_EBAY,Web,ebay,eBay.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,9,Q_EBUDDY_CONTACT_IM,contact_im,,string,Instant Messaging network associated to the contact,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,8,Q_EBUDDY_CONTACT_MESSAGE,contact_message,,string,User's contact IM personal message.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,7,Q_EBUDDY_CONTACT_BLOCKED,contact_blocked,,string,Specifies if the user has blocked this contact.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,6,Q_EBUDDY_CONTACT_NICKNAME,contact_nickname,,string,Contact's nickname.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,4,Q_EBUDDY_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,10,Q_EBUDDY_CHAT_IM,chat_im,,string,Instant Messaging network the message is being exchanged on.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,3,Q_EBUDDY_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,5,Q_EBUDDY_CLIENT_MESSAGE,client_message,,string,User's IM personal message.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,2,Q_EBUDDY_E_ACTION,e_action,,string,Action of the user.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,1,Q_EBUDDY_IM_NETWORK,im_network,,string,Name of the current instant messaging network used by the client.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session_prt,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session_prt,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0 -36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,1,Q_EIGRP_OPCODE,opcode,,string_index,Operation code (as string).,0,pkt,0 -36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,2,Q_EIGRP_OPCODEID,opcodeid,,uint8,Operation code.,0,pkt,0 -36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,3,Q_EIGRP_AS_NUMBER,as_number,,uint32,The Autonomous System identifier.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,1,Q_ETH_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,session_fix,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,2,Q_ETH_DST,dst,,mac_addr,Destination MAC address. Extracted only on the first packet of the session.,0,session_fix,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,11,Q_ETH_DST_NET,dst_net,,mac_addr,Destination MAC address.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,3,Q_ETH_SRC,src,,mac_addr,Source MAC address. Extracted only on the first packet of the session.,0,session_fix,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,12,Q_ETH_SRC_NET,src_net,,mac_addr,Source MAC address.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,4,Q_ETH_XCAST,xcast,,string_index,"Communication type (broadcast, multicast, unicast).",0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,5,Q_ETH_TRAILER,trailer,,binary,Data added to complete the Ethernet frame if required (padding bits).,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,6,Q_ETH_ADDRESS,address,,uint8,Matches a source or destination Ethernet address. To be used in a filter.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,7,Q_ETH_MANUF_SOURCE,manuf_source,,string_index,"Manufacturer of the network card, on the source side.",0,session_fix,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,8,Q_ETH_MANUF_DEST,manuf_dest,,string_index,"Manufacturer of the network card, on the destination side.",0,session_fix,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,10,Q_ETH_IGNORE_ENCAPSULATIONS,ignore_encapsulations,,string,"Ignoring a MPLS, 8021Q or GRE tunnel.",0,pkt,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,2,Q_ETSI_LI_LIID,liid,,string,Lawful Interception Identifier,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,3,Q_ETSI_LI_AUTHORIZATION_COUNTRY_CODE,authorization_country_code,,string,Country code which has the authorization,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,4,Q_ETSI_LI_COMMUNICATION_ID,communication_id,,parent,"Parent attribute which contains network_id, communication_id_number and delivery_country_code.",0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,5,Q_ETSI_LI_NETWORK_ID,network_id,,parent,Network Identifier.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,6,Q_ETSI_LI_OPERATOR_ID,operator_id,,string,Operator Identifier.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,7,Q_ETSI_LI_NETWORK_ELEMENT_ID,network_element_id,,string,Network element identifier.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,8,Q_ETSI_LI_ETSI_671_NEI,etsi_671_nei,,string,Network element identifier.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,9,Q_ETSI_LI_COMMUNICATION_ID_NUMBER,communication_id_number,,uint32,Communication Identifier Number.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,10,Q_ETSI_LI_DELIVERY_COUNTRY_CODE,delivery_country_code,,string,Delivery Country Code.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,11,Q_ETSI_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,12,Q_ETSI_LI_TIME_STAMP,time_stamp,,string,Timestamp.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,17,Q_ETSI_LI_MICROSECOND_TIME_STAMP_TEMP,microsecond_time_stamp_temp,,parent,The microSecondTimeStampTemp field may be used to contain timestamp in second and microsecond.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,18,Q_ETSI_LI_SECOND,second,,uint64,The field contains the timestamp in seconds.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,19,Q_ETSI_LI_MICROSECOND,microsecond,,uint32,The field contains the timestamp in microseconds.,0,session_mod,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,16,Q_ETSI_LI_TIME_STAMP_QUALIFIER,time_stamp_qualifier,,string,The timeStampQualifier field may be used to indicate what time the timestamp represents.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,552,Q_MPA_MESSAGE,message,,string,Instant message content.,0,session_prt,1 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,string,Whether or not the access was made through a mobile device.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,32,Q_FACEBOOK_APPLICATION_ACTION,application_action,x,string,(Deprecated) Indicates the action executed by the user.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,31,Q_FACEBOOK_APPLICATION_NAME,application_name,x,string,(Deprecated) Name of the application,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,30,Q_FACEBOOK_APPLICATION,application,x,parent,(Deprecated) Parent for all attributes related to facebook applications.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,28,Q_FACEBOOK_FEED_TEXT,feed_text,,string,feed text.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,27,Q_FACEBOOK_FEED_LIKE,feed_like,,uint32,Number of time the feed has been liked.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,26,Q_FACEBOOK_FEED_TYPE,feed_type,,string,Type of the feed.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,25,Q_FACEBOOK_FEED,feed,,parent,"Parent for all attributes related to facebook feeds. Currently, only wall-to-wall feeds are extracted.",0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,23,Q_FACEBOOK_SHARE_TEXT,share_text,,string,Text of the share message,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,24,Q_FACEBOOK_SHARE_WITH,share_with,,string,Who the share message is sent to.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,22,Q_FACEBOOK_SHARE,share,,parent,Parent for all attributes related to sharing.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,Parent for all attributes related tu user contacts.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,19,Q_FACEBOOK_COMMENT,comment,,string,Text of the comment.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,18,Q_FACEBOOK_STATUS_UPDATE,status_update,,string,Status update text.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,29,Q_FACEBOOK_LOCATION,location,,string,Location shared,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,17,Q_FACEBOOK_PROFILE_VALUE,profile_value,,string,Value of a profile entry,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,16,Q_FACEBOOK_PROFILE_NAME,profile_name,,string,Name of a profile entry,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,15,Q_FACEBOOK_PROFILE_ENTRY,profile_entry,,parent,Parent for all attributes related to facebook profile.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,14,Q_FACEBOOK_RECEIVER_SEX,receiver_sex,,string,Instant message recipient gender.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,5,Q_FACEBOOK_RECEIVER_UID,receiver_uid,,string,Instant message recipient ID.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,585,Q_MPA_RECEIVER,receiver,,string,Instant message recipient name.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,13,Q_FACEBOOK_SENDER_SEX,sender_sex,,string,Instant message sender gender.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the message sender.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,4,Q_FACEBOOK_SENDER_UID,sender_uid,,string,Instant message sender ID.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,553,Q_MPA_MESSAGE_ID,message_id,,string,Instant message ID.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,661,Q_MPA_CLIENT_TIME,client_time,,string,Instant message client timestamp.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,525,Q_MPA_CHAT,chat,,parent,Parent for all attributes related to instant messages.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,12,Q_FACEBOOK_HIGHSCHOOL,highschool,x,string,"(deprecated, see profile_entry) Name of highschool.",0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,11,Q_FACEBOOK_COLLEGE,college,x,string,"(deprecated, see profile_entry) Name of college.",0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,10,Q_FACEBOOK_EMPLOYER,employer,x,string,"(deprecated, see profile_entry) Name of employer.",0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,662,Q_MPA_SEX,sex,,string,User gender.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,7,Q_FACEBOOK_UID,uid,,string,Generic user ID.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,9,Q_FACEBOOK_LASTNAME,lastname,,string,User family name,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,8,Q_FACEBOOK_FIRSTNAME,firstname,,string,User name,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,3,Q_FACEBOOK_APPS_APPLICATION_ACTION,application_action,,string,Indicates the action executed by the user.,0,session_mod,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,2,Q_FACEBOOK_APPS_APPLICATION_NAME,application_name,,string,Name of the application.,0,session_mod,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,1,Q_FACEBOOK_APPS_APPLICATION,application,,parent,Parent for all attributes related to facebook applications.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,677,Q_MPA_CONTACT_UID,contact_uid,,string,The facebook id of a contact.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Receiver ID.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,741,Q_MPA_THREAD_ID,thread_id,,string,Identifies messages belonging to a series of replies back and forth pertaining to a certain message.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_prt,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is re-evaluated every 5 seconds. This attribute is extracted only when the service changes.,0,session_prt,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the duration of it in seconds",0,session_prt,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,3,Q_FIREFOX_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,Plugin version after update.,0,session_mod,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,2,Q_FIREFOX_UPDATE_PLUGIN_NAME,plugin_name,,string,Name of the plugin.,0,session_mod,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,1,Q_FIREFOX_UPDATE_PLUGIN,plugin,,parent,Parent for all attributes related to plugins.,0,session_mod,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,703,Q_MPA_NEW_VERSION,new_version,,string,Browser version after update.,0,session_mod,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Browser version before update.,0,session_mod,0 -550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash Plugin Update,703,Q_MPA_NEW_VERSION,new_version,,string,"New version number, as returned by Adobe Web Server.",0,session_mod,0 -550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash Plugin Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current flash-plugin version number installed on the client.,0,session_mod,0 -568,Q_PROTO_FREEBSD_UPDATE,Web,freebsd_update,FreeBSD Updates,1,Q_FREEBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,8,Q_FTP_COMMAND,command,,parent,Parent attribute grouping meta data extracted from FTP protocol.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,A FTP request.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,555,Q_MPA_METHOD,method,,string,Contains the FTP command sent.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,10,Q_FTP_METHOD_CONTENT,method_content,,string,Method parameter,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,1,Q_FTP_DATA_PORT,data_port,,uint16,Data connection TCP port.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,11,Q_FTP_DATA_PORT_START_OFFSET,data_port_start_offset,,uint32,Offset to the first FTP port byte given in the PORT command.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,12,Q_FTP_DATA_PORT_END_OFFSET,data_port_end_offset,,uint32,"Offset to the first byte which is not part of the TCP port value, given in the PORT command.",0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,2,Q_FTP_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,3,Q_FTP_OFFSET,offset,,uint32,Indicates the start offset of the file transfer.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,531,Q_MPA_CONTENT_TYPE,content_type,,string,Indicates the content type of transferred file.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,First line of the server banner.,0,session_fix,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,4,Q_FTP_RETURN_MSG,return_msg,,parent,"Parent attribute, containing response from server",0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,5,Q_FTP_RETURN_CODE,return_code,,uint16,Code of server's response.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,6,Q_FTP_RETURN_CONTENT,return_content,,string,Message of server's response.,0,session_mod,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,7,Q_FTP_TRANSFER_DURATION,transfer_duration,,timeval,Elapsed time (in seconds) between the begining of a transfer (ftp code 150) and the first packet signaling the end with succes of the transfer (ftp code 226),0,session_fix,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,9,Q_FTP_INDEX,index,,uint32,Identifier of the request and response in a FTP flow.,0,session_fix,0 -46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -48,Q_PROTO_GARP,Application Service,garp,Generic Attribute Registration Protocol,1,Q_GARP_PROTOCOL,protocol,,string_index,Application used (GVRP or GMRP).,0,pkt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,552,Q_MPA_MESSAGE,message,,parent,GIOP message parent structure.,0,session_mod,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,608,Q_MPA_VERSION,version,,string,Current GIOP version.,0,session_prt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,1,Q_GIOP_IOR_TYPE_ID,ior_type_id,,string,IOR object's repository id.,0,session_prt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,3,Q_GIOP_MESSAGE_TYPE,message_type,,string,GIOP message type.,0,session_prt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,2,Q_GIOP_REQUEST_OPERATION,request_operation,,string,Name of the request sent to the server.,0,session_prt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,4,Q_GIOP_REQUEST_ID,request_id,,uint32,ID used to associate a reply message with a request message.,0,session_prt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,5,Q_GIOP_OBJECT_KEY,object_key,,buffer,Identifies the object should receive the message.,0,session_prt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,7,Q_GMAIL_REAL_SENDER_DOMAIN,real_sender_domain,,string,Domain of the email sender.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,8,Q_GMAIL_REAL_SENDER_MSGID,real_sender_msgid,,string,Email identifier.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,11,Q_GMAIL_NEXT_ATTACH_ID,next_attach_id,,string,New value for the attach_id of an attachment.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,10,Q_GMAIL_THUMBNAIL,thumbnail,,uint32,Indicates whether this attachment is an image thumbnail.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,1,Q_GMAIL_VERSION,version,,string,Gmail version used.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,2,Q_GMAIL_ACCESS_INFO,access_info,,parent,Contains Gmail access data.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,5,Q_GMAIL_LAST_ACTIVITY,last_activity,,string,Time elapsed since last account activity.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,6,Q_GMAIL_LAST_ACTIVITY_TIMESTAMP,last_activity_timestamp,,timeval,Last account activity timestamp.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,3,Q_GMAIL_CURRENT_IP_ADDRESS,current_ip_address,,ip_addr,IP address of the logged user.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,4,Q_GMAIL_OTHER_IP_ADDRESS,other_ip_address,,ip_addr,IP address of the other logged user.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,9,Q_GMAIL_SAVED,saved,,string_index,Indicates whether the draft have been saved automatically(1) or manually(2).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,677,Q_MPA_CONTACT_UID,contact_uid,,string,The GMAIL unique identifier for a contact.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_fix,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,2,Q_GNUTELLA_SERVER,server,,string,Name of the server from which the file is downloaded.,0,session_fix,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,4,Q_GNUTELLA_FILE_ED2K,file_ed2k,,string,Hash ed2k of the downloaded file.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,5,Q_GNUTELLA_FILE_SHA1,file_sha1,,string,Hash sha1 of the downloaded file.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,6,Q_GNUTELLA_FILE_MD5,file_md5,,string,Hash md5 of the downloaded file.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,10,Q_GNUTELLA_FILE_CHUNK_DATA,file_chunk_data,,parent,Information about downloaded data.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint16,Number of the transferred piece.,0,session_prt,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,21,Q_GNUTELLA_PEER,peer,,parent,Parent attribute containing some Gnutella Peer connection metadata. This metadata can be used to classify Gnutella connections targetted to this machine.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,19,Q_GNUTELLA_PEER_ADDR,peer_addr,,ip_addr,Gnutella peer's IPv4 address.,0,session_mod,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,20,Q_GNUTELLA_PEER_PORT,peer_port,,,Gnutella peer's listenning port number.,0,session_mod,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -54,Q_PROTO_GOOGLE,Web,google,Google.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,1,Q_GOOGLE_ADS_GOOGLE_AD,google_ad,,parent,Parent attribute grouping ad information.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,2,Q_GOOGLE_ADS_AD_CHANNEL,ad_channel,,string,'channel' ad attribute.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,3,Q_GOOGLE_ADS_AD_URL,ad_url,,string,'url' ad attribute.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,4,Q_GOOGLE_ADS_AD_URL_FULL,ad_url_full,,string,Complete ad URL.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,5,Q_GOOGLE_ADS_AD_VISIBLE_URL,ad_visible_url,,string,'url' visible ad attribute.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,12,Q_GOOGLE_ADS_AD_PAGE,ad_page,,string,Page on which the ad is displayed.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,6,Q_GOOGLE_ADS_AD_CLIENT,ad_client,,string,Buyer of the ad.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,7,Q_GOOGLE_ADS_AD_TEXT,ad_text,,string,Ad text description.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,8,Q_GOOGLE_ADS_AD_TYPE,ad_type,,string,Ad type.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,11,Q_GOOGLE_ADS_AD_TITLE,ad_title,,string,Ad title.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,9,Q_GOOGLE_ADS_AD_BID_TYPE,ad_bid_type,,string,'bid_type' ad attribute.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,13,Q_GOOGLE_ADS_AD_STATUS,ad_status,,string,Indicates whether the ad has been displayed or clicked.,0,session_mod,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,10,Q_GOOGLE_ADS_AD_TARGETING_TYPE,ad_targeting_type,,string,'targeting_type' ad attribute.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,1,Q_GOOGLE_EARTH_SEARCH,search,,parent,Place researched.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,2,Q_GOOGLE_EARTH_NEAR,near,,parent,Location being near place researched.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,9,Q_GOOGLE_EARTH_NEAR_TEXT,near_text,,string,Location being near place researched.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,3,Q_GOOGLE_EARTH_NEAR_RAW,near_raw,,string,Location being near place researched as indicated in the URL.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,4,Q_GOOGLE_EARTH_ITINERARY,itinerary,,parent,Itinerary researched.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,5,Q_GOOGLE_EARTH_START_ADDR,start_addr,,parent,Departure point .,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,6,Q_GOOGLE_EARTH_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,11,Q_GOOGLE_EARTH_START_ADDR_TEXT,start_addr_text,,string,Encoded departure point .,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,7,Q_GOOGLE_EARTH_END_ADDR,end_addr,,parent,Arrival point.,0,session_mod,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,8,Q_GOOGLE_EARTH_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,10,Q_GOOGLE_EARTH_END_ADDR_TEXT,end_addr_text,,string,Encoded arrival point.,0,session_prt,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,3,Q_GOOGLE_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,1,Q_GOOGLE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,5,Q_GOOGLE_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,6,Q_GOOGLE_GROUPS_ALIAS,alias,,string,Name of the email sender.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,4,Q_GOOGLE_GROUPS_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session_mod,1 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,1,Q_GOOGLE_MAPS_ITINERARY,itinerary,,parent,Itinerary researched.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,2,Q_GOOGLE_MAPS_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session_prt,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,3,Q_GOOGLE_MAPS_START_ADDR,start_addr,,string,Encoded departure point .,0,session_prt,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,4,Q_GOOGLE_MAPS_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session_prt,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,5,Q_GOOGLE_MAPS_END_ADDR,end_addr,,string,Encoded arrival point.,0,session_prt,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,6,Q_GOOGLE_MAPS_SPACE,space,,parent,Parent attribut containing the geographic coordinates of the zone currently displayed by the user.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,7,Q_GOOGLE_MAPS_ZOOM,zoom,,string,Zoom level of the map.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,8,Q_GOOGLE_MAPS_SOUTH,south,,string,Latitude coordinate of South edge of the first tile that was loaded by the webpage.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,9,Q_GOOGLE_MAPS_EAST,east,,string,Longitude coordinate of East edge of the first tile that was loaded by the webpage.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,10,Q_GOOGLE_MAPS_WEST,west,,string,Longitude coordinate of West edge of the first tile that was loaded by the webpage.,0,session_mod,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,11,Q_GOOGLE_MAPS_NORTH,north,,string,Latitude coordinate of North edge of the first tile that was loaded by the webpage.,0,session_mod,0 -1122,Q_PROTO_GOOGLE_PLAY,Application Service,google_play,Google Play,1,Q_GOOGLE_PLAY_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,1,Q_GRE_PROTOCOL,protocol,,string,Identifier (string) of the upper layer protocol.,0,pkt,0 -58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,2,Q_GRE_WRONG_CRC,wrong_crc,,uint16,It is a flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 -58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,3,Q_GRE_PROTOCOL_ID,protocol_id,,uint16,Id of the upper layer protocol.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,1,Q_GTP_VERSION,version,,uint8,Protocol Version (0 or 1).,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,2,Q_GTP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,3,Q_GTP_MESSAGE_CODE,message_code,,uint8,Message type,0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,4,Q_GTP_FLOW_LABEL,flow_label,,uint16,"Unique ID of a GTP flow, available in version 0.",0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,5,Q_GTP_SEQ,seq,,uint16,Packet sequence number.,0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,6,Q_GTP_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,7,Q_GTP_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,8,Q_GTP_MS_ADDRESS,ms_address,,ip_addr,IP address assigned to the mobile station.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,43,Q_GTP_MS_ADDRESS_PEER,ms_address_peer,,ip_addr,IP address assigned to the mobile station on the peer half-session.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,65,Q_GTP_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,66,Q_GTP_MS_ADDRESS_V6_PEER,ms_address_v6_peer,,ip6_addr,IPv6 address assigned to the mobile station on the peer half-session.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,39,Q_GTP_GSN,gsn,,parent,"GSN IP address, with a type and an address.",0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,9,Q_GTP_GSN_ADDRESS,gsn_address,,ip_addr,GSN IP address.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,45,Q_GTP_GSN_ADDRESS_CONTROL,gsn_address_control,,ip_addr,GSN Control IP address.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,46,Q_GTP_GSN_ADDRESS_DATA,gsn_address_data,,ip_addr,GSN Data IP address.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,67,Q_GTP_GSN_ADDRESS_V6,gsn_address_v6,,ip6_addr,GSN IPv6 address.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,68,Q_GTP_GSN_ADDRESS_V6_CONTROL,gsn_address_v6_control,,ip6_addr,GSN Control IPv6 address.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,69,Q_GTP_GSN_ADDRESS_V6_DATA,gsn_address_v6_data,,ip6_addr,GSN DataIPv6 address.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,38,Q_GTP_GSN_TYPE,gsn_type,,string,GSN address type.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,10,Q_GTP_ACCESS_POINT,access_point,,string,Access point name.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,11,Q_GTP_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,12,Q_GTP_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,13,Q_GTP_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,14,Q_GTP_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,15,Q_GTP_SESSION_TIME,session_time,,timeval,GTP session duration (time between create context and delete context),0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,16,Q_GTP_RAI,rai,,string,Represents the Routing Area Identity,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,17,Q_GTP_NSAPI,nsapi,,uint8,Network Service Access Point Identifier is used to identify a PDP context belonging to a specific MM context IP,0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,18,Q_GTP_MS_ADDR_TYPE,ms_addr_type,x,string_index,Type of the IP address assigned to the mobile station. This attribute is deprecated.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,19,Q_GTP_MS_ADDR_ORG,ms_addr_org,x,string_index,Organization owning the IP address assigned to the mobile station. This attribute is deprecated.,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,20,Q_GTP_START_TIME,start_time,,timeval,Start date of the call,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,21,Q_GTP_STOP_TIME,stop_time,,timeval,End date of the call,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,22,Q_GTP_TEID_DATA,teid_data,,uint32,TEID data (Tunnel Endpoint Identifier),0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,23,Q_GTP_TEID_CONTROL,teid_control,,uint32,TEID control plane (Tunnel Endpoint Identifier),0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,24,Q_GTP_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,37,Q_GTP_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,36,Q_GTP_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,44,Q_GTP_QOS_RAW,qos_raw,,binary,This field contains quality of service data.,0,session_prt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,26,Q_GTP_QOS_DELAY,qos_delay,,uint32,Specifies the quality of service delay class.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,27,Q_GTP_QOS_RELIABILITY,qos_reliability,,uint32,Specifies the quality of service reliability class.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,28,Q_GTP_QOS_PEAK,qos_peak,,uint32,Specifies the quality of service peak throughput.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,29,Q_GTP_QOS_PRECEDENCE,qos_precedence,,uint32,Specifies the quality of service precedence class.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,30,Q_GTP_QOS_MEAN,qos_mean,,uint32,Specifies the quality of service mean throughput.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,31,Q_GTP_QOS_ALLOC_RET_PRIO,qos_alloc_ret_prio,,uint32,Specifies the Allocation/Retention priority.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,40,Q_GTP_QOS_MAX_UPLINK,qos_max_uplink,,uint32,Specifies the maximum uplink throughput.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,41,Q_GTP_QOS_MAX_DOWNLINK,qos_max_downlink,,uint32,Specifies the maximum downlink throughput.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,32,Q_GTP_LOCATION_TYPE,location_type,,uint32,Terminal Location Type,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,33,Q_GTP_LOCATION,location,,string,Terminal Location,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,42,Q_GTP_LOCATION_RAW,location_raw,,binary,Terminal location in raw binary representation.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,55,Q_GTP_LOCATION_MCC,location_mcc,,string,Mobile Country Code (MCC) is part of the IMSI number with uniquely identifies a particular subscriber.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,56,Q_GTP_LOCATION_MNC,location_mnc,,string,A Mobile Network Code (MNC) is used in combination with a Mobile Country Code to uniquely identify a mobile phone.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,57,Q_GTP_LOCATION_LAC,location_lac,,string,A Location Area Code (LAC) is a unique number given to a set of base stations that are grouped together.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,58,Q_GTP_LOCATION_CI,location_ci,,string,A Cell Identity (CI) is used to uniquely identify a cell inside a location area.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,59,Q_GTP_LOCATION_SAC,location_sac,,string,A Service Area Code (SAC) is used to uniquely identify an area consisting of one or more cells belonging to the same location area.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,60,Q_GTP_LOCATION_RAI,location_rai,,string,A Routing Area Identification (RAI) is used to uniquely identify a routing area.,0,session_fix,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,34,Q_GTP_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session_mod,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,35,Q_GTP_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,1,Q_GTPV2_VERSION,version,,uint8,Protocol Version (2).,0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,2,Q_GTPV2_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,3,Q_GTPV2_MESSAGE_CODE,message_code,,uint8,Message type.,0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,552,Q_MPA_MESSAGE,message,,buffer,Binary content of the message.,0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,4,Q_GTPV2_SEQ,seq,,uint32,Packet sequence number.,0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,5,Q_GTPV2_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,52,Q_GTPV2_EPS_BEARER_ID,eps_bearer_id,,uint8,Uniquely identifies traffic flow that receives a common QoS treatment.,0,session_prt,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,6,Q_GTPV2_ACCESS_POINT,access_point,,string,Access point name.,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,7,Q_GTPV2_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session_fix,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,8,Q_GTPV2_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session_fix,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,9,Q_GTPV2_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session_fix,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,10,Q_GTPV2_GUTI,guti,,binary,Globally Unique Temporary UE Identity,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,11,Q_GTPV2_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,12,Q_GTPV2_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,13,Q_GTPV2_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,14,Q_GTPV2_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,15,Q_GTPV2_MS_ADDRESS,ms_address,,ip_addr,IPv4 address assigned to the mobile station.,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,55,Q_GTPV2_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,16,Q_GTPV2_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,17,Q_GTPV2_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,18,Q_GTPV2_START_TIME,start_time,,timeval,Start date of the call,0,session_fix,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,53,Q_GTPV2_STOP_TIME,stop_time,,timeval,End date of the call,0,session_fix,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,54,Q_GTPV2_SESSION_DURATION,session_duration,,timeval,Call duration - not extracted,0,session_fix,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,19,Q_GTPV2_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,20,Q_GTPV2_S1U_ENODEB_GTPU_TEID,s1u_enodeb_gtpu_teid,,uint32,S1-U eNodeB GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,21,Q_GTPV2_S1U_SGW_GTPU_TEID,s1u_sgw_gtpu_teid,,uint32,S1-U SGW GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,22,Q_GTPV2_S5_S8_SGW_GTPU_TEID,s5_s8_sgw_gtpu_teid,,uint32,S5/S8 SGW GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,23,Q_GTPV2_S5_S8_PGW_GTPU_TEID,s5_s8_pgw_gtpu_teid,,uint32,S5/S8 PGW GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,24,Q_GTPV2_S5_S8_SGW_GTPC_TEID,s5_s8_sgw_gtpc_teid,,uint32,S5/S8 SGW GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,25,Q_GTPV2_S5_S8_PGW_GTPC_TEID,s5_s8_pgw_gtpc_teid,,uint32,S5/S8 PGW GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,26,Q_GTPV2_S11_MME_GTPC_TEID,s11_mme_gtpc_teid,,uint32,S11 MME GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,27,Q_GTPV2_S11_S4_SGW_GTPC_TEID,s11_s4_sgw_gtpc_teid,,uint32,S11/S4 SGW GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,28,Q_GTPV2_S10_MME_GTPC_TEID,s10_mme_gtpc_teid,,uint32,S10 MME GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,29,Q_GTPV2_S3_MME_GTPC_TEID,s3_mme_gtpc_teid,,uint32,S3 MME GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,30,Q_GTPV2_S3_SGSN_GTPC_TEID,s3_sgsn_gtpc_teid,,uint32,S3 SGSN GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,31,Q_GTPV2_S4_SGW_GTPU_TEID,s4_sgw_gtpu_teid,,uint32,S4 SGW GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,32,Q_GTPV2_S4_SGSN_GTPU_TEID,s4_sgsn_gtpu_teid,,uint32,S4 SGSN GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,33,Q_GTPV2_S4_SGSN_GTPC_TEID,s4_sgsn_gtpc_teid,,uint32,S4 SGSN GTP-C interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,34,Q_GTPV2_S12_RNC_GTPU_TEID,s12_rnc_gtpu_teid,,uint32,S12 RNC GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,35,Q_GTPV2_S12_SGW_GTPU_TEID,s12_sgw_gtpu_teid,,uint32,SGW RNC GTP-U interface TEID,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,36,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS,s1u_enodeb_gtpu_address,,ip_addr,S1-U eNodeB GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,37,Q_GTPV2_S1U_SGW_GTPU_ADDRESS,s1u_sgw_gtpu_address,,ip_addr,S1-U SGW GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,38,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS,s5_s8_sgw_gtpu_address,,ip_addr,S5/S8 SGW GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,39,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS,s5_s8_pgw_gtpu_address,,ip_addr,S5/S8 PGW GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,40,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS,s5_s8_sgw_gtpc_address,,ip_addr,S5/S8 SGW GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,41,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS,s5_s8_pgw_gtpc_address,,ip_addr,S5/S8 PGW GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,42,Q_GTPV2_S11_MME_GTPC_ADDRESS,s11_mme_gtpc_address,,ip_addr,S11 MME GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,43,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS,s11_s4_sgw_gtpc_address,,ip_addr,S11/S4 SGW GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,44,Q_GTPV2_S10_MME_GTPC_ADDRESS,s10_mme_gtpc_address,,ip_addr,S10 MME GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,45,Q_GTPV2_S3_MME_GTPC_ADDRESS,s3_mme_gtpc_address,,ip_addr,S3 MME GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,46,Q_GTPV2_S3_SGSN_GTPC_ADDRESS,s3_sgsn_gtpc_address,,ip_addr,S3 SGSN GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,47,Q_GTPV2_S4_SGW_GTPU_ADDRESS,s4_sgw_gtpu_address,,ip_addr,S4 SGW GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,48,Q_GTPV2_S4_SGSN_GTPU_ADDRESS,s4_sgsn_gtpu_address,,ip_addr,S4 SGSN GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,49,Q_GTPV2_S4_SGSN_GTPC_ADDRESS,s4_sgsn_gtpc_address,,ip_addr,S4 SGSN GTP-C interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,50,Q_GTPV2_S12_RNC_GTPU_ADDRESS,s12_rnc_gtpu_address,,ip_addr,S12 RNC GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,51,Q_GTPV2_S12_SGW_GTPU_ADDRESS,s12_sgw_gtpu_address,,ip_addr,SGW RNC GTP-U interface IP address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,56,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS_V6,s1u_enodeb_gtpu_address_v6,,ip6_addr,S1-U eNodeB GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,57,Q_GTPV2_S1U_SGW_GTPU_ADDRESS_V6,s1u_sgw_gtpu_address_v6,,ip6_addr,S1-U SGW GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,58,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS_V6,s5_s8_sgw_gtpu_address_v6,,ip6_addr,S5/S8 SGW GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,59,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS_V6,s5_s8_pgw_gtpu_address_v6,,ip6_addr,S5/S8 PGW GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,60,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS_V6,s5_s8_sgw_gtpc_address_v6,,ip6_addr,S5/S8 SGW GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,61,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS_V6,s5_s8_pgw_gtpc_address_v6,,ip6_addr,S5/S8 PGW GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,62,Q_GTPV2_S11_MME_GTPC_ADDRESS_V6,s11_mme_gtpc_address_v6,,ip6_addr,S11 MME GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,63,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS_V6,s11_s4_sgw_gtpc_address_v6,,ip6_addr,S11/S4 SGW GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,64,Q_GTPV2_S10_MME_GTPC_ADDRESS_V6,s10_mme_gtpc_address_v6,,ip6_addr,S10 MME GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,65,Q_GTPV2_S3_MME_GTPC_ADDRESS_V6,s3_mme_gtpc_address_v6,,ip6_addr,S3 MME GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,66,Q_GTPV2_S3_SGSN_GTPC_ADDRESS_V6,s3_sgsn_gtpc_address_v6,,ip6_addr,S3 SGSN GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,67,Q_GTPV2_S4_SGW_GTPU_ADDRESS_V6,s4_sgw_gtpu_address_v6,,ip6_addr,S4 SGW GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,68,Q_GTPV2_S4_SGSN_GTPU_ADDRESS_V6,s4_sgsn_gtpu_address_v6,,ip6_addr,S4 SGSN GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,69,Q_GTPV2_S4_SGSN_GTPC_ADDRESS_V6,s4_sgsn_gtpc_address_v6,,ip6_addr,S4 SGSN GTP-C interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,70,Q_GTPV2_S12_RNC_GTPU_ADDRESS_V6,s12_rnc_gtpu_address_v6,,ip6_addr,S12 RNC GTP-U interface IPv6 address,0,session_mod,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,71,Q_GTPV2_S12_SGW_GTPU_ADDRESS_V6,s12_sgw_gtpu_address_v6,,ip6_addr,SGW RNC GTP-U interface IPv6 address,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,1,Q_H225_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,3,Q_H225_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,5,Q_H225_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,6,Q_H225_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the codec that can be used for audio transmission,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,555,Q_MPA_METHOD,method,,string,The command,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,7,Q_H225_H245_ADDR,h245_addr,,ip_addr,Address used by h245 session.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,14,Q_H225_H245_ADDR_V6,h245_addr_v6,,ip6_addr,IP address for the H245 request embedded in H225 (this attribute is not extracted).,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,8,Q_H225_H245_PORT,h245_port,,uint16,Port used by h245 session.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,9,Q_H225_REQUEST_CALL_ID,request_call_id,,string,Call's id in the message.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,10,Q_H225_REQUEST_CALLER,request_caller,,string,Contains the identity (or the phone number) of the initiator in the message,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,11,Q_H225_REQUEST_CALLEE,request_callee,,string,Contains the identity (or the phone number) of the called party in the message.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,12,Q_H225_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,13,Q_H225_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,730,Q_MPA_AUDIO_DATA,audio_data,,string,Encoding can be used in audio flow.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,,ip6_addr,IPv6 address used for a rtcp channel (this attribute is not extracted).,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,745,Q_MPA_MEDIA_CHANNEL_ADDR_V6,media_channel_addr_v6,,ip6_addr,IPv6 address used for a rtp channel (this attribute is not extracted).,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session_prt,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,15,Q_H225_H245_CONTROL,h245_control,,parent,Parent attribute containing an H245 item.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,16,Q_H225_H245_REQUEST,h245_request,,parent,Contains message information for H245.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,17,Q_H225_H245_METHOD,h245_method,,string,The command for a H245 message.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,18,Q_H225_LANGUAGE,language,,string,Used language.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,19,Q_H225_PRODUCT_ID,product_id,,string,H225 product component identifier.,0,session_mod,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,608,Q_MPA_VERSION,version,,string,Version of the H225 VoIP client software.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivaluated attribute that contains the codec that can be used for audio transmission,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,555,Q_MPA_METHOD,method,,string,The command,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session_prt,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session_prt,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,x,ip6_addr,IPv6 address used for a rtcp channel (this attribute is no longer extracted).,0,session_prt,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session_prt,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session_mod,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session_prt,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session_prt,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,2,Q_H248_BINARY_TRANSACTION,transaction,,parent,Parent attribute including transaction elements,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,1,Q_H248_BINARY_CONTEXT_ID,context_id,,uint32,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,3,Q_H248_BINARY_ACTION,action,,string,"The action designates the command that is executed during the transaction. The coommand name is postfixed by Req if the transaction is a request, by Reply if the transaction is a reply",0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,4,Q_H248_BINARY_FROM_IP,from_ip,,ip_addr,Source IPv4 address,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,5,Q_H248_BINARY_FROM_IPV6,from_ipv6,,ip6_addr,Source IPv6 address,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,6,Q_H248_BINARY_TO_IP,to_ip,,ip_addr,Destination IPv4 address,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,7,Q_H248_BINARY_TO_IPV6,to_ipv6,,ip6_addr,Destination IPv6 address,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,8,Q_H248_BINARY_SRC_AUDIO_CONNECTION,src_audio_connection,,string,Source audio connection type,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,9,Q_H248_BINARY_SRC_AUDIO_PORT,src_audio_port,,uint16,Source audio connection port,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,10,Q_H248_BINARY_SRC_VIDEO_CONNECTION,src_video_connection,,string,Source video connection type,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,11,Q_H248_BINARY_SRC_VIDEO_PORT,src_video_port,,uint16,Source video connection port,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,12,Q_H248_BINARY_DST_AUDIO_CONNECTION,dst_audio_connection,,string,Destination audio connection type,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,13,Q_H248_BINARY_DST_AUDIO_PORT,dst_audio_port,,uint16,Destination audio connection port,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,14,Q_H248_BINARY_DST_VIDEO_CONNECTION,dst_video_connection,,string,Destination video connection type,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,15,Q_H248_BINARY_DST_VIDEO_PORT,dst_video_port,,uint16,Destination video connection port,0,session_mod,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,16,Q_H248_BINARY_RESPONSE_CODE,response_code,,uint32,"Return code, extracted from the reply",0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,2,Q_H248_TEXT_TRANSACTION,transaction,,parent,Parent attribute including transaction elements,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,1,Q_H248_TEXT_CONTEXT_ID,context_id,,string,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,3,Q_H248_TEXT_ACTION,action,,string,"The action designates the command that is executed during the transaction. The coommand name is postfixed by Req if the transaction is a request, by Reply if the transaction is a reply",0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,4,Q_H248_TEXT_FROM_IP,from_ip,,ip_addr,Source IPv4 address,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,5,Q_H248_TEXT_FROM_IPV6,from_ipv6,,ip6_addr,Source IPv6 address,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,6,Q_H248_TEXT_TO_IP,to_ip,,ip_addr,Destination IPv4 address,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,7,Q_H248_TEXT_TO_IPV6,to_ipv6,,ip6_addr,Destination IPv6 address,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,8,Q_H248_TEXT_SRC_AUDIO_CONNECTION,src_audio_connection,,string,Source audio connection type,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,9,Q_H248_TEXT_SRC_AUDIO_PORT,src_audio_port,,uint16,Source audio connection port,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,10,Q_H248_TEXT_SRC_VIDEO_CONNECTION,src_video_connection,,string,Source video connection type,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,11,Q_H248_TEXT_SRC_VIDEO_PORT,src_video_port,,uint16,Source video connection port,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,12,Q_H248_TEXT_DST_AUDIO_CONNECTION,dst_audio_connection,,string,Destination audio connection type,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,13,Q_H248_TEXT_DST_AUDIO_PORT,dst_audio_port,,uint16,Destination audio connection port,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,14,Q_H248_TEXT_DST_VIDEO_CONNECTION,dst_video_connection,,string,Destination video connection type,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,15,Q_H248_TEXT_DST_VIDEO_PORT,dst_video_port,,uint16,Destination video connection port,0,session_mod,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,16,Q_H248_TEXT_RESPONSE_CODE,response_code,,uint32,"Return code, extracted from the reply",0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,748,Q_MPA_UID,uid,,buffer,Generic user ID.,0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -301,Q_PROTO_HI5,Web,hi5,Hi5.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0 -1561,Q_PROTO_HIGH_ENTROPY,Behavioral,high_entropy,High Entropy,1,Q_HIGH_ENTROPY_ENTROPY,entropy,,uint32,Computed entropy value.,0,session_mod,0 -65,Q_PROTO_HPELLC,Network Service,hpellc,HP Extended Local-Link Control,1,Q_HPELLC_DST_XSAP,dst_xsap,,uint16,SAP destination address.,0,pkt,0 -65,Q_PROTO_HPELLC,Network Service,hpellc,HP Extended Local-Link Control,2,Q_HPELLC_SRC_XSAP,src_xsap,,uint16,SAP source address.,0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,1,Q_HSRP_VIRTUAL_ADDR,virtual_addr,,ip_addr,Virtual IP address used by the group.,0,session_fix,0 -66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,2,Q_HSRP_OPCODE,opcode,,string_index,"The operation code (HELLO, COUP, ...).",0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,3,Q_HSRP_STATE,state,,string_index,Describes the current state of the router sending the message.,0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,4,Q_HSRP_PRIORITY,priority,,uint8,"This field is used to elect the active and standby routers. When comparing priorities of two different routers, the router with the numerically higher priority wins.",0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,5,Q_HSRP_GROUP,group,,uint8,This field identifies the standby group.,0,pkt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,794,Q_MPA_NOCACHING_OVERRIDE,nocaching_override,,uint8,Attribute used to specify if it's unsafe to cache the final classification path of the current session. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,1,Q_HTTP_REQUEST,request,,parent,An HTTP request.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,2,Q_HTTP_SERVER,server,,string,"Normalized web server name, including lowercase transformation and suffix cleaning.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,66,Q_HTTP_HOST,host,,string,Host name value extracted from the Host header.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,90,Q_HTTP_HOST_START_OFFSET,host_start_offset,,uint32,Offset to the first Host HTTP header value byte in the TCP stream. The Host start is located in the current packet (the offset value is positive).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,91,Q_HTTP_HOST_END_OFFSET,host_end_offset,,int32,"Offset to the first byte which is not part of the Host HTTP header value, in the TCP stream. This value might be less or equal to zero if the Host actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,3,Q_HTTP_LOCATION,location,,string,Destination address where the client is redirected.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,4,Q_HTTP_REFERER,referer,,string,Source address from which the client obtained the requested URI.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,51,Q_HTTP_REFERER_PATH,referer_path,,string,Source address from which the client obtained the requested URI without query parameters.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,52,Q_HTTP_REFERER_SERVER,referer_server,,string,Contains the host or the website name of the referer.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,5,Q_HTTP_URI,uri,,string,"Normalized URL form (path + request) of a web resource, with UNRESERVED percent-encoded characters decoding (RFC3986).",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,50,Q_HTTP_URI_PATH,uri_path,,string,"Normalized URL path of a web resource, without query parameters. The path is normalized by decoding the UNRESERVED percent-encoded characters found in the URL (RFC3986).",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,6,Q_HTTP_URI_FULL,uri_full,,string,"Complete name (scheme/authority + path + request) of a web resource, with streamed extraction.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,72,Q_HTTP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the TCP stream. The URI start is located in the current packet (the offset value is positive).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,73,Q_HTTP_URI_END_OFFSET,uri_end_offset,,int32,"Offset to the first byte which is not part of the URI, in the TCP stream. This value might be less or equal to zero when the URI actually ends on a previous packet, in which the Request-line did not terminate (HTTP/1.x\r\n"").""",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Software used by the client to access the web page.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,74,Q_HTTP_USER_AGENT_START_OFFSET,user_agent_start_offset,,uint32,Offset to the first User-agent byte in the TCP stream. The User-agent start is located in the current packet (the offset value is positive).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,75,Q_HTTP_USER_AGENT_END_OFFSET,user_agent_end_offset,,int32,"Offset to the first byte which is not part of the User-agent, in the TCP stream. This value might be less or equal to zero if the User-agent actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,11,Q_HTTP_MIME_TYPE,mime_type,,string,Content type of the request or the web page.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,806,Q_MPA_FILE_TYPE,file_type,,string,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,12,Q_HTTP_CONTENT_DISPOSITION,content_disposition,,string,Information related to the disposition of the content present on the web page.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,13,Q_HTTP_FORWARD_ADDR,forward_addr,,ip_addr,DNS address to which the client is redirected.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,57,Q_HTTP_FORWARD_REDLINE,forward_redline,,ip_addr,"Value of the http header x-forward-redline"", used for forwarding.""",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,555,Q_MPA_METHOD,method,,string,HTTP command sent by the client.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,14,Q_HTTP_PROXY_AUTH,proxy_auth,,string,Authentication type on the proxy.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,15,Q_HTTP_PROXY_LOGIN,proxy_login,,string,Login used for proxy authentication.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,16,Q_HTTP_PROXY_REALM,proxy_realm,,string,Parameter used for proxy authentication.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,17,Q_HTTP_SMB_CLIENT,smb_client,,string,Name of the computer during NTLM authentication (Windows environment).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,18,Q_HTTP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,19,Q_HTTP_RTT,rtt,,timeval,"Server response time, calculated between the HTTP Request, and the client acknowledgement of the first non-empty HTTP Response packet.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,20,Q_HTTP_DIRECTORY,directory,,string,Directory of the accessed web page.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,21,Q_HTTP_COOKIE,cookie,,string,HTTP connection cookies.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,22,Q_HTTP_CODE,code,,uint32,Return code sent by the server.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,27,Q_HTTP_CONTENT_LEN,content_len,,uint64,Contains the content length of the HTTP request/response.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,28,Q_HTTP_X_CONTENT_URN,x_content_urn,,string,Contains the different hashes of downloaded file (used by Gnutella).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,29,Q_HTTP_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,632,Q_MPA_CONTENT_RAW,content_raw,,buffer,uncompressed HTTP content.,1,session_mod,1 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,30,Q_HTTP_CONTENT_RANGE,content_range,,string,Contains information about the size and offset of downloaded file (used by Gnutella).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,31,Q_HTTP_CHARSET,charset,,string,Contains the name of the used charset.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,32,Q_HTTP_WAP_PROFILE,wap_profile,,string,url link that contains the specification of the used handset.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,71,Q_HTTP_HEADER_RAW,header_raw,,string,One HTTP header line (field and value).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,33,Q_HTTP_HEADER,header,,parent,One HTTP header line.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,34,Q_HTTP_HEADER_NAME,header_name,,string,One HTTP header line (field).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,35,Q_HTTP_HEADER_VALUE,header_value,,string,One HTTP header line (value).,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,76,Q_HTTP_HEADER_END_OFFSET,header_end_offset,,uint32,Offset to the first byte after the last HTTP Header-line (\r\n included). This is an offset to the '\r' character of the second carriage return.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,36,Q_HTTP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,549,Q_MPA_IS_WEBDAV,is_webdav,,uint8,Indicates that the protocol is WebDAV.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,78,Q_HTTP_AUTH_USERNAME,auth_username,,string,Login used in the HTTP Authorization request extension for authentication. The supported authentication methods are Basic and Digest.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,79,Q_HTTP_AUTH_PASSWORD,auth_password,,string,Password used in the HTTP request Authorization extension. The only supported authentication method for password extraction is Basic.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,80,Q_HTTP_FILE_COMPLETED,file_completed,,uint8,Indicates that the request or response is completed.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,37,Q_HTTP_PART,part,,parent,Contains the whole uploaded data for POSTs.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,41,Q_HTTP_PART_HEADER,part_header,,parent,Groups part_header_name and part_header_value.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,42,Q_HTTP_PART_HEADER_NAME,part_header_name,,string,Name of a header line.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,43,Q_HTTP_PART_HEADER_VALUE,part_header_value,,string,Value of a header line.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,39,Q_HTTP_PART_CONTENT,part_content,,buffer,Uploaded data.,1,session_mod,1 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,38,Q_HTTP_PART_NAME,part_name,,string,Name of uploaded data or field.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,40,Q_HTTP_PART_FILENAME,part_filename,,string,Name of uploaded file.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,7,Q_HTTP_URI_PARAM,uri_param,,parent,URL parameter.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,8,Q_HTTP_URI_PARAM_NAME,uri_param_name,,string,URL parameter name.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,9,Q_HTTP_URI_PARAM_VALUE,uri_param_value,,string,URL parameter value.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,92,Q_HTTP_URI_RAW,uri_raw,,string,Complete name (scheme/authority + path + request) of a web resource.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,93,Q_HTTP_URI_RAW_PATH,uri_raw_path,,string,Complete name (scheme/authority + path) of a web resource without query parameters.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,47,Q_HTTP_INDEX,index,,uint32,Identifier of the request and response in a HTTP flow.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,54,Q_HTTP_RESPONSE_TS,response_ts,,timeval,Timestamp of the first packet of a HTTP response.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,53,Q_HTTP_REQUEST_TS,request_ts,,timeval,Timestamp of the first packet of a HTTP query.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,58,Q_HTTP_CONNECTION_HEADER,connection_header,,string,"Options in the content of Connection:"" general header desired by the sender for that particular connection.""",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,81,Q_HTTP_UPGRADE_HEADER,upgrade_header,,string,"Protocoles in the content of Upgrade:"" general header.""",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,59,Q_HTTP_HEADER_END,header_end,,no_type,Token marking end of the HTTP header.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,60,Q_HTTP_REQUEST_SIZE,request_size,,uint64,Contains the total length in bytes of the request or the response (including HTTP headers). This attribute is computed at the end of the request or response.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,61,Q_HTTP_DECHUNK_SIZE,dechunk_size,,uint32,Contains length of dechunked data.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,62,Q_HTTP_DECOMPRESS_SIZE,decompress_size,,uint32,Contains length of decompressed data.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,69,Q_HTTP_CONTENT_ENCODING,content_encoding,,string,Contains content encoding format.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,70,Q_HTTP_ACCEPT_ENCODING,accept_encoding,,string,Contains the accepted encodings.,0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,773,Q_MPA_IMAGE,image,,parent,"Parent entry, empty, for image metadata related attributes.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,774,Q_MPA_IMAGE_TYPE,image_type,,string,File format.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,776,Q_MPA_IMAGE_WIDTH,image_width,,uint32,Width of the video in pixels.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,777,Q_MPA_IMAGE_HEIGHT,image_height,,uint32,Height of the video in pixels.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,779,Q_MPA_IMAGE_INDEX_COLOR,image_index_color,,uint8,Use indexed colors.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,780,Q_MPA_IMAGE_ALPHA_CHANNEL,image_alpha_channel,,uint8,Use an alpha channel.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,799,Q_MPA_VIDEO_MANGLED,video_mangled,,uint8,The video stream is mangled (probably encrypted).,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,785,Q_MPA_VIDEO_URL,video_url,,string,URL of the binary video file referenced by the current metadata.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,786,Q_MPA_NTLM_DOMAIN,ntlm_domain,,string,"Domain"" attribute of the NTLM protocol.""",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,787,Q_MPA_NTLM_USER,ntlm_user,,string,"User"" attribute of the NTLM protocol.""",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,788,Q_MPA_NTLM_WORKSTATION,ntlm_workstation,,string,"Workstation"" attribute of the NTLM protocol.""",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,82,Q_HTTP_URI_DECODED,uri_decoded,,string,"Normalized and decoded URL form (path + request) of a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,83,Q_HTTP_URI_GET_DECODED,uri_get_decoded,,string,"Normalized and decoded URL form (path + request) of an HTTP GET request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,84,Q_HTTP_URI_POST_DECODED,uri_post_decoded,,string,"Normalized and decoded URL form (path + request) of an HTTP POST request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,85,Q_HTTP_URI_PATH_DECODED,uri_path_decoded,,string,"Normalized and decoded URL path of a web resource, without query parameters. The result includes ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,86,Q_HTTP_POST_VARIABLE_DECODED,post_variable_decoded,,string,"Extracts the 'name/value' metadata from each web-form CGI parameter found in a POST HTTP Request. The name and value strings are normalized including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass). The parameters are extracted from the URL of the request, and/or from the 'x-www-form-urlencoded' POST data.",0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,94,Q_HTTP_URI_UNICODE_NORMALIZED,uri_unicode_normalized,,string,Unicode normalized URL (after decoding).,0,session_prt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,88,Q_HTTP_LAST_MODIFIED,last_modified,,string,Contains the date and time at which the origin server believes the variant was last modified.,0,session_prt,0 -750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),1,Q_ICA_APPLICATION,application,,string,Application name used by the client.,0,session_mod,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),5,Q_ICA_APPLICATION_UTF16,application_utf16,,buffer,Application name used by the client in UTF-16 format.,0,session_mod,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),2,Q_ICA_LOGIN_INFO,login_info,,string,"Login information for the given connection (host, username, network domain).",0,session_fix,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),6,Q_ICA_LOGIN_INFO_UTF16,login_info_utf16,,buffer,"Login information for the given connection (host, username, network domain), in UTF-16 format.",0,session_fix,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),3,Q_ICA_PRIORITY,priority,,uint8,Priority of the service.,0,session_mod,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),4,Q_ICA_SERVICE,service,,string,Service used by the client.,0,session_mod,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,1,Q_ICAP_X_CLIENT_IP_RESPMOD_REQ,x_client_ip_respmod_req,,string,"The IP source address of the encapsulated HTTP request, when using the X-Client-IP ICAP header extension (draft-stecher-icap-subid-00).",0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,6,Q_ICAP_REFERER_RESPMOD_REQ,referer_respmod_req,,string,The HTTP referer embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,9,Q_ICAP_CONTENT_TYPE_RESPMOD_REQ,content_type_respmod_req,,string,The HTTP content_type embedded in the http response part of the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,7,Q_ICAP_USER_AGENT_RESPMOD_REQ,user_agent_respmod_req,,string,The HTTP user_agent embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,5,Q_ICAP_HOST_RESPMOD_REQ,host_respmod_req,,string,The HTTP host embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,4,Q_ICAP_URI_RESPMOD_REQ,uri_respmod_req,,string,The HTTP uri embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,3,Q_ICAP_METHOD_RESPMOD_REQ,method_respmod_req,,string,The HTTP method embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,8,Q_ICAP_CODE_RESPMOD_REQ,code_respmod_req,,uint32,The HTTP code embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 -1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,2,Q_ICAP_REQUEST_RESPMOD_REQ,request_respmod_req,,parent,An ICAP RESPMOD request,0,session_mod,0 -1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),604,Q_MPA_SERVICE,service,,string,Current iCloud service..,0,session_mod,0 -1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),643,Q_MPA_REQUEST,request,,parent,Parent structure containing iCloud service metadata.,0,session_mod,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,1,Q_ICMP_TYPE,type,,string_index,ICMP message type (as string).,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,2,Q_ICMP_TYPEVAL,typeval,,uint8,ICMP message type (as integer).,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,3,Q_ICMP_CODE,code,,uint8,Message code.,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,4,Q_ICMP_MESSAGE,message,,string_index,The ICMP message.,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,5,Q_ICMP_SEQ,seq,,uint16,Sequence number of the echo packet.,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,6,Q_ICMP_RTT,rtt,,timeval,Response time of a ping command.,0,session_mod,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,7,Q_ICMP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,1,Q_ICMP6_TYPE,type,,uint8,ICMP message type.,0,pkt,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,2,Q_ICMP6_CODE,code,,uint8,Message code.,0,pkt,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,552,Q_MPA_MESSAGE,message,,string_index,ICMP message type (in string representation).,0,pkt,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,3,Q_ICMP6_RTT,rtt,,timeval,Response time of a ping command.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,13,Q_ICMP6_TARGET_ADDRESS,target_address,,ip6_addr,The IP address of the target of the solicitation.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,8,Q_ICMP6_LINK_LAYER_ADDR,link_layer_addr,,parent,"The source or target link-layer address, depending on type.",0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,9,Q_ICMP6_LINK_LAYER_ADDR_TYPE,link_layer_addr_type,,uint32,Type of link-layer address (source or target).,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,10,Q_ICMP6_LINK_LAYER_RAW_ADDR,link_layer_raw_addr,,buffer,Link-layer address in binary format.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,11,Q_ICMP6_LINK_LAYER_MAC_ADDR,link_layer_mac_addr,,mac_addr,Link-layer address in MAC format (if applicable).,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,12,Q_ICMP6_LINK_LAYER_EUI64_ADDR,link_layer_eui64_addr,,uint64,Link-layer address in EUI64 format (if applicable).,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,5,Q_ICMP6_NDP_PREFIX,ndp_prefix,,parent,Prefix information for address autoconfiguration.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,6,Q_ICMP6_PREFIX,prefix,,ip6_addr,An IP address or a prefix of an IP address.,0,session_mod,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,7,Q_ICMP6_PREFIX_LEN,prefix_len,,uint8,The number of leading bits in the Prefix that are valid.,0,session_mod,0 -73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,1,Q_IDENT_SERVER_PORT,server_port,,uint32,TCP server's port,0,session_fix,0 -73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,2,Q_IDENT_CLIENT_PORT,client_port,,uint32,TCP client's port,0,session_fix,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,1,Q_IGMP_TYPE,type,,string_index,Message type.,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,2,Q_IGMP_ADDRESS,address,,ip_addr,Multicast address.,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,3,Q_IGMP_CHANNEL,channel,,string_index,Flow name (relative to multicast address).,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,4,Q_IGMP_RECORD,record,,parent,A parent attribute,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,5,Q_IGMP_RECORD_TYPE,record_type,,string_index,"the record type. the Change to include mode"" value corresponds to a LEAVE and ""Change to exclude mode"" corresponds to a JOIN""",0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,6,Q_IGMP_RECORD_NSOURCES,record_nsources,,uint16,Number of the sources in this record,0,session_mod,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,7,Q_IGMP_RECORD_MADDRESS,record_maddress,,ip_addr,The multicast address in this record,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,1,Q_IMAP_MSGLIST_ATTACH,msglist_attach,,parent,Parent entry for attached file in a list of emails.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,2,Q_IMAP_MSGLIST_MIME_TYPE,msglist_mime_type,,string,Content type of the email.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,3,Q_IMAP_MSGLIST_ATTACH_MIME_TYPE,msglist_attach_mime_type,,string,Content type of the attachment (in a list).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,4,Q_IMAP_MSGLIST_ATTACH_FILENAME,msglist_attach_filename,,string,Name of file attached to message (in a list).,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of attached file.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established.,0,session_fix,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,518,Q_MPA_ATTACH_MIME_TYPE,attach_mime_type,,string,Content type of the attachment.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,806,Q_MPA_FILE_TYPE,file_type,,buffer,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,805,Q_MPA_HEADER_RAW,header_raw,,string,One IMAP header line (field and value).,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,3,Q_IMP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,2,Q_IMP_VERSION,version,,string,IMP version deployed.,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,1,Q_IP_SRC_ADDR,src_addr,,ip_addr,Source IP address.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,2,Q_IP_DST_ADDR,dst_addr,,ip_addr,Destination IP address.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,3,Q_IP_PROTOCOL,protocol,,string_index,Contains the name the upper layer protocol.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,4,Q_IP_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,5,Q_IP_TOS,tos,,uint8,Type of service of the packet.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,6,Q_IP_DSCP,dscp,,uint8,Differentiated Services Field Codepoints.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,7,Q_IP_SRC_NET,src_net,,ip_addr,"Source network address, given a specific mask.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,8,Q_IP_DST_NET,dst_net,,ip_addr,"Destination network address, given a specific mask.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,9,Q_IP_SRC_CLASS,src_class,,char,Class of the source IP address.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,10,Q_IP_DST_CLASS,dst_class,,char,Class of the destination IP address.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,11,Q_IP_DEFRAG_LEN,defrag_len,,uint16,Total length of the data contained in a defragmented packet without its IP header.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,12,Q_IP_TTL,ttl,,uint8,Remaining number of router(s) this packet can pass through before being dropped.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,13,Q_IP_CLIENT_NET,client_net,,ip_addr,"Client subnet address, given a specific mask.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,14,Q_IP_SERVER_NET,server_net,,ip_addr,"Server subnet address, given a specific mask.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,15,Q_IP_CLIENT_ADDR,client_addr,,ip_addr,Client IP address.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,16,Q_IP_SERVER_ADDR,server_addr,,ip_addr,Server IP address.,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,17,Q_IP_FRAG_ID,frag_id,,uint16,Fragment identifier.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,18,Q_IP_SRC_ADDR32,src_addr32,,uint32,IP source address (32 bits).,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,19,Q_IP_DST_ADDR32,dst_addr32,,uint32,Destination IP address (32 bits).,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,20,Q_IP_SERVER_ADDR32,server_addr32,,uint32,Server IP address (32 bits).,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,21,Q_IP_CLIENT_ADDR32,client_addr32,,uint32,Client IP address (32 bits).,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,22,Q_IP_PKT_LEN,pkt_len,,uint16,"Total packet length, IP header included.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,23,Q_IP_ADDRESS,address,,uint8,Attribute matching a source or destination IP address. To be used in a filter.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,24,Q_IP_NETADDR,netaddr,,uint8,Attribute matching a source or destination IP subnet. Can be used in a filter.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,25,Q_IP_SRC_ADDR_MD5,src_addr_md5,,binary,A MD5 sum on IP Source address,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,26,Q_IP_DST_ADDR_MD5,dst_addr_md5,,binary,A MD5 sum on IP destination address,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,27,Q_IP_SRC_DST_ADDR,src_dst_addr,,binary,A binary buffer containing a concatenation of IP source address and destination address,0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,28,Q_IP_SRC_DST_SPORT_PROTO,src_dst_sport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address and the protocol",0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,29,Q_IP_SRC_DST_DPORT_PROTO,src_dst_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the destination port and the protocol",0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,30,Q_IP_SRC_DST_SPORT_DPORT_PROTO,src_dst_sport_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the source port, the destination port and the protocol",0,session_fix,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,33,Q_IP_FIRST_FRAGMENT,first_fragment,,uint8,A flag which is set when the current packet is fragmented and it is a first fragment,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,34,Q_IP_FRAGMENT_LOST,fragment_lost,,uint8,A flag indicating the lost of the previous fragment.,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,35,Q_IP_FRAGMENT_LOST_SIZE,fragment_lost_size,,uint32,Length of the last lost fragment.,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,36,Q_IP_FRAGMENT_BUFFERED_COUNT,fragment_buffered_count,,uint32,Number of segments that have been buffered for defragmentation,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,37,Q_IP_FRAGMENT_BUFFERED_SIZE,fragment_buffered_size,,uint32,Sizes sum of segments that have been buffered for defragmentation,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,38,Q_IP_TTL_TOO_LOW,ttl_too_low,,uint8,A flag set when the packet ttl field is too low,0,session_mod,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,39,Q_IP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,608,Q_MPA_VERSION,version,,uint8,Version of the protocol.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,1,Q_IP6_CLASS,class,,uint8,Internet traffic priority delivery value.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,2,Q_IP6_LABEL,label,,uint32,Used for specifying special router handling from source to destination(s) for a sequence of packets.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,3,Q_IP6_PAYLOAD,payload,,uint16,The payload length.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,4,Q_IP6_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session_fix,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,5,Q_IP6_HOP_LIMIT,hop_limit,,uint8,Remaining number of router(s) this packet can pass through before being dropped.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,6,Q_IP6_SRC_ADDR,src_addr,,ip6_addr,Source IP address.,0,session_fix,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,7,Q_IP6_DST_ADDR,dst_addr,,ip6_addr,Destination IP address.,0,session_fix,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,9,Q_IP6_CLIENT_ADDR,client_addr,,ip6_addr,Client IP address.,0,session_fix,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,8,Q_IP6_SERVER_ADDR,server_addr,,ip6_addr,Server IP address.,0,session_fix,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,11,Q_IP6_ADDRESS,address,,ip6_addr,This attribute is not extracted.,0,session_fix,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,1,Q_IPCP_CODE,code,,uint8,Packet type.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,2,Q_IPCP_IDENTIFIER,identifier,,uint8,Decimal value allowing to match requests and replies.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,3,Q_IPCP_IP_ADDR,ip_addr,,ip_addr,IP address attributed.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,4,Q_IPCP_MOBILE_IP_ADDR,mobile_ip_addr,,ip_addr,"Mobile IP"" address attributed.""",0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,5,Q_IPCP_DNS_IP_ADDR,dns_ip_addr,,ip_addr,IP address of the primary DNS server.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,6,Q_IPCP_WIN_IP_ADDR,win_ip_addr,,ip_addr,IP address of the primary WINS server.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,7,Q_IPCP_SECOND_DNS_IP_ADDR,second_dns_ip_addr,,ip_addr,IP Address of the secondary DNS server.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,8,Q_IPCP_SECOND_WIN_IP_ADDR,second_win_ip_addr,,ip_addr,IP address of the secondary WINS server.,0,pkt,0 -84,Q_PROTO_IPP,Printer,ipp,Internet Printing Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0 -85,Q_PROTO_IPSEC,Encrypted,ipsec,IP secure,1,Q_IPSEC_PROTOCOL,protocol,,string_index,Protocol used for encryption (AH or ESP).,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,1,Q_IPX_CHECKSUM,checksum,,uint16,Value of the transmission control checksum.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,2,Q_IPX_PKT_SIZE,pkt_size,,uint16,Datagram's length.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,3,Q_IPX_TCTRL,tctrl,,uint8,Indicates the number of routers through which the packet has passed.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,4,Q_IPX_TYPE,type,,uint8,Identifier of the upper layer protocol.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,5,Q_IPX_DST_NET,dst_net,,uint32,Destination network address.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,6,Q_IPX_SRC_NET,src_net,,uint32,Source network address.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,7,Q_IPX_DST_SOCKET,dst_socket,,uint16,Destination application identifier.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,8,Q_IPX_SRC_SOCKET,src_socket,,uint16,Source application identifier.,0,pkt,0 -89,Q_PROTO_IPXSAP,Network Service,ipxsap,IPX Service Advertisement Protocol,1,Q_IPXSAP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0 -89,Q_PROTO_IPXSAP,Network Service,ipxsap,IPX Service Advertisement Protocol,2,Q_IPXSAP_SERVER,server,,string_index,Server type.,0,pkt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,1,Q_IRC_NICKNAME,nickname,,string,User's alias.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,2,Q_IRC_SERVER,server,,string,Server name to which the user is connected.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session_prt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_prt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_prt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,3,Q_IRC_MODE,mode,,parent,Data structure containing irc channel mode information.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,4,Q_IRC_MODE_CHANNEL,mode_channel,,string,Name of the irc channel.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,5,Q_IRC_MODE_STATUS,mode_status,,string,Status of the irc channel.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,6,Q_IRC_FILE_IDENTIFIER,file_identifier,,string,File correlation key.,0,session_prt,0 -1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,1,Q_ISAKMP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session_fix,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,2,Q_ISAKMP_HASH_ALGORITHM,hash_algorithm,,string_index,Algorithm used for the hash.,0,session_fix,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,3,Q_ISAKMP_ENCRYPTION_ALGORITHM,encryption_algorithm,,string_index,algorithm used for the encryption.,0,session_fix,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,4,Q_ISAKMP_AUTHENTIFICATION_METHOD,authentification_method,,string_index,Method used for authentication.,0,session_fix,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,5,Q_ISAKMP_LIFE_DURATION,life_duration,,uint32,Life time of connection parameters.,0,session_fix,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,6,Q_ISAKMP_TIME_UNIT,time_unit,,string_index,Temporal unit of the attribute life_duration.,0,session_fix,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,1,Q_ISL_DST_ADDR,dst_addr,,mac_addr,Destination MAC Address.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,2,Q_ISL_SRC_ADDR,src_addr,,mac_addr,Source MAC Address.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,3,Q_ISL_TYPE,type,,string,Type of the encapsulated frame.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,4,Q_ISL_USER,user,,string_index,Priority field.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,5,Q_ISL_VLAN,vlan,,uint16,VLAN ID of the frame.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,6,Q_ISL_INDEX,index,,uint16,Port index of the switch on which the packet has been sent.,0,pkt,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each ISUP message,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,18,Q_ISUP_MESSAGE_TS,message_ts,,timeval,Timestamp of ISUP message,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,553,Q_MPA_MESSAGE_ID,message_id,x,uint8,Id of the ISUP message. This attribute is deprecated.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,12,Q_ISUP_MESSAGE_NAME,message_name,x,string,Abbreviated name of ISUP message. This attribute is deprecated.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,19,Q_ISUP_MESSAGE_WAY,message_way,,string,Way of message,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,1,Q_ISUP_CALLER_NAT,caller_nat,,uint8,Calling party nature,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,524,Q_MPA_CALLER,caller,,string,Calling party number,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,2,Q_ISUP_CALLEE_NAT,callee_nat,,uint8,Called party nature,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,523,Q_MPA_CALLEE,callee,,string,Called party number,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,20,Q_ISUP_TMR,tmr,,string_index,Transmission medium requirement,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,4,Q_ISUP_CIC,cic,,uint16,Circuit Identification Code,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,17,Q_ISUP_CAUSE,cause,,uint8,ISUP Cause of release,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,5,Q_ISUP_ORIG_POINT_CODE,orig_point_code,,uint32,Originating Point Code,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,6,Q_ISUP_DEST_POINT_CODE,dest_point_code,,uint32,Destination Point Code,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,7,Q_ISUP_START_TIME,start_time,,timeval,Start date of the call,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,8,Q_ISUP_SESSION_DURATION,session_duration,,timeval,Call session duration (elapsed time between the sending of SETUP command and the end of the communication),0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,10,Q_ISUP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,9,Q_ISUP_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,11,Q_ISUP_CALL_ID,call_id,,uint64,Internal unique call identifier,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,13,Q_ISUP_IE_NODE,ie_node,x,parent,A parent for each ISUP information element (parameter). This attribute is deprecated.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,16,Q_ISUP_IE_RAW,ie_raw,x,buffer,Raw value of the i.e.. This attribute is deprecated.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,14,Q_ISUP_IE_ID,ie_id,x,uint8,i.e. type. This attribute is deprecated.,0,session_mod,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,15,Q_ISUP_IE_LEN,ie_len,x,uint8,i.e. length. This attribute is deprecated.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),1,Q_JABBER_NICKNAME,nickname,,string,contains the used username.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),608,Q_MPA_VERSION,version,,string,JABBER software version.,0,session_fix,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_fix,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),3,Q_JABBER_OS,os,,string,Client operating system.,0,session_fix,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,1 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),740,Q_MPA_FILE_SID,file_sid,,string,Transferred file identifier.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),710,Q_MPA_END_STATUS,end_status,,string,Session end reason.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port on which the caller could start the call.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port on which the callee could receive a call.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session_prt,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),4,Q_JABBER_FILE_CHUNK_SID,file_chunk_sid,,string,Transferred file identifier.,0,session_prt,0 -260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,1,Q_JAVA_UPDATE_TYPE,type,,string,Version type of updated Java.,0,session_mod,0 -561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session_mod,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,618,Q_MPA_FILE_CHUNK,file_chunk,,buffer,A piece of a transferred file.,0,session_mod,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,556,Q_MPA_MIME_TYPE,mime_type,,string,Mime type of the file beeing transferred.,0,session_mod,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,643,Q_MPA_REQUEST,request,,parent,File transfer parent attribute.,0,session_mod,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,550,Q_MPA_LOGIN,login,,uint64,User's login string.,0,session_mod,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,1,Q_KASKUS_TITLE,title,,string,Title of the current page.,0,session_mod,0 -96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),1,Q_KAZAA_MIME_TYPE,mime_type,,string,Type of the downloaded file.,0,session_mod,0 -96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,7,Q_KRB5_MESSAGE,message,,parent,Parent attribute containing the metadata related to a Kerberos message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,1,Q_KRB5_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,2,Q_KRB5_SERVICE,service,,string,Service requiring the use of the protocol Kerberos.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,3,Q_KRB5_SERVER,server,,string,Name of the server requiring Kerberos authentication.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,4,Q_KRB5_ENC_DATA,enc_data,,binary,Encrypted data (hash) sent in the AS-RQ message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,5,Q_KRB5_ENC_DATA_TYPE,enc_data_type,,uint32,Indicate type of Encrypted data (hash) sent in the AS-RQ message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,8,Q_KRB5_PA_DATA,pa_data,,parent,"Parent attribute, containing PA-DATA type and value.",0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,9,Q_KRB5_PA_DATA_TYPE,pa_data_type,,uint32,PA-DATA type.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,10,Q_KRB5_PA_DATA_VALUE,pa_data_value,,binary,PA-DATA value.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,11,Q_KRB5_TICKET,ticket,,parent,"Parent attribute, containing name-type, name and enc_part of a ticket.",0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,13,Q_KRB5_TICKET_NAME_TYPE,ticket_name_type,,uint32,Ticket name-type.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,12,Q_KRB5_TICKET_NAME,ticket_name,,string,Ticket name component.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,14,Q_KRB5_TICKET_ENC_PART,ticket_enc_part,,buffer,Ticket encrypted part.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,30,Q_KRB5_KDCOPTIONS,kdcoptions,,buffer,KDC options as a bitstring.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,15,Q_KRB5_ERROR_CODE,error_code,,int32,Error code in KRB-ERROR message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,6,Q_KRB5_REALM,realm,,string,Realm in KRB-ERROR message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,16,Q_KRB5_ERR_CREALM,err_crealm,,string,Realm in KRB-ERROR message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,17,Q_KRB5_ERR_CNAME,err_cname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message.",0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,29,Q_KRB5_ERR_REALM,err_realm,,string,Correct realm in KRB-ERROR message.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,18,Q_KRB5_ERR_CNAME_TYPE,err_cname_type,,uint32,KRB-ERROR cname type.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,19,Q_KRB5_ERR_CNAME_NAME,err_cname_name,,string,KRB-ERROR message cname component.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,25,Q_KRB5_ERR_SNAME,err_sname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message server.",0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,26,Q_KRB5_ERR_SNAME_TYPE,err_sname_type,,uint32,KRB-ERROR message server sname type.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,27,Q_KRB5_ERR_SNAME_NAME,err_sname_name,,string,KRB-ERROR message server sname component.,0,session_prt,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,23,Q_KRB5_ERR_TEXT,err_text,,string,KRB-ERROR message error description.,0,session_mod,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,24,Q_KRB5_ERR_DATA,err_data,,binary,Error-related data.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,1,Q_L2TP_TUNNEL_ID,tunnel_id,,uint16,Identifier for the control connection.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,2,Q_L2TP_CALL_ID,call_id,,uint16,Identifier for a session within a tunnel.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,3,Q_L2TP_MESSAGE_TYPE,message_type,,string_index,Message type (L2TPv2 only).,0,pkt,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,4,Q_L2TP_ASS_TUNNEL_ID,ass_tunnel_id,,uint16,Assigned L2TP tunnel ID.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,5,Q_L2TP_HOSTNAME,hostname,,string,Name of the issuing LAC or LNS.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,6,Q_L2TP_VENDOR_NAME,vendor_name,,string,Vendor specific string describing the type of LAC or LNS being used.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,7,Q_L2TP_CHALLENGE,challenge,,binary,CHAP style challenge used by a peer in order to authenticate the tunnel endpoint.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,8,Q_L2TP_RESP_CHALLENGE,resp_challenge,,binary,Challenge response.,0,session_mod,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,9,Q_L2TP_ASS_CALL_ID,ass_call_id,,uint16,Connection ID in the L2TP tunnel.,0,session_mod,0 -270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -99,Q_PROTO_LCP,Network Management,lcp,Line Control Protocol,1,Q_LCP_CODE,code,,uint8,Called function.,0,pkt,0 -99,Q_PROTO_LCP,Network Management,lcp,Line Control Protocol,2,Q_LCP_IDENTIFIER,identifier,,uint8,Message identifier.,0,pkt,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,552,Q_MPA_MESSAGE,message,,parent,A LDAP message.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,1,Q_LDAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,2,Q_LDAP_MESSAGE_ID,message_id,,uint32,Message identification.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,3,Q_LDAP_PAYLOAD_IS_CRYPTED,payload_is_crypted,,uint32,Indicates whether the LDAP payload is encrypted.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,4,Q_LDAP_SEAL_ALGO,seal_algo,,string,Algorithm used to encrypt the Kerberos content.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,5,Q_LDAP_CONTAINS_SASL,contains_sasl,,uint32,Indicates whether the authentication is done using SASL mechanism.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,6,Q_LDAP_ELEMENT,element,,parent,LDAP element in the LDAP tree.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,7,Q_LDAP_VALUE_STRING,value_string,,string,String value of the LDAP element.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,8,Q_LDAP_VALUE_RAW,value_raw,,buffer,Raw value of the LDAP element.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,9,Q_LDAP_TYPE,type,,string,"Type of the LDAP element, in the LDAP tree.",0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,577,Q_MPA_NAME,name,,string,"Name of the LDAP element, in the LDAP tree (RFC2251).",0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,10,Q_LDAP_NUMBER,number,,uint32,Item number of the LDAP element.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,16,Q_LDAP_LEVEL,level,,uint32,Depth level in ldap tree.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,11,Q_LDAP_HOSTNAME,hostname,,string,Hostname extracted from a logon response to a CLDAP searchRequest.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,12,Q_LDAP_FILTER_EXPRESSION,filter_expression,,parent,Filter sub expression extracted from a CLDAP searchRequest.,0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,13,Q_LDAP_ATTRIBUTE_DESC,attribute_desc,,string,"Filter expression first operand, which is an attribute description.",0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,14,Q_LDAP_ASSERTION_VALUE,assertion_value,,string,"Filter expression second operand, which is an assertion value.",0,session_mod,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,15,Q_LDAP_ASSERTION_VALUE_RAW,assertion_value_raw,,buffer,Raw value of filter expression second operand.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version currently used by the client.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,604,Q_MPA_SERVICE,service,,string,Current service identification string. This attribute is extracted only when the service changes.,0,session_prt,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition.",0,session_prt,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds.",0,session_prt,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"timeval structure indicating, when the service is ended, the length of it in seconds and microseconds.",0,session_prt,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,2,Q_LINE_CALL_BYTE_COUNT,call_byte_count,,uint32,(Deprecated) The count of bytes that were exchanged during the call.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,1,Q_LINE_CALL_PKT_COUNT,call_pkt_count,,uint32,(Deprecated) The count of data packets that were exchanged during the call.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,709,Q_MPA_START_TIME,start_time,,string,Start date of the call.,0,session_mod,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,521,Q_MPA_CALL_DURATION,call_duration,,uint32,Call duration.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Query domain.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,1,Q_LIVE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,2,Q_LIVE_GROUPS_GROUP_ID,group_id,,string,Unique identifier of the group.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,647,Q_MPA_MEMBER_EMAIL,member_email,x,string,This attribute is deprecated.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,634,Q_MPA_CONTACT,contact,,string,Complete contact (this attribute is now encrypted and no longer extracted).,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,1,Q_LIVE_HOTMAIL_ATTACH_FILEID,attach_fileid,,string,File identifier used for attachments correlation.,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,1,Q_LIVEMAIL_MOBILE_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,1,Q_LLC_DST_SAP,dst_sap,,uint8,Destination SAP address.,0,pkt,0 -104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,2,Q_LLC_SRC_SAP,src_sap,,uint8,Source SAP address.,0,pkt,0 -104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,3,Q_LLC_CONTROL,control,,uint8,Control field of the connection.,0,pkt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,1,Q_LOTUSNOTES_ORGANIZATION,organization,,string,Organization.,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,608,Q_MPA_VERSION,version,,string,Client version.,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,4,Q_LOTUSNOTES_MIME_VERSION,mime_version,,string,MIME version.,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,598,Q_MPA_REPLYTO,replyto,x,string,This attribute is deprecated,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,5,Q_LOTUSNOTES_HEADER,header,,parent,Lotusnotes header (used for the Email service).,0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,6,Q_LOTUSNOTES_HEADER_NAME,header_name,,string,Lotusnotes header name (used for the Email service).,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,7,Q_LOTUSNOTES_HEADER_VALUE,header_value,,string,Lotusnotes header value (used for the Email service).,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,8,Q_LOTUSNOTES_ATTACH_COMPRESS,attach_compress,,string,The compression method used for the attached file download.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,2,Q_LOTUSNOTES_ATTACH_CONTENT_SEQ,attach_content_seq,,uint32,Sequence number of a attach file part.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,3,Q_LOTUSNOTES_ATTACH_CONTENT_SIZE,attach_content_size,,uint32,Size of a attach file part.,0,session_prt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,1,Q_LPR_SERVER,server,,string,Name of the machine that sent a file to print.,0,session_fix,0 -108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,2,Q_LPR_JOB,job,,string,Name of the printed file.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,762,Q_MPA_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,718,Q_MPA_PACKAGE,package,,parent,Information list about the debian archive,0,session_mod,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session_mod,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session_mod,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session_mod,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Version of the currently upgraded-distribution,0,session_mod,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_fix,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,1,Q_MAPI_HOST,host,,string,Client's hostname.,0,session_fix,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,2,Q_MAPI_DOMAIN,domain,,string,Network domain of the client.,0,session_fix,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,3,Q_MAPI_AUTH_TYPE,auth_type,,string_index,The type of used authentication.,0,session_fix,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,607,Q_MPA_SUBJECT,subject,,buffer,Message subject (UTF-16).,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,8,Q_MAPI_SENSIVITY,sensivity,,uint32,Message sensibility.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,532,Q_MPA_DATE,date,,uint64,"Message date: number of 100-nanosecond intervals since January 1, 1601.",0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,7,Q_MAPI_SIZE,size,,uint32,Message size.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,6,Q_MAPI_FLAGS,flags,,uint32,Message flags.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,11,Q_MAPI_EMAIL_TYPE,email_type,,string,E-mail type (enumeration).,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,600,Q_MPA_SENDER,sender,,buffer,Contains the identity of the sender of a chat session or a file transfer (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,601,Q_MPA_SENDER_ALIAS,sender_alias,,buffer,Name of the email sender (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,602,Q_MPA_SENDER_EMAIL,sender_email,,buffer,Email address of the message sender (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,585,Q_MPA_RECEIVER,receiver,,buffer,Contains the identity of the receiver for a chat message or a file transfer (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,buffer,Name of email receiver (included cc and bcc receivers) (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,buffer,Email address of message receiver (included cc and bcc receivers) (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,517,Q_MPA_ATTACH_ID,attach_id,,uint32,Attachment identifier.,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,516,Q_MPA_ATTACH_FILENAME,attach_filename,,buffer,Attachment name (UTF-16).,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session_prt,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,buffer,Full address of email sender (alias and email address) (UTF-16).,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,buffer,Message subject in a message list (UTF-16).,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,565,Q_MPA_MSGLIST_DATE,msglist_date,,uint64,"Message date in a message list: number of 100-nanosecond intervals since January 1, 1601.",0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,uint64,Message identifier.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,575,Q_MPA_MSGLIST_SIZE,msglist_size,,uint32,Message size in a message list.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,4,Q_MAPI_MSGLIST_SENSIVITY,msglist_sensivity,,uint32,Message sensibility in a message list.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,5,Q_MAPI_MSGLIST_FLAGS,msglist_flags,,uint32,Message flags in a message list.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,buffer,Full address of email receiver in a message list.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,9,Q_MAPI_MSGLIST_RECEIVER_TYPE,msglist_receiver_type,,string,Type of the email receiver,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,buffer,Email address of the email receiver.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,10,Q_MAPI_APPOINTMENT_LOCATION,appointment_location,,buffer,Appointment location.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,616,Q_MPA_CONTACT_EMAIL,contact_email,,buffer,Email address of a contact (UTF-16).,0,session_mod,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,615,Q_MPA_CONTACT_ALIAS,contact_alias,,buffer,Alias of a contact (UTF-16).,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,8,Q_MASHARE_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,11,Q_MASHARE_DELETE_URL,delete_url,,string,Link to use in order to delete the file.,0,session_mod,0 -587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,10,Q_MASHARE_FILEID,fileid,,string,Unique identifier of the file.,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,25,Q_MGCP_INFO,info,,parent,Data corresponding to a message transfer,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,1,Q_MGCP_ENDPOINT,endpoint,,string,Handset identifier,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,608,Q_MPA_VERSION,version,,string,Protocol version,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,2,Q_MGCP_TID,tid,,uint32,Transaction identifier,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,3,Q_MGCP_CODE,code,,uint32,Return code of a query,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,24,Q_MGCP_STATS,stats,,parent,Regroups RTP statistics,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,4,Q_MGCP_PACKETS_SENT,packets_sent,,uint32,Number of RTP packets sent,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,5,Q_MGCP_OCTETS_SENT,octets_sent,,uint32,Number of RTP octets sent,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,6,Q_MGCP_PACKETS_RECEIVED,packets_received,,uint32,Number of RTP packets received,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,7,Q_MGCP_OCTETS_RECEIVED,octets_received,,uint32,Number of RTP octets received,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,8,Q_MGCP_PACKETS_LOST,packets_lost,,uint32,Number of lost RTP packets,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,9,Q_MGCP_JITTER,jitter,,uint32,Observed Jitter for RTP packets,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,10,Q_MGCP_LATENCY,latency,,uint32,Observed latency for RTP packets,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,12,Q_MGCP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,579,Q_MPA_PHONE_NUMBER,phone_number,,string,The phone number.,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,13,Q_MGCP_EVENT,event,,string,Observed events,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,14,Q_MGCP_MESSAGE_TYPE,message_type,,string,The message type,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,15,Q_MGCP_CALL_WAY,call_way,,string,"The call Way (In, Out)",0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,17,Q_MGCP_MODE,mode,,string,"Contains the connection mode (sendrcv, recvonly, ...)",0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,18,Q_MGCP_NOTIFIEDENTITY,notifiedEntity,,string,Contains the identity of the notified identity,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,20,Q_MGCP_SIGNAL,signal,,string,Contains the received/sent signal,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,21,Q_MGCP_DIGITMAP,digitmap,,string,Contains the digitmap,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,23,Q_MGCP_CONNECTION_ID,connection_id,,string,Connection identifier,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_mod,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_prt,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -115,Q_PROTO_MMS,Audio/Video,mms,Microsoft Multimedia Streaming,541,Q_MPA_FILENAME,filename,,string,Name of the file currently broadcasted.,0,session_fix,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,1,Q_MMSE_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,2,Q_MMSE_MESSAGE_CODE,message_code,,uint8,Message type (in integer).,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,3,Q_MMSE_RECEIVER,receiver,,string,MMS receiver.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,4,Q_MMSE_NB_RECEIVER,nb_receiver,,uint32,Number of receiver for the same MMS.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,5,Q_MMSE_VERSION,version,,string,Protocol version.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,6,Q_MMSE_TID,tid,,string,Transaction identifier.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,7,Q_MMSE_SENDER,sender,,string,MMS sender.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,8,Q_MMSE_SUBJECT,subject,,string,MMS subject.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,9,Q_MMSE_CONTENT_TYPE,content_type,,string,The content type of the message.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,10,Q_MMSE_MESSAGE_CLASS,message_class,,string_index,Specifies the class of message.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,11,Q_MMSE_MESSAGE_ID,message_id,,string,A unique reference assigned to the message. The ID enables a client to match delivery reports with previously sent messages.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,12,Q_MMSE_CONTENT_LOCATION,content_location,,string,Specifies a reference to the stored version of the MM that can be retrieved or can be used to obtain information about the MM using the WSP/HTTP GET or M-Mbox-View-req.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,13,Q_MMSE_DELIVERY_REPORT,delivery_report,,string_index,Specifies whether the user wants a delivery report from each recipient.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,14,Q_MMSE_PRIORITY,priority,,string_index,Priority of the message for the recipient.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,15,Q_MMSE_READ_REPORT,read_report,,string_index,Specifies whether the user wants a read report from each recipient as a new message.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,16,Q_MMSE_REPORT_ALLOWED,report_allowed,,string_index,Sending of delivery report allowed to the user or not.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,17,Q_MMSE_RESPONSE_STATUS_CODE,response_status_code,,uint32,"It is used by the originating MMS Proxy-Relay to inform the MMS Client, which has performed a submission or a forward the result of that particular operation.",0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,18,Q_MMSE_RESPONSE_STATUS_TEXT,response_status_text,,string,Description which qualifies the response_status_code. The description may be based on the on the status code names contained in RFC1893.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,19,Q_MMSE_MESSAGE_SZ,message_sz,,uint32,Full size of message in octets.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,20,Q_MMSE_STATUS,status,,string_index,It is used to inform the originating MMS Client of the status of an MM that a delivery report was requested for.,0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,21,Q_MMSE_RETRIEVE_STATUS,retrieve_status,,string_index,"It is used by the recipient MMS Proxy-Relay to inform the recipient MMS Client about errors, if any that occurred during the preceding retrieval operation.",0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,22,Q_MMSE_READ_STATUS,read_status,,string_index,"Conveys information from the recipient MMS Client to the originating MMS Client whether an MM, for which a read report was requested, was read or not.",0,session_mod,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,530,Q_MPA_CONTENT,content,,buffer,The message content (headers are not included).,0,session_mod,1 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,23,Q_MMSE_CONTENT_PART,content_part,,parent,Message sub-part.,0,session_fix,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,24,Q_MMSE_CONTENT_PART_TYPE,content_part_type,,string,Message sub-part type.,0,session_prt,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,25,Q_MMSE_CONTENT_PART_ID,content_part_id,,string,Message sub-part ID.,0,session_prt,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,26,Q_MMSE_CONTENT_PART_FILENAME,content_part_filename,,string,Name of the file containing the current message sub-part data.,0,session_prt,0 -116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,27,Q_MMSE_CONTENT_PART_DATA,content_part_data,,buffer,Message sub-part data.,0,session_prt,0 -251,Q_PROTO_MPEGTS,Audio/Video,mpegts,MPEG-Transport Stream,1,Q_MPEGTS_CHUNK_LEN,chunk_len,,uint32,Data length.,0,session_fix,0 -119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,1,Q_MPLS_LABEL,label,,uint32,Label allowing the routing process of the packet through the various LSPs (Label-Switched Paths) crossed along the delivery path.,0,pkt,0 -119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,2,Q_MPLS_EXP,exp,,uint8,Packet queuing priority (QoS).,0,pkt,0 -119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,3,Q_MPLS_BOS,bos,,uint8,"Bottom Of Stack: equals to 1 if the last level of MPLS is reached, and 0 if another level of MPLS exists.",0,pkt,0 -119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,4,Q_MPLS_TTL,ttl,,uint8,Lifetime of the MPLS message.,0,pkt,0 -1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used in M+ Messenger. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_prt,0 -1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,604,Q_MPA_SERVICE,service,,string,"M+ current service identification string. The service is re-evaluated every 5 seconds, this attribute is extracted only when the service changes.",0,session_prt,0 -1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_fix,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_fix,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,15,Q_MSN_REQUEST,request,,parent,Parent attribute including a MSN method and its service.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,555,Q_MPA_METHOD,method,,string,Contains the MSN command.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,14,Q_MSN_FILE_IDENTIFIER,file_identifier,,uint32,File identifier.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,758,Q_MPA_FILENAME_UTF16,filename_utf16,,buffer,UTF-16 encoded filename.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,637,Q_MPA_IP_LOCAL,ip_local,,string,Local IP address.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,1,Q_MSN_PROFILE,profile,,string,Information about the user.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,2,Q_MSN_GROUP,group,,string,Information about group.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,3,Q_MSN_CONTACT,contact,,string,Information about a member of the contact list.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,4,Q_MSN_CLIENT_NICKNAME,client_nickname,,string,Nickname used by the user.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,5,Q_MSN_CONTACT_NICKNAME,contact_nickname,,string,Nickname used by a member of the contact list.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,6,Q_MSN_CONTACT_ID,contact_id,,string,Identification number of member changing status.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,7,Q_MSN_UID,uid,,string,The client ID number is the sum of several values specifying client's options.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,8,Q_MSN_ONLINE_PRINCIPAL,online_principal,,string,Message signaling change of status of member of contact list.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,648,Q_MPA_FILE_CHUNK_TYPE,file_chunk_type,,string,Transfer type.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,17,Q_MSN_FILE_CHUNK_IDENTIFIER,file_chunk_identifier,,uint32,File identifier related to the current chunk.,0,session_prt,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol versions used.,0,session_fix,0 -121,Q_PROTO_MSN_GROUPS,Forum,msn_groups,MSN groups,1,Q_MSN_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_fix,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,1,Q_MSN_VIDEO_RECIPIENTID,recipientid,,uint32,Identification number of recipient.,0,session_fix,0 -123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,2,Q_MSN_VIDEO_SESSIONID,sessionid,,uint32,Identification number of session.,0,session_fix,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,8,Q_MSRP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,7,Q_MSRP_AUTHORITY,authority,,string,Authority part of an MSRP uri,0,session_mod,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,6,Q_MSRP_URI,uri,,string,MSRP uri,0,session_mod,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,5,Q_MSRP_URI_ENTRY,uri_entry,,parent,Parent attribute raised for each MSRP uri.,0,session_mod,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,4,Q_MSRP_PATH_TYPE,path_type,,string,path_entry attribute type.,0,session_mod,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,3,Q_MSRP_PATH_ENTRY,path_entry,,parent,Parent attribute raised in order to describe a From_path or To_path field.,0,session_mod,0 -124,Q_PROTO_MUTE,Peer to Peer,mute,Mute,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,1,Q_MYSQL_BASE,base,,string,Database name.,0,session_fix,0 -126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,581,Q_MPA_QUERY,query,,string,SQL query.,0,session_mod,0 -128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,1,Q_NBNS_SERVICE,service,,string,Service Name.,0,session_mod,0 -128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,581,Q_MPA_QUERY,query,,string,Query sent.,0,session_mod,0 -128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,Query type.,0,session_mod,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,524,Q_MPA_CALLER,caller,,string,Name of the caller.,0,session_mod,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,523,Q_MPA_CALLEE,callee,,string,Name of the called member.,0,session_mod,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,1,Q_NETBIOS_MESSAGE_TYPE,message_type,,string_index,Connection type.,0,session_mod,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,2,Q_NETBIOS_COMMAND,command,,string_index,Message command value.,0,session_mod,0 -569,Q_PROTO_NETBSD_UPDATE,Web,netbsd_update,NetBSD Updates,1,Q_NETBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,6,Q_NETFLIX_LOGIN,login,,string,User's login string.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,2,Q_NETFLIX_VIDEOID,videoid,,string,Netflix video identifier.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,4,Q_NETFLIX_TITLE,title,,string,Title of the movie.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,5,Q_NETFLIX_DESCRIPTION,description,,string,Synopsis of the movie.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,3,Q_NETFLIX_DATE,date,,string,Release date of the movie.,0,session_mod,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,1,Q_NETFLIX_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 -130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow,608,Q_MPA_VERSION,version,,uint16,Protocol version.,0,session_fix,0 -130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow,1,Q_NETFLOW_COUNT,count,,uint16,Number of items in the packet.,0,pkt,0 -322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 -322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_fix,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,11,Q_NFS_COMMAND,command,,parent,"Parent entry, for NFS command fields.",0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,12,Q_NFS_FILE,file,,parent,"Parent entry, for file-related fields. Multiple file entries can occur for specific commands, in particular: READDIR, READDIRPLUS - first entry is read directory, others are listed files; LINK - first entry is target, second entry is link; LOOKUP - first entry is found object, second entry is its parent directory.",0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,608,Q_MPA_VERSION,version,,string,Used version,0,session_fix,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,2,Q_NFS_STATUS,status,,string_index,Response status for a request,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,1,Q_NFS_PROCEDURE,procedure,,string_index,Procedure or command sent,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,541,Q_MPA_FILENAME,filename,,string,"Accessed, written or read file name.",0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,3,Q_NFS_FILE_HANDLE,file_handle,,binary,Unique identifier for a file.,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,5,Q_NFS_OFFSET,offset,,uint64,Offset of the written/read file. Extracted on READ and WRITE procedure replies.,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,4,Q_NFS_FILESIZE,filesize,,uint64,Size of the file.,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,6,Q_NFS_UID,uid,,uint32,Generic user ID.,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,7,Q_NFS_GID,gid,,uint32,Identifier of the file owner's group (see page 21 of RFC 1813).,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,10,Q_NFS_MODE,mode,,uint32,Protection mode bits (see page 22 of RFC 1813).,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,9,Q_NFS_TYPE_STRING,type_string,,string,File type (see page 19 of RFC 1813).,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,8,Q_NFS_TYPE,type,,string_index,File type (see page 19 of RFC 1813).,0,session_mod,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),583,Q_MPA_QUERY_TEXT,query_text,,string,Decoded query text.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),582,Q_MPA_QUERY_RAW,query_raw,,string,Query in raw HTML,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),581,Q_MPA_QUERY,query,,parent,Parent attribute gathering the attributes relative to a query.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),2,Q_NICONICO_DOUGA_VIDEOID,videoid,,string,Nico nico video identifier.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),3,Q_NICONICO_DOUGA_TAG,tag,,string,Video tag.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),4,Q_NICONICO_DOUGA_TITLE,title,,string,Title of the video.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),5,Q_NICONICO_DOUGA_DESCRIPTION,description,,string,Synopsis of the video.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),532,Q_MPA_DATE,date,,string,Release date of the video.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),1,Q_NICONICO_DOUGA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),704,Q_MPA_NICKNAME,nickname,,string,User nickname.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,1,Q_NNTP_NEWSGROUP,newsgroup,,string,Newsgroup name.,0,session_mod,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,2,Q_NNTP_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,805,Q_MPA_HEADER_RAW,header_raw,,string,One NNTP header line (field and value).,0,session_mod,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,session_fix,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,2,Q_NTP_SOURCE,source,,string_index,Reference of the primary source.,0,session_mod,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,3,Q_NTP_REFERENCE_CLOCK,reference_clock,,ip_addr,Reference clock IP address.,0,session_mod,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,4,Q_NTP_POLL_INTERVAL,poll_interval,,uint16,Polling interval (in seconds).,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,1,Q_ODNOKLASSNIKI_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -553,Q_PROTO_OOVOO,Instant Messaging,oovoo,Oovoo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -570,Q_PROTO_OPENBSD_UPDATE,Web,openbsd_update,OpenBSD Updates,1,Q_OPENBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0 -336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,1,Q_OPENVPN_OPCODE,opcode,,uint8,Operation code or message type,0,session_mod,0 -336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,2,Q_OPENVPN_SEQ,seq,,uint32,Sequence number,0,session_mod,0 -578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version of Opera which will be installed.,0,session_fix,0 -578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Opera version currently installed.,0,session_fix,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,1,Q_OSPF_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,2,Q_OSPF_ROUTER_ID,router_id,,ip_addr,Router Id.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,3,Q_OSPF_AREA_ID,area_id,,ip_addr,The Area ID of the area to which the attached network belongs.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,4,Q_OSPF_AUTH_TYPE,auth_type,,string_index,Type of authentication used.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,38,Q_OSPF_AUTH_DATA,auth_data,,binary,Authentication data.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,5,Q_OSPF_HELLO_INTERVAL,hello_interval,,uint16,The number of seconds between this router's Hello packets.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,6,Q_OSPF_NETMASK,netmask,,ip_addr,The network mask associated with this interface.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,7,Q_OSPF_PRIO,prio,,uint8,This router's Router Priority. Used in (Backup) Designated Router election.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,8,Q_OSPF_DEAD_INTERVAL,dead_interval,,uint32,The number of seconds before declaring a silent router down.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,9,Q_OSPF_DESIGNED_ROUTER,designed_router,,ip_addr,"The identity of the Designated Router for this network, in the view of the sending router>.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,10,Q_OSPF_BACKUP_ROUTER,backup_router,,ip_addr,"The identity of the Backup Designated Router for this network, in the view of the sending router.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,11,Q_OSPF_NEIGHBOR,neighbor,,ip_addr,The Router IDs of each router from whom valid Hello packets have been seen recently on the network.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,12,Q_OSPF_LS_ENTRY,ls_entry,,parent,A parent entry for ls attributes.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,13,Q_OSPF_LS_AGE,ls_age,,uint16,The time in seconds since the LSA was originated.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,14,Q_OSPF_LS_TYPE,ls_type,,uint32,The type of the LSA.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,15,Q_OSPF_LS_ID,ls_id,,ip_addr,This field identifies the portion of the internet environment that is being described by the LSA.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,16,Q_OSPF_LS_ADV_ROUTER,ls_adv_router,,ip_addr,The Router ID of the router that originated the LSA.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,17,Q_OSPF_LS_SEQ_NUMBER,ls_seq_number,,uint32,Detects old or duplicate LSAs.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,18,Q_OSPF_LS_NETMASK,ls_netmask,,ip_addr,The IP address mask for the network.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,19,Q_OSPF_LS_METRIC,ls_metric,,uint32,The cost of this route.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,20,Q_OSPF_LS_ATTACH_ROUTER,ls_attach_router,,ip_addr,The Router IDs of each of the routers attached to the network.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,21,Q_OSPF_LS_FLAGS_V,ls_flags_v,,uint8,"When set, the router is an endpoint of one or more fully adjacent virtual links having the described area as Transit area.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,22,Q_OSPF_LS_FLAGS_E,ls_flags_e,,uint8,"When set, the router is an AS boundary router.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,23,Q_OSPF_LS_FLAGS_B,ls_flags_b,,uint8,"When set, the router is an area border router.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,24,Q_OSPF_LS_OPTIONS,ls_options,,uint8,Content of the options field present in the LS description.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,25,Q_OSPF_LINK_ENTRY,link_entry,,parent,Parent entry for link attributes.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,26,Q_OSPF_LINK_ID,link_id,,ip_addr,Identifies the object that this router link connects to.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,27,Q_OSPF_LINK_DATA,link_data,,ip_addr,"For connections to stub networks, Link Data specifies the network's IP address mask. For unnumbered point-to-point connections, it specifies the interface's MIB-II [Ref8] ifIndex value. For the other link types it specifies the router interface's IP address.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,28,Q_OSPF_LINK_TYPE,link_type,,uint8,A quick description of the router link.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,29,Q_OSPF_INTERFACE_MTU,interface_mtu,,uint16,The MTU for this interface.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,30,Q_OSPF_OPTIONS,options,,uint8,The optional capabilities supported by the router.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,31,Q_OSPF_FLAGS_I,flags_i,,uint8,"The Init bit. When set to 1, this packet is the first in the sequence of Database Description Packets.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,32,Q_OSPF_FLAGS_M,flags_m,,uint8,"The More bit. When set to 1, it indicates that more Database Description Packets are to follow.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,33,Q_OSPF_FLAGS_MS,flags_ms,,uint8,"The Master/Slave bit. When set to 1, it indicates that the router is the master during the Database Exchange process. Otherwise, the router is the slave.",0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,34,Q_OSPF_DD_SEQ_NBR,dd_seq_nbr,,uint32,Used to sequence the collection of Database Description Packets.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,35,Q_OSPF_EXTERNAL_ENTRY,external_entry,,parent,Parent entry for external_fwd_addr and external_route_tag.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,36,Q_OSPF_EXTERNAL_FWD_ADDR,external_fwd_addr,,ip_addr,Data traffic for the advertised destination will be forwarded to this address.,0,session_mod,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,37,Q_OSPF_EXTERNAL_ROUTE_TAG,external_route_tag,,uint32,A 32-bit field attached to each external route.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,1,Q_PALTALK_UID,uid,,uint32,Generic user ID.,0,session_fix,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,2,Q_PALTALK_USER_EMAIL,user_email,,string,User's email address.,0,session_fix,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,580,Q_MPA_PROTO_VERSION,proto_version,,uint16,Protocol version used,0,session_fix,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,3,Q_PALTALK_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,6,Q_PALTALK_CHANNEL,channel,,string,Chat room name.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,4,Q_PALTALK_SENDER_UID,sender_uid,,uint32,Message sender's unique identifier.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,5,Q_PALTALK_RECEIVER_UID,receiver_uid,,uint32,Message receiver's unique identifier.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,7,Q_PALTALK_CALLER_UID,caller_uid,,uint32,Caller's unique identifier.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,8,Q_PALTALK_CALLEE_UID,callee_uid,,uint32,Callee's unique identifier.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0 -143,Q_PROTO_PALTALK_AUDIO,Audio/Video,paltalk_audio,Paltalk audio chat,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,600,Q_MPA_SENDER,sender,,string,File sender (this attribute is no longer extracted),0,session_fix,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_fix,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,1,Q_PALTALK_TRANSFER_SENDER_UID,sender_uid,,uint32,File sender's UID,0,session_fix,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,2,Q_PALTALK_TRANSFER_RECEIVER_UID,receiver_uid,,uint32,File receiver's UID,0,session_fix,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -599,Q_PROTO_PALTALK_VIDEO,Audio/Video,paltalk_video,Paltalk video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,1,Q_PAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,1,Q_PERFORCE_PARAMETER,parameter,,parent,Parent attribute containing the metadata related to a perforce parameter.,0,session_mod,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,2,Q_PERFORCE_PARAMETER_NAME,parameter_name,,string,Name of the perforce parameter.,0,session_prt,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,4,Q_PERFORCE_PARAMETER_VALUE,parameter_value,,string,Value of the perforce parameter.,0,session_prt,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,3,Q_PERFORCE_PARAMETER_SIZE,parameter_size,,uint32,Size in bytes of the parameter value.,0,session_prt,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of the attached file.,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),806,Q_MPA_FILE_TYPE,file_type,,string,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server banner line.,0,session_fix,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_fix,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),805,Q_MPA_HEADER_RAW,header_raw,,string,One POP3 header line (field and value).,0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,4,Q_POSTGRES_AUTHENTIFICATION_TYPE,authentification_type,,string,Authentication method requested by the server.,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,1,Q_POSTGRES_BASE,base,,string,Database name.,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,2,Q_POSTGRES_SERVER_VERSION,server_version,,string,Server version,0,session_fix,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version used,0,session_fix,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,581,Q_MPA_QUERY,query,,string,Query sent,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,3,Q_POSTGRES_ERROR,error,,string,Error message,0,session_mod,0 -150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0 -331,Q_PROTO_PPLIVE,Audio/Video,pplive,pplive,555,Q_MPA_METHOD,method,,string,Contains the method used for a PPLive Live Streaming command,0,session_mod,0 -151,Q_PROTO_PPP,Tunneling,ppp,Point-to-Point Protocol,1,Q_PPP_PROTOCOL,protocol,,string,Higher level protocol code or name.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,1,Q_PPPOE_VERSION,version,,uint8,Version of the protocol.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,2,Q_PPPOE_TYPE,type,,uint8,Type field. Its unique valid value is 1.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,3,Q_PPPOE_CODE,code,,uint8,Attribute showing the current stage of the session.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,4,Q_PPPOE_SESSION_ID,session_id,,uint16,Uniquely identifies the current user session.,0,pkt,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,1,Q_PPTP_CONTROL_TYPE,control_type,,string_index,Message type.,0,session_mod,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,2,Q_PPTP_VENDOR,vendor,,string,"The type of PAC being used, or the type of PNS software being used",0,session_mod,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,3,Q_PPTP_RESULT_CODE,result_code,,string_index,Return message.,0,pkt,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,1,Q_Q931_DISPLAY,display,,string,Display name.,0,session_fix,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,2,Q_Q931_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,3,Q_Q931_SETUP_DELAY,setup_delay,,timeval,Call setup delay,0,session_prt,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,4,Q_Q931_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_fix,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,5,Q_Q931_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session_mod,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,6,Q_Q931_CAUSE,cause,,string_index,Disconnect cause.,0,session_mod,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q.931,7,Q_Q931_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session_mod,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,1,Q_QQ_VERSION_CODE,version_code,,string,The protocol version number used by the client.,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,2,Q_QQ_MSG_TYPE,msg_type,,uint32,QQ command name.,0,session_mod,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,4,Q_QQ_CALL_DATA,call_data,,buffer,QQ payload containing the data of the call (audio/video),0,session_mod,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,528,Q_MPA_CONTACT_LOGIN,contact_login,x,string,(deprecated) Contact Login,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,3,Q_QQ_MSG_CODE,msg_code,x,uint32,(deprecated) QQ command number.,0,session_mod,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,608,Q_MPA_VERSION,version,x,string_index,(deprecated) The protocol version name used by the client.,0,session_fix,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_fix,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,512,Q_MPA_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session_mod,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,1,Q_QQ_TRANSFER_FILEKEY,filekey,,string,MD5Sum computed on file data (extracted from data flow),0,session_mod,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_fix,0 -157,Q_PROTO_QUAKE,Game,quake,Quake,1,Q_QUAKE_SERVER,server,,string,Server name.,0,session_fix,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,3,Q_QVOD_PEER_PORT,peer_port,,uint16,Listening TCP port of the QVOD peer.,0,session_mod,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,2,Q_QVOD_PEER_IP,peer_ip,,ip_addr,IPv4 address of the QVOD peer.,0,session_mod,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,1,Q_QVOD_PEER,peer,,parent,Parent attribute containing metadata related to a QVOD peer.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,15,Q_RADIUS_REQUEST,request,,parent,Contains information in a radius message.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,1,Q_RADIUS_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,2,Q_RADIUS_FRAMED_IP,framed_ip,,ip_addr,IP address.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,47,Q_RADIUS_FRAMED_IP_NETMASK,framed_ip_netmask,,ip_addr,IP netmask.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,3,Q_RADIUS_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,4,Q_RADIUS_STATUS,status,,string_index,Status.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,5,Q_RADIUS_CODE,code,,uint8,Radius message code.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,6,Q_RADIUS_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,7,Q_RADIUS_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,8,Q_RADIUS_NAS_IP,nas_ip,,ip_addr,IP address of the NAS originating the Access-Request,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,9,Q_RADIUS_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,18,Q_RADIUS_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of physical port the network access server (NAS) is using to authenticate the user.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,19,Q_RADIUS_NAS_PORT_ID,nas_port_id,,string,Identifies the NAS.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,10,Q_RADIUS_CALLBACK_NUMBER,callback_number,,string,Contains the dialing string to be used for callback,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,11,Q_RADIUS_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,12,Q_RADIUS_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint32,Indicates how many octets have been sent to the port in the course of delivering this service,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,13,Q_RADIUS_ACCT_INPUT_OCTETS,acct_input_octets,,uint32,Indicates how many octets have been received from the port over the course of this service being provided,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,14,Q_RADIUS_ID,id,,uint8,Indicates the packet identifier. It must be less than 255,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,20,Q_RADIUS_SESSION_TIMEOUT,session_timeout,,uint32,The maximum number of seconds of service to be provided to the user before termination of the session or prompt.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,21,Q_RADIUS_IDLE_TIMEOUT,idle_timeout,,uint32,The maximum number of consecutive seconds of idle connection allowed to the user before termination of the session or prompt.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,16,Q_RADIUS_START_TIME,start_time,,timeval,Indicates the beginning of the user service.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,17,Q_RADIUS_STOP_TIME,stop_time,,timeval,Indicates the end of the user service.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,23,Q_RADIUS_NAS_IPV6,nas_ipv6,,ip6_addr,IPv6 address of the NAS originating the Access-Request.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,26,Q_RADIUS_LOGIN_IPV6_HOST,login_ipv6_host,,ip6_addr,Indicates the system with which to connect the user.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,27,Q_RADIUS_FRAMED_IPV6_ROUTE,framed_ipv6_route,,string,Provides the routing information to be configured for the user on the NAS,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,28,Q_RADIUS_FRAMED_IPV6_POOL,framed_ipv6_pool,,string,Contains the name of an assigned pool that SHOULD be used to assign an IPv6 prefix for the user.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,25,Q_RADIUS_FRAMED_IPV6_PREFIX,framed_ipv6_prefix,,buffer,Provides the ipv6 prefix to be configured for the user.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,46,Q_RADIUS_DELEGATED_IPV6_PREFIX,delegated_ipv6_prefix,,buffer,Provides the ipv6 prefix to be delegated to the user.,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,29,Q_RADIUS_AVP,avp,,parent,An attribute-value pair. One or several avp_ attributes (e.g. avp_str) are created according to the avp_type.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,30,Q_RADIUS_AVP_TYPE,avp_type,,uint8,Attribute type.,0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,31,Q_RADIUS_AVP_TAG,avp_tag,,uint8,The tag value depends on the tunnel used. (CLEP_DATA_UINT8),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,32,Q_RADIUS_AVP_TEXT,avp_text,,buffer,An utf8 character string. (CLEP_DATA_BUFFER),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,33,Q_RADIUS_AVP_STR,avp_str,,buffer,An ascii character string that may contain null bytes. (CLEP_DATA_BUFFER),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,34,Q_RADIUS_AVP_IPV4,avp_ipv4,,ip_addr,An IPv4 address. (CLEP_DATA_IP_ADDR),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,35,Q_RADIUS_AVP_IPV6,avp_ipv6,,ip6_addr,An IPv6 address. (CLEP_DATA_IP6_ADDR),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,36,Q_RADIUS_AVP_INT,avp_int,,uint32,"An 8, 24 or 32 bits integer value. (CLEP_DATA_UINT32)",0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,37,Q_RADIUS_AVP_INT64,avp_int64,,uint64,A 64 bits integer value. (CLEP_DATA_UINT64),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,38,Q_RADIUS_AVP_CHAP_ID,avp_chap_id,,uint8,CHAP identifier. (CLEP_DATA_UINT8),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,39,Q_RADIUS_AVP_VENDOR_ID,avp_vendor_id,,uint32,SMI Network Management Private Enterprise Code. (CLEP_DATA_UINT32),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,40,Q_RADIUS_AVP_INTERFACE_ID,avp_interface_id,,uint64,IPv6 interface identifier. (CLEP_DATA_UINT64),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,41,Q_RADIUS_AVP_PREFIX,avp_prefix,,buffer,Ipv6 prefix is a sequence of 0 to 16 bytes. (CLEP_DATA_BUFFER),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,42,Q_RADIUS_AVP_SALT,avp_salt,,uint16,The salt ensures the uniqueness of the encryption key. (CLEP_DATA_UINT16),0,session_mod,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,45,Q_RADIUS_3GPP_IMSI,3gpp_imsi,,string,IMSI for the user,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,43,Q_RADIUS_3GPP_SGSN_ADDRESS,3gpp_sgsn_address,,ip_addr,IP address of the SGSN,0,session_prt,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,44,Q_RADIUS_3GPP_SGSN_MCC_MNC,3gpp_sgsn_mcc_mnc,,uint32,MCC and MNC of the SGSN,0,session_prt,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,1,Q_RAMBLER_DOMAIN,domain,,string,Domain name used for the login of the user.,0,session_mod,0 -318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,1,Q_RAMBLER_WEBMAIL_DOMAIN,domain,,string,Domain name used for the email address of the user.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,643,Q_MPA_REQUEST,request,,parent,Container regrouping information about rapidshare for a certain action.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,550,Q_MPA_LOGIN,login,x,string,This attribute is deprecated.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,578,Q_MPA_PASSWORD,password,x,string,This attribute is deprecated.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,1,Q_RAPIDSHARE_METHOD,method,,string,HTTP method used for this action.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,2,Q_RAPIDSHARE_EMAIL_ADDRESS,email_address,,string,User email address.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,3,Q_RAPIDSHARE_CLIENT_ID,client_id,,string,User account number.,0,session_mod,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,4,Q_RAPIDSHARE_DOWNLOAD_URL,download_url,,string,Downloaded file URL.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),608,Q_MPA_VERSION,version,,string,RDP Version used.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),1,Q_RDP_CLIENT_BUILD,client_build,,uint32,RDP client build.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),2,Q_RDP_DESKTOP_WIDTH,desktop_width,,uint32,desktop width.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),3,Q_RDP_DESKTOP_HEIGHT,desktop_height,,uint32,desktop height.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),4,Q_RDP_HOSTNAME_ASCII,hostname_ascii,,string,"Client hostname, in ASCII.",0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),5,Q_RDP_HOSTNAME_RAW,hostname_raw,,binary,"Client hostname, in unicode.",0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),18,Q_RDP_DOMAIN_ASCII,domain_ascii,,string,"Client domain, in ASCII.",0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),19,Q_RDP_DOMAIN_RAW,domain_raw,,binary,"Client domain, in unicode.",0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),20,Q_RDP_USERNAME_ASCII,username_ascii,,string,"Client login, in ASCII.",0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),21,Q_RDP_USERNAME_RAW,username_raw,,binary,"Client login, in unicode.",0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),23,Q_RDP_DEFAULT_USERNAME,default_username,,string,"User's default login, provided at RDP's client runtime.",0,session_fix,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),6,Q_RDP_SECURITY_PROTOCOL,security_protocol,,string_index,Encryption protocol used.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),7,Q_RDP_SUPPORTED_ENCRYPTION_METHOD,supported_encryption_method,,string_index,Encryption method supported by the client.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),8,Q_RDP_ENCRYPTION_METHOD,encryption_method,,string_index,Encryption method used.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),9,Q_RDP_ENCRYPTION_LEVEL,encryption_level,,string_index,Encryption level used.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),22,Q_RDP_ENCRYPTED,encrypted,,uint32,Indicates if the traffic is encrypted with TLS or CresDDP.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),10,Q_RDP_IO_CHANNEL_ID,io_channel_id,,uint32,IO channel ID.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),11,Q_RDP_CHANNEL_ID,channel_id,,uint32,Communication channel ID.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),12,Q_RDP_CHANNEL,channel,,parent,Communication channel.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),13,Q_RDP_CHANNEL_NAME,channel_name,,string,Communication channel name (An 8-byte array containing a unique 7-character ANSI channel name and a null terminator).,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),14,Q_RDP_CHANNEL_FLAG,channel_flag,,string_index,Communication channel option.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),15,Q_RDP_CHANNEL_DISABLED,channel_disabled,,uint32,Tells whether the channel is disabled.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),16,Q_RDP_CHANNEL_ENCRYPT_WAY,channel_encrypt_way,,string,Tells whether the channel is encrypted.,0,session_mod,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),17,Q_RDP_CHANNEL_PRIORITY,channel_priority,,string,Channel priority.,0,session_mod,0 -160,Q_PROTO_RDT,Audio/Video,rdt,Real Data Transport,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,713,Q_MPA_KERNEL,kernel,,parent,"Parent attribute of kernel_name, kernel_version and kernel_archi.",0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,714,Q_MPA_KERNEL_NAME,kernel_name,,string,Kernel package or package linked to the kernel.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,715,Q_MPA_KERNEL_VERSION,kernel_version,,string,Version number of the kernel package.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,716,Q_MPA_KERNEL_ARCHI,kernel_archi,,string,Archi of package kernel.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,717,Q_MPA_KERNEL_DISTRIB,kernel_distrib,,string,Distrib linked to this kernel package.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,718,Q_MPA_PACKAGE,package,,parent,"Parent attribute of package_name, package_version and package_archi.",0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Distrib linked to this package.,0,session_mod,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,1,Q_RIP2_MESSAGE_TYPE,message_type,,string_index,Type of the sent message (request or response).,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,2,Q_RIP2_IP_ENTRY,ip_entry,,parent,A parent attribute.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,3,Q_RIP2_ADDR_FAMILY,addr_family,,uint16,The family of the address which is present in the packet.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,4,Q_RIP2_ROUTE_TAG,route_tag,,uint16,"The Route Tag provides a method of separating internal"" RIP routes (routes for networks within the RIP routing domain) from ""external"" RIP routes.""",0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,5,Q_RIP2_IP_ADDR,ip_addr,,ip_addr,IP address of a router.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,6,Q_RIP2_NEXT_HOPE,next_hope,,ip_addr,The immediate next hop IP address to which packets to the destination specified by this route entry should be forwarded.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,7,Q_RIP2_NETMASK,netmask,,ip_addr,The Subnet Mask field contains the subnet mask which is applied to the IP address to yield the non-host portion of the address.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,8,Q_RIP2_METRIC,metric,,uint32,Total distance to a router.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,9,Q_RIP2_AUTH_TYPE,auth_type,,uint16,Type of the used authentication.,0,session_mod,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,10,Q_RIP2_AUTHENTICATION,authentication,,string,Authentication content (password for example).,0,session_mod,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,1,Q_RLOGIN_CLIENT_LOGIN,client_login,,string,Name of the client host.,0,session_fix,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,2,Q_RLOGIN_SERVER_LOGIN,server_login,,string,User login.,0,session_fix,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,5,Q_RLOGIN_SERVER_PASSWORD,server_password,,string,User password.,0,session_fix,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,3,Q_RLOGIN_TERM_TYPE,term_type,,string,Terminal type used to establish the remote session.,0,session_fix,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,4,Q_RLOGIN_SPEED,speed,,uint32,Connection speed.,0,session_fix,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,1,Q_RPC_PROGRAM,program,,uint32,Program Identifier.,0,pkt,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,608,Q_MPA_VERSION,version,,uint32,Version of the RPC protocol.,0,pkt,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,2,Q_RPC_PROGRAM_VERSION,program_version,,uint32,Version of the used program over RPC.,0,pkt,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,3,Q_RPC_PROCEDURE,procedure,,uint32,"Contains the request used by the application program (NFS, YelloPages, ...).",0,pkt,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,4,Q_RPC_STATE,state,,uint32,Status of the command response.,0,pkt,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,5,Q_RPC_XID,xid,,uint32,Identifier of the request or the reply.,0,pkt,0 -167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,6,Q_RPC_MESSAGE_TYPE,message_type,,string_index,Message type (Call or Reply).,0,pkt,0 -170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,1,Q_RSH_REMOTE_LOGIN,remote_login,x,string,(Deprecated) User login on the remote server.,0,session_fix,0 -170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,2,Q_RSH_SERVER,server,,string,Remote server.,0,session_fix,0 -173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),1,Q_RSYNC_MODULE,module,,string,Name of the group in which files are gathered.,0,session_mod,0 -173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,1,Q_RTCP_CNAME,cname,,string,User name.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,577,Q_MPA_NAME,name,,string,Complete user name.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,2,Q_RTCP_EMAIL,email,,string,User's email address.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,3,Q_RTCP_PHONE,phone,,string,User's phone number.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,4,Q_RTCP_LOC,loc,,string,User's location.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,5,Q_RTCP_TOOL,tool,,string,Client's software.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,6,Q_RTCP_NOTE,note,,string,User's comments.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,7,Q_RTCP_MESSAGE_TYPE,message_type,,string_index,Contains the RTCP message type.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,11,Q_RTCP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,33,Q_RTCP_RECEIVER_REPORT,receiver_report,,parent,Reception report that contains all fields concerning quality and metrics,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,26,Q_RTCP_RR_PKT_SENDER_SSRC,rr_pkt_sender_ssrc,,uint32,The synchronization source identifier for the originator of this Receiver Report packet.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,27,Q_RTCP_RR_RPTBLOCK,rr_rptblock,,parent,Receiver report block that contains all reception related fields,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,8,Q_RTCP_RR_JITTER,rr_jitter,,uint32,Jitter value (in receiver report).,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,9,Q_RTCP_RR_CUMLOST,rr_cumlost,,uint32,Contains the cumulative number of lost packets (in receiver reports).,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,10,Q_RTCP_RR_SSRC_ID,rr_ssrc_id,,uint32,Identity of the source that sent the receiver report.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,28,Q_RTCP_RR_FCNLOST,rr_fcnlost,,uint8,The fraction of RTP data packets from source lost since the previous RR packet,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,29,Q_RTCP_RR_HIGHESTSEQNUM,rr_highestseqnum,,uint32,highest sequence number received in an RTP data packet from source SSRC_n,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,30,Q_RTCP_RR_LSR,rr_lsr,,uint32,The middle 32 bits out of 64 in the NTP timestamp,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,31,Q_RTCP_RR_DLSR,rr_dlsr,,uint32,The delay between receiving the last RR packet from source n and sending reception report block.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,32,Q_RTCP_SENDER_REPORT,sender_report,,parent,The report concerning the sending side,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,12,Q_RTCP_SR_PKT_SENDER_SSRC,sr_pkt_sender_ssrc,,uint32,The synchronization source identifier for the originator of this Sender Report packet.,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,13,Q_RTCP_SR_SENDER_INFO,sr_sender_info,,parent,The record that contains all information about a given sender,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,34,Q_RTCP_SR_NTP_TS_MSW,sr_ntp_ts_msw,,uint32,"NTP timestamp, most significant word",0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,35,Q_RTCP_SR_NTP_TS_LSW,sr_ntp_ts_lsw,,uint32,"NTP timestamp, least significant word",0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,15,Q_RTCP_SR_RTP_TS,sr_rtp_ts,,uint32,RTP timestamp,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,16,Q_RTCP_SR_PKT_COUNT,sr_pkt_count,,uint32,The total number of RTP data packets transmitted by the sender,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,17,Q_RTCP_SR_OCTET_COUNT,sr_octet_count,,uint32,The total number of payload octets transmitted in RTP,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,18,Q_RTCP_SR_RPTBLOCK,sr_rptblock,,parent,The record containing fields about the sending side quality and metrics,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,19,Q_RTCP_SR_SSRC_ID,sr_ssrc_id,,uint32,The SSRC identifier of the source,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,20,Q_RTCP_SR_FCNLOST,sr_fcnlost,,uint8,The fraction of RTP data packets from source lost since the previous SR packet,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,21,Q_RTCP_SR_CUMLOST,sr_cumlost,,uint32,>Contains the cumulative number of lost packets (in sender reports).,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,22,Q_RTCP_SR_HIGHESTSEQNUM,sr_highestseqnum,,uint32,highest sequence number received in an RTP data packet from source SSRC_n,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,23,Q_RTCP_SR_JITTER,sr_jitter,,uint32,Jitter value (in Sender report).,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,24,Q_RTCP_SR_LSR,sr_lsr,,uint32,The middle 32 bits out of 64 in the NTP timestamp,0,session_mod,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,25,Q_RTCP_SR_DLSR,sr_dlsr,,uint32,The delay between receiving the last SR packet from source n and sending reception report block.,0,session_mod,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,7,Q_RTMP_STREAM,stream,,parent,Parent attribute containing the metadata related to a particular audio/video stream.,0,session_mod,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,1,Q_RTMP_PAGE_URL,page_url,,string,URL of the webpage where the audio/video content is streamed.,0,session_prt,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,2,Q_RTMP_STREAM_URL,stream_url,,string,URL of the streamed audio/video.,0,session_prt,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,3,Q_RTMP_APP_NAME,app_name,,string,Name of the application accessing the streamed content.,0,session_prt,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,5,Q_RTMP_START_TIME,start_time,,uint32,The timestamp of the beginning of the streamed audio/video (in ms).,0,session_prt,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,6,Q_RTMP_STOP_TIME,stop_time,,uint32,The timestamp of the end of the streamed audio/video (in ms).,0,session_prt,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,4,Q_RTMP_LIVE_STREAM_INDICATOR,live_stream_indicator,,uint8,Indication reported by the server that the playout is live content,0,session_prt,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,13,Q_RTP_END_SESSION,end_session,,string,The end_session attribute is raised at the end of the RTP session,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,1,Q_RTP_CODEC,codec,,parent,Contains information about the codec used.,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,11,Q_RTP_CODEC_NAME,codec_name,,string,Name of the codec.,0,session_prt,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,14,Q_RTP_CODEC_INDEX,codec_index,,uint8,Number identifying the codec.,0,session_prt,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,2,Q_RTP_LOST,lost,,uint8,Counter of lost packets (use with sum).,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,3,Q_RTP_UNSEQ,unseq,,uint32,Contains the number of miss ordered packets (use sum).,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,4,Q_RTP_MOS,mos,x,uint32,Standard voice quality indicator (Mean Opinion Score). This attribute is deprecated.,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,5,Q_RTP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,6,Q_RTP_TIMESTAMP,timestamp,,uint32,RTP packet timestamp.,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,10,Q_RTP_SNUMBER,snumber,,uint16,Sequence number of RTP packet,0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,12,Q_RTP_PAYLOAD_DATA,payload_data,,buffer,A binary buffer containing the RTP data (without header),1,session_mod,1 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,8,Q_RTP_MOS_SESSION,mos_session,,uint32,"Standard voice quality indicator, multiplied by 1000.",0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,9,Q_RTP_RFACTOR,rfactor,,uint32,"Rfactor value, following the ITU G.107 calculation method, multiplied by 1000.",0,session_mod,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,7,Q_RTP_MOS_SATELLITE,mos_satellite,x,uint32,Standard voice quality indicator for satellite (Mean Opinion Score). This attribute is deprecated.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,21,Q_RTSP_REQUEST,request,,parent,RTSP request.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,1,Q_RTSP_RTP_CLIENT_PORT,rtp_client_port,,uint16,RTP's client port.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,2,Q_RTSP_RTCP_CLIENT_PORT,rtcp_client_port,,uint16,RTCP's client port.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,3,Q_RTSP_RTP_SERVER_PORT,rtp_server_port,,uint16,RTP's server port.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,4,Q_RTSP_RTCP_SERVER_PORT,rtcp_server_port,,uint16,RTCP's server port.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,15,Q_RTSP_RDT_SERVER_PORT,rdt_server_port,,uint16,UDP's server port.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,16,Q_RTSP_RDT_CLIENT_PORT,rdt_client_port,,uint16,UDP's client port.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the streamed file.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,555,Q_MPA_METHOD,method,,string,RTSP command sent by the client.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,17,Q_RTSP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,8,Q_RTSP_SERVER,server,,string,Name of the streaming server.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,29,Q_RTSP_DIRECTORY,directory,,string,File directory.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,9,Q_RTSP_CODE,code,,uint32,Server return code.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,32,Q_RTSP_RETURNMSG,returnmsg,,string_index,Contains the text explaining the return codes.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,24,Q_RTSP_URI,uri,,string,Complete name (path + filename) of a web resource (truncated at 1503 characters).,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,33,Q_RTSP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the stream.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,34,Q_RTSP_URI_END_OFFSET,uri_end_offset,,uint32,Offset to the first byte which is not part of the URI in the stream.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,25,Q_RTSP_URILAST64,urilast64,,string,uri last 64 characters of the uri.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,26,Q_RTSP_URILEN,urilen,,uint32,uri length.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,27,Q_RTSP_URIMD5,urimd5,,binary,md5 of the uri.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,28,Q_RTSP_URI_FULL,uri_full,,string,Complete name (path + filename) of a web resource (not truncated).,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,18,Q_RTSP_HEADER,header,,parent,"One RTSP header line, parent attribute.",0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,19,Q_RTSP_HEADER_NAME,header_name,,string,One RTSP header line (field).,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,20,Q_RTSP_HEADER_VALUE,header_value,,string,One RTSP header line (value).,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,30,Q_RTSP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,14,Q_RTSP_CSEQ,cseq,,string,Sequence number.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,530,Q_MPA_CONTENT,content,,buffer,Contains the data in a HTTP response.,1,session_mod,1 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,22,Q_RTSP_START_TIME,start_time,,timeval,Start date of the call.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,23,Q_RTSP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the different codecs values that can be used for audio/video transmission,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,698,Q_MPA_DATA_PORT,data_port,x,uint16,This attribute is deprecated,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_mod,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,1,Q_S1AP_EP,ep,,parent,Contains Elementary Procedure attributes.,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,2,Q_S1AP_EP_CODE,ep_code,,uint8,Elementary Procedure identifier.,0,session_prt,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,3,Q_S1AP_EP_NAME,ep_name,,string,Elementary Procedure name.,0,session_prt,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,4,Q_S1AP_EP_VALUE_RAW,ep_value_raw,,buffer,Elementary Procedure raw value.,1,session_prt,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,5,Q_S1AP_EP_MME_UE_ID,ep_mme_ue_id,,uint32,Mobility Management Entity Identifier (MME UE S1AP ID).,0,session_prt,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,6,Q_S1AP_EP_ENB_UE_ID,ep_enb_ue_id,,uint32,E-UTRAN NodeB Identifier (eNB UE S1AP ID).,0,session_prt,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,7,Q_S1AP_EP_IE,ep_ie,,string,Contains Information Element attributes.,0,session_prt,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,8,Q_S1AP_EP_IE_CODE,ep_ie_code,,uint8,Information Element identifier.,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,9,Q_S1AP_EP_IE_NAME,ep_ie_name,,string,Information Element name.,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,10,Q_S1AP_EP_IE_VALUE_RAW,ep_ie_value_raw,,buffer,Information Element raw value.,1,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,11,Q_S1AP_EP_IE_RAB,ep_ie_rab,,string,Contains E-RAB attributes.,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,12,Q_S1AP_EP_IE_RAB_ID,ep_ie_rab_id,,uint8,E-UTRAN Radio Access Bearer (E-RAB ID).,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,13,Q_S1AP_EP_IE_RAB_ADDR,ep_ie_rab_addr,,ip_addr,Transport Layer Address (IPv4).,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,14,Q_S1AP_EP_IE_RAB_ADDR6,ep_ie_rab_addr6,,ip6_addr,Transport Layer Address (IPv6).,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,15,Q_S1AP_EP_IE_RAB_TEID,ep_ie_rab_teid,,string,GTP Tunnel Endpoint Identifier (GTP-TEID).,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,16,Q_S1AP_EP_IE_TAI,ep_ie_tai,,string,Tracking Area Identifier (TAI).,0,session_mod,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,17,Q_S1AP_EP_IE_CGI,ep_ie_cgi,,string,E-UTRAN Cell Global Identifier (E-UTRAN CGI).,0,session_mod,0 -1121,Q_PROTO_SAMSUNG_APPS,Application Service,samsung_apps,Samsung Apps,1,Q_SAMSUNG_APPS_IS_SMARTPHONE,is_smartphone,,uint32,Boolean attribute indicating whether the client is a smartphone(1) or not(0).,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,1,Q_SCCP_MESSAGE_TYPE,message_type,,uint32,The type of the message.,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,660,Q_MPA_CALL_ID,call_id,,uint32,"Call id, extracted for each call.",0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,3,Q_SCCP_CALLERNAME,callername,,string,Calling party identity,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,4,Q_SCCP_CALLEENAME,calleename,,string,Called party identity,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,20,Q_SCCP_DEVICE_TYPE,device_type,,uint32,Device type,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,21,Q_SCCP_DEVICE_NAME,device_name,,string,Device name,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,5,Q_SCCP_CALL_WAY,call_way,,uint32,"The call Way (In, Out)",0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,8,Q_SCCP_CALLSTATE,callstate,,uint32,Status of the current call,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,19,Q_SCCP_STATS,stats,,parent,Regroups connection statistics,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,9,Q_SCCP_NB_PKT_SENT,nb_pkt_sent,,uint32,Number of RTP packets sent,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,10,Q_SCCP_NB_PKT_RCV,nb_pkt_rcv,,uint32,Number of RTP packets received,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,11,Q_SCCP_NB_BYT_SENT,nb_byt_sent,,uint32,Number of RTP octets sent,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,12,Q_SCCP_NB_BYT_RCV,nb_byt_rcv,,uint32,Number of RTP octets received,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,13,Q_SCCP_NB_PKT_LOST,nb_pkt_lost,,uint32,Number of RTP packets lost,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,14,Q_SCCP_STATS_JITTER,stats_jitter,,uint32,Observed Jitter for RTP packets,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,15,Q_SCCP_STATS_LATENCY,stats_latency,,uint32,Observed latency for RTP packets,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,16,Q_SCCP_KEYPAD,keypad,,uint32,Contains the key pressed on the handset,0,pkt,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,17,Q_SCCP_CODEC,codec,,uint32,The codec used in the RTP session,0,session_mod,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,18,Q_SCCP_SOFTKEYEVENT,softkeyevent,,uint32,Contains the soft key event,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_fix,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_fix,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,1,Q_SCTP_CHUNK,chunk,,parent,A parent attribute representing a chunk entity.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,2,Q_SCTP_CHUNK_TYPE,chunk_type,,uint8,Containing the type of the chunk.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,3,Q_SCTP_CHUNK_DATA,chunk_data,,parent,Parent containing attributes relative to chunk data.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,4,Q_SCTP_CHUNK_DATA_TSN,chunk_data_tsn,,uint32,The Transmission Sequence Number is a global sequence number of chunks.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,5,Q_SCTP_CHUNK_DATA_STREAM_ID,chunk_data_stream_id,,uint16,An identifier indicating the stream to which the chunk belongs.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,6,Q_SCTP_CHUNK_DATA_STREAM_SEQ,chunk_data_stream_seq,,uint16,An identifier indicating the sequence number of the chunk data.,0,session_mod,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,7,Q_SCTP_CHUNK_DATA_PROTO,chunk_data_proto,,uint32,Indicating the data type (or protocol) containing in the chunk.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,525,Q_MPA_CHAT,chat,,parent,Chat message information.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,550,Q_MPA_LOGIN,login,,string,Name of virtual character.,0,session_fix,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,1,Q_SECONDLIFE_LOGIN_ID,login_id,,binary,Id of virtual character.,0,session_fix,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,552,Q_MPA_MESSAGE,message,,string,Content of chat message.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,2,Q_SECONDLIFE_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,3,Q_SECONDLIFE_SOURCE,source,,parent,Information about the source of chat message.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,600,Q_MPA_SENDER,sender,,binary,Sender Id.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,5,Q_SECONDLIFE_SOURCE_NAME,source_name,,string,Source name.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,6,Q_SECONDLIFE_SOURCE_TYPE,source_type,,string,Source type.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,7,Q_SECONDLIFE_SOURCE_ID,source_id,,binary,Source Id.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,8,Q_SECONDLIFE_SESSION_ID,session_id,,binary,Uniquely identifies the current user session.,0,session_mod,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,9,Q_SECONDLIFE_CHAT_TYPE,chat_type,,string,Chat message type.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,24,Q_SIP_REQUEST,request,,parent,SIP request.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,20,Q_SIP_URI,uri,,string,Contains the URI (similar to To: field),0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,65,Q_SIP_EXPIRES,expires,,uint32,Time in seconds after which the message expires.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,7,Q_SIP_REPLY_CODE,reply_code,,string,Return status code.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,4,Q_SIP_MIME_TYPE,mime_type,,string,Data type.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,50,Q_SIP_REQUEST_CALL_ID,request_call_id,,string,Call's id extracted for each sip request.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,47,Q_SIP_SERVER_AGENT,server_agent,,string,Server's software.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,16,Q_SIP_CSEQ,cseq,,string,Sequence number,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,18,Q_SIP_VIA,via,,string,The Via header field indicates the transport used for the transaction and identifies the location where the response is to be sent,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,19,Q_SIP_CONTACT,contact,,string,The Contact header field provides a SIP or SIPS URI that can be used to contact that specific instance of the UA for subsequent requests,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,21,Q_SIP_RECORD_ROUTE,record_route,,string,The Record-Route header field is inserted by proxies in a request to force future requests in the dialog to be routed through the proxy,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,22,Q_SIP_P_ASSERTED_ID,p_asserted_id,,string,Indicates the identity of the trusted SIP server,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,23,Q_SIP_REMOTE_PARTY_ID,remote_party_id,,string,The IP address of the remote party.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,15,Q_SIP_REASON,reason,,string,The reason a Session Initiation Protocol request was issued.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,48,Q_SIP_FROM,from,,string,The initiator of the request.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,49,Q_SIP_TO,to,,string,The recipient of the request.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,607,Q_MPA_SUBJECT,subject,,string,the subject header present in the SIP packet,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,38,Q_SIP_CALLER_DOMAIN,caller_domain,,string,Caller's domain,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,40,Q_SIP_CALLEE_DOMAIN,callee_domain,,string,Callee's domain,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,56,Q_SIP_CALLER_USER_PHONE,caller_user_phone,,int32,Caller's phone presence flag,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,57,Q_SIP_CALLEE_USER_PHONE,callee_user_phone,,int32,Callee's phone presence flag,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,58,Q_SIP_DATE,date,,string,Contains the date and time.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,59,Q_SIP_PROXY_AUTHORIZATION,proxy_authorization,,string,allows the client to identify itself (or its user) to a proxy that requires authentication,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,60,Q_SIP_WWW_AUTHENTICATE,www_authenticate,,string,Contains an authentication challenge.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,66,Q_SIP_AUTHORIZATION_USERNAME,authorization_username,,string,User's name as specified in the Authorization SIP header.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,61,Q_SIP_ALERT_INFO,alert_info,,string,Specifies an alternative ring tone.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,62,Q_SIP_CALL_INFO,call_info,,string,Provides additional information about the caller or callee.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,63,Q_SIP_ACCEPT_LANGUAGE,accept_language,,string,Indicates the preferred languages.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,8,Q_SIP_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,17,Q_SIP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,9,Q_SIP_SESSION_DURATION,session_duration,,timeval,"Duration of the session, between INVITE and BYE.",0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,14,Q_SIP_SETUP_DELAY,setup_delay,,timeval,Call setup delay.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,51,Q_SIP_CALLER_E164,caller_e164,,string,Format of the caller's telephone numbers,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,52,Q_SIP_CALLEE_E164,callee_e164,,string,Format of the callee's telephone numbers,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,29,Q_SIP_CALLER_NICKNAME,caller_nickname,,string,the caller nickname,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,30,Q_SIP_CALLEE_NICKNAME,callee_nickname,,string,the callee nickname,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,54,Q_SIP_FROM_TAG,from_tag,,buffer,A globally unique id of the caller.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,55,Q_SIP_TO_TAG,to_tag,,buffer,A globally unique id of the callee.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,1,Q_SIP_CONFCALL_CALLER,confcall_caller,,string,"Caller's name, in a confcall.",0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,2,Q_SIP_CONFCALL_CALLEE,confcall_callee,,string,"Callee's name, in a confcall.",0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,43,Q_SIP_CALLER_USER_AGENT,caller_user_agent,,string,Client's software in the caller way.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,44,Q_SIP_CALLEE_USER_AGENT,callee_user_agent,,string,Client's software used by the callee.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,45,Q_SIP_CALLER_SERVER_AGENT,caller_server_agent,,string,Server's software in the caller way.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,46,Q_SIP_CALLEE_SERVER_AGENT,callee_server_agent,,string,Server's software in the callee way.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,743,Q_MPA_CALLER_ADDR_V6,caller_addr_v6,,ip6_addr,IPv6 address which could be used by the initiator of the call.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,744,Q_MPA_CALLEE_ADDR_V6,callee_addr_v6,,ip6_addr,IPv6 address which could be used by the called party.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port which could be used by the caller.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port which could be used by the callee.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,31,Q_SIP_CONNECTION_INFO,connection_info,,parent,Contains connection information.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,32,Q_SIP_CONNECTION_INFO_ADDR,connection_info_addr,,ip_addr,Connection IPv4 address.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,53,Q_SIP_CONNECTION_INFO_ADDR_V6,connection_info_addr_v6,,ip6_addr,Connection IPv6 address.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,33,Q_SIP_CONNECTION_INFO_ADDR_TYPE,connection_info_addr_type,,string,Connection address type.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,34,Q_SIP_CONNECTION_INFO_NET_TYPE,connection_info_net_type,,string,Network type for the connection.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session_mod,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,801,Q_MPA_MEDIA_ATTR_ADDR_START_OFFSET,media_attr_addr_start_offset,,uint32,Offset to the first IP address field byte given in the media attribute.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,802,Q_MPA_MEDIA_ATTR_ADDR_END_OFFSET,media_attr_addr_end_offset,,uint32,Offset to the first byte which is not part of the IP address field given in the media attribute.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,803,Q_MPA_MEDIA_ATTR_PORT_START_OFFSET,media_attr_port_start_offset,,uint32,Offset to the first PORT field byte given in the media attribute.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,804,Q_MPA_MEDIA_ATTR_PORT_END_OFFSET,media_attr_port_end_offset,,uint32,Offset to the first byte which is not part of the PORT field given in the media attribute.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_prt,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,36,Q_SIP_USER_ID,user_id,,string,Client identifier used for his registering with a SIP server.,0,session_mod,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,608,Q_MPA_VERSION,version,,string,Skype client version.,0,session_mod,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,1,Q_SKYPE_SERVICE,service,,string,Current service identification string. The service is re-evaluated every 5 seconds (can be tuned); This attribute is extracted only when the service changes.,0,session_prt,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer and Audio Skype Out.",0,session_prt,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_prt,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,608,Q_MPA_VERSION,version,,uint32,Current version of the Soulseek client.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,2,Q_SLSK_FILE_ID,file_id,,uint64,"Unique identifier of a file, based on IP of peer and the unique token for this combination file/peer.",0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,1,Q_SLSK_TRANSFER_WAY,transfer_way,,string,Indicates whether the file is uploaded or downloaded.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),643,Q_MPA_REQUEST,request,,parent,Parent attribute containing the metadata related to a given request/answer.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),1,Q_SMB_SERVICE,service,,string,The type of resource that the client intends to access.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),30,Q_SMB_SERVICE_DATA,service_data,,buffer,Data associated with the resource that the client intends to access.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),8,Q_SMB_FILE_ID,file_id,,string,Identifier of the file affected by the command (v1:4 char; usmb_v2:32 char).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),27,Q_SMB_END_OF_FILE,end_of_file,,uint64,The end of file offset value.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),7,Q_SMB_FILE_ATTRIBUTES,file_attributes,,uint32,File attributes (bit field).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),9,Q_SMB_USER_ID,user_id,,uint32,User identifier (SMB usmb_v1 only).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),10,Q_SMB_PROCESS_ID,process_id,,uint32,Identifier of the process being affected by the following command.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),11,Q_SMB_NT_STATUS,nt_status,,uint32,NT error code.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),2,Q_SMB_DIRECTORY,directory,x,string,(deprecated) Name of the shared directory on the server host.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),20,Q_SMB_PATH,path,,string,The server/share name of the resource to which the client attempts to connect.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),3,Q_SMB_DOMAIN,domain,,string,Domain name.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),4,Q_SMB_NATIVE_OS,native_os,,string,Client's operating system.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),16,Q_SMB_NATIVE_LAN_MANAGER,native_lan_manager,,string,The native LAN manager type.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),5,Q_SMB_COMMAND,command,,uint16,Command number use.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),15,Q_SMB_COMMAND_STRING,command_string,,string,Command name.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),6,Q_SMB_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),584,Q_MPA_QUERY_TYPE,query_type,,uint8,Indicates if the message is a request (1) or a response (2).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),14,Q_SMB_QUERY_ID,query_id,,uint64,Indexes and correlates requests and responses.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),12,Q_SMB_SECURITY_BLOB_LEN,security_blob_len,,uint32,Security blob data length.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),13,Q_SMB_SECURITY_BLOB,security_blob,,buffer,Data contained in the security blob.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),17,Q_SMB_SEARCH_ATTRIBUTES,search_attributes,,uint32,An attribute mask used to specify the standard attributes a file MUST have in order to match the search.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),19,Q_SMB_SEARCH_STORAGE_TYPE,search_storage_type,,uint32,Specify the search type (directory or file).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),18,Q_SMB_SEARCH_PATTERN,search_pattern,,string,The file pattern to search for.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),21,Q_SMB_INFORMATION_LEVEL,information_level,,uint16,"This field contains an information level code, which determines the information contained in the response.",0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),24,Q_SMB_DIALECT,dialect,,string,The version of the SMB Protocol.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),25,Q_SMB_DIALECT_INDEX,dialect_index,,uint16,Index of the selected SMB Protocol version.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),26,Q_SMB_DIALECT_NAME,dialect_name,,uint16,The version name of the SMB Protocol.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),23,Q_SMB_ATTRIBUTES,attributes,,uint32,File attributes/folder (bit field).,0,session_mod,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),22,Q_SMB_EXT_ATTRIBUTES,ext_attributes,x,uint32,(deprecated) Extended File attributes/folder (bit field).,0,session_mod,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,552,Q_MPA_MESSAGE,message,,parent,Parent attribute containing SMS information.,0,session_mod,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,600,Q_MPA_SENDER,sender,,string,Sender's address.,0,session_prt,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,585,Q_MPA_RECEIVER,receiver,,string,Receiver's address.,0,session_prt,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,530,Q_MPA_CONTENT,content,,buffer,Content of the Short Message.,0,session_prt,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,1,Q_SMTP_MAILFROM,mailfrom,,parent,Contains the domain and the sender's email,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,2,Q_SMTP_SENDER_MAILFROM,sender_mailfrom,,string,Sender's email address (used by MAIL FROM method).,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,3,Q_SMTP_SENDER_DOMAIN,sender_domain,,string,Domain of the sender's email address.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,4,Q_SMTP_RCPTTO,rcptto,,parent,Domain and recipient's email address (used by RCPT TO method).,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,5,Q_SMTP_RECEIVER_RCPTTO,receiver_rcptto,,string,Recipient's email address (used by RCPT TO method).,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,6,Q_SMTP_RECEIVER_DOMAIN,receiver_domain,,string,Domain of the recipient's email address.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,805,Q_MPA_HEADER_RAW,header_raw,,string,One SMTP header line (field and value).,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,11,Q_SMTP_RESPONSE_CODE,response_code,,uint32,Return code,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,556,Q_MPA_MIME_TYPE,mime_type,,string,Mail's content type.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,8,Q_SMTP_START_TIME,start_time,,timeval,Starting time of SMTP session,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,9,Q_SMTP_STOP_TIME,stop_time,,timeval,Ending time of SMTP session,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,10,Q_SMTP_DURATION,duration,,timeval,Duration of the SMTP session,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,806,Q_MPA_FILE_TYPE,file_type,,string,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,12,Q_SMTP_SERVER,server,,string,Contains the name of the used smtp server,0,session_fix,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,13,Q_SMTP_SERVER_AGENT,server_agent,,string,The software name used by the email server,0,session_fix,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established,0,session_fix,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0 -189,Q_PROTO_SNAP,Network Service,snap,Sub-Network Access Protocol,1,Q_SNAP_SNAP_TYPE,snap_type,,uint16,Identifier of the encapsulated protocol.,0,pkt,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,608,Q_MPA_VERSION,version,,string_index,SNMP version.,0,session_fix,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,1,Q_SNMP_COMMUNITY,community,,string,Community name.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,643,Q_MPA_REQUEST,request,,parent,Contains the requests attributes,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,555,Q_MPA_METHOD,method,,string,SNMP request type.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,3,Q_SNMP_REQUEST_ID,request_id,,uint32,Request Identifier.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,4,Q_SNMP_VARIABLE,variable,,parent,OID Parent.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,2,Q_SNMP_OID,oid,,string,Object Identifier.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,5,Q_SNMP_VALUE_RAW,value_raw,,buffer,OID raw Value,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,7,Q_SNMP_VALUE_TYPE,value_type,x,string,Object type.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,6,Q_SNMP_VALUE_LEN,value_len,,uint32,Size of value_raw in bytes.,0,session_mod,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,555,Q_MPA_METHOD,method,,string,Contains the SNPP command.,0,session_mod,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,1,Q_SNPP_CALLER_ID,caller_id,,string,Login of person who send the message.,0,session_mod,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,552,Q_MPA_MESSAGE,message,,string,Contains the message sent to the pager.,0,session_mod,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,2,Q_SNPP_PAGER_ID,pager_id,,string,Contains pager number.,0,session_mod,0 -192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKet Secure v4,1,Q_SOCKS4_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session_fix,0 -192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKet Secure v4,2,Q_SOCKS4_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session_fix,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,1,Q_SOCKS5_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session_fix,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,3,Q_SOCKS5_REMOTE_NAME,remote_name,,string,Fully qualified remote domain name.,0,session_fix,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,2,Q_SOCKS5_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session_fix,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,1,Q_SPDY_FRAME_TYPE,frame_type,,uint8,Frame type.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,2,Q_SPDY_STREAM_ID,stream_id,,uint32,Stream identifier.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,3,Q_SPDY_FLAGS,flags,,uint8,Flags,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,4,Q_SPDY_LENGTH,length,,uint32,Length of the message starting at the offset of this field.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,5,Q_SPDY_CONTROL_FRAME,control_frame,,parent,Parent attribute for control frame elements.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,6,Q_SPDY_VERSION,version,,uint16,Version number.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,7,Q_SPDY_CONTROL_TYPE,control_type,,uint16,Control frame type.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,8,Q_SPDY_SYN_STREAM,syn_stream,,parent,Parent attribute for elements of stream synchronization frames.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,9,Q_SPDY_ASSOCIATED_STREAM_ID,associated_stream_id,,uint16,Identifier for a stream which this stream is associated to.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,10,Q_SPDY_PRIORITY,priority,,uint8,A stream priority is represented as an integer. 0 represents the highest priority and 7 represents the lowest priority.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,11,Q_SPDY_SLOT,slot,,uint8,An 8 bit unsigned integer specifying the index in the server's CREDENTIAL vector of the client certificate to be used for this request.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,13,Q_SPDY_RST_STREAM,rst_stream,,parent,Parent attribute for elements of stream reset frames.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,14,Q_SPDY_STATUS_CODE,status_code,,uint32,An indicator for why the stream is being terminated.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,15,Q_SPDY_HEADER_COUNT,header_count,,uint32,The number of repeating name/value pairs following this field,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,16,Q_SPDY_HEADER,header,,parent,Parent attribute for a name/value pair.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,21,Q_SPDY_HEADER_NAME,header_name,,string,"Header name, prefixed by a ':' if it's a mandatory SPDY header.",0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,22,Q_SPDY_HEADER_VALUE,header_value,,string,Header value.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,19,Q_SPDY_DATA_FRAME,data_frame,,parent,Parent attribute for elements of a data frame.,0,session_prt,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,20,Q_SPDY_CONTENT,content,,buffer,Message content.,0,session_prt,1 -1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,1,Q_SPID_RESULT,result,,parent,Parent attribute containing SPID classification results.,0,session_mod,0 -1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,2,Q_SPID_FOUND_PROTOCOL,found_protocol,,string,Protocol name that has been discovered by SPID.,0,session_mod,0 -1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,3,Q_SPID_DIVERGENCE,divergence,,uint32,"Divergence giving the distance"" between the flow content and the selected SPID model. The smaller the divergence, the better the classification.""",0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 -198,Q_PROTO_SSH,Encrypted,ssh,Secure Shell,1,Q_SSH_RTT,rtt,,timeval,Server response time.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,608,Q_MPA_VERSION,version,,string_index,Protocol version.,0,session_fix,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,739,Q_MPA_SESSION_ID,session_id,,buffer,Uniquely identifies the current user session.,0,session_fix,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,3,Q_SSL_CERTIFICATE,certificate,,parent,Parent attribute for the common_name and the MD5 hash of the certificate,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,13,Q_SSL_CERTIFICATE_RAW,certificate_raw,,buffer,Raw text content of the ssl certificate.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,1,Q_SSL_CERTIF_MD5,certif_md5,,binary,md5 of the certificate.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,2,Q_SSL_COMMON_NAME,common_name,,string,Domain name mentioned in the certificate.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,14,Q_SSL_ORGANIZATION_NAME,organization_name,,string,Organisation name mentioned in the certificate.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,5,Q_SSL_SERVER_NAME,server_name,,string,Domain name mentioned in Client Hello message.,0,session_fix,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,12,Q_SSL_SUPPORTED_NEXT_PROTOCOL,supported_next_protocol,,string,Supported protocol on top of SSL specified by the server in the Next Protocol Negotiation TLS extension.,0,session_fix,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,4,Q_SSL_ISSUER,issuer,,string,Certificate Authority.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,6,Q_SSL_VALIDITY_NOT_BEFORE,validity_not_before,,string,Certificate's validity start date.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,7,Q_SSL_VALIDITY_NOT_AFTER,validity_not_after,,string,Certificate's validity end date.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,8,Q_SSL_SERIAL_NUMBER,serial_number,,buffer,Serial number of certificate.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,9,Q_SSL_SUBJECT_ALT_NAME,subject_alt_name,,string,Identifies a list of host names which belong to the same certificate.,0,session_prt,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,11,Q_SSL_HANDSHAKE_TYPE,handshake_type,,uint8,Handshake type.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,15,Q_SSL_REQUEST,request,,parent,An SSL request.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,695,Q_MPA_INDEX,index,,uint32,Identifier of the request and response in a SSL flow.,0,session_mod,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,16,Q_SSL_REQUEST_SIZE,request_size,,uint64,Contains the total length in bytes of the request or the response (including SSL headers). This attribute is computed at the end of the request or response.,0,session_mod,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,1,Q_STP_PROTO_ID,proto_id,,uint16,Protocol Identifier. Must be equal to 0x00.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,2,Q_STP_VERSION,version,,uint8,Protocol version.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,3,Q_STP_BPDU_TYPE,bpdu_type,,uint8,Message type.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,4,Q_STP_BPDU_FLAGS,bpdu_flags,,uint8,Message flags.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,5,Q_STP_ROOT_ID,root_id,,uint16,Root Bridge Identifier.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,6,Q_STP_ROOT_ADDR,root_addr,,mac_addr,Root Bridge MAC address.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,7,Q_STP_ROOT_PATH_COST,root_path_cost,,uint32,Cost of the path to the Root Bridge.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,8,Q_STP_BRIDGE_ID,bridge_id,,uint16,Bridge Identifier.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,9,Q_STP_BRIDGE_ADDR,bridge_addr,,mac_addr,Bridge MAC address.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,10,Q_STP_PORT_ID,port_id,,uint16,Bridge port identifier.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,11,Q_STP_MESSAGE_AGE,message_age,,uint16,Time elapsed since generation of the message by the Root Bridge.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,12,Q_STP_MAX_AGE,max_age,,uint16,Period of validity for a message.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,13,Q_STP_HELLO_TIME,hello_time,,uint16,Time interval between messages.,0,pkt,0 -200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,14,Q_STP_FORWARD_DELAY,forward_delay,,uint16,Timeout value for port states transfers.,0,pkt,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,1,Q_STUN_MESSAGE,message,,parent,set of attributes for a given stun message,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,2,Q_STUN_MAPPED_ADDRESS_IPV4,mapped_address_ipv4,,ip_addr,IP v4 address to be mapped.,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,3,Q_STUN_MAPPED_ADDRESS_IPV6,mapped_address_ipv6,,ip6_addr,IP v6 address to be mapped.,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,4,Q_STUN_PORT,port,,uint16,port to be mapped.,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,5,Q_STUN_XOR_MAPPED_ADDRESS_IPV4,xor_mapped_address_ipv4,,ip_addr,IP v4 address to be mapped (deobfuscated version).,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,6,Q_STUN_XOR_MAPPED_ADDRESS_IPV6,xor_mapped_address_ipv6,,ip6_addr,IP v6 address to be mapped (deobfuscated version).,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,7,Q_STUN_XOR_PORT,xor_port,,uint16,port to be mapped (deobfuscated version).,0,session_mod,0 -201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,8,Q_STUN_MAGIC_COOKIE,magic_cookie,,uint32,The magic cookie used to deobfuscate the XOR port and XOR mapped address,0,session_mod,0 -204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,3,Q_SYSLOG_SYSLOG_MESSAGE,syslog_message,,string,Message.,0,session_mod,0 -204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,1,Q_SYSLOG_CODE,code,,string,Message type.,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,1,Q_T38_MESSAGE,message,,parent,Parent attribute including T.38 message elements,0,session_fix,0 -525,Q_PROTO_T38,Network Service,t38,T.38,2,Q_T38_UDPTL_SEQUENCE_NUMBER,udptl_sequence_number,,uint16,UDPTL sequence number,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,3,Q_T38_TPKT,tpkt,,parent,Parent attribute including TPKT protocol elements,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,4,Q_T38_TPKT_VRSN,tpkt_vrsn,,uint8,Version of the TPKT protocol,0,session_prt,0 -525,Q_PROTO_T38,Network Service,t38,T.38,5,Q_T38_TPKT_PACKET_LENGTH,tpkt_packet_length,,uint16,Total length of TPKT packet,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,11,Q_T38_IFP,ifp,,parent,Parent attribute including IFP packet elements,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,12,Q_T38_IFP_DATA,ifp_data,,buffer,IFP packet buffer,1,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,13,Q_T38_TYPE_OF_MESSAGE,type_of_message,,string_index,Indicates if the IFP packet is of indicator or data type,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,14,Q_T38_INDICATOR,indicator,,string_index,Describes the function of the indicator IFP packet,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,15,Q_T38_DATA_TYPE,data_type,,string_index,"Describes the type of data contained in the data IFP packet, and the modulation used to carry them",0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,16,Q_T38_DATA_FIELD,data_field,,parent,Parent attribute including data field type and content,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,17,Q_T38_FIELD_TYPE,field_type,,string_index,Describes the content of the data field,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,18,Q_T38_FIELD_DATA,field_data,,buffer,Fax data carried in the IFP packets,1,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,19,Q_T38_FAX,fax,,parent,Parent attribute including calling and called subscriber,0,session_fix,0 -525,Q_PROTO_T38,Network Service,t38,T.38,524,Q_MPA_CALLER,caller,,string,Calling subscriber identification,0,session_prt,0 -525,Q_PROTO_T38,Network Service,t38,T.38,523,Q_MPA_CALLEE,callee,,string,Called subscriber identification,0,session_prt,0 -525,Q_PROTO_T38,Network Service,t38,T.38,22,Q_T38_FAX_MESSAGE,fax_message,,parent,Parent attribute including fax signaling message elements,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,23,Q_T38_FAX_MESSAGE_DATA,fax_message_data,,buffer,Fax signaling messages carried in the (reassembled) IFP packets,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,24,Q_T38_FAX_MESSAGE_TYPE,fax_message_type,,string_index,Describes the fax signaling messages type,0,session_mod,0 -525,Q_PROTO_T38,Network Service,t38,T.38,25,Q_T38_FAX_MESSAGE_NUMBER,fax_message_number,,string,"Identification associated to the following FAX messages: CSI the called subscriber identification (which is equal to the callee), CIG the calling subscriber identification (which is the caller), PWD the password, SEP the selective polling, PSA the polled subaddress, TSI the transmitting subscriber identification, SUB the subaddress and SID the sender identification.",0,session_mod,0 -285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 -285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Transferred file name.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,513,Q_MPA_ATTACH,attach,,parent,Parent attribute containing metadata related to an attached file exchanged between two users.,0,session_prt,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the duration of it in seconds and microseconds.",0,session_prt,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the duration of it in seconds.",0,session_prt,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_prt,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is re-evaluated every 5 seconds. This attribute is extracted only when the service changes.,0,session_prt,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,521,Q_MPA_CALL_DURATION,call_duration,,int32,Call duration.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,2,Q_TANGO_CALLEE_ID,callee_id,,string,Called part identifier.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,1,Q_TANGO_CALLER_ID,caller_id,,string,Calling part identifier.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,579,Q_MPA_PHONE_NUMBER,phone_number,,string,User's phone number.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,638,Q_MPA_USER_EMAIL,user_email,,string,User's email address.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,3,Q_TANGO_USER_ID,user_id,,string,Unique user identifier.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,4,Q_TANGO_DEVICE_ID,device_id,,string,User's device identifier.,0,session_mod,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,796,Q_MPA_STREAM,stream,,buffer,Private attribute of the classification engine.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_fix,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_fix,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session_fix,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session_fix,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,1,Q_TCP_SRC_PORT_RANGE,src_port_range,,uint8,"Range of source port number, defined by a minimum and a maximum.",0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,2,Q_TCP_DST_PORT_RANGE,dst_port_range,,uint8,"Range of destination port number, defined by a minimum and a maximum.",0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,3,Q_TCP_CLIENT_PORT_RANGE,client_port_range,,uint8,"Range of client port number, defined by a minimum and a maximum.",0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,4,Q_TCP_SERVER_PORT_RANGE,server_port_range,,uint8,"Range of server port number, defined by a minimum and a maximum.",0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,5,Q_TCP_PORT,port,,uint8,Validates a source or destination port. To be used in a filter.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,6,Q_TCP_UNSEQ,unseq,,uint8,Set to 1 if the packet is in a bad order.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,7,Q_TCP_LOSS_COUNT,loss_count,,uint32,Number of lost bytes.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,8,Q_TCP_PREVIOUS_LOST,previous_lost,,uint32,This packet follows one or more missing packets.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,9,Q_TCP_RTT,rtt,,timeval,Network response time (syn-synack-ack process).,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,10,Q_TCP_RTT_APP,rtt_app,,timeval,"Application response time of the server, calculated between a non-empty client packet, and the acknowledgement of a non-empty server packet.",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,12,Q_TCP_MSS,mss,,uint16,Maximum Segment Size.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,13,Q_TCP_WINDOW,window,,uint16,Congestion window size.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,14,Q_TCP_SACK,sack,,uint8,"Equal to 1 if the Selective Ack"" technique is used.""",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,15,Q_TCP_TSTAMP,tstamp,,uint8,Equal to 1 if timestamps are used.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,16,Q_TCP_CNX_DURATION,cnx_duration,,timeval,Elapsed time (in seconds) between the SYN packet and the first FIN or RST packet.,0,session_fix,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,17,Q_TCP_UNSEQ_AMONT,unseq_amont,,uint8,Indicates if unsequencing of the packet took place before passing through the probe.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,18,Q_TCP_UNSEQ_AVAL,unseq_aval,,uint8,Indicates if unsequencing of the packet took place after passing through the probe.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,19,Q_TCP_FLAG_FIN,flag_fin,,uint8,"Indicates if FIN flag is present in this packet, meaning the end of this TCP session.",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,20,Q_TCP_FLAG_RESET,flag_reset,,uint8,"Indicates if RESET flag is present in this packet, meaning the end of this TCP session.",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,22,Q_TCP_FLAG_SYN,flag_syn,,uint8,"Indicates if SYN flag is present in this packet, meaning a request TCP connection initiation.",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,23,Q_TCP_FLAG_SYNACK,flag_synack,,uint8,"Indicates if SYN and ACK flags are present in this packet, meaning a request TCP connection initiation.",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,21,Q_TCP_START_TIME,start_time,,timeval,Start time of this TCP session.,0,session_fix,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,24,Q_TCP_SEQ_NUMBER,seq_number,,uint32,The sequence number of the TCP packet.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,25,Q_TCP_ACK_NUMBER,ack_number,,uint32,The acknowledgement number.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,26,Q_TCP_TSVAL,tsval,,uint32,Timestamp value.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,27,Q_TCP_TSECR,tsecr,,uint32,Timestamp echo reply value.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,28,Q_TCP_SEG_BUFFERED_COUNT,seg_buffered_count,,uint32,Number of segments that have been buffered for reassembly,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,29,Q_TCP_SEG_BUFFERED_SIZE,seg_buffered_size,,uint32,Sizes sum of segments that have been buffered for reassembly,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,30,Q_TCP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,60,Q_TCP_RETRANSMISSION_BYTES,retransmission_bytes,,uint32,"Current packet overlapping bytes count, extracted when out-of-order TCP sequence occurs.",0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,62,Q_TCP_DUP_ACK,dup_ack,,uint8,Extracted when the current packet has the ACK flag and validates a data segment that was already acknowledged.,0,session_mod,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,61,Q_TCP_UNACK_SEQUENCE,unack_sequence,,uint32,Provides the difference between the maximum sequence number seen in payload packets minus the maximum ack seq number seen on the other way.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,1,Q_TDS_HOSTNAME,hostname,,string,Name of workstation communicating with the SQL server.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,2,Q_TDS_APPLICATION,application,,string,Name of application used to connect to the database.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,3,Q_TDS_SERVER,server,,string,Name of server hosting the SQL Server.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,4,Q_TDS_LIBRARY,library,,string,Name of network dynamic-link library used.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,5,Q_TDS_DATABASE_NAME,database_name,,string,Name of the used database.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,6,Q_TDS_LANGUAGE,language,,string,User locale.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,581,Q_MPA_QUERY,query,,string,SQL query sent by the user.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,7,Q_TDS_RPC_PROC_NAME,rpc_proc_name,,buffer,RPC TDS packet distant procedure name.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,8,Q_TDS_RPC_PARAMETER_ENTRY,rpc_parameter_entry,,parent,Structure containing the data related to a RPC call parameter.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,9,Q_TDS_RPC_PARAMETER_NAME,rpc_parameter_name,,buffer,RPC parameter name.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,10,Q_TDS_RPC_PARAMETER_TYPE,rpc_parameter_type,,buffer,RPC parameter type.,0,session_mod,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,11,Q_TDS_RPC_PARAMETER_VALUE,rpc_parameter_value,,buffer,RPC parameter value.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,690,Q_MPA_CHANNEL_DESCRIPTION,channel_description,,string,Channel description (long),0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,689,Q_MPA_CHANNEL_TOPIC,channel_topic,,string,Channel topic (short),0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,688,Q_MPA_CHANNEL_NAME,channel_name,,string,Channel name,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,687,Q_MPA_CHANNEL_ID,channel_id,,uint32,Channel ID,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,677,Q_MPA_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact alias.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,110,Q_TEAMSPEAK_MESSAGE_SCOPE,message_scope,,uint32,Message scope,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,674,Q_MPA_RECEIVER_UID,receiver_uid,,uint32,Receiver ID for this message,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,673,Q_MPA_SENDER_UID,sender_uid,,uint32,Sender ID for this message,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server greeting message,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,109,Q_TEAMSPEAK_SERVER_VERSION,server_version,,string,Server software version,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,108,Q_TEAMSPEAK_SERVER_NAME,server_name,,string,Server name,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,107,Q_TEAMSPEAK_SERVER_PLATFORM,server_platform,,string,Server architecture,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,102,Q_TEAMSPEAK_SERVER,server,,parent,Parent attribute,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,105,Q_TEAMSPEAK_CLIENT_VERSION,client_version,,string,Client software version,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,104,Q_TEAMSPEAK_CLIENT_SOFTWARE,client_software,,string,Client software name,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,103,Q_TEAMSPEAK_CLIENT_PLATFORM,client_platform,,string,Client architecture,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,101,Q_TEAMSPEAK_CLIENT,client,,parent,Parent attribute,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,106,Q_TEAMSPEAK_CLIENT_UID,client_uid,,uint32,Client session ID,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,112,Q_TEAMSPEAK_SESSION_ID,session_id,,uint32,Uniquely identifies the current user session.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,111,Q_TEAMSPEAK_SESSION,session,,parent,Parent attribute,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,100,Q_TEAMSPEAK_NICKNAME,nickname,,string,User nickname,0,session_mod,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,1,Q_TELNET_TERM_TYPE,term_type,,string,Terminal type.,0,session_mod,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,2,Q_TELNET_RTT,rtt,,timeval,Server response time.,0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,1,Q_TEREDO_SERVER_IP,server_ip,,ip_addr,"The IPv4 network address of the Teredo server involved in the exchange, read from the encapsulated IPv6 packet header",0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,3,Q_TEREDO_CLIENT_IP,client_ip,,ip_addr,Client's mapped IPv4 net address.,0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,4,Q_TEREDO_PORT,port,,uint16,Mapped UDP port used by Teredo,0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,8,Q_TEREDO_ORIGIN_INDICATION,origin_indication,,parent,Identification data from a client attempting to set up a Teredo connection,0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,9,Q_TEREDO_ORIGIN_CLIENT_IP,origin_client_ip,,ip_addr,IPv4 client address as visible in the Origin Indication,0,session_prt,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,10,Q_TEREDO_ORIGIN_PORT,origin_port,,uint16,UDP port used by Teredo as visible in the Origin Indication,0,session_prt,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,11,Q_TEREDO_AUTHENTICATION,authentication,,parent,Authentication data exchanged between client and server,0,session_mod,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,5,Q_TEREDO_CLIENT_ID,client_id,,string,"Client identifier, set up during its configuration",0,session_prt,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,6,Q_TEREDO_AUTH_VALUE,auth_value,,string,Client Authentication string,0,session_prt,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,7,Q_TEREDO_NONCE_VALUE,nonce_value,,binary,Identification string chosen by the client,0,session_prt,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a packet.,0,session_mod,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,6,Q_TFTP_REQUEST_FILENAME,request_filename,,string,Name of the requested file.,0,session_prt,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_fix,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,1,Q_TFTP_MODE,mode,,string,File transfer mode (Netascii/ Binary/ Mail).,0,session_prt,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,2,Q_TFTP_QUERY,query,,string,Command type.,0,session_prt,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,3,Q_TFTP_BLOCK_NUMBER,block_number,,uint16,Contains the block number of the data packet.,0,session_prt,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),1,Q_TNS_BASE,base,,string,Name of accessed database.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),2,Q_TNS_VERSION,version,,uint16,Version number of Oracle server.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),3,Q_TNS_SERVER_HOSTNAME,server_hostname,,string,Database server hostname.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),5,Q_TNS_SERVER_PORT,server_port,,uint16,Database server listening port.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),4,Q_TNS_SERVER_OS,server_os,,string,Database server operating system.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),6,Q_TNS_CLIENT_OS,client_os,,string,Client machine operating system.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),7,Q_TNS_CLIENT_HOSTNAME,client_hostname,,string,Client machine hostname.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),8,Q_TNS_CLIENT_PROGRAM_PATH,client_program_path,,string,Client program absolute path.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),9,Q_TNS_CLIENT_PROGRAM_NAME,client_program_name,,string,Client program name.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),581,Q_MPA_QUERY,query,,string,Database query.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),10,Q_TNS_RESPONSE,response,,parent,Parent attribute containing metadata related to the server response.,0,session_mod,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),12,Q_TNS_RESPONSE_SIZE,response_size,,uint32,Unitary size in bytes of one the PDUs returned by the server.,0,session_prt,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),11,Q_TNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session_prt,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,5,Q_TWITTER_RELATION,relation,,string,"Relation between two users, following/followed_by, or sender/recicipent for direct messages.",0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,17,Q_TWITTER_MEDIA_URL,media_url,,string,URL of the image which is shared inside a tweet (legacy Twitter API).,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,3,Q_TWITTER_TWEET,tweet,,string,Text of a tweet or a direct message.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,8,Q_TWITTER_SCREEN_NAME,screen_name,,string,User name appearing in the result of a request.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,7,Q_TWITTER_USER_ID,user_id,,string,User id appearing in the result of a request.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,15,Q_TWITTER_RESULT,result,,parent,Parent of attributes appearing in the result of a query.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,16,Q_TWITTER_PARAM_TEXT,param_text,,string,Generic text used as request parameter.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,14,Q_TWITTER_PARAM_SCREEN_NAME,param_screen_name,,string,User screen name used as request parameter.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,13,Q_TWITTER_PARAM_USER_ID,param_user_id,,string,User id used as request parameter.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,12,Q_TWITTER_PARAM,param,,parent,Parent attribute containing request parameters.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,643,Q_MPA_REQUEST,request,,parent,Parent attribute containing all the metadata related to a request.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -215,Q_PROTO_UCP,Wap,ucp,Universal Computer Protocol,1,Q_UCP_TYPE,type,,string_index,Message type.,0,pkt,0 -215,Q_PROTO_UCP,Wap,ucp,Universal Computer Protocol,2,Q_UCP_OPERATION,operation,,string_index,Operation name.,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,796,Q_MPA_STREAM,stream,,buffer,Private attribute of the classification engine.,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_mod,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_mod,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session_fix,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session_fix,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,1,Q_UDP_SRC_PORT_RANGE,src_port_range,,uint8,"Range of source port, defined by a minimum and a maximum.",0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,2,Q_UDP_DST_PORT_RANGE,dst_port_range,,uint8,"Range of destination port, defined by a minimum and a maximum.",0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,3,Q_UDP_CLIENT_PORT_RANGE,client_port_range,,uint8,"Range of client port, defined by a minimum and a maximum.",0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,4,Q_UDP_SERVER_PORT_RANGE,server_port_range,,uint8,"Range of server port, defined by a minimum and a maximum.",0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,5,Q_UDP_SRC_PORT16,src_port16,,uint16,Source port (16 bits).,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,6,Q_UDP_DST_PORT16,dst_port16,,uint16,Destination Port (16 bits).,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,7,Q_UDP_PORT,port,,uint8,Validates a source port or destination port. To be used in a filter.,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,8,Q_UDP_CNX_DURATION,cnx_duration,,timeval,Connection duration.,0,session_fix,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,9,Q_UDP_START_TIME,start_time,,timeval,Timestamp of the connection start time.,0,session_fix,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,10,Q_UDP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,1,Q_UNKNOWN_SESSION_BUFFER,session_buffer,,buffer,Payload received from the beginning of the session.,1,session_mod,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,2,Q_UNKNOWN_MAYBE_PROTOCOL,maybe_protocol,,parent,Parent attribute.,0,session_mod,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,4,Q_UNKNOWN_MAYBE_APPLICATION_ID,maybe_application_id,,uint32,Possible application's ID for this flow.,0,session_mod,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,3,Q_UNKNOWN_MAYBE_APPLICATION,maybe_application,,string,Possible application's name for this flow.,0,session_mod,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,5,Q_UNKNOWN_MAYBE_FAMILY,maybe_family,,string,Protocol family of a possible application for this flow.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,"Parent attribute of : contact_email, contact_alias.",0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Contact's mail address.,0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact's alias.,0,session_mod,0 -304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,1,Q_VIADEO_GROUPE,groupe,,string,Contact's alias.,0,session_mod,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session_prt,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,789,Q_MPA_SERVICE_ID,service_id,,uint32,Gives the service definition as an integer.,0,session_prt,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_prt,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),1,Q_VKONTAKTE_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),2,Q_VKONTAKTE_ACCOUNT_UID,account_uid,,string,User ID.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,1,Q_WEBSOCKET_WSFRAME,wsframe,,parent,"Parent attribute, containing the WebSocket frame.",0,session_mod,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,2,Q_WEBSOCKET_RAW,raw,,buffer,WebSocket frame content.,1,session_prt,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,3,Q_WEBSOCKET_OPCODE,opcode,,uint8,"Opcode"" field of WebSocket frame.""",0,session_prt,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,4,Q_WEBSOCKET_MSG,msg,,buffer,"Payload"" field of the WebSocket frame.""",1,session_prt,0 -1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,789,Q_MPA_SERVICE_ID,service_id,,uint32,Gives the generic service definition as an integer.,0,session_prt,0 -1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is re-evaluated every 5 seconds. This attribute is extracted only when the service changes.,0,session_prt,0 -1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_prt,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is re-evaluated every 500 milliseconds. This attribute is extracted only when the service changes.,0,session_prt,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,579,Q_MPA_PHONE_NUMBER,phone_number,,string,Caller phone number.,0,session_mod,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,608,Q_MPA_VERSION,version,,string,Program version.,0,session_mod,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -1111,Q_PROTO_WINDOWS_MARKETPLACE,Application Service,windows_marketplace,Windows Marketplace,1,Q_WINDOWS_MARKETPLACE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0 -562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,1,Q_WINDOWS_UPDATE_PLATFORM,platform,,string,Indicating the Windows version using this update,0,session_fix,0 -562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,2,Q_WINDOWS_UPDATE_KB,kb,,string,kb (Knowledge base) is a unique internal Microsoft number to identify different software and updates.,0,session_fix,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_mod,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,6,Q_WINMX_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,12,Q_WSP_REQUEST,request,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,1,Q_WSP_TID,tid,,uint8,Packet Identifier. (WSP over UDP).,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,2,Q_WSP_PDU_TYPE,pdu_type,,string,Message type.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,3,Q_WSP_PDU_CODE,pdu_code,,uint8,Message code.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,4,Q_WSP_URI,uri,,string,Complete name (path + filename) of a web resource.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,5,Q_WSP_CONNECT_RTT,connect_rtt,,timeval,Connection establishment time.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,6,Q_WSP_QUERY_RTT,query_rtt,,timeval,Elapsed time between a request and its response.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,7,Q_WSP_SERVER,server,,string,Server name.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client mobile name.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,9,Q_WSP_MIME_TYPE,mime_type,,string,Data type.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,17,Q_WSP_REQUEST_SIZE,request_size,,uint32,Contains the total length of the request or the response (including headers).,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,10,Q_WSP_REPLY_STATUS_CODE,reply_status_code,,uint8,Reply status code.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,11,Q_WSP_REPLY_STATUS_MSG,reply_status_msg,,string_index,Reply status code message.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,13,Q_WSP_PROFILE,profile,,string,A link for a full description of the used user_agent.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,14,Q_WSP_INDEX,index,,uint32,Identifier of the request and response in a WSP flow.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,15,Q_WSP_INDEX_CLIENT,index_client,,uint32,Identifier of the request in a WSP flow.,0,session_mod,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,16,Q_WSP_INDEX_SERVER,index_server,,uint32,Identifier of the response in a WSP flow.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,7,Q_WTP_PDU,pdu,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,1,Q_WTP_PDU_TYPE,pdu_type,,string_index,Message type.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,2,Q_WTP_PDU_CODE,pdu_code,,uint8,Message code.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,3,Q_WTP_TID,tid,,uint16,Packet Identifier.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,4,Q_WTP_ABORT_TYPE,abort_type,,string_index,Connection abort type.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,5,Q_WTP_ABORT_REASON,abort_reason,,string_index,Connection abort reason.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,6,Q_WTP_RETRANSMISSION,retransmission,,uint8,Indicates if the packet is being retransmitted.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,8,Q_WTP_SEQ_NUMBER,seq_number,,uint8,A sequence number used in segmentation and reassembly.,0,session_mod,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,9,Q_WTP_MISSING_PKTS,missing_pkts,,uint8,Indicate the missing packets.,0,session_mod,0 -228,Q_PROTO_X25,Audio/Video,x25,X.25,1,Q_X25_CALLING_ADDR,calling_addr,,string,Calling station address.,0,session_mod,0 -228,Q_PROTO_X25,Audio/Video,x25,X.25,2,Q_X25_CALLED_ADDR,called_addr,,string,Called station address.,0,session_mod,0 -228,Q_PROTO_X25,Audio/Video,x25,X.25,3,Q_X25_PKT_TYPE,pkt_type,,string,Packet type.,0,session_mod,0 -592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,1,Q_XDMCP_CLIENT_IP,client_ip,,ip_addr,Client IPv4 address.,0,session_mod,0 -592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,2,Q_XDMCP_SERVER_IP,server_ip,,ip_addr,Server IPv4 address.,0,session_mod,0 -592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,3,Q_XDMCP_SERVER_STATUS,server_status,,string,X11 server availability.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session_fix,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,1,Q_YAHOO_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,2,Q_YAHOO_GROUPS_GROUP_SHORT_DESCRIPTION,group_short_description,,string,Short group description.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,3,Q_YAHOO_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,1,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,4,Q_YAHOO_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,5,Q_YAHOO_GROUPS_GROUP_MEMBERSHIP,group_membership,,string,Group to which the user has subscribed.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,6,Q_YAHOO_GROUPS_SENDER_NICKNAME,sender_nickname,,string,"Message author's nickname, when reading a message.",0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,7,Q_YAHOO_GROUPS_MSG_NUMBER,msg_number,,uint32,Number of the posted message.,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_mod,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,598,Q_MPA_REPLYTO,replyto,,string,"When posting, indicates is the recipient was only the author or the whole list.",0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,4,Q_YAHOO_MAPS_COUNTRY,country,,string,Location country value.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,3,Q_YAHOO_MAPS_CITY,city,,string,Location city value.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,2,Q_YAHOO_MAPS_STREET,street,,string,Location longitude value.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,6,Q_YAHOO_MAPS_LONGITUDE,longitude,,string,Location longitude value.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,5,Q_YAHOO_MAPS_LATITUDE,latitude,,string,Location latitude value.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,1,Q_YAHOO_MAPS_LOCATION,location,,parent,Parent attribute containing information about location researched.,0,session_mod,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,4,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,5,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,3,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,2,Q_YANDEX_WEBMAIL_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,1,Q_YANDEX_WEBMAIL_THUMBNAIL,thumbnail,,uint8,Indicates whether this attachment is an image thumbnail(1) or not(0).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,2,Q_YMAIL2_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachement.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,1,Q_YMAIL_CLASSIC_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,1,Q_YMAIL_MOBILE_NEW_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session_mod,1 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,608,Q_MPA_VERSION,version,,string,The protocol version number used by the method.,0,session_fix,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,7,Q_YMSG_CLIENT_VERSION,client_version,,string,Client version.,0,session_fix,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,14,Q_YMSG_TIMESTAMP,timestamp,,timeval,Packet timestamp.,0,session_fix,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,643,Q_MPA_REQUEST,request,,parent,Parent attribute including a YMSG method and its service.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,555,Q_MPA_METHOD,method,,string_index,Name of the command sent.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,1,Q_YMSG_MSG_CODE,msg_code,,uint16,Contains the number of YMSG command.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,2,Q_YMSG_SESSIONID,sessionid,,uint32,Identification number of session.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,4,Q_YMSG_CLIENT_FIRSTNAME,client_firstname,,string,First name of the user.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,5,Q_YMSG_CLIENT_LASTNAME,client_lastname,,string,Last name of the user.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,6,Q_YMSG_CLIENT_COUNTRY,client_country,,string,Country of the user.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,3,Q_YMSG_CHANNEL,channel,,string,Chat room name.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,9,Q_YMSG_FILE_URL,file_url,,string,URL of the tranfered file.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,642,Q_MPA_FILEHASH,filehash,,string,Hash of transferred file.,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,8,Q_YMSG_CLIENT_LOCAL_IP,client_local_ip,,ip_addr,Client local ip.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,11,Q_YMSG_CHANNEL_NAME,channel_name,,string,Channel name,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session_prt,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,12,Q_YMSG_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,13,Q_YMSG_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session_mod,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_fix,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,15,Q_YMSG_TRANSFER_ID,transfer_id,,string,Transfer identifier.,0,session_fix,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,16,Q_YMSG_WEBCAM_BRAND,webcam_brand,,string,Webcam brand.,0,session_fix,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,17,Q_YMSG_CONFERENCE_ID,conference_id,,string,room identifier for a given conference,0,session_mod,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,642,Q_MPA_FILEHASH,filehash,x,string,File hash. This attribute is deprecated.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,1,Q_YMSG_TRANSFER_FILE_URL,file_url,,string,URL of the transferred file.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,5,Q_YMSG_TRANSFER_FILE_IDENTIFIER,file_identifier,x,string,File identifier. This attribute is deprecated.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,3,Q_YMSG_TRANSFER_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session_mod,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,4,Q_YMSG_TRANSFER_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session_mod,0 -239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 -239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,1,Q_YMSG_VIDEO_WEBCAM_BRAND,webcam_brand,,string,Brand of webcam.,0,session_fix,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,2,Q_YMSG_WEBMESSENGER_SESSIONID,sessionid,,string,Identification number of session.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,608,Q_MPA_VERSION,version,,string,Version number.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_prt,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,555,Q_MPA_METHOD,method,,string_index,Contains the description of YMSG command.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,1,Q_YMSG_WEBMESSENGER_MSG_CODE,msg_code,,string,Contains the number of YMSG command.,0,session_mod,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,643,Q_MPA_REQUEST,request,,parent,Contains the YMSG command.,0,session_mod,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,7,Q_YOUTUBE_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_fix,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,1,Q_YOUTUBE_URL,url,,string,Contains the url for embedded players,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,2,Q_YOUTUBE_DESCRIPTION,description,,string,Contains video description,1,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,3,Q_YOUTUBE_TAGS,tags,,string,Contains the tag list linked to the video,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,4,Q_YOUTUBE_VIDEOID,videoid,,string,Contains the unique identifier of the uploaded video,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,5,Q_YOUTUBE_TITLE,title,,string,Contains the video title,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,6,Q_YOUTUBE_NAMEVIEWER,nameviewer,,string,Contains the name of the user watching the video,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,555,Q_MPA_METHOD,method,,string,Contains the method used,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,769,Q_MPA_VIDEO_TOTALDURATION,video_totalduration,,uint32,Total duration of the video in seconds (not extracted).,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session_prt,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_mod,0 -240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 +,protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_name,attr_name,deprecated,attr_type,attr_desc,stream,pkt/session,content.,,,,, +,.,,,,,-1,Q_GEN_TOT_LEN,tot_len,,uint32,Remaining data length starting from the defined protocol layer (including header).,0,pkt,0,,,,, +,.,,,,,-2,Q_GEN_HDR_LEN,hdr_len,,uint32,Packet length for the considered protocol.,0,pkt,0,,,,, +,.,,,,,-3,Q_GEN_PAYLOAD_LEN,payload_len,,uint32,"Length of data contained by the selected protocol, excluding the header.",0,pkt,0,,,,, +,.,,,,,-4,Q_GEN_HDR64,hdr64,,binary,"Contains, in a hexa format, the first 64 bytes of a packet (with header), starting from the defined protocol layer. This attribute is no more extracted.",0,pkt,0,,,,, +,.,,,,,-5,Q_GEN_TEXT64,text64,,string,"Contains, in ASCII characters, all bytes of a packet, starting from the defined protocol layer. If the content is extracted then this attribute will contain the decompressed text.",0,pkt,0,,,,, +,.,,,,,-6,Q_GEN_FRAG_OFF,frag_off,,uint32,Indicates the offset if the packet is fragmented.,0,pkt,0,,,,, +,.,,,,,-7,Q_GEN_BYTE_VAL,byte_val,,binary,Contains data defined by given offset parameters starting from the header of the protocol level considered.,0,pkt,0,,,,, +,.,,,,,-8,Q_GEN_NB_OVER_PROTO,nb_over_proto,,uint32,Number of protocols existing above this level in the protocol stack (path).,0,pkt,0,,,,, +,.,,,,,-9,Q_GEN_LAYER_DESC,layer_desc,,string,Description of this protocol.,0,pkt,0,,,,, +,.,,,,,-10,Q_GEN_LAYER_NAME,layer_name,,string,Name of this protocol.,0,pkt,0,,,,, +,.,,,,,-11,Q_GEN_LAYER_FAMILY,layer_family,,string,Family of this protocol.,0,pkt,0,,,,, +,.,,,,,-14,Q_GEN_FRAME,frame,,ptr,"Contains packet data, starting from the defined protocol layer.",0,pkt,0,,,,, +,.,,,,,-12,Q_GEN_PARENT_USER_HANDLE,parent_user_handle,,ptr,User data associated to one parent session.,0,pkt,0,,,,, +,.,,,,,-13,Q_GEN_GEN_PARENT_LAYER,gen_parent_layer,,uint32,"This is not an event, it is used only to indicate the parent of this protocol is needed.",0,session_mod,0,,,,, +,.,,,,,-15,Q_GEN_DATA,data,,buffer,"Contains packet data, starting from the defined protocol layer, excluding the header.",0,session_mod,1,,,,, +,.,,,,,-17,Q_GEN_GEN_INHERIT_SUCCESS,gen_inherit_success,,uint32,Id of parent protocol when inheritance is successful.,0,session_mod,0,,,,, +,.,,,,,-18,Q_GEN_CLASSIFICATION_MATCH,classification_match,,,This attribute compares the classification states of both half-sessions.,0,session_mod,0,,,,, +,.,,,,,-19,Q_GEN_STATEMACHINE_ANOMALY,statemachine_anomaly,,,We check if we are in a final node when we cleanup the statemachine.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,643,Q_MPA_REQUEST,request,,parent,Contains information which is in http request.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,4,Q_0ZZ0_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,1,Q_0ZZ0_SIDC,sidc,,string,Session identifier used to find information about file which has been uploaded.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,2,Q_0ZZ0_SID,sid,,string,Session identifier used to find user information.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,5,Q_0ZZ0_EMAIL_ADDRESS,email_address,,string,User's email address.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,6,Q_0ZZ0_EMAIL_INVITED,email_invited,,string,Email to whom the invitation has been sent.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,7,Q_0ZZ0_NAME_INVITED,name_invited,,string,Name of the user to whom the invitation has been sent.,0,session_mod,0,,,,, +,584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,8,Q_0ZZ0_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,1,Q_3GPP_LI_HI3_DOMAIN_ID,hi3_domain_id,,binary,3gpp_li HI3 Domain,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,2,Q_3GPP_LI_VERSION,version,,uint32,Version,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,3,Q_3GPP_LI_LIID,liid,,string,Lawful Interception Identifier,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,4,Q_3GPP_LI_CORRELATION_NUMBER,correlation_number,,binary,GPRS correlation number,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,5,Q_3GPP_LI_TIMESTAMP,timestamp,,string,Timestamp,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,6,Q_3GPP_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,7,Q_3GPP_LI_T_PDU_DIRECTION,t_pdu_direction,,uint32,T-PDU direction,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,8,Q_3GPP_LI_COUNTRY_CODE,country_code,,string,Country code according to ISO 3166-1,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,9,Q_3GPP_LI_ICE_TYPE,ice_type,,uint32,Intercepting Control Element type,0,session_mod,0,,,,, +,1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,10,Q_3GPP_LI_NATIONAL_PARAMS,national_params,,binary,National parameters (other than country) in ASN.1 format,0,session_mod,0,,,,, +,7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,1,Q_8021Q_PRIORITY,priority,,uint8,Packet priority.,0,session_fix,0,,,,, +,7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,2,Q_8021Q_CFI,cfi,,uint8,Flag used for compatibility reason between Ethernet type network and Token Ring type network. Canonical Format Indicator is always set to zero for Ethernet switches.,0,session_fix,0,,,,, +,7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,3,Q_8021Q_VLAN_ID,vlan_id,,uint16,VLAN Identifier of the frame.,0,session_fix,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint8,Tells whether a file is compressed.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,6,Q_ADC_CLIENT_VERSION,client_version,,string,Name and version of the client used by the peer.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,5,Q_ADC_PEER_HASH,peer_hash,,string,"Hash of the user ID, used to communicate with the hub and the other clients.",0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,4,Q_ADC_PEER_ID,peer_id,,string,User id assigned by the hub to the client and notified through a SID command.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,3,Q_ADC_COMMAND_CODE,command_code,,string,"Message action, as extracted from the three letters following the message type.",0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,2,Q_ADC_COMMAND_TYPE,command_type,,string,Command type extracted from the first character of the message.,0,session_mod,0,,,,, +,1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,1,Q_ADC_COMMAND,command,,parent,Parent attribute denoting the start of a message of the protocol.,0,session_mod,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,6,Q_ADOBE_UPDATE_COMPONENT_LIST_ENTRY,component_list_entry,,parent,Update server's answer entry.,0,session_fix,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,7,Q_ADOBE_UPDATE_COMPONENT_LIST_NAME,component_list_name,,string,Name of a piece of Adobe software we have a new version for.,0,session_prt,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,8,Q_ADOBE_UPDATE_COMPONENT_LIST_DESC,component_list_desc,,string,"Short component update description, including version number.",0,session_prt,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,9,Q_ADOBE_UPDATE_COMPONENT_LIST_VERSION,component_list_version,,string,"Last component version available.""",0,session_prt,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,10,Q_ADOBE_UPDATE_COMPONENT_LIST_URL,component_list_url,,string,"Component update download link.""",0,session_prt,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,5,Q_ADOBE_UPDATE_UPDATE_REQUEST,update_request,,parent,Client's component update request to the update server.,0,session_fix,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,4,Q_ADOBE_UPDATE_UPDATE_MANAGER,update_manager,,string,Adobe Update Manager version and identifier.,0,session_prt,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,11,Q_ADOBE_UPDATE_PRODUCT_NAME,product_name,,string,User's request for a product update.,0,session_prt,0,,,,, +,549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),537,Q_MPA_ENCODING,encoding,,string_index,Message encoding.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),638,Q_MPA_USER_EMAIL,user_email,,string,Email Address of an AIN user.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_fix,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),608,Q_MPA_VERSION,version,,string,AIM software version.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),1,Q_AIM_ICON_DATA,icon_data,,buffer,Binary data containing a contact's icon.,0,session_mod,1,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),2,Q_AIM_ICON_BUDDY,icon_buddy,,string,The contact whose icon was downloaded.,0,session_mod,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),3,Q_AIM_INTERNAL_IP_ADDRESS,internal_ip_address,,ip_addr,Internal IP address of the contact.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),4,Q_AIM_EXTERNAL_IP_ADDRESS,external_ip_address,,ip_addr,External IP address of the contact.,0,session_prt,0,,,,, +,8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),5,Q_AIM_EXTERNAL_LISTENING_PORT,external_listening_port,,uint16,External listening TCP port address of the contact.,0,session_prt,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,1,Q_AIM_EXPRESS_CHAT_TYPE,chat_type,,string,Message type.,0,session_prt,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,608,Q_MPA_VERSION,version,,string,Client version.,0,session_fix,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_prt,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_prt,0,,,,, +,275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session_prt,0,,,,, +,245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,281,Q_PROTO_AIMS,Instant Messaging,aims,Secure AIM,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,1,Q_AMQP_MAJOR_VERSION,major_version,,uint32,Major version of the protocol.,0,session_fix,0,,,,, +,9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,2,Q_AMQP_MINOR_VERSION,minor_version,,uint32,Minor version of the protocol.,0,session_fix,0,,,,, +,9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,3,Q_AMQP_METHOD,method,,string_index,Command launched.,0,session_mod,0,,,,, +,9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,4,Q_AMQP_RESPONSE_TIME,response_time,,timeval,Server response time.,0,session_mod,0,,,,, +,563,Q_PROTO_APPLE_UPDATE,Web,apple_update,Apple Update,1,Q_APPLE_UPDATE_PKG_NAME,pkg_name,,string,pkg_name (package name) is the name of the software being updated.,0,session_mod,0,,,,, +,1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,3,Q_APPSTORE_DEVICE_TYPE,device_type,,string,"Target device (iPhone, iPod,...).",0,session_mod,0,,,,, +,1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,2,Q_APPSTORE_CONNECTION_TYPE,connection_type,,string,Type of the connection.,0,session_mod,0,,,,, +,1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,1,Q_APPSTORE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,2,Q_ARCHIVE_ACTION,action,,string,Indicates the action executed by the user.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,3,Q_ARCHIVE_TITLE,title,,string,File title.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,4,Q_ARCHIVE_DESCRIPTION,description,,string,File description.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,5,Q_ARCHIVE_SUBJECT,subject,,string,File subject.,0,session_prt,0,,,,, +,564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,6,Q_ARCHIVE_CREATOR,creator,,string,File creator.,0,session_prt,0,,,,, +,272,Q_PROTO_ARES,Peer to Peer,ares,Ares,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0,,,,, +,272,Q_PROTO_ARES,Peer to Peer,ares,Ares,704,Q_MPA_NICKNAME,nickname,,string,Contains the user identity of the Ares connection.,0,session_fix,0,,,,, +,272,Q_PROTO_ARES,Peer to Peer,ares,Ares,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,272,Q_PROTO_ARES,Peer to Peer,ares,Ares,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_mod,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,1,Q_ARP_HARDWARE,hardware,,uint16,Specify the hardware type for which the request is sent. A value of 1 indicates an Ethernet address.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,2,Q_ARP_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,3,Q_ARP_HARDSIZE,hardsize,,uint8,MAC address length.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,4,Q_ARP_PROTOSIZE,protosize,,uint8,Size in bytes of the logical address requested. Example: 4 for IP.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,5,Q_ARP_OPCODE,opcode,,uint16,"Operation Code: Request = 1, Response = 2.",0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,6,Q_ARP_SRC_HARD,src_hard,,binary,Source MAC address.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,7,Q_ARP_SRC_PROTO,src_proto,,binary,Source IP address.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,8,Q_ARP_DST_HARD,dst_hard,,binary,Destination MAC address.,0,pkt,0,,,,, +,11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,9,Q_ARP_DST_PROTO,dst_proto,,binary,Destination IP address.,0,pkt,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0,,,,, +,586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,4,Q_BADONGO_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,704,Q_MPA_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Unique contact ID for a receiver.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,1,Q_BASE_CNX_TYPE,cnx_type,,uint8,Packet transfer direction in a client/server flow.,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,2,Q_BASE_PATH,path,,path,Protocol stack of a packet.,0,session_prt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,3,Q_BASE_APPLICATION,application,,string,Name of the application to which the packet belongs.,0,session_prt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,4,Q_BASE_TIME,time,,uint32,"Elapsed time since 1st January 1970, displayed in seconds/ minutes/ hours/ days according to the value of the given parameter.",0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,5,Q_BASE_DAYTIME,daytime,,uint16,Current time characteristics according to the given parameter: second (s)/ minute (m)/ hour (h)/ day (D)/ month (M)/ year (Y).,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,6,Q_BASE_UTIME,utime,,timeval,"Elapsed time since 1st January 1970, displayed in microseconds.",0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,7,Q_BASE_FLOW_ID,flow_id,,uint64,Unique connection ID.,0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,8,Q_BASE_CLASSIFIED,classified,,uint8,"Attribute showing whether the classification process (AFC) has been completed or not for the given packet. A value of 1 indicates a complete classification, a value of 0 indicates that the classification process is still running.",0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,9,Q_BASE_DELAY,delay,,timeval,Elapsed time between consecutive packets processing.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,10,Q_BASE_JITTER,jitter,,timeval,Variation of delay compared to the last processed packet (calculated per half-session).,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,11,Q_BASE_FAMILY,family,,string,Family to which the uppermost protocol of the protocol stack belongs to.,0,session_prt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,14,Q_BASE_APPLICATION_ID,application_id,,uint32,Unique ID of application to which the packet belongs.,0,session_prt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,32,Q_BASE_PATH_LEN,path_len,,uint32,Contains the number of protocols in the packet protocol stack (path).,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,33,Q_BASE_PACKET_COUNTER,packet_counter,,uint32,Number of packets received.,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,36,Q_BASE_SESSION_PACKET_COUNTER,session_packet_counter,,uint32,Number of packets received. This attribute data cannot be retreived in externalized versions.,0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,37,Q_BASE_USER_HANDLE,user_handle,,ptr,User data associated to this session. This attribute data cannot be retreived in externalized versions.,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,38,Q_BASE_PEER_USER_HANDLE,peer_user_handle,,ptr,User data associated to the peer half-session. This attribute data cannot be retreived in externalized versions.,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,39,Q_BASE_DEV,dev,,string,Name of the device used to establish the connection for an interface. This attribute data cannot be retreived in externalized versions.,0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,40,Q_BASE_WAY,way,,uint8,Way of half connection.,0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,41,Q_BASE_PROTOCOL,protocol,,parent,"Empty parent attribute for path, application_id, application and family.",0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,42,Q_BASE_PACKET,packet,,buffer,Packet data.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,62,Q_BASE_PACKET_IP,packet_ip,,buffer,Packet data from first IP layer.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,43,Q_BASE_UPACKET,upacket,,ptr,Address where there is the packet data.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,44,Q_BASE_FILTER_STATE_CHANGE,filter_state_change,,filter_state,"When a filter's state changes, id and state of that filter.",0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,45,Q_BASE_FILTER_RULE_MATCHES,filter_rule_matches,,filter_state,When a filter is matched.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,35,Q_BASE_SESSION_END,session_end,,uint8,Triggered when the session is finished.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,46,Q_BASE_DECLASSIFIED,declassified,,uint32,"Attribute showing whether a declassification is happened in a packet, the raised value is the protocol id.",0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,47,Q_BASE_USER_HANDLE_PKT,user_handle_pkt,,ptr,User data associated to this session containing ctb_ppacket user_handle.,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,48,Q_BASE_SYS_PKT_HEADER,sys_pkt_header,,binary,A binary buffer container data inserted in the head of the real packet,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,49,Q_BASE_SYS_PKT_FOOTER,sys_pkt_footer,,binary,A binary buffer container data inserted in the tail of the real packet,0,pkt,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,59,Q_BASE_PROTOCOL_END,protocol_end,,parent,"Empty parent attribute for path_end, application_end_id, application_end and family_end.",0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,55,Q_BASE_PATH_END,path_end,,path,Contains the latest value for the attribute path,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,58,Q_BASE_APPLICATION_END,application_end,,string,Contains the latest value for the attribute application,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,56,Q_BASE_FAMILY_END,family_end,,string,Contains the latest value for the attribute family,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,57,Q_BASE_APPLICATION_ID_END,application_id_end,,uint32,Contains the latest value for the attribute application_id,0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,63,Q_BASE_SESSION_LEN,session_len,,uint64,"Contains the total length exchanged, in Bytes, over this session. This attribute data cannot be retreived in externalized versions.",0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,31,Q_BASE_CREATE_TIME,create_time,,timeval,Contains the timestamp of the first packet of the flow.,0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,64,Q_BASE_SPLIT,split,,ptr,"When a flow is split, address of the uapp_cnx that was associated to the current one",0,session_mod,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,66,Q_BASE_SESSION_UNIDIR,session_unidir,,uint8,Extracted when unidirectional traffic is detected.,0,session_fix,0,,,,, +,3,Q_PROTO_BASE,Standard,base,Base virtual protocol,67,Q_BASE_MULTI_MATCH_PROTO_ID,multi_match_proto_id,,uint32,"When multiple pdata rules do match the same packet, the highest priority rule is classified. The protocol ids of the lesser priority rules are shown in deacreasing priority order through this protocol.",0,session_mod,0,,,,, +,268,Q_PROTO_BEBO,Web,bebo,Bebo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,268,Q_PROTO_BEBO,Web,bebo,Bebo.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0,,,,, +,268,Q_PROTO_BEBO,Web,bebo,Bebo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,268,Q_PROTO_BEBO,Web,bebo,Bebo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,268,Q_PROTO_BEBO,Web,bebo,Bebo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,1,Q_BGP_MESSAGE_ENTRY,message_entry,,parent,Parent entry for the attributes of a BGP message,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,2,Q_BGP_AS,as,,uint16,Autonomous System Identifier,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,3,Q_BGP_IDENTIFIER,identifier,,ip_addr,BGP Identifier of the sender,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,4,Q_BGP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,5,Q_BGP_HOLD_TIME,hold_time,,uint16,The number of seconds proposed by the sender for the value of the Hold Timer,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,6,Q_BGP_ERROR_CODE,error_code,,uint8,This attribute indicates the type of NOTIFICATION,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,7,Q_BGP_ERROR_SUBCODE,error_subcode,,uint8,This attribute provides more specific information about the nature of the reported error,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,36,Q_BGP_ERROR_NOTIFICATION_DATA,error_notification_data,,binary,Raw error data notification.,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,8,Q_BGP_PATH_ATTR_ENTRY,path_attr_entry,,parent,Parent entry for path attributes,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,9,Q_BGP_PATH_ATTR_TYPE,path_attr_type,,string_index,The code of the attribute type,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,24,Q_BGP_PATH_ATTR_VALUE_ENTRY,path_attr_value_entry,,parent,Parent entry for path_attr_value_... attributes,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,10,Q_BGP_PATH_ATTR_VALUE,path_attr_value,,binary,Content of the attribute,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,32,Q_BGP_PATH_ATTR_VALUE_LOCAL_PREF,path_attr_value_local_pref,,uint32,Local preference value,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,28,Q_BGP_PATH_ATTR_VALUE_AS_NUM,path_attr_value_as_num,,uint32,As number,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,29,Q_BGP_PATH_ATTR_VALUE_NEXT_HOP_IP,path_attr_value_next_hop_ip,,ip_addr,IP address of the next hop,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,11,Q_BGP_WITHDRAWN,withdrawn,,parent,Parent entry for the attributes withdrawn_prefix and withdrawn_prefix_len,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,12,Q_BGP_WITHDRAWN_PREFIX_LEN,withdrawn_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,13,Q_BGP_WITHDRAWN_PREFIX,withdrawn_prefix,,ip_addr,Contains Ip addresses Prefixes,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,14,Q_BGP_NLRI,nlri,,parent,Parent entry for the attributes nlri_prefix and nlri_prefix_len,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,15,Q_BGP_NLRI_PREFIX_LEN,nlri_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,16,Q_BGP_NLRI_PREFIX,nlri_prefix,,ip_addr,Contains IP addresses prefix,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,17,Q_BGP_AUTH_ENTRY,auth_entry,,parent,Parent entry for the attributes of the authentication,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,18,Q_BGP_AUTH_CODE,auth_code,,uint8,A code that indicates the type of authentication,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,19,Q_BGP_AUTH_MESSAGE,auth_message,,binary,The content of the authentication,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,20,Q_BGP_AFI,afi,,uint16,In a route refresh packet this field is an address family identifier.,0,session_mod,0,,,,, +,13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,21,Q_BGP_SAFI,safi,,uint8,In a route refresh packet this field is a subsequent address family identifier.,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,547,Q_PROTO_BING,Web,bing,Bing.com (formerly MSN Search),581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,792,Q_MPA_SIGNALIZATION_OVERRIDE,signalization_override,,uint8,Attribute used to specify whether the current session may provide incoming flows information or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,1,Q_BITTORRENT_TRACKER,tracker,,string,BitTorrent tracker URL.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,3,Q_BITTORRENT_FILE_HASH_RAW,file_hash_raw,,buffer,Content whose SHA1 hash is the file_hash ('info' section of the torrent file).,1,session_mod,1,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,4,Q_BITTORRENT_PEER_ID,peer_id,,binary,Unique ID containing information about the software and the version used.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,6,Q_BITTORRENT_CLIENT_VERSION,client_version,,string,Version of the software.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,8,Q_BITTORRENT_CANCELED_CHUNK,canceled_chunk,,parent,A piece of a canceled file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,9,Q_BITTORRENT_CANCELED_CHUNK_NUMBER,canceled_chunk_number,,uint32,Number of the canceled piece.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,10,Q_BITTORRENT_CANCELED_CHUNK_LENGTH,canceled_chunk_length,,uint32,Size of the canceled piece.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,11,Q_BITTORRENT_CANCELED_CHUNK_DATA_OFFSET,canceled_chunk_data_offset,,uint32,Offset of the canceled data.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,16,Q_BITTORRENT_TORRENT_FILENAME,torrent_filename,,string,Name of the torrent file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,17,Q_BITTORRENT_PIECE_LENGTH,piece_length,,uint32,"Chunk size, for the specified file.",0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,24,Q_BITTORRENT_PEER_SHARE_IP,peer_share_ip,,ip_addr,IP address used by a peer to share his files.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,29,Q_BITTORRENT_PEER_SHARE_IP6,peer_share_ip6,,ip6_addr,IPv6 address used by a peer to share his files.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,25,Q_BITTORRENT_PEER_SHARE_PORT,peer_share_port,,uint16,Port used by a peer to share his files.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,26,Q_BITTORRENT_PEER_SHARE_ID,peer_share_id,,string,ID used by a peer to share his files.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,23,Q_BITTORRENT_PEER_PORT,peer_port,x,string,Port used by a peer to share his files.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,20,Q_BITTORRENT_FILE_COMPLETED,file_completed,,string,Completed file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,19,Q_BITTORRENT_FILE_DOWNLOADED,file_downloaded,,string,Downloaded file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,21,Q_BITTORRENT_FILE_INCOMPLETE,file_incomplete,,string,Incomplete file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,22,Q_BITTORRENT_FILE_LEFT,file_left,,string,Left file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,18,Q_BITTORRENT_FILE_UPLOADED,file_uploaded,,string,Uploaded file.,0,session_mod,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,27,Q_BITTORRENT_FLOW_TYPE,flow_type,,string_index,Information about the flow encryption level.,0,session_fix,0,,,,, +,15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,28,Q_BITTORRENT_CLASSIFICATION_TYPE,classification_type,,string,"How the protocol has been classified. Always returns Deterministic"" if the port list has not been set.""",0,session_fix,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,783,Q_MPA_VIDEO_UUID,video_uuid,,string,Universally unique identifier.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0,,,,, +,1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_prt,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each BSSAP message,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,530,Q_MPA_CONTENT,content,,string,Message content,0,session_mod,1,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,1,Q_BSSAP_TIMESTAMP,timestamp,,timeval,Message timestamp,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,3,Q_BSSAP_VALIDITY_PERIOD,validity_period,,string,Validity period for the message,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,Message receiver,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,4,Q_BSSAP_IMSI_RECEIVER,imsi_receiver,,string,International Mobile Subscriber Identity of the receiver,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,5,Q_BSSAP_IMEI_RECEIVER,imei_receiver,,string,International Mobile Equipment Identity of the receiver,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,6,Q_BSSAP_MSISDN_RECEIVER,msisdn_receiver,,string,Mobile Subscriber Integrated Services Digital Network Number of the receiver,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,Message sender,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,7,Q_BSSAP_IMSI_SENDER,imsi_sender,,string,International Mobile Subscriber Identity of the sender,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,8,Q_BSSAP_IMEI_SENDER,imei_sender,,string,International Mobile Equipment Identity of the sender,0,session_mod,0,,,,, +,741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,9,Q_BSSAP_MSISDN_SENDER,msisdn_sender,,string,Mobile Subscriber Integrated Services Digital Network Number of the sender,0,session_mod,0,,,,, +,16,Q_PROTO_BXML,Wap,bxml,WAP Binary XML,1,Q_BXML_VERSION,version,,string,Protocol version.,0,pkt,0,,,,, +,16,Q_PROTO_BXML,Wap,bxml,WAP Binary XML,2,Q_BXML_PUBLIC_ID,public_id,,uint8,Public ID of the connection.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,1,Q_CDP_TTL,ttl,,uint8,"The Time-to-Live field indicates the amount of time, in seconds, that a receiver should retain the information contained in the CDP message.",0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,2,Q_CDP_DEVICE_ID,device_id,,string,Unique ID of the sending device.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,3,Q_CDP_ADDRESS,address,,ip_addr,List of network addresses assigned to the interface on which the CDP message was sent.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,4,Q_CDP_PORT_ID,port_id,,string,Unique port ID on which the CDP message was sent.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,5,Q_CDP_SOFTWARE_VERSION,software_version,,string,Version of the Cisco IOS running on the sending device.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,6,Q_CDP_PLATFORM,platform,,string,Name of the platform of the sending device.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,7,Q_CDP_PREFIX,prefix,,ip_net,List of network prefixes to which the sending device can forward IP packets.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,8,Q_CDP_VTP_MGMT_DOMAIN,VTP_mgmt_domain,,string,VTP management domain name-string to which the sending device belongs.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,9,Q_CDP_NATIVE_VLAN,native_vlan,,binary,The assumed VLAN for untagged packets on the interface which sent the CDP packet.,0,pkt,0,,,,, +,18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,10,Q_CDP_DUPLEX,duplex,,binary,Duplex configuration of the interface which sent the CDP message.,0,pkt,0,,,,, +,20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,1,Q_CHAP_CHALLENGE,challenge,,binary,Challenge sent by the peer initiating the authentication process.,0,session_mod,0,,,,, +,20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,2,Q_CHAP_CHALLENGE_NAME,challenge_name,,string,Hostname of the peer initiating the authentication process.,0,session_mod,0,,,,, +,20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,3,Q_CHAP_RESPONSE,response,,binary,Response to the challenge.,0,session_mod,0,,,,, +,20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,4,Q_CHAP_RESPONSE_NAME,response_name,,string,Hostname of the peer responding to challenge.,0,session_mod,0,,,,, +,20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,5,Q_CHAP_MESSAGE_TYPE,message_type,,string,Type of message sent.,0,session_mod,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session_fix,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current version installed on the host.,0,session_fix,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,1,Q_CHROME_UPDATE_PLUGIN,plugin,,parent,"Parent attribute which contains the attributes plugin_id, plugin_new_version and plugin_current_version.",0,session_fix,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,2,Q_CHROME_UPDATE_PLUGIN_ID,plugin_id,,string,Plugin Id for the updated plugin.,0,session_prt,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,3,Q_CHROME_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,New version number returned by the server for the plugin.,0,session_prt,0,,,,, +,567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,4,Q_CHROME_UPDATE_PLUGIN_CURRENT_VERSION,plugin_current_version,,string,Plugin version number currently installed.,0,session_prt,0,,,,, +,22,Q_PROTO_COTP,Network Service,cotp,Connection Oriented Transfer Protocol,1,Q_COTP_TPDU_CODE,tpdu_code,,uint8,TPDU (Transport Protocol Data Unit) code as defined by the ITU in the X.224 recommendations.,0,session_mod,0,,,,, +,24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,1,Q_CUPS_PRINTER,printer,,string,URI addressing the CUPS printer.,0,session_mod,0,,,,, +,24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,2,Q_CUPS_LOCATION,location,,string,Location of the Printer.,0,session_mod,0,,,,, +,24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,3,Q_CUPS_INFORMATION,information,,string,Information on Printer.,0,session_mod,0,,,,, +,24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,4,Q_CUPS_MODEL,model,,string,Printer model.,0,session_mod,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,535,Q_MPA_EMAIL,email,,string,"Parent entry, for fields belonging to the same email.",0,session_prt,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment - Remote Procedure Call,1,Q_DCERPC_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment - Remote Procedure Call,2,Q_DCERPC_INTERFACE_UUID,interface_uuid,,string,ID of the interface.,0,session_mod,0,,,,, +,574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Repository packet version.,0,session_mod,0,,,,, +,574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Debian packet name.,0,session_mod,0,,,,, +,574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,718,Q_MPA_PACKAGE,package,,parent,Debian packet.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,23,Q_DHCP_REQUEST,request,,parent,An empty parent for the other attributes. a request per dhcp packet.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,1,Q_DHCP_CIADDR,ciaddr,,ip_addr,Current client ip address.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,2,Q_DHCP_YIADDR,yiaddr,,ip_addr,New ip address attributed to the client.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,3,Q_DHCP_SIADDR,siaddr,,ip_addr,Ip address of next server (used when booting via a server).,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,4,Q_DHCP_GIADDR,giaddr,,ip_addr,Relay agent ip address (used when booting via a relay agent).,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,5,Q_DHCP_CHADDR,chaddr,,mac_addr,Client hardware address.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,6,Q_DHCP_SNAME,sname,,string,Server host name (optional).,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,7,Q_DHCP_MESSAGE_TYPE,message_type,,string_index,Type of the dhcp message.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,8,Q_DHCP_SUBNETMASK,subnetmask,,ip_addr,Subnet mask assigned to the client.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,9,Q_DHCP_ROUTER,router,,ip_addr,List of gateway's ip addresses.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,10,Q_DHCP_DNS_SERVER,dns_server,,ip_addr,List of dns server's ip addresses.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,11,Q_DHCP_BOOTFILENAME,bootfilename,,string,File name used when initializing,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,12,Q_DHCP_OPTION,option,,parent,An empty parent attribute,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,13,Q_DHCP_OPTION_TYPE,option_type,,uint8,Option type,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,14,Q_DHCP_OPTION_VALUE,option_value,,binary,Content or value of the option,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,15,Q_DHCP_AGENT,agent,,parent,A parent attribute for agent information,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,16,Q_DHCP_CIRCUIT_ID,circuit_id,,string,A suboption that contains the circuit identifier,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,20,Q_DHCP_REMOTE_ID,remote_id,,string,The remote agent,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,17,Q_DHCP_REMOTE_ID_TYPE,remote_id_type,,string,An suboption that contains the remote agent identifier.,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,18,Q_DHCP_REMOTE_ID_SUBTYPE,remote_id_subtype,,string,Subtype for the remote agent,0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,19,Q_DHCP_IP_LEASE_TIME,ip_lease_time,,uint32,"In a server reply (dhcpoffer), a dhcp server uses this option to specify the lease time it is willing to offer. the time is in seconds",0,session_mod,0,,,,, +,29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,22,Q_DHCP_END_STATUS,end_status,,uint32,An event sent when dhcp session expires. it's equal to 1 when a release message was observed and 0 if not,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,25,Q_DIAMETER_ACCT_RECORD_NUMBER,acct_record_number,,uint32,Unique identifier for one record within a session,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,24,Q_DIAMETER_ACCT_RECORD_TYPE,acct_record_type,,uint32,Record type,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,23,Q_DIAMETER_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint64,Indicates how many octets have been sent to the port in the course of delivering this service,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,22,Q_DIAMETER_ACCT_INPUT_OCTETS,acct_input_octets,,uint64,Indicates how many octets have been received from the port over the course of this service being provided,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,21,Q_DIAMETER_ACCT_SUB_SESSION_ID,acct_sub_session_id,,uint64,Sub-session identifier,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,20,Q_DIAMETER_ACCT_MULTI_SESSION_ID,acct_multi_session_id,,string,Link between multiple accounting sessions,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,19,Q_DIAMETER_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,7,Q_DIAMETER_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,15,Q_DIAMETER_DESTINATION_HOST,destination_host,,string,Destination Diameter host for the current message,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,18,Q_DIAMETER_AUTH_REQUEST_TYPE,auth_request_type,,uint32,Requested authentication type,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,17,Q_DIAMETER_RESULT_CODE,result_code,,uint32,Indicates whether a particular Diameter request was completed successfully not,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,14,Q_DIAMETER_ORIGIN_HOST,origin_host,,string,Source Diameter host for the current message,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,6,Q_DIAMETER_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,11,Q_DIAMETER_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,10,Q_DIAMETER_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,5,Q_DIAMETER_FRAMED_IP,framed_ip,,string,IP address.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,13,Q_DIAMETER_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,16,Q_DIAMETER_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of the physical port of the NAS that is authenticating the user.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,9,Q_DIAMETER_NAS_PORT_ID,nas_port_id,,string,Indicates the physical port number of the NAS that is authenticating the user.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,8,Q_DIAMETER_NAS_IP,nas_ip,,string,IP address of the NAS originating the Access-Request,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,12,Q_DIAMETER_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,4,Q_DIAMETER_END_TO_END_ID,end_to_end_id,,uint32,Used to detect duplicate messages,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,3,Q_DIAMETER_HOP_BY_HOP_ID,hop_by_hop_id,,uint32,Used to match Diameter request and reply messages,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,2,Q_DIAMETER_APPLICATION_ID,application_id,,uint32,Identify which application the message is applicable for,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,1,Q_DIAMETER_COMMAND_CODE,command_code,,uint32,Command associated with the Diameter request,0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,26,Q_DIAMETER_COMMAND_FLAGS,command_flags,,uint8,"Bitfield which defines some attributes of a command on one byte as follows: [RPE.....] ('R'equest/answer, 'P'roxiable, 'E'rror).",0,session_mod,0,,,,, +,602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,643,Q_MPA_REQUEST,request,,parent,A Diameter request.,0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,x,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,x,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,x,string,Name of email receiver.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),1,Q_DIRECTCONNECT_QUERY_WAY,query_way,,string,Way of the query.,0,session_mod,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),2,Q_DIRECTCONNECT_SEARCH_RESULT,search_result,,parent,The result of a query.,0,session_mod,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),3,Q_DIRECTCONNECT_SR_FILENAME,sr_filename,,string,The name of a file returned by a search query.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),4,Q_DIRECTCONNECT_SR_FILESIZE,sr_filesize,,string,The size of a file returned by a search query.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),5,Q_DIRECTCONNECT_SR_FILEHASH,sr_filehash,,string,The hash of a file returned by a search query.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0,,,,, +,31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,1,Q_DNS_DNS_ENTRY,dns_entry,,parent,"DNS entry, in a reply.",0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,18,Q_DNS_DNS_QUERY,dns_query,,parent,DNS query.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,581,Q_MPA_QUERY,query,,string,DNS Query sent.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,DNS Query type.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,2,Q_DNS_QDCOUNT,qdcount,,uint32,Number of queries.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,3,Q_DNS_ANCOUNT,ancount,,uint32,Number of answers.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,4,Q_DNS_NSCOUNT,nscount,,uint32,Number of answers in the 'authority' section.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,5,Q_DNS_ARCOUNT,arcount,,uint32,Number of additional answers.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,6,Q_DNS_TRANSACTION_ID,transaction_id,,uint32,DNS unique transaction ID.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,7,Q_DNS_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,8,Q_DNS_NAME,name,,string,Name of the request,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,9,Q_DNS_HOST,host,,string,Host name,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,10,Q_DNS_HOST_ADDR,host_addr,,ip_addr,IPV4 Host address,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,11,Q_DNS_HOST_ADDR6,host_addr6,,ip6_addr,IPV6 Host address,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,12,Q_DNS_REVERSE_ADDR,reverse_addr,,ip_addr,IP address returned to the PTR request.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,13,Q_DNS_REVERSE_ADDR6,reverse_addr6,,ip6_addr,IPv6 address returned to the PTR request.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,14,Q_DNS_HOST_TYPE,host_type,,string_index,DNS response type,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,15,Q_DNS_REPLY_CODE,reply_code,,string_index,Return Message,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,16,Q_DNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,17,Q_DNS_TTL,ttl,,uint32,Time (in seconds) a DNS information returned by the server will be kept in cache.,0,session_mod,0,,,,, +,32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,67,Q_DNS_WEB_APPLICATION_INFO,web_application_info,,,"Structure containing metadata for classification of known HTTP-based web applications. These metadata are based on Type A (IPv4) DNS responses returned from the server. The ul3l4_addr_t structure contains the web application protocol path, classified using the requested host name, and the IPv4 address resolved by the server. The hostname lookup is performed on Q_HTTP_SERVER registered PDATA signatures only.",0,session_mod,0,,,,, +,34,Q_PROTO_EBAY,Web,ebay,eBay.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,34,Q_PROTO_EBAY,Web,ebay,eBay.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,34,Q_PROTO_EBAY,Web,ebay,eBay.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,34,Q_PROTO_EBAY,Web,ebay,eBay.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,9,Q_EBUDDY_CONTACT_IM,contact_im,,string,Instant Messaging network associated to the contact,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,8,Q_EBUDDY_CONTACT_MESSAGE,contact_message,,string,User's contact IM personal message.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,7,Q_EBUDDY_CONTACT_BLOCKED,contact_blocked,,string,Specifies if the user has blocked this contact.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,6,Q_EBUDDY_CONTACT_NICKNAME,contact_nickname,,string,Contact's nickname.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,4,Q_EBUDDY_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,10,Q_EBUDDY_CHAT_IM,chat_im,,string,Instant Messaging network the message is being exchanged on.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,3,Q_EBUDDY_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,5,Q_EBUDDY_CLIENT_MESSAGE,client_message,,string,User's IM personal message.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,2,Q_EBUDDY_E_ACTION,e_action,,string,Action of the user.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,1,Q_EBUDDY_IM_NETWORK,im_network,,string,Name of the current instant messaging network used by the client.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session_prt,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session_prt,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0,,,,, +,35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0,,,,, +,36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,1,Q_EIGRP_OPCODE,opcode,,string_index,Operation code (as string).,0,pkt,0,,,,, +,36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,2,Q_EIGRP_OPCODEID,opcodeid,,uint8,Operation code.,0,pkt,0,,,,, +,36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,3,Q_EIGRP_AS_NUMBER,as_number,,uint32,The Autonomous System identifier.,0,pkt,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,1,Q_ETH_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,session_fix,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,2,Q_ETH_DST,dst,,mac_addr,Destination MAC address. Extracted only on the first packet of the session.,0,session_fix,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,11,Q_ETH_DST_NET,dst_net,,mac_addr,Destination MAC address.,0,pkt,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,3,Q_ETH_SRC,src,,mac_addr,Source MAC address. Extracted only on the first packet of the session.,0,session_fix,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,12,Q_ETH_SRC_NET,src_net,,mac_addr,Source MAC address.,0,pkt,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,4,Q_ETH_XCAST,xcast,,string_index,"Communication type (broadcast, multicast, unicast).",0,pkt,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,5,Q_ETH_TRAILER,trailer,,binary,Data added to complete the Ethernet frame if required (padding bits).,0,pkt,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,6,Q_ETH_ADDRESS,address,,uint8,Matches a source or destination Ethernet address. To be used in a filter.,0,pkt,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,7,Q_ETH_MANUF_SOURCE,manuf_source,,string_index,"Manufacturer of the network card, on the source side.",0,session_fix,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,8,Q_ETH_MANUF_DEST,manuf_dest,,string_index,"Manufacturer of the network card, on the destination side.",0,session_fix,0,,,,, +,43,Q_PROTO_ETH,Network Service,eth,Ethernet,10,Q_ETH_IGNORE_ENCAPSULATIONS,ignore_encapsulations,,string,"Ignoring a MPLS, 8021Q or GRE tunnel.",0,pkt,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,2,Q_ETSI_LI_LIID,liid,,string,Lawful Interception Identifier,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,3,Q_ETSI_LI_AUTHORIZATION_COUNTRY_CODE,authorization_country_code,,string,Country code which has the authorization,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,4,Q_ETSI_LI_COMMUNICATION_ID,communication_id,,parent,"Parent attribute which contains network_id, communication_id_number and delivery_country_code.",0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,5,Q_ETSI_LI_NETWORK_ID,network_id,,parent,Network Identifier.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,6,Q_ETSI_LI_OPERATOR_ID,operator_id,,string,Operator Identifier.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,7,Q_ETSI_LI_NETWORK_ELEMENT_ID,network_element_id,,string,Network element identifier.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,8,Q_ETSI_LI_ETSI_671_NEI,etsi_671_nei,,string,Network element identifier.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,9,Q_ETSI_LI_COMMUNICATION_ID_NUMBER,communication_id_number,,uint32,Communication Identifier Number.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,10,Q_ETSI_LI_DELIVERY_COUNTRY_CODE,delivery_country_code,,string,Delivery Country Code.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,11,Q_ETSI_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,12,Q_ETSI_LI_TIME_STAMP,time_stamp,,string,Timestamp.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,17,Q_ETSI_LI_MICROSECOND_TIME_STAMP_TEMP,microsecond_time_stamp_temp,,parent,The microSecondTimeStampTemp field may be used to contain timestamp in second and microsecond.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,18,Q_ETSI_LI_SECOND,second,,uint64,The field contains the timestamp in seconds.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,19,Q_ETSI_LI_MICROSECOND,microsecond,,uint32,The field contains the timestamp in microseconds.,0,session_mod,0,,,,, +,537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,16,Q_ETSI_LI_TIME_STAMP_QUALIFIER,time_stamp_qualifier,,string,The timeStampQualifier field may be used to indicate what time the timestamp represents.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,552,Q_MPA_MESSAGE,message,,string,Instant message content.,0,session_prt,1,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,string,Whether or not the access was made through a mobile device.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,32,Q_FACEBOOK_APPLICATION_ACTION,application_action,x,string,(Deprecated) Indicates the action executed by the user.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,31,Q_FACEBOOK_APPLICATION_NAME,application_name,x,string,(Deprecated) Name of the application,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,30,Q_FACEBOOK_APPLICATION,application,x,parent,(Deprecated) Parent for all attributes related to facebook applications.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,28,Q_FACEBOOK_FEED_TEXT,feed_text,,string,feed text.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,27,Q_FACEBOOK_FEED_LIKE,feed_like,,uint32,Number of time the feed has been liked.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,26,Q_FACEBOOK_FEED_TYPE,feed_type,,string,Type of the feed.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,25,Q_FACEBOOK_FEED,feed,,parent,"Parent for all attributes related to facebook feeds. Currently, only wall-to-wall feeds are extracted.",0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,23,Q_FACEBOOK_SHARE_TEXT,share_text,,string,Text of the share message,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,24,Q_FACEBOOK_SHARE_WITH,share_with,,string,Who the share message is sent to.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,22,Q_FACEBOOK_SHARE,share,,parent,Parent for all attributes related to sharing.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,Parent for all attributes related tu user contacts.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,19,Q_FACEBOOK_COMMENT,comment,,string,Text of the comment.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,18,Q_FACEBOOK_STATUS_UPDATE,status_update,,string,Status update text.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,29,Q_FACEBOOK_LOCATION,location,,string,Location shared,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,17,Q_FACEBOOK_PROFILE_VALUE,profile_value,,string,Value of a profile entry,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,16,Q_FACEBOOK_PROFILE_NAME,profile_name,,string,Name of a profile entry,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,15,Q_FACEBOOK_PROFILE_ENTRY,profile_entry,,parent,Parent for all attributes related to facebook profile.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,14,Q_FACEBOOK_RECEIVER_SEX,receiver_sex,,string,Instant message recipient gender.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,5,Q_FACEBOOK_RECEIVER_UID,receiver_uid,,string,Instant message recipient ID.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,585,Q_MPA_RECEIVER,receiver,,string,Instant message recipient name.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,13,Q_FACEBOOK_SENDER_SEX,sender_sex,,string,Instant message sender gender.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the message sender.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,4,Q_FACEBOOK_SENDER_UID,sender_uid,,string,Instant message sender ID.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,553,Q_MPA_MESSAGE_ID,message_id,,string,Instant message ID.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,661,Q_MPA_CLIENT_TIME,client_time,,string,Instant message client timestamp.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,525,Q_MPA_CHAT,chat,,parent,Parent for all attributes related to instant messages.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,12,Q_FACEBOOK_HIGHSCHOOL,highschool,x,string,"(deprecated, see profile_entry) Name of highschool.",0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,11,Q_FACEBOOK_COLLEGE,college,x,string,"(deprecated, see profile_entry) Name of college.",0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,10,Q_FACEBOOK_EMPLOYER,employer,x,string,"(deprecated, see profile_entry) Name of employer.",0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,662,Q_MPA_SEX,sex,,string,User gender.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,7,Q_FACEBOOK_UID,uid,,string,Generic user ID.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,9,Q_FACEBOOK_LASTNAME,lastname,,string,User family name,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,8,Q_FACEBOOK_FIRSTNAME,firstname,,string,User name,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,3,Q_FACEBOOK_APPS_APPLICATION_ACTION,application_action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,2,Q_FACEBOOK_APPS_APPLICATION_NAME,application_name,,string,Name of the application.,0,session_mod,0,,,,, +,1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,1,Q_FACEBOOK_APPS_APPLICATION,application,,parent,Parent for all attributes related to facebook applications.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,677,Q_MPA_CONTACT_UID,contact_uid,,string,The facebook id of a contact.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Receiver ID.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,741,Q_MPA_THREAD_ID,thread_id,,string,Identifies messages belonging to a series of replies back and forth pertaining to a certain message.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the duration of it in seconds",0,session_prt,0,,,,, +,1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,3,Q_FIREFOX_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,Plugin version after update.,0,session_mod,0,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,2,Q_FIREFOX_UPDATE_PLUGIN_NAME,plugin_name,,string,Name of the plugin.,0,session_mod,0,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,1,Q_FIREFOX_UPDATE_PLUGIN,plugin,,parent,Parent for all attributes related to plugins.,0,session_mod,0,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,703,Q_MPA_NEW_VERSION,new_version,,string,Browser version after update.,0,session_mod,0,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Browser version before update.,0,session_mod,0,,,,, +,550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash Plugin Update,703,Q_MPA_NEW_VERSION,new_version,,string,"New version number, as returned by Adobe Web Server.",0,session_mod,0,,,,, +,550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash Plugin Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current flash-plugin version number installed on the client.,0,session_mod,0,,,,, +,568,Q_PROTO_FREEBSD_UPDATE,Web,freebsd_update,FreeBSD Updates,1,Q_FREEBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0,,,,, +,320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0,,,,, +,320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,8,Q_FTP_COMMAND,command,,parent,Parent attribute grouping meta data extracted from FTP protocol.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,A FTP request.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,555,Q_MPA_METHOD,method,,string,Contains the FTP command sent.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,10,Q_FTP_METHOD_CONTENT,method_content,,string,Method parameter,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,1,Q_FTP_DATA_PORT,data_port,,uint16,Data connection TCP port.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,11,Q_FTP_DATA_PORT_START_OFFSET,data_port_start_offset,,uint32,Offset to the first FTP port byte given in the PORT command.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,12,Q_FTP_DATA_PORT_END_OFFSET,data_port_end_offset,,uint32,"Offset to the first byte which is not part of the TCP port value, given in the PORT command.",0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,2,Q_FTP_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,3,Q_FTP_OFFSET,offset,,uint32,Indicates the start offset of the file transfer.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,531,Q_MPA_CONTENT_TYPE,content_type,,string,Indicates the content type of transferred file.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,First line of the server banner.,0,session_fix,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,4,Q_FTP_RETURN_MSG,return_msg,,parent,"Parent attribute, containing response from server",0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,5,Q_FTP_RETURN_CODE,return_code,,uint16,Code of server's response.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,6,Q_FTP_RETURN_CONTENT,return_content,,string,Message of server's response.,0,session_mod,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,7,Q_FTP_TRANSFER_DURATION,transfer_duration,,timeval,Elapsed time (in seconds) between the begining of a transfer (ftp code 150) and the first packet signaling the end with succes of the transfer (ftp code 226),0,session_fix,0,,,,, +,45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,9,Q_FTP_INDEX,index,,uint32,Identifier of the request and response in a FTP flow.,0,session_fix,0,,,,, +,46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,48,Q_PROTO_GARP,Application Service,garp,Generic Attribute Registration Protocol,1,Q_GARP_PROTOCOL,protocol,,string_index,Application used (GVRP or GMRP).,0,pkt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,552,Q_MPA_MESSAGE,message,,parent,GIOP message parent structure.,0,session_mod,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,608,Q_MPA_VERSION,version,,string,Current GIOP version.,0,session_prt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,1,Q_GIOP_IOR_TYPE_ID,ior_type_id,,string,IOR object's repository id.,0,session_prt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,3,Q_GIOP_MESSAGE_TYPE,message_type,,string,GIOP message type.,0,session_prt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,2,Q_GIOP_REQUEST_OPERATION,request_operation,,string,Name of the request sent to the server.,0,session_prt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,4,Q_GIOP_REQUEST_ID,request_id,,uint32,ID used to associate a reply message with a request message.,0,session_prt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,5,Q_GIOP_OBJECT_KEY,object_key,,buffer,Identifies the object should receive the message.,0,session_prt,0,,,,, +,49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,7,Q_GMAIL_REAL_SENDER_DOMAIN,real_sender_domain,,string,Domain of the email sender.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,8,Q_GMAIL_REAL_SENDER_MSGID,real_sender_msgid,,string,Email identifier.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,11,Q_GMAIL_NEXT_ATTACH_ID,next_attach_id,,string,New value for the attach_id of an attachment.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,10,Q_GMAIL_THUMBNAIL,thumbnail,,uint32,Indicates whether this attachment is an image thumbnail.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,1,Q_GMAIL_VERSION,version,,string,Gmail version used.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,2,Q_GMAIL_ACCESS_INFO,access_info,,parent,Contains Gmail access data.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,5,Q_GMAIL_LAST_ACTIVITY,last_activity,,string,Time elapsed since last account activity.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,6,Q_GMAIL_LAST_ACTIVITY_TIMESTAMP,last_activity_timestamp,,timeval,Last account activity timestamp.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,3,Q_GMAIL_CURRENT_IP_ADDRESS,current_ip_address,,ip_addr,IP address of the logged user.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,4,Q_GMAIL_OTHER_IP_ADDRESS,other_ip_address,,ip_addr,IP address of the other logged user.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,9,Q_GMAIL_SAVED,saved,,string_index,Indicates whether the draft have been saved automatically(1) or manually(2).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0,,,,, +,273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,677,Q_MPA_CONTACT_UID,contact_uid,,string,The GMAIL unique identifier for a contact.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_fix,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,2,Q_GNUTELLA_SERVER,server,,string,Name of the server from which the file is downloaded.,0,session_fix,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,4,Q_GNUTELLA_FILE_ED2K,file_ed2k,,string,Hash ed2k of the downloaded file.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,5,Q_GNUTELLA_FILE_SHA1,file_sha1,,string,Hash sha1 of the downloaded file.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,6,Q_GNUTELLA_FILE_MD5,file_md5,,string,Hash md5 of the downloaded file.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,10,Q_GNUTELLA_FILE_CHUNK_DATA,file_chunk_data,,parent,Information about downloaded data.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint16,Number of the transferred piece.,0,session_prt,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,21,Q_GNUTELLA_PEER,peer,,parent,Parent attribute containing some Gnutella Peer connection metadata. This metadata can be used to classify Gnutella connections targetted to this machine.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,19,Q_GNUTELLA_PEER_ADDR,peer_addr,,ip_addr,Gnutella peer's IPv4 address.,0,session_mod,0,,,,, +,52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,20,Q_GNUTELLA_PEER_PORT,peer_port,,,Gnutella peer's listenning port number.,0,session_mod,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,54,Q_PROTO_GOOGLE,Web,google,Google.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,1,Q_GOOGLE_ADS_GOOGLE_AD,google_ad,,parent,Parent attribute grouping ad information.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,2,Q_GOOGLE_ADS_AD_CHANNEL,ad_channel,,string,'channel' ad attribute.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,3,Q_GOOGLE_ADS_AD_URL,ad_url,,string,'url' ad attribute.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,4,Q_GOOGLE_ADS_AD_URL_FULL,ad_url_full,,string,Complete ad URL.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,5,Q_GOOGLE_ADS_AD_VISIBLE_URL,ad_visible_url,,string,'url' visible ad attribute.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,12,Q_GOOGLE_ADS_AD_PAGE,ad_page,,string,Page on which the ad is displayed.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,6,Q_GOOGLE_ADS_AD_CLIENT,ad_client,,string,Buyer of the ad.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,7,Q_GOOGLE_ADS_AD_TEXT,ad_text,,string,Ad text description.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,8,Q_GOOGLE_ADS_AD_TYPE,ad_type,,string,Ad type.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,11,Q_GOOGLE_ADS_AD_TITLE,ad_title,,string,Ad title.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,9,Q_GOOGLE_ADS_AD_BID_TYPE,ad_bid_type,,string,'bid_type' ad attribute.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,13,Q_GOOGLE_ADS_AD_STATUS,ad_status,,string,Indicates whether the ad has been displayed or clicked.,0,session_mod,0,,,,, +,247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,10,Q_GOOGLE_ADS_AD_TARGETING_TYPE,ad_targeting_type,,string,'targeting_type' ad attribute.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,1,Q_GOOGLE_EARTH_SEARCH,search,,parent,Place researched.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,2,Q_GOOGLE_EARTH_NEAR,near,,parent,Location being near place researched.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,9,Q_GOOGLE_EARTH_NEAR_TEXT,near_text,,string,Location being near place researched.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,3,Q_GOOGLE_EARTH_NEAR_RAW,near_raw,,string,Location being near place researched as indicated in the URL.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,4,Q_GOOGLE_EARTH_ITINERARY,itinerary,,parent,Itinerary researched.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,5,Q_GOOGLE_EARTH_START_ADDR,start_addr,,parent,Departure point .,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,6,Q_GOOGLE_EARTH_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,11,Q_GOOGLE_EARTH_START_ADDR_TEXT,start_addr_text,,string,Encoded departure point .,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,7,Q_GOOGLE_EARTH_END_ADDR,end_addr,,parent,Arrival point.,0,session_mod,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,8,Q_GOOGLE_EARTH_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,10,Q_GOOGLE_EARTH_END_ADDR_TEXT,end_addr_text,,string,Encoded arrival point.,0,session_prt,0,,,,, +,55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,3,Q_GOOGLE_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,1,Q_GOOGLE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,5,Q_GOOGLE_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,6,Q_GOOGLE_GROUPS_ALIAS,alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,4,Q_GOOGLE_GROUPS_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session_mod,1,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,1,Q_GOOGLE_MAPS_ITINERARY,itinerary,,parent,Itinerary researched.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,2,Q_GOOGLE_MAPS_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session_prt,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,3,Q_GOOGLE_MAPS_START_ADDR,start_addr,,string,Encoded departure point .,0,session_prt,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,4,Q_GOOGLE_MAPS_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session_prt,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,5,Q_GOOGLE_MAPS_END_ADDR,end_addr,,string,Encoded arrival point.,0,session_prt,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,6,Q_GOOGLE_MAPS_SPACE,space,,parent,Parent attribut containing the geographic coordinates of the zone currently displayed by the user.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,7,Q_GOOGLE_MAPS_ZOOM,zoom,,string,Zoom level of the map.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,8,Q_GOOGLE_MAPS_SOUTH,south,,string,Latitude coordinate of South edge of the first tile that was loaded by the webpage.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,9,Q_GOOGLE_MAPS_EAST,east,,string,Longitude coordinate of East edge of the first tile that was loaded by the webpage.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,10,Q_GOOGLE_MAPS_WEST,west,,string,Longitude coordinate of West edge of the first tile that was loaded by the webpage.,0,session_mod,0,,,,, +,57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,11,Q_GOOGLE_MAPS_NORTH,north,,string,Latitude coordinate of North edge of the first tile that was loaded by the webpage.,0,session_mod,0,,,,, +,1122,Q_PROTO_GOOGLE_PLAY,Application Service,google_play,Google Play,1,Q_GOOGLE_PLAY_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0,,,,, +,338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,1,Q_GRE_PROTOCOL,protocol,,string,Identifier (string) of the upper layer protocol.,0,pkt,0,,,,, +,58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,2,Q_GRE_WRONG_CRC,wrong_crc,,uint16,It is a flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0,,,,, +,58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,3,Q_GRE_PROTOCOL_ID,protocol_id,,uint16,Id of the upper layer protocol.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,1,Q_GTP_VERSION,version,,uint8,Protocol Version (0 or 1).,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,2,Q_GTP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,3,Q_GTP_MESSAGE_CODE,message_code,,uint8,Message type,0,pkt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,4,Q_GTP_FLOW_LABEL,flow_label,,uint16,"Unique ID of a GTP flow, available in version 0.",0,pkt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,5,Q_GTP_SEQ,seq,,uint16,Packet sequence number.,0,pkt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,6,Q_GTP_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,7,Q_GTP_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,pkt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,8,Q_GTP_MS_ADDRESS,ms_address,,ip_addr,IP address assigned to the mobile station.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,43,Q_GTP_MS_ADDRESS_PEER,ms_address_peer,,ip_addr,IP address assigned to the mobile station on the peer half-session.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,65,Q_GTP_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,66,Q_GTP_MS_ADDRESS_V6_PEER,ms_address_v6_peer,,ip6_addr,IPv6 address assigned to the mobile station on the peer half-session.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,39,Q_GTP_GSN,gsn,,parent,"GSN IP address, with a type and an address.",0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,9,Q_GTP_GSN_ADDRESS,gsn_address,,ip_addr,GSN IP address.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,45,Q_GTP_GSN_ADDRESS_CONTROL,gsn_address_control,,ip_addr,GSN Control IP address.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,46,Q_GTP_GSN_ADDRESS_DATA,gsn_address_data,,ip_addr,GSN Data IP address.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,67,Q_GTP_GSN_ADDRESS_V6,gsn_address_v6,,ip6_addr,GSN IPv6 address.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,68,Q_GTP_GSN_ADDRESS_V6_CONTROL,gsn_address_v6_control,,ip6_addr,GSN Control IPv6 address.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,69,Q_GTP_GSN_ADDRESS_V6_DATA,gsn_address_v6_data,,ip6_addr,GSN DataIPv6 address.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,38,Q_GTP_GSN_TYPE,gsn_type,,string,GSN address type.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,10,Q_GTP_ACCESS_POINT,access_point,,string,Access point name.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,11,Q_GTP_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,12,Q_GTP_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,13,Q_GTP_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,14,Q_GTP_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,15,Q_GTP_SESSION_TIME,session_time,,timeval,GTP session duration (time between create context and delete context),0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,16,Q_GTP_RAI,rai,,string,Represents the Routing Area Identity,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,17,Q_GTP_NSAPI,nsapi,,uint8,Network Service Access Point Identifier is used to identify a PDP context belonging to a specific MM context IP,0,pkt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,18,Q_GTP_MS_ADDR_TYPE,ms_addr_type,x,string_index,Type of the IP address assigned to the mobile station. This attribute is deprecated.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,19,Q_GTP_MS_ADDR_ORG,ms_addr_org,x,string_index,Organization owning the IP address assigned to the mobile station. This attribute is deprecated.,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,20,Q_GTP_START_TIME,start_time,,timeval,Start date of the call,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,21,Q_GTP_STOP_TIME,stop_time,,timeval,End date of the call,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,22,Q_GTP_TEID_DATA,teid_data,,uint32,TEID data (Tunnel Endpoint Identifier),0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,23,Q_GTP_TEID_CONTROL,teid_control,,uint32,TEID control plane (Tunnel Endpoint Identifier),0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,24,Q_GTP_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,37,Q_GTP_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,36,Q_GTP_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,44,Q_GTP_QOS_RAW,qos_raw,,binary,This field contains quality of service data.,0,session_prt,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,26,Q_GTP_QOS_DELAY,qos_delay,,uint32,Specifies the quality of service delay class.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,27,Q_GTP_QOS_RELIABILITY,qos_reliability,,uint32,Specifies the quality of service reliability class.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,28,Q_GTP_QOS_PEAK,qos_peak,,uint32,Specifies the quality of service peak throughput.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,29,Q_GTP_QOS_PRECEDENCE,qos_precedence,,uint32,Specifies the quality of service precedence class.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,30,Q_GTP_QOS_MEAN,qos_mean,,uint32,Specifies the quality of service mean throughput.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,31,Q_GTP_QOS_ALLOC_RET_PRIO,qos_alloc_ret_prio,,uint32,Specifies the Allocation/Retention priority.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,40,Q_GTP_QOS_MAX_UPLINK,qos_max_uplink,,uint32,Specifies the maximum uplink throughput.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,41,Q_GTP_QOS_MAX_DOWNLINK,qos_max_downlink,,uint32,Specifies the maximum downlink throughput.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,32,Q_GTP_LOCATION_TYPE,location_type,,uint32,Terminal Location Type,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,33,Q_GTP_LOCATION,location,,string,Terminal Location,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,42,Q_GTP_LOCATION_RAW,location_raw,,binary,Terminal location in raw binary representation.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,55,Q_GTP_LOCATION_MCC,location_mcc,,string,Mobile Country Code (MCC) is part of the IMSI number with uniquely identifies a particular subscriber.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,56,Q_GTP_LOCATION_MNC,location_mnc,,string,A Mobile Network Code (MNC) is used in combination with a Mobile Country Code to uniquely identify a mobile phone.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,57,Q_GTP_LOCATION_LAC,location_lac,,string,A Location Area Code (LAC) is a unique number given to a set of base stations that are grouped together.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,58,Q_GTP_LOCATION_CI,location_ci,,string,A Cell Identity (CI) is used to uniquely identify a cell inside a location area.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,59,Q_GTP_LOCATION_SAC,location_sac,,string,A Service Area Code (SAC) is used to uniquely identify an area consisting of one or more cells belonging to the same location area.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,60,Q_GTP_LOCATION_RAI,location_rai,,string,A Routing Area Identification (RAI) is used to uniquely identify a routing area.,0,session_fix,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,34,Q_GTP_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session_mod,0,,,,, +,59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,35,Q_GTP_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,1,Q_GTPV2_VERSION,version,,uint8,Protocol Version (2).,0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,2,Q_GTPV2_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,3,Q_GTPV2_MESSAGE_CODE,message_code,,uint8,Message type.,0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,552,Q_MPA_MESSAGE,message,,buffer,Binary content of the message.,0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,4,Q_GTPV2_SEQ,seq,,uint32,Packet sequence number.,0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,5,Q_GTPV2_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,52,Q_GTPV2_EPS_BEARER_ID,eps_bearer_id,,uint8,Uniquely identifies traffic flow that receives a common QoS treatment.,0,session_prt,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,6,Q_GTPV2_ACCESS_POINT,access_point,,string,Access point name.,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,7,Q_GTPV2_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session_fix,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,8,Q_GTPV2_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session_fix,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,9,Q_GTPV2_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session_fix,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,10,Q_GTPV2_GUTI,guti,,binary,Globally Unique Temporary UE Identity,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,11,Q_GTPV2_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,12,Q_GTPV2_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,13,Q_GTPV2_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,14,Q_GTPV2_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,15,Q_GTPV2_MS_ADDRESS,ms_address,,ip_addr,IPv4 address assigned to the mobile station.,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,55,Q_GTPV2_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,16,Q_GTPV2_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,17,Q_GTPV2_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,18,Q_GTPV2_START_TIME,start_time,,timeval,Start date of the call,0,session_fix,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,53,Q_GTPV2_STOP_TIME,stop_time,,timeval,End date of the call,0,session_fix,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,54,Q_GTPV2_SESSION_DURATION,session_duration,,timeval,Call duration - not extracted,0,session_fix,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,19,Q_GTPV2_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,20,Q_GTPV2_S1U_ENODEB_GTPU_TEID,s1u_enodeb_gtpu_teid,,uint32,S1-U eNodeB GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,21,Q_GTPV2_S1U_SGW_GTPU_TEID,s1u_sgw_gtpu_teid,,uint32,S1-U SGW GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,22,Q_GTPV2_S5_S8_SGW_GTPU_TEID,s5_s8_sgw_gtpu_teid,,uint32,S5/S8 SGW GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,23,Q_GTPV2_S5_S8_PGW_GTPU_TEID,s5_s8_pgw_gtpu_teid,,uint32,S5/S8 PGW GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,24,Q_GTPV2_S5_S8_SGW_GTPC_TEID,s5_s8_sgw_gtpc_teid,,uint32,S5/S8 SGW GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,25,Q_GTPV2_S5_S8_PGW_GTPC_TEID,s5_s8_pgw_gtpc_teid,,uint32,S5/S8 PGW GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,26,Q_GTPV2_S11_MME_GTPC_TEID,s11_mme_gtpc_teid,,uint32,S11 MME GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,27,Q_GTPV2_S11_S4_SGW_GTPC_TEID,s11_s4_sgw_gtpc_teid,,uint32,S11/S4 SGW GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,28,Q_GTPV2_S10_MME_GTPC_TEID,s10_mme_gtpc_teid,,uint32,S10 MME GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,29,Q_GTPV2_S3_MME_GTPC_TEID,s3_mme_gtpc_teid,,uint32,S3 MME GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,30,Q_GTPV2_S3_SGSN_GTPC_TEID,s3_sgsn_gtpc_teid,,uint32,S3 SGSN GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,31,Q_GTPV2_S4_SGW_GTPU_TEID,s4_sgw_gtpu_teid,,uint32,S4 SGW GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,32,Q_GTPV2_S4_SGSN_GTPU_TEID,s4_sgsn_gtpu_teid,,uint32,S4 SGSN GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,33,Q_GTPV2_S4_SGSN_GTPC_TEID,s4_sgsn_gtpc_teid,,uint32,S4 SGSN GTP-C interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,34,Q_GTPV2_S12_RNC_GTPU_TEID,s12_rnc_gtpu_teid,,uint32,S12 RNC GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,35,Q_GTPV2_S12_SGW_GTPU_TEID,s12_sgw_gtpu_teid,,uint32,SGW RNC GTP-U interface TEID,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,36,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS,s1u_enodeb_gtpu_address,,ip_addr,S1-U eNodeB GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,37,Q_GTPV2_S1U_SGW_GTPU_ADDRESS,s1u_sgw_gtpu_address,,ip_addr,S1-U SGW GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,38,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS,s5_s8_sgw_gtpu_address,,ip_addr,S5/S8 SGW GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,39,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS,s5_s8_pgw_gtpu_address,,ip_addr,S5/S8 PGW GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,40,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS,s5_s8_sgw_gtpc_address,,ip_addr,S5/S8 SGW GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,41,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS,s5_s8_pgw_gtpc_address,,ip_addr,S5/S8 PGW GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,42,Q_GTPV2_S11_MME_GTPC_ADDRESS,s11_mme_gtpc_address,,ip_addr,S11 MME GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,43,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS,s11_s4_sgw_gtpc_address,,ip_addr,S11/S4 SGW GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,44,Q_GTPV2_S10_MME_GTPC_ADDRESS,s10_mme_gtpc_address,,ip_addr,S10 MME GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,45,Q_GTPV2_S3_MME_GTPC_ADDRESS,s3_mme_gtpc_address,,ip_addr,S3 MME GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,46,Q_GTPV2_S3_SGSN_GTPC_ADDRESS,s3_sgsn_gtpc_address,,ip_addr,S3 SGSN GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,47,Q_GTPV2_S4_SGW_GTPU_ADDRESS,s4_sgw_gtpu_address,,ip_addr,S4 SGW GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,48,Q_GTPV2_S4_SGSN_GTPU_ADDRESS,s4_sgsn_gtpu_address,,ip_addr,S4 SGSN GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,49,Q_GTPV2_S4_SGSN_GTPC_ADDRESS,s4_sgsn_gtpc_address,,ip_addr,S4 SGSN GTP-C interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,50,Q_GTPV2_S12_RNC_GTPU_ADDRESS,s12_rnc_gtpu_address,,ip_addr,S12 RNC GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,51,Q_GTPV2_S12_SGW_GTPU_ADDRESS,s12_sgw_gtpu_address,,ip_addr,SGW RNC GTP-U interface IP address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,56,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS_V6,s1u_enodeb_gtpu_address_v6,,ip6_addr,S1-U eNodeB GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,57,Q_GTPV2_S1U_SGW_GTPU_ADDRESS_V6,s1u_sgw_gtpu_address_v6,,ip6_addr,S1-U SGW GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,58,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS_V6,s5_s8_sgw_gtpu_address_v6,,ip6_addr,S5/S8 SGW GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,59,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS_V6,s5_s8_pgw_gtpu_address_v6,,ip6_addr,S5/S8 PGW GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,60,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS_V6,s5_s8_sgw_gtpc_address_v6,,ip6_addr,S5/S8 SGW GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,61,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS_V6,s5_s8_pgw_gtpc_address_v6,,ip6_addr,S5/S8 PGW GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,62,Q_GTPV2_S11_MME_GTPC_ADDRESS_V6,s11_mme_gtpc_address_v6,,ip6_addr,S11 MME GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,63,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS_V6,s11_s4_sgw_gtpc_address_v6,,ip6_addr,S11/S4 SGW GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,64,Q_GTPV2_S10_MME_GTPC_ADDRESS_V6,s10_mme_gtpc_address_v6,,ip6_addr,S10 MME GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,65,Q_GTPV2_S3_MME_GTPC_ADDRESS_V6,s3_mme_gtpc_address_v6,,ip6_addr,S3 MME GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,66,Q_GTPV2_S3_SGSN_GTPC_ADDRESS_V6,s3_sgsn_gtpc_address_v6,,ip6_addr,S3 SGSN GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,67,Q_GTPV2_S4_SGW_GTPU_ADDRESS_V6,s4_sgw_gtpu_address_v6,,ip6_addr,S4 SGW GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,68,Q_GTPV2_S4_SGSN_GTPU_ADDRESS_V6,s4_sgsn_gtpu_address_v6,,ip6_addr,S4 SGSN GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,69,Q_GTPV2_S4_SGSN_GTPC_ADDRESS_V6,s4_sgsn_gtpc_address_v6,,ip6_addr,S4 SGSN GTP-C interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,70,Q_GTPV2_S12_RNC_GTPU_ADDRESS_V6,s12_rnc_gtpu_address_v6,,ip6_addr,S12 RNC GTP-U interface IPv6 address,0,session_mod,0,,,,, +,735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,71,Q_GTPV2_S12_SGW_GTPU_ADDRESS_V6,s12_sgw_gtpu_address_v6,,ip6_addr,SGW RNC GTP-U interface IPv6 address,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,1,Q_H225_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,3,Q_H225_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,5,Q_H225_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,6,Q_H225_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the codec that can be used for audio transmission,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,555,Q_MPA_METHOD,method,,string,The command,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,7,Q_H225_H245_ADDR,h245_addr,,ip_addr,Address used by h245 session.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,14,Q_H225_H245_ADDR_V6,h245_addr_v6,,ip6_addr,IP address for the H245 request embedded in H225 (this attribute is not extracted).,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,8,Q_H225_H245_PORT,h245_port,,uint16,Port used by h245 session.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,9,Q_H225_REQUEST_CALL_ID,request_call_id,,string,Call's id in the message.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,10,Q_H225_REQUEST_CALLER,request_caller,,string,Contains the identity (or the phone number) of the initiator in the message,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,11,Q_H225_REQUEST_CALLEE,request_callee,,string,Contains the identity (or the phone number) of the called party in the message.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,12,Q_H225_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,13,Q_H225_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,730,Q_MPA_AUDIO_DATA,audio_data,,string,Encoding can be used in audio flow.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,,ip6_addr,IPv6 address used for a rtcp channel (this attribute is not extracted).,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,745,Q_MPA_MEDIA_CHANNEL_ADDR_V6,media_channel_addr_v6,,ip6_addr,IPv6 address used for a rtp channel (this attribute is not extracted).,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session_prt,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,15,Q_H225_H245_CONTROL,h245_control,,parent,Parent attribute containing an H245 item.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,16,Q_H225_H245_REQUEST,h245_request,,parent,Contains message information for H245.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,17,Q_H225_H245_METHOD,h245_method,,string,The command for a H245 message.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,18,Q_H225_LANGUAGE,language,,string,Used language.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,19,Q_H225_PRODUCT_ID,product_id,,string,H225 product component identifier.,0,session_mod,0,,,,, +,60,Q_PROTO_H225,Audio/Video,h225,H225,608,Q_MPA_VERSION,version,,string,Version of the H225 VoIP client software.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivaluated attribute that contains the codec that can be used for audio transmission,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,555,Q_MPA_METHOD,method,,string,The command,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session_prt,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session_prt,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,x,ip6_addr,IPv6 address used for a rtcp channel (this attribute is no longer extracted).,0,session_prt,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session_prt,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session_mod,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session_prt,0,,,,, +,61,Q_PROTO_H245,Audio/Video,h245,H245,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session_prt,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,2,Q_H248_BINARY_TRANSACTION,transaction,,parent,Parent attribute including transaction elements,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,1,Q_H248_BINARY_CONTEXT_ID,context_id,,uint32,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,3,Q_H248_BINARY_ACTION,action,,string,"The action designates the command that is executed during the transaction. The coommand name is postfixed by Req if the transaction is a request, by Reply if the transaction is a reply",0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,4,Q_H248_BINARY_FROM_IP,from_ip,,ip_addr,Source IPv4 address,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,5,Q_H248_BINARY_FROM_IPV6,from_ipv6,,ip6_addr,Source IPv6 address,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,6,Q_H248_BINARY_TO_IP,to_ip,,ip_addr,Destination IPv4 address,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,7,Q_H248_BINARY_TO_IPV6,to_ipv6,,ip6_addr,Destination IPv6 address,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,8,Q_H248_BINARY_SRC_AUDIO_CONNECTION,src_audio_connection,,string,Source audio connection type,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,9,Q_H248_BINARY_SRC_AUDIO_PORT,src_audio_port,,uint16,Source audio connection port,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,10,Q_H248_BINARY_SRC_VIDEO_CONNECTION,src_video_connection,,string,Source video connection type,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,11,Q_H248_BINARY_SRC_VIDEO_PORT,src_video_port,,uint16,Source video connection port,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,12,Q_H248_BINARY_DST_AUDIO_CONNECTION,dst_audio_connection,,string,Destination audio connection type,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,13,Q_H248_BINARY_DST_AUDIO_PORT,dst_audio_port,,uint16,Destination audio connection port,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,14,Q_H248_BINARY_DST_VIDEO_CONNECTION,dst_video_connection,,string,Destination video connection type,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,15,Q_H248_BINARY_DST_VIDEO_PORT,dst_video_port,,uint16,Destination video connection port,0,session_mod,0,,,,, +,1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,16,Q_H248_BINARY_RESPONSE_CODE,response_code,,uint32,"Return code, extracted from the reply",0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,2,Q_H248_TEXT_TRANSACTION,transaction,,parent,Parent attribute including transaction elements,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,1,Q_H248_TEXT_CONTEXT_ID,context_id,,string,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,3,Q_H248_TEXT_ACTION,action,,string,"The action designates the command that is executed during the transaction. The coommand name is postfixed by Req if the transaction is a request, by Reply if the transaction is a reply",0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,4,Q_H248_TEXT_FROM_IP,from_ip,,ip_addr,Source IPv4 address,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,5,Q_H248_TEXT_FROM_IPV6,from_ipv6,,ip6_addr,Source IPv6 address,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,6,Q_H248_TEXT_TO_IP,to_ip,,ip_addr,Destination IPv4 address,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,7,Q_H248_TEXT_TO_IPV6,to_ipv6,,ip6_addr,Destination IPv6 address,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,8,Q_H248_TEXT_SRC_AUDIO_CONNECTION,src_audio_connection,,string,Source audio connection type,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,9,Q_H248_TEXT_SRC_AUDIO_PORT,src_audio_port,,uint16,Source audio connection port,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,10,Q_H248_TEXT_SRC_VIDEO_CONNECTION,src_video_connection,,string,Source video connection type,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,11,Q_H248_TEXT_SRC_VIDEO_PORT,src_video_port,,uint16,Source video connection port,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,12,Q_H248_TEXT_DST_AUDIO_CONNECTION,dst_audio_connection,,string,Destination audio connection type,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,13,Q_H248_TEXT_DST_AUDIO_PORT,dst_audio_port,,uint16,Destination audio connection port,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,14,Q_H248_TEXT_DST_VIDEO_CONNECTION,dst_video_connection,,string,Destination video connection type,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,15,Q_H248_TEXT_DST_VIDEO_PORT,dst_video_port,,uint16,Destination video connection port,0,session_mod,0,,,,, +,1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,16,Q_H248_TEXT_RESPONSE_CODE,response_code,,uint32,"Return code, extracted from the reply",0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,748,Q_MPA_UID,uid,,buffer,Generic user ID.,0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,301,Q_PROTO_HI5,Web,hi5,Hi5.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0,,,,, +,1561,Q_PROTO_HIGH_ENTROPY,Behavioral,high_entropy,High Entropy,1,Q_HIGH_ENTROPY_ENTROPY,entropy,,uint32,Computed entropy value.,0,session_mod,0,,,,, +,65,Q_PROTO_HPELLC,Network Service,hpellc,HP Extended Local-Link Control,1,Q_HPELLC_DST_XSAP,dst_xsap,,uint16,SAP destination address.,0,pkt,0,,,,, +,65,Q_PROTO_HPELLC,Network Service,hpellc,HP Extended Local-Link Control,2,Q_HPELLC_SRC_XSAP,src_xsap,,uint16,SAP source address.,0,pkt,0,,,,, +,66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,1,Q_HSRP_VIRTUAL_ADDR,virtual_addr,,ip_addr,Virtual IP address used by the group.,0,session_fix,0,,,,, +,66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,2,Q_HSRP_OPCODE,opcode,,string_index,"The operation code (HELLO, COUP, ...).",0,pkt,0,,,,, +,66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,3,Q_HSRP_STATE,state,,string_index,Describes the current state of the router sending the message.,0,pkt,0,,,,, +,66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,4,Q_HSRP_PRIORITY,priority,,uint8,"This field is used to elect the active and standby routers. When comparing priorities of two different routers, the router with the numerically higher priority wins.",0,pkt,0,,,,, +,66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,5,Q_HSRP_GROUP,group,,uint8,This field identifies the standby group.,0,pkt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,794,Q_MPA_NOCACHING_OVERRIDE,nocaching_override,,uint8,Attribute used to specify if it's unsafe to cache the final classification path of the current session. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,1,Q_HTTP_REQUEST,request,,parent,An HTTP request.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,2,Q_HTTP_SERVER,server,,string,"Normalized web server name, including lowercase transformation and suffix cleaning.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,66,Q_HTTP_HOST,host,,string,Host name value extracted from the Host header.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,90,Q_HTTP_HOST_START_OFFSET,host_start_offset,,uint32,Offset to the first Host HTTP header value byte in the TCP stream. The Host start is located in the current packet (the offset value is positive).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,91,Q_HTTP_HOST_END_OFFSET,host_end_offset,,int32,"Offset to the first byte which is not part of the Host HTTP header value, in the TCP stream. This value might be less or equal to zero if the Host actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,3,Q_HTTP_LOCATION,location,,string,Destination address where the client is redirected.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,4,Q_HTTP_REFERER,referer,,string,Source address from which the client obtained the requested URI.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,51,Q_HTTP_REFERER_PATH,referer_path,,string,Source address from which the client obtained the requested URI without query parameters.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,52,Q_HTTP_REFERER_SERVER,referer_server,,string,Contains the host or the website name of the referer.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,5,Q_HTTP_URI,uri,,string,"Normalized URL form (path + request) of a web resource, with UNRESERVED percent-encoded characters decoding (RFC3986).",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,50,Q_HTTP_URI_PATH,uri_path,,string,"Normalized URL path of a web resource, without query parameters. The path is normalized by decoding the UNRESERVED percent-encoded characters found in the URL (RFC3986).",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,6,Q_HTTP_URI_FULL,uri_full,,string,"Complete name (scheme/authority + path + request) of a web resource, with streamed extraction.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,72,Q_HTTP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the TCP stream. The URI start is located in the current packet (the offset value is positive).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,73,Q_HTTP_URI_END_OFFSET,uri_end_offset,,int32,"Offset to the first byte which is not part of the URI, in the TCP stream. This value might be less or equal to zero when the URI actually ends on a previous packet, in which the Request-line did not terminate (HTTP/1.x\r\n"").""",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Software used by the client to access the web page.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,74,Q_HTTP_USER_AGENT_START_OFFSET,user_agent_start_offset,,uint32,Offset to the first User-agent byte in the TCP stream. The User-agent start is located in the current packet (the offset value is positive).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,75,Q_HTTP_USER_AGENT_END_OFFSET,user_agent_end_offset,,int32,"Offset to the first byte which is not part of the User-agent, in the TCP stream. This value might be less or equal to zero if the User-agent actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,11,Q_HTTP_MIME_TYPE,mime_type,,string,Content type of the request or the web page.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,806,Q_MPA_FILE_TYPE,file_type,,string,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,12,Q_HTTP_CONTENT_DISPOSITION,content_disposition,,string,Information related to the disposition of the content present on the web page.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,13,Q_HTTP_FORWARD_ADDR,forward_addr,,ip_addr,DNS address to which the client is redirected.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,57,Q_HTTP_FORWARD_REDLINE,forward_redline,,ip_addr,"Value of the http header x-forward-redline"", used for forwarding.""",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,555,Q_MPA_METHOD,method,,string,HTTP command sent by the client.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,14,Q_HTTP_PROXY_AUTH,proxy_auth,,string,Authentication type on the proxy.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,15,Q_HTTP_PROXY_LOGIN,proxy_login,,string,Login used for proxy authentication.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,16,Q_HTTP_PROXY_REALM,proxy_realm,,string,Parameter used for proxy authentication.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,17,Q_HTTP_SMB_CLIENT,smb_client,,string,Name of the computer during NTLM authentication (Windows environment).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,18,Q_HTTP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,19,Q_HTTP_RTT,rtt,,timeval,"Server response time, calculated between the HTTP Request, and the client acknowledgement of the first non-empty HTTP Response packet.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,20,Q_HTTP_DIRECTORY,directory,,string,Directory of the accessed web page.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,21,Q_HTTP_COOKIE,cookie,,string,"Raw value of the HTTP Cookie header line, containing the HTTP request cookies.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,22,Q_HTTP_CODE,code,,uint32,Return code sent by the server.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,27,Q_HTTP_CONTENT_LEN,content_len,,uint64,Contains the content length of the HTTP request/response.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,28,Q_HTTP_X_CONTENT_URN,x_content_urn,,string,Contains the different hashes of downloaded file (used by Gnutella).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,29,Q_HTTP_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,632,Q_MPA_CONTENT_RAW,content_raw,,buffer,uncompressed HTTP content.,1,session_mod,1,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,30,Q_HTTP_CONTENT_RANGE,content_range,,string,Contains information about the size and offset of downloaded file (used by Gnutella).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,31,Q_HTTP_CHARSET,charset,,string,Contains the name of the used charset.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,32,Q_HTTP_WAP_PROFILE,wap_profile,,string,url link that contains the specification of the used handset.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,71,Q_HTTP_HEADER_RAW,header_raw,,string,One HTTP header line (field and value).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,33,Q_HTTP_HEADER,header,,parent,One HTTP header line.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,34,Q_HTTP_HEADER_NAME,header_name,,string,One HTTP header line (field).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,35,Q_HTTP_HEADER_VALUE,header_value,,string,One HTTP header line (value).,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,76,Q_HTTP_HEADER_END_OFFSET,header_end_offset,,uint32,Offset to the first byte after the last HTTP Header-line (\r\n included). This is an offset to the '\r' character of the second carriage return.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,36,Q_HTTP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,549,Q_MPA_IS_WEBDAV,is_webdav,,uint8,Indicates that the protocol is WebDAV.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,78,Q_HTTP_AUTH_USERNAME,auth_username,,string,Login used in the HTTP Authorization request extension for authentication. The supported authentication methods are Basic and Digest.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,79,Q_HTTP_AUTH_PASSWORD,auth_password,,string,Password used in the HTTP request Authorization extension. The only supported authentication method for password extraction is Basic.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,80,Q_HTTP_FILE_COMPLETED,file_completed,,uint8,Indicates that the request or response is completed.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,37,Q_HTTP_PART,part,,parent,Contains the whole uploaded data for POSTs.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,41,Q_HTTP_PART_HEADER,part_header,,parent,Groups part_header_name and part_header_value.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,42,Q_HTTP_PART_HEADER_NAME,part_header_name,,string,Name of a header line.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,43,Q_HTTP_PART_HEADER_VALUE,part_header_value,,string,Value of a header line.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,39,Q_HTTP_PART_CONTENT,part_content,,buffer,Uploaded data.,1,session_mod,1,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,38,Q_HTTP_PART_NAME,part_name,,string,Name of uploaded data or field.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,40,Q_HTTP_PART_FILENAME,part_filename,,string,Name of uploaded file.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,7,Q_HTTP_URI_PARAM,uri_param,,parent,URL parameter.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,8,Q_HTTP_URI_PARAM_NAME,uri_param_name,,string,URL parameter name.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,9,Q_HTTP_URI_PARAM_VALUE,uri_param_value,,string,URL parameter value.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,92,Q_HTTP_URI_RAW,uri_raw,,string,Complete name (scheme/authority + path + request) of a web resource.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,93,Q_HTTP_URI_RAW_PATH,uri_raw_path,,string,Complete name (scheme/authority + path) of a web resource without query parameters.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,47,Q_HTTP_INDEX,index,,uint32,Identifier of the request and response in a HTTP flow.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,54,Q_HTTP_RESPONSE_TS,response_ts,,timeval,Timestamp of the first packet of a HTTP response.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,53,Q_HTTP_REQUEST_TS,request_ts,,timeval,Timestamp of the first packet of a HTTP query.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,58,Q_HTTP_CONNECTION_HEADER,connection_header,,string,"Options in the content of Connection:"" general header desired by the sender for that particular connection.""",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,81,Q_HTTP_UPGRADE_HEADER,upgrade_header,,string,"Protocoles in the content of Upgrade:"" general header.""",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,59,Q_HTTP_HEADER_END,header_end,,no_type,Token marking end of the HTTP header.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,60,Q_HTTP_REQUEST_SIZE,request_size,,uint64,Contains the total length in bytes of the request or the response (including HTTP headers). This attribute is computed at the end of the request or response.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,61,Q_HTTP_DECHUNK_SIZE,dechunk_size,,uint32,Contains length of dechunked data.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,62,Q_HTTP_DECOMPRESS_SIZE,decompress_size,,uint32,Contains length of decompressed data.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,69,Q_HTTP_CONTENT_ENCODING,content_encoding,,string,Contains content encoding format.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,70,Q_HTTP_ACCEPT_ENCODING,accept_encoding,,string,Contains the accepted encodings.,0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,773,Q_MPA_IMAGE,image,,parent,"Parent entry, empty, for image metadata related attributes.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,774,Q_MPA_IMAGE_TYPE,image_type,,string,File format.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,776,Q_MPA_IMAGE_WIDTH,image_width,,uint32,Width of the video in pixels.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,777,Q_MPA_IMAGE_HEIGHT,image_height,,uint32,Height of the video in pixels.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,779,Q_MPA_IMAGE_INDEX_COLOR,image_index_color,,uint8,Use indexed colors.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,780,Q_MPA_IMAGE_ALPHA_CHANNEL,image_alpha_channel,,uint8,Use an alpha channel.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,799,Q_MPA_VIDEO_MANGLED,video_mangled,,uint8,The video stream is mangled (probably encrypted).,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,785,Q_MPA_VIDEO_URL,video_url,,string,URL of the binary video file referenced by the current metadata.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,786,Q_MPA_NTLM_DOMAIN,ntlm_domain,,string,"Domain"" attribute of the NTLM protocol.""",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,787,Q_MPA_NTLM_USER,ntlm_user,,string,"User"" attribute of the NTLM protocol.""",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,788,Q_MPA_NTLM_WORKSTATION,ntlm_workstation,,string,"Workstation"" attribute of the NTLM protocol.""",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,82,Q_HTTP_URI_DECODED,uri_decoded,,string,"Normalized and decoded URL form (path + request) of a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,83,Q_HTTP_URI_GET_DECODED,uri_get_decoded,,string,"Normalized and decoded URL form (path + request) of an HTTP GET request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,84,Q_HTTP_URI_POST_DECODED,uri_post_decoded,,string,"Normalized and decoded URL form (path + request) of an HTTP POST request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,85,Q_HTTP_URI_PATH_DECODED,uri_path_decoded,,string,"Normalized and decoded URL path of a web resource, without query parameters. The result includes ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,86,Q_HTTP_POST_VARIABLE_DECODED,post_variable_decoded,,string,"Extracts the 'name/value' metadata from each web-form CGI parameter found in a POST HTTP Request. The name and value strings are normalized including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass). The parameters are extracted from the URL of the request, and/or from the 'x-www-form-urlencoded' POST data.",0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,94,Q_HTTP_URI_UNICODE_NORMALIZED,uri_unicode_normalized,,string,Unicode normalized URL (after decoding).,0,session_prt,0,,,,, +,67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,88,Q_HTTP_LAST_MODIFIED,last_modified,,string,Contains the date and time at which the origin server believes the variant was last modified.,0,session_prt,0,,,,, +,750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),1,Q_ICA_APPLICATION,application,,string,Application name used by the client.,0,session_mod,0,,,,, +,69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),5,Q_ICA_APPLICATION_UTF16,application_utf16,,buffer,Application name used by the client in UTF-16 format.,0,session_mod,0,,,,, +,69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),2,Q_ICA_LOGIN_INFO,login_info,,string,"Login information for the given connection (host, username, network domain).",0,session_fix,0,,,,, +,69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),6,Q_ICA_LOGIN_INFO_UTF16,login_info_utf16,,buffer,"Login information for the given connection (host, username, network domain), in UTF-16 format.",0,session_fix,0,,,,, +,69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),3,Q_ICA_PRIORITY,priority,,uint8,Priority of the service.,0,session_mod,0,,,,, +,69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),4,Q_ICA_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,1,Q_ICAP_X_CLIENT_IP_RESPMOD_REQ,x_client_ip_respmod_req,,string,"The IP source address of the encapsulated HTTP request, when using the X-Client-IP ICAP header extension (draft-stecher-icap-subid-00).",0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,6,Q_ICAP_REFERER_RESPMOD_REQ,referer_respmod_req,,string,The HTTP referer embedded in the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,9,Q_ICAP_CONTENT_TYPE_RESPMOD_REQ,content_type_respmod_req,,string,The HTTP content_type embedded in the http response part of the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,7,Q_ICAP_USER_AGENT_RESPMOD_REQ,user_agent_respmod_req,,string,The HTTP user_agent embedded in the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,5,Q_ICAP_HOST_RESPMOD_REQ,host_respmod_req,,string,The HTTP host embedded in the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,4,Q_ICAP_URI_RESPMOD_REQ,uri_respmod_req,,string,The HTTP uri embedded in the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,3,Q_ICAP_METHOD_RESPMOD_REQ,method_respmod_req,,string,The HTTP method embedded in the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,8,Q_ICAP_CODE_RESPMOD_REQ,code_respmod_req,,uint32,The HTTP code embedded in the ICAP RESPMOD request (see http).,0,session_prt,0,,,,, +,1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,2,Q_ICAP_REQUEST_RESPMOD_REQ,request_respmod_req,,parent,An ICAP RESPMOD request,0,session_mod,0,,,,, +,1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),643,Q_MPA_REQUEST,request,,parent,Parent structure containing iCloud service metadata.,0,session_mod,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,1,Q_ICMP_TYPE,type,,string_index,ICMP message type (as string).,0,pkt,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,2,Q_ICMP_TYPEVAL,typeval,,uint8,ICMP message type (as integer).,0,pkt,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,3,Q_ICMP_CODE,code,,uint8,Message code.,0,pkt,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,4,Q_ICMP_MESSAGE,message,,string_index,The ICMP message.,0,pkt,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,5,Q_ICMP_SEQ,seq,,uint16,Sequence number of the echo packet.,0,pkt,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,6,Q_ICMP_RTT,rtt,,timeval,Response time of a ping command.,0,session_mod,0,,,,, +,70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,7,Q_ICMP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,1,Q_ICMP6_TYPE,type,,uint8,ICMP message type.,0,pkt,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,2,Q_ICMP6_CODE,code,,uint8,Message code.,0,pkt,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,552,Q_MPA_MESSAGE,message,,string_index,ICMP message type (in string representation).,0,pkt,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,3,Q_ICMP6_RTT,rtt,,timeval,Response time of a ping command.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,13,Q_ICMP6_TARGET_ADDRESS,target_address,,ip6_addr,The IP address of the target of the solicitation.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,8,Q_ICMP6_LINK_LAYER_ADDR,link_layer_addr,,parent,"The source or target link-layer address, depending on type.",0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,9,Q_ICMP6_LINK_LAYER_ADDR_TYPE,link_layer_addr_type,,uint32,Type of link-layer address (source or target).,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,10,Q_ICMP6_LINK_LAYER_RAW_ADDR,link_layer_raw_addr,,buffer,Link-layer address in binary format.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,11,Q_ICMP6_LINK_LAYER_MAC_ADDR,link_layer_mac_addr,,mac_addr,Link-layer address in MAC format (if applicable).,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,12,Q_ICMP6_LINK_LAYER_EUI64_ADDR,link_layer_eui64_addr,,uint64,Link-layer address in EUI64 format (if applicable).,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,5,Q_ICMP6_NDP_PREFIX,ndp_prefix,,parent,Prefix information for address autoconfiguration.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,6,Q_ICMP6_PREFIX,prefix,,ip6_addr,An IP address or a prefix of an IP address.,0,session_mod,0,,,,, +,71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,7,Q_ICMP6_PREFIX_LEN,prefix_len,,uint8,The number of leading bits in the Prefix that are valid.,0,session_mod,0,,,,, +,73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,1,Q_IDENT_SERVER_PORT,server_port,,uint32,TCP server's port,0,session_fix,0,,,,, +,73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,2,Q_IDENT_CLIENT_PORT,client_port,,uint32,TCP client's port,0,session_fix,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,1,Q_IGMP_TYPE,type,,string_index,Message type.,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,2,Q_IGMP_ADDRESS,address,,ip_addr,Multicast address.,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,3,Q_IGMP_CHANNEL,channel,,string_index,Flow name (relative to multicast address).,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,4,Q_IGMP_RECORD,record,,parent,A parent attribute,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,5,Q_IGMP_RECORD_TYPE,record_type,,string_index,"the record type. the Change to include mode"" value corresponds to a LEAVE and ""Change to exclude mode"" corresponds to a JOIN""",0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,6,Q_IGMP_RECORD_NSOURCES,record_nsources,,uint16,Number of the sources in this record,0,session_mod,0,,,,, +,74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,7,Q_IGMP_RECORD_MADDRESS,record_maddress,,ip_addr,The multicast address in this record,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,1,Q_IMAP_MSGLIST_ATTACH,msglist_attach,,parent,Parent entry for attached file in a list of emails.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,2,Q_IMAP_MSGLIST_MIME_TYPE,msglist_mime_type,,string,Content type of the email.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,3,Q_IMAP_MSGLIST_ATTACH_MIME_TYPE,msglist_attach_mime_type,,string,Content type of the attachment (in a list).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,4,Q_IMAP_MSGLIST_ATTACH_FILENAME,msglist_attach_filename,,string,Name of file attached to message (in a list).,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of attached file.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established.,0,session_fix,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,518,Q_MPA_ATTACH_MIME_TYPE,attach_mime_type,,string,Content type of the attachment.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,806,Q_MPA_FILE_TYPE,file_type,,buffer,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,805,Q_MPA_HEADER_RAW,header_raw,,string,One IMAP header line (field and value).,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0,,,,, +,75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,3,Q_IMP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0,,,,, +,77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,2,Q_IMP_VERSION,version,,string,IMP version deployed.,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,1,Q_IP_SRC_ADDR,src_addr,,ip_addr,Source IP address.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,2,Q_IP_DST_ADDR,dst_addr,,ip_addr,Destination IP address.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,3,Q_IP_PROTOCOL,protocol,,string_index,Contains the name the upper layer protocol.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,4,Q_IP_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,5,Q_IP_TOS,tos,,uint8,Type of service of the packet.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,6,Q_IP_DSCP,dscp,,uint8,Differentiated Services Field Codepoints.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,7,Q_IP_SRC_NET,src_net,,ip_addr,"Source network address, given a specific mask.",0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,8,Q_IP_DST_NET,dst_net,,ip_addr,"Destination network address, given a specific mask.",0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,9,Q_IP_SRC_CLASS,src_class,,char,Class of the source IP address.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,10,Q_IP_DST_CLASS,dst_class,,char,Class of the destination IP address.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,11,Q_IP_DEFRAG_LEN,defrag_len,,uint16,Total length of the data contained in a defragmented packet without its IP header.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,12,Q_IP_TTL,ttl,,uint8,Remaining number of router(s) this packet can pass through before being dropped.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,13,Q_IP_CLIENT_NET,client_net,,ip_addr,"Client subnet address, given a specific mask.",0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,14,Q_IP_SERVER_NET,server_net,,ip_addr,"Server subnet address, given a specific mask.",0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,15,Q_IP_CLIENT_ADDR,client_addr,,ip_addr,Client IP address.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,16,Q_IP_SERVER_ADDR,server_addr,,ip_addr,Server IP address.,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,17,Q_IP_FRAG_ID,frag_id,,uint16,Fragment identifier.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,18,Q_IP_SRC_ADDR32,src_addr32,,uint32,IP source address (32 bits).,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,19,Q_IP_DST_ADDR32,dst_addr32,,uint32,Destination IP address (32 bits).,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,20,Q_IP_SERVER_ADDR32,server_addr32,,uint32,Server IP address (32 bits).,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,21,Q_IP_CLIENT_ADDR32,client_addr32,,uint32,Client IP address (32 bits).,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,22,Q_IP_PKT_LEN,pkt_len,,uint16,"Total packet length, IP header included.",0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,23,Q_IP_ADDRESS,address,,uint8,Attribute matching a source or destination IP address. To be used in a filter.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,42,Q_IP_RESOLV_NAME,resolv_name,,uint8,Private attribute of the classification engine.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,24,Q_IP_NETADDR,netaddr,,uint8,Attribute matching a source or destination IP subnet. Can be used in a filter.,0,pkt,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,25,Q_IP_SRC_ADDR_MD5,src_addr_md5,,binary,A MD5 sum on IP Source address,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,26,Q_IP_DST_ADDR_MD5,dst_addr_md5,,binary,A MD5 sum on IP destination address,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,27,Q_IP_SRC_DST_ADDR,src_dst_addr,,binary,A binary buffer containing a concatenation of IP source address and destination address,0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,28,Q_IP_SRC_DST_SPORT_PROTO,src_dst_sport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address and the protocol",0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,29,Q_IP_SRC_DST_DPORT_PROTO,src_dst_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the destination port and the protocol",0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,30,Q_IP_SRC_DST_SPORT_DPORT_PROTO,src_dst_sport_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the source port, the destination port and the protocol",0,session_fix,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,33,Q_IP_FIRST_FRAGMENT,first_fragment,,uint8,A flag which is set when the current packet is fragmented and it is a first fragment,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,34,Q_IP_FRAGMENT_LOST,fragment_lost,,uint8,A flag indicating the lost of the previous fragment.,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,35,Q_IP_FRAGMENT_LOST_SIZE,fragment_lost_size,,uint32,Length of the last lost fragment.,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,36,Q_IP_FRAGMENT_BUFFERED_COUNT,fragment_buffered_count,,uint32,Number of segments that have been buffered for defragmentation,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,37,Q_IP_FRAGMENT_BUFFERED_SIZE,fragment_buffered_size,,uint32,Sizes sum of segments that have been buffered for defragmentation,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,38,Q_IP_TTL_TOO_LOW,ttl_too_low,,uint8,A flag set when the packet ttl field is too low,0,session_mod,0,,,,, +,81,Q_PROTO_IP,Network Service,ip,Internet Protocol,39,Q_IP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,608,Q_MPA_VERSION,version,,uint8,Version of the protocol.,0,pkt,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,1,Q_IP6_CLASS,class,,uint8,Internet traffic priority delivery value.,0,pkt,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,2,Q_IP6_LABEL,label,,uint32,Used for specifying special router handling from source to destination(s) for a sequence of packets.,0,pkt,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,3,Q_IP6_PAYLOAD,payload,,uint16,The payload length.,0,pkt,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,4,Q_IP6_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session_fix,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,5,Q_IP6_HOP_LIMIT,hop_limit,,uint8,Remaining number of router(s) this packet can pass through before being dropped.,0,pkt,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,6,Q_IP6_SRC_ADDR,src_addr,,ip6_addr,Source IP address.,0,session_fix,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,7,Q_IP6_DST_ADDR,dst_addr,,ip6_addr,Destination IP address.,0,session_fix,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,9,Q_IP6_CLIENT_ADDR,client_addr,,ip6_addr,Client IP address.,0,session_fix,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,8,Q_IP6_SERVER_ADDR,server_addr,,ip6_addr,Server IP address.,0,session_fix,0,,,,, +,82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,11,Q_IP6_ADDRESS,address,,ip6_addr,This attribute is not extracted.,0,session_fix,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,1,Q_IPCP_CODE,code,,uint8,Packet type.,0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,2,Q_IPCP_IDENTIFIER,identifier,,uint8,Decimal value allowing to match requests and replies.,0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,3,Q_IPCP_IP_ADDR,ip_addr,,ip_addr,IP address attributed.,0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,4,Q_IPCP_MOBILE_IP_ADDR,mobile_ip_addr,,ip_addr,"Mobile IP"" address attributed.""",0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,5,Q_IPCP_DNS_IP_ADDR,dns_ip_addr,,ip_addr,IP address of the primary DNS server.,0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,6,Q_IPCP_WIN_IP_ADDR,win_ip_addr,,ip_addr,IP address of the primary WINS server.,0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,7,Q_IPCP_SECOND_DNS_IP_ADDR,second_dns_ip_addr,,ip_addr,IP Address of the secondary DNS server.,0,pkt,0,,,,, +,83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,8,Q_IPCP_SECOND_WIN_IP_ADDR,second_win_ip_addr,,ip_addr,IP address of the secondary WINS server.,0,pkt,0,,,,, +,84,Q_PROTO_IPP,Printer,ipp,Internet Printing Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0,,,,, +,85,Q_PROTO_IPSEC,Encrypted,ipsec,IPsec Encapsulating Security Payload,1,Q_IPSEC_PROTOCOL,protocol,,string_index,Protocol used for encryption (AH or ESP).,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,1,Q_IPX_CHECKSUM,checksum,,uint16,Value of the transmission control checksum.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,2,Q_IPX_PKT_SIZE,pkt_size,,uint16,Datagram's length.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,3,Q_IPX_TCTRL,tctrl,,uint8,Indicates the number of routers through which the packet has passed.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,4,Q_IPX_TYPE,type,,uint8,Identifier of the upper layer protocol.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,5,Q_IPX_DST_NET,dst_net,,uint32,Destination network address.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,6,Q_IPX_SRC_NET,src_net,,uint32,Source network address.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,7,Q_IPX_DST_SOCKET,dst_socket,,uint16,Destination application identifier.,0,pkt,0,,,,, +,87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,8,Q_IPX_SRC_SOCKET,src_socket,,uint16,Source application identifier.,0,pkt,0,,,,, +,89,Q_PROTO_IPXSAP,Network Service,ipxsap,IPX Service Advertisement Protocol,1,Q_IPXSAP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0,,,,, +,89,Q_PROTO_IPXSAP,Network Service,ipxsap,IPX Service Advertisement Protocol,2,Q_IPXSAP_SERVER,server,,string_index,Server type.,0,pkt,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,1,Q_IRC_NICKNAME,nickname,,string,User's alias.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,2,Q_IRC_SERVER,server,,string,Server name to which the user is connected.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session_prt,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_prt,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_prt,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,3,Q_IRC_MODE,mode,,parent,Data structure containing irc channel mode information.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,4,Q_IRC_MODE_CHANNEL,mode_channel,,string,Name of the irc channel.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,5,Q_IRC_MODE_STATUS,mode_status,,string,Status of the irc channel.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,6,Q_IRC_FILE_IDENTIFIER,file_identifier,,string,File correlation key.,0,session_prt,0,,,,, +,1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,1,Q_ISAKMP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session_fix,0,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,2,Q_ISAKMP_HASH_ALGORITHM,hash_algorithm,,string_index,Algorithm used for the hash.,0,session_fix,0,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,3,Q_ISAKMP_ENCRYPTION_ALGORITHM,encryption_algorithm,,string_index,algorithm used for the encryption.,0,session_fix,0,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,4,Q_ISAKMP_AUTHENTIFICATION_METHOD,authentification_method,,string_index,Method used for authentication.,0,session_fix,0,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,5,Q_ISAKMP_LIFE_DURATION,life_duration,,uint32,Life time of connection parameters.,0,session_fix,0,,,,, +,92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,6,Q_ISAKMP_TIME_UNIT,time_unit,,string_index,Temporal unit of the attribute life_duration.,0,session_fix,0,,,,, +,93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,1,Q_ISL_DST_ADDR,dst_addr,,mac_addr,Destination MAC Address.,0,pkt,0,,,,, +,93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,2,Q_ISL_SRC_ADDR,src_addr,,mac_addr,Source MAC Address.,0,pkt,0,,,,, +,93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,3,Q_ISL_TYPE,type,,string,Type of the encapsulated frame.,0,pkt,0,,,,, +,93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,4,Q_ISL_USER,user,,string_index,Priority field.,0,pkt,0,,,,, +,93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,5,Q_ISL_VLAN,vlan,,uint16,VLAN ID of the frame.,0,pkt,0,,,,, +,93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,6,Q_ISL_INDEX,index,,uint16,Port index of the switch on which the packet has been sent.,0,pkt,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each ISUP message,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,18,Q_ISUP_MESSAGE_TS,message_ts,,timeval,Timestamp of ISUP message,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,553,Q_MPA_MESSAGE_ID,message_id,x,uint8,Id of the ISUP message. This attribute is deprecated.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,12,Q_ISUP_MESSAGE_NAME,message_name,x,string,Abbreviated name of ISUP message. This attribute is deprecated.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,19,Q_ISUP_MESSAGE_WAY,message_way,,string,Way of message,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,1,Q_ISUP_CALLER_NAT,caller_nat,,uint8,Calling party nature,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,524,Q_MPA_CALLER,caller,,string,Calling party number,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,2,Q_ISUP_CALLEE_NAT,callee_nat,,uint8,Called party nature,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,523,Q_MPA_CALLEE,callee,,string,Called party number,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,20,Q_ISUP_TMR,tmr,,string_index,Transmission medium requirement,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,4,Q_ISUP_CIC,cic,,uint16,Circuit Identification Code,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,17,Q_ISUP_CAUSE,cause,,uint8,ISUP Cause of release,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,5,Q_ISUP_ORIG_POINT_CODE,orig_point_code,,uint32,Originating Point Code,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,6,Q_ISUP_DEST_POINT_CODE,dest_point_code,,uint32,Destination Point Code,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,7,Q_ISUP_START_TIME,start_time,,timeval,Start date of the call,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,8,Q_ISUP_SESSION_DURATION,session_duration,,timeval,Call session duration (elapsed time between the sending of SETUP command and the end of the communication),0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,10,Q_ISUP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,9,Q_ISUP_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,11,Q_ISUP_CALL_ID,call_id,,uint64,Internal unique call identifier,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,13,Q_ISUP_IE_NODE,ie_node,x,parent,A parent for each ISUP information element (parameter). This attribute is deprecated.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,16,Q_ISUP_IE_RAW,ie_raw,x,buffer,Raw value of the i.e.. This attribute is deprecated.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,14,Q_ISUP_IE_ID,ie_id,x,uint8,i.e. type. This attribute is deprecated.,0,session_mod,0,,,,, +,344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,15,Q_ISUP_IE_LEN,ie_len,x,uint8,i.e. length. This attribute is deprecated.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),1,Q_JABBER_NICKNAME,nickname,,string,contains the used username.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),608,Q_MPA_VERSION,version,,string,JABBER software version.,0,session_fix,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_fix,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),3,Q_JABBER_OS,os,,string,Client operating system.,0,session_fix,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,1,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),740,Q_MPA_FILE_SID,file_sid,,string,Transferred file identifier.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),710,Q_MPA_END_STATUS,end_status,,string,Session end reason.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port on which the caller could start the call.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port on which the callee could receive a call.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session_prt,0,,,,, +,94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),4,Q_JABBER_FILE_CHUNK_SID,file_chunk_sid,,string,Transferred file identifier.,0,session_prt,0,,,,, +,260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,1,Q_JAVA_UPDATE_TYPE,type,,string,Version type of updated Java.,0,session_mod,0,,,,, +,561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session_mod,0,,,,, +,1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,618,Q_MPA_FILE_CHUNK,file_chunk,,buffer,A piece of a transferred file.,0,session_mod,0,,,,, +,1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,556,Q_MPA_MIME_TYPE,mime_type,,string,Mime type of the file beeing transferred.,0,session_mod,0,,,,, +,1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,643,Q_MPA_REQUEST,request,,parent,File transfer parent attribute.,0,session_mod,0,,,,, +,1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,550,Q_MPA_LOGIN,login,,uint64,User's login string.,0,session_mod,0,,,,, +,1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,1,Q_KASKUS_TITLE,title,,string,Title of the current page.,0,session_mod,0,,,,, +,96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),1,Q_KAZAA_MIME_TYPE,mime_type,,string,Type of the downloaded file.,0,session_mod,0,,,,, +,96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,7,Q_KRB5_MESSAGE,message,,parent,Parent attribute containing the metadata related to a Kerberos message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,1,Q_KRB5_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,2,Q_KRB5_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,3,Q_KRB5_SERVER,server,,string,Name of the server requiring Kerberos authentication.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,4,Q_KRB5_ENC_DATA,enc_data,,binary,Encrypted data (hash) sent in the AS-RQ message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,5,Q_KRB5_ENC_DATA_TYPE,enc_data_type,,uint32,Indicate type of Encrypted data (hash) sent in the AS-RQ message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,8,Q_KRB5_PA_DATA,pa_data,,parent,"Parent attribute, containing PA-DATA type and value.",0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,9,Q_KRB5_PA_DATA_TYPE,pa_data_type,,uint32,PA-DATA type.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,10,Q_KRB5_PA_DATA_VALUE,pa_data_value,,binary,PA-DATA value.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,11,Q_KRB5_TICKET,ticket,,parent,"Parent attribute, containing name-type, name and enc_part of a ticket.",0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,13,Q_KRB5_TICKET_NAME_TYPE,ticket_name_type,,uint32,Ticket name-type.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,12,Q_KRB5_TICKET_NAME,ticket_name,,string,Ticket name component.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,14,Q_KRB5_TICKET_ENC_PART,ticket_enc_part,,buffer,Ticket encrypted part.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,30,Q_KRB5_KDCOPTIONS,kdcoptions,,buffer,KDC options as a bitstring.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,15,Q_KRB5_ERROR_CODE,error_code,,int32,Error code in KRB-ERROR message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,6,Q_KRB5_REALM,realm,,string,Realm in KRB-ERROR message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,16,Q_KRB5_ERR_CREALM,err_crealm,,string,Realm in KRB-ERROR message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,17,Q_KRB5_ERR_CNAME,err_cname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message.",0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,29,Q_KRB5_ERR_REALM,err_realm,,string,Correct realm in KRB-ERROR message.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,18,Q_KRB5_ERR_CNAME_TYPE,err_cname_type,,uint32,KRB-ERROR cname type.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,19,Q_KRB5_ERR_CNAME_NAME,err_cname_name,,string,KRB-ERROR message cname component.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,25,Q_KRB5_ERR_SNAME,err_sname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message server.",0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,26,Q_KRB5_ERR_SNAME_TYPE,err_sname_type,,uint32,KRB-ERROR message server sname type.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,27,Q_KRB5_ERR_SNAME_NAME,err_sname_name,,string,KRB-ERROR message server sname component.,0,session_prt,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,23,Q_KRB5_ERR_TEXT,err_text,,string,KRB-ERROR message error description.,0,session_mod,0,,,,, +,97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,24,Q_KRB5_ERR_DATA,err_data,,binary,Error-related data.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,1,Q_L2TP_TUNNEL_ID,tunnel_id,,uint16,Identifier for the control connection.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,2,Q_L2TP_CALL_ID,call_id,,uint16,Identifier for a session within a tunnel.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,3,Q_L2TP_MESSAGE_TYPE,message_type,,string_index,Message type (L2TPv2 only).,0,pkt,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,4,Q_L2TP_ASS_TUNNEL_ID,ass_tunnel_id,,uint16,Assigned L2TP tunnel ID.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,5,Q_L2TP_HOSTNAME,hostname,,string,Name of the issuing LAC or LNS.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,6,Q_L2TP_VENDOR_NAME,vendor_name,,string,Vendor specific string describing the type of LAC or LNS being used.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,7,Q_L2TP_CHALLENGE,challenge,,binary,CHAP style challenge used by a peer in order to authenticate the tunnel endpoint.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,8,Q_L2TP_RESP_CHALLENGE,resp_challenge,,binary,Challenge response.,0,session_mod,0,,,,, +,98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,9,Q_L2TP_ASS_CALL_ID,ass_call_id,,uint16,Connection ID in the L2TP tunnel.,0,session_mod,0,,,,, +,270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,99,Q_PROTO_LCP,Network Management,lcp,Line Control Protocol,1,Q_LCP_CODE,code,,uint8,Called function.,0,pkt,0,,,,, +,99,Q_PROTO_LCP,Network Management,lcp,Line Control Protocol,2,Q_LCP_IDENTIFIER,identifier,,uint8,Message identifier.,0,pkt,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,552,Q_MPA_MESSAGE,message,,parent,A LDAP message.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,1,Q_LDAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,2,Q_LDAP_MESSAGE_ID,message_id,,uint32,Message identification.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,3,Q_LDAP_PAYLOAD_IS_CRYPTED,payload_is_crypted,,uint32,Indicates whether the LDAP payload is encrypted.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,4,Q_LDAP_SEAL_ALGO,seal_algo,,string,Algorithm used to encrypt the Kerberos content.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,5,Q_LDAP_CONTAINS_SASL,contains_sasl,,uint32,Indicates whether the authentication is done using SASL mechanism.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,6,Q_LDAP_ELEMENT,element,,parent,LDAP element in the LDAP tree.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,7,Q_LDAP_VALUE_STRING,value_string,,string,String value of the LDAP element.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,8,Q_LDAP_VALUE_RAW,value_raw,,buffer,Raw value of the LDAP element.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,9,Q_LDAP_TYPE,type,,string,"Type of the LDAP element, in the LDAP tree.",0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,577,Q_MPA_NAME,name,,string,"Name of the LDAP element, in the LDAP tree (RFC2251).",0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,10,Q_LDAP_NUMBER,number,,uint32,Item number of the LDAP element.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,16,Q_LDAP_LEVEL,level,,uint32,Depth level in ldap tree.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,11,Q_LDAP_HOSTNAME,hostname,,string,Hostname extracted from a logon response to a CLDAP searchRequest.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,12,Q_LDAP_FILTER_EXPRESSION,filter_expression,,parent,Filter sub expression extracted from a CLDAP searchRequest.,0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,13,Q_LDAP_ATTRIBUTE_DESC,attribute_desc,,string,"Filter expression first operand, which is an attribute description.",0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,14,Q_LDAP_ASSERTION_VALUE,assertion_value,,string,"Filter expression second operand, which is an assertion value.",0,session_mod,0,,,,, +,100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,15,Q_LDAP_ASSERTION_VALUE_RAW,assertion_value_raw,,buffer,Raw value of filter expression second operand.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version currently used by the client.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds.",0,session_prt,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"timeval structure indicating, when the service is ended, the length of it in seconds and microseconds.",0,session_prt,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,522,Q_MPA_CALL,call,x,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,660,Q_MPA_CALL_ID,call_id,x,string,"Call id, extracted for each call.",0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,626,Q_MPA_USER_AGENT,user_agent,x,string,Name of the software used.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,705,Q_MPA_CALLER_ADDR,caller_addr,x,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,524,Q_MPA_CALLER,caller,x,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,523,Q_MPA_CALLEE,callee,x,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,2,Q_LINE_CALL_BYTE_COUNT,call_byte_count,,uint32,(Deprecated) The count of bytes that were exchanged during the call.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,1,Q_LINE_CALL_PKT_COUNT,call_pkt_count,,uint32,(Deprecated) The count of data packets that were exchanged during the call.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,709,Q_MPA_START_TIME,start_time,x,string,Start date of the call.,0,session_mod,0,,,,, +,1124,Q_PROTO_LINE,Instant Messaging,line,Line,521,Q_MPA_CALL_DURATION,call_duration,x,uint32,Call duration.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Query domain.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,1,Q_LIVE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,2,Q_LIVE_GROUPS_GROUP_ID,group_id,,string,Unique identifier of the group.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,647,Q_MPA_MEMBER_EMAIL,member_email,x,string,Email address of the member.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0,,,,, +,335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,634,Q_MPA_CONTACT,contact,x,string,Complete contact.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,1,Q_LIVE_HOTMAIL_ATTACH_FILEID,attach_fileid,,string,File identifier used for attachments correlation.,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,1,Q_LIVEMAIL_MOBILE_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,1,Q_LLC_DST_SAP,dst_sap,,uint8,Destination SAP address.,0,pkt,0,,,,, +,104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,2,Q_LLC_SRC_SAP,src_sap,,uint8,Source SAP address.,0,pkt,0,,,,, +,104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,3,Q_LLC_CONTROL,control,,uint8,Control field of the connection.,0,pkt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,1,Q_LOTUSNOTES_ORGANIZATION,organization,,string,Organization.,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,608,Q_MPA_VERSION,version,,string,Client version.,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,4,Q_LOTUSNOTES_MIME_VERSION,mime_version,,string,MIME version.,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,598,Q_MPA_REPLYTO,replyto,x,string,Email address to use in a reply for this message.,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,5,Q_LOTUSNOTES_HEADER,header,,parent,Lotusnotes header (used for the Email service).,0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,6,Q_LOTUSNOTES_HEADER_NAME,header_name,,string,Lotusnotes header name (used for the Email service).,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,7,Q_LOTUSNOTES_HEADER_VALUE,header_value,,string,Lotusnotes header value (used for the Email service).,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,8,Q_LOTUSNOTES_ATTACH_COMPRESS,attach_compress,,string,The compression method used for the attached file download.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,2,Q_LOTUSNOTES_ATTACH_CONTENT_SEQ,attach_content_seq,,uint32,Sequence number of a attach file part.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,3,Q_LOTUSNOTES_ATTACH_CONTENT_SIZE,attach_content_size,,uint32,Size of a attach file part.,0,session_prt,0,,,,, +,107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,1,Q_LPR_SERVER,server,,string,Name of the machine that sent a file to print.,0,session_fix,0,,,,, +,108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,2,Q_LPR_JOB,job,,string,Name of the printed file.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,762,Q_MPA_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,2308,Q_PROTO_MAILRU_AGENT,Instant Messaging,mailru_agent,Mail.ru Agent,6,Q_MAILRU_AGENT_FILE_ID,file_id,,string,Exchanged file identifier,0,session_mod,0,,,,, +,2308,Q_PROTO_MAILRU_AGENT,Instant Messaging,mailru_agent,Mail.ru Agent,5,Q_MAILRU_AGENT_MSG_RECEIVER,msg_receiver,,string,The person who chat or voice is done with,0,session_mod,0,,,,, +,2308,Q_PROTO_MAILRU_AGENT,Instant Messaging,mailru_agent,Mail.ru Agent,4,Q_MAILRU_AGENT_MSG,msg,,string,Exchanged message during a chat,0,session_mod,0,,,,, +,2308,Q_PROTO_MAILRU_AGENT,Instant Messaging,mailru_agent,Mail.ru Agent,3,Q_MAILRU_AGENT_CONFERENCE_ID,conference_id,,string,"Dialog session identifier, constant during a same session",0,session_mod,0,,,,, +,2308,Q_PROTO_MAILRU_AGENT,Instant Messaging,mailru_agent,Mail.ru Agent,2,Q_MAILRU_AGENT_IM_ACTION,im_action,,string,Action of the user.,0,session_mod,0,,,,, +,2308,Q_PROTO_MAILRU_AGENT,Instant Messaging,mailru_agent,Mail.ru Agent,1,Q_MAILRU_AGENT_USER,user,,string,Application user name.,0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0,,,,, +,246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,718,Q_MPA_PACKAGE,package,,parent,Information list about the debian archive,0,session_mod,0,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session_mod,0,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session_mod,0,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session_mod,0,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Version of the currently upgraded-distribution,0,session_mod,0,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_fix,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,1,Q_MAPI_HOST,host,,string,Client's hostname.,0,session_fix,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,2,Q_MAPI_DOMAIN,domain,,string,Network domain of the client.,0,session_fix,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,3,Q_MAPI_AUTH_TYPE,auth_type,,string_index,The type of used authentication.,0,session_fix,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,607,Q_MPA_SUBJECT,subject,,buffer,Message subject (UTF-16).,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,8,Q_MAPI_SENSIVITY,sensivity,,uint32,Message sensibility.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,532,Q_MPA_DATE,date,,uint64,"Message date: number of 100-nanosecond intervals since January 1, 1601.",0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,7,Q_MAPI_SIZE,size,,uint32,Message size.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,6,Q_MAPI_FLAGS,flags,,uint32,Message flags.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,11,Q_MAPI_EMAIL_TYPE,email_type,,string,E-mail type (enumeration).,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,600,Q_MPA_SENDER,sender,,buffer,Contains the identity of the sender of a chat session or a file transfer (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,601,Q_MPA_SENDER_ALIAS,sender_alias,,buffer,Name of the email sender (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,602,Q_MPA_SENDER_EMAIL,sender_email,,buffer,Email address of the message sender (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,585,Q_MPA_RECEIVER,receiver,,buffer,Contains the identity of the receiver for a chat message or a file transfer (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,buffer,Name of email receiver (included cc and bcc receivers) (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,buffer,Email address of message receiver (included cc and bcc receivers) (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,517,Q_MPA_ATTACH_ID,attach_id,,uint32,Attachment identifier.,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,516,Q_MPA_ATTACH_FILENAME,attach_filename,,buffer,Attachment name (UTF-16).,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session_prt,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,buffer,Full address of email sender (alias and email address) (UTF-16).,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,buffer,Message subject in a message list (UTF-16).,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,565,Q_MPA_MSGLIST_DATE,msglist_date,,uint64,"Message date in a message list: number of 100-nanosecond intervals since January 1, 1601.",0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,uint64,Message identifier.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,575,Q_MPA_MSGLIST_SIZE,msglist_size,,uint32,Message size in a message list.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,4,Q_MAPI_MSGLIST_SENSIVITY,msglist_sensivity,,uint32,Message sensibility in a message list.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,5,Q_MAPI_MSGLIST_FLAGS,msglist_flags,,uint32,Message flags in a message list.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,buffer,Full address of email receiver in a message list.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,9,Q_MAPI_MSGLIST_RECEIVER_TYPE,msglist_receiver_type,,string,Type of the email receiver,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,buffer,Email address of the email receiver.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,10,Q_MAPI_APPOINTMENT_LOCATION,appointment_location,,buffer,Appointment location.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,616,Q_MPA_CONTACT_EMAIL,contact_email,,buffer,Email address of a contact (UTF-16).,0,session_mod,0,,,,, +,110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,615,Q_MPA_CONTACT_ALIAS,contact_alias,,buffer,Alias of a contact (UTF-16).,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,8,Q_MASHARE_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,11,Q_MASHARE_DELETE_URL,delete_url,,string,Link to use in order to delete the file.,0,session_mod,0,,,,, +,587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,10,Q_MASHARE_FILEID,fileid,,string,Unique identifier of the file.,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,25,Q_MGCP_INFO,info,,parent,Data corresponding to a message transfer,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,1,Q_MGCP_ENDPOINT,endpoint,,string,Handset identifier,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,608,Q_MPA_VERSION,version,,string,Protocol version,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,2,Q_MGCP_TID,tid,,uint32,Transaction identifier,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,3,Q_MGCP_CODE,code,,uint32,Return code of a query,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,24,Q_MGCP_STATS,stats,,parent,Regroups RTP statistics,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,4,Q_MGCP_PACKETS_SENT,packets_sent,,uint32,Number of RTP packets sent,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,5,Q_MGCP_OCTETS_SENT,octets_sent,,uint32,Number of RTP octets sent,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,6,Q_MGCP_PACKETS_RECEIVED,packets_received,,uint32,Number of RTP packets received,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,7,Q_MGCP_OCTETS_RECEIVED,octets_received,,uint32,Number of RTP octets received,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,8,Q_MGCP_PACKETS_LOST,packets_lost,,uint32,Number of lost RTP packets,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,9,Q_MGCP_JITTER,jitter,,uint32,Observed Jitter for RTP packets,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,10,Q_MGCP_LATENCY,latency,,uint32,Observed latency for RTP packets,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,12,Q_MGCP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,579,Q_MPA_PHONE_NUMBER,phone_number,,string,The phone number.,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,13,Q_MGCP_EVENT,event,,string,Observed events,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,14,Q_MGCP_MESSAGE_TYPE,message_type,,string,The message type,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,15,Q_MGCP_CALL_WAY,call_way,,string,"The call Way (In, Out)",0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,17,Q_MGCP_MODE,mode,,string,"Contains the connection mode (sendrcv, recvonly, ...)",0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,18,Q_MGCP_NOTIFIEDENTITY,notifiedEntity,,string,Contains the identity of the notified identity,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,20,Q_MGCP_SIGNAL,signal,,string,Contains the received/sent signal,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,21,Q_MGCP_DIGITMAP,digitmap,,string,Contains the digitmap,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,23,Q_MGCP_CONNECTION_ID,connection_id,,string,Connection identifier,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_mod,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_prt,0,,,,, +,113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,115,Q_PROTO_MMS,Audio/Video,mms,Microsoft Multimedia Streaming,541,Q_MPA_FILENAME,filename,,string,Name of the file currently broadcasted.,0,session_fix,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,1,Q_MMSE_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,2,Q_MMSE_MESSAGE_CODE,message_code,,uint8,Message type (in integer).,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,3,Q_MMSE_RECEIVER,receiver,,string,MMS receiver.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,4,Q_MMSE_NB_RECEIVER,nb_receiver,,uint32,Number of receiver for the same MMS.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,5,Q_MMSE_VERSION,version,,string,Protocol version.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,6,Q_MMSE_TID,tid,,string,Transaction identifier.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,7,Q_MMSE_SENDER,sender,,string,MMS sender.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,8,Q_MMSE_SUBJECT,subject,,string,MMS subject.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,9,Q_MMSE_CONTENT_TYPE,content_type,,string,The content type of the message.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,10,Q_MMSE_MESSAGE_CLASS,message_class,,string_index,Specifies the class of message.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,11,Q_MMSE_MESSAGE_ID,message_id,,string,A unique reference assigned to the message. The ID enables a client to match delivery reports with previously sent messages.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,12,Q_MMSE_CONTENT_LOCATION,content_location,,string,Specifies a reference to the stored version of the MM that can be retrieved or can be used to obtain information about the MM using the WSP/HTTP GET or M-Mbox-View-req.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,13,Q_MMSE_DELIVERY_REPORT,delivery_report,,string_index,Specifies whether the user wants a delivery report from each recipient.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,14,Q_MMSE_PRIORITY,priority,,string_index,Priority of the message for the recipient.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,15,Q_MMSE_READ_REPORT,read_report,,string_index,Specifies whether the user wants a read report from each recipient as a new message.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,16,Q_MMSE_REPORT_ALLOWED,report_allowed,,string_index,Sending of delivery report allowed to the user or not.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,17,Q_MMSE_RESPONSE_STATUS_CODE,response_status_code,,uint32,"It is used by the originating MMS Proxy-Relay to inform the MMS Client, which has performed a submission or a forward the result of that particular operation.",0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,18,Q_MMSE_RESPONSE_STATUS_TEXT,response_status_text,,string,Description which qualifies the response_status_code. The description may be based on the on the status code names contained in RFC1893.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,19,Q_MMSE_MESSAGE_SZ,message_sz,,uint32,Full size of message in octets.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,20,Q_MMSE_STATUS,status,,string_index,It is used to inform the originating MMS Client of the status of an MM that a delivery report was requested for.,0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,21,Q_MMSE_RETRIEVE_STATUS,retrieve_status,,string_index,"It is used by the recipient MMS Proxy-Relay to inform the recipient MMS Client about errors, if any that occurred during the preceding retrieval operation.",0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,22,Q_MMSE_READ_STATUS,read_status,,string_index,"Conveys information from the recipient MMS Client to the originating MMS Client whether an MM, for which a read report was requested, was read or not.",0,session_mod,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,530,Q_MPA_CONTENT,content,,buffer,The message content (headers are not included).,0,session_mod,1,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,23,Q_MMSE_CONTENT_PART,content_part,,parent,Message sub-part.,0,session_fix,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,24,Q_MMSE_CONTENT_PART_TYPE,content_part_type,,string,Message sub-part type.,0,session_prt,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,25,Q_MMSE_CONTENT_PART_ID,content_part_id,,string,Message sub-part ID.,0,session_prt,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,26,Q_MMSE_CONTENT_PART_FILENAME,content_part_filename,,string,Name of the file containing the current message sub-part data.,0,session_prt,0,,,,, +,116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,27,Q_MMSE_CONTENT_PART_DATA,content_part_data,,buffer,Message sub-part data.,0,session_prt,0,,,,, +,251,Q_PROTO_MPEGTS,Audio/Video,mpegts,MPEG-Transport Stream,1,Q_MPEGTS_CHUNK_LEN,chunk_len,,uint32,Data length.,0,session_fix,0,,,,, +,119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,1,Q_MPLS_LABEL,label,,uint32,Label allowing the routing process of the packet through the various LSPs (Label-Switched Paths) crossed along the delivery path.,0,pkt,0,,,,, +,119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,2,Q_MPLS_EXP,exp,,uint8,Packet queuing priority (QoS).,0,pkt,0,,,,, +,119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,3,Q_MPLS_BOS,bos,,uint8,"Bottom Of Stack: equals to 1 if the last level of MPLS is reached, and 0 if another level of MPLS exists.",0,pkt,0,,,,, +,119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,4,Q_MPLS_TTL,ttl,,uint8,Lifetime of the MPLS message.,0,pkt,0,,,,, +,1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_fix,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_fix,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,15,Q_MSN_REQUEST,request,,parent,Parent attribute including a MSN method and its service.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,555,Q_MPA_METHOD,method,,string,Contains the MSN command.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,14,Q_MSN_FILE_IDENTIFIER,file_identifier,,uint32,File identifier.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,758,Q_MPA_FILENAME_UTF16,filename_utf16,,buffer,UTF-16 encoded filename.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,637,Q_MPA_IP_LOCAL,ip_local,,string,Local IP address.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,1,Q_MSN_PROFILE,profile,,string,Information about the user.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,2,Q_MSN_GROUP,group,,string,Information about group.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,3,Q_MSN_CONTACT,contact,,string,Information about a member of the contact list.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,4,Q_MSN_CLIENT_NICKNAME,client_nickname,,string,Nickname used by the user.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,5,Q_MSN_CONTACT_NICKNAME,contact_nickname,,string,Nickname used by a member of the contact list.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,6,Q_MSN_CONTACT_ID,contact_id,,string,Identification number of member changing status.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,7,Q_MSN_UID,uid,,string,The client ID number is the sum of several values specifying client's options.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,8,Q_MSN_ONLINE_PRINCIPAL,online_principal,,string,Message signaling change of status of member of contact list.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,648,Q_MPA_FILE_CHUNK_TYPE,file_chunk_type,,string,Transfer type.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,17,Q_MSN_FILE_CHUNK_IDENTIFIER,file_chunk_identifier,,uint32,File identifier related to the current chunk.,0,session_prt,0,,,,, +,120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol versions used.,0,session_fix,0,,,,, +,121,Q_PROTO_MSN_GROUPS,Forum,msn_groups,MSN groups,1,Q_MSN_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_fix,0,,,,, +,122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0,,,,, +,122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,1,Q_MSN_VIDEO_RECIPIENTID,recipientid,,uint32,Identification number of recipient.,0,session_fix,0,,,,, +,123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,2,Q_MSN_VIDEO_SESSIONID,sessionid,,uint32,Identification number of session.,0,session_fix,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,8,Q_MSRP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,7,Q_MSRP_AUTHORITY,authority,,string,Authority part of an MSRP uri,0,session_mod,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,6,Q_MSRP_URI,uri,,string,MSRP uri,0,session_mod,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,5,Q_MSRP_URI_ENTRY,uri_entry,,parent,Parent attribute raised for each MSRP uri.,0,session_mod,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,4,Q_MSRP_PATH_TYPE,path_type,,string,path_entry attribute type.,0,session_mod,0,,,,, +,919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,3,Q_MSRP_PATH_ENTRY,path_entry,,parent,Parent attribute raised in order to describe a From_path or To_path field.,0,session_mod,0,,,,, +,124,Q_PROTO_MUTE,Peer to Peer,mute,Mute,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,1,Q_MYSQL_BASE,base,,string,Database name.,0,session_fix,0,,,,, +,126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,581,Q_MPA_QUERY,query,,string,SQL query.,0,session_mod,0,,,,, +,128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,1,Q_NBNS_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,581,Q_MPA_QUERY,query,,string,Query sent.,0,session_mod,0,,,,, +,128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,Query type.,0,session_mod,0,,,,, +,129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,524,Q_MPA_CALLER,caller,,string,Name of the caller.,0,session_mod,0,,,,, +,129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,523,Q_MPA_CALLEE,callee,,string,Name of the called member.,0,session_mod,0,,,,, +,129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,1,Q_NETBIOS_MESSAGE_TYPE,message_type,,string_index,Connection type.,0,session_mod,0,,,,, +,129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,2,Q_NETBIOS_COMMAND,command,,string_index,Message command value.,0,session_mod,0,,,,, +,569,Q_PROTO_NETBSD_UPDATE,Web,netbsd_update,NetBSD Updates,1,Q_NETBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,6,Q_NETFLIX_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,2,Q_NETFLIX_VIDEOID,videoid,,string,Netflix video identifier.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,4,Q_NETFLIX_TITLE,title,,string,Title of the movie.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,5,Q_NETFLIX_DESCRIPTION,description,,string,Synopsis of the movie.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,3,Q_NETFLIX_DATE,date,,string,Release date of the movie.,0,session_mod,0,,,,, +,734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,1,Q_NETFLIX_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0,,,,, +,130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow,608,Q_MPA_VERSION,version,,uint16,Protocol version.,0,session_fix,0,,,,, +,130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow,1,Q_NETFLOW_COUNT,count,,uint16,Number of items in the packet.,0,pkt,0,,,,, +,322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0,,,,, +,322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_fix,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,11,Q_NFS_COMMAND,command,,parent,"Parent entry, for NFS command fields.",0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,12,Q_NFS_FILE,file,,parent,"Parent entry, for file-related fields. Multiple file entries can occur for specific commands, in particular: READDIR, READDIRPLUS - first entry is read directory, others are listed files; LINK - first entry is target, second entry is link; LOOKUP - first entry is found object, second entry is its parent directory.",0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,608,Q_MPA_VERSION,version,,string,Used version,0,session_fix,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,2,Q_NFS_STATUS,status,,string_index,Response status for a request,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,1,Q_NFS_PROCEDURE,procedure,,string_index,Procedure or command sent,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,541,Q_MPA_FILENAME,filename,,string,"Accessed, written or read file name.",0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,3,Q_NFS_FILE_HANDLE,file_handle,,binary,Unique identifier for a file.,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,5,Q_NFS_OFFSET,offset,,uint64,Offset of the written/read file. Extracted on READ and WRITE procedure replies.,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,4,Q_NFS_FILESIZE,filesize,,uint64,Size of the file.,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,6,Q_NFS_UID,uid,,uint32,Generic user ID.,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,7,Q_NFS_GID,gid,,uint32,Identifier of the file owner's group (see page 21 of RFC 1813).,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,10,Q_NFS_MODE,mode,,uint32,Protection mode bits (see page 22 of RFC 1813).,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,9,Q_NFS_TYPE_STRING,type_string,,string,File type (see page 19 of RFC 1813).,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,8,Q_NFS_TYPE,type,,string_index,File type (see page 19 of RFC 1813).,0,session_mod,0,,,,, +,131,Q_PROTO_NFS,File Server,nfs,Network File System,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),583,Q_MPA_QUERY_TEXT,query_text,,string,Decoded query text.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),582,Q_MPA_QUERY_RAW,query_raw,,string,Query in raw HTML,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),581,Q_MPA_QUERY,query,,parent,Parent attribute gathering the attributes relative to a query.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),2,Q_NICONICO_DOUGA_VIDEOID,videoid,,string,Nico nico video identifier.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),3,Q_NICONICO_DOUGA_TAG,tag,,string,Video tag.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),4,Q_NICONICO_DOUGA_TITLE,title,,string,Title of the video.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),5,Q_NICONICO_DOUGA_DESCRIPTION,description,,string,Synopsis of the video.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),532,Q_MPA_DATE,date,,string,Release date of the video.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),1,Q_NICONICO_DOUGA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),704,Q_MPA_NICKNAME,nickname,,string,User nickname.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,1,Q_NNTP_NEWSGROUP,newsgroup,,string,Newsgroup name.,0,session_mod,0,,,,, +,134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,2,Q_NNTP_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,805,Q_MPA_HEADER_RAW,header_raw,,string,One NNTP header line (field and value).,0,session_mod,0,,,,, +,137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,session_fix,0,,,,, +,137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,2,Q_NTP_SOURCE,source,,string_index,Reference of the primary source.,0,session_mod,0,,,,, +,137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,3,Q_NTP_REFERENCE_CLOCK,reference_clock,,ip_addr,Reference clock IP address.,0,session_mod,0,,,,, +,137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,4,Q_NTP_POLL_INTERVAL,poll_interval,,uint16,Polling interval (in seconds).,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,1,Q_ODNOKLASSNIKI_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,553,Q_PROTO_OOVOO,Instant Messaging,oovoo,Oovoo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,570,Q_PROTO_OPENBSD_UPDATE,Web,openbsd_update,OpenBSD Updates,1,Q_OPENBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0,,,,, +,336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,1,Q_OPENVPN_OPCODE,opcode,,uint8,Operation code or message type,0,session_mod,0,,,,, +,336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,2,Q_OPENVPN_SEQ,seq,,uint32,Sequence number,0,session_mod,0,,,,, +,578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version of Opera which will be installed.,0,session_fix,0,,,,, +,578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Opera version currently installed.,0,session_fix,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,1,Q_OSPF_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,2,Q_OSPF_ROUTER_ID,router_id,,ip_addr,Router Id.,0,pkt,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,3,Q_OSPF_AREA_ID,area_id,,ip_addr,The Area ID of the area to which the attached network belongs.,0,pkt,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,4,Q_OSPF_AUTH_TYPE,auth_type,,string_index,Type of authentication used.,0,pkt,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,38,Q_OSPF_AUTH_DATA,auth_data,,binary,Authentication data.,0,pkt,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,5,Q_OSPF_HELLO_INTERVAL,hello_interval,,uint16,The number of seconds between this router's Hello packets.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,6,Q_OSPF_NETMASK,netmask,,ip_addr,The network mask associated with this interface.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,7,Q_OSPF_PRIO,prio,,uint8,This router's Router Priority. Used in (Backup) Designated Router election.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,8,Q_OSPF_DEAD_INTERVAL,dead_interval,,uint32,The number of seconds before declaring a silent router down.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,9,Q_OSPF_DESIGNED_ROUTER,designed_router,,ip_addr,"The identity of the Designated Router for this network, in the view of the sending router>.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,10,Q_OSPF_BACKUP_ROUTER,backup_router,,ip_addr,"The identity of the Backup Designated Router for this network, in the view of the sending router.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,11,Q_OSPF_NEIGHBOR,neighbor,,ip_addr,The Router IDs of each router from whom valid Hello packets have been seen recently on the network.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,12,Q_OSPF_LS_ENTRY,ls_entry,,parent,A parent entry for ls attributes.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,13,Q_OSPF_LS_AGE,ls_age,,uint16,The time in seconds since the LSA was originated.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,14,Q_OSPF_LS_TYPE,ls_type,,uint32,The type of the LSA.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,15,Q_OSPF_LS_ID,ls_id,,ip_addr,This field identifies the portion of the internet environment that is being described by the LSA.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,16,Q_OSPF_LS_ADV_ROUTER,ls_adv_router,,ip_addr,The Router ID of the router that originated the LSA.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,17,Q_OSPF_LS_SEQ_NUMBER,ls_seq_number,,uint32,Detects old or duplicate LSAs.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,18,Q_OSPF_LS_NETMASK,ls_netmask,,ip_addr,The IP address mask for the network.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,19,Q_OSPF_LS_METRIC,ls_metric,,uint32,The cost of this route.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,20,Q_OSPF_LS_ATTACH_ROUTER,ls_attach_router,,ip_addr,The Router IDs of each of the routers attached to the network.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,21,Q_OSPF_LS_FLAGS_V,ls_flags_v,,uint8,"When set, the router is an endpoint of one or more fully adjacent virtual links having the described area as Transit area.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,22,Q_OSPF_LS_FLAGS_E,ls_flags_e,,uint8,"When set, the router is an AS boundary router.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,23,Q_OSPF_LS_FLAGS_B,ls_flags_b,,uint8,"When set, the router is an area border router.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,24,Q_OSPF_LS_OPTIONS,ls_options,,uint8,Content of the options field present in the LS description.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,25,Q_OSPF_LINK_ENTRY,link_entry,,parent,Parent entry for link attributes.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,26,Q_OSPF_LINK_ID,link_id,,ip_addr,Identifies the object that this router link connects to.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,27,Q_OSPF_LINK_DATA,link_data,,ip_addr,"For connections to stub networks, Link Data specifies the network's IP address mask. For unnumbered point-to-point connections, it specifies the interface's MIB-II [Ref8] ifIndex value. For the other link types it specifies the router interface's IP address.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,28,Q_OSPF_LINK_TYPE,link_type,,uint8,A quick description of the router link.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,29,Q_OSPF_INTERFACE_MTU,interface_mtu,,uint16,The MTU for this interface.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,30,Q_OSPF_OPTIONS,options,,uint8,The optional capabilities supported by the router.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,31,Q_OSPF_FLAGS_I,flags_i,,uint8,"The Init bit. When set to 1, this packet is the first in the sequence of Database Description Packets.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,32,Q_OSPF_FLAGS_M,flags_m,,uint8,"The More bit. When set to 1, it indicates that more Database Description Packets are to follow.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,33,Q_OSPF_FLAGS_MS,flags_ms,,uint8,"The Master/Slave bit. When set to 1, it indicates that the router is the master during the Database Exchange process. Otherwise, the router is the slave.",0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,34,Q_OSPF_DD_SEQ_NBR,dd_seq_nbr,,uint32,Used to sequence the collection of Database Description Packets.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,35,Q_OSPF_EXTERNAL_ENTRY,external_entry,,parent,Parent entry for external_fwd_addr and external_route_tag.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,36,Q_OSPF_EXTERNAL_FWD_ADDR,external_fwd_addr,,ip_addr,Data traffic for the advertised destination will be forwarded to this address.,0,session_mod,0,,,,, +,140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,37,Q_OSPF_EXTERNAL_ROUTE_TAG,external_route_tag,,uint32,A 32-bit field attached to each external route.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,1,Q_PALTALK_UID,uid,,uint32,Generic user ID.,0,session_fix,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,2,Q_PALTALK_USER_EMAIL,user_email,,string,User's email address.,0,session_fix,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,580,Q_MPA_PROTO_VERSION,proto_version,,uint16,Protocol version used,0,session_fix,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,3,Q_PALTALK_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,6,Q_PALTALK_CHANNEL,channel,,string,Chat room name.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,4,Q_PALTALK_SENDER_UID,sender_uid,,uint32,Message sender's unique identifier.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,5,Q_PALTALK_RECEIVER_UID,receiver_uid,,uint32,Message receiver's unique identifier.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,7,Q_PALTALK_CALLER_UID,caller_uid,,uint32,Caller's unique identifier.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,8,Q_PALTALK_CALLEE_UID,callee_uid,,uint32,Callee's unique identifier.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0,,,,, +,142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0,,,,, +,143,Q_PROTO_PALTALK_AUDIO,Audio/Video,paltalk_audio,Paltalk audio chat,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,600,Q_MPA_SENDER,sender,x,string,Contains the identity of the sender of a file transfer.,0,session_fix,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_fix,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,1,Q_PALTALK_TRANSFER_SENDER_UID,sender_uid,,uint32,File sender's UID,0,session_fix,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,2,Q_PALTALK_TRANSFER_RECEIVER_UID,receiver_uid,,uint32,File receiver's UID,0,session_fix,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,599,Q_PROTO_PALTALK_VIDEO,Audio/Video,paltalk_video,Paltalk video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,1,Q_PAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0,,,,, +,1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,1,Q_PERFORCE_PARAMETER,parameter,,parent,Parent attribute containing the metadata related to a perforce parameter.,0,session_mod,0,,,,, +,1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,2,Q_PERFORCE_PARAMETER_NAME,parameter_name,,string,Name of the perforce parameter.,0,session_prt,0,,,,, +,1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,4,Q_PERFORCE_PARAMETER_VALUE,parameter_value,,string,Value of the perforce parameter.,0,session_prt,0,,,,, +,1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,3,Q_PERFORCE_PARAMETER_SIZE,parameter_size,,uint32,Size in bytes of the parameter value.,0,session_prt,0,,,,, +,319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0,,,,, +,319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of the attached file.,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),806,Q_MPA_FILE_TYPE,file_type,,string,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server banner line.,0,session_fix,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_fix,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),805,Q_MPA_HEADER_RAW,header_raw,,string,One POP3 header line (field and value).,0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0,,,,, +,147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,4,Q_POSTGRES_AUTHENTIFICATION_TYPE,authentification_type,,string,Authentication method requested by the server.,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,1,Q_POSTGRES_BASE,base,,string,Database name.,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,2,Q_POSTGRES_SERVER_VERSION,server_version,,string,Server version,0,session_fix,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version used,0,session_fix,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,581,Q_MPA_QUERY,query,,string,Query sent,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,3,Q_POSTGRES_ERROR,error,,string,Error message,0,session_mod,0,,,,, +,150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0,,,,, +,331,Q_PROTO_PPLIVE,Audio/Video,pplive,pplive,555,Q_MPA_METHOD,method,,string,Contains the method used for a PPLive Live Streaming command,0,session_mod,0,,,,, +,151,Q_PROTO_PPP,Tunneling,ppp,Point-to-Point Protocol,1,Q_PPP_PROTOCOL,protocol,,string,Higher level protocol code or name.,0,pkt,0,,,,, +,152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,1,Q_PPPOE_VERSION,version,,uint8,Version of the protocol.,0,pkt,0,,,,, +,152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,2,Q_PPPOE_TYPE,type,,uint8,Type field. Its unique valid value is 1.,0,pkt,0,,,,, +,152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,3,Q_PPPOE_CODE,code,,uint8,Attribute showing the current stage of the session.,0,pkt,0,,,,, +,152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,4,Q_PPPOE_SESSION_ID,session_id,,uint16,Uniquely identifies the current user session.,0,pkt,0,,,,, +,153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0,,,,, +,153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,1,Q_PPTP_CONTROL_TYPE,control_type,,string_index,Message type.,0,session_mod,0,,,,, +,153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,2,Q_PPTP_VENDOR,vendor,,string,"The type of PAC being used, or the type of PNS software being used",0,session_mod,0,,,,, +,153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,3,Q_PPTP_RESULT_CODE,result_code,,string_index,Return message.,0,pkt,0,,,,, +,529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,1,Q_Q931_DISPLAY,display,,string,Display name.,0,session_fix,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,2,Q_Q931_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,3,Q_Q931_SETUP_DELAY,setup_delay,,timeval,Call setup delay,0,session_prt,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,4,Q_Q931_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_fix,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,5,Q_Q931_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session_mod,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,6,Q_Q931_CAUSE,cause,,string_index,Disconnect cause.,0,session_mod,0,,,,, +,154,Q_PROTO_Q931,Audio/Video,q931,Q.931,7,Q_Q931_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session_mod,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,1,Q_QQ_VERSION_CODE,version_code,,string,The protocol version number used by the client.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,2,Q_QQ_MSG_TYPE,msg_type,,uint32,QQ command name.,0,session_mod,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,4,Q_QQ_CALL_DATA,call_data,,buffer,QQ payload containing the data of the call (audio/video),0,session_mod,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,528,Q_MPA_CONTACT_LOGIN,contact_login,x,string,Contact login.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,3,Q_QQ_MSG_CODE,msg_code,x,uint32,(deprecated) QQ command number.,0,session_mod,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,608,Q_MPA_VERSION,version,x,string_index,(deprecated) The protocol version name used by the client.,0,session_fix,0,,,,, +,156,Q_PROTO_QQ,Instant Messaging,qq,QQ,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_fix,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,512,Q_MPA_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session_mod,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,1,Q_QQ_TRANSFER_FILEKEY,filekey,,string,MD5Sum computed on file data (extracted from data flow),0,session_mod,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_fix,0,,,,, +,157,Q_PROTO_QUAKE,Game,quake,Quake,1,Q_QUAKE_SERVER,server,,string,Server name.,0,session_fix,0,,,,, +,749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,3,Q_QVOD_PEER_PORT,peer_port,,uint16,Listening TCP port of the QVOD peer.,0,session_mod,0,,,,, +,749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,2,Q_QVOD_PEER_IP,peer_ip,,ip_addr,IPv4 address of the QVOD peer.,0,session_mod,0,,,,, +,749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,1,Q_QVOD_PEER,peer,,parent,Parent attribute containing metadata related to a QVOD peer.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,15,Q_RADIUS_REQUEST,request,,parent,Contains information in a radius message.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,1,Q_RADIUS_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,2,Q_RADIUS_FRAMED_IP,framed_ip,,ip_addr,IP address.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,47,Q_RADIUS_FRAMED_IP_NETMASK,framed_ip_netmask,,ip_addr,IP netmask.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,3,Q_RADIUS_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,4,Q_RADIUS_STATUS,status,,string_index,Status.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,5,Q_RADIUS_CODE,code,,uint8,Radius message code.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,6,Q_RADIUS_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,7,Q_RADIUS_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,8,Q_RADIUS_NAS_IP,nas_ip,,ip_addr,IP address of the NAS originating the Access-Request,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,9,Q_RADIUS_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,18,Q_RADIUS_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of physical port the network access server (NAS) is using to authenticate the user.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,19,Q_RADIUS_NAS_PORT_ID,nas_port_id,,string,Identifies the NAS.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,10,Q_RADIUS_CALLBACK_NUMBER,callback_number,,string,Contains the dialing string to be used for callback,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,11,Q_RADIUS_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,12,Q_RADIUS_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint32,Indicates how many octets have been sent to the port in the course of delivering this service,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,13,Q_RADIUS_ACCT_INPUT_OCTETS,acct_input_octets,,uint32,Indicates how many octets have been received from the port over the course of this service being provided,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,14,Q_RADIUS_ID,id,,uint8,Indicates the packet identifier. It must be less than 255,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,20,Q_RADIUS_SESSION_TIMEOUT,session_timeout,,uint32,The maximum number of seconds of service to be provided to the user before termination of the session or prompt.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,21,Q_RADIUS_IDLE_TIMEOUT,idle_timeout,,uint32,The maximum number of consecutive seconds of idle connection allowed to the user before termination of the session or prompt.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,16,Q_RADIUS_START_TIME,start_time,,timeval,Indicates the beginning of the user service.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,17,Q_RADIUS_STOP_TIME,stop_time,,timeval,Indicates the end of the user service.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,23,Q_RADIUS_NAS_IPV6,nas_ipv6,,ip6_addr,IPv6 address of the NAS originating the Access-Request.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,26,Q_RADIUS_LOGIN_IPV6_HOST,login_ipv6_host,,ip6_addr,Indicates the system with which to connect the user.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,27,Q_RADIUS_FRAMED_IPV6_ROUTE,framed_ipv6_route,,string,Provides the routing information to be configured for the user on the NAS,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,28,Q_RADIUS_FRAMED_IPV6_POOL,framed_ipv6_pool,,string,Contains the name of an assigned pool that SHOULD be used to assign an IPv6 prefix for the user.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,25,Q_RADIUS_FRAMED_IPV6_PREFIX,framed_ipv6_prefix,,buffer,Provides the ipv6 prefix to be configured for the user.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,46,Q_RADIUS_DELEGATED_IPV6_PREFIX,delegated_ipv6_prefix,,buffer,Provides the ipv6 prefix to be delegated to the user.,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,29,Q_RADIUS_AVP,avp,,parent,An attribute-value pair. One or several avp_ attributes (e.g. avp_str) are created according to the avp_type.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,30,Q_RADIUS_AVP_TYPE,avp_type,,uint8,Attribute type.,0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,31,Q_RADIUS_AVP_TAG,avp_tag,,uint8,The tag value depends on the tunnel used. (CLEP_DATA_UINT8),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,32,Q_RADIUS_AVP_TEXT,avp_text,,buffer,An utf8 character string. (CLEP_DATA_BUFFER),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,33,Q_RADIUS_AVP_STR,avp_str,,buffer,An ascii character string that may contain null bytes. (CLEP_DATA_BUFFER),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,34,Q_RADIUS_AVP_IPV4,avp_ipv4,,ip_addr,An IPv4 address. (CLEP_DATA_IP_ADDR),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,35,Q_RADIUS_AVP_IPV6,avp_ipv6,,ip6_addr,An IPv6 address. (CLEP_DATA_IP6_ADDR),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,36,Q_RADIUS_AVP_INT,avp_int,,uint32,"An 8, 24 or 32 bits integer value. (CLEP_DATA_UINT32)",0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,37,Q_RADIUS_AVP_INT64,avp_int64,,uint64,A 64 bits integer value. (CLEP_DATA_UINT64),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,38,Q_RADIUS_AVP_CHAP_ID,avp_chap_id,,uint8,CHAP identifier. (CLEP_DATA_UINT8),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,39,Q_RADIUS_AVP_VENDOR_ID,avp_vendor_id,,uint32,SMI Network Management Private Enterprise Code. (CLEP_DATA_UINT32),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,40,Q_RADIUS_AVP_INTERFACE_ID,avp_interface_id,,uint64,IPv6 interface identifier. (CLEP_DATA_UINT64),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,41,Q_RADIUS_AVP_PREFIX,avp_prefix,,buffer,Ipv6 prefix is a sequence of 0 to 16 bytes. (CLEP_DATA_BUFFER),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,42,Q_RADIUS_AVP_SALT,avp_salt,,uint16,The salt ensures the uniqueness of the encryption key. (CLEP_DATA_UINT16),0,session_mod,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,45,Q_RADIUS_3GPP_IMSI,3gpp_imsi,,string,IMSI for the user,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,43,Q_RADIUS_3GPP_SGSN_ADDRESS,3gpp_sgsn_address,,ip_addr,IP address of the SGSN,0,session_prt,0,,,,, +,158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,44,Q_RADIUS_3GPP_SGSN_MCC_MNC,3gpp_sgsn_mcc_mnc,,uint32,MCC and MNC of the SGSN,0,session_prt,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,1,Q_RAMBLER_DOMAIN,domain,,string,Domain name used for the login of the user.,0,session_mod,0,,,,, +,318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,1,Q_RAMBLER_WEBMAIL_DOMAIN,domain,,string,Domain name used for the email address of the user.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,643,Q_MPA_REQUEST,request,,parent,Container regrouping information about rapidshare for a certain action.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,550,Q_MPA_LOGIN,login,x,string,User's login string.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,578,Q_MPA_PASSWORD,password,x,string,User's password string.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,1,Q_RAPIDSHARE_METHOD,method,,string,HTTP method used for this action.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,2,Q_RAPIDSHARE_EMAIL_ADDRESS,email_address,,string,User email address.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,3,Q_RAPIDSHARE_CLIENT_ID,client_id,,string,User account number.,0,session_mod,0,,,,, +,313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,4,Q_RAPIDSHARE_DOWNLOAD_URL,download_url,,string,Downloaded file URL.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),608,Q_MPA_VERSION,version,,string,RDP Version used.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),1,Q_RDP_CLIENT_BUILD,client_build,,uint32,RDP client build.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),2,Q_RDP_DESKTOP_WIDTH,desktop_width,,uint32,desktop width.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),3,Q_RDP_DESKTOP_HEIGHT,desktop_height,,uint32,desktop height.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),4,Q_RDP_HOSTNAME_ASCII,hostname_ascii,,string,"Client hostname, in ASCII.",0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),5,Q_RDP_HOSTNAME_RAW,hostname_raw,,binary,"Client hostname, in unicode.",0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),18,Q_RDP_DOMAIN_ASCII,domain_ascii,,string,"Client domain, in ASCII.",0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),19,Q_RDP_DOMAIN_RAW,domain_raw,,binary,"Client domain, in unicode.",0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),20,Q_RDP_USERNAME_ASCII,username_ascii,,string,"Client login, in ASCII.",0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),21,Q_RDP_USERNAME_RAW,username_raw,,binary,"Client login, in unicode.",0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),23,Q_RDP_DEFAULT_USERNAME,default_username,,string,"User's default login, provided at RDP's client runtime.",0,session_fix,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),6,Q_RDP_SECURITY_PROTOCOL,security_protocol,,string_index,Encryption protocol used.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),7,Q_RDP_SUPPORTED_ENCRYPTION_METHOD,supported_encryption_method,,string_index,Encryption method supported by the client.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),8,Q_RDP_ENCRYPTION_METHOD,encryption_method,,string_index,Encryption method used.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),9,Q_RDP_ENCRYPTION_LEVEL,encryption_level,,string_index,Encryption level used.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),22,Q_RDP_ENCRYPTED,encrypted,,uint32,Indicates if the traffic is encrypted with TLS or CresDDP.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),10,Q_RDP_IO_CHANNEL_ID,io_channel_id,,uint32,IO channel ID.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),11,Q_RDP_CHANNEL_ID,channel_id,,uint32,Communication channel ID.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),12,Q_RDP_CHANNEL,channel,,parent,Communication channel.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),13,Q_RDP_CHANNEL_NAME,channel_name,,string,Communication channel name (An 8-byte array containing a unique 7-character ANSI channel name and a null terminator).,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),14,Q_RDP_CHANNEL_FLAG,channel_flag,,string_index,Communication channel option.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),15,Q_RDP_CHANNEL_DISABLED,channel_disabled,,uint32,Tells whether the channel is disabled.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),16,Q_RDP_CHANNEL_ENCRYPT_WAY,channel_encrypt_way,,string,Tells whether the channel is encrypted.,0,session_mod,0,,,,, +,159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),17,Q_RDP_CHANNEL_PRIORITY,channel_priority,,string,Channel priority.,0,session_mod,0,,,,, +,160,Q_PROTO_RDT,Audio/Video,rdt,Real Data Transport,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,713,Q_MPA_KERNEL,kernel,,parent,"Parent attribute of kernel_name, kernel_version and kernel_archi.",0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,714,Q_MPA_KERNEL_NAME,kernel_name,,string,Kernel package or package linked to the kernel.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,715,Q_MPA_KERNEL_VERSION,kernel_version,,string,Version number of the kernel package.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,716,Q_MPA_KERNEL_ARCHI,kernel_archi,,string,Archi of package kernel.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,717,Q_MPA_KERNEL_DISTRIB,kernel_distrib,,string,Distrib linked to this kernel package.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,718,Q_MPA_PACKAGE,package,,parent,"Parent attribute of package_name, package_version and package_archi.",0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Distrib linked to this package.,0,session_mod,0,,,,, +,571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,1,Q_RIP2_MESSAGE_TYPE,message_type,,string_index,Type of the sent message (request or response).,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,2,Q_RIP2_IP_ENTRY,ip_entry,,parent,A parent attribute.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,3,Q_RIP2_ADDR_FAMILY,addr_family,,uint16,The family of the address which is present in the packet.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,4,Q_RIP2_ROUTE_TAG,route_tag,,uint16,"The Route Tag provides a method of separating internal"" RIP routes (routes for networks within the RIP routing domain) from ""external"" RIP routes.""",0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,5,Q_RIP2_IP_ADDR,ip_addr,,ip_addr,IP address of a router.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,6,Q_RIP2_NEXT_HOPE,next_hope,,ip_addr,The immediate next hop IP address to which packets to the destination specified by this route entry should be forwarded.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,7,Q_RIP2_NETMASK,netmask,,ip_addr,The Subnet Mask field contains the subnet mask which is applied to the IP address to yield the non-host portion of the address.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,8,Q_RIP2_METRIC,metric,,uint32,Total distance to a router.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,9,Q_RIP2_AUTH_TYPE,auth_type,,uint16,Type of the used authentication.,0,session_mod,0,,,,, +,163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,10,Q_RIP2_AUTHENTICATION,authentication,,string,Authentication content (password for example).,0,session_mod,0,,,,, +,165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,1,Q_RLOGIN_CLIENT_LOGIN,client_login,,string,Name of the client host.,0,session_fix,0,,,,, +,165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,2,Q_RLOGIN_SERVER_LOGIN,server_login,,string,User login.,0,session_fix,0,,,,, +,165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,5,Q_RLOGIN_SERVER_PASSWORD,server_password,,string,User password.,0,session_fix,0,,,,, +,165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,3,Q_RLOGIN_TERM_TYPE,term_type,,string,Terminal type used to establish the remote session.,0,session_fix,0,,,,, +,165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,4,Q_RLOGIN_SPEED,speed,,uint32,Connection speed.,0,session_fix,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,1,Q_RPC_PROGRAM,program,,uint32,Program Identifier.,0,pkt,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,608,Q_MPA_VERSION,version,,uint32,Version of the RPC protocol.,0,pkt,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,2,Q_RPC_PROGRAM_VERSION,program_version,,uint32,Version of the used program over RPC.,0,pkt,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,3,Q_RPC_PROCEDURE,procedure,,uint32,"Contains the request used by the application program (NFS, YelloPages, ...).",0,pkt,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,4,Q_RPC_STATE,state,,uint32,Status of the command response.,0,pkt,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,5,Q_RPC_XID,xid,,uint32,Identifier of the request or the reply.,0,pkt,0,,,,, +,167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,6,Q_RPC_MESSAGE_TYPE,message_type,,string_index,Message type (Call or Reply).,0,pkt,0,,,,, +,170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,1,Q_RSH_REMOTE_LOGIN,remote_login,x,string,(Deprecated) User login on the remote server.,0,session_fix,0,,,,, +,170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,2,Q_RSH_SERVER,server,,string,Remote server.,0,session_fix,0,,,,, +,173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),1,Q_RSYNC_MODULE,module,,string,Name of the group in which files are gathered.,0,session_mod,0,,,,, +,173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,1,Q_RTCP_CNAME,cname,,string,User name.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,577,Q_MPA_NAME,name,,string,Complete user name.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,2,Q_RTCP_EMAIL,email,,string,User's email address.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,3,Q_RTCP_PHONE,phone,,string,User's phone number.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,4,Q_RTCP_LOC,loc,,string,User's location.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,5,Q_RTCP_TOOL,tool,,string,Client's software.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,6,Q_RTCP_NOTE,note,,string,User's comments.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,7,Q_RTCP_MESSAGE_TYPE,message_type,,string_index,Contains the RTCP message type.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,11,Q_RTCP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,33,Q_RTCP_RECEIVER_REPORT,receiver_report,,parent,Reception report that contains all fields concerning quality and metrics,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,26,Q_RTCP_RR_PKT_SENDER_SSRC,rr_pkt_sender_ssrc,,uint32,The synchronization source identifier for the originator of this Receiver Report packet.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,27,Q_RTCP_RR_RPTBLOCK,rr_rptblock,,parent,Receiver report block that contains all reception related fields,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,8,Q_RTCP_RR_JITTER,rr_jitter,,uint32,Jitter value (in receiver report).,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,9,Q_RTCP_RR_CUMLOST,rr_cumlost,,uint32,Contains the cumulative number of lost packets (in receiver reports).,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,10,Q_RTCP_RR_SSRC_ID,rr_ssrc_id,,uint32,Identity of the source that sent the receiver report.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,28,Q_RTCP_RR_FCNLOST,rr_fcnlost,,uint8,The fraction of RTP data packets from source lost since the previous RR packet,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,29,Q_RTCP_RR_HIGHESTSEQNUM,rr_highestseqnum,,uint32,highest sequence number received in an RTP data packet from source SSRC_n,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,30,Q_RTCP_RR_LSR,rr_lsr,,uint32,The middle 32 bits out of 64 in the NTP timestamp,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,31,Q_RTCP_RR_DLSR,rr_dlsr,,uint32,The delay between receiving the last RR packet from source n and sending reception report block.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,32,Q_RTCP_SENDER_REPORT,sender_report,,parent,The report concerning the sending side,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,12,Q_RTCP_SR_PKT_SENDER_SSRC,sr_pkt_sender_ssrc,,uint32,The synchronization source identifier for the originator of this Sender Report packet.,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,13,Q_RTCP_SR_SENDER_INFO,sr_sender_info,,parent,The record that contains all information about a given sender,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,34,Q_RTCP_SR_NTP_TS_MSW,sr_ntp_ts_msw,,uint32,"NTP timestamp, most significant word",0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,35,Q_RTCP_SR_NTP_TS_LSW,sr_ntp_ts_lsw,,uint32,"NTP timestamp, least significant word",0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,15,Q_RTCP_SR_RTP_TS,sr_rtp_ts,,uint32,RTP timestamp,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,16,Q_RTCP_SR_PKT_COUNT,sr_pkt_count,,uint32,The total number of RTP data packets transmitted by the sender,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,17,Q_RTCP_SR_OCTET_COUNT,sr_octet_count,,uint32,The total number of payload octets transmitted in RTP,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,18,Q_RTCP_SR_RPTBLOCK,sr_rptblock,,parent,The record containing fields about the sending side quality and metrics,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,19,Q_RTCP_SR_SSRC_ID,sr_ssrc_id,,uint32,The SSRC identifier of the source,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,20,Q_RTCP_SR_FCNLOST,sr_fcnlost,,uint8,The fraction of RTP data packets from source lost since the previous SR packet,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,21,Q_RTCP_SR_CUMLOST,sr_cumlost,,uint32,>Contains the cumulative number of lost packets (in sender reports).,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,22,Q_RTCP_SR_HIGHESTSEQNUM,sr_highestseqnum,,uint32,highest sequence number received in an RTP data packet from source SSRC_n,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,23,Q_RTCP_SR_JITTER,sr_jitter,,uint32,Jitter value (in Sender report).,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,24,Q_RTCP_SR_LSR,sr_lsr,,uint32,The middle 32 bits out of 64 in the NTP timestamp,0,session_mod,0,,,,, +,174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,25,Q_RTCP_SR_DLSR,sr_dlsr,,uint32,The delay between receiving the last SR packet from source n and sending reception report block.,0,session_mod,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,7,Q_RTMP_STREAM,stream,,parent,Parent attribute containing the metadata related to a particular audio/video stream.,0,session_mod,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,1,Q_RTMP_PAGE_URL,page_url,,string,URL of the webpage where the audio/video content is streamed.,0,session_prt,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,2,Q_RTMP_STREAM_URL,stream_url,,string,URL of the streamed audio/video.,0,session_prt,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,3,Q_RTMP_APP_NAME,app_name,,string,Name of the application accessing the streamed content.,0,session_prt,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,5,Q_RTMP_START_TIME,start_time,,uint32,The timestamp of the beginning of the streamed audio/video (in ms).,0,session_prt,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,6,Q_RTMP_STOP_TIME,stop_time,,uint32,The timestamp of the end of the streamed audio/video (in ms).,0,session_prt,0,,,,, +,337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,4,Q_RTMP_LIVE_STREAM_INDICATOR,live_stream_indicator,,uint8,Indication reported by the server that the playout is live content,0,session_prt,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,13,Q_RTP_END_SESSION,end_session,,string,The end_session attribute is raised at the end of the RTP session,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,1,Q_RTP_CODEC,codec,,parent,Contains information about the codec used.,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,11,Q_RTP_CODEC_NAME,codec_name,,string,Name of the codec.,0,session_prt,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,14,Q_RTP_CODEC_INDEX,codec_index,,uint8,Number identifying the codec.,0,session_prt,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,2,Q_RTP_LOST,lost,,uint8,Counter of lost packets (use with sum).,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,3,Q_RTP_UNSEQ,unseq,,uint32,Contains the number of miss ordered packets (use sum).,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,4,Q_RTP_MOS,mos,x,uint32,Standard voice quality indicator (Mean Opinion Score). This attribute is deprecated.,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,5,Q_RTP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,6,Q_RTP_TIMESTAMP,timestamp,,uint32,RTP packet timestamp.,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,10,Q_RTP_SNUMBER,snumber,,uint16,Sequence number of RTP packet,0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,12,Q_RTP_PAYLOAD_DATA,payload_data,,buffer,A binary buffer containing the RTP data (without header),1,session_mod,1,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,8,Q_RTP_MOS_SESSION,mos_session,,uint32,"Standard voice quality indicator, multiplied by 1000.",0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,9,Q_RTP_RFACTOR,rfactor,,uint32,"Rfactor value, following the ITU G.107 calculation method, multiplied by 1000.",0,session_mod,0,,,,, +,175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,7,Q_RTP_MOS_SATELLITE,mos_satellite,x,uint32,Standard voice quality indicator for satellite (Mean Opinion Score). This attribute is deprecated.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,21,Q_RTSP_REQUEST,request,,parent,RTSP request.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,1,Q_RTSP_RTP_CLIENT_PORT,rtp_client_port,,uint16,RTP's client port.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,2,Q_RTSP_RTCP_CLIENT_PORT,rtcp_client_port,,uint16,RTCP's client port.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,3,Q_RTSP_RTP_SERVER_PORT,rtp_server_port,,uint16,RTP's server port.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,4,Q_RTSP_RTCP_SERVER_PORT,rtcp_server_port,,uint16,RTCP's server port.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,15,Q_RTSP_RDT_SERVER_PORT,rdt_server_port,,uint16,UDP's server port.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,16,Q_RTSP_RDT_CLIENT_PORT,rdt_client_port,,uint16,UDP's client port.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the streamed file.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,555,Q_MPA_METHOD,method,,string,RTSP command sent by the client.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,17,Q_RTSP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,8,Q_RTSP_SERVER,server,,string,Name of the streaming server.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,29,Q_RTSP_DIRECTORY,directory,,string,File directory.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,9,Q_RTSP_CODE,code,,uint32,Server return code.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,32,Q_RTSP_RETURNMSG,returnmsg,,string_index,Contains the text explaining the return codes.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,24,Q_RTSP_URI,uri,,string,Complete name (path + filename) of a web resource (truncated at 1503 characters).,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,33,Q_RTSP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the stream.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,34,Q_RTSP_URI_END_OFFSET,uri_end_offset,,uint32,Offset to the first byte which is not part of the URI in the stream.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,25,Q_RTSP_URILAST64,urilast64,,string,uri last 64 characters of the uri.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,26,Q_RTSP_URILEN,urilen,,uint32,uri length.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,27,Q_RTSP_URIMD5,urimd5,,binary,md5 of the uri.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,28,Q_RTSP_URI_FULL,uri_full,,string,Complete name (path + filename) of a web resource (not truncated).,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,18,Q_RTSP_HEADER,header,,parent,"One RTSP header line, parent attribute.",0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,19,Q_RTSP_HEADER_NAME,header_name,,string,One RTSP header line (field).,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,20,Q_RTSP_HEADER_VALUE,header_value,,string,One RTSP header line (value).,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,30,Q_RTSP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,14,Q_RTSP_CSEQ,cseq,,string,Sequence number.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,530,Q_MPA_CONTENT,content,,buffer,Contains the data in a HTTP response.,1,session_mod,1,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,22,Q_RTSP_START_TIME,start_time,,timeval,Start date of the call.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,23,Q_RTSP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the different codecs values that can be used for audio/video transmission,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,698,Q_MPA_DATA_PORT,data_port,x,uint16,Data port for client's protocol.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_mod,0,,,,, +,176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,1,Q_S1AP_EP,ep,,parent,Contains Elementary Procedure attributes.,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,2,Q_S1AP_EP_CODE,ep_code,,uint8,Elementary Procedure identifier.,0,session_prt,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,3,Q_S1AP_EP_NAME,ep_name,,string,Elementary Procedure name.,0,session_prt,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,4,Q_S1AP_EP_VALUE_RAW,ep_value_raw,,buffer,Elementary Procedure raw value.,1,session_prt,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,5,Q_S1AP_EP_MME_UE_ID,ep_mme_ue_id,,uint32,Mobility Management Entity Identifier (MME UE S1AP ID).,0,session_prt,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,6,Q_S1AP_EP_ENB_UE_ID,ep_enb_ue_id,,uint32,E-UTRAN NodeB Identifier (eNB UE S1AP ID).,0,session_prt,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,7,Q_S1AP_EP_IE,ep_ie,,parent,Contains Information Element attributes.,0,session_prt,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,8,Q_S1AP_EP_IE_CODE,ep_ie_code,,uint8,Information Element identifier.,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,9,Q_S1AP_EP_IE_NAME,ep_ie_name,,string,Information Element name.,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,10,Q_S1AP_EP_IE_VALUE_RAW,ep_ie_value_raw,,buffer,Information Element raw value.,1,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,11,Q_S1AP_EP_IE_RAB,ep_ie_rab,,parent,Contains E-RAB attributes.,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,12,Q_S1AP_EP_IE_RAB_ID,ep_ie_rab_id,,uint8,E-UTRAN Radio Access Bearer (E-RAB ID).,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,13,Q_S1AP_EP_IE_RAB_ADDR,ep_ie_rab_addr,,ip_addr,Transport Layer Address (IPv4).,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,14,Q_S1AP_EP_IE_RAB_ADDR6,ep_ie_rab_addr6,,ip6_addr,Transport Layer Address (IPv6).,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,15,Q_S1AP_EP_IE_RAB_TEID,ep_ie_rab_teid,,string,GTP Tunnel Endpoint Identifier (GTP-TEID).,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,16,Q_S1AP_EP_IE_TAI,ep_ie_tai,,string,Tracking Area Identifier (TAI).,0,session_mod,0,,,,, +,1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,17,Q_S1AP_EP_IE_CGI,ep_ie_cgi,,string,E-UTRAN Cell Global Identifier (E-UTRAN CGI).,0,session_mod,0,,,,, +,1121,Q_PROTO_SAMSUNG_APPS,Application Service,samsung_apps,Samsung Apps,1,Q_SAMSUNG_APPS_IS_SMARTPHONE,is_smartphone,,uint32,Boolean attribute indicating whether the client is a smartphone(1) or not(0).,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,1,Q_SCCP_MESSAGE_TYPE,message_type,,uint32,The type of the message.,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,660,Q_MPA_CALL_ID,call_id,,uint32,"Call id, extracted for each call.",0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,3,Q_SCCP_CALLERNAME,callername,,string,Calling party identity,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,4,Q_SCCP_CALLEENAME,calleename,,string,Called party identity,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,20,Q_SCCP_DEVICE_TYPE,device_type,,uint32,Device type,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,21,Q_SCCP_DEVICE_NAME,device_name,,string,Device name,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,5,Q_SCCP_CALL_WAY,call_way,,uint32,"The call Way (In, Out)",0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,8,Q_SCCP_CALLSTATE,callstate,,uint32,Status of the current call,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,19,Q_SCCP_STATS,stats,,parent,Regroups connection statistics,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,9,Q_SCCP_NB_PKT_SENT,nb_pkt_sent,,uint32,Number of RTP packets sent,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,10,Q_SCCP_NB_PKT_RCV,nb_pkt_rcv,,uint32,Number of RTP packets received,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,11,Q_SCCP_NB_BYT_SENT,nb_byt_sent,,uint32,Number of RTP octets sent,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,12,Q_SCCP_NB_BYT_RCV,nb_byt_rcv,,uint32,Number of RTP octets received,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,13,Q_SCCP_NB_PKT_LOST,nb_pkt_lost,,uint32,Number of RTP packets lost,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,14,Q_SCCP_STATS_JITTER,stats_jitter,,uint32,Observed Jitter for RTP packets,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,15,Q_SCCP_STATS_LATENCY,stats_latency,,uint32,Observed latency for RTP packets,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,16,Q_SCCP_KEYPAD,keypad,,uint32,Contains the key pressed on the handset,0,pkt,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,17,Q_SCCP_CODEC,codec,,uint32,The codec used in the RTP session,0,session_mod,0,,,,, +,179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,18,Q_SCCP_SOFTKEYEVENT,softkeyevent,,uint32,Contains the soft key event,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_fix,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_fix,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,1,Q_SCTP_CHUNK,chunk,,parent,A parent attribute representing a chunk entity.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,2,Q_SCTP_CHUNK_TYPE,chunk_type,,uint8,Containing the type of the chunk.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,3,Q_SCTP_CHUNK_DATA,chunk_data,,parent,Parent containing attributes relative to chunk data.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,4,Q_SCTP_CHUNK_DATA_TSN,chunk_data_tsn,,uint32,The Transmission Sequence Number is a global sequence number of chunks.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,5,Q_SCTP_CHUNK_DATA_STREAM_ID,chunk_data_stream_id,,uint16,An identifier indicating the stream to which the chunk belongs.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,6,Q_SCTP_CHUNK_DATA_STREAM_SEQ,chunk_data_stream_seq,,uint16,An identifier indicating the sequence number of the chunk data.,0,session_mod,0,,,,, +,180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,7,Q_SCTP_CHUNK_DATA_PROTO,chunk_data_proto,,uint32,Indicating the data type (or protocol) containing in the chunk.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,525,Q_MPA_CHAT,chat,,parent,Chat message information.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,1,Q_SECONDLIFE_LOGIN_ID,login_id,,binary,Id of virtual character.,0,session_fix,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,552,Q_MPA_MESSAGE,message,,string,Content of chat message.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,2,Q_SECONDLIFE_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,3,Q_SECONDLIFE_SOURCE,source,,parent,Information about the source of chat message.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,600,Q_MPA_SENDER,sender,,binary,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,5,Q_SECONDLIFE_SOURCE_NAME,source_name,,string,Source name.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,6,Q_SECONDLIFE_SOURCE_TYPE,source_type,,string,Source type.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,7,Q_SECONDLIFE_SOURCE_ID,source_id,,binary,Source Id.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,8,Q_SECONDLIFE_SESSION_ID,session_id,,binary,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,9,Q_SECONDLIFE_CHAT_TYPE,chat_type,,string,Chat message type.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,24,Q_SIP_REQUEST,request,,parent,SIP request.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,20,Q_SIP_URI,uri,,string,Contains the URI (similar to To: field),0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,65,Q_SIP_EXPIRES,expires,,uint32,Time in seconds after which the message expires.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,7,Q_SIP_REPLY_CODE,reply_code,,string,Return status code.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,4,Q_SIP_MIME_TYPE,mime_type,,string,Data type.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,50,Q_SIP_REQUEST_CALL_ID,request_call_id,,string,Call's id extracted for each sip request.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,47,Q_SIP_SERVER_AGENT,server_agent,,string,Server's software.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,16,Q_SIP_CSEQ,cseq,,string,Sequence number,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,18,Q_SIP_VIA,via,,string,The Via header field indicates the transport used for the transaction and identifies the location where the response is to be sent,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,19,Q_SIP_CONTACT,contact,,string,The Contact header field provides a SIP or SIPS URI that can be used to contact that specific instance of the UA for subsequent requests,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,21,Q_SIP_RECORD_ROUTE,record_route,,string,The Record-Route header field is inserted by proxies in a request to force future requests in the dialog to be routed through the proxy,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,22,Q_SIP_P_ASSERTED_ID,p_asserted_id,,string,Indicates the identity of the trusted SIP server,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,23,Q_SIP_REMOTE_PARTY_ID,remote_party_id,,string,The IP address of the remote party.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,15,Q_SIP_REASON,reason,,string,The reason a Session Initiation Protocol request was issued.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,48,Q_SIP_FROM,from,,string,The initiator of the request.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,49,Q_SIP_TO,to,,string,The recipient of the request.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,607,Q_MPA_SUBJECT,subject,,string,the subject header present in the SIP packet,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,38,Q_SIP_CALLER_DOMAIN,caller_domain,,string,Caller's domain,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,40,Q_SIP_CALLEE_DOMAIN,callee_domain,,string,Callee's domain,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,56,Q_SIP_CALLER_USER_PHONE,caller_user_phone,,int32,Caller's phone presence flag,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,57,Q_SIP_CALLEE_USER_PHONE,callee_user_phone,,int32,Callee's phone presence flag,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,58,Q_SIP_DATE,date,,string,Contains the date and time.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,59,Q_SIP_PROXY_AUTHORIZATION,proxy_authorization,,string,allows the client to identify itself (or its user) to a proxy that requires authentication,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,60,Q_SIP_WWW_AUTHENTICATE,www_authenticate,,string,Contains an authentication challenge.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,66,Q_SIP_AUTHORIZATION_USERNAME,authorization_username,,string,User's name as specified in the Authorization SIP header.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,61,Q_SIP_ALERT_INFO,alert_info,,string,Specifies an alternative ring tone.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,62,Q_SIP_CALL_INFO,call_info,,string,Provides additional information about the caller or callee.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,63,Q_SIP_ACCEPT_LANGUAGE,accept_language,,string,Indicates the preferred languages.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,8,Q_SIP_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,17,Q_SIP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,9,Q_SIP_SESSION_DURATION,session_duration,,timeval,"Duration of the session, between INVITE and BYE.",0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,14,Q_SIP_SETUP_DELAY,setup_delay,,timeval,Call setup delay.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,51,Q_SIP_CALLER_E164,caller_e164,,string,Format of the caller's telephone numbers,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,52,Q_SIP_CALLEE_E164,callee_e164,,string,Format of the callee's telephone numbers,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,29,Q_SIP_CALLER_NICKNAME,caller_nickname,,string,the caller nickname,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,30,Q_SIP_CALLEE_NICKNAME,callee_nickname,,string,the callee nickname,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,54,Q_SIP_FROM_TAG,from_tag,,buffer,A globally unique id of the caller.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,55,Q_SIP_TO_TAG,to_tag,,buffer,A globally unique id of the callee.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,1,Q_SIP_CONFCALL_CALLER,confcall_caller,,string,"Caller's name, in a confcall.",0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,2,Q_SIP_CONFCALL_CALLEE,confcall_callee,,string,"Callee's name, in a confcall.",0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,43,Q_SIP_CALLER_USER_AGENT,caller_user_agent,,string,Client's software in the caller way.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,44,Q_SIP_CALLEE_USER_AGENT,callee_user_agent,,string,Client's software used by the callee.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,45,Q_SIP_CALLER_SERVER_AGENT,caller_server_agent,,string,Server's software in the caller way.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,46,Q_SIP_CALLEE_SERVER_AGENT,callee_server_agent,,string,Server's software in the callee way.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,743,Q_MPA_CALLER_ADDR_V6,caller_addr_v6,,ip6_addr,IPv6 address which could be used by the initiator of the call.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,744,Q_MPA_CALLEE_ADDR_V6,callee_addr_v6,,ip6_addr,IPv6 address which could be used by the called party.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port which could be used by the caller.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port which could be used by the callee.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,31,Q_SIP_CONNECTION_INFO,connection_info,,parent,Contains connection information.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,32,Q_SIP_CONNECTION_INFO_ADDR,connection_info_addr,,ip_addr,Connection IPv4 address.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,53,Q_SIP_CONNECTION_INFO_ADDR_V6,connection_info_addr_v6,,ip6_addr,Connection IPv6 address.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,33,Q_SIP_CONNECTION_INFO_ADDR_TYPE,connection_info_addr_type,,string,Connection address type.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,34,Q_SIP_CONNECTION_INFO_NET_TYPE,connection_info_net_type,,string,Network type for the connection.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session_mod,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,801,Q_MPA_MEDIA_ATTR_ADDR_START_OFFSET,media_attr_addr_start_offset,,uint32,Offset to the first IP address field byte given in the media attribute.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,802,Q_MPA_MEDIA_ATTR_ADDR_END_OFFSET,media_attr_addr_end_offset,,uint32,Offset to the first byte which is not part of the IP address field given in the media attribute.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,803,Q_MPA_MEDIA_ATTR_PORT_START_OFFSET,media_attr_port_start_offset,,uint32,Offset to the first PORT field byte given in the media attribute.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,804,Q_MPA_MEDIA_ATTR_PORT_END_OFFSET,media_attr_port_end_offset,,uint32,Offset to the first byte which is not part of the PORT field given in the media attribute.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_prt,0,,,,, +,182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,36,Q_SIP_USER_ID,user_id,,string,Client identifier used for his registering with a SIP server.,0,session_mod,0,,,,, +,323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,608,Q_MPA_VERSION,version,,string,Skype client version.,0,session_mod,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,1,Q_SKYPE_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_prt,0,,,,, +,183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,608,Q_MPA_VERSION,version,,uint32,Current version of the Soulseek client.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,2,Q_SLSK_FILE_ID,file_id,,uint64,"Unique identifier of a file, based on IP of peer and the unique token for this combination file/peer.",0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,1,Q_SLSK_TRANSFER_WAY,transfer_way,,string,Indicates whether the file is uploaded or downloaded.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),643,Q_MPA_REQUEST,request,,parent,Parent attribute containing the metadata related to a given request/answer.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),1,Q_SMB_SERVICE,service,,string,Current service identification string.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),30,Q_SMB_SERVICE_DATA,service_data,,buffer,Data associated with the resource that the client intends to access.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),8,Q_SMB_FILE_ID,file_id,,string,Identifier of the file affected by the command (v1:4 char; usmb_v2:32 char).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),27,Q_SMB_END_OF_FILE,end_of_file,,uint64,The end of file offset value.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),7,Q_SMB_FILE_ATTRIBUTES,file_attributes,,uint32,File attributes (bit field).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),9,Q_SMB_USER_ID,user_id,,uint32,User identifier (SMB usmb_v1 only).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),10,Q_SMB_PROCESS_ID,process_id,,uint32,Identifier of the process being affected by the following command.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),11,Q_SMB_NT_STATUS,nt_status,,uint32,NT error code.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),2,Q_SMB_DIRECTORY,directory,x,string,(deprecated) Name of the shared directory on the server host.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),20,Q_SMB_PATH,path,,string,The server/share name of the resource to which the client attempts to connect.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),3,Q_SMB_DOMAIN,domain,,string,Domain name.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),4,Q_SMB_NATIVE_OS,native_os,,string,Client's operating system.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),16,Q_SMB_NATIVE_LAN_MANAGER,native_lan_manager,,string,The native LAN manager type.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),5,Q_SMB_COMMAND,command,,uint16,Command number use.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),15,Q_SMB_COMMAND_STRING,command_string,,string,Command name.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),6,Q_SMB_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),584,Q_MPA_QUERY_TYPE,query_type,,uint8,Indicates if the message is a request (1) or a response (2).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),14,Q_SMB_QUERY_ID,query_id,,uint64,Indexes and correlates requests and responses.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),12,Q_SMB_SECURITY_BLOB_LEN,security_blob_len,,uint32,Security blob data length.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),13,Q_SMB_SECURITY_BLOB,security_blob,,buffer,Data contained in the security blob.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),17,Q_SMB_SEARCH_ATTRIBUTES,search_attributes,,uint32,An attribute mask used to specify the standard attributes a file MUST have in order to match the search.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),19,Q_SMB_SEARCH_STORAGE_TYPE,search_storage_type,,uint32,Specify the search type (directory or file).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),18,Q_SMB_SEARCH_PATTERN,search_pattern,,string,The file pattern to search for.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),21,Q_SMB_INFORMATION_LEVEL,information_level,,uint16,"This field contains an information level code, which determines the information contained in the response.",0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),24,Q_SMB_DIALECT,dialect,,string,The version of the SMB Protocol.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),25,Q_SMB_DIALECT_INDEX,dialect_index,,uint16,Index of the selected SMB Protocol version.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),26,Q_SMB_DIALECT_NAME,dialect_name,,uint16,The version name of the SMB Protocol.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),23,Q_SMB_ATTRIBUTES,attributes,,uint32,File attributes/folder (bit field).,0,session_mod,0,,,,, +,185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),22,Q_SMB_EXT_ATTRIBUTES,ext_attributes,x,uint32,(deprecated) Extended File attributes/folder (bit field).,0,session_mod,0,,,,, +,738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,552,Q_MPA_MESSAGE,message,,parent,Parent attribute containing SMS information.,0,session_mod,0,,,,, +,738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,600,Q_MPA_SENDER,sender,,string,Sender's address.,0,session_prt,0,,,,, +,738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,585,Q_MPA_RECEIVER,receiver,,string,Receiver's address.,0,session_prt,0,,,,, +,738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,530,Q_MPA_CONTENT,content,,buffer,Content of the Short Message.,0,session_prt,1,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,1,Q_SMTP_MAILFROM,mailfrom,,parent,Contains the domain and the sender's email,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,2,Q_SMTP_SENDER_MAILFROM,sender_mailfrom,,string,Sender's email address (used by MAIL FROM method).,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,3,Q_SMTP_SENDER_DOMAIN,sender_domain,,string,Domain of the sender's email address.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,4,Q_SMTP_RCPTTO,rcptto,,parent,Domain and recipient's email address (used by RCPT TO method).,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,5,Q_SMTP_RECEIVER_RCPTTO,receiver_rcptto,,string,Recipient's email address (used by RCPT TO method).,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,6,Q_SMTP_RECEIVER_DOMAIN,receiver_domain,,string,Domain of the recipient's email address.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,805,Q_MPA_HEADER_RAW,header_raw,,string,One SMTP header line (field and value).,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,11,Q_SMTP_RESPONSE_CODE,response_code,,uint32,Return code,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,556,Q_MPA_MIME_TYPE,mime_type,,string,Mail's content type.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,8,Q_SMTP_START_TIME,start_time,,timeval,Starting time of SMTP session,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,9,Q_SMTP_STOP_TIME,stop_time,,timeval,Ending time of SMTP session,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,10,Q_SMTP_DURATION,duration,,timeval,Duration of the SMTP session,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,806,Q_MPA_FILE_TYPE,file_type,,string,Received or sent file content type (prefix-based pattern recognition) exchanged using this protocol.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,12,Q_SMTP_SERVER,server,,string,Contains the name of the used smtp server,0,session_fix,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,13,Q_SMTP_SERVER_AGENT,server_agent,,string,The software name used by the email server,0,session_fix,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established,0,session_fix,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0,,,,, +,186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0,,,,, +,189,Q_PROTO_SNAP,Network Service,snap,Sub-Network Access Protocol,1,Q_SNAP_SNAP_TYPE,snap_type,,uint16,Identifier of the encapsulated protocol.,0,pkt,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,608,Q_MPA_VERSION,version,,string_index,SNMP version.,0,session_fix,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,1,Q_SNMP_COMMUNITY,community,,string,Community name.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,643,Q_MPA_REQUEST,request,,parent,Contains the requests attributes,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,555,Q_MPA_METHOD,method,,string,SNMP request type.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,3,Q_SNMP_REQUEST_ID,request_id,,uint32,Request Identifier.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,4,Q_SNMP_VARIABLE,variable,,parent,OID Parent.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,2,Q_SNMP_OID,oid,,string,Object Identifier.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,5,Q_SNMP_VALUE_RAW,value_raw,,buffer,OID raw Value,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,7,Q_SNMP_VALUE_TYPE,value_type,x,string,Object type.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,6,Q_SNMP_VALUE_LEN,value_len,,uint32,Size of value_raw in bytes.,0,session_mod,0,,,,, +,190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0,,,,, +,264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,555,Q_MPA_METHOD,method,,string,Contains the SNPP command.,0,session_mod,0,,,,, +,264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,1,Q_SNPP_CALLER_ID,caller_id,,string,Login of person who send the message.,0,session_mod,0,,,,, +,264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,552,Q_MPA_MESSAGE,message,,string,Contains the message sent to the pager.,0,session_mod,0,,,,, +,264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,2,Q_SNPP_PAGER_ID,pager_id,,string,Contains pager number.,0,session_mod,0,,,,, +,192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKet Secure v4,1,Q_SOCKS4_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session_fix,0,,,,, +,192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKet Secure v4,2,Q_SOCKS4_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session_fix,0,,,,, +,193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,1,Q_SOCKS5_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session_fix,0,,,,, +,193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,3,Q_SOCKS5_REMOTE_NAME,remote_name,,string,Fully qualified remote domain name.,0,session_fix,0,,,,, +,193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,2,Q_SOCKS5_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session_fix,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,1,Q_SPDY_FRAME_TYPE,frame_type,,uint8,Frame type.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,2,Q_SPDY_STREAM_ID,stream_id,,uint32,Stream identifier.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,3,Q_SPDY_FLAGS,flags,,uint8,Flags,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,4,Q_SPDY_LENGTH,length,,uint32,Length of the message starting at the offset of this field.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,5,Q_SPDY_CONTROL_FRAME,control_frame,,parent,Parent attribute for control frame elements.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,6,Q_SPDY_VERSION,version,,uint16,Version number.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,7,Q_SPDY_CONTROL_TYPE,control_type,,uint16,Control frame type.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,8,Q_SPDY_SYN_STREAM,syn_stream,,parent,Parent attribute for elements of stream synchronization frames.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,9,Q_SPDY_ASSOCIATED_STREAM_ID,associated_stream_id,,uint16,Identifier for a stream which this stream is associated to.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,10,Q_SPDY_PRIORITY,priority,,uint8,A stream priority is represented as an integer. 0 represents the highest priority and 7 represents the lowest priority.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,11,Q_SPDY_SLOT,slot,,uint8,An 8 bit unsigned integer specifying the index in the server's CREDENTIAL vector of the client certificate to be used for this request.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,13,Q_SPDY_RST_STREAM,rst_stream,,parent,Parent attribute for elements of stream reset frames.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,14,Q_SPDY_STATUS_CODE,status_code,,uint32,An indicator for why the stream is being terminated.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,15,Q_SPDY_HEADER_COUNT,header_count,,uint32,The number of repeating name/value pairs following this field,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,16,Q_SPDY_HEADER,header,,parent,Parent attribute for a name/value pair.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,21,Q_SPDY_HEADER_NAME,header_name,,string,"Header name, prefixed by a ':' if it's a mandatory SPDY header.",0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,22,Q_SPDY_HEADER_VALUE,header_value,,string,Header value.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,19,Q_SPDY_DATA_FRAME,data_frame,,parent,Parent attribute for elements of a data frame.,0,session_prt,0,,,,, +,1469,Q_PROTO_SPDY,Web,spdy,SPDY,20,Q_SPDY_CONTENT,content,,buffer,Message content.,0,session_prt,1,,,,, +,1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,1,Q_SPID_RESULT,result,,parent,Parent attribute containing SPID classification results.,0,session_mod,0,,,,, +,1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,2,Q_SPID_FOUND_PROTOCOL,found_protocol,,string,Protocol name that has been discovered by SPID.,0,session_mod,0,,,,, +,1446,Q_PROTO_SPID,Behavioral,spid,Statistical Protocol IDentification,3,Q_SPID_DIVERGENCE,divergence,,uint32,"Divergence giving the distance"" between the flow content and the selected SPID model. The smaller the divergence, the better the classification.""",0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0,,,,, +,198,Q_PROTO_SSH,Encrypted,ssh,Secure Shell,1,Q_SSH_RTT,rtt,,timeval,Server response time.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,608,Q_MPA_VERSION,version,,string_index,Protocol version.,0,session_fix,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,739,Q_MPA_SESSION_ID,session_id,,buffer,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,3,Q_SSL_CERTIFICATE,certificate,,parent,Parent attribute for the common_name and the MD5 hash of the certificate,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,13,Q_SSL_CERTIFICATE_RAW,certificate_raw,,buffer,Raw text content of the ssl certificate.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,1,Q_SSL_CERTIF_MD5,certif_md5,,binary,md5 of the certificate.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,2,Q_SSL_COMMON_NAME,common_name,,string,Domain name mentioned in the certificate.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,14,Q_SSL_ORGANIZATION_NAME,organization_name,,string,Organisation name mentioned in the certificate.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,5,Q_SSL_SERVER_NAME,server_name,,string,Domain name mentioned in Client Hello message.,0,session_fix,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,12,Q_SSL_SUPPORTED_NEXT_PROTOCOL,supported_next_protocol,,string,Supported protocol on top of SSL specified by the server in the Next Protocol Negotiation TLS extension.,0,session_fix,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,4,Q_SSL_ISSUER,issuer,,string,Certificate Authority.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,6,Q_SSL_VALIDITY_NOT_BEFORE,validity_not_before,,string,Certificate's validity start date.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,7,Q_SSL_VALIDITY_NOT_AFTER,validity_not_after,,string,Certificate's validity end date.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,8,Q_SSL_SERIAL_NUMBER,serial_number,,buffer,Serial number of certificate.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,9,Q_SSL_SUBJECT_ALT_NAME,subject_alt_name,,string,Identifies a list of host names which belong to the same certificate.,0,session_prt,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,11,Q_SSL_HANDSHAKE_TYPE,handshake_type,,uint8,Handshake type.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,15,Q_SSL_REQUEST,request,,parent,An SSL request.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,695,Q_MPA_INDEX,index,,uint32,Identifier of the request and response in a SSL flow.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,16,Q_SSL_REQUEST_SIZE,request_size,,uint64,Contains the total length in bytes of the request or the response (including SSL headers). This attribute is computed at the end of the request or response.,0,session_mod,0,,,,, +,199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,17,Q_SSL_CIPHER_SUITE_ID,cipher_suite_id,,uint16,Id of the cipher suite handled by the server.,0,session_fix,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,1,Q_STP_PROTO_ID,proto_id,,uint16,Protocol Identifier. Must be equal to 0x00.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,2,Q_STP_VERSION,version,,uint8,Protocol version.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,3,Q_STP_BPDU_TYPE,bpdu_type,,uint8,Message type.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,4,Q_STP_BPDU_FLAGS,bpdu_flags,,uint8,Message flags.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,5,Q_STP_ROOT_ID,root_id,,uint16,Root Bridge Identifier.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,6,Q_STP_ROOT_ADDR,root_addr,,mac_addr,Root Bridge MAC address.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,7,Q_STP_ROOT_PATH_COST,root_path_cost,,uint32,Cost of the path to the Root Bridge.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,8,Q_STP_BRIDGE_ID,bridge_id,,uint16,Bridge Identifier.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,9,Q_STP_BRIDGE_ADDR,bridge_addr,,mac_addr,Bridge MAC address.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,10,Q_STP_PORT_ID,port_id,,uint16,Bridge port identifier.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,11,Q_STP_MESSAGE_AGE,message_age,,uint16,Time elapsed since generation of the message by the Root Bridge.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,12,Q_STP_MAX_AGE,max_age,,uint16,Period of validity for a message.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,13,Q_STP_HELLO_TIME,hello_time,,uint16,Time interval between messages.,0,pkt,0,,,,, +,200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,14,Q_STP_FORWARD_DELAY,forward_delay,,uint16,Timeout value for port states transfers.,0,pkt,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,1,Q_STUN_MESSAGE,message,,parent,set of attributes for a given stun message,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,2,Q_STUN_MAPPED_ADDRESS_IPV4,mapped_address_ipv4,,ip_addr,IP v4 address to be mapped.,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,3,Q_STUN_MAPPED_ADDRESS_IPV6,mapped_address_ipv6,,ip6_addr,IP v6 address to be mapped.,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,4,Q_STUN_PORT,port,,uint16,port to be mapped.,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,5,Q_STUN_XOR_MAPPED_ADDRESS_IPV4,xor_mapped_address_ipv4,,ip_addr,IP v4 address to be mapped (deobfuscated version).,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,6,Q_STUN_XOR_MAPPED_ADDRESS_IPV6,xor_mapped_address_ipv6,,ip6_addr,IP v6 address to be mapped (deobfuscated version).,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,7,Q_STUN_XOR_PORT,xor_port,,uint16,port to be mapped (deobfuscated version).,0,session_mod,0,,,,, +,201,Q_PROTO_STUN,Network Service,stun,Session Traversal Utilities for NAT,8,Q_STUN_MAGIC_COOKIE,magic_cookie,,uint32,The magic cookie used to deobfuscate the XOR port and XOR mapped address,0,session_mod,0,,,,, +,204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,3,Q_SYSLOG_SYSLOG_MESSAGE,syslog_message,,string,Message.,0,session_mod,0,,,,, +,204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,1,Q_SYSLOG_CODE,code,,string,Message type.,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,1,Q_T38_MESSAGE,message,,parent,Parent attribute including T.38 message elements,0,session_fix,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,2,Q_T38_UDPTL_SEQUENCE_NUMBER,udptl_sequence_number,,uint16,UDPTL sequence number,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,3,Q_T38_TPKT,tpkt,,parent,Parent attribute including TPKT protocol elements,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,4,Q_T38_TPKT_VRSN,tpkt_vrsn,,uint8,Version of the TPKT protocol,0,session_prt,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,5,Q_T38_TPKT_PACKET_LENGTH,tpkt_packet_length,,uint16,Total length of TPKT packet,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,11,Q_T38_IFP,ifp,,parent,Parent attribute including IFP packet elements,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,12,Q_T38_IFP_DATA,ifp_data,,buffer,IFP packet buffer,1,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,13,Q_T38_TYPE_OF_MESSAGE,type_of_message,,string_index,Indicates if the IFP packet is of indicator or data type,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,14,Q_T38_INDICATOR,indicator,,string_index,Describes the function of the indicator IFP packet,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,15,Q_T38_DATA_TYPE,data_type,,string_index,"Describes the type of data contained in the data IFP packet, and the modulation used to carry them",0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,16,Q_T38_DATA_FIELD,data_field,,parent,Parent attribute including data field type and content,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,17,Q_T38_FIELD_TYPE,field_type,,string_index,Describes the content of the data field,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,18,Q_T38_FIELD_DATA,field_data,,buffer,Fax data carried in the IFP packets,1,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,19,Q_T38_FAX,fax,,parent,Parent attribute including calling and called subscriber,0,session_fix,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,524,Q_MPA_CALLER,caller,,string,Calling subscriber identification,0,session_prt,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,523,Q_MPA_CALLEE,callee,,string,Called subscriber identification,0,session_prt,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,22,Q_T38_FAX_MESSAGE,fax_message,,parent,Parent attribute including fax signaling message elements,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,23,Q_T38_FAX_MESSAGE_DATA,fax_message_data,,buffer,Fax signaling messages carried in the (reassembled) IFP packets,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,24,Q_T38_FAX_MESSAGE_TYPE,fax_message_type,,string_index,Describes the fax signaling messages type,0,session_mod,0,,,,, +,525,Q_PROTO_T38,Network Service,t38,T.38,25,Q_T38_FAX_MESSAGE_NUMBER,fax_message_number,,string,"Identification associated to the following FAX messages: CSI the called subscriber identification (which is equal to the callee), CIG the calling subscriber identification (which is the caller), PWD the password, SEP the selective polling, PSA the polled subaddress, TSI the transmitting subscriber identification, SUB the subaddress and SID the sender identification.",0,session_mod,0,,,,, +,285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0,,,,, +,285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Transferred file name.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,513,Q_MPA_ATTACH,attach,,parent,Parent attribute containing metadata related to an attached file exchanged between two users.,0,session_prt,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the duration of it in seconds and microseconds.",0,session_prt,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the duration of it in seconds.",0,session_prt,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,521,Q_MPA_CALL_DURATION,call_duration,,int32,Call duration.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,2,Q_TANGO_CALLEE_ID,callee_id,,string,Called part identifier.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,1,Q_TANGO_CALLER_ID,caller_id,,string,Calling part identifier.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,579,Q_MPA_PHONE_NUMBER,phone_number,,string,User's phone number.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,638,Q_MPA_USER_EMAIL,user_email,,string,User's email address.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,3,Q_TANGO_USER_ID,user_id,,string,Unique user identifier.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,4,Q_TANGO_DEVICE_ID,device_id,,string,User's device identifier.,0,session_mod,0,,,,, +,598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0,,,,, +,321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,796,Q_MPA_STREAM,stream,,buffer,Private attribute of the classification engine.,0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_fix,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_fix,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session_fix,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session_fix,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,1,Q_TCP_SRC_PORT_RANGE,src_port_range,,uint8,"Range of source port number, defined by a minimum and a maximum.",0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,2,Q_TCP_DST_PORT_RANGE,dst_port_range,,uint8,"Range of destination port number, defined by a minimum and a maximum.",0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,3,Q_TCP_CLIENT_PORT_RANGE,client_port_range,,uint8,"Range of client port number, defined by a minimum and a maximum.",0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,4,Q_TCP_SERVER_PORT_RANGE,server_port_range,,uint8,"Range of server port number, defined by a minimum and a maximum.",0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,5,Q_TCP_PORT,port,,uint8,Validates a source or destination port. To be used in a filter.,0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,6,Q_TCP_UNSEQ,unseq,,uint8,Set to 1 if the packet is in a bad order.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,7,Q_TCP_LOSS_COUNT,loss_count,,uint32,Number of lost bytes.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,8,Q_TCP_PREVIOUS_LOST,previous_lost,,uint32,This packet follows one or more missing packets.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,9,Q_TCP_RTT,rtt,,timeval,Network response time (syn-synack-ack process).,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,10,Q_TCP_RTT_APP,rtt_app,,timeval,"Application response time of the server, calculated between a non-empty client packet, and the acknowledgement of a non-empty server packet.",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,12,Q_TCP_MSS,mss,,uint16,Maximum Segment Size.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,13,Q_TCP_WINDOW,window,,uint16,Congestion window size.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,14,Q_TCP_SACK,sack,,uint8,"Equal to 1 if the Selective Ack"" technique is used.""",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,15,Q_TCP_TSTAMP,tstamp,,uint8,Equal to 1 if timestamps are used.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,16,Q_TCP_CNX_DURATION,cnx_duration,,timeval,Elapsed time (in seconds) between the SYN packet and the first FIN or RST packet.,0,session_fix,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,17,Q_TCP_UNSEQ_AMONT,unseq_amont,,uint8,Indicates if unsequencing of the packet took place before passing through the probe.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,18,Q_TCP_UNSEQ_AVAL,unseq_aval,,uint8,Indicates if unsequencing of the packet took place after passing through the probe.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,19,Q_TCP_FLAG_FIN,flag_fin,,uint8,"Indicates if FIN flag is present in this packet, meaning the end of this TCP session.",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,20,Q_TCP_FLAG_RESET,flag_reset,,uint8,"Indicates if RESET flag is present in this packet, meaning the end of this TCP session.",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,22,Q_TCP_FLAG_SYN,flag_syn,,uint8,"Indicates if SYN flag is present in this packet, meaning a request TCP connection initiation.",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,23,Q_TCP_FLAG_SYNACK,flag_synack,,uint8,"Indicates if SYN and ACK flags are present in this packet, meaning a request TCP connection initiation.",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,21,Q_TCP_START_TIME,start_time,,timeval,Start time of this TCP session.,0,session_fix,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,24,Q_TCP_SEQ_NUMBER,seq_number,,uint32,The sequence number of the TCP packet.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,25,Q_TCP_ACK_NUMBER,ack_number,,uint32,The acknowledgement number.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,26,Q_TCP_TSVAL,tsval,,uint32,Timestamp value.,0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,27,Q_TCP_TSECR,tsecr,,uint32,Timestamp echo reply value.,0,pkt,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,28,Q_TCP_SEG_BUFFERED_COUNT,seg_buffered_count,,uint32,Number of segments that have been buffered for reassembly,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,29,Q_TCP_SEG_BUFFERED_SIZE,seg_buffered_size,,uint32,Sizes sum of segments that have been buffered for reassembly,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,30,Q_TCP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,60,Q_TCP_RETRANSMISSION_BYTES,retransmission_bytes,,uint32,"Current packet overlapping bytes count, extracted when out-of-order TCP sequence occurs.",0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,62,Q_TCP_DUP_ACK,dup_ack,,uint8,Extracted when the current packet has the ACK flag and validates a data segment that was already acknowledged.,0,session_mod,0,,,,, +,205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,61,Q_TCP_UNACK_SEQUENCE,unack_sequence,,uint32,Provides the difference between the maximum sequence number seen in payload packets minus the maximum ack seq number seen on the other way.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,1,Q_TDS_HOSTNAME,hostname,,string,Name of workstation communicating with the SQL server.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,2,Q_TDS_APPLICATION,application,,string,Name of application used to connect to the database.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,3,Q_TDS_SERVER,server,,string,Name of server hosting the SQL Server.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,4,Q_TDS_LIBRARY,library,,string,Name of network dynamic-link library used.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,5,Q_TDS_DATABASE_NAME,database_name,,string,Name of the used database.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,6,Q_TDS_LANGUAGE,language,,string,User locale.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,581,Q_MPA_QUERY,query,,string,SQL query sent by the user.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,7,Q_TDS_RPC_PROC_NAME,rpc_proc_name,,buffer,RPC TDS packet distant procedure name.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,8,Q_TDS_RPC_PARAMETER_ENTRY,rpc_parameter_entry,,parent,Structure containing the data related to a RPC call parameter.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,9,Q_TDS_RPC_PARAMETER_NAME,rpc_parameter_name,,buffer,RPC parameter name.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,10,Q_TDS_RPC_PARAMETER_TYPE,rpc_parameter_type,,buffer,RPC parameter type.,0,session_mod,0,,,,, +,208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,11,Q_TDS_RPC_PARAMETER_VALUE,rpc_parameter_value,,buffer,RPC parameter value.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,690,Q_MPA_CHANNEL_DESCRIPTION,channel_description,,string,Channel description (long),0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,689,Q_MPA_CHANNEL_TOPIC,channel_topic,,string,Channel topic (short),0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,688,Q_MPA_CHANNEL_NAME,channel_name,,string,Channel name,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,687,Q_MPA_CHANNEL_ID,channel_id,,uint32,Channel ID,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,677,Q_MPA_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact alias.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,110,Q_TEAMSPEAK_MESSAGE_SCOPE,message_scope,,uint32,Message scope,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,674,Q_MPA_RECEIVER_UID,receiver_uid,,uint32,Receiver ID for this message,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,673,Q_MPA_SENDER_UID,sender_uid,,uint32,Sender ID for this message,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server greeting message,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,109,Q_TEAMSPEAK_SERVER_VERSION,server_version,,string,Server software version,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,108,Q_TEAMSPEAK_SERVER_NAME,server_name,,string,Server name,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,107,Q_TEAMSPEAK_SERVER_PLATFORM,server_platform,,string,Server architecture,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,102,Q_TEAMSPEAK_SERVER,server,,parent,Parent attribute,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,105,Q_TEAMSPEAK_CLIENT_VERSION,client_version,,string,Client software version,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,104,Q_TEAMSPEAK_CLIENT_SOFTWARE,client_software,,string,Client software name,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,103,Q_TEAMSPEAK_CLIENT_PLATFORM,client_platform,,string,Client architecture,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,101,Q_TEAMSPEAK_CLIENT,client,,parent,Parent attribute,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,106,Q_TEAMSPEAK_CLIENT_UID,client_uid,,uint32,Client session ID,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,112,Q_TEAMSPEAK_SESSION_ID,session_id,,uint32,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,111,Q_TEAMSPEAK_SESSION,session,,parent,Parent attribute,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,100,Q_TEAMSPEAK_NICKNAME,nickname,,string,User nickname,0,session_mod,0,,,,, +,526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,209,Q_PROTO_TELNET,Terminal,telnet,Telnet,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,209,Q_PROTO_TELNET,Terminal,telnet,Telnet,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,209,Q_PROTO_TELNET,Terminal,telnet,Telnet,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,209,Q_PROTO_TELNET,Terminal,telnet,Telnet,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,209,Q_PROTO_TELNET,Terminal,telnet,Telnet,1,Q_TELNET_TERM_TYPE,term_type,,string,Terminal type.,0,session_mod,0,,,,, +,209,Q_PROTO_TELNET,Terminal,telnet,Telnet,2,Q_TELNET_RTT,rtt,,timeval,Server response time.,0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,1,Q_TEREDO_SERVER_IP,server_ip,,ip_addr,"The IPv4 network address of the Teredo server involved in the exchange, read from the encapsulated IPv6 packet header",0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,3,Q_TEREDO_CLIENT_IP,client_ip,,ip_addr,Client's mapped IPv4 net address.,0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,4,Q_TEREDO_PORT,port,,uint16,Mapped UDP port used by Teredo,0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,8,Q_TEREDO_ORIGIN_INDICATION,origin_indication,,parent,Identification data from a client attempting to set up a Teredo connection,0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,9,Q_TEREDO_ORIGIN_CLIENT_IP,origin_client_ip,,ip_addr,IPv4 client address as visible in the Origin Indication,0,session_prt,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,10,Q_TEREDO_ORIGIN_PORT,origin_port,,uint16,UDP port used by Teredo as visible in the Origin Indication,0,session_prt,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,11,Q_TEREDO_AUTHENTICATION,authentication,,parent,Authentication data exchanged between client and server,0,session_mod,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,5,Q_TEREDO_CLIENT_ID,client_id,,string,"Client identifier, set up during its configuration",0,session_prt,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,6,Q_TEREDO_AUTH_VALUE,auth_value,,string,Client Authentication string,0,session_prt,0,,,,, +,555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,7,Q_TEREDO_NONCE_VALUE,nonce_value,,binary,Identification string chosen by the client,0,session_prt,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a packet.,0,session_mod,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,6,Q_TFTP_REQUEST_FILENAME,request_filename,,string,Name of the requested file.,0,session_prt,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_fix,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,1,Q_TFTP_MODE,mode,,string,File transfer mode (Netascii/ Binary/ Mail).,0,session_prt,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,2,Q_TFTP_QUERY,query,,string,Command type.,0,session_prt,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,3,Q_TFTP_BLOCK_NUMBER,block_number,,uint16,Contains the block number of the data packet.,0,session_prt,0,,,,, +,211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),1,Q_TNS_BASE,base,,string,Name of accessed database.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),2,Q_TNS_VERSION,version,,uint16,Version number of Oracle server.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),3,Q_TNS_SERVER_HOSTNAME,server_hostname,,string,Database server hostname.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),5,Q_TNS_SERVER_PORT,server_port,,uint16,Database server listening port.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),4,Q_TNS_SERVER_OS,server_os,,string,Database server operating system.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),6,Q_TNS_CLIENT_OS,client_os,,string,Client machine operating system.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),7,Q_TNS_CLIENT_HOSTNAME,client_hostname,,string,Client machine hostname.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),8,Q_TNS_CLIENT_PROGRAM_PATH,client_program_path,,string,Client program absolute path.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),9,Q_TNS_CLIENT_PROGRAM_NAME,client_program_name,,string,Client program name.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),581,Q_MPA_QUERY,query,,string,Database query.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),10,Q_TNS_RESPONSE,response,,parent,Parent attribute containing metadata related to the server response.,0,session_mod,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),12,Q_TNS_RESPONSE_SIZE,response_size,,uint32,Unitary size in bytes of one the PDUs returned by the server.,0,session_prt,0,,,,, +,213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),11,Q_TNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session_prt,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,5,Q_TWITTER_RELATION,relation,,string,"Relation between two users, following/followed_by, or sender/recicipent for direct messages.",0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,17,Q_TWITTER_MEDIA_URL,media_url,,string,URL of the image which is shared inside a tweet (legacy Twitter API).,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,3,Q_TWITTER_TWEET,tweet,,string,Text of a tweet or a direct message.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,8,Q_TWITTER_SCREEN_NAME,screen_name,,string,User name appearing in the result of a request.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,7,Q_TWITTER_USER_ID,user_id,,string,User id appearing in the result of a request.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,15,Q_TWITTER_RESULT,result,,parent,Parent of attributes appearing in the result of a query.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,16,Q_TWITTER_PARAM_TEXT,param_text,,string,Generic text used as request parameter.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,14,Q_TWITTER_PARAM_SCREEN_NAME,param_screen_name,,string,User screen name used as request parameter.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,13,Q_TWITTER_PARAM_USER_ID,param_user_id,,string,User id used as request parameter.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,12,Q_TWITTER_PARAM,param,,parent,Parent attribute containing request parameters.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,643,Q_MPA_REQUEST,request,,parent,Parent attribute containing all the metadata related to a request.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,215,Q_PROTO_UCP,Wap,ucp,Universal Computer Protocol,1,Q_UCP_TYPE,type,,string_index,Message type.,0,pkt,0,,,,, +,215,Q_PROTO_UCP,Wap,ucp,Universal Computer Protocol,2,Q_UCP_OPERATION,operation,,string_index,Operation name.,0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,796,Q_MPA_STREAM,stream,,buffer,Private attribute of the classification engine.,0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_mod,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_mod,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session_fix,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session_fix,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,1,Q_UDP_SRC_PORT_RANGE,src_port_range,,uint8,"Range of source port, defined by a minimum and a maximum.",0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,2,Q_UDP_DST_PORT_RANGE,dst_port_range,,uint8,"Range of destination port, defined by a minimum and a maximum.",0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,3,Q_UDP_CLIENT_PORT_RANGE,client_port_range,,uint8,"Range of client port, defined by a minimum and a maximum.",0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,4,Q_UDP_SERVER_PORT_RANGE,server_port_range,,uint8,"Range of server port, defined by a minimum and a maximum.",0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,5,Q_UDP_SRC_PORT16,src_port16,,uint16,Source port (16 bits).,0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,6,Q_UDP_DST_PORT16,dst_port16,,uint16,Destination Port (16 bits).,0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,7,Q_UDP_PORT,port,,uint8,Validates a source port or destination port. To be used in a filter.,0,pkt,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,8,Q_UDP_CNX_DURATION,cnx_duration,,timeval,Connection duration.,0,session_fix,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,9,Q_UDP_START_TIME,start_time,,timeval,Timestamp of the connection start time.,0,session_fix,0,,,,, +,216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,10,Q_UDP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0,,,,, +,4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,1,Q_UNKNOWN_SESSION_BUFFER,session_buffer,,buffer,Payload received from the beginning of the session.,1,session_mod,0,,,,, +,4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,2,Q_UNKNOWN_MAYBE_PROTOCOL,maybe_protocol,,parent,Parent attribute.,0,session_mod,0,,,,, +,4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,4,Q_UNKNOWN_MAYBE_APPLICATION_ID,maybe_application_id,,uint32,Possible application's ID for this flow.,0,session_mod,0,,,,, +,4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,3,Q_UNKNOWN_MAYBE_APPLICATION,maybe_application,,string,Possible application's name for this flow.,0,session_mod,0,,,,, +,4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,5,Q_UNKNOWN_MAYBE_FAMILY,maybe_family,,string,Protocol family of a possible application for this flow.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,866,Q_PROTO_USTREAM,Web,ustream,UStream,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,"Parent attribute of : contact_email, contact_alias.",0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Contact's mail address.,0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact's alias.,0,session_mod,0,,,,, +,304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,1,Q_VIADEO_GROUPE,groupe,,string,Contact's alias.,0,session_mod,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_prt,0,,,,, +,597,Q_PROTO_VIBER,Audio/Video,viber,viber,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),1,Q_VKONTAKTE_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),2,Q_VKONTAKTE_ACCOUNT_UID,account_uid,,string,User ID.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,1,Q_WEBSOCKET_WSFRAME,wsframe,,parent,"Parent attribute, containing the WebSocket frame.",0,session_mod,0,,,,, +,1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,2,Q_WEBSOCKET_RAW,raw,,buffer,WebSocket frame content.,1,session_prt,0,,,,, +,1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,3,Q_WEBSOCKET_OPCODE,opcode,,uint8,"Opcode"" field of WebSocket frame.""",0,session_prt,0,,,,, +,1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,4,Q_WEBSOCKET_MSG,msg,,buffer,"Payload"" field of the WebSocket frame.""",1,session_prt,0,,,,, +,1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for specific cases (example: File Transfer).",0,session_prt,0,,,,, +,1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,798,Q_MPA_SERVICE_INFO,service_info,,parent,"Parent entry for service information metadata. The service type is resolved by a statistical method (behavior analysis), with periodic revaluation. The revaluation period as well as other service detection parameters are modifiable using proto-tunes.",0,session_mod,0,,,,, +,1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,579,Q_MPA_PHONE_NUMBER,phone_number,,string,Caller phone number.,0,session_mod,0,,,,, +,1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,608,Q_MPA_VERSION,version,,string,Program version.,0,session_mod,0,,,,, +,222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,1111,Q_PROTO_WINDOWS_MARKETPLACE,Application Service,windows_marketplace,Windows Marketplace,1,Q_WINDOWS_MARKETPLACE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0,,,,, +,562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,1,Q_WINDOWS_UPDATE_PLATFORM,platform,,string,Indicating the Windows version using this update,0,session_fix,0,,,,, +,562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,2,Q_WINDOWS_UPDATE_KB,kb,,string,kb (Knowledge base) is a unique internal Microsoft number to identify different software and updates.,0,session_fix,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_mod,0,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1,,,,, +,223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,6,Q_WINMX_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,12,Q_WSP_REQUEST,request,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,1,Q_WSP_TID,tid,,uint8,Packet Identifier. (WSP over UDP).,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,2,Q_WSP_PDU_TYPE,pdu_type,,string,Message type.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,3,Q_WSP_PDU_CODE,pdu_code,,uint8,Message code.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,4,Q_WSP_URI,uri,,string,Complete name (path + filename) of a web resource.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,5,Q_WSP_CONNECT_RTT,connect_rtt,,timeval,Connection establishment time.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,6,Q_WSP_QUERY_RTT,query_rtt,,timeval,Elapsed time between a request and its response.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,7,Q_WSP_SERVER,server,,string,Server name.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client mobile name.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,9,Q_WSP_MIME_TYPE,mime_type,,string,Data type.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,17,Q_WSP_REQUEST_SIZE,request_size,,uint32,Contains the total length of the request or the response (including headers).,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,10,Q_WSP_REPLY_STATUS_CODE,reply_status_code,,uint8,Reply status code.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,11,Q_WSP_REPLY_STATUS_MSG,reply_status_msg,,string_index,Reply status code message.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,13,Q_WSP_PROFILE,profile,,string,A link for a full description of the used user_agent.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,14,Q_WSP_INDEX,index,,uint32,Identifier of the request and response in a WSP flow.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,15,Q_WSP_INDEX_CLIENT,index_client,,uint32,Identifier of the request in a WSP flow.,0,session_mod,0,,,,, +,224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,16,Q_WSP_INDEX_SERVER,index_server,,uint32,Identifier of the response in a WSP flow.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,7,Q_WTP_PDU,pdu,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,1,Q_WTP_PDU_TYPE,pdu_type,,string_index,Message type.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,2,Q_WTP_PDU_CODE,pdu_code,,uint8,Message code.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,3,Q_WTP_TID,tid,,uint16,Packet Identifier.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,4,Q_WTP_ABORT_TYPE,abort_type,,string_index,Connection abort type.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,5,Q_WTP_ABORT_REASON,abort_reason,,string_index,Connection abort reason.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,6,Q_WTP_RETRANSMISSION,retransmission,,uint8,Indicates if the packet is being retransmitted.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,8,Q_WTP_SEQ_NUMBER,seq_number,,uint8,A sequence number used in segmentation and reassembly.,0,session_mod,0,,,,, +,226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,9,Q_WTP_MISSING_PKTS,missing_pkts,,uint8,Indicate the missing packets.,0,session_mod,0,,,,, +,228,Q_PROTO_X25,Audio/Video,x25,X.25,1,Q_X25_CALLING_ADDR,calling_addr,,string,Calling station address.,0,session_mod,0,,,,, +,228,Q_PROTO_X25,Audio/Video,x25,X.25,2,Q_X25_CALLED_ADDR,called_addr,,string,Called station address.,0,session_mod,0,,,,, +,228,Q_PROTO_X25,Audio/Video,x25,X.25,3,Q_X25_PKT_TYPE,pkt_type,,string,Packet type.,0,session_mod,0,,,,, +,592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,1,Q_XDMCP_CLIENT_IP,client_ip,,ip_addr,Client IPv4 address.,0,session_mod,0,,,,, +,592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,2,Q_XDMCP_SERVER_IP,server_ip,,ip_addr,Server IPv4 address.,0,session_mod,0,,,,, +,592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,3,Q_XDMCP_SERVER_STATUS,server_status,,string,X11 server availability.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session_fix,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,1,Q_YAHOO_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,2,Q_YAHOO_GROUPS_GROUP_SHORT_DESCRIPTION,group_short_description,,string,Short group description.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,3,Q_YAHOO_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,1,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,4,Q_YAHOO_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,5,Q_YAHOO_GROUPS_GROUP_MEMBERSHIP,group_membership,,string,Group to which the user has subscribed.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,6,Q_YAHOO_GROUPS_SENDER_NICKNAME,sender_nickname,,string,"Message author's nickname, when reading a message.",0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,7,Q_YAHOO_GROUPS_MSG_NUMBER,msg_number,,uint32,Number of the posted message.,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_mod,0,,,,, +,233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,598,Q_MPA_REPLYTO,replyto,,string,"When posting, indicates is the recipient was only the author or the whole list.",0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,4,Q_YAHOO_MAPS_COUNTRY,country,,string,Location country value.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,3,Q_YAHOO_MAPS_CITY,city,,string,Location city value.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,2,Q_YAHOO_MAPS_STREET,street,,string,Location longitude value.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,6,Q_YAHOO_MAPS_LONGITUDE,longitude,,string,Location longitude value.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,5,Q_YAHOO_MAPS_LATITUDE,latitude,,string,Location latitude value.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,1,Q_YAHOO_MAPS_LOCATION,location,,parent,Parent attribute containing information about location researched.,0,session_mod,0,,,,, +,234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0,,,,, +,234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0,,,,, +,234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0,,,,, +,523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,4,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,5,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,3,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,2,Q_YANDEX_WEBMAIL_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,1,Q_YANDEX_WEBMAIL_THUMBNAIL,thumbnail,,uint8,Indicates whether this attachment is an image thumbnail(1) or not(0).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,2,Q_YMAIL2_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachement.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0,,,,, +,236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,1,Q_YMAIL_CLASSIC_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,1,Q_YMAIL_MOBILE_NEW_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session_mod,1,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,608,Q_MPA_VERSION,version,,string,The protocol version number used by the method.,0,session_fix,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,7,Q_YMSG_CLIENT_VERSION,client_version,,string,Client version.,0,session_fix,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,14,Q_YMSG_TIMESTAMP,timestamp,,timeval,Packet timestamp.,0,session_fix,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,643,Q_MPA_REQUEST,request,,parent,Parent attribute including a YMSG method and its service.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,555,Q_MPA_METHOD,method,,string_index,Name of the command sent.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,1,Q_YMSG_MSG_CODE,msg_code,,uint16,Contains the number of YMSG command.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,2,Q_YMSG_SESSIONID,sessionid,,uint32,Identification number of session.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,4,Q_YMSG_CLIENT_FIRSTNAME,client_firstname,,string,First name of the user.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,5,Q_YMSG_CLIENT_LASTNAME,client_lastname,,string,Last name of the user.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,6,Q_YMSG_CLIENT_COUNTRY,client_country,,string,Country of the user.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,3,Q_YMSG_CHANNEL,channel,,string,Chat room name.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,9,Q_YMSG_FILE_URL,file_url,,string,URL of the tranfered file.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,642,Q_MPA_FILEHASH,filehash,,string,Hash of transferred file.,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,8,Q_YMSG_CLIENT_LOCAL_IP,client_local_ip,,ip_addr,Client local ip.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,11,Q_YMSG_CHANNEL_NAME,channel_name,,string,Channel name,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session_prt,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,12,Q_YMSG_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,13,Q_YMSG_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session_mod,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_fix,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,15,Q_YMSG_TRANSFER_ID,transfer_id,,string,Transfer identifier.,0,session_fix,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,16,Q_YMSG_WEBCAM_BRAND,webcam_brand,,string,Webcam brand.,0,session_fix,0,,,,, +,237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,17,Q_YMSG_CONFERENCE_ID,conference_id,,string,room identifier for a given conference,0,session_mod,0,,,,, +,238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0,,,,, +,238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0,,,,, +,238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,642,Q_MPA_FILEHASH,filehash,x,string,File hash. This attribute is deprecated.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,1,Q_YMSG_TRANSFER_FILE_URL,file_url,,string,URL of the transferred file.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,5,Q_YMSG_TRANSFER_FILE_IDENTIFIER,file_identifier,x,string,File identifier. This attribute is deprecated.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,3,Q_YMSG_TRANSFER_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session_mod,0,,,,, +,255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,4,Q_YMSG_TRANSFER_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session_mod,0,,,,, +,239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0,,,,, +,239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,1,Q_YMSG_VIDEO_WEBCAM_BRAND,webcam_brand,,string,Brand of webcam.,0,session_fix,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,2,Q_YMSG_WEBMESSENGER_SESSIONID,sessionid,,string,Identification number of session.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,608,Q_MPA_VERSION,version,,string,Version number.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,604,Q_MPA_SERVICE,service,,string,Current service identification string.,0,session_prt,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,555,Q_MPA_METHOD,method,,string_index,Contains the description of YMSG command.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,1,Q_YMSG_WEBMESSENGER_MSG_CODE,msg_code,,string,Contains the number of YMSG command.,0,session_mod,0,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,643,Q_MPA_REQUEST,request,,parent,Contains the YMSG command.,0,session_mod,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,7,Q_YOUTUBE_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_fix,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,1,Q_YOUTUBE_URL,url,,string,Contains the url for embedded players,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,2,Q_YOUTUBE_DESCRIPTION,description,,string,Contains video description,1,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,3,Q_YOUTUBE_TAGS,tags,,string,Contains the tag list linked to the video,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,4,Q_YOUTUBE_VIDEOID,videoid,,string,Contains the unique identifier of the uploaded video,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,5,Q_YOUTUBE_TITLE,title,,string,Contains the video title,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,6,Q_YOUTUBE_NAMEVIEWER,nameviewer,,string,Contains the name of the user watching the video,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,555,Q_MPA_METHOD,method,,string,Contains the method used,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,769,Q_MPA_VIDEO_TOTALDURATION,video_totalduration,,uint32,Total duration of the video in seconds (not extracted).,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session_prt,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_mod,0,,,,, +,240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0,,,,, +,311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0,,,,, diff --git a/resources/Qosmos_Protocol_Bundle_Protobook_1.61.0_v1.0.xlsx b/resources/Qosmos_Protocol_Bundle_Protobook_1.90.0_v1.0.xlsx old mode 100755 new mode 100644 similarity index 51% rename from resources/Qosmos_Protocol_Bundle_Protobook_1.61.0_v1.0.xlsx rename to resources/Qosmos_Protocol_Bundle_Protobook_1.90.0_v1.0.xlsx index 6172655ce3300c..9793d79d262d27 Binary files a/resources/Qosmos_Protocol_Bundle_Protobook_1.61.0_v1.0.xlsx and b/resources/Qosmos_Protocol_Bundle_Protobook_1.90.0_v1.0.xlsx differ diff --git a/resources/Qosmos_Protocol_Bundle_Release_Notes_1.61.0_v1.0.pdf b/resources/Qosmos_Protocol_Bundle_Release_Notes_1.61.0_v1.0.pdf deleted file mode 100755 index 5a3423859d80d2..00000000000000 Binary files a/resources/Qosmos_Protocol_Bundle_Release_Notes_1.61.0_v1.0.pdf and /dev/null differ diff --git a/resources/Qosmos_Protocol_Bundle_Release_Notes_1.90.0_v1.0.pdf b/resources/Qosmos_Protocol_Bundle_Release_Notes_1.90.0_v1.0.pdf new file mode 100644 index 00000000000000..215058b7b6bc29 Binary files /dev/null and b/resources/Qosmos_Protocol_Bundle_Release_Notes_1.90.0_v1.0.pdf differ diff --git a/resources/Qosmos_Protocols.csv b/resources/Qosmos_Protocols.csv index 72e24f440a2887..c94407991a124e 100755 --- a/resources/Qosmos_Protocols.csv +++ b/resources/Qosmos_Protocols.csv @@ -1,2174 +1,2199 @@ -,,,,,,,,,,Classification,,,,,,Offloading,,,,,Tags,,,,,,,,,,,,,,,,,,,,,,,,, -id,protocol_id_name,name,deprecated,longname,description,family,layer_below,supported version,Last checked versions,explicit,PDATA Signature(s),ip,pattern,correlation,Port based classification over SSL,tunneling,multiplexing,signalization,inheritance,declassification,basic,networking,email,webmail,im_mc,chat,audio_chat,video_chat,file_transfer,social_network,voip,web,web_search,web_ecom,web_sites,mobile,p2p,file_mngt,db,enterprise,update,gaming,aaa,remote_access,mm_streaming,vpn_tun -948,Q_PROTO_01NET,01net,,01net.com,This protocol plug-in classifies the http traffic to the host 01net.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1123,Q_PROTO_050PLUS,050plus,,050 plus,050 plus is a Japanese embedded smartphone application dedicated to audio-conferencing.,Audio/Video,http;https;sip;ssl,2.0.4,Mobile-Android-050Plus-2.1.5- (2012-05-30);iPhone-iOS-5.0.1-050Plus-2.0.4- (2012-05-30),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,,,,,,,,,,, -584,Q_PROTO_0ZZ0,0zz0,,0zz0.com,"0zz0 is an online solution to store, send and share files",Web,http;https,20101216,PC-Windows-Chromium- (2010-12-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1339,Q_PROTO_10050NET,10050net,,10050.net,China Railcom group web portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -949,Q_PROTO_10086CN,10086cn,,10086.cn,This protocol plug-in classifies the http traffic to the host 10086.cn. It also classifies the ssl traffic to the Common Name 10086.cn.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1336,Q_PROTO_104COM,104com,,104.com,Web site dedicated to job research.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1338,Q_PROTO_1111TW,1111tw,,1111.com.tw,Website dedicated to job research in Taiwan.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -950,Q_PROTO_114LA,114la,,114la.com,This protocol plug-in classifies the http traffic to the host 114la.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -951,Q_PROTO_115COM,115com,,115.com,This protocol plug-in classifies the http traffic to the host 115.com. It also classifies the ssl traffic to the Common Name 115.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -952,Q_PROTO_118114CN,118114cn,,118114.cn,This protocol plug-in classifies the http traffic to the host 118114.cn.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1191,Q_PROTO_11ST,11st,,11st.co.kr,This protocol plug-in classifies the http traffic to the host 11st.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -953,Q_PROTO_123PEOPLE,123people,,123people.com,This protocol plug-in classifies the http traffic to the host 123people.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1700,Q_PROTO_1337X,1337x,,1337x.org,Bittorrent tracker search engine,Peer to Peer,http;https,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1819,Q_PROTO_15MIN,15min,,15min.lt,Lithuanian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1242,Q_PROTO_163COM,163com,,163.com,This protocol plug-in classifies the http traffic to the host 163.com. It also classifies the ssl traffic to the Common Name .163.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1340,Q_PROTO_17173COM,17173com,,17173.com,Website distributing Chinese games.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1341,Q_PROTO_17U,17u,,17u.com,Chinese online travel booking website.,Web,http;https,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2017,Q_PROTO_20MIN,20min,,20min.ch,Swiss news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1820,Q_PROTO_24H,24h,,24h.com.vn,Vietnamese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1821,Q_PROTO_24ORA,24ora,,24ora.com,Aruban news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1822,Q_PROTO_24SATA,24sata,,24sata.hr,Croatian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1823,Q_PROTO_24UR,24ur,,24ur.com,Slovenian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1316,Q_PROTO_2CH,2ch,,2ch.net,Japanese adult videos web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -266,Q_PROTO_2SHARED,2shared,,2shared.com,2shared is an online space for sharing and storage.,Web,http;https,20090312,PC-Windows-- (2009-07-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1248,Q_PROTO_360BUY,360buy,x,360buy.com,This protocol plug-in classified the http traffic to the host 360buy.com.,Web,,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1255,Q_PROTO_360CN,360cn,,360.cn,This protocol plug-in classifies the http traffic to the host 360.cn.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1437,Q_PROTO_3GPP_LI,3gpp_li,,3GPP LI,3gpp_li is a protocol which form a standard for telecoms operators and networks operators.,Tunneling,base,33.108 7.3.0,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -606,Q_PROTO_3PC,3pc,,Third Party Connect,The 3pc protocol (Third Party Connect Protocol) is found over the IP layer (IANA protocol number: 34).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1269,Q_PROTO_4399COM,4399com,,4399.com,This protocol plug-in classifies the http traffic to the host 4399.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -267,Q_PROTO_4SHARED,4shared,,4shared.com,4shared is an online space for sharing and storage.,Web,http;https;ssl,PC-Windows-Browser-www.4shared.com (2014-02-20);PC-Windows-4shared 4.0.3.1 (2014-01-17);Mobile-Android-4shared 2.2.1 (2014-02-10);iPhone-iOS-4shared 1.8.0 (2014-01-15);Symbian-4shared 2.10.S.05 (2014-02-19);Windows Phone-Windows Phone OS 8-4shared 1.5 (2014-02-11);BlackBerry-BlackBerry OS-4shared 1.4.1.5 (2014-02-27);Mac-Mac OS-4shared 1.3 (2014-02-17);PC-Linux-4shared 1.3 (2014-02-17),BlackBerry-Blackberry 9320-BlackBerry OS-7.1.0.907-4shared-1.4.1.5- (2014-06-12);BlackBerry-Blackberry 9320-BlackBerry OS-7.1.0.907-4shared-1.4.1.5-KR (2014-06-12);Mac-Mac OS-4shared-1.3- (2014-02-17);Mac-Mac OS-4shared-1.3-KR (2014-02-19);Mobile-Moto G-Android-4.4.2-4shared-2.4.4- (2014-04-14);Mobile-Moto G-Android-4.4.2-4shared-2.4.4-KR (2014-04-14);Nokia Mobile-Nokia Asha 311-Symbian-4shared-0.4.8- (2014-06-09);Nokia Mobile-Symbian-4shared-2.10.S.05-KR (2014-03-05);PC-Linux-4shared-1.3- (2014-02-17);PC-Linux-4shared-1.3-KR (2014-02-18);PC-Windows-4shared-4.0.3.1-KR (2014-01-09);PC-Windows-7-4shared-4.0.3.1- (2014-01-17);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-13);Windows Phone-Windows Phone OS-8-BoxFiles 4Shared Free-1.5- (2014-03-24);Windows Phone-Windows Phone OS-8-BoxFiles 4Shared Free-1.5-KR (2014-03-25);iPhone-4S-iOS-7.1.1-4shared-2.6.0.68- (2014-06-11);iPhone-4S-iOS-7.1.1-4shared-2.6.0.68-KR (2014-06-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1505,Q_PROTO_51_COM,51_com,,51.com,"Provide social networking applications ( http://www.51.com ), IM, music, photo albums.",Web,http;https,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1508,Q_PROTO_51_COM_BBS,51_com_bbs,,51.com BBS,"BBS, Forum ( bbs.51.com )",Web,51_com,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1506,Q_PROTO_51_COM_MUSIC,51_com_music,,51.com Music,Music streaming ( http://music.51.com ),Web,51_com,20130715,10/17/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1507,Q_PROTO_51_COM_POSTING,51_com_posting,,51.com Posting,Collaboration web site ( http://home.51.com/posting ),Web,51_com,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1278,Q_PROTO_51JOB,51job,,51job.com,This protocol plug-in classifies the http traffic to the host 51job.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1277,Q_PROTO_51LA,51la,,51.la,This protocol plug-in classifies the http traffic to the host 51.la.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1259,Q_PROTO_56COM,56com,,56.com,This protocol plug-in classifies the http traffic to the host 56.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1257,Q_PROTO_58COM,58com,,58.com,This protocol plug-in classifies the http traffic to the host 58.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1337,Q_PROTO_591TW,591tw,,591.com.tw,Taiwanese real estate web site.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2292,Q_PROTO_6PLAY,6play,,6play,French mobile application provifing tv live broadcast and catchup TV.,Audio/Video,apple_hls;http;https,iPhone-iOS;Mobile-Android,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, -1342,Q_PROTO_7K7K,7k7k,,7k7k.com,Chinese game portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -7,Q_PROTO_8021Q,8021q,,802.1Q Ethernet VLAN,802.1Q is a protocol which allows sending VLAN membership information of a frame.,Network Service,eth,8021q,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1290,Q_PROTO_802_11,802_11,,802.11,The 802.11 protocol is used to carry data (at MAC level) on IEEE 802.11 Wireless Local Area Networks.,Network Service,capwap,IEEE 802.11,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1335,Q_PROTO_91COM,91com,,91.com,The TQ game entertainment portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -2081,Q_PROTO_999_MD,999_md,,999.md,Moldavian classified ads,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1343,Q_PROTO_9GAME,9game,,9game.com,Chinese game distribution platform.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2208,Q_PROTO_A_DAKAR,a_dakar,,A.dakar,Senegalese news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2225,Q_PROTO_AASTOCKS,aastocks,,Aastocks,Chinese financial services and stock market website,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1690,Q_PROTO_ABC,abc,,ABC Bittorrent client,ABC is a Bittorrent client based on BitTornado,Peer to Peer,bittorrent;http;https,3.1,PC-Windows-ABC-3.1- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1824,Q_PROTO_ABC_NEWS,abc_news,,ABC.com.py,Paraguayan news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -954,Q_PROTO_ABCNEWS,abcnews,,ABCNews.go.com,This protocol plug-in classifies the http traffic to the hosts abcnews.com and abcnews.go.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1825,Q_PROTO_ABIDJAN,abidjan,,Abidjan.net,Cote d Ivoire news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2018,Q_PROTO_ABOLA,abola,,Abola.pt,Portugese sports news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -955,Q_PROTO_ABOUT,about,,About.com,This protocol plug-in classifies the http traffic to the host about.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1826,Q_PROTO_ABV,abv,,Abv.bg,Bulgarian webmail,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -956,Q_PROTO_ACCUWEATHER,accuweather,,AccuWeather.com,This protocol plug-in classifies the http traffic to the host accuweather.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -957,Q_PROTO_ACER,acer,,Acer.com,This protocol plug-in classifies the http traffic to the host acer.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -958,Q_PROTO_ACROBAT,acrobat,,Acrobat.com,This protocol plug-in classifies the http traffic to the host www.acrobat.com. It also classifies the ssl traffic to the Common Name www.acrobat.com.,Web,http;https,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -939,Q_PROTO_ACSE,acse,,Association Control Service,ISO 8650-1/X.227 OSI Association Control SErvice (ACSE).,Network Service,pp,ISO 8650-1/X.227,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -607,Q_PROTO_ACTIVENET,activenet,,Active Networks,The activenet protocol (Active Networks) is found over the IP layer (IANA protocol number: 107).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -911,Q_PROTO_ACTIVESYNC,activesync,,Microsoft ActiveSync,"Microsoft ActiveSync is a mobile data synchronization technology and protocol developed by Microsoft, originally released in 1996.",Web,rpc,20110209,8/2/2011,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1438,Q_PROTO_ADC,adc,,Advanced Direct Connect,ADC is a peer-to-peer protocol widely used in Direct Connect networks. It superseeds the protocol NMDC and corrects many flaws identified in this older protocol.,Peer to Peer,socks4;socks5;ssl;tcp;udp,DC++ v0.830 (ADC 1.0.3),2/28/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1782,Q_PROTO_ADCASH,adcash,,Adcash Advertising Network,Adcash is an international Ad network providing Internet publishers,Web,http;https;ssl,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -960,Q_PROTO_ADDICTINGGAMES,addictinggames,,Addictinggames.com,This protocol plug-in classifies the http traffic to the host addictinggames.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2231,Q_PROTO_ADDTHIS,addthis,,AddThis,AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.,Web,http;https;ssl,PC-Windows-Browser-http://www.addthis.com/ (2014-06-17),PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -758,Q_PROTO_ADNSTREAM,adnstream,,ADNStream.tv,This protocol plug-in classifies the ssl traffic to the Common Name adnstream.tv.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2280,Q_PROTO_ADOBE,adobe,,Adobe,Adobe Systems is a computer software company. It develops graphic designer software and Andio and Video editing and visual effects. This plug-in classifies traffic to the website.,Web,http;https;ssl,20140513,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -929,Q_PROTO_ADOBE_CONNECT,adobe_connect,,Adobe Connect,"Adobe Connect is a web communication system for the training, the marketing, the conferences and the online collaboration.",Audio/Video,http;https;rtmp;ssl,Adobe connect 8;20130830,10/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -759,Q_PROTO_ADOBE_MEETING_RC,adobe_meeting_rc,,Adobe Meeting Remote Control,"This protocol plug-in classifies the http traffic to the hosts connectpro97286496.emea.acrobat.com, connectpro97286496.adobeconnect.com and www.emea.acrobat.com. It also classifies the ssl traffic to the Common Name emea.acrobat.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,x,,,,,,, -1556,Q_PROTO_ADOBE_ONLINE_OFFICE,adobe_online_office,,Adobe online office,Online collaborative office. ( http://www.acrobat.com/main/fr_FR/home.html ),Web,https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -549,Q_PROTO_ADOBE_UPDATE,adobe_update,,Adobe Update Manager,The Adobe Update Manager is a program which maintains up-to-date versions of Adobe Acrobat Reader software.,Web,http;https;ssl,PC-Windows-Adobe Reader 10.1.8,Mac-Mac OS-10.9.2-Adobe Reader-11.0.06- (2013-11-06);PC-Windows-Adobe Reader-11.0.07- (2013-11-06),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -760,Q_PROTO_ADRIVE,adrive,,Adrive.com,This protocol plug-in classifies the http traffic to the host adrive.com. It also classifies the ssl traffic to the Common Name adrive.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1794,Q_PROTO_ADSERVERPLUS,adserverplus,,Adserverplus,Online advertisement,Web,http;https,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -961,Q_PROTO_ADULTADWORLD,adultadworld,,AdultAdWorld.com,This protocol plug-in classifies the http traffic to the host adultadworld.com.,Web,http;https,PC-Windows-Browser-www.adultadworld.com (2013-07-13),6/7/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -962,Q_PROTO_ADULTFRIENDFINDER,adultfriendfinder,,AdultFriendFinder.com,This protocol plug-in classifies the http traffic to the host adultfriendfinder.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -357,Q_PROTO_ADVOGATO,advogato,,Advogato.org,This protocol plug-in classifies the http traffic to the host advogato.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1827,Q_PROTO_AFTONBLADET,aftonbladet,,Aftonbladet.se,Swedish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -963,Q_PROTO_AGAME,agame,,Agame.com,This protocol plug-in classifies the http traffic to the host agame.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -720,Q_PROTO_AH,ah,,Authentication Header,The ah protocol (Authentication Header) is found over the IP layer (IANA protocol number: 51).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -964,Q_PROTO_AIAIGAME,aiaigame,,AiAiGame.com,This protocol plug-in classifies the http traffic to the host aiaigame.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -2185,Q_PROTO_AIB,aib,,Aib,Irish banking website,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1344,Q_PROTO_AILI,aili,,Aili.com,Chinese fashion shopping website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -8,Q_PROTO_AIM,aim,,AOL Instant Messenger (formerly OSCAR),AIM (originally AOL Instant Messenger) is an instant messaging application. The protocol name is OSCAR (Open System for CommunicAtion in Realtime) and is used in both ICQ and AIM services. [Note: aim is also known as oscar.],Instant Messaging,http;https;rtmp;scorecardresearch;tcp,PC-Windows-Aim 8.0;PC-Windows-Aim 7.5.9;PC-Windows 7-Pidgin 2.10.7 (2013-07-25),Mac-Mac OS-AIM-8.0.5.2- (2014-01-21);Mobile-Moto G-Android-4.4.2-AIM-2.7.5.5- (2014-05-04);PC-Windows-7-AIM-8.0.7.1- (2014-04-12);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-04);PC-Windows-Pidgin-2.10.7- (2013-07-25);iPhone-iOS-7.1.1-AIM-5.1.6.5- (2014-05-04),,x,,x,,,,,x,x,x,,,,,x,x,,,x,,,,,,,,,,,,,,,,, -275,Q_PROTO_AIM_EXPRESS,aim_express,,AIM express,"AOL Instant Messaging Express supports many of the standard features included in AIM, but does not provide advanced features like file transfer, audio chat or video conferencing",Instant Messaging,http;https;ssl,v0.1,10/15/2012,,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, -245,Q_PROTO_AIM_TRANSFER,aim_transfer,,AIM Transfer,AIM is an instant messaging protocol,File Transfer,tcp,<=6.5,10/2/2008,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -1239,Q_PROTO_AIMINI,aimini,,Aimini.net,"Aimini is an online solution to store, send and share files.",File Server,http;https,20120802,PC-Windows-Chrome-21.0.1180.89m- (2014-06-07);PC-Windows-Internet Explorer-8.0.7600- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,x,,,,,,,, -281,Q_PROTO_AIMS,aims,,Secure AIM,AIMS is the secure version of AIM.,Instant Messaging,http;https;ssl,aimv7,6/10/2011,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -2196,Q_PROTO_AIR_VIDEO,air_video,,Air Video,"Air Video can stream videos to your iPhone, iPad and iPod touch.",Audio/Video,apple_hls;http;https,iPhone-iOS (2014-03-19),iPhone-iOS-Air Video-2.4.16- (2014-03-21),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, -761,Q_PROTO_AIRAIM,airaim,,AirAIM.com,This protocol plug-in classifies the http traffic to the host airaim.com. It also classifies the ssl traffic to the Common Name airaim.com.,Instant Messaging,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1268,Q_PROTO_AIZHAN,aizhan,,Aizhan.com,This protocol plug-in classifies the http traffic to the host aizhan.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1284,Q_PROTO_AKAMAI,akamai,,Akamai Technologies CDN,"This protocol plug-in classifies the http traffic to the hosts akamai.net, akamaihd.net, akamaiedge.net, edgesuite.net, edgekey.net and srip.net. It also classifies the ssl traffic to the Common Names akamai.net and akamaihd.net.",Web,http;https;ssl,20121025,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2214,Q_PROTO_AKINATOR,akinator,,Akinator the Genie,Mobile game.,Game,google_ads;http;https,Mobile-Android;iPhone-iOS,Mobile-Android-Akinator the Genie-2.45- (2014-03-27);iPhone-iOS-Akinator the Genie-2.4.1- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1828,Q_PROTO_AKTUALITY,aktuality,,Aktuality.sk,Slovak news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2019,Q_PROTO_ALAKHBAR,alakhbar,,Alakhbar.info,Mauritanian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2265,Q_PROTO_ALBAWABHNEWS,albawabhnews,,Albawabhnews,Egyptian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -965,Q_PROTO_ALEXA,alexa,,Alexa.com,This protocol plug-in classifies the http traffic to the host alexa.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1829,Q_PROTO_ALFAJERTV,alfajertv,,Alfajertv.com,Palestinian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1258,Q_PROTO_ALIBABA,alibaba,,Alibaba.com,Alibaba is the world largest online business-to-business trading platform for small businesses.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2020,Q_PROTO_ALIEXPRESS,aliexpress,,AliExpress.com,Chinese ecommerce website,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1275,Q_PROTO_ALIMAMA,alimama,,Alimama.com,This protocol plug-in classifies the http traffic to the host alimama.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1250,Q_PROTO_ALIPAY,alipay,,Alipay.com,This protocol plug-in classifies the http traffic to the host alipay.com. It also classifies the ssl traffic to the Common Name alipay.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -966,Q_PROTO_ALJAZEERA,aljazeera,,AlJazeera.net,This protocol plug-in classifies the http traffic to the host aljazeera.net.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -762,Q_PROTO_ALL_SLOTS_CASINO,all_slots_casino,,All Slots Casino,This protocol plug-in classifies the http traffic to the host setup.realgaming.com.,Game,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1830,Q_PROTO_ALLEGRO,allegro,,Allegro.pl,Polish shopping web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2003,Q_PROTO_ALLMUSIC,allmusic,,AllMusic.com,"Allmusic is an online music guide service website. This plug-in classifies navigation on the AllMusic web service, and MP3 music playback. Video clip streaming is handled by youtube.",Audio/Video,http;https,20131211,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -967,Q_PROTO_ALLOCINE,allocine,,AlloCine.fr,This protocol plug-in classifies the http traffic to the host allocine.fr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1831,Q_PROTO_ALMANAR,almanar,,AlManar.com,Lebanese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2264,Q_PROTO_ALMASRYALYOUM,almasryalyoum,,Almasryalyoum,Egyptian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1832,Q_PROTO_ALNILIN,alnilin,,Alnilin.com,Sudanese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1833,Q_PROTO_ALRAKOBA,alrakoba,,Alrakoba.net,Sudanese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -897,Q_PROTO_ALTIRIS,altiris,,Altiris,Altiris provides service-oriented management solutions which allow managing IT infrastructures.,Network Management,http;https;tcp,Altiris Client Management Suite 7.1,6/28/2011,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -2021,Q_PROTO_ALWAKEELNEWS,alwakeelnews,,Alwakeelnews.com,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1834,Q_PROTO_ALWATANVOICE,alwatanvoice,,Alwatanvoice.com,Palestinian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -968,Q_PROTO_AMAZON,amazon,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the generic http trafic to Amazon services.,Web,http;https;ssl,PC-Windows-Browser-www.amazon.com (2012-10-25);Windows Phone-Windows Phone OS-Amazon 2.2.82.13 (2014-02-25),BlackBerry-BlackBerry OS-10.2.1.195-Search for Amazon-1.4.9.1- (2014-04-23);Mobile-Android-4.4.2-Amazon-2.9.8- (2014-05-19);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);PC-Windows-8-Amazon-3.0.1.3- (2014-05-26);Windows Phone-Windows Phone OS-8-Amazon Mobile-2.2.82.13- (2014-02-25);iPhone-iOS-7.0.6-Amazon-3.3.0- (2014-04-23),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2207,Q_PROTO_AMAZON_ADSYSTEM,amazon_adsystem,,Amazon Adsytem,This protocol plug-in classifies the trafic related to Amazon adsystem services.,Web,amazon,20140225,PC-Linux-BasicTest- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1183,Q_PROTO_AMAZON_AWS,amazon_aws,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the http trafic coming from the Amazon content delivery network.,Web,http;https;ssl,20121025,PC-Linux-BasicTest- (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1167,Q_PROTO_AMAZON_MP3,amazon_mp3,,Amazon MP3,Amazon MP3 is an online music store owned and operated by Amazon.com.,Web,amazon;llnwd,20120530,PC-Windows-Firefox- (2012-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1240,Q_PROTO_AMAZON_VIDEO,amazon_video,,Amazon Video,Amazon Video is an online video on demand service owned and operated by Amazon.com.,Web,amazon;rtmp,20130620,PC-Windows-Firefox- (2013-07-01),,x,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1835,Q_PROTO_AMBEBI,ambebi,,Ambebi.ge,Georgian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1312,Q_PROTO_AMEBA,ameba,,Ameba.jp,Japanese web portal for teenagers,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -969,Q_PROTO_AMERICANEXPRESS,americanexpress,,AmericanExpress.com,This protocol plug-in classifies the http traffic to the host americanexpress.com. It also classifies the ssl traffic to the Common Name americanexpress.com.,Web,http;https;ssl,20120930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -358,Q_PROTO_AMIE_STREET,amie_street,,AmieStreet.com,This protocol plug-in classifies the http traffic to the host amiestreet.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2272,Q_PROTO_AMJILT,amjilt,,Amjilt,Mongolian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2269,Q_PROTO_AMMONNEWS,ammonnews,,Ammonnews,Jordanian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -9,Q_PROTO_AMQP,amqp,,Advance Message Queuing Protocol,AMQP (Advanced Message Queuing Protocol) is an open standard application layer protocol for message-oriented middleware,Middleware,tcp,0.8;0.9,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -2242,Q_PROTO_ANGRY_BIRDS,angry_birds,,Angry Birds,Angry Birds is a mobile game edited by Rovio.,Game,http;https,iPhone-iOS;Mobile-Android,PC-Linux-BasicTest- (2014-05-15),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1702,Q_PROTO_ANIMEBW,animebw,,AnimeBW Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -359,Q_PROTO_ANOBII,anobii,,aNobii.com,This protocol plug-in classifies the http traffic to the host anobii.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -970,Q_PROTO_ANSWERS,answers,,Answers.com,This protocol plug-in classifies the http traffic to the host answers.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1691,Q_PROTO_ANTS_P2P,ants_p2p,,ANts P2P client,Ants is a distributed P2P client.,Peer to Peer,https;ssl,v1.6.0 Beta - Protocol 1.0.0,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -727,Q_PROTO_ANY_0HOP,any_0hop,,Any 0-hop,The any_0hop protocol (Any 0-hop protocol) is found over the IP layer (IANA protocol number: 114).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1751,Q_PROTO_ANZ,anz,,Australia and New Zealand Banking Group,"Offers home, car, and business loans, as well as internet banking, and insurance.",Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1345,Q_PROTO_ANZHI,anzhi,,Anzhi.com,Chinese mobile device games and forums.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -2209,Q_PROTO_AOL,aol,,Aol,This protocol plug-in classifies the trafic related to the AOL portal.,Web,http;https;ssl,,PC-Linux-BasicTest- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2257,Q_PROTO_AOL_ON,aol_on,,Aol.On,AOL On is a video streaming web site.,Audio/Video,http;https;ssl,20131218,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2022,Q_PROTO_APA,apa,,APA.az,Azerbaijani news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2226,Q_PROTO_APARAT,aparat,,Aparat,Iranian multimedia website,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1118,Q_PROTO_APNS,apns,,Apple Push Notification Service,Apple Push Notification Service is an Apple service which forwards notifications from the servers of third party applications to iOS devices.,Application Service,https;ssl,iPhone-iOS 7.0.3,iPhone-iOS-7.1.1-iMessage-7.1.1- (2014-05-06),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -10,Q_PROTO_APOLLO,apollo,,Apollo Domain:XEROX,Apollo is the routing protocol implemented natively in Apollo workstations.,Routing,8021q;eth;snap,Apollo v1,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -2082,Q_PROTO_APOLLO_LV,apollo_lv,,Apollo.lv,Latvian news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1346,Q_PROTO_APPCHINA,appchina,,APPChina.com,Chinese Android application market.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -306,Q_PROTO_APPLE,apple,,Apple.com,This protocol plug-in classifies the http traffic to the host www.apple.com. It also classifies the ssl traffic to the Common Name apple.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1688,Q_PROTO_APPLE_AIRPLAY,apple_airplay,,Apple Airplay,Apple airplay is a protocol for display picture and video to a connected tv from a device connected to the same private network,Audio/Video,http;https;tcp;udp,Airplay 160.10,Mac-Mac OS-Reflector-1.5.4- (2013-10-04);PC-Windows-AirServer-1.9.1.0- (2013-10-04);PC-Windows-Reflector-1.2.6- (2013-10-04),,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -946,Q_PROTO_APPLE_AIRPORT,apple_airport,,Apple Airport,Apple Airport is a protocol aiming to configure a wireless device.,Web,http;https;tcp,Apple Airport,10/24/2011,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, -1689,Q_PROTO_APPLE_AIRPRINT,apple_airprint,,Apple AirPrint,Apple Airprint is a network printing feature for Apple systems. It's based on the Dns Service Discovery protocol and IPP(needs URF format support).,Printer,ipp,ios 6,Mac-Mac OS-Printopia-2.1.10- (2013-10-04),x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1799,Q_PROTO_APPLE_HLS,apple_hls,,Apple HTTP Live Streaming,Apple implementation of the HTTP Live Streaming IETF draft. Used on Apple iOS devices.,Audio/Video,http;https,"draft-pantos-http-live-streaming-11,iOS 3.x and more",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1500,Q_PROTO_APPLE_MAPS,apple_maps,,Apple Maps,Apple Maps is a proprietary map application for iOS 6 devices.,Web,http;https,iOS 6.0,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1481,Q_PROTO_APPLE_SIRI,apple_siri,,Apple SIRI,Advanced voice recognition system used on some Apple iPhone devices.,Web,https;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -563,Q_PROTO_APPLE_UPDATE,apple_update,,Apple Update,Apple_update is the protocol used for apple softwares updates.,Web,http;https;ssl,Mac-Mac OS 10.6-Apple Software Update;PC-Windows 7-Apple Software Update,"Mac-Mac OS-10.9-Safari-7.0.3- (2014-02-28);PC-Windows-7-QuickTime-7.7.5- (2014-02-28);PC-Windows-7-iTunes-11.2.2""- (2014-06-11)",,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1347,Q_PROTO_APPLEDAILY,appledaily,,AppleDaily.com.tw,Taiwanese news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -566,Q_PROTO_APPLEJUICE,applejuice,,AppleJuice,AppleJuice is a peer-to-peer file exchange protocol similar to E-Donkey.,Peer to Peer,tcp,0.31,4/16/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1348,Q_PROTO_APPSHOPPER,appshopper,,AppShopper.com,"Mac Apps, Mac App Store, iPad, iPhone and iPod touch app store listings, news, and price drops.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1106,Q_PROTO_APPSTORE,appstore,,Apple App Store,The Apple App Store is a digital application distribution platform for iOS developed and maintained by Apple Inc.,Application Service,itunes,PC-Windows (2014-01-13);iPhone-iOS 7.0.4 (2014-01-13),PC-Windows-7-Chrome-35.0.1916.114- (2014-06-02);iPhone-iOS-7.1.1-- (2014-04-29),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1836,Q_PROTO_APROD,aprod,x,Aprod.hu (now Olx.hu),Hungarian free classifieds website,Web,,20140515,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2187,Q_PROTO_ARABIAWEATHER,arabiaweather,,Arabiaweather,Jordanian meteorological portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -564,Q_PROTO_ARCHIVE,archive,,Archive.org,"Archive.org is building a digital library of Internet sites and other cultural artifacts in digital form. Like a paper library, Archive.org provides free access to researchers, historians, scholars, and the general audience.",Web,http;https;ssl,20110913,PC-Windows-Chrome- (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -272,Q_PROTO_ARES,ares,,Ares,Ares is a peer-to-peer protocol.,Peer to Peer,socks4;socks5;spid;tcp;udp,PC-Linux ubuntu 12.04.1 LTS-ares 2.2.4.3048 (2014-02-27),PC-Linux-Ares Galaxy-2.2.4.3048- (2014-03-04);PC-Windows-Ares Galaxy-2.2.8.3052- (2014-05-20),,,,x,ares,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -608,Q_PROTO_ARGUS,argus,,ARGUS,The argus protocol (ARGUS) is found over the IP layer (IANA protocol number: 13).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -609,Q_PROTO_ARIS,aris,,ARIS,The aris protocol (ARIS) is found over the IP layer (IANA protocol number: 104).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -971,Q_PROTO_ARMORGAMES,armorgames,,Armorgames.com,This protocol plug-in classifies the http traffic to the host armorgames.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -2156,Q_PROTO_ARMORGAMES_PLAY,armorgames_play,,Armorgames Game Play,"This signature detects requests to play games on ArmorGames.com, an on-line, flash-based video game site. Users can play simple video games for free.",Web,http;https,20110930,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -11,Q_PROTO_ARP,arp,,Address Resolution Protocol,The ARP protocol is used to determine the MAC Address of a PC for which the IP address is known.,Network Service,8021q;eth;gre;llc;snap,ARP IP v4,7/4/2008,x,,,,,,,x,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1192,Q_PROTO_ASIAE,asiae,,Asiae.co.kr,This protocol plug-in classifies the http traffic to the host asiae.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1703,Q_PROTO_ASIANDVDCLUB,asiandvdclub,,AsianDVDClub.org,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -283,Q_PROTO_ASK,ask,,Ask.com,This protocol plug-in classifies the http traffic to the host .ask.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2083,Q_PROTO_ASK_FM,ask_fm,,Ask.fm,International Social network,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -360,Q_PROTO_ASMALLWORLD,asmallworld,,ASmallWorld.net,This protocol plug-in classifies the http traffic to the host asmallworld.net.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2010,Q_PROTO_ASPROXY,asproxy,,ASProxy,"ASProxy is a free and open-source web proxy which allows the user to surf the net anonymously. This plug-in classifies the usage of this proxy for web browsing, as a fallback to other recognized applications/protocols.",Tunneling,http;https,ASProxy Server 5.5.0,PC-Windows-ASProxy-5.5.0- (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -12,Q_PROTO_ATALK,atalk,,AppleTalk,"The AppleTalk Protocol Suite implements services for routing, file transfer, printer sharing and emails in Apple environments.",Network Service,8021q;eth;gre;snap,AppleTalk v60.0a6,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -361,Q_PROTO_ATHLINKS,athlinks,,Athlinks.com,This protocol plug-in classifies the http traffic to the host athlinks.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2023,Q_PROTO_ATLASINFO,atlasinfo,,Atlasinfo.info,Mauritanian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -972,Q_PROTO_ATT,att,,ATT.com (AT&T),This protocol plug-in classifies the http traffic to the host att.com. It also classifies the ssl traffic to the Common Name att.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1322,Q_PROTO_ATWIKI,atwiki,,Atwiki.jp,Japanese web site design service and wiki hosting,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1229,Q_PROTO_AUCTION,auction,,Auction.co.kr,This protocol plug-in classifies the http traffic to the host www.auction.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -973,Q_PROTO_AUFEMININ,aufeminin,,Aufeminin.com,This protocol plug-in classifies the http traffic to the host aufeminin.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1334,Q_PROTO_AUONE,auone,,Auone.jp,Multi services web portal owned by KDDI,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -363,Q_PROTO_AVATARS_UNITED,avatars_united,,AvatarsUnited.com,This protocol plug-in classifies the http traffic to the host avatarsunited.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2024,Q_PROTO_AVAZ,avaz,,Avaz.ba,Croatian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1755,Q_PROTO_AVG,avg,,AVG.com,Antivirus and security software products for home and business users.,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -714,Q_PROTO_AVG_UPDATE,avg_update,,Avg Update,Avg_update is the protocol used for AVG softwares updates.,Web,http;https,AVG Antivirus 2011,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -604,Q_PROTO_AVIRA_UPDATE,avira_update,,Avira Update,Avira_update is the protocol used for Avira softwares updates.,Web,http;https,Avira AntiVir Premium V10,3/14/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1800,Q_PROTO_AVITO_MA,avito_ma,,Avito.ma,Free Moroccan classified ads,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1801,Q_PROTO_AVITO_RU,avito_ru,,Avito.ru,Free russian classified ads,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -353,Q_PROTO_AVOIDR,avoidr,,Avoidr.com,This protocol plug-in classifies the http traffic to the host avoidr.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1837,Q_PROTO_AVTO,avto,,Avto.net,Slovenian vehicle related classifieds,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -723,Q_PROTO_AX25,ax25,,AX.25 Frames,The ax25 protocol (AX.25 Frames) is found over the IP layer (IANA protocol number: 93).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1509,Q_PROTO_AXIFILE,axifile,,AxiFile.com,AXifile is a file sharing service. ( http://www.axifile.com ),Web,http;https,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1838,Q_PROTO_AZET,azet,,Azet.sk,Slovak web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1839,Q_PROTO_B92,b92,,B92.net,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -763,Q_PROTO_BABELGUM,babelgum,,Babelgum.com,This protocol plug-in classifies the http traffic to the host babelgum.com.,Audio/Video,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -364,Q_PROTO_BABYCENTER,babycenter,,BabyCenter.com,This protocol plug-in classifies the http traffic to the host babycenter.com.,Web,http;https;rtmp;ssl,PC-Windows-Browser-www.babycenter.com (2014-02-26);Mobile-Android-My Baby Today 1.2.0 (2014-02-25);iPhone-iOS-My Baby Today 1.6.2 (2014-02-25),Mobile-Android-4.2.1-My Baby Today-1.2.0- (2014-02-25);PC-Windows-7-Chrome-34.0.1847.137-. (2014-05-20);iPhone-iOS-7.0.6-My Baby Today-1.6.2- (2014-02-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1349,Q_PROTO_BABYHOME,babyhome,,BabyHome.com.tw,"Taiwanese pregnancy and parenting information, albums and parenting diaries.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1766,Q_PROTO_BABYLON,babylon,,Babylon.com,Babylon is a leading global provider of language and search solutions,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1350,Q_PROTO_BACKPACKERS,backpackers,,Backpackers.com.tw,"Taiwanese most popular tourist site, backpacking forum, cheap flights parity Reservation parity.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -586,Q_PROTO_BADONGO,badongo,,Badongo.com,"Badongo is an online solution to store, send and share files",Web,http;https,20110111,2/24/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -365,Q_PROTO_BADOO,badoo,,Badoo.com,Badoo is a dating oriented social networking website.,Instant Messaging,facebook;google_maps;http;https;ssl;tcp,PC-Windows-Browser-badoo.com (2013-10-10),BlackBerry-BlackBerry OS-10.2.1.2141-Badoo-15.501.1204.0- (2014-01-16);Mobile-Android-4.4.2-Badoo-2.41.2- (2014-01-16);PC-Windows-7-Chrome-31.0.1650.63-Badoo-0.1.166- (2014-01-16);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-10);Windows Phone-Windows Phone OS-8.0.10517.150-Badoo-1.8.0- (2014-01-16);iPhone-iOS-7.0.4-Badoo-2.4.1- (2014-01-14),,x,,x,,,,,,,,,,,,x,x,,,,x,,,,,,,,,,,,,,,, -548,Q_PROTO_BAIDU,baidu,,Baidu.com,"Baidu is a Chinese search engine for websites, audio files and images.",Web,conduit;http;https;sohu;ssl;tcp;xing,PC-Windows-Browser-www.baidu.com (2014-01-10);iPhone-iOS-Baidu 5.0.1;Mobile-Android-Baidu 5.0,Mobile-Android-4.2.1-Baidu-5.2- (2014-04-22);PC-Windows-7-Baidu-2.4.0.2965- (2014-06-05);PC-Windows-7-Baidu-2.4.0.2965-CN (2014-06-04);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-29);PC-Windows-8-Baidu HD-1.0.0.5- (2014-02-24);Windows Phone-Windows Phone OS-Baidu-4.5.0.0- (2014-02-24);iPhone-iOS-7.1.1-Baidu-5.3- (2014-06-03),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,x,,,,,,,,,, -1510,Q_PROTO_BAIDU_HI_GAMES,baidu_hi_games,,Baidu Games (youxi.baidu.com),"CHinese online game site, Flash and html5 based. ( http://youxi.baidu.com )",Web,baidu,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1464,Q_PROTO_BAIDU_PLAYER,baidu_player,,Baidu Player,"BaiduPlayer is a video player that can play local, online and OnDemand videos.",Audio/Video,facebook;http;https,2.5.1.17-net-player;1.19.0.159-browserZ-player,PC-Linux-Baidu Player-1.19.0.68- (2013-07-02),,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -1351,Q_PROTO_BAIKE,baike,,Baike.com,Interactive encyclopedia online encyclopedia based on the Chinese Wikipedia.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1840,Q_PROTO_BALKANWEB,balkanweb,,BalkanWeb.com,Albanian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1841,Q_PROTO_BANGLANEWS24,banglanews24,,Banglanews24.com,Bangladeshi news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2025,Q_PROTO_BANKMELLAT,bankmellat,,Bankmellat.ir,Iranian Banking website,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1352,Q_PROTO_BAOFENG,baofeng,,Baofeng.com,Chinese video streaming portal.,Audio/Video,http;https;tcp,5.25.0613.1111-win7,PC-Windows-Baofeng-5.25.0613.1111- (2013-07-03),,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -3,Q_PROTO_BASE,base,,Base virtual protocol,"Base is a virtual protocol, specific to DPI, that encapsulates all other protocols. It contains fundamental protocol attributes such as time characteristics.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1754,Q_PROTO_BBC,bbc,,BBC.co.uk,The BBC Homepage providing News and Broadcast,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -736,Q_PROTO_BBC_PLAYER,bbc_player,,BBC Player,BBC Player is an in-browser live video streaming service.,Audio/Video,http;https;rtmp;ssl,20120718,10/12/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1557,Q_PROTO_BBM,bbm,,BlackBerry Messenger,BBM is the messenger/voip/Video protocol for blackberry. This plug-in classifies the audio and video data flows of BlackBerry Messenger.,Instant Messaging,stun,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424-- (2014-01-06),x,,,,,,,,x,,,,,,,x,x,x,x,,,,,,,,x,,,,,,,,,, -1558,Q_PROTO_BBM_AUDIO,bbm_audio,,BlackBerry Messenger Audio,bbm_audio is the voip layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424-- (2014-01-06),x,,,,,,,,,,,,,,,,,x,,,,,,,,,x,,,,,,,,,, -1559,Q_PROTO_BBM_VIDEO,bbm_video,,BlackBerry Messenger Video,BBM_video is the video layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424-- (2014-01-06),x,,,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,, -610,Q_PROTO_BBN_RCC_MON,bbn_rcc_mon,,BBN RCC Monitoring,The bbn_rcc_mon protocol (BBN RCC Monitoring) is found over the IP layer (IANA protocol number: 10).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1154,Q_PROTO_BCA_CO,bca_co,,Bank BCA (bca.co.id),This protocol plug-in classifies the http traffic to the host bca.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1842,Q_PROTO_BDNEWS24,bdnews24,,Bdnews24.com,Bangladeshi news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1353,Q_PROTO_BEANFUN,beanfun,,Beanfun.com,"Taiwanese largest game portal, a single account to log into all games.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -268,Q_PROTO_BEBO,bebo,,Bebo.com,"Bebo is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20100311,PC-Windows-7-Chrome- (2013-03-01);iPhone-iOS-Bebo-1.2.2- (2013-03-01);iPhone-iOS-Safari- (2013-03-01),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1511,Q_PROTO_BEBO_MAIL,bebo_mail,,Bebo mail,Bebo is a social networking website. ( www.bebo.com ),Web,bebo;google_ads,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1704,Q_PROTO_BEMANISO,bemaniso,,Bemaniso Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1162,Q_PROTO_BERNIAGA,berniaga,,Berniaga.com,This protocol plug-in classifies the http traffic to the host berniaga.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1974,Q_PROTO_BESTSHARING_COM,bestsharing_com,,bestsharing.com,Classifies web browsing on the bestsharing.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1512,Q_PROTO_BET365,bet365,,Bet365.com,ONline betting site ( http://www.bet365.com ),Web,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -13,Q_PROTO_BGP,bgp,,Border Gateway Protocol,Border Gateway Protocol (BGP) is an inter Autonomous Systems routing protocol used by most ISPs.,Routing,tcp,BGP v1,12/8/2010,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -2026,Q_PROTO_BIDORBUY,bidorbuy,,Bidorbuy.co.za,South African auction and shopping website,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -366,Q_PROTO_BIGADDA,bigadda,,BigAdda.com,This protocol plug-in classifies the http traffic to the host bigadda.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1323,Q_PROTO_BIGLOBE_NE,biglobe_ne,,Biglobe.ne.jp,Japanese web portal and search site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -367,Q_PROTO_BIGTENT,bigtent,,BigTent.com,This protocol plug-in classifies the http traffic to the host bigtent.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -764,Q_PROTO_BIGUPLOAD,bigupload,,Bigupload.com,This protocol plug-in classifies the http traffic to the host bigupload.com. It also classifies the ssl traffic to the Common Name www3.bigupload.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -368,Q_PROTO_BIIP,biip,,Biip.no,This protocol plug-in classifies the http traffic to the host biip.no.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2027,Q_PROTO_BIKHIR,bikhir,,Bikhir.ma,Moroccan classified ads,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2028,Q_PROTO_BILD,bild,,Bild.de,German news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -547,Q_PROTO_BING,bing,,Bing.com (formerly MSN Search),This protocol is used for sending user queries to the Bing search engine.,Web,http;https;ssl,20140326,PC-Windows-- (2012-03-06),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1692,Q_PROTO_BITCOIN,bitcoin,,Bitcoin client,Bitcoin is a distributed payment system.,Peer to Peer,tcp,0.8.3,10/2/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -593,Q_PROTO_BITDEFENDER_UPDATE,bitdefender_update,,BitDefender Update,BitDefender_update is the protocol used for BitDefender softwares updates.,Web,http;https;ssl,Bitdefender Antivirus 2011,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1705,Q_PROTO_BITENOVA,bitenova,,Bitenova Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1706,Q_PROTO_BITHQ,bithq,,BitHQ Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2234,Q_PROTO_BITLORD,bitlord,,BitLord,BitLord is a free BitTorrent client. This plugin classifies the traffic to the software company website. The generated traffic by this software is classified as bittorrent.,Peer to Peer,http;https,20140403,PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1707,Q_PROTO_BITME,bitme,,BitMe Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1708,Q_PROTO_BITMETV,bitmetv,,BitMeTV Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1913,Q_PROTO_BITS,bits,,Background Intelligent Transfer Service,Background Intelligent Transfer Service (BITS) transfers files (downloads or uploads) between a client and server and provides progress information related to the transfers.,File Transfer,http;https,7.5,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,, -1709,Q_PROTO_BITSEDUCE,bitseduce,,BitSeduce Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1710,Q_PROTO_BITSHOCK,bitshock,,BitShock Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1711,Q_PROTO_BITSOUP,bitsoup,,Bitsoup Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2253,Q_PROTO_BITSTRIPS,bitstrips,,Bitstrips,BitStrips allows to design cartoon versions of yourself and your friends.,Game,http;https;ssl,Mobile-Android;iPhone-iOS,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -15,Q_PROTO_BITTORRENT,bittorrent,,BitTorrent,BitTorrent is a peer-to-peer protocol. [Note: bittorrent is also known as kadmelia.],Peer to Peer,http;https;soap;socks4;socks5;spid;tcp;udp;utp,PC-Windows-Vuze 5.1.0.0;PC-Windows-uTorrent 3.3.2;PC-Windows-BitComet 1.34;PC-Windows-Deluge 1.3.0;PC-Windows-qBittorrent 3.0.2;PC-Windows-BitTorrent 7.7.0;PC-Windows-SoMud 1.3.8;PC-Windows-Thunder 7.9.10.4610,Mac-Mac OS-10.9.2-1.3.5- (2014-01-23);Mac-Mac OS-10.9.2-Vuze-5.3.0.0- (2014-04-01);Mac-Mac OS-BitLord-2.3.2-87- (2014-04-03);Mac-Mac OS-Bittorrent-7.4.1- (2014-01-23);Mac-Mac OS-Frostwire-5.7.2- (2014-05-20);Mac-Mac OS-uTorrent-1.8.4- (2014-03-20);Mobile-Android-4.2.1-Bittorrent-2.41- (2014-01-23);Mobile-Android-4.2.1-Frostwire-1.3.0- (2014-05-19);Mobile-Android-4.2.1-uTorrent-2.09.40- (2014-06-06);PC-Linux-Frostwire-5.7.2- (2014-05-19);PC-Linux-Vuze-5.3.0.0- (2014-01-22);PC-Linux-uTorrent-3.3- (2014-04-03);PC-Windows-7-Bitcomet-1.37- (2014-04-30);PC-Windows-7-Bittorrent-7.9.1- (2014-04-03);PC-Windows-7-Frostwire-5.7.2- (2014-05-02);PC-Windows-7-Torrent for Google Chrome-3.11.2- (2014-01-23);PC-Windows-7-Xunlei-5.9.28.1564- (2014-05-08);PC-Windows-7-Xunlei-7.9.21.4764- (2014-05-12);PC-Windows-7-uTorrent-3.4.1- (2014-05-20);PC-Windows-BitLord-2.3.2- (2013-10-14);PC-Windows-SoMud-1.3.9- (2014-01-23);PC-Windows-Transmission-2.13- (2012-10-19);PC-Windows-Vuze-5.3.0.0- (2014-03-12);PC-Windows-qBittorrent-3.0.4- (2012-10-19),,x,,x,BitTorrent,,,,x,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, -2152,Q_PROTO_BITTORRENT_APPLICATION,bittorrent_application,,Bittorrent Apps,This signature detects the access to the BitTorrent Apps web ressources from the BitTorrent application.,Peer to Peer,bittorrent,PC-Windows-BitTorrent 7.x,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1712,Q_PROTO_BITVAULTTORRENT,bitvaulttorrent,,Bitvaulttorrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1701,Q_PROTO_BITWORLD,bitworld,,BitWorld Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -932,Q_PROTO_BLACKBERRY,blackberry,,BlackBerry.com,This protocol refers to all Blackberry mobile device communications over wifi. This includes the chat flows of BlackBerry Messenger.,Web,http;https;ssl,BlackBerry-BlackBerry OS 10.2,BlackBerry-Q5-BlackBerry OS-10.2.1.2102-- (2014-04-24),,x,,,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -1560,Q_PROTO_BLACKBERRY_LOCATE,blackberry_locate,,BlackBerry Locate,This protocol refers to all Blackberry mobile device communications about localization over wifi.,Web,https;ssl,Blackberry OS 10.2.x,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1563,Q_PROTO_BLACKBERRY_UPDATE,blackberry_update,,BlackBerry OS Updates,This protocol classifies the Blackberry 10 family OS software updates.,Web,http;https,Blackberry 0S 10.2.x,BlackBerry-Q5-BlackBerry OS-10.2.1.2102-BBM-10.3.12.75- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -369,Q_PROTO_BLACKPLANET,blackplanet,,BlackPlanet.com,This protocol plug-in classifies the http traffic to the host blackplanet.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1806,Q_PROTO_BLIC,blic,,Blic.rs,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2029,Q_PROTO_BLICK,blick,,Blick.ch,Swiss news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1168,Q_PROTO_BLIP_TV,blip_tv,,Blip.tv TV Series,This protocol plug-in classifies the http traffic to the host blip.tv.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1169,Q_PROTO_BLOCKBUSTER,blockbuster,,Blockbuster.com,This protocol plug-in classifies the http traffic to the host .blockbuster.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1843,Q_PROTO_BLOCKET,blocket,,Blocket.se,Swedish local classified ads,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1844,Q_PROTO_BLOG,blog,,Blog.hu,Hungarian blog hosting website,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1163,Q_PROTO_BLOGDETIK,blogdetik,,BlogDetik.com,This protocol plug-in classifies the http traffic to the host blogdetik.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1796,Q_PROTO_BLOGFA,blogfa,,Blogfa.com,Persian Blog Hosting,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -974,Q_PROTO_BLOGGER,blogger,,Blogger.com,Blogger (formerly Blogspot) is a blog-publishing service that allows multi-user blogs with time-stamped entries. It was bought by Google in 2003.,Web,http;https;ssl,PC-Windows-Browser-www.blogger.com (2013-11-04),Mobile-A250-Android-4.2.1-Blogger-2.1.1- (2014-04-22);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);iPhone-iOS-Blogger-2.1.7.2- (2014-03-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1320,Q_PROTO_BLOGIMG,blogimg,,Blogpark.jp,Japanese blog site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -975,Q_PROTO_BLOGSPOT,blogspot,x,Blogspot.com,This protocol plug-in classifies the http traffic to the host blogspot.com.,Web,,PC-Windows-Browser-www.blogspot.com (2013-11-04),PC-Windows-Internet Explorer- (2013-11-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -370,Q_PROTO_BLOGSTER,blogster,,Blogster.com,This protocol plug-in classifies the http traffic to the host blogster.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -765,Q_PROTO_BLOKUS,blokus,,Blokus.fr,This protocol plug-in classifies the http traffic to the host blokus.fr.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -893,Q_PROTO_BLOOMBERG,bloomberg,,Bloomberg.com,Bloomberg is a website about business and financial news.,Web,akamai;http;https;rtmp;ssl,20110526,5/30/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1279,Q_PROTO_BLUBSTER,blubster,,Blubster,"Blubster is a peer-to-peer music file sharing software. Blubster uses the Manolito protocol, therefore a part of its traffic is classified as Manolito.",Peer to Peer,http;https,3.1.1,PC-Windows-Blubster-3.1.1- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -976,Q_PROTO_BLUEJAYFILMS,bluejayfilms,,Bluejayfilms.webs.com,This protocol plug-in classifies the http traffic to the host bluejayfilms.webs.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1845,Q_PROTO_BLUEWIN,bluewin,,Bluewin.ch,Swiss news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1293,Q_PROTO_BMFF,bmff,,ISO Base Media File Format,"The ISO Base Media File Format, as described in ISO/IEC 14496-12:2008 (MPEG-4 Part 12).",Audio/Video,http;nba,ISO/IEC 14496/15444-12 (2008),,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -611,Q_PROTO_BNA,bna,,BNA,The bna protocol (BNA) is found over the IP layer (IANA protocol number: 49).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1846,Q_PROTO_BOLHA,bolha,,Bolha.com,Slovenian local classified ads,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -371,Q_PROTO_BOLT,bolt,,Bolt.com - Bolt3.com,This protocol plug-in classifies the http traffic to the hosts bolt.com and bolt3.com.,Web,http;https,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1514,Q_PROTO_BONDISK,bondisk,,Bondisk.com,Site for downloading videos.,Peer to Peer,http;https,1.0.0.3,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -766,Q_PROTO_BONPOO,bonpoo,,Bonpoo.com,This protocol plug-in classifies the http traffic to the host bonpoo.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1354,Q_PROTO_BOOKS,books,,Books.com.tw,Taiwanese on-line books store.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -372,Q_PROTO_BOOKS_IREAD,books_iread,x,Books iRead,This protocol plug-in classified the http traffic to the host weread.com. Moved to flipkart.com/books service.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1713,Q_PROTO_BOOTYTAPE,bootytape,,BootyTape Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -767,Q_PROTO_BOX_NET,box_net,,Box.com,This protocol plug-in classifies the http traffic to the host .box.net. It also classifies the ssl traffic to the Common Names .box.net and .box.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -612,Q_PROTO_BR_SAT_MON,br_sat_mon,,Backroom SATNET Monitoring,The br_sat_mon protocol (Backroom SATNET Monitoring) is found over the IP layer (IANA protocol number: 76).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -769,Q_PROTO_BRIGHTTALK,brighttalk,,BrightTALK.com,This protocol plug-in classifies the http traffic to the host brighttalk.com. It also classifies the ssl traffic to the Common Name .brighttalk.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1714,Q_PROTO_BROWNTRACKER,browntracker,,Brown Tracker Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -741,Q_PROTO_BSSAP,bssap,,BSS Application Part,BSSAP is a telephony protocol used in SS7 networks.,Telephony,sccp_ss7;sctp,BSSAP v1,3/23/2011,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,x,,,,,,,,,, -1802,Q_PROTO_BT_BT,bt_bt,,Bhutan Telecom (bt.bt),Bhutan Telecom Limited (BTL) is the leading provider of telecommunications and Internet services in the Kingdom of Bhutan.,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1715,Q_PROTO_BT_CHAT,bt_chat,,BT Chat Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1803,Q_PROTO_BT_DK,bt_dk,,Bt.dk,Danish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1716,Q_PROTO_BT_WRZRU,bt_wrzru,,BT Wrzru Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1717,Q_PROTO_BTJUNKIE,btjunkie,,BT Junkie Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1193,Q_PROTO_BUDDYBUDDY,buddybuddy,x,BuddyBuddy.co.kr,This protocol plug-in classified the http traffic to the host buddybuddy.co.kr.,Web,,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1194,Q_PROTO_BUGS,bugs,,Bugs.co.kr,This protocol plug-in classifies the http traffic to the host bugs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -2239,Q_PROTO_BURT,burt,,Burt,Burt is a web analytics platform.,Web,http;https;ssl,20140410,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -977,Q_PROTO_BUSINESSWEEK,businessweek,,Businessweek.com,This protocol plug-in classifies the http traffic to the host businessweek.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1355,Q_PROTO_BUSINESSWEEKLY,businessweekly,,Businessweekly.com.tw,"Weekly financial news, delivered every Thursday, providing industry information, enterprise Interviews, enterprise stories, financial news and other content.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1476,Q_PROTO_BUZZFEED,buzzfeed,,BuzzFeed.com,International news webportal.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -373,Q_PROTO_BUZZNET,buzznet,,Buzznet.com,This protocol plug-in classifies the http traffic to the host buzznet.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -16,Q_PROTO_BXML,bxml,,WAP Binary XML,The WAP Binary XML protocol defines an encoding scheme for the binary data used in WAP environments.,Wap,wsp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -352,Q_PROTO_BYPASSTHAT,bypassthat,,BypassThat.com,This protocol plug-in classifies the http traffic to the host bypassthat.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -2030,Q_PROTO_CAAK,caak,,Caak.mn,Mongolian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1805,Q_PROTO_CAF,caf,,Caisse d'Allocations Familiales,French National Fund for Family Allowances (Caisse d Allocation familiale),Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -374,Q_PROTO_CAFEMOM,cafemom,,CafeMom.com,This protocol plug-in classifies the http traffic to the host cafemom.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -979,Q_PROTO_CAM4,cam4,,Cam4.com,This protocol plug-in classifies the http traffic to the host cam4.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2219,Q_PROTO_CAMEROON_INFO,cameroon_info,,Cameroon.info,Cameroonian news portal,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -770,Q_PROTO_CAMPFIRE,campfire,,Campfire.com,This protocol plug-in classifies the http traffic to the host campfirenow.com. It also classifies the ssl traffic to the Common Name campfirenow.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -980,Q_PROTO_CAMZAP,camzap,,Campzap.com,This protocol plug-in classifies the http traffic to the host camzap.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2244,Q_PROTO_CANDY_CRUSH_SAGA,candy_crush_saga,,Candy Crush Saga,Candy Crush Saga is a mobile puzzle game edited by King Entertainment,Game,http;https,iPhone-iOS;Mobile-Android,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -981,Q_PROTO_CAPITALONE,capitalone,,CapitalOne.com,This protocol plug-in classifies the http traffic to the host capitalone.com. It also classifies the ssl traffic to the Common Name capitalone.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1289,Q_PROTO_CAPWAP,capwap,,Control And Provisioning of Wireless Access Points,"CAPWAP stands for Control And Provisioning of Wireless Access Points. It is a standard, interoperable protocol that enables a controller to manage a collection of wireless access points.",Tunneling,udp,RFC 5415,11/23/2012,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -376,Q_PROTO_CARE2,care2,,Care2.com,This protocol plug-in classifies the http traffic to the host care2.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -982,Q_PROTO_CARTOONNETWORK,cartoonnetwork,,CartoonNetwork.com,This protocol plug-in classifies the http traffic to the host cartoonnetwork.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,x, -2031,Q_PROTO_CAS,cas,,CAS.sk,Slovak news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -613,Q_PROTO_CBT,cbt,,Core-based trees,The cbt protocol (Core-based trees) is found over the IP layer (IANA protocol number: 7).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -17,Q_PROTO_CCP,ccp,,Compression Control Protocol,The Compression Control Protocol (CCP) is responsible for configuring data compression algorithms on a point-to-point link.,Compression,ppp,RFC 1962,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -1463,Q_PROTO_CCTV_VOD,cctv_vod,,VodCCTV,VodCCTV provides a web on-line video and video on demand client for the CCTV Chinese television network.,Audio/Video,cntv;rtmp;udp,2.4.0.7,6/6/2013,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -983,Q_PROTO_CDISCOUNT,cdiscount,,Cdiscount.com,This protocol plug-in classifies the http traffic to the host cdiscount.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2032,Q_PROTO_CDM,cdm,,CdM.me,Montenegrin news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -18,Q_PROTO_CDP,cdp,,Cisco Discovery Protocol,Cisco Discovery Protocol (CDP) is a layer 2 protocol used by Cisco network equipments to discover other Cisco network equipments present on a link.,Network Management,8021q;eth;gre;ppp;snap,CDP v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -377,Q_PROTO_CELLUFUN,cellufun,,Cellufun.com,This protocol plug-in classifies the http traffic to the host m.cellufun.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, -1718,Q_PROTO_CENTRAL_TORRENT,central_torrent,,Central Torrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1807,Q_PROTO_CENTRUM_CZ,centrum_cz,,Centrum.cz,Czech web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1808,Q_PROTO_CENTRUM_SK,centrum_sk,,Centrum.sk,Slovakian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -256,Q_PROTO_CFT,cft,,Cross File Transfer,CFT (Cross File Transfer) is a file transfer software developed by Axway,File Server,tcp;x25,CFT v2.2,1/14/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -614,Q_PROTO_CFTP,cftp,,Covert File Transfer Protocol,The cftp protocol (CFTP) is found over the IP layer (IANA protocol number: 62).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1087,Q_PROTO_CGIPROXY,cgiproxy,,CGIProxy,CGIProxy is a proxy software package. A CGI (Common Gateway Interface) Proxy is a proxy that appears as a web page allowing the user access to all sites through it.,Network Service,http;https,20111019,,,x,,,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, -19,Q_PROTO_CGMP,cgmp,,Cisco Group Management Protocol,Cisco Group Management Protocol (CGMP) limits the forwarding of IP multicast packets to only those ports associated with IP multicast clients.,Network Service,eth;gre;snap,CGMP v1;CGMP v2,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2211,Q_PROTO_CHAMPION_FOOTBALL,champion_football,,Champion Football,Mobile game.,Game,http;https,iPhone-iOS,iPhone-iOS-Champion Football-1.0.5- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -771,Q_PROTO_CHANNEL4,channel4,,Channel4.com,This protocol plug-in classifies the http traffic to the host channel4.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -615,Q_PROTO_CHAOS,chaos,,Chaos,The chaos protocol (Chaos) is found over the IP layer (IANA protocol number: 16).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -20,Q_PROTO_CHAP,chap,,Challenge Handshake Authentication Protocol,The CHAP protocol is used to verify the identity of a peer on a point-to-point link.,Authentication,ppp,RFC 1994,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x -1567,Q_PROTO_CHAT_ON,chat_on,,ChatON,ChatON is a global mobile communication service introduced by Samsung Electronics.,Instant Messaging,amazon_aws;http;https;ssl;tcp,Mobile-Bada-ChatON 1.9.0 (2014-03-25),Mobile-Android-ChatON-3.4.39-KR (2014-03-19);Mobile-Bada-Chat_ON-1.9.0-KR (2014-01-10);PC-Windows-8-ChatON-2.0.51.42- (2014-01-10);iPhone-iOS-7.0.4-ChatON-2.7.7-KR (2014-01-10),,x,,x,,,,,,,,,,,,x,,x,,,,,,,,,x,,,,,,,,,, -1515,Q_PROTO_CHATROULETTE,chatroulette,,Chatroulette.com,Chatroulette is an online chat website. ( http://chatroulette.com ),Web,http;https;rtmp,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1356,Q_PROTO_CHINA_AIRLINES,china_airlines,,China-airlines.com,China-airlines booking site.,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -984,Q_PROTO_CHINACOM,chinacom,,China.com,This protocol plug-in classifies the http traffic to the host china.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -985,Q_PROTO_CHINACOMCN,chinacomcn,,china.com.cn,This protocol plug-in classifies the http traffic to the host china.com.cn.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1357,Q_PROTO_CHINANEWS,chinanews,,Chinanews.com,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1516,Q_PROTO_CHINAREN,chinaren,,ChinaRen.com,Chinese social networking website for former classmates. ( class.chinaren.com ),Web,http;https;sohu,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1358,Q_PROTO_CHINATIMES,chinatimes,,Chinatimes.com,One of Taiwan top news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1249,Q_PROTO_CHINAZ,chinaz,,Chinaz.com,This protocol plug-in classifies the http traffic to the host chinaz.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1195,Q_PROTO_CHOSUN,chosun,,Chosun services,This protocol plug-in classifies the http traffic to the host chosun.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1230,Q_PROTO_CHOSUN_DAILY,chosun_daily,,Chosun website,This protocol plug-in classifies the http traffic to the host www.chosun.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -567,Q_PROTO_CHROME_UPDATE,chrome_update,,Chrome Update,Chrome Update is the protocol for the updates of the Google chrome browser.,Web,google_gen,PC-Windows 7-Chrome 30.0.1599.69,Mac-Mac OS-10.9.3-Chrome-35.0.1916.114- (2014-01-28);PC-Windows-7-Chrome-35.0.1916.114- (2014-01-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1719,Q_PROTO_CINEMAGEDDON,cinemageddon,,Cinemageddon Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1474,Q_PROTO_CITRIX_ONLINE,citrix_online,,Citrix Online,On-line collaboration suite for small businesses.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -1196,Q_PROTO_CJ_MALL,cj_mall,,Cjmall.com,This protocol plug-in classifies the http traffic to the host cjmall.com. It also classifies the ssl traffic to the Common Name .cjmall.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1359,Q_PROTO_CK101,ck101,,CK101.com,ck101 is one of the major forum sites in Taiwan.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2034,Q_PROTO_CLARIN,clarin,,Clarin.com,Argentinian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1847,Q_PROTO_CLASIFICADOSONLINE,clasificadosonline,,ClasificadosOnline.com,Puerto Rican classified ads,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -378,Q_PROTO_CLASSMATES,classmates,,Classmates.com,This protocol plug-in classifies the http traffic to the host classmates.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -902,Q_PROTO_CLEARCASE,clearcase,,Rational ClearCase,"ClearCase is a source control / configuration management tool from IBM's ""Rational""division",Thin Client,http;https,7.1.2,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1517,Q_PROTO_CLEARSPACE,clearspace,,Jive,Enterprise collaboration and knowlegde management platform ( https://jiveon.com ),Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -772,Q_PROTO_CLIP2NET,clip2net,,Clip2Net.com,This protocol plug-in classifies the http traffic to the host clip2net.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,x, -379,Q_PROTO_CLOOB,cloob,,Cloob.com,This protocol plug-in classifies the http traffic to the host cloob.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1445,Q_PROTO_CLOUDFLARE,cloudflare,,CloudFlare CDN,CloudFlare CDN is a content delivery network with advanced security and analytics features.,Web,http;https;ssl,20130315,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1471,Q_PROTO_CLOUDME,cloudme,,CloudMe.com,Free on-line file storage service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1518,Q_PROTO_CLUBBOX,clubbox,,Clubbox.co.kr,Korean file sharing web site that requires installing a p2p client called zmlauncher.exe ( http://www.clubbox.co.kr ),Peer to Peer,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -986,Q_PROTO_CLUBIC,clubic,,Clubic.com,This protocol plug-in classifies the http traffic to the host clubic.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2178,Q_PROTO_CLUMSY_NINJA,clumsy_ninja,,Clumsy Ninja,Mobile game.,Game,http;https,iPhone-iOS,iPhone-iOS-Clumsy Ninja-1.3.1- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -987,Q_PROTO_CNET,cnet,,Cnet.com,This protocol plug-in classifies the http traffic to the host .cnet.com.,Audio/Video,http;https;rtmp;ssl,PC-Windows-Browser-www.cnet.com (2014-02-26);Mobile-Android-CNET 2.5 (2014-02-26);iPhone-iOS-CNET 2.4.1 (2014-02-26),Mobile-Android-4.4.2-CNET-2.6- (2014-05-21);Mobile-Bada-CNET France-1.0.0- (2014-04-26);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);iPhone-iOS-7.0.4-CNET-2.4.1- (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1170,Q_PROTO_CNET_TV,cnet_tv,,Cnettv.cnet.com,This protocol plug-in classifies the http traffic to the host cnettv.cnet.com.,Audio/Video,akamai;http;https;rtmp,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -988,Q_PROTO_CNN,cnn,,CNN (Cable News Network),"CNN is an international TV network, broadcasting news to the web and to mobile device applications.",Web,akamai;apple_hls;http;https;mms,PC-Windows-Browser-www.cnn.com (2014-01-03);iPhone-iOS-CNN App 2.0 (2014-01-12);Mobile-Android-CNN App 1.4.1 (2014-01-15);Windows Phone-Windows Phone OS-CNN 1.5.1.0 (2014-01-13),BlackBerry-BlackBerry OS-10.2.1.537-CNN App for BlackBerry-1.0.0.0- (2014-04-29);Mobile-Android-CNN App for Android Phones-2.1- (2014-06-11);Mobile-Bada-2.0S8600XXLC3-CNN-0.04- (2014-06-07);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-10);PC-Windows-8-CNN App for Windows-1.0.0.0- (2014-06-07);Windows Phone-Windows Phone OS-8-CNN-1.5.5.0- (2014-04-09);iPhone-5C-iOS-7.1-CNN App for iPhone-2.2- (2014-04-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -989,Q_PROTO_CNTV,cntv,,China Network Television,Chinese Central Television and China Network Television web site.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1360,Q_PROTO_CNYES,cnyes,,cnYES.com,cnYES.com is the most trusted and consulted leading financial portal among the Chinese online professionals.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1254,Q_PROTO_CNZZ,cnzz,,cnzz.com,This protocol plug-in classifies the http traffic to the hosts cnzz.com and cnzz.net.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2035,Q_PROTO_COCCOC,coccoc,,Coccoc.com,Vietnamese search engine,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1328,Q_PROTO_COCOLOG_NIFTY,cocolog_nifty,,Cocolog-nifty.com,Japanese blog web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -380,Q_PROTO_COLLEGE_BLENDER,college_blender,,CollegeBlender.com,This protocol plug-in classifies the http traffic to the host collegeblender.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -990,Q_PROTO_COMCAST,comcast,,Comcast.com,This protocol plug-in classifies the http traffic to the hosts comcast.com and comcast.net.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1496,Q_PROTO_COMM,comm,,COMM,COMM is a VoIP and Instant messaging application for mobile phones commonly used in Japan.,Audio/Video,https;ssl,20130604,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,x,,,,,,,,,,x,,,,,,,,,, -1757,Q_PROTO_COMMENTCAMARCHE,commentcamarche,,CommentCaMarche.net,CommentCaMarche.net is a french website providing technical explanations as well as forums.,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -21,Q_PROTO_COMP,comp,,COMP,COMP protocol is used for data compression over PPP.,Compression,ppp,RFC 1661,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -616,Q_PROTO_COMPAQ_PEER,compaq_peer,,Compaq Peer,The compaq_peer protocol (Compaq Peer Protocol) is found over the IP layer (IANA protocol number: 110).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -773,Q_PROTO_CONCUR,concur,,Concur.com,This protocol plug-in classifies the http traffic to the hosts concur.com and concursolutions.com. It also classifies the ssl traffic to the Common Names concursolutions.com and .concur.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1443,Q_PROTO_CONDUIT,conduit,,Conduit Services,Conduit provides services for web sites audience increase.,Web,http;https;ssl,20140114,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2015,Q_PROTO_CONVIVA,conviva,,Conviva CDN,Conviva is a video streaming solution provider for audio/video content web services.,Web,http;https;ssl,20140114,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -774,Q_PROTO_CORALCDN_USER,coralcdn_user,,CoralCDN user,This protocol plug-in classifies the http traffic to the host nyud.net.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -22,Q_PROTO_COTP,cotp,,Connection Oriented Transfer Protocol,COTP (Connection Oriented Transport Protocol) is a protocol ensuring the transport service in the OSI model.,Network Service,tcp,RFC 905/ISO 8073/X.224,7/4/2008,,,,x,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,, -381,Q_PROTO_COUCH_SURFING,couch_surfing,,CouchSurfing.org,This protocol plug-in classifies the http traffic to the host couchsurfing.org. It also classifies the ssl traffic to the Common Name .couchsurfing.org.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1197,Q_PROTO_COUPANG,coupang,,Coupang.com,This protocol plug-in classifies the http traffic to the host coupang.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -617,Q_PROTO_CPHB,cphb,,Computer Protocol Heart Beat,The cphb protocol (Computer Protocol Heart Beat) is found over the IP layer (IANA protocol number: 73).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -618,Q_PROTO_CPNX,cpnx,,Computer Protocol Network Executive,The cpnx protocol (Computer Protocol Network Executive) is found over the IP layer (IANA protocol number: 72).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1848,Q_PROTO_CRAIGSLIST,craigslist,,craigslist,Online classified ads mostly used in the US and Canada,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1720,Q_PROTO_CRAZYSALOON,crazysaloon,,Crazysaloon Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2221,Q_PROTO_CRHOY,crhoy,,Crhoy,Coasta rican news portal,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2279,Q_PROTO_CRITEO,criteo,,Criteo,Criteo is a personalized retargeting company.,Web,http;https;ssl,20140424,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1849,Q_PROTO_CRNOBELO,crnobelo,,Crnobelo.com,Macedonian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1450,Q_PROTO_CROCKO,crocko,,Crocko.com (CROCKOTEC),CROCKOTec is a Direct Download (DDL file sharing website).,Web,http;https;ssl,20130415,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -619,Q_PROTO_CRTP,crtp,,Combat Radio Transport Protocol,The crtp protocol (Combat Radio Transport Protocol) is found over the IP layer (IANA protocol number: 126).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -620,Q_PROTO_CRUDP,crudp,,Combat Radio User Datagram,The crudp protocol (Combat Radio User Datagram) is found over the IP layer (IANA protocol number: 127).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1519,Q_PROTO_CRYPTOHEAVEN,cryptoheaven,,CryptoHeaven.com,Secure email and online file storage service.,Peer to Peer,http;https,3.7.6,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1265,Q_PROTO_CSDN,csdn,,Chinese Software Developer Network,This protocol plug-in classifies the http traffic to the host csdn.net.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -23,Q_PROTO_CSTRIKE,cstrike,,CounterStrike,"Cstrike is a protocol used by CounterStrike game, by Steam.",Game,tcp;udp,CounterStrike v1.5;CounterStrike v1.6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1361,Q_PROTO_CTRIP,ctrip,,Ctrip.com?,"Travel Destination Guide, online booking of hotels, flights and holiday.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -24,Q_PROTO_CUPS,cups,,Common Unix Printer System,"The Common Unix Printer System (CUPS) protocol is a cross-platform printing solution for UNIX environments. It is based on the ""Internet Printing Protocol""and it is compatible with Microsoft operating systems since Windows 2000.",Printer,udp,CUPS v1.5,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1721,Q_PROTO_CUTEYHONEYFLASH,cuteyhoneyflash,,Cutey Honey Flash Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1100,Q_PROTO_CVS,cvs,,Concurrent Versions System,"The Concurrent Versions System keeps track of all work and all changes in a set of files, typically the implementation of a software project, and allows several developers to collaborate.",Network Service,tcp;udp,20111030,12/1/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1722,Q_PROTO_CYBER12,cyber12,,Cyber12 Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2036,Q_PROTO_CYBERCTM,cyberctm,,CyberCTM.com,Chinese news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1520,Q_PROTO_CYWORLD,cyworld,,Cyworld.com,CYworld is a South Korean social network service which belongs to nate.com. ( http://www.nate.com/cymain/?f=auto_cymain ),Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1850,Q_PROTO_DAGBLADET,dagbladet,,Dagbladet.no,Norwegian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -382,Q_PROTO_DAILY_BOOTH,daily_booth,,DailyBooth.com,This protocol plug-in classifies the http traffic to the host dailybooth.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -383,Q_PROTO_DAILY_STRENGH,daily_strengh,,DailyStrengh.org,This protocol plug-in classifies the http traffic to the host dailystrength.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -991,Q_PROTO_DAILYMAIL,dailymail,,DailyMail.co.uk,This protocol plug-in classifies the http traffic to the host dailymail.co.uk.,Web,http;https;rtmp;ssl,PC-Windows-Browser-www.dailymail.co.uk (2014-03-13);iPhone-iOS-Mail Online 1.7.3 (2014-02-28);Windows Phone-Windows Phone OS-Mail Online 1.0.0.0 (2014-02-28);Mobile-Android-Daily Mail Online 3.0.7 (2014-02-28);BlackBerry-BlackBerry OS-Daily Mail Online 1.1.5.22344 (2014-02-28),BlackBerry-BlackBerry OS-10.2.1.2102-Daily Mail Online-1.1.5.22344- (2014-04-14);Mobile-Android-4.4.2-Daily Mail Online-3.0.9- (2014-05-07);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);Windows Phone-Windows Phone OS-8-Mail online-1.0.0.0- (2014-02-28);iPhone-iOS-7.1.1-MailOnline-2.0.2- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -25,Q_PROTO_DAILYMOTION,dailymotion,,Dailymotion.com,Dailymotion is a website where users can send or watch videos.,Web,http;https;rtmp;ssl,PC-Windows-Browser-www.dailymotion.com (2013-10-09);Mobile-Android-Dailymotion 4.0.0.1 (2014-01-29),BlackBerry-Q5-BlackBerry OS-10.2.1.2102-Dailymotion-3.0.2- (2014-05-05);Mobile-Android-4.2.2-Dailymotion-4.1- (2014-05-07);Mobile-Bada-1.0.5- (2014-03-04);Nokia Mobile-Symbian-113.010.1506-Dailymotion-1.2- (2014-04-01);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-12);PC-Windows-8-Dailymotion-1.0.1.13- (2014-03-04);Windows Phone-Windows Phone OS-8-Dailymotion-2.0.0.0- (2014-03-04);iPhone-iOS-7.0.6-Dailymotion-3.5.2- (2014-03-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2037,Q_PROTO_DAKARACTU,dakaractu,,Dakaractu.com,Senegalese news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1362,Q_PROTO_DANGDANG,dangdang,,Dangdang.com,"Books, film and television productions, and digital products shopping site.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1723,Q_PROTO_DANISHBITS,danishbits,,Danishbits Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;ssl,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1851,Q_PROTO_DANTRI,dantri,,Dantri.com.vn,Vietnamese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1852,Q_PROTO_DAP_NEWS,dap_news,,Dap-News.com,Cambodian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1955,Q_PROTO_DATA_HU,data_hu,,data.hu,Classifies web browsing on the data.hu Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -992,Q_PROTO_DAUM,daum,,Daum.net,This protocol plug-in classifies the http traffic to the host daum.net.,Web,http;https,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1521,Q_PROTO_DAUMMAIL,daummail,,Daum Mail,Webmail for daum.net ( http://mail.daum.net ),Web,daum,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -993,Q_PROTO_DAVIDOV,davidov,,Davidov.do.am,This protocol plug-in classifies the http traffic to the host davidov.do.am.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2038,Q_PROTO_DAY,day,,Day.az,Azerbaijani news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -901,Q_PROTO_DB2,db2,,DB2,DB2 is a relational model database server from IBM which has its roots in the early 1980s. It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;tcp,9.7,8/3/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -2263,Q_PROTO_DBA,dba,,Dba,Danish classified ads website.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1853,Q_PROTO_DBS,dbs,,DBS Bank (dbs.com.sg),Singaporian online banking website,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -621,Q_PROTO_DCCP,dccp,,Datagram Congestion Control Protocol,The dccp protocol (Datagram Congestion Control Protocol) is found over the IP layer (IANA protocol number: 33).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -26,Q_PROTO_DCERPC,dcerpc,,Distributed Computing Environment - Remote Procedure Call,The DCERPC protocol is an RPC implementation used in Distributed Computing Environments. This protocol is used by many software applications including Microsft Exchange.,Middleware,smb;tcp;udp,DCE/RPC v1.2,7/4/2008,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1522,Q_PROTO_DCINSIDE,dcinside,,DCinside.com,Information portal ( www.dcinside.com ),Web,http;https,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -622,Q_PROTO_DCN_MEAS,dcn_meas,,DCN Measurement Subsystems,The dcn_meas protocol (DCN Measurement Subsystems) is found over the IP layer (IANA protocol number: 19).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -623,Q_PROTO_DDP,ddp,,Datagram Delivery Protocol,The ddp protocol (Datagram Delivery Protocol) is found over the IP layer (IANA protocol number: 37).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -624,Q_PROTO_DDX,ddx,,D-II Data Exchange,The ddx protocol (D-II Data Exchange (DDX) is found over the IP layer (IANA protocol number: 116).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2039,Q_PROTO_DEALFISH,dealfish,x,Dealfish.co.th,Thai classified ads,Web,,20140117,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -574,Q_PROTO_DEBIAN_UPDATE,debian_update,,Debian/Ubuntu Update,"Update protocol of APT, the Debian/Ubuntu packet manager.",Web,http;https,PC-Debian 5;PC-Debian 6;PC-Debian 6;PC-Ubuntu 10.10,PC-Debian-7.5-Debian- (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -28,Q_PROTO_DEC,dec,,Digital Equipment Corporation,DEC is a Digital Equipment Corporation's proprietary network protocol.,Network Service,8021q;eth;gre;snap,na,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -384,Q_PROTO_DECAYENNE,decayenne,,Decayenne.com,This protocol plug-in classifies the http traffic to the host decayenne.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1724,Q_PROTO_DEEPSEEK,deepseek,,DeepSeek Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2180,Q_PROTO_DEER_HUNTER_2014,deer_hunter_2014,,Deer Hunter 2014,Mobile game.,Game,http;https,Mobile-Android;iPhone-iOS,Mobile-Android-Deer Hunter 2014-1.1.3- (2014-03-13);iPhone-iOS-Deer Hunter 2014-1.1.0- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -310,Q_PROTO_DEEZER,deezer,,Deezer.com,This protocol plug-in classifies the http traffic to the host deezer.com. It also classifies the ssl traffic to the Common Name .deezer.com.,Web,http;https;ssl,PC-Windows 7-Browser-www.deezer.com (2014-03-05);Windows Phone-Windows Phone OS-Deezer 2.1.1.1 (2014-03-04);Mobile-Android-Deezer 4.2.3.1 (2014-03-04);BlackBerry-BlackBerry OS-Deezer 3.137 (2014-03-04);PC-Windows 7-Chrome 33.0.1750.146-Deezer 1.3.2 (2014-03-05),BlackBerry-BlackBerry OS-10.2.1.2141-Deezer-3.137- (2014-04-15);Mac-Mac OS-10.9.2-Safari-7.0.3- (2014-05-13);Mobile-Android-4.2.2-Deezer-4.3.0.9- (2014-05-08);PC-Linux-14.04-Firefox-30.0 - (2014-06-11);PC-Windows-7-Chrome-33.0.1750.146-Deezer-1.3.2- (2014-03-05);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-10);PC-Windows-8-Deezer-1.1.0.13- (2014-05-15);Windows Phone-Windows Phone OS-8-Deezer-2.2.1.1- (2014-05-14);iPhone-iOS-7.1.1-Deezer-4.8.3- (2014-05-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1854,Q_PROTO_DEFIMEDIA,defimedia,,Defimedia.info,Mauritian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1784,Q_PROTO_DELFI,delfi,,Delfi,"Estonian news portal, also accessible from Latvia and Lituania.",Web,http;https,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -605,Q_PROTO_DELICIOUS,delicious,,Delicious.com,"Delicious (formerly del.icio.us, pronounced ""delicious"") is a social bookmarking web service for storing, sharing, and discovering web bookmarks.",Web,http;https;ssl;yahoo,20110209,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1765,Q_PROTO_DELTA_SEARCH,delta_search,,Delta Search,Browser toolbar search engine,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -775,Q_PROTO_DEPOSITFILES,depositfiles,,DepositFiles.com,This protocol plug-in classifies the http traffic to the host depositfiles.com. It also classifies the ssl traffic to the Common Name .depositfiles.com.,Web,http;https;ssl,PC-Windows-Browser-www.depositfiles.com (2013-06-16),Mobile-Android-Depositfiles FileManager-20.131112.50- (2014-02-22);PC-Linux-DepositFiles Filemanager-1.0 build 2122- (2014-05-26);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-16);iPhone-iOS-7.1.1-Safari- (2014-05-23),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -2040,Q_PROTO_DERSTANDARD,derstandard,,derStandard.at,Austrian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2287,Q_PROTO_DESKAWAY,deskaway,,DeskAway,"DeskAway is a web-based team and project management software that makes it easy to organize, manage and track projects from a central location.",Web,http;https;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1128,Q_PROTO_DETIK,detik,,Detik.com,This protocol plug-in classifies the http traffic to the host detik.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1132,Q_PROTO_DETIKNEWS,detiknews,,Detiknews.com,This protocol plug-in classifies the http traffic to the hosts detiknews.com and news.detik.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -385,Q_PROTO_DEVIANT_ART,deviant_art,,DeviantArt.com,This protocol plug-in classifies the http traffic to the host deviantart.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -625,Q_PROTO_DFS,dfs,,Distributed File System,The dfs protocol (Any distributed file system) is found over the IP layer (IANA protocol number: 68).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -626,Q_PROTO_DGP,dgp,,Dissimilar Gateway Protocol,The dgp protocol (Dissimilar Gateway Protocol) is found over the IP layer (IANA protocol number: 86).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -29,Q_PROTO_DHCP,dhcp,,Dynamic Host Configuration Protocol,The DHCP protocol is used to configure automatically the network parameters of a station.,Network Service,udp,DHCP IPv4,7/4/2008,,,,x,dhcp,,,x,,x,,x,x,,,,,,,,,,,,,,,,,,,,,x,,, -602,Q_PROTO_DIAMETER,diameter,,Diameter,"Diameter is an AAA (authentication, authorization and accounting) protocol for computer networks and an alternative to RADIUS.",Authentication,sctp;tcp,Diameter v1,2/22/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, -30,Q_PROTO_DICT,dict,,Dictionary Server,The DICT protocol is a TCP transaction based query/response protocol that enables a client to access dictionary definitions from a set of natural language dictionary databases.,Application Service,tcp,DICT v1,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -995,Q_PROTO_DIGG,digg,,Digg.com,This protocol plug-in classifies the http traffic to the host digg.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2227,Q_PROTO_DIGIKALA,digikala,,Digikala,Iranian electronics and tech review website,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -386,Q_PROTO_DIGITALVERSE,digitalverse,,DigitalVerse.org,This protocol plug-in classifies the http traffic to the host digitalverse.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -776,Q_PROTO_DIINO,diino,,Diino.com,This protocol plug-in classifies the ssl traffic to the Common Name diino.com.,Peer to Peer,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -329,Q_PROTO_DIMP,dimp,,Dynamic Internet Messaging Program,DIMP is a Webmail protocol,Webmail,http;https;imp,20090904,6/6/2011,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1523,Q_PROTO_DIODEO,diodeo,,Diodeo.com,Information portal ( www.diodeo.com ),Web,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -914,Q_PROTO_DIOP,diop,,Datagram Inter-ORB Protocol,DIOP is a GIOP implementation over UDP which aims to be more efficient than the TCP one.,Middleware,giop,20110801,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1855,Q_PROTO_DIR,dir,,Dir.bg,Bulgarian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -31,Q_PROTO_DIRECTCONNECT,directconnect,,DirectConnect (NMDC),DirectConnect is a peer-to-peer protocol. [Note: directconnect is also known as nmdc.],Peer to Peer,socks4;socks5;tcp;udp,PC-Windows-DC++ 0.830;Mac-Mac OS 10.9.1-valknut 0.4.9 (2014-02-13);PC-Linux 12.04.1 lts-valknut 0.4.9 (2014-02-13),Mac-Mac OS-10.9.1-Valknut-0.4.9- (2014-03-03);PC-Linux-Valknut-0.4.9- (2014-03-06);PC-Windows-7-DC++-0.843- (2014-05-19),,,,x,directconnect,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -713,Q_PROTO_DIRECTDOWNLOADLINKS,directdownloadlinks,x,DirectDownload Links,"Direct download link is a term used within the Internet-based file sharing community. It is used to describe a hyperlink that points to a location within the Internet where the user can download a file. This protocol used to contain a list of DDL websites, that was split into multiple protocols.",Web,,PC-Windows-Browser-www.directdownloadlinks.com (2013-07-13),10/3/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1776,Q_PROTO_DIRECTREV,directrev,,DirectREV.com,"DirectREV Media Delivery Platform is a real-time digital ad marketplace that connects publishers with agencies, ad networks and third-party technology providers.",Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -996,Q_PROTO_DIRECTV,directv,,DirecTV.com,This protocol plug-in classifies the http traffic to the host directv.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2041,Q_PROTO_DIRETUBE,diretube,,DireTube.com,Ethiopian media website,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -387,Q_PROTO_DISABOOM,disaboom,,Disaboom.com,This protocol plug-in classifies the http traffic to the host disaboom.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2268,Q_PROTO_DISCUSS,discuss,,Discuss,Hong Kongese forum about media and lifestyle.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -777,Q_PROTO_DIVSHARE,divshare,,DivShare.com,This protocol plug-in classifies the http traffic to the host divshare.com. It also classifies the ssl traffic to the Common Name divshare.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1314,Q_PROTO_DMM_CO,dmm_co,,Dmm.co.jp,Japanese adult videos web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -32,Q_PROTO_DNS,dns,,Domain Name Service,The DNS protocol is used to translate internet names (www.site.com) into IP addresses and vice versa.,Network Service,tcp;udp,DNS IPv4;DNS IPv6,7/4/2008,,,,x,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1199,Q_PROTO_DNSHOP,dnshop,,Dnshop.com,This protocol plug-in classifies the http traffic to the host dnshop.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -778,Q_PROTO_DOCSTOC,docstoc,,Docstoc.com,This protocol plug-in classifies the http traffic to the hosts docstoccdn.com and docstoc.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2042,Q_PROTO_DOISONGPHAPLUAT,doisongphapluat,,Doisongphapluat.com,Vietnamese news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -388,Q_PROTO_DOL2DAY,dol2day,,Dol2day.com,This protocol plug-in classifies the http traffic to the host dol2day.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1856,Q_PROTO_DONEDEAL,donedeal,,DoneDeal.ie,Irish classified ads website,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1200,Q_PROTO_DONGA,donga,,Donga.com,This protocol plug-in classifies the http traffic to the host donga.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -389,Q_PROTO_DONTSTAYIN,dontstayin,,DontStayIn.com,This protocol plug-in classifies the http traffic to the host dontstayin.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2252,Q_PROTO_DOODLE_JUMP,doodle_jump,,Doodle Jump,Mobile game developped by Lima Sky LLC,Game,http;https,"3.8 iOS,2.1.0 Android",,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1315,Q_PROTO_DOORBLOG,doorblog,,Doorblog.jp,This protocol plug-in classifies the http traffic to the host doorblog.jp. It also classifies the ssl traffic to the Common Name doorblog.jp.,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1857,Q_PROTO_DORGIO,dorgio,,Dorgio.mn,Mongolian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1252,Q_PROTO_DOUBAN,douban,,Douban.com,This protocol plug-in classifies the http traffic to the host douban.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2043,Q_PROTO_DR,dr,,Dr.dk,Danish news and content portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1858,Q_PROTO_DRAUGAS,draugas,,Draugas.lt,Lithuanian web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -390,Q_PROTO_DRAUGIEM,draugiem,,Draugiem.lv,This protocol plug-in classifies the http traffic to the host draugiem.lv.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -912,Q_PROTO_DRDA,drda,,Distributed Relational Database Architecture,DRDA is a protocol for carrying out SQL queries and commands.,Database,sna;tcp,4,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1725,Q_PROTO_DREAMORA,dreamora,,Dreamora Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1201,Q_PROTO_DREAMWIZ,dreamwiz,,DreamWiz.com,This protocol plug-in classifies the http traffic to the host dreamwiz.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -779,Q_PROTO_DROPBOX,dropbox,,Dropbox.com,Dropbox is a free in-the-cloud file storage and synchronization service providing both web and smart application interfaces.,Web,http;https;ssl;udp,PC-Windows-Browser-www.dropbox.com (2013-07-13),Kindle Fire-Kindle Fire-Dropbox-2.3.10.4- (2014-04-08);Mac-Mac OS-10.9.3-DropBox-2.8.3- (2014-06-05);Mobile-Android-4.2.1-Dropbox-2.4.1- (2014-04-23);PC-Linux-DropBox-2.8.3- (2014-06-04);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);PC-Windows-7-DropBox-2.8.3- (2014-06-02);PC-Windows-8-Dropbox-2.0.0.0- (2014-02-11);Windows Phone-Windows Phone OS-8-Dropbox-3.0.0.0- (2014-02-11);iPhone-iOS-7.1.1-Dropbox-3.1.3- (2014-06-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1859,Q_PROTO_DRUKNET,druknet,,DrukNet.bt (Bhutan Telecom),Buthan Telecom website,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -997,Q_PROTO_DRUPAL,drupal,,Drupal.org,This protocol plug-in classifies the http traffic to the host drupal.org. It also classifies the ssl traffic to the Common Name .drupal.org.,Web,http;https;ssl,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -702,Q_PROTO_DSR,dsr,,Dynamic Source Routing,The dsr protocol (Dynamic Source Routing Protocol) is found over the IP layer (IANA protocol number: 48).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1860,Q_PROTO_DSTV,dstv,,Dstv,Program synopsis and channel information for South Africa satellite network.,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1291,Q_PROTO_DTLS,dtls,,Datagram Transport Layer Security,"DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents eavesdropping, tampering, or message forgery.",Network Service,capwap,1.2,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -33,Q_PROTO_DTP,dtp,,Dynamic Trunking Protocol,DTP (Dynamic Trunk Protocol) is a proprietary networking protocol developed by Cisco Systems for the purpose of negociating trunking on a link between two VLAN-aware switches.,Network Service,8021q;eth;gre;snap,DTP v1,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1817,Q_PROTO_DUBIZZLE,dubizzle,,Dubizzle.com,"Dubizzle is your free classifieds website to buy, sell and find anything in your local community. It is covering Arabian Peninsula and Maghreb.",Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1363,Q_PROTO_DUOWAN,duowan,,Duowan.com,Chinese online game media.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1861,Q_PROTO_DV,dv,,DV.is,Icelandic news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -780,Q_PROTO_DYNAMICINTRANET,dynamicintranet,,DynamicIntranet.com,This protocol plug-in classifies the http traffic to the host dynamicintranet.com. It also classifies the ssl traffic to the Common Name dynamicintranet.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -781,Q_PROTO_EARTHCAM,earthcam,,EarthCam.com,This protocol plug-in classifies the http traffic to the host earthcam.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1364,Q_PROTO_EASTMONEY,eastmoney,,Eastmoney.com,"One of Chinese most influential financial media, providing comprehensive financial news and financial market information, covering stocks, finance, securities, finance, market, funds, Hong Kong stocks, foreign exchange, futures, bonds, insurance, banking.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1365,Q_PROTO_EASYTRAVEL,easytravel,,Easytravel.com.tw,Taiwanese travel booking agency.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -34,Q_PROTO_EBAY,ebay,,eBay.com,Ebay is a famous online auction and shopping website.,Web,http;https,20090924,3/6/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -269,Q_PROTO_EBUDDY,ebuddy,,eBuddy.com,eBuddy is a web and mobile messenger which supports various instant messaging.,Instant Messaging,http;https;ssl;tcp,20120926,PC-Windows-Firefox- (2014-05-27),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, -935,Q_PROTO_ECHO,echo,,Echo,The echo service simply sends back to the originating source any data it receives.,Network Service,tcp;udp,RFC 862,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1862,Q_PROTO_ECHOROUKONLINE,echoroukonline,,Echoroukonline.com,Algerian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2222,Q_PROTO_ECUAVISA,ecuavisa,,Ecuavisa,Ecuadorian TV channel website,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2016,Q_PROTO_EDGECAST,edgecast,,EdgeCast Networks CDN,Edgecast is a file streaming solution provider for audio/video content web services.,Web,http;https;ssl,20140114,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -35,Q_PROTO_EDONKEY,edonkey,,Edonkey,Edonkey is a peer-to-peer protocol. Classification is not guaranteed when the protocol obfuscation feature is enable (feature appeared in eMule version 0.47b). [Note: edonkey is also known as kadmelia and emule.],Peer to Peer,http;socks4;socks5;tcp;udp,PC-Windows-eMule 0.48a,PC-Linux-aMule-2.2.6- (2012-10-29);PC-Windows-Lphant-3.51- (2012-10-29);PC-Windows-eMule-0.50a- (2012-10-29),,,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -2161,Q_PROTO_EDUCARRIERE,educarriere,,Educarriere,Ivory Coast Job portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1524,Q_PROTO_EGNYTE,egnyte,,Egnyte Enterprise File Sharing,Enterprise online file sharing ( https://www-am2.egnyte.com/corp/registration/lp-join-the-thousands.html ),Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -710,Q_PROTO_EGP,egp,,Exterior Gateway Protocol,The egp protocol (Exterior Gateway Protocol) is found over the IP layer (IANA protocol number: 8).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -36,Q_PROTO_EIGRP,eigrp,,Enhanced Interior Gateway Routing Protocol,"The Enhanced Interior Gateway Routing Protocol (EIGRP) is an improved version of its predecessor IGRP, a Cisco proprietary protocol.",Routing,ip,EIGRP v2,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1863,Q_PROTO_EKANTIPUR,ekantipur,,Ekantipur.com,Nepalese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1864,Q_PROTO_EKSTRABLADET,ekstrabladet,,EkstraBladet.dk,Danish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1865,Q_PROTO_ELCAT,elcat,,ElCat.kg,Kyrgyzstanese internet service provider,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2044,Q_PROTO_ELCOMERCIO,elcomercio,,Elcomercio.pe,Peruvian news portal.,Web,http;https,20140220,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2045,Q_PROTO_ELDEBER,eldeber,,Eldeber.com.bo,Bolivian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -391,Q_PROTO_ELFTOWN,elftown,,Elftown.com,This protocol plug-in classifies the http traffic to the host elftown.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1866,Q_PROTO_ELHEDDAF,elheddaf,,ElHeddaf.com,Algerian sports new portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2046,Q_PROTO_ELHERALDO,elheraldo,,Elheraldo.hn,Honduran news portral,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2165,Q_PROTO_ELHOURRIYA,elhourriya,,Elhourriya,Mauritanian news portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1366,Q_PROTO_ELLE_TW,elle_tw,,Elle.com.tw,"Taiwanese portal Beauty, style trends, editor's picks, shopping, astrology, reader forums and supplemental content from the print publication.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1525,Q_PROTO_ELLUMINATE,elluminate,,Elluminate.com,Rent virtual rooms where people can hold classes and meetings ( http://try.bbcollaborate.com/trial/register.go ).,Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2047,Q_PROTO_ELMUNDO,elmundo,,Elmundo.es,Spanish news portal.,Web,http;https,20140220,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2084,Q_PROTO_ELNASHRA,elnashra,,Elnashra.com,Lebanese news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1867,Q_PROTO_ELNUEVODIA,elnuevodia,,ElNuevoDia.com,Puerto Rican news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1868,Q_PROTO_ELNUEVODIARIO,elnuevodiario,,ElNuevoDiario.com.ni,Nicaraguan news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1761,Q_PROTO_ELPAIS,elpais,,ElPais.com,"Spanish news web portal, also accessed from Uruguay and Colombia.",Web,http;https,20140130,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2085,Q_PROTO_ELSALVADOR,elsalvador,,Elsalvador.com,EL Salvadorian news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2183,Q_PROTO_ELTIEMPO,eltiempo,,Eltiempo,Colombian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2203,Q_PROTO_ELUNIVERSO,eluniverso,,Eluniverso,Ecuadorian news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1202,Q_PROTO_EMAPS,emaps,x,Empas,This protocol plug-in classifies the http traffic to the host empas.com.,Web,,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -627,Q_PROTO_EMCON,emcon,,EMCON,The emcon protocol (EMCON) is found over the IP layer (IANA protocol number: 14).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2086,Q_PROTO_EMOL,emol,,Emol.com,Chilean news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2260,Q_PROTO_EMPIRE_FOUR_KINGDOMS,empire_four_kingdoms,,Empire: Four Kingdoms,Mobile game,Game,http;https,Mobile-Android;iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -726,Q_PROTO_ENCAP,encap,,Encapsulation Header,The encap protocol (Encapsulation Header) is found over the IP layer (IANA protocol number: 98).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1783,Q_PROTO_ENCUENTRA24,encuentra24,,Encuentra24.com,"Official Panama Classifieds Portal. Publish ads for rent or sale real estate, or jobs, cars, pet",Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1726,Q_PROTO_ENERGY_TORRENT,energy_torrent,,Energy-Torrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -393,Q_PROTO_EONS,eons,,Eons.com,This protocol plug-in classifies the http traffic to the host eons.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -392,Q_PROTO_EPERNICUS,epernicus,,Epernicus.com,This protocol plug-in classifies the http traffic to the host epernicus.com. It also classifies the ssl traffic to the Common Name epernicus.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -37,Q_PROTO_EPM,epm,,EndPoint Mapper,End Point Mapper is a protocol used by Exchange to determine the ports used by various services.,Application Service,dcerpc;msrpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -782,Q_PROTO_EROOM_NET,eroom_net,,eRoom.net,This protocol plug-in classifies the ssl traffic to the Common Name project1.eroom.net.,Web,https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -783,Q_PROTO_ESNIPS,esnips,,eSnips.com,This protocol plug-in classifies the http traffic to the host esnips.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -719,Q_PROTO_ESP,esp,,Encapsulating Security Payload,The esp protocol (Encap Security Payload) is found over the IP layer (IANA protocol number: 50).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1467,Q_PROTO_ESPN,espn,,ESPN.go.com,American news website/resources about sports.,Web,http;https,20130425,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1773,Q_PROTO_ESPNCRICINFO,espncricinfo,,ESPNCricinfo.com,"International cricket news, live scores, photos, columns and player profiles.",Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2271,Q_PROTO_ESSAHRAA,essahraa,,Essahraa,Mauritanian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2087,Q_PROTO_ESSIRAGE,essirage,,EssirageNet,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -42,Q_PROTO_ESTABLISHED,established,,Established TCP Connection,The Established protocol is a virtual protocol grouping all TCP connections already established before starting analyzing the traffic (no SYNC).,Standard,tcp,NA,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1367,Q_PROTO_ETAO,etao,,Etao.com,eTao is the most comprehensive shopping search engine in China in terms of product and merchant information.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -43,Q_PROTO_ETH,eth,,Ethernet,The Ethernet protocol enables the addressing and sending of data between stations of an Ethernet segment.,Network Service,base;capwap;isl;mpls;pwe,Ethernet II,,x,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -44,Q_PROTO_ETHERIP,etherip,,Ethernet Over IP,The EtherIP protocol is used to encapsulate Ethernet frames in IP packets.,Tunneling,ip,RFC 3378,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2088,Q_PROTO_ETHIOJOBS,ethiojobs,,Ethiojobs.net,Ethiopian job ads,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2089,Q_PROTO_ETHIOTUBE,ethiotube,,EthioTube.net,Ethiopian video hosting website,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -537,Q_PROTO_ETSI_LI,etsi_li,,ETSI Lawful Interception TS 10 232-1 V2.1.1,Etsi LI is a protocol which forms a standard for telecoms operators and networks operators.,Tunneling,base,ETSI v2.1.1,,x,,,,,,x,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1368,Q_PROTO_ETTODAY,ettoday,,Ettoday.net,"ETtoday.net provide real-time news, including political, financial, social and international news, as well as life, consumption, pets, novelty, entertainment, sports, travel information and related news stories.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1112,Q_PROTO_EVE_ONLINE,eve_online,,Eve Online,Eve Online is a multiplayer online game edited by CCP.,Game,amazon_aws;http;https;sip;ssl;tcp,7.41.377968,Mac-Mac OS-- (2012-05-29);PC-Windows-7-- (2012-05-29),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1495,Q_PROTO_EVERNOTE,evernote,,Evernote.com,Web-based portal for note taking.,Web,akamai;http;https;ssl,20130701,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1282,Q_PROTO_EVERQUEST,everquest,,EverQuest - EverQuest II,"Everquest is a 3D fantasy massively multiplayer online role-playing game (MMORPG), for Windows platforms, developed by Sony Online Entertainment(SOE).",Game,http;https;ssl;udp,20041008,PC-Windows-EverQuest-2- (2012-10-31),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -784,Q_PROTO_EVONY,evony,,Evony.com,This protocol plug-in classifies the http traffic to the host evony.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1330,Q_PROTO_EXBLOG,exblog,,Exblog.jp,Japanase blog hosting services owned by Excite,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2262,Q_PROTO_EXPATRIATES,expatriates,,Expatriates,International Classified Ads website for expatriates.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -288,Q_PROTO_EXPEDIA,expedia,,Expedia.fr,This protocol plug-in classifies the http traffic to the hosts expedia.com and expedia.fr.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -394,Q_PROTO_EXPERIENCE_PROJECT,experience_project,,ExperienceProject.com,This protocol plug-in classifies the http traffic to the host experienceproject.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -395,Q_PROTO_EXPLOROO,exploroo,,Exploroo.com,This protocol plug-in classifies the http traffic to the host exploroo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1727,Q_PROTO_EXTREMEBITS,extremebits,,ExtremeBits Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1728,Q_PROTO_EXTREMENOVA,extremenova,,ExtremeNova Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -785,Q_PROTO_EYEJOT,eyejot,,Eyejot.com,"This protocol plug-in classifies the http traffic to the hosts eyejot.com, eyejot.typepad.com and eyejot.uservoice.com. It also classifies the ssl traffic to the Common Name .eyejot.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1369,Q_PROTO_EYNY,eyny,,Eyny.com,"Hot topic, leisure and entertainment, academic, computer, information exchange forum.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1370,Q_PROTO_EZFLY,ezfly,,Ezfly.com,Taiwanese online travel agency.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1526,Q_PROTO_EZPEER,ezpeer,,MyMusic.net.tw,P2p for music. music files downloading ( http://www.ezpeer.com ),Peer to Peer,http;https;ssl,6.0.1.7,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1371,Q_PROTO_EZTRAVEL,eztravel,,EzTravel.com.tw,Taiwanese online travel agency.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -244,Q_PROTO_FACEBOOK,facebook,,Facebook.com,Facebook is a social network.,Web,akamai;http;https;ssl,PC-Windows-Browser-www.facebook.com (2014-02-12);Mobile-Android-Facebook 4.0.0;iPhone-iOS-Facebook 6.9.1 (2014-02-07);Nokia Mobile-Windows Phone OS 8.0.10517.150-Facebook 5.2.3.0 (2014-02-12);BlackBerry-BlackBerry OS 10.2.1.1925-Facebook 10.3.0.2 (2014-02-12),BlackBerry-BlackBerry OS-10.2.1.2141-Facebook-10.4.0.14- (2014-05-07);Mobile-Android-4.2.1-Facebook-9.0.0.26.28- (2014-06-02);Mobile-Android-4.4.2-Facebook Messenger-5.0.0.25.1- (2014-05-27);Mobile-Android-Browser- (2014-05-27);Mobile-Bada-Facebook-0.9.11- (2014-05-27);Nokia Mobile-Nokia Asha 311-Symbian-Facebook-3.2.2- (2014-06-09);PC-Windows-7-Chrome-33.0.1750.154-Facebook for Chrome-6.4.2- (2014-05-05);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);PC-Windows-7-Chrome-Facebook-1.0.3- (2014-06-05);PC-Windows-8-Facebook-1.3.0.9- (2014-05-27);Windows Phone-Windows Phone OS-8-Facebook-5.2.6.0- (2014-06-03);Windows Phone-Windows Phone OS-8.0.10517.155-Messenger-3.1.0.0- (2014-05-27);iPhone-iOS-7.1.1-Facebook Messenger-5.1- (2014-05-27);iPhone-iOS-7.1.1-Facebook-10.0- (2014-06-03),,x,,,,,,,,,x,,,,,x,x,,,,x,,x,,,,x,,,,,,,,,, -1280,Q_PROTO_FACEBOOK_APPS,facebook_apps,,Facebook Apps,Facebook Applications.,Web,facebook;zynga,PC-Windows-Browser-apps.facebook.com (2014-11-14);Mobile-Android-Facebook 4.0.0;iPhone-iOS-Facebook 6.8,BlackBerry-BlackBerry OS-10.2.1.2102-Facebook-10.4.0.12- (2014-04-01);Mobile-Android-4.2.2-Facebook-8.0.0.26.24- (2014-05-06);PC-Windows-7-Chrome-35.0.1916.114-angrybirds/farmville- (2014-06-02);iPhone-iOS-7.1.1-Facebook-10.0-angrybirds/farmville- (2014-06-02),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,x,,,, -524,Q_PROTO_FACEBOOK_MAIL,facebook_mail,,facebook mail,Facebook_mail is a webmail environment on Facebook. Encrypted traffic is classified as Facebook.,Webmail,facebook;http,PC-Windows-Browser-www.facebook.com (2013-08-30),PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03),,x,,x,,,,,,,x,,,,x,,,,,,x,,x,,,,,,,,,,,,,, -1869,Q_PROTO_FACENAMA,facenama,,Facenama.com,Iranian social network,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -396,Q_PROTO_FACEPARTY,faceparty,,Faceparty.com,This protocol plug-in classifies the http traffic to the host faceparty.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -397,Q_PROTO_FACES,faces,,Faces.com,This protocol plug-in classifies the http traffic to the host faces.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1117,Q_PROTO_FACETIME,facetime,,Apple FaceTime,FaceTime is an Apple video calling software which runs on iOS based mobile devices.,Audio/Video,rtp;sip,Mac-Mac OS 10-FaceTime 1.1.1;Mac-iOS-FaceTime 7.0.4,Mac-Mac OS-10.9.2-Facetime-3.0- (2013-12-17);iPhone-iOS-7.1.1-Facetime-7.1.1- (2013-12-17),,x,,,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, -2218,Q_PROTO_FARMVILLE,farmville,,FarmVille,FarmVille is a farming simulation social network game developed by Zynga.,Web,http;https;ssl,PC-Windows-Browser-http://zynga.com/game/farmville (2014-03-06),PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,x,,,, -1870,Q_PROTO_FARSNEWS,farsnews,,FarsNews.com,Iranian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1372,Q_PROTO_FASHIONGUIDE,fashionguide,,FashionGuide.com.tw,"Fashion, beauty, discount information guide, fashion and beauty forum, cosmetic reviews.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1871,Q_PROTO_FATAKAT,fatakat,,Fatakat.com,Egyptian portal targeted to arab wowen lifestyle,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1308,Q_PROTO_FC2,fc2,,FC2.com,Japanese free blog platform and social website,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2206,Q_PROTO_FEMINA,femina,,Femina,"Macedonian website specialised in women news, trends, gears, etc",Web,http;https,20140318,PC-Linux-BasicTest- (2014-03-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1729,Q_PROTO_FENOPY,fenopy,,Fenopy Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -398,Q_PROTO_FETLIFE,fetlife,,FetLife.com,This protocol plug-in classifies the http traffic to the host fetlife.com. It also classifies the ssl traffic to the Common Name fetlife.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -629,Q_PROTO_FIBRE_CHANNEL,fibre_channel,,Fibre Channel,The fibre_channel protocol (Fibre Channel) is found over the IP layer (IANA protocol number: 133).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1872,Q_PROTO_FIJITIMES,fijitimes,,FijiTimes.com,Fijian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -787,Q_PROTO_FILE_DROPPER,file_dropper,,FileDropper.com,This protocol plug-in classifies the http traffic to the host filedropper.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -786,Q_PROTO_FILE_HOST,file_host,,FileHost.ro,This protocol plug-in classifies the http traffic to the host filehost.ro.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1991,Q_PROTO_FILEFACTORY_COM,filefactory_com,,filefactory.com,Classifies web browsing on the filefactory.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -316,Q_PROTO_FILEFLYER,fileflyer,,FileFlyer.com,"FileFlyer is an online solution to store, send and share files",Web,http;https,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1527,Q_PROTO_FILEGURI,fileguri,,Fileguri.com,File sharing web site and p2p client ( http://www.fileguri.com ),Peer to Peer,http;https;ssl,6.9.2,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1528,Q_PROTO_FILEI,filei,,Filei.co.kr,P2P website. ( http://www.filei.co.kr ),Peer to Peer,http;https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -2090,Q_PROTO_FILELIST,filelist,,Filelist.ro,Romanian torrent indexing website,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1529,Q_PROTO_FILEMAIL,filemail,,Filemail.com,File transfer service for private business. Uses Microsoft Cloud ( http://www.filemail.com ),Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1086,Q_PROTO_FILEMAKER_PRO,filemaker_pro,,FileMaker Pro,FileMaker Pro is a relational database application from FileMaker Inc and which runs on Microsoft Windows as well as Mac OS.,Database,http;https;iiop,7,11/7/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1957,Q_PROTO_FILEPOST_RU,filepost_ru,,filepost.ru,Classifies web browsing on the filepost.ru Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -788,Q_PROTO_FILER_CX,filer_cx,,Filer.cx,This protocol plug-in classifies the http traffic to the host filer.cx.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1998,Q_PROTO_FILER_NET,filer_net,,filer.net,Classifies web browsing on the filer.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -789,Q_PROTO_FILES_TO,files_to,x,Files.to,This protocol plug-in classifies the http traffic to the host files.to.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1997,Q_PROTO_FILESEND_NET,filesend_net,,filesend.net,Classifies web browsing on the filesend.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1530,Q_PROTO_FILESERVE,fileserve,,FileServe.com,Fileserve is a file share service for personal use. ( http://www.fileserve.com ),Web,http;https,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1907,Q_PROTO_FILESHAREPRO,filesharepro,,WWW File Share Pro (wfshome.com),"File transfer application, allowing file sharing on a LAN network, or on the Internet.",File Transfer,http;https,7.0 (Windows),PC-Windows-FileSharePro-7.0- (2013-12-23),,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -1693,Q_PROTO_FILESOVERMILES,filesovermiles,,Filesovermiles.com,Filesovermiles is a p2p written in Flash which is meant to be executed from a browser page (blocking use case is supported but flow classification is limited to web).,Peer to Peer,http;https,20130819,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -790,Q_PROTO_FILESTUBE,filestube,,FilesTube.com,This protocol plug-in classifies the http traffic to the host filestube.com.,Web,http;https,20140617,PC-Linux-BasicTest- (2014-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -560,Q_PROTO_FILETOPIA,filetopia,,Filetopia.org,"Filetopia is a free, proprietary peer-to-peer client software for Windows. It uses an encrypted protocol for all its communications. In addition to the usual peer-to-peer features, Filetopia provides a chat, a buddy search and a message board.",Peer to Peer,https;socks4;socks5;tcp;udp,Filetopia 3.04d,4/13/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -399,Q_PROTO_FILLOS_DE_GALICIA,fillos_de_galicia,,Fillos de Galicia (fillos.org),This protocol plug-in classifies the http traffic to the host fillos.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -400,Q_PROTO_FILMAFFINITY,filmaffinity,,FilmAffinity.com,This protocol plug-in classifies the http traffic to the host filmaffinity.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1873,Q_PROTO_FINN,finn,,FINN.no,Norwegian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -630,Q_PROTO_FIRE,fire,,FIRE,The fire protocol (FIRE) is found over the IP layer (IANA protocol number: 125).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -556,Q_PROTO_FIREFOX_UPDATE,firefox_update,,Firefox Update,Mozilla Firefox update protocol for the browser and its plugins. This only applies to updates made from the browser and not those manually downloaded.,Web,conduit;mozilla,PC-Windows-Firefox 24,Mac-Mac OS-10.9.3-Firefox-29.0.1- (2014-05-27);PC-Linux-14.04-Firefox-29.0.1- (2014-02-28);PC-Windows-Firefox-29.0.1- (2014-05-13);PC-Windows-Firefox-29.0.1- (2014-02-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -942,Q_PROTO_FLASH,flash,,Flash Media Playback,Adobe Flash Media Playback is a dynamic HTTP streaming protocol used to access video contents from a smart client application.,Audio/Video,http;https,2.0,9/28/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -550,Q_PROTO_FLASHPLUGIN_UPDATE,flashplugin_update,,Adobe Flash Plugin Update,Flash exchanges plug-in version numbers with Adobe servers.,Web,http;https,PC-Windows 7-Firefox 17;PC-Windows 7-Firefox 17,Mac-Mac OS-10.9.2-Flash Player-13.0.0.206- (2013-11-25);PC-Linux-ubuntu 13.04-Adobe Flash Player-11.2.202.356- (2013-11-25);PC-Windows-8-Flash Player-13.0.0.206- (2013-11-25);PC-Windows-Flash Player-13.0.0.206- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -401,Q_PROTO_FLEDGEWING,fledgewing,,FledgeWing.com,This protocol plug-in classifies the http traffic to the host fledgewing.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -300,Q_PROTO_FLICKR,flickr,,Flickr.com,This protocol plug-in classifies the http traffic to the host flickr.com. Encrypted traffic is classified as yahoo.,Web,http;https;ssl,PC-Windows-Browser-www.flickr.com (2014-03-10);Mobile-Android 4.2.1-Flickr 2.1.5.29352 (2014-03-13),Mobile-Android-4.4.2-Flickr-3.0.3- (2014-05-30);Mobile-Bada-Flickr-1.0.0- (2014-04-08);PC-Windows-7-Chrome-34.0.1847.116-Flickr-7- (2014-04-16);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);Windows Phone-Windows Phone OS-Flickr-2.1.0.0- (2014-01-07);iPhone-iOS-7.1.1-Flickr-3.0.2- (2014-06-02),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2091,Q_PROTO_FLIPKART,flipkart,,Flipkart.com,Indian ecommerce website,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -402,Q_PROTO_FLIXSTER,flixster,,Flixster.com,This protocol plug-in classifies the http traffic to the host flixster.com.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -791,Q_PROTO_FLUMOTION,flumotion,,Flumotion.com,This protocol plug-in classifies the http traffic to the host flumotion.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -792,Q_PROTO_FLUXIOM,fluxiom,,Fluxiom.com,This protocol plug-in classifies the http traffic to the host fluxiom.com. It also classifies the ssl traffic to the Common Name fluxiom.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -793,Q_PROTO_FLY_PROXY,fly_proxy,,FlyProxy.com,This protocol plug-in classifies the http traffic to the host flyproxy.com. It also classifies the ssl traffic to the Common Names flyproxy.com and SD259.slicebox.net.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1809,Q_PROTO_FLYCELL_EC,flycell_ec,,Flycell.ec,SMS alerts service based in Ecuador,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1810,Q_PROTO_FLYCELL_PE,flycell_pe,,Flycell.pe,"Peruvian ringtone, wallpaper and mobile game portal",Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2168,Q_PROTO_FNB,fnb,,Fnb,South African banking website,Web,http;https;ssl,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -794,Q_PROTO_FOGBUGZ,fogbugz,,FogCreek.com,This protocol plug-in classifies the http traffic to the host fogbugz.com. It also classifies the ssl traffic to the Common Name fogbugz.com.,Web,http;https;ssl,20130828,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1874,Q_PROTO_FORENINGSSPARBANKEN,foreningssparbanken,,ForeningsSparbanken (swedbank.se),Swedish web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1373,Q_PROTO_FORTUNECHINA,fortunechina,,Fortunechina.com,Chinese top fortune news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2092,Q_PROTO_FORUM,forum,,Forum.ge,Coratian forum,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -795,Q_PROTO_FOTKI,fotki,,Fotki.com,This protocol plug-in classifies the http traffic to the host fotki.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -403,Q_PROTO_FOTOLOG,fotolog,,Fotolog.com,This protocol plug-in classifies the http traffic to the host fotolog.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1531,Q_PROTO_FOTOWEB,fotoweb,,Fotoweb.fotoware.com,Digital asset management workflow solutions ( http://fotoweb.fotoware.com ),Web,http;https,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -404,Q_PROTO_FOURSQUARE,foursquare,,Foursquare.com,This protocol plug-in classifies the http traffic to the host foursquare.com. It also classifies the ssl traffic to the Common Name foursquare.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2195,Q_PROTO_FOXBUSINESS,foxbusiness,,Fox Business Network,Fox Business Network (FBN) is an American cable and satellite business news television channel that is owned by the Fox Entertainment Group division of 21st Century Fox. The network discusses business and financial news.,Web,http;https,2294,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -998,Q_PROTO_FOXMOVIES,foxmovies,,Foxmovies.jp,"This protocol plug-in classifies the http traffic to the hosts foxmovies.jp, foxmovies.com.",Web,http;https,20140320,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -999,Q_PROTO_FOXNEWS,foxnews,,FoxNews.com,This protocol plug-in classifies the http traffic to the host foxnews.com.,Web,akamai;http;https,PC-Windows-Browser-www.foxnews.com (2014-03-14),PC-Windows-7-Chrome-34.0.1847.131- (2014-05-13);PC-Windows-8-Fox News-1.0.0.22- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1000,Q_PROTO_FOXSPORTS,foxsports,,FoxSports.com,This protocol plug-in classifies the http traffic to the host foxsports.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -887,Q_PROTO_FOXY,foxy,,Foxy,Foxy is a peer-to-peer protocol based on GnucDNA.,Peer to Peer,gnutella;http;https,1,6/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1811,Q_PROTO_FREE,free,,Free,French ISP and mobile operator website.,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2197,Q_PROTO_FREE_MUSIC_DOWNLOAD,free_music_download,,Free Music Download Pro - Downloader and Player,"Download, play, sort, organize media files.",Audio/Video,http;https;scorecardresearch,iPhone-iOS-Free Music Download Pro 1.4 (2014-03-19),iPhone-iOS-Free Music Download Pro-1.4- (2014-03-21),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, -568,Q_PROTO_FREEBSD_UPDATE,freebsd_update,,FreeBSD Updates,This protocol is used for FreeBSD updates.,Web,http;https,FreeBSD v8.1,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -796,Q_PROTO_FREEETV,freeetv,,FreeeTV.com,This protocol plug-in classifies the http traffic to the host freeetv.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1730,Q_PROTO_FREELOADER,freeloader,,Freeloader Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1875,Q_PROTO_FREEMAIL,freemail,,Freemail.hu,Hungarian webmail,Web,http;https,20131025,,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2007,Q_PROTO_FREEPROXIES,freeproxies,,Freeproxies.org,"Proxy hosting service (redirector and anonymizer) that uses the CGI Proxy script. Main features are SSL support and Youtube.com video streaming proxying. It hosts several proxy websites, like Vtunnel.com.",Web,http;https;ssl,20131227,PC-Windows-- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1731,Q_PROTO_FREETORRENT,freetorrent,,Freetorrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -405,Q_PROTO_FRIENDS_REUNITED,friends_reunited,,FriendsReunited.com,This protocol plug-in classifies the http traffic to the host friendsreunited.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -320,Q_PROTO_FRIENDSTER,friendster,,Friendster.com,"Friendster is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20111115,11/4/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -797,Q_PROTO_FRIENDVOX,friendvox,,FriendVox.com,This protocol plug-in classifies the http traffic to the host friendvox.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -536,Q_PROTO_FRING,fring,,fring - Peer to Peer Mobile VOIP,Fring is a peer-to-peer Mobile VoIP based Internet telephony network.,Audio/Video,http;https;ssl;tcp;udp,20100804,12/12/2011,,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -2001,Q_PROTO_FROSTWIRE,frostwire,,FrostWire Bittorrent client,FrostWire is a BitTorrent client. This signature classifies flows to the official software website,Peer to Peer,bittorrent;http;https,20131204,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -406,Q_PROTO_FRUHSTUCKSTREFF,fruhstuckstreff,,Fruhstuckstreff.de,This protocol plug-in classifies the http traffic to the host fruehstueckstreff.de.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2176,Q_PROTO_FRUIT_NINJA,fruit_ninja,,Fruit Ninja,Mobile game.,Game,http;https,Mobile-Android-Fruit Ninja 1.8.8;iPhone-iOS-Fruit Ninja 1.8.8,Mobile-Android-Fruit Ninja-1.8.8- (2014-03-13);iPhone-iOS-Fruit Ninja-1.8.8- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -2249,Q_PROTO_FSECURE,fsecure,,Fsecure,F-Secure Corporation is a Finnish computer security company,Security Service,http;https;ssl,2294,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -589,Q_PROTO_FSECURE_UPDATE,fsecure_update,,Fsecure Update,Fsecure_update is the protocol used for Fsecure softwares updates.,Web,http;https,PC-Windows 7-F-Secure Anti-Virus 1.77.132.0,Mac-Mac OS-10.9.3-F-Secure Anti-Virus-15796- (2014-05-27);PC-Windows-7-F-Secure Anti-Virus-2.6.303.0- (2014-05-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -45,Q_PROTO_FTP,ftp,,File Transfer Protocol,The FTP protocol is used for reliable data transfer between a client and a server.,File Server,http;socks4;socks5;tcp,File Transfer Protocol IPv4;File Transfer Protocol IPv6,2/14/2014,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,x,,,,,,,, -46,Q_PROTO_FTP_DATA,ftp_data,,File Transfer Protocol Data,This protocol is used to transport data in data connection of FTP communication.,File Server,http;tcp,FTP Data IPv4;FTP Data IPv6,7/4/2008,,,,,ftp,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -751,Q_PROTO_FTPS,ftps,,File Transfer Protocol Secure,Secure version of the FTP protocol.,File Server,ssl,Secure FTP IPv4;Secure FTP IPv6,,,,,,,989 and 990,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -407,Q_PROTO_FUBAR,fubar,,Fubar.com,This protocol plug-in classifies the http traffic to the host fubar.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1094,Q_PROTO_FUNSHION,funshion,,Funshion video player,Funshion player is a Chinese service for downloading and streaming movies.,Web,http;https;tcp;udp,2.4.5.9,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1532,Q_PROTO_FUZE_MEETING,fuze_meeting,,Fuze meeting,"Video-conferencing application (audio, video HD, desktop sharing, file transfer)",Audio/Video,https;ssl,1.10.45735.0,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -343,Q_PROTO_GADUGADU,gadugadu,,Gadu-Gadu,Gadu Gadu is a Polish instant messaging protocol.,Instant Messaging,http;https;tcp,GaduGadu v10,10/16/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -408,Q_PROTO_GAIAONLINE,gaiaonline,,GaiaOnline.com,This protocol plug-in classifies the http traffic to the host gaiaonline.com. It also classifies the ssl traffic to the Common Name .gaiaonline.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1374,Q_PROTO_GAMEBASE_TW,gamebase_tw,,Gamebase.com.tw,"Taiwanese game information portal providing game reviews, walkthrough, cheats.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2213,Q_PROTO_GAMELOFT,gameloft,,Gameloft Games,Games for mobile devices by Gameloft.,Game,http;https;ssl,20131218,6/7/2014,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1375,Q_PROTO_GAMER_TW,gamer_tw,,Gamer.com.tw,"Taiwanese game portal providing game reviews, forum, news.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -409,Q_PROTO_GAMERDNA,gamerdna,,GamerDNA.com,This protocol plug-in classifies the http traffic to the host gamerdna.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1150,Q_PROTO_GAMES_CO,games_co,,Games.co.id,This protocol plug-in classifies the http traffic to the host games.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1376,Q_PROTO_GAMESMOMO,gamesmomo,,Gamesmomo.net,"Selection of fun games, Flash Games.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1273,Q_PROTO_GANJI,ganji,,Ganji.com,This protocol plug-in classifies the http traffic to the host ganji.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1876,Q_PROTO_GARAANEWS,garaanews,,GaraaNews.com,Jordanian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -48,Q_PROTO_GARP,garp,,Generic Attribute Registration Protocol,The Generic Attribute Registration Protocol (GARP) provides a generic framework whereby devices in a bridged LAN can register or delete attribute values between each other.,Application Service,8021q;eth;gre,RFC 3945,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -410,Q_PROTO_GATHER,gather,,Gather.com,This protocol plug-in classifies the http traffic to the host gather.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1533,Q_PROTO_GATHERPLACE,gatherplace,,GatherPlace.net,Gatherplace is a web conferencing software.,Web,http;https;ssl,4.3.8.2,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -411,Q_PROTO_GAYS,gays,,Gays.com,This protocol plug-in classifies the http traffic to the host gays.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1877,Q_PROTO_GAZETA,gazeta,,Gazeta.pl,Polish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2181,Q_PROTO_GAZETAEXPRESS,gazetaexpress,,Gazetaexpress,Albanian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2184,Q_PROTO_GAZZETTA,gazzetta,,Gazzetta,Greek news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2009,Q_PROTO_GBRIDGE,gbridge,,Gbridge.com,"Gbridge is a free software that lets you remotely control PCs, sync folders, share files, and chat securely.",Tunneling,http;https;udp,2.0.0.1363,PC-Windows-Gbridge-2.0.0.1363- (2013-12-17),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -412,Q_PROTO_GENI,geni,,Geni.com,This protocol plug-in classifies the http traffic to the host geni.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,, -2093,Q_PROTO_GERASANEWS,gerasanews,,Gerasanews.com,Jordanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1377,Q_PROTO_GFAN,gfan,,Gfan.com,"One of the largest Android communities providing ROM, applications, tutorials and other content.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -631,Q_PROTO_GGP,ggp,,Gateway-to-Gateway Protocol,The ggp protocol (Gateway_to_Gateway) is found over the IP layer (IANA protocol number: 3).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1878,Q_PROTO_GHANAWEB,ghanaweb,,GhanaWeb.com,Ghanaian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1107,Q_PROTO_GHOSTSURF,ghostsurf,,GhostSurf,GhostSurf is an internet privacy application.,Security Service,ssl;tcp,6.0,PC-Windows-7-GhostSurf-6.0- (2012-04-20),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1987,Q_PROTO_GIGASIZE_COM,gigasize_com,,gigasize.com,Classifies web browsing on the gigasize.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1534,Q_PROTO_GIGATRIBE,gigatribe,,GigaTribe.com,GigaTribe is a peer-to-peer file sharing network (classification of web/authentication part only).,Peer to Peer,http;https;ssl,3.04.012,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -798,Q_PROTO_GIGAUP,gigaup,,GigaUP.fr,This protocol plug-in classifies the http traffic to the host gigaup.fr. It also classifies the ssl traffic to the Common Name gigaup.fr.,Web,http;https;ssl,20120209,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -49,Q_PROTO_GIOP,giop,,General Inter-ORB Protocol,The General Inter-Orb protocol (GIOP) is used to make requests or return replies between ORBs in a Corba environment.,Middleware,tcp;udp,1.0;1.1;1.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -752,Q_PROTO_GIOPS,giops,,General Inter-ORB Protocol Secure ,This protocol is the secure version of the GIOP protocol.,Middleware,ssl,Secure General Inter-ORB Protocol v1,,,,,,,684,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -50,Q_PROTO_GIZMO,gizmo,x,Gizmo,"Gizmo was an instant messaging service, acquired and closed by Google.",Instant Messaging,http,WinGizmo;Gizmo-s2n1,7/4/2008,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, -799,Q_PROTO_GLIDE,glide,,Glide services,This protocol plug-in classifies the http traffic to the host desktop.glidesociety.com. It also classifies the ssl traffic to the Common Name glidesociety.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2192,Q_PROTO_GLOBALPUBLISHERS,globalpublishers,,Globalpublishers,Tanzanian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1879,Q_PROTO_GLOBO,globo,,Globo.com,Brazilian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -51,Q_PROTO_GMAIL,gmail,,Google Mail,Gmail is the Google webmail service.,Webmail,google_gen,PC-Windows-Browser-www.gmail.com (2013-08-30),Mobile-Android-Gmail-4.8- (2014-06-05);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);Windows Phone-Windows Phone OS-8-Mail-8.3.0.1- (2014-05-27);iPhone-iOS-Gmail-3.0.2- (2014-04-30),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -263,Q_PROTO_GMAIL_BASIC,gmail_basic,,Gmail basic,Gmail basic is the HTML version of the Google Webmail service. Encrypted traffic is classified as Gmail.,Webmail,google_gen,PC-Windows-Browser-www.gmail.com (2013-07-05),PC-Windows-Chrome-35.0.1916.114- (2014-05-27),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -273,Q_PROTO_GMAIL_CHAT,gmail_chat,,Google Chat,Google chat is an online Webmessenger from Google.,Instant Messaging,google_gen,20110210,3/7/2012,,x,,,,,,,,x,x,,,,,x,x,,,,,,,,,,,,,,,,,,,, -906,Q_PROTO_GMAIL_DRIVE,gmail_drive,,Gmail drive,"GMAIL Drive is a Shell Namespace Extension that creates a virtual file system around a Google Mail account, allowing Gmail as a storage medium. GMAIL Drive is only classified over http and not over https.",File Server,gmail,1.0.17,8/2/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -280,Q_PROTO_GMAIL_MOBILE,gmail_mobile,,Gmail Mobile,Gmail_mobile is the Google webmail for mobile phones. This protocol decodes only the non-ciphered version.,Webmail,google_gen,20120229,5/27/2014,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -1203,Q_PROTO_GMARKET,gmarket,,Gmarket.co.kr,This protocol plug-in classifies the http traffic to the host gmarket.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -632,Q_PROTO_GMTP,gmtp,,GMTP,The gmtp protocol (GMTP) is found over the IP layer (IANA protocol number: 100).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1116,Q_PROTO_GMX,gmx,,GMX webmail,GMX is a German webmail.,Webmail,http;https;ssl,20130418,PC-Windows-Chrome- (2013-04-29),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -903,Q_PROTO_GNUNET,gnunet,,GNUnet,GNUnet is a framework for secure peer-to-peer networking mainly used for anonymous file sharing. It is part of the GNU project.,Peer to Peer,http;https;tcp;udp,9.7,8/9/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -52,Q_PROTO_GNUTELLA,gnutella,,gnutella,Gnutella is a peer-to-peer protocol. [Note: gnutella is also known as kadmelia.],Peer to Peer,http;https;tcp;udp,PC-Windows-Gnutella 2.0;PC-Windows-LimeWire 4.16.6;PC-Windows-imesh 7.2;PC-Windows 7-Shareaza 2.7.0.0 (2013-11-25),Mobile-Android-4.2.1-DroidG (gnutella)-1.2- (2014-02-19);Mobile-Android-4.2.1-DroidG2 (gnutella 2)-1.1.f- (2014-02-19);PC-Windows-7-LimeRunner-3.3.0.0- (2014-04-04);PC-Windows-7-Shareaza-2.7.4.0- (2014-04-03);PC-Windows-Shareaza-2.7.4.0- (2014-05-30),,x,,x,,,,,,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1780,Q_PROTO_GOAL,goal,,Goal.com,New media company that provides soccer news and entertainment,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2094,Q_PROTO_GOB,gob,,Gob.bo,Bolivian government portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -53,Q_PROTO_GOBOOGY,goboogy,,GoBoogy,GoBoogy is a peer-to-peer (p2p) application used to share files with other GoBoogy users over the Internet.,Peer to Peer,http;https;tcp,Goboogy v2.3.9,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1880,Q_PROTO_GOGO,gogo,,Gogo.mn,Mongolian search engine and web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1535,Q_PROTO_GOGOBOX,gogobox,,Gogobox.com.tw,Cloud file storage web service.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -413,Q_PROTO_GOGOYOKO,gogoyoko,,Gogoyoko.com,This protocol plug-in classifies the http traffic to the host gogoyoko.com.,Web,amazon_aws;http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1378,Q_PROTO_GOHAPPY,gohappy,,Gohappy.com.tw,Taiwanese E-commerce web portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1536,Q_PROTO_GOMEETNOW,gomeetnow,,Gomeetnow,Gomeetnow is a web conferencing software.,Web,http;https;ssl,5.0.1.40,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1503,Q_PROTO_GOMTV_VOD,gomtv_vod,,GOMTV.net (VOD),Gom TV is a social video website designed for gamers.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1310,Q_PROTO_GOO_NE,goo_ne,,Goo.ne.jp,Japanese web portal owned by NTT,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -414,Q_PROTO_GOODREADS,goodreads,,Goodreads.com,This protocol plug-in classifies the http traffic to the host goodreads.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -54,Q_PROTO_GOOGLE,google,,Google.com,This protocol is used for sending user queries to the Google search engine.,Web,google_gen;http;https;ssl,PC-Windows-Browser-www.google.com (2014-02-06);Mobile-Android-Google Search 3.1.24.941712 (2014-02-06);iPhone-iOS-Google Search 3.2.1.25875 (2014-02-06);Windows Phone-Windows Phone OS-Google 2.0.295.80 (2014-02-06);BlackBerry-BlackBerry OS-Google Search Popup 1.7.1 (2014-02-06),BlackBerry-BlackBerry OS-Google Search Pop Up from RadicalAppz-1.7.1- (2014-02-06);Mobile-Android-4.4.2-Google Search-3.4.16.1149292- (2014-06-02);Mobile-Samsung Wave 3-Bada-2.0S8600XXLC3-Google Search-0.04- (2014-02-06);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);PC-Windows-8-Google Search-1.2.1.12- (2014-02-06);Windows Phone-520 Nokia Lumia-Windows Phone OS-8.0.10517.150-Google Search-2.0.295.80- (2014-04-02);iPhone-iOS-7.1.1-Google Search-4.0.1- (2014-06-03),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2150,Q_PROTO_GOOGLE_ACCOUNTS,google_accounts,,Google Accounts,Detects SSL access to the Google Accounts server.,Web,google_gen,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -247,Q_PROTO_GOOGLE_ADS,google_ads,,Google ads,Google Ads is the online ad service from Google.,Web,google_gen,PC-Windows-Browser-adwords.google.com (2013-10-09),PC-Windows-7-Chrome-35.0.1916.153- (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -744,Q_PROTO_GOOGLE_ANALYTICS,google_analytics,,Google Analytics,Google Analytics is the enterprise-class web analytics solution that gives you rich insights into your website traffic and marketing effectiveness.,Web,google_gen,PC-Windows-Browser-www.google.com/analytics/ (2013-10-09),Mobile-Android-4.4.2-Google Analytics-2.2.5- (2013-10-09);PC-Windows-7-Chrome-35.0.1916.114- (2013-10-09);iPhone-iOS-7.1-Dashboard for Google Analytics-4.0.1- (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1104,Q_PROTO_GOOGLE_APPENGINE,google_appengine,,Google App Engine,Google App Engine is a platform as a service (PaaS) cloud computing platform for developing and hosting web applications in Google-managed data centers.,Web,google_gen,PC-Windows 7-Google App Engine 1.8.8 (2013-11-19),PC-Windows-7-Google App Engine-1.9.6- (2013-12-16),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -800,Q_PROTO_GOOGLE_CACHE,google_cache,,Google Cache,Google Cache saves a copy of the webpages which were found by the Google search engine.,Web,google_gen,20111107,3/29/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1099,Q_PROTO_GOOGLE_DESKTOP,google_desktop,,Google Desktop (discontinued on 2011-09-14),"Google Desktop is a desktop search software made by Google, with indexed document metadata.",Web,google_gen,20111122,PC-Windows-Google Desktop-5.9.1005.12335- (2011-12-20),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1489,Q_PROTO_GOOGLE_DOCS,google_docs,,Google Documents,"On-line file storage and sharing web-service by Google. Most of the traffic is encrypted with generic Google certificates, and cannot be classified. Classification is correct for traffic under a proxy and some limited workflows. [Note: google_docs is also known as google_drive.]",Web,google_gen,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -55,Q_PROTO_GOOGLE_EARTH,google_earth,,Google Earth,Google Earth is a program used to view a virtual Earth in 3D.,Web,google_gen,PC-Windows 7-Google Earth 7.1.1.1888 (2013-07-15),Mac-Mac OS-10.9.2-Google Earth-7.1.2.2041- (2014-03-07);Mobile-Android-4.4.2-Google Earth-7.1.3.1255- (2014-05-08);PC-Linux-Ubuntu 13.04-Google Earth-7.1.2.2041- (2014-03-07);PC-Windows-7-Chrome-35.0.1916.114- (2014-03-07);PC-Windows-7-Google Earth-7.1.2.2041- (2014-03-11);iPhone-iOS-7.1-Google Earth-7.1.1.1843- (2014-04-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -943,Q_PROTO_GOOGLE_GEN,google_gen,,Google Generic,This protocol is a generic layer used as a base for all the Google protocols.,Web,http;https;ssl,20110621,,,x,,,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,, -56,Q_PROTO_GOOGLE_GROUPS,google_groups,,Google groups,Google groups,Forum,google_gen,20110119,10/4/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -57,Q_PROTO_GOOGLE_MAPS,google_maps,,Google Maps,Google Maps can be used to calculate routes and to look at maps. The encrypted traffic is classified as google.,Web,google_gen;gstatic;windows_azure,PC-Windows-Browser-maps.google.com (2013-10-09);Windows Phone-Windows Phone OS-Google Maps 8.0.9.1,Mobile-Android-Google Maps-8.0.0- (2014-06-06);Mobile-Nokia 701-Symbian-113.010.1506-Google Maps-2.3.2- (2014-01-17);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);Windows Phone-Windows Phone OS-8-Google Maps-8.7.1.1- (2014-05-27);iPhone-iOS-7.0.6-Google Maps-2.7.0- (2014-03-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -594,Q_PROTO_GOOGLE_PICASA,google_picasa,,Google Picasa,Google Picasa is a digital photo and video organizer used to edit and synchronize pictures or videos over the web.,Web,google_gen;http,20110225,"PC-Windows-XP-Picasa-3.8.0 (117.29,0)- (2011-08-02)",,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1122,Q_PROTO_GOOGLE_PLAY,google_play,,Google Play,Google Play (formerly Android Market) is an online software store developed by Google for Android OS devices.,Application Service,google_gen,PC-Windows-Browser-play.google.com (2012-03-29),Mobile-Android-4.4.2-Google Play-4.8.20- (2014-06-10);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1125,Q_PROTO_GOOGLE_PLUS,google_plus,,Google Plus,Google Plus is a social network. It is classified when sharing from an external link. Other traffic is classified as google or google_cache.,Web,google_gen,PC-Windows-Browser-plus.google.com (2013-11-25),Mobile-Android-4.4.2-Google+-4.3.1.63038142- (2014-05-08);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-29);Windows Phone-Windows Phone OS-8-Google+-3.0.0.0- (2014-01-15);iPhone-iOS-7.1-Google+-4.6.2- (2014-04-08),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2288,Q_PROTO_GOOGLE_SAFEBROWSING,google_safebrowsing,,Google Safe Browsing,Google Safe Browsing is a web-service and API for checking web pages against threats. This signature detects a Google Safebrowse Submission.,Web,http;https,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1171,Q_PROTO_GOOGLE_SKYMAP,google_skymap,,Google Skymap,Google Sky Map is an outer space viewer Android mobile application.,Web,google_analytics,20120530,Mobile-Android-Google Skymap-1.6.4- (2012-06-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1105,Q_PROTO_GOOGLE_TOOLBAR,google_toolbar,,Google Toolbar,"The Google Toolbar is an extension for Internet Explorer and Mozilla Firefox which provides a search box, a pop-up blocker, a translator, etc..",Web,google;google_gen,Google Toolbar 7.0,PC-Windows-Internet Explorer- (2011-12-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -801,Q_PROTO_GOOGLE_TRANSLATE,google_translate,,Google Translate,Google Translate is the Google translation tool.,Web,google_gen,20120530,6/4/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2095,Q_PROTO_GOSSIPLANKANEWS,gossiplankanews,,GossipLankaNews.com,SriLankan news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -886,Q_PROTO_GOTODEVICE,gotodevice,,GoToDevice Remote Administration,GoToDevice is a remote control and administration tool.,Thin Client,ipx;netbios;tcp;udp,Gotodevice v2.1.8087,6/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -889,Q_PROTO_GOTOMEETING,gotomeeting,,GoToMeeting Online Meeting,GoToMeeting is an online meeting service developed by Citrix.,Audio/Video,http;https;ssl;udp,GotoMeeting v4.8.0.708,6/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -894,Q_PROTO_GOTOMYPC,gotomypc,,GoToMyPC Remote Access,"Citrix GoToMyPC is a secured web-based remote access solution, enabling to take control of a PC/MAC from a web browser.",Thin Client,http;https;ssl,Citrix GoToMyPC 7.0,6/15/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, -338,Q_PROTO_GOUGOU,gougou,,Gougou.com,Gougou is a chinese web search engine.,Web,http;https,20091112,10/11/2011,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1147,Q_PROTO_GRATISINDO,gratisindo,,Gratisindo.co.id,This protocol plug-in classifies the gratisindo http traffic.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -58,Q_PROTO_GRE,gre,,Generic Routing Encapsulation,The Generic Routing Encapsulation protocol (GRE) is used to encapsulate a protocol into another one generically.,Tunneling,ip;mobile_ip,RFC 1701;RFC 2784,7/4/2008,,x,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1333,Q_PROTO_GREE,gree,,GREE Games,Japanese web portal dedicated to smartphone games,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1881,Q_PROTO_GRID,grid,,Grid.mk,Macedonian news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -417,Q_PROTO_GRONO,grono,,Grono.net,This protocol plug-in classifies the http traffic to the host grono.net.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -261,Q_PROTO_GROOVE,groove,,Microsoft Office Groove,Microsoft Office Groove is a desktop application designed for document collaboration in teams with members who are regularly off-line or who do not share the same network security clearance.,Microsoft Office,http;https;ssl;tcp;udp,20081103,1/14/2009,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -532,Q_PROTO_GROOVESHARK,grooveshark,,Grooveshark.com,Grooveshark is an online unlimited service for music.,Audio/Video,http;https;ssl,PC-Windows-Chrome 30.0.1599.66 (2013-10-04),Mobile-Android-4.2.1-Grooveshark-2.7.4- (2014-01-24);Mobile-Android-4.4.2-Grooveshark-1.0.14- (2014-05-15);PC-Windows-Chrome-35.0.1916.153- (2014-06-11);iPhone-iOS-6.1.6-Grooveshark-2.7.2- (2014-01-24),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1001,Q_PROTO_GROUPON,groupon,,Groupon,"This protocol plug-in classifies the http traffic to the hosts groupon.com, groupon.com.br, groupon.fr and groupon.jp. It also classifies the ssl traffic to the Common Name .groupon..",Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -936,Q_PROTO_GROUPWISE,groupwise,,Groupwise (Novell),"Novell Groupwise is a groupware, instant-messaging and mail-application.",Web,http;tcp,8.0,10/18/2011,,,,x,,,,,,,,,,,x,x,,,,,,,x,,,,,,,x,,,,,,, -1204,Q_PROTO_GSSHOP,gsshop,,Gsshop.com,This protocol plug-in classifies the http traffic to the host gsshop.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -745,Q_PROTO_GSTATIC,gstatic,,Google GStatic,GStatic is a download server providing static resources (like CSS or scripts) for Google web applications.,Web,google_gen,PC-Windows-Browser-www.gstatic.com (2013-10-09),Mac-Mac OS-Safari-7.0.4- (2013-10-09);PC-Windows-7-Chrome-35.0.1916.114- (2013-10-09);PC-Windows-7-Firefox-29- (2013-10-09);PC-Windows-8-Chrome-35.0.1916.114- (2013-10-09);Windows Phone-Windows Phone OS-8-Internet Explorer- (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2212,Q_PROTO_GT_RACING_2,gt_racing_2,,GT Racing 2: The Real Car Experience,"Mobile game, edited by Gameloft. Most of the traffic should be classified as gameloft.",Game,gameloft;http;https,Mobile-Android;iPhone-iOS,Mobile-Android-GT Racing: The Real Car Experience-1.0.2- (2014-03-27);iPhone-iOS-GT Racing: The Real Car Experience-1.0.1- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1441,Q_PROTO_GTALK,gtalk,,Google Talk,"Google Talk is an instant messaging service, using XMPP, and provides both text and voice communication. [Note: gtalk is also known as google_hangouts.]",Instant Messaging,google_gen;jabber,Google Talk,,,x,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -59,Q_PROTO_GTP,gtp,,GPRS Tunneling Protocol,"The GPRS Tunneling Protocol (GTP) is used to create a tunnel between the SGSN and GGSNs of a mobile operator network, thus allowing mobile station data to be transmitted.",Tunneling,udp,GTP v0;GTP v1,7/4/2008,,,,x,,,x,x,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -735,Q_PROTO_GTPV2,gtpv2,,GPRS Tunneling Protocol version 2,"The GPRS Tunneling Protocol (GTP) version 2 is used in G4 mobile networks (LTE). Its purpose is to exchange control message between the MME, the SGW et the PGW. These messages lead to the creation of an IP data tunnel between the eNodeB, the SGW and the PGW, thus allowing mobile station data to be transmited.",Tunneling,udp,GPRS Tunneling Protocol V2,3/3/2011,,,,x,,,,x,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1882,Q_PROTO_GUAMPDN,guampdn,,GuamPDN.com,Guamanian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1141,Q_PROTO_GUDANGLAGU,gudanglagu,,Gudanglagu.com,This protocol plug-in classifies the http traffic to the host gudanglagu.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1816,Q_PROTO_GULFUP,gulfup,,Gulfup.com,Online file sharing website popular in Saudi Arabia and countries around the Gulf,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1798,Q_PROTO_GUMTREE,gumtree,,Gumtree.com,"Gumtree is the first site for free classifieds ads in the UK for buying and selling items, cars, properties, and find or offer jobs. It's also accessed from South Africa, Australia and Poland.",Web,http;https,20140130,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -802,Q_PROTO_GYAO,gyao,,GyaO.yahoo.co.jp,This protocol plug-in classifies the http traffic to the host gyao.yahoo.co.jp.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -60,Q_PROTO_H225,h225,,H225,"The H225 Protocol is a VoIP protocol, used for call signaling and RAS (Registration, Admission and Status).",Audio/Video,q931;udp,H225 v5,7/4/2008,,,,x,,,,,x,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, -61,Q_PROTO_H245,h245,,H245,"H245 is a VoIP protocol, used for call signaling codec negotiation.",Audio/Video,tcp,H245 v10,7/4/2008,,,,,h323,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, -1187,Q_PROTO_H248_BINARY,h248_binary,,h248 Protocol (Megaco) in binary mode,h248 Protocol (Megaco) in binary mode.,Audio/Video,udp,1;2;3,4/24/2014,,,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,, -1188,Q_PROTO_H248_TEXT,h248_text,,h248 Protocol (Megaco) in text mode,h248 Protocol (Megaco) in text mode.,Audio/Video,udp,1;2;3,4/28/2014,,,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,, -418,Q_PROTO_HABBO,habbo,,Habbo.com,Habbo is a is a social-networking site that offers games and chat.,Web,http;https;llnwd;ssl;tcp,20110331,,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -2170,Q_PROTO_HABER7,haber7,,Haber7,Turkish tv streaming website,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -590,Q_PROTO_HALFLIFE,halflife,,Half-Life - Half-Life 2,Half-Life and Half-Life 2 are two first-person shooter video games developed by Valve Corporation and provide on-line gaming features.,Game,http;https;udp,Half-Life and Half-Life 2,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -2005,Q_PROTO_HAMACHI,hamachi,,LogMeIn Hamachi,"Hamachi is a VPN service provided by LogMeIn. This signature classifies traffic to the LogMeIn servers used by Hamachi. The P2P VPN streams between users are using IPSEC, and won't be classified as hamachi, but ipsec instead.",Tunneling,ip,2.2.0 (Windows),PC-Windows-Hamachi-2.2.0.109- (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -803,Q_PROTO_HANGAME,hangame,,Hangame.com,This protocol plug-in classifies the http traffic to the host hangame.com/.co.jp.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1205,Q_PROTO_HANKOOKI,hankooki,,Hankooki.com,This protocol plug-in classifies the http traffic to the host hankooki.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1206,Q_PROTO_HANKYUNG,hankyung,,Hankyung.com,This protocol plug-in classifies the http traffic to the host hankyung.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1247,Q_PROTO_HAO123,hao123,,Hao123,This protocol plug-in classifies the http traffic to the host hao123.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1002,Q_PROTO_HARDSEXTUBE,hardsextube,,Hardsextube.com,This protocol plug-in classifies the http traffic to the host hardsextube.com.,Web,http;https,PC-Windows-Browser-www.hardsextube.com (2013-07-13),PC-Linux-Chrome- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1313,Q_PROTO_HATENA_NE,hatena_ne,,Hatena.ne.jp,Japanese web portal dedicated to social networking,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1883,Q_PROTO_HAVEERU,haveeru,,Haveeru.com.mv,Maldivian news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1172,Q_PROTO_HBO_GO,hbo_go,,HBO GO,On-demand video streaming website powered by the HBO american TV channel.,Audio/Video,http;https;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1207,Q_PROTO_HERALDM,heraldm,,Heraldm.com,This protocol plug-in classifies the http traffic to the host heraldm.com. It also classifies the ssl traffic to the Common Name emember.heraldcorp.com.,Web,http;https;ssl,20130828,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1451,Q_PROTO_HERE,here,,Nokia Here API,"On-line maps and localization service brought by NAVTEQ and Nokia Maps. This plug-in both classifies the ""here.com""maps website browsing, and the Nokia NLP API (REST) usage by third party applications.",Web,http;https;nokia_ovi,20140114,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1884,Q_PROTO_HESPRESS,hespress,,Hespress.com,Moroccan news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1795,Q_PROTO_HEUREKA,heureka,,Heureka.cz,Czech e-commerce website,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1379,Q_PROTO_HEXUN,hexun,,Hexun.com,Chinese finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1003,Q_PROTO_HGTV,hgtv,,HGTV.com,This protocol plug-in classifies the http traffic to the host hgtv.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -301,Q_PROTO_HI5,hi5,,Hi5.com,"Hi5 is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20111115,3/9/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1561,Q_PROTO_HIGH_ENTROPY,high_entropy,,High Entropy,"High Entropy is a virtual protocol used to detect potentially encrypted payloads. Important note: the classification of this layer is effective since the 4.18.0 version of the ixEngine framework. The classification is based on two methods: entropy value computation, and printable strings detection.",Behavioral,unknown,1.0,,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1380,Q_PROTO_HINET_GAMES,hinet_games,,HiNet Games (games.hinet.net),"Taiwanese game portal providing game reviews, forum, news.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -730,Q_PROTO_HIP,hip,,Host Identity Protocol,The hip protocol (Host Identity Protocol) is found over the IP layer (IANA protocol number: 139).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1804,Q_PROTO_HKGOLDEN,hkgolden,,Hkgolden.com,Game and electonics news portal based in Hong Kong,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2096,Q_PROTO_HLN,hln,,HLN.be,Belgian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -633,Q_PROTO_HMP,hmp,,Host Monitoring Protocol,The hmp protocol (Host Monitoring) is found over the IP layer (IANA protocol number: 20).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -703,Q_PROTO_HOPOPT,hopopt,,IPv6 Hop-by-Hop Option,The hopopt protocol (IPv6 Hop-by-Hop Option) is found over the IP layer (IANA protocol number: 0).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -419,Q_PROTO_HOSPITALITY_CLUB,hospitality_club,,HospitalityClub.org,This protocol plug-in classifies the http traffic to the host hospitalityclub.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -634,Q_PROTO_HOST,host,,Host internal protocol,The host protocol (Any host internal protocol) is found over the IP layer (IANA protocol number: 61).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1485,Q_PROTO_HOTFILE,hotfile,,Hotfile.com,On-line file sharing service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -739,Q_PROTO_HOTLINE,hotline,,HotLine,"The Hotline protocol is used to upload/download files, to chat and to get news about chatters (it is not a peer-to-peer protocol).",File Server,http;https;tcp,20110301,3/1/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2002,Q_PROTO_HOTSPOT_SHIELD,hotspot_shield,,Hotspot Shield,The Hotspot Shield application secures internet connections made from public access points using a VPN network.,Tunneling,tcp,3.20(Windows);3.19(MacOSX),Mac-Mac OS-HotSpot Shield-3.19- (2013-12-05);PC-Windows-Hotspot Shield-3.20- (2013-12-05),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -804,Q_PROTO_HOVRS,hovrs,,Hands On Video Relay Services,"This protocol plug-in classifies the http traffic to the hosts i711.com, hovrs.com and purple.us. It also classifies the ssl traffic to the Common Name hovrs.com.",Instant Messaging,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1173,Q_PROTO_HOWCAST,howcast,,Howcast.com,This protocol plug-in classifies the http traffic to the host .howcast.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1004,Q_PROTO_HOWSTUFFWORKS,howstuffworks,,HowStuffWorks.com,This protocol plug-in classifies the http traffic to the host howstuffworks.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -65,Q_PROTO_HPELLC,hpellc,,HP Extended Local-Link Control,HP Extended Local-Link Control is an LLC protocol enhancement. It is HP proprietary.,Network Service,llc,HPELLC v1.4.7,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2097,Q_PROTO_HS,hs,,Hs.fi (Helsingin Sanomat),Finnish news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1750,Q_PROTO_HSBC,hsbc,,HSBC Bank,HSBC banking website,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -66,Q_PROTO_HSRP,hsrp,,Hot Standby Router Protocol,The Cisco Hot Standby Router Protocol (HSRP) enables you to manage router redundancy in a network.,Routing,udp,HSRP v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -67,Q_PROTO_HTTP,http,,HyperText Transfer Protocol,The Hypertext Transfer Protocol (HTTP) is used for browsing the web.,Web,http_tunnel;socks4;socks5;tcp;udp,0.9;1.0;1.1,2/11/2014,,x,,x,,,,,,,x,x,,,,,,,,,,,x,,,,,,,,,,,,,, -750,Q_PROTO_HTTP_TUNNEL,http_tunnel,,HTTP Tunnel,HTTP Tunnel protocol is used to tunnel protocols inside an HTTP stream.,Tunneling,http;https,http_tunnel3.3,5/30/2011,,x,,,,,,,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -68,Q_PROTO_HTTPS,https,,HyperText Transfer Protocol Secure,HTTPS is the secure version of HTTP.,Web,http;ssl,HTTP 1.1;SSL-V2.0;SSL-V3.0,7/4/2008,,,,,,443,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,, -1272,Q_PROTO_HUDONG,hudong,x,Hudong.com,This protocol plug-in classifies the http traffic to the host hudong.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2247,Q_PROTO_HUFFINGTON_POST,huffington_post,,Huffington Post,The Huffington Post is an American online news aggregator and blog.,Web,http;https,20140412,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1174,Q_PROTO_HULU,hulu,,Hulu.com,This protocol plug-in classifies the http traffic to the host .hulu.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1885,Q_PROTO_HURRIYET,hurriyet,,Hurriyet.com.tr,Turkish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -420,Q_PROTO_HYVES,hyves,,Hyves Games,This protocol plug-in classifies the http traffic to the host hyves.nl.,Web,http;https;ssl,20140220,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1381,Q_PROTO_I_GAMER,i_gamer,,iGamer.com,Online games and manga website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -638,Q_PROTO_I_NLSP,i_nlsp,,Integrated Net Layer Security Protocol,The i_nlsp protocol (Integrated Net Layer Security TUBA) is found over the IP layer (IANA protocol number: 52).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1382,Q_PROTO_I_PART,i_part,,i-Part.com.tw,Taiwanese online dating site.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1383,Q_PROTO_IAPP,iapp,,Iapp.com.tw,News site about mobile applications.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -635,Q_PROTO_IATP,iatp,,Interactive Agent Transfer Protocol,The iatp protocol (Interactive Agent Transfer Protocol) is found over the IP layer (IANA protocol number: 117).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -565,Q_PROTO_IAX,iax,,Inter Asterisk eXchange,Inter Asterisk eXchange (IAX2) is a data exchange protocol between Asterisk servers.,Audio/Video,udp,2,12/15/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, -755,Q_PROTO_IBACKUP,ibackup,,iBackup.com,ibackup is an online file backup protocol.,File Server,http;https;rsync;ssl,Ibackup for Mac v1.2.3,6/22/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1886,Q_PROTO_IBAY,ibay,,Ibay.com.mv,Maldivian online classified ads,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -421,Q_PROTO_IBIBO,ibibo,,Ibibo.com,This protocol plug-in classifies the http traffic to the host ibibo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -69,Q_PROTO_ICA,ica,,Independant Computing Architecture (Citrix),ICA (Independent Computing Architecture) is a communication protocol and a property of the Citrix Company.,Thin Client,http;https;tcp;udp,nfuse v1.1,7/4/2008,,x,,x,ica,,,,x,,,,,,,x,,,,,,,,,,,,,,x,,,,,x,, -557,Q_PROTO_ICALL,icall,,icall,icall is proprietary voice/video over IP protocol.,Audio/Video,http;https;rtmp;sip;ssl,icall v7,PC-Windows-iCall-4.0.0.22- (2010-12-15);iPhone-iOS-iCall-1.3.1- (2010-12-15),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1103,Q_PROTO_ICAP,icap,,Internet Content Adaptation Protocol,"The Internet Content Adaptation Protocol (ICAP) is a lightweight HTTP-like protocol which is used to extend transparent proxy servers, thereby freeing up resources and standardizing the way in which new features are implemented. ICAP is generally used to implement virus scanning and content filters (including censorware) in transparent HTTP proxy caches.",Web,tcp,1.0,PC-Linux-GreasySpoon-1.0.8- (2012-01-03),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -941,Q_PROTO_ICCP,iccp,,Inter-Control Center Communications Protocol,"IEC 60870-6/TASE.2. Inter-Control Center Communications Protocol (ICCP) provides data exchange over Wide Area Networks (WANs) between utility control centers, utilities, power pools, regional control centers, and Non-Utility Generators.",Network Service,mms_iso,IEC 60870-6/TASE.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -579,Q_PROTO_ICECAST,icecast,,icecast,Icecast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;mms,PC-Windows 7-Icecast 2.3.1 (2013-11-06),Mobile-Android-4.4.2-Icecast Player-4.2- (2014-03-17);PC-Windows-Icecast-2.3.1- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1126,Q_PROTO_ICLOUD,icloud,,iCloud (Apple),"iCloud is a cloud computing service developed by Apple Inc. which allows to store and share data, from an iOS mobile (iPhone, iPad, iPod Touch) or a Macintosh.",Application Service,http;https;ssl,PC-Windows-Browser-www.icloud.com (2014-02-18);PC-Windows 7-iCloud 3.1 (2014-02-19);PC-Windows 8-iCloud 3.1 (2014-02-18);iPhone-iOS-iCloud 7.0.4 (2014-02-18);Mac-Mac OS-iCloud 10.9.1 (2014-02-19),Mac-A1347 Mac Mini-Mac OS-10.9.2-OS X- (2014-04-22);PC-Windows Pro-7-http://support.apple.com/kb/dl1455-3.1- (2014-03-27);PC-Windows Pro-8-http://support.apple.com/kb/dl1455-3.1- (2014-05-08);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-22);iPhone-4S-iOS-7.1.1-iOS-7.1.1- (2014-04-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -70,Q_PROTO_ICMP,icmp,,Internet Control Message Protocol,The Internet Control Message protocol (ICMP) is the diagnostic protocol of IPv4 networks.,Network Service,ip,ICMP v4,7/4/2008,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -71,Q_PROTO_ICMP6,icmp6,,Internet Control Message Protocol for IP6,ICMPv6 is the diagnostic protocol used in IPv6 networks.,Network Service,ip6,ICMP v6,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -805,Q_PROTO_ICQ2GO,icq2go,,Web-ICQ,This protocol plug-in classifies the http traffic to the hosts icq.com and icq.net. It also classifies the ssl traffic to the Common Names icq.com and icq.net.,Instant Messaging,http;https;ssl,20130117,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -73,Q_PROTO_IDENT,ident,,Identification Protocol,The Identification Protocol provides a means to determine the identity of a user of a specific TCP connection.,Authentication,tcp,RFC 1413,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,, -1887,Q_PROTO_IDNES,idnes,,iDNES.cz,Czech news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -704,Q_PROTO_IDPR,idpr,,Inter Domain Policy Routing,The idpr protocol (Inter_Domain Policy Routing Protocol) is found over the IP layer (IANA protocol number: 35).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -705,Q_PROTO_IDPR_CMTP,idpr_cmtp,,IDPR Control Message Transport Protocol,The idpr_cmtp protocol (IDPR Control Message Transport Proto) is found over the IP layer (IANA protocol number: 38).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -706,Q_PROTO_IDRP,idrp,,Inter Domain Routing Protocol,The idrp protocol (Inter_Domain Routing Protocol) is found over the IP layer (IANA protocol number: 45).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1245,Q_PROTO_IFENG,ifeng,,Ifeng.com,"The leading new media company providing premium content on an integrated platform across Internet, mobile and TV channels in China.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1384,Q_PROTO_IFENG_FINANCE,ifeng_finance,,Ifeng finance,Ifeng finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -806,Q_PROTO_IFILE_IT,ifile_it,,iFile.it (Filecloud.io),This protocol plug-in classifies the http traffic to the host filecloud.io.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -636,Q_PROTO_IFMP,ifmp,,Ipsilon Flow Management Protocol,The ifmp protocol (Ipsilon Flow Management Protocol) is found over the IP layer (IANA protocol number: 101).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1958,Q_PROTO_IFOLDER_RU,ifolder_ru,,iFolder.ru,Classifies web browsing on the ifolder.ru Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1888,Q_PROTO_IGIHE,igihe,,Igihe.com,Rwandan news website,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -74,Q_PROTO_IGMP,igmp,,Internet Group Management Protocol,The Internet Group Management Protocol (IGMP) is used by IP hosts to report their multicast group membership to routers.,Network Service,ip,IGMPv3,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -716,Q_PROTO_IGP,igp,,Interior Gateway Protocol,The igp protocol (any private interior gateway (used by Cisco for their IGRP)) is found over the IP layer (IANA protocol number: 9).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -807,Q_PROTO_IHEARTRADIO,iheartradio,,iHeartradio.com - iHeart.com,This protocol plug-in classifies the http traffic to the hosts iheartradio.com and iheart.com.,Audio/Video,http;https;rtmp,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -913,Q_PROTO_IIOP,iiop,,Internet Inter-ORB Protocol,IIOP is the GIOP implementation over TCP.,Middleware,giop,20110801,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1005,Q_PROTO_IKEA,ikea,,IKEA.com,This protocol plug-in classifies the http traffic to the host ikea.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1889,Q_PROTO_IKMAN,ikman,,Ikman.lk,Sri Lankan free online classified ads,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1890,Q_PROTO_IKUB,ikub,,Ikub.al,Albanian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -637,Q_PROTO_IL,il,,Internet Link (Transport protocol),The il protocol (IL Transport Protocol) is found over the IP layer (IANA protocol number: 40).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1781,Q_PROTO_ILIVID,ilivid,,Ilivid,Browser toolbar search engine and video player,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -808,Q_PROTO_ILOVEIM,iloveim,,IloveIM.com,This protocol plug-in classifies the http traffic to the host iloveim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1891,Q_PROTO_ILTALEHTI,iltalehti,,Iltalehti.fi,Finnish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1892,Q_PROTO_ILTASANOMAT,iltasanomat,,Ilta-Sanomat.fi,Finnish news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1486,Q_PROTO_IMAGESHACK,imageshack,,ImageShack,On-line free image sharing service.,Web,http;https;ssl,20140617,PC-Linux-BasicTest- (2014-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -75,Q_PROTO_IMAP,imap,,Internet Message Access Protocol version 4,The IMAP protocol (Internet Message Access Protocol Version 4) enables a client to access and manipulate electronic mail messages on a server.,Mail,socks4;socks5;tcp,IMAP v4,3/21/2014,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -76,Q_PROTO_IMAPS,imaps,,Internet Message Access Protocol Secure,IMAPS is the secure version of the IMAP protocol.,Mail,ssl,IMAPS v4,7/4/2008,,,,,,993,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -1480,Q_PROTO_IMDB,imdb,,Internet Movie Database,On-line information database related to movies and tv-shows.,Web,http;https,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -422,Q_PROTO_IMEEM,imeem,,Imeem.com,This protocol plug-in classifies the http traffic to the host imeem.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1472,Q_PROTO_IMEET,imeet,,iMeet.com,On-line video-conferencing service using cloud-based technology.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,, -271,Q_PROTO_IMESH,imesh,,imesh,iMesh is a peer-to-peer protocol.,Peer to Peer,http;https;ssl;tcp;udp,PC-Windows 7-iMesh 12.0.0.2883 (2013-11-25),PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);PC-Windows-7-iMesh-12.5.0.134249- (2014-04-05),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1912,Q_PROTO_IMESSAGE_FILE_DOWNLOAD,imessage_file_download,,iMessage File Download,Apple Web Service used to retrieve video messages sent between two iOS devices via the iMessage application. This signature only classifies video download from the message receiver device. The video upload from the sender will be classified as apns (Apple Push Notification),File Transfer,http;https,iMessage 1.0.0,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1483,Q_PROTO_IMGUR,imgur,,Imgur.com,A free online image hosting service.,Web,http;https,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1744,Q_PROTO_IMINENT,iminent,,Iminent.com,Website providing add-ons for most messengers,Application Service,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -77,Q_PROTO_IMP,imp,,Internet Messaging Program,IMP is the IMAP webmail of the Horde project,Webmail,http;https,20090908,5/27/2014,,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1331,Q_PROTO_IMPRESS,impress,,Impress.co.jp,Japanese IT news web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -809,Q_PROTO_IMVU,imvu,,IMVU.com (Instant Message Virtuel Universe),This protocol plug-in classifies the http traffic to the host imvu.com.,Game,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, -1893,Q_PROTO_INBOX,inbox,,Inbox.lv,Latvian webmail and wep portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -6,Q_PROTO_INCOMPLETE,incomplete,,Incomplete virtual protocol,Incomplete is used when the protocol signature is too long.,Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -423,Q_PROTO_INDABA_MUSIC,indaba_music,,Indaba Music,This protocol plug-in classifies the http traffic to the host indabamusic.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2270,Q_PROTO_INDEPENDENT,independent,,Independent,Irish news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1812,Q_PROTO_INDEX_HR,index_hr,,Index.hr,Croatian web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1813,Q_PROTO_INDEX_HU,index_hu,,Index.hu,Hungarian web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1894,Q_PROTO_INDIATIMES,indiatimes,,Indiatimes,"This signature detects indiatimes and a large number of its subdomains, which is one of the most popular Internet and mobile value-added services web portal in India.",Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1137,Q_PROTO_INDONETWORK,indonetwork,,Indonetwork.co.id,This protocol plug-in classifies the http traffic to the host indonetwork.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1136,Q_PROTO_INDOWEBSTER,indowebster,,Indowebster.com,This protocol plug-in classifies the http traffic to the host indowebster.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2217,Q_PROTO_INFINITY_BLADE_II,infinity_blade_ii,,Infinity Blade II,Mobile game.,Game,http;https;ssl,iPhone-iOS,iPhone-iOS-Infinity Blade II-1.3.2- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -928,Q_PROTO_INFORMIX,informix,,IBM Informix,Informix is a family of relational database management systems developed by IBM. IBM acquired the Informix technology in 2001 but it dates back to 1981.It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;sqli,11.70,9/14/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1895,Q_PROTO_ING,ing,,ING Bank,ING online banking website,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1140,Q_PROTO_INILAH,inilah,,Inilah.com,This protocol plug-in classifies the http traffic to the host inilah.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1175,Q_PROTO_INSTAGRAM,instagram,,Instagram,This protocol plug-in classifies the http traffic to the hosts instagr.am and instagram.com. It also classifies the ssl traffic to the Common Name instagram.com.,Web,amazon_aws;http;https;ssl,PC-Windows-Browser-www.instagram.com (2014-02-10);Mobile-Android-Instagram 5.0.6 (2014-02-10);iPhone-iOS-Facebook 5.0.3 (2014-02-10),Mobile-Android-4.4.2-Instagram-5.3.0- (2014-06-02);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-15);iPhone-iOS-7.1.1-Instagram-5.0.13- (2014-06-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1385,Q_PROTO_INTALKING,intalking,,Intalking.com,"Taiwanese beauty, makeup portal.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1896,Q_PROTO_INTERIA,interia,,Interia.pl,Polish news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -426,Q_PROTO_INTERNATIONS,internations,,InterNations.org,This protocol plug-in classifies the http traffic to the host internations.org. It also classifies the ssl traffic to the Common Name .internations.org.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1232,Q_PROTO_INTERPARK,interpark,,Interpark.com,This protocol plug-in classifies the http traffic to the host www.interpark.com. It also classifies the ssl traffic to the Common Name .interpark.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1006,Q_PROTO_INTUIT,intuit,,Intuit.com,This protocol plug-in classifies the http traffic to the host intuit.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2099,Q_PROTO_INVESTIGATOR,investigator,,Investigator.co.ug,Ugandan news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1119,Q_PROTO_IOS_OTA_UPDATE,ios_ota_update,,iOS over-the-air (OTA update),iOS OTA Update is the protocol used for iOS updates Over The Air.,Application Service,http;https;itunes,iPhone-iOS 7.0.3 (2013-10-25),iPhone-iOS-7.1.1-OTA Update-7.1.1- (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,, -81,Q_PROTO_IP,ip,,Internet Protocol,The Internet Protocol allows logical addressing of stations over an interconnected system of networks.,Network Service,3gpp_li;8021q;base;eth;etsi_li;gre;gtp;icmp;ip;ip6;llc;mobile_ip;mpls;ppp;pwe;snap,IP v4,,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -82,Q_PROTO_IP6,ip6,,Internet Protocol V6,"IPv6 is the next generation protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 (IPv4).",Network Service,8021q;base;eth;gre;gtp;ip;ip6;llc;mpls;ppp;teredo,IP v6,,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1686,Q_PROTO_IP_EXP_1,ip_exp_1,,IANA Internet Protocol Number 253,The ip_exp_1 protocol (IANA Internet Protocol Number 253 used for experimentation and testing) is found over the IP layer (IANA protocol number: 253).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1687,Q_PROTO_IP_EXP_2,ip_exp_2,,IANA Internet Protocol Number 254,The ip_exp_2 protocol (IANA Internet Protocol Number 254 used for experimentation and testing) is found over the IP layer (IANA protocol number: 254).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -715,Q_PROTO_IP_IN_IP,ip_in_ip,,IP-in-IP tunneling,The ip_in_ip protocol (IP_within_IP Encapsulation Protocol) is found over the IP layer (IANA protocol number: 94).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -717,Q_PROTO_IP_RDP,ip_rdp,,Reliable Data Protocol over IP,The ip_rdp protocol (Reliable Data Protocol over IP) is found over the IP layer (IANA protocol number: 27).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -671,Q_PROTO_IP_RESERVED,ip_reserved,,IANA Reserved Internet Protocol Number,The ip_reserved protocol (IANA Reserved Internet Protocol Number) is found over the IP layer (IANA protocol number: 255).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -639,Q_PROTO_IPCOMP,ipcomp,,IP Payload Compression Protocol,The ipcomp protocol (IP Payload Compression Protocol) is found over the IP layer (IANA protocol number: 108).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -83,Q_PROTO_IPCP,ipcp,,Internet Protocol Control Protocol,The IP Control Protocol (IPCP) is used to configure IP parameters of a station on a Point To Point link.,Network Service,ppp,RFC 1172,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -640,Q_PROTO_IPCV,ipcv,,IPCV Internet Packet Core Utility,The ipcv protocol (Internet Packet Core Utility) is found over the IP layer (IANA protocol number: 71).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1461,Q_PROTO_IPERF,iperf,,iperf,The iperf protocol is used by the self-titled tool for network performance measures.,Network Management,tcp;udp,20130604,6/14/2013,,,,x,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,,,,, -641,Q_PROTO_IPLT,iplt,,IPDS MES Physical Layer Tester,The iplt protocol (IPDS MES Physical Layer Tester) is found over the IP layer (IANA protocol number: 129).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -84,Q_PROTO_IPP,ipp,,Internet Printing Protocol,Internet Printing Protocol (IPP) is a standard used for remote printing using Internet tools and technologies.,Printer,http;https,RFC 2911,7/4/2008,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -642,Q_PROTO_IPPC,ippc,,Internet Pluribus Packet Core,The ippc protocol (Internet Pluribus Packet Core) is found over the IP layer (IANA protocol number: 67).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -85,Q_PROTO_IPSEC,ipsec,,IP secure,"IPSec protocol provides services for securing hosts communications. IPsec provides two security services: Authentication Header (AH), which allows authentication of the sender and Encapsulating Security Payload (ESP), which allows both authentication of the sender and encryption of data.",Encrypted,ip;ip6;udp,RFC 4306,7/4/2008,,,,x,isakmp,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -722,Q_PROTO_IPTM,iptm,,Internet Protocol Traffic Manager,The iptm protocol (Protocol Internet Protocol Traffic Manager) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -86,Q_PROTO_IPV6CP,ipv6cp,,IPv6 Control Protocol,This Protocol is used for establishing and configuring IPv6 over PPP.,Tunneling,ppp,RFC 2472,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -87,Q_PROTO_IPX,ipx,,Internet Protocol eXchange,Internet Protocol Exchange (IPX) is Novell's network layer 3 protocol.,Network Service,8021q;eth;gre;llc;ppp;snap,RFC 1132,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -643,Q_PROTO_IPX_IN_IP,ipx_in_ip,,Internet Protocol eXchange in IP,The ipx_in_ip protocol (IPX in IP) is found over the IP layer (IANA protocol number: 111).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -88,Q_PROTO_IPXRIP,ipxrip,,Routine Information Protocol over IPX,RIPIPX is the equivalent of the RIP protocol in Novell networks.,Routing,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -89,Q_PROTO_IPXSAP,ipxsap,,IPX Service Advertisement Protocol,Service Advertisement Protocol (SAP) allows servers to advertise their services to clients in a Novell network.,Network Service,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1261,Q_PROTO_IQIYI,iqiyi,,iQiyi.com,This protocol plug-in classifies the http traffic to the host iqiyi.com. It also classifies the ssl traffic to the Common Name .iqiyi.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -90,Q_PROTO_IRC,irc,,Internet Relay Chat,IRC (Internet Relay Chat) is an instant messaging protocol.,Instant Messaging,http;tcp,RFC 1459,9/23/2011,,,,x,irc,,,,x,x,x,,,,,x,x,,,x,x,,,,,,,,,,,,,,,, -424,Q_PROTO_IRC_GALLERIA,irc_galleria,,IRC-Galleria.net,This protocol plug-in classifies the http traffic to the host irc-galleria.net.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1113,Q_PROTO_IRC_TRANSFER,irc_transfer,,IRC File Transfer Data,This protocol is used to transport data in IRC file transfer.,File Transfer,tcp,20120124,PC-Linux-xchat-2.8.8- (2012-06-18),,,,,irc,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -91,Q_PROTO_IRCS,ircs,,Internet Relay Chat Secure,IRCs is the secure version of the IRC protocol.,Forum,http;https;ssl,RFC 1459,9/12/2011,,x,,,,994,,,,,,,,,,x,,,,,x,,,,,,,,,,,,,,,, -644,Q_PROTO_IRTP,irtp,,Internet Reliable Transaction Protocol,The irtp protocol (Internet Reliable Transaction) is found over the IP layer (IANA protocol number: 28).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -92,Q_PROTO_ISAKMP,isakmp,,Internet Security Association and Key Management Protocol,"The Internet Security Association and Key Management Protocol (ISAKMP) defines procedures and packet formats to establish, negotiate, modify and delete Security Associations (SA).",Encrypted,udp,Internet Security Association and Key Management Protocol v1,7/4/2008,,,,x,,,,,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,, -1906,Q_PROTO_ISCSI,iscsi,,Internet Small Computer Systems Interface,"Internet Small Computer Systems Interface (iSCSI), as described in RFC3720.",Network Service,tcp,RFC3720 April 2004,PC-Linux-iscsi_initiator_utils/netbsd_iscsi- (2013-12-03),,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -707,Q_PROTO_ISIS,isis,,ISIS,The isis protocol (ISIS for ipv4) is found over the IP layer (IANA protocol number: 124).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -93,Q_PROTO_ISL,isl,,InterSwitch Link,InterSwitch Link Frame Format is a Cisco proprietary protocol used between network equipment of a LAN to transmit VLAN membership information of a frame.,Network Service,base,IEEE 802.1Q,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -645,Q_PROTO_ISO_IP,iso_ip,,ISO Internet Protocol,The iso_ip protocol (ISO Internet Protocol) is found over the IP layer (IANA protocol number: 80).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -646,Q_PROTO_ISO_TP4,iso_tp4,,ISO Transport Protocol Class 4,The iso_tp4 protocol (ISO Transport Protocol Class 4) is found over the IP layer (IANA protocol number: 29).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1537,Q_PROTO_ISSUU,issuu,,Issuu.com,Digital publishing website. ( http://issuu.com/ ),Web,amazon_aws;http;https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -344,Q_PROTO_ISUP,isup,,ISDN User Part,ISUP (ISDN User Part) is a telephony protocol used in SS7 networks.,Telephony,m3ua;sctp,ISDN User Part v1,3/31/2010,,,,x,,,,,,,x,,,,,,,,,,,x,,,,,x,,,,,,,,,, -425,Q_PROTO_ITALKI,italki,,Italki.com,This protocol plug-in classifies the http traffic to the host italki.com. It also classifies the ssl traffic to the Common Name .italki.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -427,Q_PROTO_ITSMY,itsmy,,Itsmy.com,This protocol plug-in classifies the http traffic to the host mobile.itsmy.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -530,Q_PROTO_ITUNES,itunes,,iTunes,"iTunes is an Apple proprietary digital media player application, used for playing and organizing digital music and video files.",Audio/Video,http;https;ssl,Mac-Mac OS 10-iTunes 10;Mac-Mac OS 10-iTunes 11.1.0.126,Mac-Mac OS-10.9.2-iTunes-11.1.5- (2014-03-10);PC-Windows-7-Chrome-35.0.1916.114- (2014-01-16);PC-Windows-7-iTunes-11.2.2- (2014-06-09);iPhone-4S-iOS-7.1.1-iTunes-7.1.1- (2014-04-23),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -1562,Q_PROTO_ITV_PLAYER,itv_player,,ITV Player,Proprietary iOS application and website for VOD content (TV catch up) and live channels streaming.,Web,apple_hls;http;https;scorecardresearch;ssl,2.2.1(iOS);20130828(Web),PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -428,Q_PROTO_IWIW,iwiw,,iWiW.hu,This protocol plug-in classifies the http traffic to the host iwiw.hu.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1897,Q_PROTO_JA,ja,,Ja.is,Icelandic web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -94,Q_PROTO_JABBER,jabber,,XMPP Protocol (Jabber),Jabber is an open standard instant messaging and presence system involving the XMPP protocol. [Note: jabber is also known as xmpp.],Instant Messaging,google_gen;http;https;socks4;socks5;ssl;tcp,jingle;pidgin;psi;RFC3920,5/27/2014,,,,x,,,,,x,x,x,,,,,x,x,x,,x,,x,,,,,,,,,,,,,,, -260,Q_PROTO_JABBER_TRANSFER,jabber_transfer,,Jabber File Transfer,Jabber transfer is an open standard to transfer file between two Jabber clients.,File Transfer,tcp,jingle;pidgin;psi,,,,,,jabber,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -429,Q_PROTO_JAIKU,jaiku,,Jaiku.com,This protocol plug-in classifies the http traffic to the host jaiku.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1281,Q_PROTO_JAJAH,jajah,x,Jajah,"Jajah was a VoIP provider owned by Telefonica Europe; Telefonica has shut down Jajah on January 31, 2014.",Audio/Video,http;https;ssl,iPhone-iOS-Jajah 1.0.0 (2012-10-25);Mobile-Android 2.3.7-Jajah 1.0.0 (2012-10-25);PC-Windows-Browser-www.jajah.com (2012-08-30),Mobile-Android-2.3.7-Jajah-1.0.0- (2012-10-25);iPhone-iOS-Jajah-1.0.0- (2012-10-25),,x,,,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -2163,Q_PROTO_JAMAICAOBSERVER,jamaicaobserver,,Jamaicaobserver,Jamaican news portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1898,Q_PROTO_JAMIIFORUMS,jamiiforums,,JamiiForums.com,Tanzanian forum and blog hosting site,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -430,Q_PROTO_JAMMERDIRECT,jammerdirect,,JammerDirect.com,This protocol plug-in classifies the http traffic to the host jammerdirect.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -810,Q_PROTO_JANGO,jango,,Jango.com,This protocol plug-in classifies the http traffic to the host jango.com.,Web,http;https;ssl,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1538,Q_PROTO_JAP,jap,,Jap,VPN/Anonymizer application.,Web,http;https,0.18.1.0,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -561,Q_PROTO_JAVA_UPDATE,java_update,,Java Update,"Java Update is the protocol for the update of the java virtual machines, also called JVM.",Web,http;https;ssl,PC-Windows-Java ME SDK 3.0;PC-Windows-Java 1.6.0;PC-Windows-Java 1.7.0_40,Mac-Mac OS-10.9.3-Java SE-7.5.5- (2014-05-27);PC-Linux-ubuntu 13.04-Java-1.7.0_51- (2014-03-03);PC-Windows-7-Java SE-7.55- (2014-04-29);PC-Windows-8-Java SE-7.55- (2014-05-24),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -918,Q_PROTO_JEDI,jedi,,JEDI (Citrix),JEDI is the name of the CITRIX streaming connection protocol.,Thin Client,https;tcp,20110609,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -95,Q_PROTO_JETDIRECT,jetdirect,,HP Printer Job Language,The Jetdirect protocol is used by HP network printers.,Printer,tcp,HP Jetdirect,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1797,Q_PROTO_JFRANEWS,jfranews,,Jfranews.com,New portal popular in Jordan and Palestinian Territory,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1498,Q_PROTO_JINGDONG,jingdong,,JingDong,Popular chinese on-line hi-tech shop.,Web,http;https,20130613,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -811,Q_PROTO_JIRA,jira,,Onjira.com (JIRA),This protocol plug-in classifies the http traffic to the host onjira.com. It also classifies the ssl traffic to the Common Name onjira.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1152,Q_PROTO_JNE,jne,,JNE.co.id,This protocol plug-in classifies the http traffic to the host jne.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1814,Q_PROTO_JOBS_AF,jobs_af,,Jobs.af,Online job search in Afghanistan,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1815,Q_PROTO_JOBS_BG,jobs_bg,,Jobs.bg,Bulgarian online job search,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1149,Q_PROTO_JOBSTREET,jobstreet,,JobStreet.co.id,This protocol plug-in classifies the http traffic to the host jobstreet.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1233,Q_PROTO_JOONGANG_DAILY,joongang_daily,,Joongang Daily,This protocol plug-in classifies the http traffic to the hosts www.joins.com and www.joinsmsn.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -813,Q_PROTO_JUBII,jubii,,Jubii.dk,This protocol plug-in classifies the http traffic to the host jubii.dk.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -814,Q_PROTO_JUSTIN_TV,justin_tv,,Justin.tv,This protocol plug-in classifies the http traffic to the host justin.tv. It also classifies the ssl traffic to the Common Name .justin.tv.,Web,http;https;ssl,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2100,Q_PROTO_JUTARNJI,jutarnji,,Jutarnji.hr,Croatian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1699,Q_PROTO_JXTA,jxta,,Juxtapose,Open source peer-to-peer protocol launched by Sun Microsystems.,Peer to Peer,tcp;udp,2.5,10/1/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -431,Q_PROTO_KAIOO,kaioo,,Kaioo.com,This protocol plug-in classifies the http traffic to the host kaioo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -815,Q_PROTO_KAIXIN_CHAT,kaixin_chat,,Kaixin001.com,This protocol plug-in classifies the http traffic to the host kaixin001.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -2101,Q_PROTO_KAJGANA,kajgana,,Kajgana.com,Macedonian news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1311,Q_PROTO_KAKAKU,kakaku,,Kakaku.com,Website dedicated to price comparisons and product tests.,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2258,Q_PROTO_KAKAOSTORY,kakaostory,,KakaoStory,KakaoStory is a photo sharing social networking service for KakaoTalk users,Web,http;https,Mobile-Android;iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,,,, -1186,Q_PROTO_KAKAOTALK,kakaotalk,,KakaoTalk,"KakaoTalk is an instant messenging platform for mobile devices; users or group of users can send messages, share photos, videos and contact information. Audio flows are classified as RTP only.",Instant Messaging,http;https;ssl;tcp,iPhone-iOS-Kakao Talk 4.0.0;Mobile-Android-Kakao Talk 4.2.3;iPhone-iOS-Kakao Story 1.8.6;Mobile-Android-Kakao Story 1.8.6;PC-Windows-Kakao Talk 1.1.5.484;Windows Phone-Windows Phone OS-Kakao Talk 2.0.0 (2014-01-15),BlackBerry-BlackBerry OS-7.1.0.907-KakaoTalk Messenger-3.5- (2014-01-22);BlackBerry-BlackBerry OS-7.1.0.907-KakaoTalk Messenger-3.5-KR (2014-01-22);BlackBerry-BlackBerry OS-7.1.0.907-KakaoTalk Messenger-3.5.1-JP (2014-01-22);Mobile-Android-4.2.1-KakaoStory-2.1.5- (2014-04-16);Mobile-Android-4.2.1-KakaoStory-2.1.5-JP (2014-04-17);Mobile-Android-4.2.1-KakaoStory-2.1.5-KR (2014-04-17);Mobile-Android-4.2.1-KakaoTalk-4.4.1- (2014-05-21);Mobile-Android-4.2.1-KakaoTalk-4.4.1-JP (2014-01-22);Mobile-Android-4.2.1-KakaoTalk-4.4.1-KR (2014-01-22);Mobile-Bada-2.0S600XXLC3-KakaoTalk-2.0.4- (2014-04-14);Mobile-Bada-2.0S600XXLC3-KakaoTalk-2.0.4-JP (2014-01-22);Mobile-Bada-2.0S600XXLC3-KakaoTalk-2.0.4-KR (2014-01-22);Nokia Mobile-Nokia Asha 311-Symbian-Kakaotalk-0.9.4- (2014-01-22);PC-Windows-7-KakaoTalk-1.2.0.573- (2014-05-26);Windows Phone-Windows Phone OS-8-KakaoTalk-2.0.6.0- (2014-05-08);Windows Phone-Windows Phone OS-8-KakaoTalk-2.0.7.0-JP (2014-01-22);Windows Phone-Windows Phone OS-8-KakaoTalk-2.0.7.0-KR (2014-01-22);iPhone-iOS-7.1-KakaoStory-2.1.2- (2014-01-22);iPhone-iOS-7.1-KakaoStory-2.1.2-JP (2014-01-22);iPhone-iOS-7.1-KakaoStory-2.1.2-KR (2014-01-22);iPhone-iOS-7.1.1-KakaoTalk-4.1.5- (2014-05-21);iPhone-iOS-7.1.1-KakaoTalk-4.1.5-JP (2014-01-22);iPhone-iOS-7.1.1-KakaoTalk-4.1.5-KR (2014-01-22),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1447,Q_PROTO_KANKAN,kankan,,Kankan.com,Chinese video streaming website.,Web,http;https,20130412,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1134,Q_PROTO_KAPANLAGI,kapanlagi,,KapanLagi.com,This protocol plug-in classifies the http traffic to the host kapanlagi.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1752,Q_PROTO_KAPOOK,kapook,,Kapook.com,Thailandese web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1008,Q_PROTO_KAROSGAME,karosgame,,Karosgame.ru,This protocol plug-in classifies the http traffic to the host karosgame.ru.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1127,Q_PROTO_KASKUS,kaskus,,Kaskus.co.id,Kaskus is an indonesian forum hosting platform.,Forum,http;https;ssl,20131227,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1009,Q_PROTO_KASPERSKY,kaspersky,,Kaspersky.com,This protocol plug-in classifies the http traffic to the host kaspersky.com.,Web,http;https;ssl,PC-Windows-Browser-www.kaspersky.com (2013-07-13),PC-Windows-7-Chrome-35.0.1916.114- (2014-05-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -603,Q_PROTO_KASPERSKY_UPDATE,kaspersky_update,,Kaspersky Update,Kaspersky_update is the protocol used for Kaspersky softwares updates.,Web,kaspersky;tcp,PC-Windows 7-Kasperspy antivirus 11.0.2.55,Mac-A1347 Mac Mini-Mac OS-10.9.2-Kaspersky Anti-Virus-14.0.1.46- (2013-10-16);Mobile-Android-4.2.1-Kaspersky Anti-Virus-10.2.10.18- (2013-10-16);PC-Windows-7-Kaspersky Anti-Virus-14.0.0.4651ab- (2013-10-16);PC-Windows-8-Kaspersky Anti-Virus-14.0.0.4651ab- (2013-10-16),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -96,Q_PROTO_KAZAA,kazaa,,Kazaa (FastTrack protocol),KaZaA is a peer-to-peer protocol. [Note: kazaa is also known as fasttrack.],Peer to Peer,http;https;udp,Kazaa Lite K++ 2.7;Kazaa Lite Resurrection 0.0.9,PC-Windows-Kazaa Lite K++-2.7- (2013-03-05);PC-Windows-Kazaa Lite Resurrection-0.0.9- (2013-03-05),,x,,x,kazaa,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1235,Q_PROTO_KB_BANK,kb_bank,,Kbstar.com (KB Kookmin Bank),This protocol plug-in classifies the http traffic to the host .kbstar.com. It also classifies the ssl traffic to the Common Name .kbstar.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1234,Q_PROTO_KBS,kbs,,KBS.co.kr,This protocol plug-in classifies the http traffic to the host www.kbs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1208,Q_PROTO_KBSTAR,kbstar,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1010,Q_PROTO_KEEZMOVIES,keezmovies,,KeezMovies.com,This protocol plug-in classifies the http traffic to the host keezmovies.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1145,Q_PROTO_KEMENKUMHAM,kemenkumham,,Kemenkumham.go.id,This protocol plug-in classifies the http traffic to the host kemenkumham.go.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1209,Q_PROTO_KHAN,khan,,Khan.co.kr,This protocol plug-in classifies the http traffic to the host khan.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2182,Q_PROTO_KHMER_NEWS,khmer_news,,Khmer.news,Cambodian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1899,Q_PROTO_KHMERLOAD,khmerload,,Khmerload.com,Cambodian web portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1900,Q_PROTO_KIGALITODAY,kigalitoday,,KigaliToday.com,Rwandese news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1901,Q_PROTO_KIJIJI,kijiji,,Kijiji.ca,Canadian free local classifieds,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1295,Q_PROTO_KIK,kik,,KIK Messenger,KIK Messenger is a Chinese Instant Messaging service.,Instant Messaging,amazon_aws;http;https;ip;ssl;tcp;zendesk,PC-Windows-Browser-www.kik.com (2014-03-07);iPhone-iOS 7.0.6-Kik Messenger 7.0.0 (2014-03-09);Mobile-Android 4.1.2-Kik Messenger 7.0.1.76 (2014-03-12);Windows Phone-Windows Phone OS 8-Kik Messenger 2.1.0.0 (2014-02-17);Nokia Mobile-Symbian-Kik Messenger 5.02(3) (2014-03-10),Mobile-Android-4.4.2-Kik Messenger-7.2.2.99- (2013-10-15);Nokia Mobile-Nokia Xpress 5800-Symbian-113.010.1506-Kik Messenger-5.02- (2013-10-15);PC-Windows-7-Chrome-34.0.1847.131- (2013-10-15);Windows Phone-Windows Phone OS-7-Kik Messenger-2.1.0.0- (2013-10-15);iPhone-iOS-7.1-Kik Messenger-7.1.0- (2013-10-15),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, -2245,Q_PROTO_KING,king,,King Digital Entertainment,King is a mobile game editor. This plug-in handles King games content delivery traffic and King.com website access.,Game,http;https;ssl,20150515,PC-Linux-BasicTest- (2014-05-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1732,Q_PROTO_KINGDOMXXX,kingdomxxx,,Kingdom XXX Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -816,Q_PROTO_KINO,kino,x,Kino,This protocol plug-in classifies the http traffic to the host kino.to.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -433,Q_PROTO_KIWIBOX,kiwibox,,Kiwibox.com,This protocol plug-in classifies the http traffic to the host kiwibox.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1131,Q_PROTO_KLIKBCA,klikbca,,KlikBCA.com,This protocol plug-in classifies the http traffic to the host klikbca.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2102,Q_PROTO_KLIX,klix,,Klix.ba,Bosnian news portal.,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2200,Q_PROTO_KOHSANTEPHEAPDAILY,kohsantepheapdaily,,Kohsantepheapdaily,Cambodian news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1130,Q_PROTO_KOMPAS,kompas,,Kompass.com,This protocol plug-in classifies the http traffic to the host kompas.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1160,Q_PROTO_KOMPASIANA,kompasiana,,Kompasiana.com,This protocol plug-in classifies the http traffic to the host kompasiana.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1439,Q_PROTO_KONAMINET,konaminet,,Konaminet.jp,This protocol plug-in classifies the http traffic to the host konaminet.jp. It also classifies the ssl traffic to the Common Name konaminet.jp.,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -817,Q_PROTO_KOOLIM,koolim,,KoolIM.com,This protocol plug-in classifies the http traffic to the host koolim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1769,Q_PROTO_KOOORA,kooora,,Kooora.com,Arabic sports news portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -351,Q_PROTO_KPROXY,kproxy,,Kproxy.com,This protocol plug-in classifies the http traffic to the host kproxy.com. It also classifies the ssl traffic to the Common Name .kproxy.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -97,Q_PROTO_KRB5,krb5,,Kerberos,Kerberos provides a means to verify the identities of the different workstations on an open (unprotected) network.,Authentication,dns;ldap;msrpc;smb;tcp;udp,Kerberos 5,7/4/2008,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,, -647,Q_PROTO_KRYPTOLAN,kryptolan,,Kryptolan,The kryptolan protocol (Kryptolan) is found over the IP layer (IANA protocol number: 65).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1266,Q_PROTO_KU6,ku6,,Ku6.com,This protocol plug-in classifies the http traffic to the host ku6.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1902,Q_PROTO_KUENSELONLINE,kuenselonline,,KuenselOnline.com,Bhutanese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -740,Q_PROTO_KUGOU,kugou,,Kugou/Kugoo,"Kugou is a multimedia peer-to-peer application providing file sharing, chat or broadcasting services.",Peer to Peer,http;https;udp,20110125,3/14/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,x,x,,,,,,,x, -1818,Q_PROTO_KURIR_INFO,kurir_info,,Kurir Info,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1386,Q_PROTO_KUXUN,kuxun,,Kuxun.cn,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2189,Q_PROTO_KWEJK,kwejk,,Kwejk,Polish multimedia website,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, -98,Q_PROTO_L2TP,l2tp,,Layer 2 Tunneling Protocol,Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider (ISP) to enable the operation of a virtual private network (VPN) over the Internet.,Tunneling,ip;udp,L2TP v2 and v3,L2TP v2-- (2014-02-11);L2TP v3-- (2014-02-11),,x,,x,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1746,Q_PROTO_LABANQUEPOSTALE,labanquepostale,,LaBanquePostale.fr,French bank offering insurance an banking services,Web,http;https;ssl,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1387,Q_PROTO_LADY8844,lady8844,,Lady8844.com,Chinese fashion and beauty website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -709,Q_PROTO_LAN,lan,,Local Area Network,The lan protocol (Any local network) is found over the IP layer (IANA protocol number: 63).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2103,Q_PROTO_LANACION,lanacion,,Lanacion.com.ar,Argentinian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1694,Q_PROTO_LANSHARK,lanshark,,LanShark,Lanshark is a p2p client for LAN.,Peer to Peer,http;https,0.0.2,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -2223,Q_PROTO_LAPAGINA,lapagina,,Lapagina,El salvadorian news portal,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2172,Q_PROTO_LAPATILLA,lapatilla,,Lapatilla,Venezuelian news portal,Web,http;https;ssl,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -270,Q_PROTO_LAPOSTE_WEBMAIL,laposte_webmail,,La Poste Webmail,Laposte Webmail is a webmail protocol.,Webmail,http;https,20090311,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1903,Q_PROTO_LAPRENSA,laprensa,,Laprensa.com,"Nicaraguan news portal, also accessed from Honduras.",Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1011,Q_PROTO_LAREDOUTE,laredoute,,LaRedoute.fr,This protocol plug-in classifies the http traffic to the host laredoute.fr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -648,Q_PROTO_LARP,larp,,Locus Address Resolution Protocol,The larp protocol (Locus Address Resolution Protocol) is found over the IP layer (IANA protocol number: 91).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -434,Q_PROTO_LASTFM,lastfm,,Last.fm,"Last.fm is a web-radio service, featuring a music recommender system (called Audioscrobbler).",Web,http;https,20140320,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1539,Q_PROTO_LASTPASS,lastpass,,LastPass.com,Password manager application.,Web,http;https;ssl,2.0.20,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1388,Q_PROTO_LATIV,lativ,,Lativ.com.tw,Taiwanese online clothes shop.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -99,Q_PROTO_LCP,lcp,,Line Control Protocol,"LCP is used to establish, configure and test the data-link connection for a PPP link. This protocol is used to automatically agree upon the encapsulation format options, handle varying limits on sizes of packets, detect a looped-back link and other common misconfiguration errors, and terminate the link. This protocol is used to establish, configure and test the data-link connection for a PPP link.",Network Management,ppp,RFC 1663,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -100,Q_PROTO_LDAP,ldap,,Lighweight Directory Access Protocol,LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this protocol to send queries to Active Directory. [Note: ldap is also known as cldap.],Application Service,tcp;udp,LDAP v3,1/30/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, -101,Q_PROTO_LDAPS,ldaps,,Lighweight Directory Access Protocol Secure,Secure LDAP is the Secure version of the LDAP protocol.,Application Service,ssl,LDAPS v3,7/4/2008,,,,,,636,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, -1332,Q_PROTO_LDBLOG,ldblog,,Livedoor Blog,Japanese blog dedicated to IT and Hacking,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -649,Q_PROTO_LEAF_1,leaf_1,,Leaf 1,The leaf_1 protocol (Leaf 1) is found over the IP layer (IANA protocol number: 25).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -650,Q_PROTO_LEAF_2,leaf_2,,Leaf 2,The leaf_2 protocol (Leaf 2) is found over the IP layer (IANA protocol number: 26).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -819,Q_PROTO_LEAPFILE,leapfile,,LeapFILE.com,This protocol plug-in classifies the http traffic to the host leapfile.com. It also classifies the ssl traffic to the Common Name leapfile.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1013,Q_PROTO_LEBONCOIN,leboncoin,,LeBonCoin.fr,This protocol plug-in classifies the http traffic to the host leboncoin.fr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1904,Q_PROTO_LERAL,leral,,Leral.net,Senegalese news portal,Web,http;https,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1964,Q_PROTO_LETECKAPOSTA_CZ,leteckaposta_cz,,leteckaposta.cz,Classifies web browsing on the leteckaposta.cz Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1014,Q_PROTO_LETV,letv,,LeTV.com,This protocol plug-in classifies the http traffic to the host letv.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1287,Q_PROTO_LEVEL3,level3,,Level 3 Communications CDN,"This protocol plug-in classifies the http traffic to the hosts l3.net, level3.net and level3.com.",Web,http;https,20121025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2104,Q_PROTO_LEXPRESS,lexpress,,lexpress.mu,Mauritian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1210,Q_PROTO_LG_ESHOP,lg_eshop,,Lgeshop.com,This protocol plug-in classifies the http traffic to the host lgeshop.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -820,Q_PROTO_LIBERO_VIDEO,libero_video,,Libero.it,This protocol plug-in classifies the http traffic to the hosts libero.it and video.libero.it.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -435,Q_PROTO_LIBRARYTHING,librarything,,LibraryThing.com,This protocol plug-in classifies the http traffic to the host librarything.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -436,Q_PROTO_LIFEKNOT,lifeknot,,LifeKnot.com,This protocol plug-in classifies the http traffic to the host lifeknot.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1124,Q_PROTO_LINE,line,,Line,"Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Call metadata is no more extracted from line, but can be raised from the SIP layer (not valid since version 3).",Instant Messaging,http;https;naver;rtsp;sip;ssl;stun;udp,3.9.3 (iOS);3.9.4 (Android);3.2.1.83 (Windows 7),BlackBerry-BlackBerry OS-Line-2.2.21- (2014-02-22);Mac-Mac OS-10.9-Line-3.6.0- (2014-06-04);Mobile-Android-Line-4.4.1- (2014-06-04);Nokia Mobile-Nokia Asha 311-Symbian-Line-1.8.13- (2014-02-22);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-02);PC-Windows-7-Line-3.6.0.32- (2014-05-07);PC-Windows-8-Line-1.0.9.91- (2014-05-07);PC-Windows-8-Line-1.0.9.91- (2014-02-22);Windows Phone-Windows Phone OS-8-Line-3.3.3.343- (2014-04-25);iPhone-iOS-Line-4.0.1- (2014-04-04),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1572,Q_PROTO_LINE_GAMES,line_games,,LineGames.com,"This protocol plug-in classifies the http traffic to the host linegame.com, the portal of various Line games.",Game,http;https,20130904,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1570,Q_PROTO_LINE_WIND_RUNNER,line_wind_runner,,LINE WIND runner application,Line Wind Runner is a popular asian mobile device game accessible from the Line application.,Game,hangame;line_games,1.1.5,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1283,Q_PROTO_LINEAGE2,lineage2,,Lineage II,Lineage2 is a MMORPG developed by NCSoft.,Game,http;https;tcp,1.0.0.15-1.0.0.19;1.2.1.21,PC-Windows-7-Line Age-1.2.1.21- (2012-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -305,Q_PROTO_LINKEDIN,linkedin,,LinkedIn.com,LinkedIn is professional social network.,Forum,http;https;ssl,Mobile-Android-Linkedin 3.2.2 (2014-01-06);iPhone-iOS-Linkedin 7.0.2 (2014-01-06);Windows Phone-Windows Phone OS-Linkedin 1.6.0 (2014-01-06),"BlackBerry-BlackBerry OS-10.1.6.2-Linkedin- (2014-02-07);Mobile-Android-4.4.2-Linkedin-3.3.3- (2014-05-20);Nokia Mobile-Nokia Asha 311-Symbian-Linkedin-1.0.4- (2014-05-27);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);PC-Windows-7-Yoono - Twitter, Facebook, LinkedIn-0.2.7.32- (2014-05-27);Windows Phone-Windows Phone OS-8-Linkedin-1.6.0.0- (2014-01-23);iPhone-iOS-7.1.1-Linkedin-7.1.3- (2014-05-26)",,x,,x,,,,,,,,,,x,,,,,,,x,,x,,,,x,,,,,,,,,, -1139,Q_PROTO_LINTASBERITA,lintasberita,,LintasBerita.com - Lintas.me,This protocol plug-in classifies the http traffic to the hosts lintasberita.com and lintas.me. It also classifies the ssl traffic to the Common Name lintas.me.,Web,http;https;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1155,Q_PROTO_LIONAIR,lionair,,LionAir.co.id,This protocol plug-in classifies the http traffic to the host lionair.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1389,Q_PROTO_LIONTRAVEL,liontravel,,LionTravel.com,Liontravel.com is the official website of Lion Travel Service which is the leading travel agency headquartered in Taipei.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -437,Q_PROTO_LISTOGRAFY,listografy,,Listografy.com,This protocol plug-in classifies the http traffic to the host listography.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -335,Q_PROTO_LIVE_GROUPS,live_groups,,Windows Live Groups,"Windows Live Groups is an online service by Microsoft that enables users to create their social groups for sharing, discussion and coordination.",Forum,http;https;ssl,20110415,10/4/2012,,x,,,,,,,,,x,,,,,,,,,,x,,x,,,,,,,,,,,,,, -262,Q_PROTO_LIVE_HOTMAIL,live_hotmail,,Windows Live Hotmail,Windows Live Hotmail is a free webmail service operated by Microsoft. The service is now named Outlook.,Webmail,http;https;ssl,PC-Windows-Browser-www.live.com (2014-01-15),"PC-Windows-7-Chrome-34.0.1847.137- (2014-05-15);PC-Windows-8-Mail, Calendar, and People-16.4.4206.722- (2014-01-16)",,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -888,Q_PROTO_LIVE_MEETING,live_meeting,,Microsoft Office Live Meeting,Microsoft Office Live Meeting is a commercial subscription-based web conferencing service operated by Microsoft.,Web,http;https;ssl,Live Meeting 2007,6/22/2011,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -821,Q_PROTO_LIVE_MESH,live_mesh,,Windows Live Mesh,"This protocol plug-in classifies the ssl traffic to the Common Names accounts.mesh.com, storage.mesh.com and enclosure.mesh.com.",Peer to Peer,https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1184,Q_PROTO_LIVE_STORAGE,live_storage,,Windows Live File Storage,"Windows Live File Storage is a Microsoft web service designed to be used by other Microsoft web services that may need storage, for example msn, skydrive, etc.",Network Service,http;https;ssl,20120613,6/29/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1015,Q_PROTO_LIVEDOOR,livedoor,,Livedoor.com,This protocol plug-in classifies the http traffic to the hosts livedoor.com and livedoor.jp.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1016,Q_PROTO_LIVEINTERNET,liveinternet,,LiveInternet.ru,This protocol plug-in classifies the http traffic to the host liveinternet.ru.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -438,Q_PROTO_LIVEJOURNAL,livejournal,,LiveJournal.com,This protocol plug-in classifies the http traffic to the host livejournal.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2158,Q_PROTO_LIVEMAIL_ATTACH,livemail_attach,,Windows Live Hotmail Attachements,This signature detects Windows Live Mail File attachment uploads.,Webmail,live_hotmail,PC-Windows-Browser-www.live.com (2014-01-15),PC-Linux-BasicTest- (2014-02-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -327,Q_PROTO_LIVEMAIL_MOBILE,livemail_mobile,,Live hotmail for mobile,Livemail_mobile is the livemail webmail for mobile phones. The application is now named Outlook. Encrypted traffic is classified as windowslive or live_hotmail.,Webmail,http;https,Windows Phone-Windows Phone OS (2014-01-17);Mobile-Android (2014-01-17),Mobile-Android-4.4.2-Outlook-7.8.2.12.49.6434- (2014-01-17);Windows Phone-Windows Phone OS-Browser- (2014-01-17),,x,,,,,,,,,,,,,x,,,,,,,x,,,,,x,,,,,,,,,, -439,Q_PROTO_LIVEMOCHA,livemocha,,Livemocha.Com,This protocol plug-in classifies the http traffic to the host livemocha.com. It also classifies the ssl traffic to the Common Name .livemocha.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1148,Q_PROTO_LIVINGSOCIAL,livingsocial,,Livingsocial.co.id,This protocol plug-in classifies the http traffic to the host livingsocial.co.id.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -104,Q_PROTO_LLC,llc,,Logical Link Control,"The IEEE 802.2 Logical Link Control (LLC) protocol provides a link mechanism for upper layer protocols encapsulated in a frame. LLC type I service provides a datalink connectionless mode service, while LLC type II provides a connection-oriented service at the datalink layer.",Network Service,8021q;eth;ppp,RFC 1483,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1286,Q_PROTO_LLNWD,llnwd,,Limelight Networks CDN,"Content Delivery Network owned by the Limelight Networks company, providing media storage for several media content web services.",Web,http;https;ssl,20140114,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1961,Q_PROTO_LOAD_TO,load_to,,load.to,Classifies web browsing on the load.to Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -105,Q_PROTO_LOADBALAN,loadbalan,,Load Balancing,Load Balancing is a protocol used in the Windows environment to distribute traffic between servers.,Network Service,8021q;eth;gre,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1540,Q_PROTO_LOKALISTEN,lokalisten,,Lokalisten.de,German social networking website. ( http://www.lokalisten.de ),Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -106,Q_PROTO_LOOP,loop,,Loopback:XEROX,Loop is a protocol used by Cisco routers to test the status of a connected link.,Routing,8021q;eth;gre,Ethernet II,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1390,Q_PROTO_LOTOUR,lotour,,Lotour.com,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1211,Q_PROTO_LOTTE,lotte,,Lotte.com,This protocol plug-in classifies the http traffic to the host lotte.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1905,Q_PROTO_LOTTERYPOST,lotterypost,,Lotterypost.com,Provides information about winning lottery numbers in the US,Web,http;https;ssl,20131025,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1499,Q_PROTO_LOTUS_LIVE,lotus_live,,IBM SmartCloud,"Lotus live, now IBM SmartCloud, is a web-based collaborative suite of applications for enterprises, including mail, file transfer, meetings and forms.",Web,https;ssl,20130628,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,x,x,,,,,,, -896,Q_PROTO_LOTUS_SAMETIME,lotus_sametime,,IBM Lotus Sametime,"IBM Lotus Sametime is a client-server application and middleware platform that provides real-time, unified communications and collaboration for enterprises.",Instant Messaging,http;https;tcp,Lotus Sametime 8,6/23/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -107,Q_PROTO_LOTUSNOTES,lotusnotes,,Lotus Notes,"Lotus Notes is a groupware knowledge management system which integrates various services such as web browsing, calendaring and mailing.",Mail,tcp,20070618,7/4/2008,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,, -108,Q_PROTO_LPR,lpr,,Line Printer Remote,LPR is a protocol providing printing services and used in Berkeley distributions of the Unix operating system.,Printer,tcp,RFC 1179,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -109,Q_PROTO_LQR,lqr,,Link Quality Report,"The Link Quality Report (LQR) protocol is a part of the Point-to-Point Protocol (PPP), which allows two computers to connect to each other. LQR allows peers at either end of the PPP link to assess the state and quality of the PPP link.",Tunneling,ppp,RFC 1989,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -2105,Q_PROTO_LRYTAS,lrytas,,Lrytas.lt,Lithuanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1698,Q_PROTO_LUKE,luke,,LUKE,Luke is a P2P portal and software.,Peer to Peer,http;https;tcp,v1.0.0.0.0,10/1/2013,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -440,Q_PROTO_LUNARSTORM,lunarstorm,,LunarStorm.se,This protocol plug-in classifies the http traffic to the host lunarstorm.se.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1391,Q_PROTO_LVPING,lvping,,Lvping.com,"Chinese Hotel Reviews, Travel Guides, Forum and tourist guide.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1564,Q_PROTO_LYNC,lync,,Microsoft Lync,"Microsoft Lync IM, VoIP and desktop sharing services (Lync Server and Lync Online are supported).",Instant Messaging,https;rtp;ssl;stun,MS Lync 2010;Office 365,,,x,,,,,,,x,,,,,,,x,,,,,,x,,,,,,,,x,,,,,,, -1454,Q_PROTO_LYNC_ONLINE,lync_online,,Microsoft Lync Online,On-line version of the Microsoft Lync IM and VoIP services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x,,,,,,, -1304,Q_PROTO_M2PA,m2pa,,MTP2 User Peer-to-Peer Adaptation Layer,M2PA is a signaling peer-to-peer protocol used by MTP2 in the Signaling System 7 (SS7).,Network Service,sctp,1.2 - RFC 4165,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1302,Q_PROTO_M2UA,m2ua,,MTP2 User Adaptation Layer,M2UA is an SCTP adaptation layer for encapsulated MTP2 messages in the Signaling System 7 (SS7).,Network Service,sctp,1.2 - RFC 3331,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1301,Q_PROTO_M3UA,m3ua,,MTP3 User Adaptation Layer,"M3UA enables SS7 protocols stacking (ISUP, SCCP, ...) over an IP network.",Network Service,sctp,RFC 4666,,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1571,Q_PROTO_MAAII,maaii,,Maaii application,Maaii is a cross-platform messaging application which allows iPhone and Android users to send and receive text messages and phone calls for free.,Instant Messaging,http;https;ssl;udp,PC-Windows-browser-maaii.com (2014-03-07);Mobile-Android 2.3.5-Maaii 2.1.6 (2013-09-16);iPhone-iOS 6.1.3-Maaii 2.2.1 (2014-03-07),Mobile-Android-4.4.2-Maaii-2.3.0- (2014-05-09);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-14);iPhone-5c-iOS-7.1.1-Maaii-2.3.1- (2014-05-06),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -2106,Q_PROTO_MAANNEWS,maannews,,Maannews.net,Palestinian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2284,Q_PROTO_MAGICJACK,magicjack,,magicJack,"MagicJack is a VoIP service for home and business use, available as a mobile application and also with a proprietary device (magicJack PLUS).",Audio/Video,http;https;sip;ssl,Mobile-Android,,,x,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,,, -1566,Q_PROTO_MAGUMAGU,magumagu,,Magu-Magu (aka 2013 for Kakao),"2013 for Kakao (aka Magu-Magu) is Korean baseball game, developped by CJ E&M corp.",Game,netmarble,2.0.1,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1393,Q_PROTO_MAIL2000,mail2000,,Mail2000.com.tw,Taiwanese Webmail and SMS services.,Webmail,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1392,Q_PROTO_MAIL_189,mail_189,,Mail189.cn,China Telecom email services.,Webmail,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1542,Q_PROTO_MAIL_RU_GAMES,mail_ru_games,,Mail.ru games,ONline gaming site ( http://games.mail.ru ),Web,http;https,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1543,Q_PROTO_MAIL_RU_MOIMIR,mail_ru_moimir,,Mail.ru Moimir,Social networking website ( http://my.mail.ru ).,Web,http;https,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1544,Q_PROTO_MAIL_RU_WEBAGENT,mail_ru_webagent,,Mail.ru Webagent,Mail.ru custom web browser ( internet.mail.ru ).,Web,http;https,1.0.0.1326,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -334,Q_PROTO_MAILRU,mailru,,Mail.ru Webmail,"Mail.ru is a Russian web portal providing services such as webmail, search engine, instant messaging.",Webmail,http;https;ssl,PC-Windows-Browser-www.mailru.com (2013-07-15),Mobile-Android-4.4.2-Mail.Ru-2.3.1.6268- (2014-06-10);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-14);PC-Windows-8-????? Mail.Ru-1.1.1.90- (2014-05-27);Windows Phone-Windows Phone OS-8-Mail-1.3.5176.0- (2014-05-27);Windows Phone-Windows Phone OS-8-Mail.ru-1.6.2.0- (2014-05-27);iPhone-iOS-7.1-Mail.Ru-4.0.1- (2014-03-21),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2107,Q_PROTO_MAKO,mako,,Mako.co.il,Israeli news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -246,Q_PROTO_MAKTOOB,maktoob,,Maktoob mail,Maktoob is a webmail protocol.,Webmail,http;https,20110321,1/14/2009,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -5,Q_PROTO_MALFORMED,malformed,,Malformed virtual protocol,A packet belongs to the protocol 'malformed' if the protocol announced by the lower level protocol does not correspond to the one determined by the system.,Standard,,na,7/4/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1918,Q_PROTO_MALTAPARK,maltapark,,Maltapark.com,Maltapark is the most popular trading website in Malta.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2108,Q_PROTO_MALTATODAY,maltatoday,,MaltaToday.com.mt,Maltese news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1919,Q_PROTO_MANA,mana,,Mana.pf,French Polynesian internet service provider website,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -583,Q_PROTO_MANDRIVA_UPDATE,mandriva_update,,Mandriva Update,"This protocol manages the mandriva update operations. It allows identifying package name, package version, package architecture and distribution, thanks to the HTTP User Agent, the HTTP Uri and the HTTP method used. The HTTP User Agent must be the Aria2 download manager, the HTTP URI must be finished with RPM extension and the HTTP method must be a GET request.",Web,http;https,Mandriva2010,PC-Mandriva-2010-- (2011-12-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -729,Q_PROTO_MANET,manet,,MANET Protocols,The manet protocol (MANET Protocols) is found over the IP layer (IANA protocol number: 138).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1394,Q_PROTO_MANGOCITY,mangocity,,Mangocity.com,Chinese Travel website.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -554,Q_PROTO_MANOLITO,manolito,,manolito,Manolito is a peer-to-peer file sharing software.,Peer to Peer,tcp;udp,Manolito v3.1.1,PC-Windows-Manolito-3.11- (2012-04-13),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -110,Q_PROTO_MAPI,mapi,,MS Exchange Message API,MS Exchange Message API is a protocol used by Exchange clients to retrieve their emails.,Mail,dcerpc;msrpc,Microsoft Outlook,7/4/2008,,,,x,,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,, -1468,Q_PROTO_MAPQUEST,mapquest,,MapQuest.com,Free online web mapping service owned by AOL.,Web,http;https;ssl,20130828,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1764,Q_PROTO_MARCA,marca,,Marca.com,Spanish sports news portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1920,Q_PROTO_MARKTPLAATS,marktplaats,,Marktplaats.nl,"Dutch advertising site where you can sell, new and second-hand goods.",Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1017,Q_PROTO_MASHABLE,mashable,,Mashable.com,This protocol plug-in classifies the http traffic to the host mashable.com. It also classifies the ssl traffic to the Common Name .mashable.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -587,Q_PROTO_MASHARE,mashare,,Ma-Share.com,"mashare is an online solution to store, send and share files",Web,http;https,20110104,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1018,Q_PROTO_MATCH,match,,Match.com,This protocol plug-in classifies the http traffic to the host match.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2109,Q_PROTO_MAYBANK2U,maybank2u,,Maybank2u.com,Malay banking website,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1231,Q_PROTO_MBC,mbc,,iMBC.com,This protocol plug-in classifies the http traffic to the host www.imbc.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2110,Q_PROTO_MBL,mbl,,Mbl.is,Icelandic news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1212,Q_PROTO_MBN,mbn,,MBN.co.kr,This protocol plug-in classifies the http traffic to the host mbn.co.kr. It also classifies the ssl traffic to the Common Name .mbn.co.kr.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -111,Q_PROTO_MCAFEE,mcafee,,McAfee Client update,McAfee is one of the leaders in intrusion prevention and security risk management on the web.,Security Service,http;https;ssl,20050626,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -112,Q_PROTO_MCS,mcs,,Multipoint Communication Service,"Multipoint Communication Service (MCS) is a multipoint data delivery service for use in multimedia and audiovisual conferencing service. It provides the mechanism for multipoint aware applications to send data to all or a subset of the group with a single send primitive and to force, if desired, a uniformly sequenced reception of data for all users.",Network Service,capwap;cotp,2,7/4/2008,,,,x,,,,,,,,,x,,,x,,,,,,x,,,,,,,,,,,,,,, -822,Q_PROTO_MEDIAFIRE,mediafire,,MediaFire.com,This protocol plug-in classifies the http traffic to the hosts a.1521.x.akamai.net and mediafire.com. It also classifies the ssl traffic to the Common Name mediafire.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -441,Q_PROTO_MEETIN,meetin,,MEETin.org,This protocol plug-in classifies the http traffic to the host meetin.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1083,Q_PROTO_MEETINGPLACE,meetingplace,,Cisco MeetingPlace,"MeetingPlace is a protocol used by the Cisco Unified MeetingPlace suite of voice, web, and video conferencing products.",Audio/Video,http;https;soap;ssl,20110928,10/26/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -1452,Q_PROTO_MEETME,meetme,,MeetMe.com,Social networking web-service available on PC and mobile devices.,Web,http;https;ssl,20130415 (web app),PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -443,Q_PROTO_MEETTHEBOSS,meettheboss,,MeetTheBoss.tv,This protocol plug-in classifies the http traffic to the host meettheboss.tv.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -442,Q_PROTO_MEETUP,meetup,,Meetup.com,This protocol plug-in classifies the http traffic to the host meetup.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -823,Q_PROTO_MEEVEE,meevee,x,MeeVee,Closed on-line video aggregator website.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1299,Q_PROTO_MEGA,mega,,Mega.co.nz,This protocol plug-in classifies the http traffic to the host mega.co.nz. It also classifies the ssl traffic to the Common Name mega.co.nz.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -350,Q_PROTO_MEGAPROXY,megaproxy,,Megaproxy.com,This protocol plug-in classifies the http traffic to the hosts megaproxy.fr and megaproxy.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1989,Q_PROTO_MEGASHARES_COM,megashares_com,,megashares.com,Classifies web browsing on the megashares.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -314,Q_PROTO_MEGAUPLOAD,megaupload,,megaupload,"Megaupload was an online solution to store, send and share files. Megaupload was shut in January 2012.",Web,http,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -824,Q_PROTO_MEGAVIDEO,megavideo,x,Megavideo,This protocol plug-in classifies the http traffic to the host megavideo.com.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1545,Q_PROTO_MEKUSHARIM,mekusharim,,Mekusharim.walla.co.il,Social network website ( http://mekusharim.walla.co.il/ ).,Web,http;https,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1546,Q_PROTO_MENDELEY,mendeley,,Mendeley.com,Sharing and annotating document web service. ( http://www.mendeley.com ),Web,amazon_aws;http;https;scribd;ssl;vimeo,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1770,Q_PROTO_MERCADOLIBRE,mercadolibre,,MercadoLibre.com,"MercadoLibre is a technology company that provides e-commerce solutions. Their website is accessed from Uruguay, Venezuela, Mexico, Columbia, Ecuador, Peru, Chile and Costa Rica.",Web,http;https,20140130,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2191,Q_PROTO_MERCADOR,mercador,x,Mercador (now Olx.ro),Romanian classified ads portal,Web,,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -651,Q_PROTO_MERIT_INP,merit_inp,,MERIT Internodal Protocol,The merit_inp protocol (MERIT Internodal Protocol) is found over the IP layer (IANA protocol number: 32).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2111,Q_PROTO_MERRJEP,merrjep,,MerrJep.com,Kosovan classified ads,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -825,Q_PROTO_MESSENGERFX,messengerfx,,MessengerFX.com,This protocol plug-in classifies the http traffic to the host messengerfx.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1176,Q_PROTO_METACAFE,metacafe,,Metacafe.com,"This protocol plug-in classifies the http traffic to the hosts .metacafe.com, v.mccont.com and .mcstatic.com.",Audio/Video,http;https,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -652,Q_PROTO_MFE_NSP,mfe_nsp,,MFE Network Services Protocol,The mfe_nsp protocol (MFE Network Services Protocol) is found over the IP layer (IANA protocol number: 31).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -113,Q_PROTO_MGCP,mgcp,,Media Gateway Control Protocol,MGCP protocol is used as signaling protocol for voice IP applications.,Audio/Video,tcp;udp,MGCP v1.0,7/4/2008,,,,x,mgcp,,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, -1547,Q_PROTO_MGOON,mgoon,,Mgoon.com,"Watch video, play games ( http://www.mgoon.com/ ).",Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -826,Q_PROTO_MIBBIT,mibbit,,Mibbit chat network,This protocol plug-in classifies the http traffic of any client for chat.mibbit.com. It also classifies the ssl traffic to the Common Names web2.mibbit.com and chat.mibbit.com.,Forum,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -724,Q_PROTO_MICP,micp,,Mobile Internetworking Control Protocol,The micp protocol (Mobile Internetworking Control Pro.) is found over the IP layer (IANA protocol number: 95).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1921,Q_PROTO_MIHANBLOG,mihanblog,,Mihanblog.com,Persian blogging platform,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2162,Q_PROTO_MIHANWEBADS,mihanwebads,,Mihanwebads,Iranian Internet AD company website,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2151,Q_PROTO_MIKOGO,mikogo,,Mikogo,Mikogo is a free desktop sharing and web conferencing service.,Web,cloudflare;http;https;ssl,20121004,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,x,, -2112,Q_PROTO_MILLIYET,milliyet,,Milliyet.com.tr,Turkish news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -326,Q_PROTO_MIMP,mimp,,IMP mobile version,MIMP is the IMP webmail for mobile phones.,Webmail,http;https,20090817,6/6/2011,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -114,Q_PROTO_MIPV6,mipv6,,Mobile IPv6,Mobile IP is a proposed standard protocol that builds on the Internet Protocol by making mobility transparent to applications and higher level protocols like TCP.,Network Service,ip6,Mobile IPv6,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1548,Q_PROTO_MIRO,miro,,Miro (getmiro.com),Multimedia player. ( http://www.getmiro.com ),Peer to Peer,http;https;ssl,6.0,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -2113,Q_PROTO_MISTRECI,mistreci,,Mistreci.com,Albanian movie streaming website,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1298,Q_PROTO_MITALK,mitalk,,MiTalk Messenger (Miliao),MiTalk (aka Miliao) is a mobile instant messaging application from Xiaomi Tech.,Instant Messaging,http;https;jabber;ssl;udp,iPhone-iOS-MiTalk 6.3.1 (2013-11-06);Mobile-Android-MiTalk 5.6.733 (2013-11-06),Mobile-Android-4.1.2-MiTalk-5.0.735- (2014-02-22);Windows Phone-Windows Phone OS-MiTalk-1.5.38.0- (2014-02-25);iPhone-iOS-7.0.4-MiTalk-6.5.1- (2014-02-22),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -444,Q_PROTO_MIXI,mixi,,Mixi.jp,This protocol plug-in classifies the http traffic to the host mixi.jp.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1213,Q_PROTO_MK,mk,,Mk.co.kr,This protocol plug-in classifies the http traffic to the host mk.co.kr. It also classifies the ssl traffic to the Common Name member.mk.co.kr.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -115,Q_PROTO_MMS,mms,,Microsoft Multimedia Streaming,MMS protocol is used extensively nowadays by Microsoft video streaming servers. It enables to stream a file in real time to many simultaneous viewers.,Audio/Video,http;https;tcp;udp,MediaPlayer,9/29/2011,,x,,x,mms,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -940,Q_PROTO_MMS_ISO,mms_iso,,Manufacturing Message Specification (ISO 9506 ),ISO 9506 Manufacturing Message Specification (MMS).,Network Service,acse;pp,ISO 9506,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -116,Q_PROTO_MMSE,mmse,,MultiMedia Messages Encapsulation,The MultiMedia Messages Encapsulation protocol (MMSE) is used by mobile stations to send multimedia messages.,Wap,http;https;wsp,wap 1.0;wap 2.0;mmse 1.0,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1456,Q_PROTO_MOBAGE,mobage,,Mobage games,Mobile games download portal and identification services.,Web,http;https;ssl,20130304,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -653,Q_PROTO_MOBILE,mobile,,IP Mobility,The mobile protocol (IP Mobility) is found over the IP layer (IANA protocol number: 55).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1395,Q_PROTO_MOBILE01,mobile01,,Mobile01.com,Taiwanese social network.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1292,Q_PROTO_MOBILE_IP,mobile_ip,,Mobile IP,Mobile IP is an IETF standard communications protocol that is designed to allow mobile device users to move from one network to another while maintaining a permanent IP address.,Tunneling,udp,RFC 5944,11/23/2012,,,,x,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -827,Q_PROTO_MOBILE_ME,mobile_me,x,Mobile Me,On-line web application suite (me.com) created by Apple and remplaced by iCloud in 2011.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -654,Q_PROTO_MOBILEHDR,mobilehdr,,Mobile Header,The mobilehdr protocol (Mobile Header) is found over the IP layer (IANA protocol number: 135).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1082,Q_PROTO_MOBILINK,mobilink,,Mobilink,"Mobilink is a proprietary, binary, TCP based protocol which is used to synchronize the contents of multiple mobile client databases with a central SQL Server. The clients can run on smartphones, Java applets, etc., in addition to PC computers.",Database,tcp,Mobilink 12.0.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -446,Q_PROTO_MOCOSPACE,mocospace,,MocoSpace.com,This protocol plug-in classifies the http traffic to the host mocospace.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2166,Q_PROTO_MOE_GOV,moe_gov,,Moe.gov,Omanian Ministry of Education portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -447,Q_PROTO_MOG,mog,,MOG.com,This protocol plug-in classifies the http traffic to the host mog.com. It also classifies the ssl traffic to the Common Name mog.com.,Audio/Video,http;https;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -828,Q_PROTO_MOGULUS,mogulus,,Livestream.com,This protocol plug-in classifies the http traffic to the hosts livestream.com and a749.g.akamai.net. It also classifies the ssl traffic to the Common Name livestream.com.,Audio/Video,http;https;rtmp;ssl,20120928,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1396,Q_PROTO_MOMOSHOP,momoshop,,Momoshop.com.tw,Taiwanese online shop.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1460,Q_PROTO_MONEX,monex,,Monex.com,Online broker.,Web,http;https;ssl,20130304,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1397,Q_PROTO_MONEY_163,money_163,,Money163.com,Chinese finance portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1398,Q_PROTO_MONEYDJ,moneydj,,MoneyDJ.com,Taiwanese finance portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2114,Q_PROTO_MONITOR,monitor,,Monitor.co.ug,Ugandan news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1019,Q_PROTO_MONSTER,monster,,Monster.com,This protocol plug-in classifies the http traffic to the hosts monster.com and monster.fr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1922,Q_PROTO_MOOV,moov,,Moov.mg,Malagasy internet web portal,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1276,Q_PROTO_MOP,mop,,Mop.com,This protocol plug-in classifies the http traffic to the host mop.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1787,Q_PROTO_MOREFREECAMSECRETS,morefreecamsecrets,,MoreFreeCamSecrets.com,Adult live webcam site,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2169,Q_PROTO_MOSAIQUEFM,mosaiquefm,,Mosaiquefm,Tunisian radio streaming website,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1923,Q_PROTO_MOTIKA,motika,,Motika.com.mk,Macedonian video posting website.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -118,Q_PROTO_MOUNT,mount,,Mount,"The Mount protocol is related to the NFS protocol. It provides operating system specific services to launch the NFS protocol -- looking up server path names, validating user identity, and checking access permissions.",File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -448,Q_PROTO_MOUTHSHUT,mouthshut,,MouthShut.com,This protocol plug-in classifies the http traffic to the host mouthshut.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2193,Q_PROTO_MOVER,mover,,Mover,Uzbek vide streaming website,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1020,Q_PROTO_MOZILLA,mozilla,,Mozilla.com - Mozilla.org,This protocol plug-in classifies the http traffic to the hosts mozilla.com and mozilla.org. It also classifies the ssl traffic to the Common Name mozilla.org.,Web,http;https;ssl,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2224,Q_PROTO_MOZZI,mozzi,,Mozzi,International Mobile services provider,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2004,Q_PROTO_MP3_ROCKET,mp3_rocket,,MP3 Rocket application,"MP3 Rocket is a music file downloader application. It uses the Youtube (aka Google Video) service to search and download video clips, and then transforms them into MP3 files on the host machine using a MP3 converter. This plug-in only classifies secondary flows of the application, like client updates. Video clip downloads are classified as youtube.",Audio/Video,http;https,"6.3.15,6.4.3",PC-Windows-MP3 Rocket-6.4.3- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -251,Q_PROTO_MPEGTS,mpegts,,MPEG-Transport Stream,MPEG-Transport Stream is a protocol used for MPEG flows transmission,Audio/Video,http;https;rtp;udp,MPEG-2 Part1,10/13/2009,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -119,Q_PROTO_MPLS,mpls,,Multiprotocol Packet Label Switching,Multiprotocol Label Switching (MPLS) is an Internet Engineering Task Force (IETF) protocol. It is used for routing and allows you to define a delivery path to a flow identified by a specific label.,Routing,8021q;eth;mpls;ppp,RFC 3031,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -655,Q_PROTO_MPLS_IN_IP,mpls_in_ip,,Multi Protocol Label Switching data-carrying mechanism,The mpls_in_ip protocol (Multi Protocol Label Switching data-carrying mechanism) is found over the IP layer (IANA protocol number: 137).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1455,Q_PROTO_MPLUS_MESSENGER,mplus_messenger,,M+ Messenger,M+ is a taiwanese mobile IM application with audio/image file send feature.,Instant Messaging,http;https;ssl;tcp,1.7.0 (Android);1.6.10 (iOS),7/3/2013,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -287,Q_PROTO_MPQUEST,mpquest,x,MapQuest.com,This protocol plug-in classifies the http traffic to the hosts mapquest.com and mapquest.fr.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -312,Q_PROTO_MQ,mq,,IBM Websphere MQ,Mq (IBM Websphere MQ) is an inter-application communication protocol.,Application Service,tcp,IBM Websphere MQ 20090528,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -898,Q_PROTO_MS_COMMUNICATOR,ms_communicator,,Microsoft Communicator,"Microsoft Office Communicator is a client software launched in October 2007 for conferences which aims to communicate between collaborators using instant messaging, VoIP and videoconference.",Instant Messaging,https;ssl,MS Communicator 2007,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -120,Q_PROTO_MSN,msn,,MSN Messenger,The MSN protocol allows the exchange of instant messages. The MSN protocol is used by the Microsoft software Microsoft Messenger,Instant Messaging,http;https;socks4;socks5;ssl;tcp;udp,PC-Windows-Msn Messenger 4.7;PC-Windows-Msn Messenger 6.5;PC-Windows-Msn Messenger 7.5;PC-Windows-Msn Messenger 8.1;PC-Windows-Msn Messenger 8.5;iPhone-iOS-Agile Messenger;PC-Windows-IM+;PC-Windows-T-Online Messenger;PC-Windows 7-Windows Live Messenger 2011,5/27/2014,,x,,x,msn,,,,x,x,x,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, -121,Q_PROTO_MSN_GROUPS,msn_groups,x,MSN groups,"MSN Groups was a website part of the MSN network which hosted online communities, and which contained Web pages, hosted images, and contained a message board. MSN Groups was shut down on February 2009 as part of a migration of online applications and services to the Windows Live brand, and later renovated as Windows Live Groups.",Forum,,20080129fr;20080129en,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -122,Q_PROTO_MSN_SEARCH,msn_search,x,MSN Search,This protocol is used for sending user queries to the MSN Live search engine.,Web,,20071001,9/25/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -123,Q_PROTO_MSN_VIDEO,msn_video,,MSN Video,This protocol is used by MSN Messenger for video conversations (is not used anymore since MSN version 8.X).,Audio/Video,tcp;udp,4.7;6.5;7.5;8.1;8.5;AgileMessenger;IM+;TOnline;WLM 2011,7/4/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, -258,Q_PROTO_MSNMOBILE,msnmobile,,MSN live for Mobile,MSNMobile is the MSN instant messenger for mobile.,Instant Messaging,tcp,20080118,4/4/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -919,Q_PROTO_MSRP,msrp,,Message Session Relay Protocol,"Message Session Relay Protocol (MSRP) is a protocol for transmitting instant messages, defined by RFC 4975.",Audio/Video,tcp,rfc 4975,3/23/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -742,Q_PROTO_MSRPC,msrpc,,Microsoft Remote Procedure Call,Microsoft Remote Procedure Call (MSRPC) is the Microsoft implementation of the DCE RPC mechanism.,Middleware,dcerpc,RPC v1.2,3/25/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1214,Q_PROTO_MT,mt,,mt,This protocol plug-in classifies the http traffic to the host mt.co.kr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -656,Q_PROTO_MTP,mtp,,Multicast Transport Protocol,The mtp protocol (Multicast Transport Protocol) is found over the IP layer (IANA protocol number: 92).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1021,Q_PROTO_MTV,mtv,,MTV,This protocol plug-in classifies the http traffic to the host mtv.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1924,Q_PROTO_MUDAH,mudah,,Mudah.mi,Malaisian free classified ads.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -449,Q_PROTO_MULTIPLY,multiply,,Multiply.com,This protocol plug-in classifies the http traffic to the host multiply.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1022,Q_PROTO_MULTIUPLOAD,multiupload,,Multiupload.com,This protocol plug-in classifies the http traffic to the hosts multiupload.com and multiupload.nl.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1023,Q_PROTO_MUSICA,musica,,Musica.com,This protocol plug-in classifies the http traffic to the host musica.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -124,Q_PROTO_MUTE,mute,,Mute,Mute is a peer-to-peer protocol.,Peer to Peer,http;https;tcp,20111020,4/11/2012,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -657,Q_PROTO_MUX,mux,,Multiplexing,The mux protocol (Multiplexing) is found over the IP layer (IANA protocol number: 18).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -450,Q_PROTO_MUXLIM,muxlim,x,Muxlim,This protocol plug-in classifies the http traffic to the host muxlim.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -535,Q_PROTO_MXIT,mxit,,Mxit.com,"MXit (pronounced ""mix it"") is a free instant messaging software application developed by MXit Lifestyle in South Africa that runs on GPRS/3G mobile phones and on PCs.",Instant Messaging,http;https;tcp,20100803,10/1/2010,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -455,Q_PROTO_MY_OPERA,my_opera,,My Opera,This protocol plug-in classifies the http traffic to the host my.opera.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2177,Q_PROTO_MY_TALKING_TOM,my_talking_tom,,My Talking Tom,My Talking Tom is a mobile game.,Game,http;https,Mobile-Android;iPhone-iOS,Mobile-Android-My Talking Tom-1.1- (2014-03-13);iPhone-iOS-My Talking Tom-1.1- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -945,Q_PROTO_MY_YAHOO,my_yahoo,,My Yahoo,"A customizable web page with news, weather, etc., for Yahoo users.",Web,yahoo,20110926,10/12/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -451,Q_PROTO_MYANIMELIST,myanimelist,,MyAnimeList.net,This protocol plug-in classifies the http traffic to the host myanimelist.net.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -452,Q_PROTO_MYCHURCH,mychurch,,MyChurch.org,This protocol plug-in classifies the http traffic to the host mychurch.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1549,Q_PROTO_MYDOWNLOADER,mydownloader,,MyDownloader.net,Download files from multiple filesharing websites ( http://www.mydownloader.net/ ).,Web,http;https,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -453,Q_PROTO_MYHERITAGE,myheritage,,MyHeritage.com -MyHeritage.fr,This protocol plug-in classifies the http traffic to the hosts myheritage.fr and myheritage.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2204,Q_PROTO_MYJOYONLINE,myjoyonline,,Myjoyonline,Ghanaian news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -454,Q_PROTO_MYLIFE,mylife,,MyLife.com,This protocol plug-in classifies the http traffic to the host mylife.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1569,Q_PROTO_MYPEOPLE_MESSENGER,mypeople_messenger,,MyPeople Messenger,"MyPeople Messenger is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,daum;udp,iPhone-iOS 6.3-mypeople Messenger 4.2.3,Mac-Mac OS-10.9-Mypeople Messenger-3.10.7- (2014-02-19);Mobile-Android-4.4.2-mypeople Messenger-4.8.0- (2014-02-19);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-14);PC-Windows-7-Mypeople Messenger-3.10.7- (2014-02-19);PC-Windows-8-Mypeople Messenger-1.0.4.6- (2014-02-19);iPhone-iOS-7.1-mypeople Messenger-4.8.2- (2014-04-14),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -125,Q_PROTO_MYSPACE,myspace,,MySpace.com,MySpace is one of most popular social networking sites on the Web.,Web,http;https;ssl,20111114,5/27/2014,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -829,Q_PROTO_MYSPACE_VIDEO,myspace_video,,Myspace Video,This signature detects usage of the video-related features of Myspace.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, -126,Q_PROTO_MYSQL,mysql,,MySQL Protocol,"MySQL is an open source relational database management system (RDBMS) that uses Structured Query Language (SQL), the most popular language for adding, accessing, and processing data in a database.",Database,tcp,MySQL 3.x;MySQL 4.1+,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1024,Q_PROTO_MYVIDEO,myvideo,,Myvideo.de,This protocol plug-in classifies the http traffic to the host myvideo.de.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1025,Q_PROTO_MYWEBSEARCH,mywebsearch,,Mywebsearch.com,This protocol plug-in classifies the http traffic to the host mywebsearch.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -456,Q_PROTO_MYYEARBOOK,myyearbook,x,MyYearBook,This social networking service is closed.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2115,Q_PROTO_NACION,nacion,,Nacion.com,Costa Rican news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2048,Q_PROTO_NAGARIKNEWS,nagariknews,,NagarikNews.com,Nepali news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1925,Q_PROTO_NAIRALAND,nairaland,,Nairaland.com,Nigerian forum hosting site,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1926,Q_PROTO_NAMBA,namba,,Namba.kg,Kyrgyzstani forum and social networking site.,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -830,Q_PROTO_NAPSTER,napster,,Napster.com,"This protocol plug-in classifies the http traffic to the hosts napster.com, napsterinc.tt.omtrdc.net, a1082.b.akamai.net and a1702.b.akamai.net. It also classifies the ssl traffic to the Common Name sms.napster.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -127,Q_PROTO_NARP,narp,,NBMA Address Resolution Protocol,"NBMA Address Resolution Protocol (NARP) allows a source terminal (a host or router), wishing to communicate over a Non-Broadcast Multi-Access (NBMA) link layer network, to find out the NBMA addresses of a destination terminal if the destination terminal is connected to the same NBMA network as the source.",Network Service,ip,"RFC 1735,NARP v1",,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1026,Q_PROTO_NASA,nasa,,NASA.gov,This protocol plug-in classifies the http traffic to the host nasa.gov.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -457,Q_PROTO_NASZA_KLASA,nasza_klasa,,Nasza Klasa (nk.pl),This protocol plug-in classifies the http traffic to the hosts nasza-klasa.pl and nk.pl.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1215,Q_PROTO_NATECYWORLD,natecyworld,,Nate.com,This protocol plug-in classifies the http traffic to the hosts nate.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2049,Q_PROTO_NATION,nation,,Nation.co.ke,Kenyan news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1028,Q_PROTO_NATIONALGEOGRAPHIC,nationalgeographic,,NationalGeographic.com,This protocol plug-in classifies the http traffic to the host nationalgeographic.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1027,Q_PROTO_NATIONALLOTTERY,nationallottery,,National-lottery.co.uk,This protocol plug-in classifies the http traffic to the host national-lottery.co.uk.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2050,Q_PROTO_NATIONNEWS,nationnews,,NationNews.com,Barbadian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1029,Q_PROTO_NAVER,naver,,Naver Corporation (formerly NHN Corporation),"Naver is a popular Internet content service operator in South Korea. The group features a proprietary search portal, the Line messaging application, and gaming services.",Web,http;https;ssl,20140617,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2229,Q_PROTO_NAVER_MOBILE,naver_mobile,,Naver,Mobile application for Naver (Korean Search Engine).,Web,naver,Mobile-Android (2014-04-09);iPhone-iOS (2014-04-09),Mobile-Android-Naver-2.5.1- (2014-06-07);iPhone-iOS-Naver-5.2.0- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1550,Q_PROTO_NAVERDRIVE,naverdrive,,Naver Drive,The file storage client of Naver ( http://ndrive.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1551,Q_PROTO_NAVERMAIL,navermail,,Naver Mail,The webmail client of naver.com ( http://mail.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1030,Q_PROTO_NBA,nba,,NBA.com,"News website dedicated to the NBA, featuring video clips.",Web,akamai;apple_hls;http;https;ssl,iPhone-iOS-NBA Game Time 4.4 (2014-03-13);Mobile-Android-NBA Game Time 4.1106;PC-Windows-Browser-www.nba.com (2014-01-17),Mobile-Android-NBA Game Time-5.0423- (2014-05-08);PC-Windows-8-NBA Fan-1.0.0.5- (2014-05-26);PC-Windows-Chrome-34.0.1847.131- (2014-05-07);Tablet-NBA Game Time-2.8.117- (2014-04-30);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-NBA Game Time-2.0.5.0- (2014-04-30);iPhone-5C-iOS-7.1.1-NBA Game Time-5.3.1- (2014-04-30),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -1399,Q_PROTO_NBA_CHINA,nba_china,,Nba China,Chinese NBA website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -128,Q_PROTO_NBNS,nbns,,Netbios Name Service,"NetBios Name Service (NBNS) is a protocol resulting from NetBios, and which makes it possible to manage the names in a Microsoft NetBios network. NetBios names are human readable and NBNS serves the same purpose as the DNS system in IP environments.",Network Service,8021q;gre;ipx;llc;tcp;udp,RFC 1002,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -933,Q_PROTO_NCP,ncp,,Netware Core Protocol,"The NetWare Core Protocol (NCP) is a network protocol used to access file, print, directory, clock synchronization, messaging, remote command execution and other network service functions.",Network Service,ipx;tcp,20110919,10/21/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1917,Q_PROTO_NDMP,ndmp,,Network Data Management Protocol,NDMP (Network Data Management Protocol) is an open protocol for enterprise-wide network based backup over TCP.,Network Service,tcp,4,NDMP v3-- (2013-12-03);NDMP v4-- (2013-12-03),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,,, -1400,Q_PROTO_NDUOA,nduoa,,Nduoa.com,Chinese Android forum and applications sharing.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1552,Q_PROTO_NEFSYS,nefsys,,Nefsys.com,Video conference website ( http://www.nefsis.com/ ),Web,http;https,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1459,Q_PROTO_NEND,nend,,Nend.net,Mobile in-apps ads integration service.,Web,http;https;ssl,20130304,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1767,Q_PROTO_NEOBUX,neobux,,NeoBux.com,NeoBux excels in providing new business solutions as a Paid-to-Click service,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2051,Q_PROTO_NET,net,,Net.hr,Croatian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -129,Q_PROTO_NETBIOS,netbios,,Netbios,"NetBIOS defines a software interface and standard methods providing a communication interface between the application program and the attached medium. NetBIOS is used in various LAN (Ethernet, Token Ring etc) as well as WAN environments such TCP/IP, PPP and X.25 networks.",File Server,8021q;gre;ipx;llc;tcp;udp,RFC 1002,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -658,Q_PROTO_NETBLT,netblt,,Bulk Data Transfer Protocol,The netblt protocol (Bulk Data Transfer Protocol) is found over the IP layer (IANA protocol number: 30).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -569,Q_PROTO_NETBSD_UPDATE,netbsd_update,,NetBSD Updates,NetBSD update manages the updates for NetBSD. NetBSD is a Unix-like Open Source operating system.,Web,http;https,NetBSD-4.0,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -734,Q_PROTO_NETFLIX,netflix,,Netflix.com,NetFlix is a site using Silverlight protocol to stream videos.,Audio/Video,akamai;http;https;ip;ssl,20120930,Mobile-Android-NetFlix-2.4.0- (2013-08-28);iPhone-iOS-NetFlix-4.2- (2013-08-28),,x,,x,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,x, -130,Q_PROTO_NETFLOW,netflow,,Cisco Netflow,"NetFlow is a Cisco protocol that provides nearly real-time traffic monitoring, aggregation and statistic evaluation, multicriteria data flow selection, using source/destination IP addresses, protocols, etc.",Network Management,udp,Netflow v1;Netflow v5;Netflow v7;Netflow v8;Netflow v9,7/22/2013,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -831,Q_PROTO_NETLOAD,netload,,Netload.in,This protocol plug-in classifies the http traffic to the host netload.in.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -322,Q_PROTO_NETLOG,netlog,,Netlog.com,"Netlog is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https,20080118,11/3/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1216,Q_PROTO_NETMARBLE,netmarble,,NetMarble.com,This protocol plug-in classifies the http traffic to the host netmarble.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -931,Q_PROTO_NETMEETING_ILS,netmeeting_ils,,NetMeeting ILS,Netmeeting ILS is the protocol used between Netmeeting and Internet Locator Servers (ILS). Netmeeting is a VoIP and multi-point videoconferencing client included in many versions of Microsoft Window. A Internet Locator Server (ILS) is a directory used to find other users and facilitate rendezvous.,Instant Messaging,ldap,11.70,10/5/2011,x,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -458,Q_PROTO_NETTBY,nettby,,Nettby.no,This protocol plug-in classifies the http traffic to the host nettby.no.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2117,Q_PROTO_NEWS24,news24,,News24.com,South African news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1778,Q_PROTO_NEWS_AM,news_am,,News.am,Armenian news portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2199,Q_PROTO_NEWS_AU,news_au,,News,Australian news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2116,Q_PROTO_NEWS_MN,news_mn,,News.mn,Mongolian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2052,Q_PROTO_NEWSIT,newsit,,Newsit.gr,Greek news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2171,Q_PROTO_NEWVISION,newvision,,Newvision,Ugandan news portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1151,Q_PROTO_NEXIAN,nexian,,Nexian.co.id - Nexian.us.to,This protocol plug-in classifies the http traffic to the hosts nexian.co.id and nexian.us.to.,Web,http;https,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1236,Q_PROTO_NEXON,nexon,,Nexon.com,This protocol plug-in classifies the http traffic to the host www.nexon.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -459,Q_PROTO_NEXOPIA,nexopia,,Nexopia.com,This protocol plug-in classifies the http traffic to the host nexopia.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1031,Q_PROTO_NFL,nfl,,National Football League (NFL.com),This protocol plug-in classifies the http traffic to the host nfl.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -131,Q_PROTO_NFS,nfs,,Network File System,The NFS protocol provides transparent remote access to shared file systems across networks as described in RFC 1813.,File Server,rpc,NFS V3.0 (RFC 1813);RPC V2 (RFC 5531),7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -460,Q_PROTO_NGO_POST,ngo_post,,NGOPost.org,This protocol plug-in classifies the http traffic to the host ngopost.org.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -832,Q_PROTO_NICONICO_DOUGA,niconico_douga,,Nicovideo.jp (aka Nico Nico Douga),Nico Nico Douga is a Japanese video streaming platform for mobile devices and PC.,Audio/Video,http;https;rtmp;ssl;tcp,2019091;0.1.18_p1,Mobile-Android-Niconico Douga-0.1.18_p1.KARI- (2013-01-24);PC-Linux-Browser- (2013-01-24),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -1318,Q_PROTO_NIFTY,nifty,,Nifty.com,Japanese web portal and search site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1033,Q_PROTO_NIKE,nike,,Nike.com,This protocol plug-in classifies the http traffic to the host nike.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1329,Q_PROTO_NIKKEI,nikkei,,Nikkei.com,Online version of a Japanese newspaper for economists,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1488,Q_PROTO_NIMBUZZ_WEB,nimbuzz_web,,Nimbuzz,Instant Messaging client for mobile devices.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, -461,Q_PROTO_NING,ning,,Ning.com,This protocol plug-in classifies the http traffic to the host ning.com.,Web,http;https,PC-Windows-Browser-www.ning.com (2013-07-13),PC-Windows-7-Chrome-34.0.1847.131- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1927,Q_PROTO_NJUSKALO,njuskalo,,Njuskalo.hr,Croatian online classified ads,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -132,Q_PROTO_NLOCKMGR,nlockmgr,,Network Lock Manager,The network lock manager is a facility that works in cooperation with the Network File System (NFS) to provide a System V style of advisory file and record locking over the network.,File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -133,Q_PROTO_NLSP,nlsp,,Netware Link Services Protocol,NetWare Link Services Protocol (NLSP) provides link state routing for Internetwork Packet Exchange networks.,Routing,ipx,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -134,Q_PROTO_NNTP,nntp,,Network News Transport Protocol,"The Network News Transport Protocol (NNTP) is used for the distribution, inquiry, retrieval and posting of net news articles using a reliable stream-based mechanism.",Forum,socks4;socks5;tcp,RFC 977;RFC 3977,3/21/2014,,,,x,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, -135,Q_PROTO_NNTPS,nntps,,Network News Transport Protocol Secure,Secure version of the NNTP protocol.,Forum,ssl,RFC 977;RFC 3977,7/4/2008,,,,,,563,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, -595,Q_PROTO_NOD32_UPDATE,nod32_update,,ESET NOD32 Antivirus Updates,Virus definitions and engine updates for the ESET NOD32 anti-virus.,Web,http;https,20110214,2/9/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -2235,Q_PROTO_NOKIA,nokia,,Nokia,"Nokia is a leader in the fields of network infrastructure, location-based technologies and advanced technologies.",Web,http;https;ssl,20140411,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -576,Q_PROTO_NOKIA_OVI,nokia_ovi,,Nokia Ovi,"Nokia Ovi is a protocol used by customers to synchronize their personal data with their Nokia mobile phone (contacts, mail, calendar, music).",Web,http;https;ssl,PC-Windows 7-Browser-ovi.nokia.com (2013-10-25);Nokia Mobile N95-Symbian-Nokia Ovi Store 1.09,Nokia Mobile-Nokia Asha 311-Symbian-Nokia Ovi Store-3.34.1.18- (2014-09-05);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);PC-Windows-7-Nokia Suite-3.8.48- (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1217,Q_PROTO_NONGHYUP_BANK,nonghyup_bank,,Nonghyup Bank (Nohyup.com),This protocol plug-in classifies the http traffic to the host nohyup.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1779,Q_PROTO_NORDEA,nordea,,Nordea.dk,Danish online banking and investment web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -596,Q_PROTO_NORTON_UPDATE,norton_update,,Symantec Norton AntiVirus Updates,Virus definitions and engine updates for the Symantec Norton anti-virus.,Web,http;https;ssl,PC-Windows 7-Norton AntiVirus 21.1.0.18 (2013-11-25),Mac-Mac OS-10.9.3-Norton Antivirus-12.6- (2014-05-27);PC-Windows-7-Norton Antivirus-21.2.0.38- (2014-04-24);PC-Windows-8-Norton Antivirus-21.2.0.38- (2014-04-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -2194,Q_PROTO_NOTICIAS24,noticias24,,Noticias24,Venezuelian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2118,Q_PROTO_NOVINKY,novinky,,Novinky.cz,Czech news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1401,Q_PROTO_NOWNEWS,nownews,,NOWnews.com,Taiwanese news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2053,Q_PROTO_NRK,nrk,,NRK.no,Norwegian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -659,Q_PROTO_NSFNET_IGP,nsfnet_igp,,NSFNET-IGP,The nsfnet_igp protocol (NSFNET_IGP) is found over the IP layer (IANA protocol number: 85).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -136,Q_PROTO_NSPI,nspi,,Name Service Provider Interface,Name Service Provider Interface is a protocol used by Exchange.,Application Service,dcerpc;msrpc,NSPI-V5.5,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -137,Q_PROTO_NTP,ntp,,Network Time Protocol,Network Time Protocol (NTP) is a time synchronization system for computer clocks through the Internet network. It provides mechanisms to synchronize time and coordinate time distribution in a large network.,Network Service,udp,NTP-4.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1034,Q_PROTO_NTV,ntv,,Ntv.co.jp,This protocol plug-in classifies the http traffic to the host ntv.co.jp.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2119,Q_PROTO_NU,nu,,Nu.nl,Dutch news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -660,Q_PROTO_NVP_II,nvp_ii,,Network Voice Protocol II,The nvp_ii protocol (Network Voice Protocol) is found over the IP layer (IANA protocol number: 11).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1035,Q_PROTO_NYDAILYNEWS,nydailynews,,NYDailyNews.com,This protocol plug-in classifies the http traffic to the host nydailynews.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1036,Q_PROTO_NYTIMES,nytimes,,NYTimes.com,This protocol plug-in classifies the http traffic to the host nytimes.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2054,Q_PROTO_NZHERALD,nzherald,,NZHerald.co.nz,New zealander news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -330,Q_PROTO_OCSP,ocsp,,Online Certificate Status Protocol,This network protocol is used for validating certificates.,Encrypted,http;https,RFC 2560;RFC 4806,10/13/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,x,,, -833,Q_PROTO_OCTOPZ,octopz,,Octopz.com,This protocol plug-in classifies the http traffic to the host octopz.net. It also classifies the ssl traffic to the Common Name cfs1.octopz.net.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2154,Q_PROTO_OCTOSHAPE,octoshape,,OctoShape,Octoshape is a video streaming solution provider for web streaming platforms which uses P2P technology.,Audio/Video,http;https;tcp;udp,PC-Windows-Octoshape Chrome Plug-in 1103234 (2014-01-24),PC-Windows-7-Chrome-Octoshape-1103234- (2014-02-21),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -462,Q_PROTO_ODNOKLASSNIKI,odnoklassniki,,Odnoklassniki.ru,Odnoklassniki is a Russian social network.,Forum,http;https;ip;ssl,PC-Windows-Browser-www.odnoklassniki.ru (2011-12-14),Mobile-Android-4.4.2-Odnoklassniki-3.8- (2014-03-17);PC-Windows-7-Chrome-34.0.1847.131- (2014-03-17);PC-Windows-8-Odnoklassniki-1.1.0.0- (2014-03-17);iPhone-iOS-7.1.1-Odnoklassniki-4.2- (2014-03-17),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2000,Q_PROTO_ODSIEBIE_NAJLEPSZE_NET,odsiebie_najlepsze_net,,odsiebie.najlepsze.net,Classifies web browsing on the odsiebie.najlepsze.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1448,Q_PROTO_OFFICE365,office365,,Microsoft Office 365,Office 365 is a Microsoft on-line service which gives access to Office applications from the internet.,Web,http;https;ssl,20130415,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -296,Q_PROTO_OFFICEDEPOT,officedepot,,OfficeDepot.fr,This protocol plug-in classifies the http traffic to the hosts officedepot.com and officedepot.fr.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1095,Q_PROTO_OICQ,oicq,,OICQ,"Oicq is a proprietary messaging protocol developed by Tencent, at the origin of the qq protocol.",Instant Messaging,tcp;udp,20111108,7/4/2008,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1135,Q_PROTO_OKEZONE,okezone,,Okezone.com,This protocol plug-in classifies the http traffic to the host okezone.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1325,Q_PROTO_OKWAVE,okwave,,OKWave.jp,Decision support for professionals,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1772,Q_PROTO_OLX,olx,,Olx.com,Free international classified ads website.,Web,http;https,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -463,Q_PROTO_ONECLIMATE,oneclimate,x,OneWorld.net,This protocol plug-in is deprecated.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1553,Q_PROTO_ONEHUB,onehub,,OneHub.com,File sharing website ( https://onehub.com/ ).,Web,http;https;ssl,20130715,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2248,Q_PROTO_ONELIFE,onelife,,OneLife.fm,OneLife is a service of travelling photo sharing. Users can sort their Instagram photos by countries and follow other travelers.,Web,http;https,20140416,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2120,Q_PROTO_ONET,onet,,Onet.pl,Polish news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2175,Q_PROTO_ONEWORLD_ORG,oneworld_org,,OneWorld.org,OneWorld is a NGO with a mission to provide internet and mobile phone applications to third-world countries inhabitants,Web,http;https,20140218,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -464,Q_PROTO_ONEWORLDTV,oneworldtv,x,OneWorld TV,This protocol plug-in is deprecated.,Web,,20140220,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1037,Q_PROTO_ONLINEDOWN,onlinedown,,Onlinedown.net,This protocol plug-in classifies the http traffic to the host onlinedown.net.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2055,Q_PROTO_ONLINEKHABAR,onlinekhabar,,Onlinekhabar.com,Nepali news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2121,Q_PROTO_ONLINER,onliner,,Onliner.by,Belarussian ecommerce website,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -553,Q_PROTO_OOVOO,oovoo,,Oovoo,"oovoo is an instant messenger application, with audio/video support.",Instant Messaging,http;https;jabber;ssl;udp,Oovoo v2.8.0.39,10/15/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -834,Q_PROTO_OOYALA,ooyala,,Ooyala.jp,This protocol plug-in classifies the http traffic to the hosts l.player.ooyala.com and ooyala.jp. It also classifies the ssl traffic to the Common Name ooyala.jp.,Web,http;https;ssl,20140617,PC-Linux-BasicTest- (2014-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -465,Q_PROTO_OPEN_DIARY,open_diary,,OpenDiary.com,This protocol plug-in classifies the http traffic to the host opendiary.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -570,Q_PROTO_OPENBSD_UPDATE,openbsd_update,,OpenBSD Updates,This protocol manages OpenBSD updates.,Web,http;https,OpenBSD4.8,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -138,Q_PROTO_OPENFT,openft,,OpenFT,OpenFT is a peer-to-peer protocol.,Peer to Peer,http,Apollon,4/20/2012,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -2008,Q_PROTO_OPENGW,opengw,,OpenGW (VPN Gate),"OpenGW (aka VPN Gate) is a Public VPN Relay Servers service, used in several VPN solutions (example: PacketiX. This service uses the SoftEther VPN technology.",Web,http;https;ssl,"SoftEther PacketiX v4.02,20131227",,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1789,Q_PROTO_OPENSOOQ,opensooq,,Opensooq.com,Market place framework aimed to Arab countries,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2278,Q_PROTO_OPENSTREETMAP,openstreetmap,,OpenStreetMap,OpenStreetMap is an open geographical database.,Web,http;https;ssl,20140423,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -336,Q_PROTO_OPENVPN,openvpn,,openvpn,OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities.,Tunneling,https;ssl;tcp;udp,OpenVPN 1.8.3,1/11/2010,,x,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -578,Q_PROTO_OPERA_UPDATE,opera_update,,Opera Update,Opera Update is the protocol used for the update of the Opera browser.,Web,http;https;ssl,Opera11.00,10/26/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -2251,Q_PROTO_ORACLE,oracle,,Oracle,"Oracle Corporation is multinational computer technology corporation. The company specializes in developing and marketing computer hardware systems and enterprise software products, particularly its own brands of database management systems.",Web,http;https;ssl,2294,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1753,Q_PROTO_ORANGE,orange,,Orange.com,"French telecom operator website providing internet and telephone services as well as web and media portal services. This portal provides services to countries like Mauritius, Madagascar, Uganda, Jordan, Kenya, Poland, Ivory Coast, Tunisia, or Moldova.",Web,http;https;ssl,20140130,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -265,Q_PROTO_ORANGEMAIL,orangemail,,Orange webmail,Orangemail is the webmail of webmail.orange.fr.,Webmail,http;https;ssl,PC-Windows-Browser-www.orangemail.com (2013-08-28),Mobile-Android-4.4.2-Mail Orange-1.4.2.1- (2014-05-27);Mobile-Android-4.4.2-Mail Orange-1.4.2.1- (2014-05-27);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-27);iPhone-iOS-7.1.1-Mail Orange-1.3.0- (2014-05-27),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -544,Q_PROTO_ORB,orb,,Orb (acquired by Qualcomm Connected Experiences),ORB is a streaming software that enables users to remotely access all their personal digital media files.,Web,tcp;udp,20101214,12/21/2010,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -2056,Q_PROTO_ORF,orf,,Orf.at,Austrian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2122,Q_PROTO_ORIGO,origo,,Origo.hu,Hungarian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -466,Q_PROTO_ORKUT,orkut,,Orkut.com,"Orkut is a social networking website competing with Facebook or Twitter, popular in Brazil and now owned and operated by Google Inc.",Web,google_desktop;http;https;ssl,20110331,7/2/2010,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -139,Q_PROTO_OSINL,osinl,,OSI Network Layer,"ISO Network Layer Protocol is used by Cisco Equipment to transmit OSI protocols (IS-IS, ...) over Ethernet.",Network Service,eth;gre;llc;osinl,RFC 1377,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -140,Q_PROTO_OSPF,ospf,,Open Shortest Path First,OSPF (Open Short Path First) is a link state routing protocol used within large autonomous system networks. It is is considered to be the best Inter Routing protocol today and it is use it strongly encouraged.,Routing,ip;ip6,OSPF v2;OSPF v3,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1928,Q_PROTO_OUEDKNISS,ouedkniss,,Ouedkniss.com,Algerian internet portal,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -467,Q_PROTO_OUTEVERYWHERE,outeverywhere,,OUTeverywhere.com,This protocol plug-in classifies the http traffic to the host outeverywhere.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1478,Q_PROTO_OUTLOOK,outlook,,Outlook Web Access (Office 365),"On-line Microsoft Outlook encrypted service, from the Office 365 productivity suite.",Web,office365,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2164,Q_PROTO_OVER_BLOG,over_blog,,Over-blog,French and American blog administration website,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -141,Q_PROTO_OWA,owa,,Outlook Web App,"Outlook Web App is used to access e-mail (including support for S/MIME), calendars, contacts, tasks, documents (used with SharePoint or in 2010 Office Web Apps), and other mailbox content when access to the Microsoft Outlook desktop application is unavailable.",Webmail,http;https,20100129,7/4/2008,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,x,,,,,,, -1274,Q_PROTO_PAIPAI,paipai,,Paipai.com,This protocol plug-in classifies the http traffic to the host paipai.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -142,Q_PROTO_PALTALK,paltalk,,PalTalk,Paltalk is an instant messaging protocol.,Instant Messaging,http;https;ssl;tcp,8.1;8.5;9.0;9.1;9.4;10.0,5/27/2014,,x,,x,,,,,x,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, -143,Q_PROTO_PALTALK_AUDIO,paltalk_audio,,Paltalk audio chat,Proprietary protocol used by Paltalk in audio chats.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,5/27/2014,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, -252,Q_PROTO_PALTALK_TRANSFER,paltalk_transfer,,PalTalk Transfer Protocol,Paltalk is an instant messaging protocol,File Transfer,tcp,9.4,5/27/2014,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -599,Q_PROTO_PALTALK_VIDEO,paltalk_video,,Paltalk video,Proprietary protocol used by Paltalk in video.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,PC-Windows-Paltalk Messenger-10.0- (2011-09-03),,,,,paltalk,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, -2188,Q_PROTO_PALWEATHER,palweather,,Palweather,Palestinian meteorological portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -711,Q_PROTO_PANDA_UPDATE,panda_update,,Panda Update,Panda_update is the protocol used for panda softwares updates.,Web,http;https;ssl,20110216,2/16/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -278,Q_PROTO_PANDO,pando,x,Pando,pando is a peer-to-peer protocol. Pando servers have been definitely shutted down in August 2013.,Peer to Peer,,PC-Windows-Pando 2.3.0.9 (2009-05-01),4/10/2012,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -835,Q_PROTO_PANDORA,pandora,,Pandora Radio,This protocol plug-in classifies the http traffic to the host pandora.com.,Web,http;https;ssl,PC-Windows-Browser-www.pandora.com (2014-01-15),Blackberry-Blackberry OS-Pandora-1.1.12-USA (2014-04-11);Mobile-Android-Pandora internet radio-5.3-USA (2014-05-12);PC-Windows-7-Chrome-35.0.1916.114-USA (2014-05-29);Windows Phone-Windows Phone OS-Pandora-1.1.0.0-USA (2014-04-07);iPhone-iOS-7.1.1-Pandora Radio-5.3.1-USA (2014-05-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -836,Q_PROTO_PANDORA_TV,pandora_tv,,Pandora.tv,This protocol plug-in classifies the http traffic to the host pandora.tv.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1775,Q_PROTO_PANET,panet,,Panet.co.il,News and entertainment web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2057,Q_PROTO_PANTIP,pantip,,Pantip.com,Thai information and entertainment portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -144,Q_PROTO_PAP,pap,,Password Authentication Protocol,The Password Authentication Protocol (PAP) provides a simple authentication method over a PPP link.,Authentication,ppp,RFC 1334,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x -2123,Q_PROTO_PARAGUAY,paraguay,,Paraguay.com,Paraguayan news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1219,Q_PROTO_PARAN,paran,x,Paran,This protocol plug-in classifies the http traffic to the host praran.com.,Web,,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2058,Q_PROTO_PARTIS,partis,,Partis.si,Slovenian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -468,Q_PROTO_PARTNERUP,partnerup,,PartnerUp.com,This protocol plug-in classifies the http traffic to the host partnerup.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -837,Q_PROTO_PARTY_POKER,party_poker,,PartyPoker.com - PartyAccount.com,This protocol plug-in classifies the ssl traffic to the Common Names partyaccount.com and partypoker.com.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -469,Q_PROTO_PASSPORTSTAMP,passportstamp,,PassportStamp.com,This protocol plug-in classifies the http traffic to the host passportstamp.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2011,Q_PROTO_PATH,path,,Path,"It is a free social instant messenger for private messaging and sharing photos, videos, music, etc.",Instant Messaging,amazon_aws;http;https;jabber;ssl,3.2.2 (iOS);3.2.4 (Android),Mobile-Android-Path-3.2.4- (2013-12-18);iPhone-iOS-Path-3.2.2- (2013-12-18),,x,,x,,,,,,,,,,,,x,x,,,x,x,,,,,,x,,,,,,,,,, -1402,Q_PROTO_PAYEASY,payeasy,,Payeasy.com.tw,Taiwanese online beauty store.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1747,Q_PROTO_PAYPAL,paypal,,Paypal.com,Online payment services,Web,http;https;ssl,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -2124,Q_PROTO_PAZAR3,pazar3,,Pazar3.mk,Macedonian classifed ads,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -324,Q_PROTO_PCANYWHERE,pcanywhere,,PCAnywhere,PCAnywhere is a remote control solution. It can manage both Windows and Linux systems. Enhanced video performance and built-in AES 256-bit encryption help make communications fast and secure. PCAnywhere also features powerful file-transfer capabilities.,Thin Client,tcp;udp,20070321,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1403,Q_PROTO_PCGAMES,pcgames,,PCgames.com.cn,Chinese Games portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1404,Q_PROTO_PCHOME,pchome,,PChome.com.tw,"Taiwanese Web portal (news, webmail, shopping....",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1405,Q_PROTO_PCLADY,pclady,,PClady.com.cn,Chinese beauty and fashion portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1260,Q_PROTO_PCONLINE,pconline,,PConline.com.cn,This protocol plug-in classifies the http traffic to the host pconline.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1475,Q_PROTO_PEERCAST,peercast,,PeerCast,PeerCast is an open-source multimedia streaming protocol.,Web,http;https,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2006,Q_PROTO_PEERGUARDIAN,peerguardian,,PeerGuardian,PeerGuardian is capable of blocking incoming and outgoing connections based on IP blacklists. This plug-in classifies the firewall attempts to update its blacklist from PeerGuardian servers.,Security Service,http;https,2.2.3 (Linux),PC-Linux-PeerGuardian-2.2.3- (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1256,Q_PROTO_PENGYOU,pengyou,,Pengyou.com,This protocol plug-in classifies the http traffic to the host pengyou.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1267,Q_PROTO_PEOPLE,people,,People.com.cn,This protocol plug-in classifies the http traffic to the host people.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2148,Q_PROTO_PERFECT_DARK,perfect_dark,,Perfect Dark,Perfect Dark is a peer-to-peer file-sharing (P2P) protocol from Japan.,Peer to Peer,,PC-Windows-Perfect Dark 1.10 (2014-02-04),PC-Windows-7-Perfect Dark-1.10- (2014-01-23),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1091,Q_PROTO_PERFORCE,perforce,,Perforce Protocol,"Perforce is a commercial, proprietary, centralized revision control system developed by Perforce Software, Inc.",Application Service,tcp,2010.2,11/29/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -319,Q_PROTO_PERFSPOT,perfspot,,Perfspot.com,"Perfspot is a social networking website, enabling users to connect to relatives, friends, or unknown people and to share files.",Web,http;https,20080118,9/26/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1929,Q_PROTO_PERSIANBLOG,persianblog,,Persianblog.ir,Persian blogging platform,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1930,Q_PROTO_PETITESANNONCES,petitesannonces,,PetitesAnnonces.pf,French Polinesian online classified ads,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1931,Q_PROTO_PEYVANDHA,peyvandha,,Peyvandha.ir,Persian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -661,Q_PROTO_PGM,pgm,,PGM Reliable Transport Protocol,The pgm protocol (PGM Reliable Transport Protocol) is found over the IP layer (IANA protocol number: 113).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2059,Q_PROTO_PHILENEWS,philenews,,Philenews.com,Cypriot news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -838,Q_PROTO_PHOTOBUCKET,photobucket,,Photobucket.com,"Photo sharing web-service, with advanced editing features, available for desktop and mobile devices.",Web,http;https;ssl,PC-Windows-Browser-www.photobucket.com (2014-02-20);Mobile-Android-Photobucket Mobile 3.0.11 (2014-02-21);Windows Phone-Windows Phone OS-Photobucket 2.0.0.0 (2014-02-21);iPhone-iOS-Photobucket 3.0.4 (2014-02-21),Mobile-Android-4.4.2-Photobucket Mobile-3.1.0- (2014-05-08);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-13);PC-Windows-8-Photobucket-1.0.1.1833- (2014-05-28);Windows Phone-Windows Phone OS-8-photobucket-2.0.0.0- (2014-02-21);iPhone-iOS-7.1.1-photobucket-3.1- (2014-05-08),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1092,Q_PROTO_PHPROXY,phproxy,,PHProxy,PHProxy is a web HTTP proxy programmed in PHP meant to bypass firewalls and access otherwise inaccessible resources.,Network Service,http,0.5 beta 2,PC-Linux-PHProxy-0.5b2- (2011-12-06),,,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, -839,Q_PROTO_PHWEET,phweet,,Phweet.com,This protocol plug-in classifies the http traffic to the host phweet.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, -1554,Q_PROTO_PICHAT,pichat,,Pichat.net,Online Chat Application ( pichat.net ).,Peer to Peer,http;https,v0.4.2,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1932,Q_PROTO_PIK,pik,,Pik.ba,Bosnian online trading website.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -145,Q_PROTO_PIM,pim,,Protocol Independent Multicast,The PIM Protocol provides an efficient routing of multicast groups that may span wide-area Internet zones.,Network Service,ip;ip6,IPv4;IPv6,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1218,Q_PROTO_PIMANG,pimang,,Pmang.com,This protocol plug-in classifies the http traffic to the hosts pimang.com and www.pmang.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -470,Q_PROTO_PINGSTA,pingsta,,Pingsta.com,This protocol plug-in classifies the http traffic to the host pingsta.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1470,Q_PROTO_PINTEREST,pinterest,,Pinterest.com,On-line service that allows users to attach personal elements on some kind of pinboard.,Web,http;https;ssl,PC-Windows-Browser-www.pinterest.com (2014-02-28);Mobile-Android-Pinterest 2.4.4 (2014-02-28);iPhone-iOS-Pinterest 3.4.1 (2014-02-28);Windows Phone-Windows Phone OS-Pinterest 1.0.0.0 (2014-02-28),BlackBerry-BlackBerry OS-10.2.1.537-Pinterest-1.1.0- (2014-03-26);Mobile-Android-4.4.2-Pinterest-2.9.1- (2014-06-10);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-15);Windows Phone-Windows Phone OS-8-Pinterest-1.0.0.0- (2014-02-28);iPhone-iOS-7.1.1-Pinterest-3.6.1- (2014-05-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1555,Q_PROTO_PIOLET,piolet,,Piolet.net,P2P for music files.,Peer to Peer,http;https,3.1.0,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -662,Q_PROTO_PIPE,pipe,,Private IP Encapsulation within IP,The pipe protocol (Private IP Encapsulation within IP) is found over the IP layer (IANA protocol number: 131).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1319,Q_PROTO_PIXIV,pixiv,,Pixiv.net,Web site dedicated to Japanese fanarts and drawings,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1406,Q_PROTO_PIXNET,pixnet,,Pixnet.net,Taiwanese web albums and blog service.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2256,Q_PROTO_PLANTS_VS_ZOMBIES,plants_vs_zombies,,Plants vs Zombies,Plants vs Zombie is a mobile game.,Game,http;https;ssl,Mobile-Android;iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -471,Q_PROTO_PLAXO,plaxo,,Plaxo.com,This protocol plug-in classifies the http traffic to the host plaxo.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -472,Q_PROTO_PLAYAHEAD,playahead,x,Playahead,This protocol plug-in classifies the http traffic to the host playahead.se.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1039,Q_PROTO_PLAYSTATION,playstation,,PlayStation.com,This protocol plug-in classifies the http traffic to the host playstation.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1933,Q_PROTO_PLIUS,plius,,Plius.lt,Lithuanian online classified ads.,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -474,Q_PROTO_PLURK,plurk,,Plurk.com,This protocol plug-in classifies the http traffic to the host plurk.com.,Web,http;https;ssl,PC-Windows-Browser-www.plurk.com (2014-02-27);Mobile-Android-0.8.13 (2014-02-27),BlackBerry-BlackBerry OS-10.0.10.648-Browser- (2014-03-07);Mobile-Android-4.4.2-Plurk-0.8.19- (2014-06-04);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);Windows Phone-Windows Phone OS-8-PlurkPoster-1.3.0.0- (2014-02-27);iPhone-iOS-7.0.4-Mr. Plurk-3.1.1- (2014-03-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -663,Q_PROTO_PNNI,pnni,,PNNI over IP,The pnni protocol (PNNI over IP) is found over the IP layer (IANA protocol number: 102).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1300,Q_PROTO_POCO,poco,,POCO.cn,"Poco is a Chinese webportal, which allow users to share pictures, chat, exchange files, etc.",Web,http;https;ssl;udp,20130121,PC-Windows-InternetExplorer- (2012-02-07),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -307,Q_PROTO_POGO,pogo,,Pogo.com,This protocol plug-in classifies the http traffic to the host pogo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -899,Q_PROTO_POKER_STARS,poker_stars,,Poker Stars,Poker Stars is an online poker cardroom.,Game,http;https;ssl,4.6.9.6_en;4.7.0.1_fr;4.6.9.8_es,7/29/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1745,Q_PROTO_POLE_EMPLOI,pole_emploi,,Pole-emploi.fr,French website for job seekers.,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -147,Q_PROTO_POP3,pop3,,Post Office Protocol (Version 3),Post Office Protocol - Version 3 (POP3) allows a workstation to simply and dynamically access a mail stored on a mail server.,Mail,socks4;socks5;tcp,Post Office Protocol v3,3/21/2014,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -148,Q_PROTO_POP3S,pop3s,,Secure POP3,Secure version of the POP3 protocol.,Mail,ssl,Secure Post Office Protocol v3,7/4/2008,,,,,,995,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -1440,Q_PROTO_PORNHUB,pornhub,,Pornhub.com,This protocol plug-in classifies the http traffic to the hosts pornhub.com and pornhub.phncdn.com.,Web,http;https,20121023,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -149,Q_PROTO_PORTMAP,portmap,,Port Mapper,Port Mapper protocol maps RPC program and version numbers to port numbers. This program makes dynamic binding of remote programs possible.,Application Service,rpc,Port Mapping v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -150,Q_PROTO_POSTGRES,postgres,,PostgreSQL,"PostgreSQL is a sophisticated Object-Relational DBMS, supporting almost all SQL constructs, including subselects, transactions, and user-defined types and functions.",Database,tcp,7.3;7.4;8.0;8.1;8.2,7/4/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -2125,Q_PROTO_POSTIMEES,postimees,,Postimees.ee,Estonian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2254,Q_PROTO_POU,pou,,Pou,Mobile game,Game,amazon_aws;http;https,Mobile-Android;iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -938,Q_PROTO_PP,pp,,ISO 8823 Presentation Protocol,ISO 8823/X.226 OSI PRESENTATION PROTOCOL (PP).,Network Service,sp,ISO 8823/X.226,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1090,Q_PROTO_PPFILM,ppfilm,,PIPI Film,PP Film (aka PIPI.cn or PIPI Player) is a Chinese peer-to-peer and VOD service.,Web,http;https;udp,2.8.0.0,11/10/2011,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -331,Q_PROTO_PPLIVE,pplive,,pplive,PPLIVE is an application intended to watch TV in peer-to-peer. The PPLIVE application has two main functions : live TV(streaming) and on-demand TV (VOD). These are two different protocols. This protocol plug-in handles both.,Audio/Video,http;https;tcp;udp,1.9.35;2.6,10/22/2012,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,x, -151,Q_PROTO_PPP,ppp,,Point-to-Point Protocol,"PPP (Point-to-Point Protocol) is a link layer protocol used for transferring data along a Point to Point link. It provides dynamic IP addressing, password support, error checking, and multiple protocols transmission on the same link.",Tunneling,eth;gre;l2tp;pppoe,RFC 1661,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -152,Q_PROTO_PPPOE,pppoe,,Point-to-Point Protocol Over Ethernet,PPP over Ethernet (PPPoE) provides the ability to connect a network of hosts over a simple bridging access device to a remote Access Concentrator.,Tunneling,8021q;eth;gre,RFC 2516,7/4/2008,x,,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1040,Q_PROTO_PPS,pps,x,Pps.tv,This protocol plug-in classifies the http traffic to the host pps.tv. This traffic is now classified as PPstream.,Web,,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -533,Q_PROTO_PPSTREAM,ppstream,,PPStream - P2P based Streamed Media,The ppstream protocol provides audio and video streaming. It is based on bittorent (peer-to-peer) technology. It is mainly used in China.,Audio/Video,http;https;iqiyi;tcp;udp,PC-Windows-PPstream 3.2.0.1003,Mobile-Android-4.4.2-PPS-2.6.4- (2013-10-10);PC-Windows-7-Chrome-34.0.1847.131- (2013-10-10);PC-Windows-8-PPS Video-1.0.0.10- (2013-10-10);PC-Windows-PPStream-3.2.0.1003- (2013-10-10);iPhone-iOS-7.1.1-PPS-2.8.2- (2013-10-10),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -153,Q_PROTO_PPTP,pptp,,Point-to-Point Tunneling Protocol,Point-to-Point Tunneling Protocol allows the Point to Point Protocol (PPP) to be tunnelled through an IP network.,Tunneling,tcp,PPTP v1.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -1041,Q_PROTO_PPTV,pptv,,Pptv.com,This protocol plug-in classifies the http traffic to the host pptv.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2274,Q_PROTO_PRENSA,prensa,,Prensa,Panamanian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2267,Q_PROTO_PRENSALIBRE,prensalibre,,Prensalibre,Guatemalan news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -475,Q_PROTO_PRESENT,present,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2060,Q_PROTO_PRESS24,press24,,Press24.mk,Macedonian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2126,Q_PROTO_PRESSAN,pressan,,Pressan.is,Icelandic news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1042,Q_PROTO_PRICEMINISTER,priceminister,,PriceMinister.com,This protocol plug-in classifies the http traffic to the host priceminister.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -529,Q_PROTO_PRICERUNNER,pricerunner,,PriceRunner,pricerunner is a price comparison service,Web,http;https,20130116,9/19/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -664,Q_PROTO_PRIVATE_ENC,private_enc,,Private encryption scheme,The private_enc protocol (Any private encryption scheme) is found over the IP layer (IANA protocol number: 99).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -840,Q_PROTO_PRIVAX,privax,,Privax.us,This protocol plug-in classifies the http traffic to the host privax.us.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -665,Q_PROTO_PRM,prm,,Packet Radio Measurement,The prm protocol (Packet Radio Measurement) is found over the IP layer (IANA protocol number: 21).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2061,Q_PROTO_PRODAVALNIK,prodavalnik,x,Prodavalnik.com (now Olx.bg),Bulgarian classified ads,Web,,20140117,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -349,Q_PROTO_PROXEASY,proxeasy,,Proxeasy.com,This protocol plug-in classifies the http traffic to the host proxeasy.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -348,Q_PROTO_PROXONO,proxono,,Proxono.org - Proxono.info,This protocol plug-in classifies the http traffic to the hosts proxono.org and proxono.info.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -841,Q_PROTO_PSIPHON,psiphon,,Psiphon,Internet proxy/redirector which allows uncensored access to web content.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -601,Q_PROTO_PSN,psn,,Playstation Network,PlayStation Network (PSN) is the on-line gaming service for consoles made by Sony.,Game,http;https;ssl,Playstation 3 (2013-11-07);PSP (2013-11-07),Playstation-3-PlayStation 3 OS-4.55-- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -666,Q_PROTO_PTP,ptp,,Performance Transparency Protocol,The ptp protocol (Performance Transparency Protocol) is found over the IP layer (IANA protocol number: 123).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2062,Q_PROTO_PULS24,puls24,,Puls24.mk,Macedonian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -667,Q_PROTO_PUP,pup,,PUP,The pup protocol (PUP) is found over the IP layer (IANA protocol number: 12).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2216,Q_PROTO_PUZZLE_AND_DRAGON,puzzle_and_dragon,,Puzzle and Dragon,Japanese Mobile game.,Game,http;https,iPhone-iOS,iPhone-iOS-Puzzle and Dragon-6.3.0- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -668,Q_PROTO_PVP,pvp,,Packet Video Protocol,The pvp protocol (Packet Video Protocol) is found over the IP layer (IANA protocol number: 75).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -345,Q_PROTO_PWE,pwe,,Pseudo Wire Emulation,Pseudo Wire Emulation (PWE) is a protocol for traffic encapsulation.,Routing,mpls,RFC 5287,3/31/2010,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -154,Q_PROTO_Q931,q931,,Q.931,"The Q.931 protocol enables the use of voice and image on networks for video conferencing. It provides no flow control, however, or retransmission, since the underlying layers are assumed to be reliable and the circuit-oriented nature of ISDN allocates bandwidth in fixed increments of 64 kbps. Q.931 does manage connection setup and close. Like TCP, Q.931 documents both the protocol itself and a state machine.",Audio/Video,tcp,Q931 recommendation (05/98),7/4/2008,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, -476,Q_PROTO_QAPACITY,qapacity,x,Qapacity.com,This protocol plug-in classifies the http traffic to the host qapacity.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1934,Q_PROTO_QATARLIVING,qatarliving,,Qatarliving.com,Qatari online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1502,Q_PROTO_QIK_VIDEO,qik_video,,QIK Video,QIK is a PC/smartphone application allowing live and VOD streaming from the web. The video chat additional feature is not supported yet.,Audio/Video,http;https;rtmp;ssl,"6.7(iOS 6.x),17.63(Android 2.3-4.0),20130627(PC/Adobe Air)",PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -669,Q_PROTO_QNX,qnx,,QNX,The qnx protocol (QNX) is found over the IP layer (IANA protocol number: 106).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -156,Q_PROTO_QQ,qq,,QQ,QQ is the most popular free instant messaging computer program in China.,Instant Messaging,http;https;socks4;socks5;tcp;udp,Mobile-Android-QQ Mobile 4.5.11.1868;iPhone-iOS-QQ Mobile 4.2.2;PC-Windows 7-QQ 2.11 (2014-03-08);Mac-Mac OS-QQ 3.0.2 (2014-03-09),Mac-Mac OS-10.9-QQ-3.1.1- (2014-05-27);Mac-Mac OS-10.9.3-QQ-3.1.2-CN (2014-05-27);Mobile-Android-4.2.1-QQ-4.7.0-CN (2014-05-27);Mobile-Android-4.4.2-QQ international-4.6.12.6031- (2014-06-11);PC-Windows-7-QQ international-2.11- (2014-03-28);PC-Windows-7-QQ international-5.3-CN (2014-05-27);PC-Windows-8-QQ-2.0.8.1417- (2014-05-27);Windows Phone-Windows Phone OS-8-QQ-4.2.3.3403- (2014-06-05);iPhone-iOS-7.1.1-QQ international-4.6.11- (2014-06-05);iPhone-iOS-7.1.1-QQ-4.7.1.474-CN (2014-05-27),,x,,x,,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,, -1407,Q_PROTO_QQ_BLOG,qq_blog,,QQ Blog,Tencent blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1408,Q_PROTO_QQ_FINANCE,qq_finance,,QQ finance,Tencent finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1409,Q_PROTO_QQ_GAMES,qq_games,,QQ Games,"Tencent game portal providing game reviews, forum, news.",Web,http;https;tcp;udp,PC-Windows-Browser-www.qqgames.com (2014-02-22);PC-Windows-QQ Game (2014-03-10),PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-7-QQ Games-3.4.0.3- (2014-06-02);PC-Windows-7-QQ Games-3.4.0.3-CN (2014-06-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1410,Q_PROTO_QQ_LADY,qq_lady,,QQ Lady,Tencent fashion website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1411,Q_PROTO_QQ_MAIL,qq_mail,,QQ Mail,Tencent Webmail.,Webmail,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1412,Q_PROTO_QQ_NEWS,qq_news,,QQ News,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -753,Q_PROTO_QQ_TRANSFER,qq_transfer,,QQ File Transfer,File transfer over QQ,File Transfer,http;https;tcp,QQ2003;EN QQ2005 V05.0.200.020;TM2008 Preview [34];QQ Beta3,5/31/2011,,x,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -1241,Q_PROTO_QQ_WEB,qq_web,,QQ.com,QQ.com is a multi-service Chinese web portal hosted by Tencent.,Web,http;https;soso;ssl,PC-Windows-Browser-www.qq.com (2012-08-27),PC-Windows-7-Chrome-34.0.1847.137- (2014-05-16),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1102,Q_PROTO_QQ_WEIBO,qq_weibo,,QQ WeiBo,QQ WeiBo is a Chinese Twitter-like micro-blogging website. It is part of Tencent's QQ.,Web,qq_web,20111128,1/25/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1089,Q_PROTO_QQDOWNLOAD,qqdownload,,QQDownload,QQDownload is a Chinese download manager. Its purpose is to download files quickly using HTTP or the BitTorrent protocol.,Web,bittorrent;http;https;qq_web;soap;soso,QQDownload v1.10,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -585,Q_PROTO_QQLIVE,qqlive,,QQLive Network Player,QQLive is an application intended to watch TV in Peer-to-Peer mode.,Audio/Video,qq_web,QQLive 2010;QQLive 2011,4/6/2012,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -842,Q_PROTO_QQMUSIC,qqmusic,,QQMusic,QQMusic is a Chinese peer-to-peer file sharing software. Its purpose is to download/stream audio files.,Peer to Peer,qq_web;qq_weibo;tcp;udp,QQMusic 2011,PC-Windows-7-QQMusic 2011-2187- (2012-01-05),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x, -1185,Q_PROTO_QQSTREAM,qqstream,,QQStream,QQStream is a Chinese peer-to-peer file sharing software. QQstream is a meta protocol which contains data stream of QQLive and QQMusic.,Peer to Peer,udp,QQStream 2011,PC-Windows-7-QQMusic 2011-2187- (2012-06-20),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1733,Q_PROTO_QTRAX,qtrax,,Qtrax Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -157,Q_PROTO_QUAKE,quake,,Quake,Quake is a protocol allowing communication between Quake Clients and Quake servers.,Game,udp,Quake v3,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -2238,Q_PROTO_QUANTCAST,quantcast,,Quantcast,Quantcast provides audience and advertisement services for web sites.,Web,http;https;ssl,20140409,PC-Linux-BasicTest- (2014-05-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1916,Q_PROTO_QUANTUM_DXI_OST,quantum_dxi_ost,,Quantum DXi,Classifies the Symantec NetBackup streams that use the Quantum DXi replication solution. This implements the OpenStorage API (OST).,File Server,tcp,10.0.4.97;Quantum DXi6540,Quantum-DXi6540-- (2013-12-03),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -477,Q_PROTO_QUARTERLIFE,quarterlife,,Quarterlife.com,This protocol plug-in classifies the http traffic to the host quarterlife.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2255,Q_PROTO_QUIZUP,quizup,,QuizUp: The Biggest Trivia Game In The World!,Mobile game,Game,amazon_aws;http;https;ssl,iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1413,Q_PROTO_QUNAR,qunar,,Qunar.com,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -749,Q_PROTO_QVOD,qvod,,QVOD Player,QVOD is a peer-to-peer based Video-On-Demand player.,Audio/Video,http;https;tcp;udp,5.9,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -478,Q_PROTO_QZONE,qzone,,Qzone.qq.com,Tencent social network.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1458,Q_PROTO_RADIKO,radiko,,Radiko.jp,Broadband broadcasts web retransmission services.,Web,http;https,20130304,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1935,Q_PROTO_RADIO1,radio1,,Radio1.pf,French Polinesian radio broadcast website.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -158,Q_PROTO_RADIUS,radius,,Remote Authentication Dial-In User Service,RADIUS (Remote Authentication Dial-In User Service) is a client/server protocol that enables remote access servers to communicate with a central server to authenticate dial-in users and authorize their access to the requested system or service.,Authentication,udp,Radius v2.0,12/19/2013,,,,x,radius,,,x,,x,,,x,,,,,,,,,,,,,,,,,,,,,x,,, -843,Q_PROTO_RADIUSIM,radiusim,,RadiusIM.com,This protocol plug-in classifies the http traffic to the host radiusim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -904,Q_PROTO_RADMIN,radmin,,Radmin,Radmin is a control software which is able to establish a remote secure connection between computers.,Thin Client,tcp,Radmin 3.4,9/12/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1309,Q_PROTO_RAKUTEN,rakuten,,Rakuten.co.jp,Online market place for selling goods and auctions.,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -318,Q_PROTO_RAMBLER,rambler,,Rambler.ru,Rambler is a Russian information internet portal.,Web,http;https;ssl,20100430,3/7/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -527,Q_PROTO_RAMBLER_WEBMAIL,rambler_webmail,,Rambler webmail,Rambler webmail is the webmail of the Russian website rambler.ru.,Webmail,http;https,20120604,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -313,Q_PROTO_RAPIDSHARE,rapidshare,,RapidShare.com,"RapidShare is an online solution to store, send and share files",Web,http;https;ssl,20101209,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1971,Q_PROTO_RAPIDUPLOAD_COM,rapidupload_com,,rapidupload.com,Classifies web browsing on the rapidupload.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1734,Q_PROTO_RAULKEN,raulken,,Raulken Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -479,Q_PROTO_RAVELRY,ravelry,,Ravelry.com,This protocol plug-in classifies the http traffic to the host www.ravelry.com. It also classifies the ssl traffic to the Common Name .ravelry.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1735,Q_PROTO_RAYFILE,rayfile,,Rayfile Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -159,Q_PROTO_RDP,rdp,,Remote Desktop Protocol (Windows Terminal Server),"A key component of Terminal Server is the Remote Desktop Protocol which allows a thin client to communicate with the Terminal Server over the network. This protocol is based on International Telecommunications Union's (ITU) T.120 protocol, an international, standard multichannel conferencing protocol currently used in the Microsoft NetMeeting conferencing software product. It is tuned for high-bandwidth enterprise environments and will also support encrypted sessions.",Thin Client,cotp;mcs,4;5;6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -160,Q_PROTO_RDT,rdt,,Real Data Transport,This protocol is used to transport audio/video data.,Audio/Video,rtsp;udp,RDT v2;RDT v3,7/4/2008,,,,x,rtsp,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x, -293,Q_PROTO_REALTOR,realtor,,Realtor.com,This protocol plug-in classifies the http traffic to the host realtor.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1479,Q_PROTO_REDDIT,reddit,,Reddit.com,Social news website.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -571,Q_PROTO_REDHAT_UPDATE,redhat_update,,RedHat Update,This protocol is used for Red Hat updates.,Web,http;https,Fedora14;CentOS5.5;Scientific5.5;RedHat6.0,11/29/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1043,Q_PROTO_REDTUBE,redtube,,Redtube.com,This protocol plug-in classifies the http traffic to the host redtube.com.,Web,http;https,PC-Windows-Browser-www.redtube.com (2014-01-30),Mobile-Android-4.4.2-Redtube-1.3.5- (2014-06-07);PC-Windows-7-Chrome- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2128,Q_PROTO_REKLAMA5,reklama5,,Reklama5.mk,Macedonian classifed ads,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -480,Q_PROTO_RENREN,renren,,Renren.com,This protocol plug-in classifies the http traffic to the host renren.com.,Web,http;https,20111121,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2063,Q_PROTO_REPUBBLICA,repubblica,,Repubblica.it,Italian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1153,Q_PROTO_REPUBLIKA,republika,,Republika.co.id,This protocol plug-in classifies the http traffic to the host republika.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -481,Q_PROTO_RESEARCHGATE,researchgate,,ResearchGATE.net,This protocol plug-in classifies the http traffic to the host researchgate.net.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1908,Q_PROTO_RETROSHARE,retroshare,,RetroShare,Retroshare is a communication and file-sharing Open Source platform which is secured and decentralized.,Peer to Peer,ssl,PC-Windows-Retroshare 0.5.4e_6268,PC-Windows-7-Retroshare-0.5.4e_6268- (2014-02-21),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1044,Q_PROTO_REUTERS,reuters,,Reuters.com,This protocol plug-in classifies the http traffic to the host reuters.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -482,Q_PROTO_REVERBNATION,reverbnation,,ReverbNation.com,This protocol plug-in classifies the http traffic to the host reverbnation.com. It also classifies the ssl traffic to the Common Name .reverbnation.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1045,Q_PROTO_REVERSO,reverso,,Reverso.net,This protocol plug-in classifies the http traffic to the host reverso.net.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -161,Q_PROTO_RFB,rfb,,Remote Frame Buffer,RFB (Remote Frame Buffer) is a simple protocol for remote access to graphical user interfaces.,Thin Client,tcp,RFB v3.3;RFB v3.7;RFB v3.8,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1189,Q_PROTO_RHAPSODY,rhapsody,,Rhapsody,Rhapsody is a subcription based music streaming service.,Audio/Video,facebook;http;https;llnwd;rtmp;ssl,2.2.4-Android;2.2.10-iOS;20120611-web,Mobile-Android-Rhapsody-2.2.4.21- (2012-09-03);iPhone-iOS-Rhapsody-2.2.10- (2012-09-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1936,Q_PROTO_RICARDO,ricardo,,Ricardo.ch,Swiss online trading website.,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2129,Q_PROTO_RIMNOW,rimnow,,Rimnow.com,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -162,Q_PROTO_RIP1,rip1,,Routing Information Protocol V1,RIP1 (Routing Information Protocol Version 1) is a Distance Vector routing protocol used in Inter Autonomous Systems.,Routing,udp,Routing Information Protocol V1,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -163,Q_PROTO_RIP2,rip2,,Routing Information Protocol V2,"RIP2 (Routing Information Protocol Version 2) is an enhancement of the Version 1 of the protocol. The main differences are the use of multicast instead of broadcast, and the support of variable length subnet mask networks since subnets are now sent inside the updates.",Routing,udp,Routing Information Protocol V2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -164,Q_PROTO_RIPNG1,ripng1,,Routing Internet Protocol ng1,RIPng (RIP New Generation) is intended to allow routers to exchange information for computing routes through an IPv6-based network. RIPng is a distance vector protocol. RIPng should be implemented only in routers since IPv6 provides other mechanisms for router discovery.,Routing,udp,RIPng v1,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -165,Q_PROTO_RLOGIN,rlogin,,Remote Login,The Rlogin protocol is used to establish a bidirectional communication to distant terminals.,Terminal,tcp,RFC 1282,PC-Windows-Putty-0.62- (2012-04-20),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -166,Q_PROTO_RLP,rlp,,Resource Location Protocol,Resource Location Protocol (RLP) is a protocol used to discover the location of resources present in a network.,Network Service,udp,RFC 887,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -905,Q_PROTO_RMI_IIOP,rmi_iiop,,Remote Method Invocation over Internet Inter-ORB Protocol,"RMI-IIOP (Remote Method Invocation over Internet Inter-ORB Protocol) delivers CORBA distributed architecture to Java 2 platform, using both remote method invocation system RMI and IIOP protocol.",Middleware,iiop,CORBA/IIOP 2.3.1,9/16/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1736,Q_PROTO_RMVBUSTERS,rmvbusters,,Rmvbusters Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2286,Q_PROTO_ROBOFORM,roboform,,Roboform,Roboform is a password management and web form filling program.,Web,http;https;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -733,Q_PROTO_ROHC,rohc,,Robust Header Compression,The rohc protocol (Robust Header Compression) is found over the IP layer (IANA protocol number: 142).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2243,Q_PROTO_ROVIO,rovio,,Rovio Entertainment,Rovio is a mobile game editor. This plug-in handles Rovio games content delivery traffic and Rovio website access.,Game,akamai;http;https;ssl,20150515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -167,Q_PROTO_RPC,rpc,,Remote Procedure Call,"RPC (Remote Procedure Call) is an easy and popular paradigm for implementing the client-server model of distributed computing. A request is sent to a remote system to execute a designated procedure, using arguments supplied, and the result is returned to the caller.",Middleware,http;https;tcp;udp,RPC v2,7/4/2008,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -168,Q_PROTO_RPL,rpl,,IBM Remote Program Load,IBM Remote Program Load allows a client computer to retrieve startup and configuration software from a server when it starts.,Network Service,8021q;eth;gre;llc,na,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -169,Q_PROTO_RQUOTA,rquota,,Rquota,The RQuota protocol enables the implementation of quotas on remote machines. It is used in conjunction with the NFS protocol.,File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -170,Q_PROTO_RSH,rsh,,Remote Shell,The RSH protocol allows a user to establish a secure connection to a remote host and to obtain a shell allowing commands to be sent to the remote machine to be executed.,Terminal,tcp,RSH 4.2BSD,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -922,Q_PROTO_RSS,rss,,RSS,RSS is a family of web feed formats used to publish frequently updated works in a standardized format.,Web,http;https,0.90;0.91;0.92;0.93;0.94;1.0;2.0,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -171,Q_PROTO_RSTAT,rstat,,Rstat,The RStat protocol is used in the Sun NFS family to exchange statistics on network activity.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -172,Q_PROTO_RSVP,rsvp,,Reservation Protocol,"RSVP is a Resource reSerVation setup Protocol designed for an integrated services Internet. RSVP provides receiver-initiated setup of resource reservations for multicast or unicast data flows, with good scaling and robustness properties. The RSVP protocol is used by a host to request specific qualities of service from the network for particular application data streams or flows. RSVP is also used by routers to deliver quality-of-service (QoS) requests to all nodes along the path(s) of the flows and to establish and maintain state to provide the requested service.",Network Management,ip,RSVP-V1.0,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -728,Q_PROTO_RSVP_E2E_IGNORE,rsvp_e2e_ignore,,Original experimental academic or proprietary protocols,The rsvp_e2e_ignore protocol (Original experimental academic or proprietary protocols) is found over the IP layer (IANA protocol number: 134).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -173,Q_PROTO_RSYNC,rsync,,Remote synchronous (file transfer),"Rsync is a protocol used by various services performing updates. It greatly speeds up the update process since only the differences between two sets of files are transfered, instead of the whole new file.",File Server,tcp;udp,RSYNC v2.0;RSYNC v3.0,PC-Linux-rsync-3.0.7- (2012-02-02),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -2064,Q_PROTO_RT,rt,,Rt.com,"Worldwide Russian news channel in Russian, Arabic, Spanish and English.",Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -174,Q_PROTO_RTCP,rtcp,,Real Time Control Protocol,"The real-time transport Control protocol RTP allows monitoring of the data delivery in a manner scalable to large multicast networks, and to provide minimal control and identification functionality.",Audio/Video,udp,RTCP v2,4/25/2014,,,,x,,,,,,,x,,,,,x,,,,,,x,,,,,,,,,,,,,,, -1046,Q_PROTO_RTL,rtl,,rtl.de,This protocol plug-in classifies the http traffic to the host rtl.de.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -337,Q_PROTO_RTMP,rtmp,,Real Time Messaging Protocol,"Real Time Messaging Protocol (RTMP) is a proprietary protocol developed by Adobe Systems for streaming audio, video and data over the Internet, between a Flash player and a server.",Network Service,http;tcp,20101210,9/10/2012,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -175,Q_PROTO_RTP,rtp,,Real Time Protocol,"RTP is the real-time transport protocol used to transmit real-time data, such as audio, video or simulation data, over multicast or unicast network services.",Audio/Video,tcp;udp,RTP V2,6/20/2012,,,,x,"rtp, rtsp",,,x,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,x, -176,Q_PROTO_RTSP,rtsp,,Real Time Streaming Protocol,"The Real Time Streaming Protocol (RTSP) is an application-level protocol for control over the delivery of data with real-time properties. RTSP provides an extensible framework to enable controlled, on-demand delivery of real-time data, such as audio and video.",Audio/Video,http;tcp,1.0,2/20/2014,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,,,x, -2130,Q_PROTO_RTVSLO,rtvslo,,Rtvslo.si,Slovenian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -309,Q_PROTO_RUNESCAPE,runescape,,RuneScape,Massively Multiplayer Online Role Playing Game published by Jadex.,Game,http;https;ssl;tcp,3.1,PC-Windows-runescape-3.1- (2012-05-30),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -177,Q_PROTO_RUSERS,rusers,,Rusers,The RUser's protocol provides a service that lists users currently logged on a remote server.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,x,, -1414,Q_PROTO_RUTEN,ruten,,Ruten.com.tw,Taiwanese auction website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1749,Q_PROTO_RUTRACKER,rutracker,,Rutracker Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2065,Q_PROTO_RUV,ruv,,Ruv.is,Icelandic news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -672,Q_PROTO_RVD,rvd,,MIT Remote Virtual Disk,The rvd protocol (MIT Remote Virtual Disk Protocol) is found over the IP layer (IANA protocol number: 66).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1047,Q_PROTO_RYANAIR,ryanair,,Ryanair.com,This protocol plug-in classifies the http traffic to the host ryanair.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -483,Q_PROTO_RYZE,ryze,,Ryze.com,This protocol plug-in classifies the http traffic to the host ryze.com. It also classifies the ssl traffic to the Common Name .ryze.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1306,Q_PROTO_S1AP,s1ap,,S1 Application Protocol,"S1 Application Protocol (S1AP), as described in 3GPP TS 36.413 version 11.2.1 Release 11 (2013-02).",Network Service,sctp,3GPP TS 36.413 version 11.2.1 Release 11 (2013-02),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1942,Q_PROTO_S_OMAN,s_oman,,S-oman.net,Omani forum hosting website.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1565,Q_PROTO_SAAVN_MUSIC,saavn_music,,Saavn Bollywood Music,Saavn is a streaming application providing free Indian and Bollywood music to listeners.,Web,http;https;ssl,2.1,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2131,Q_PROTO_SABAY,sabay,,Sabay.com.kh,Cambodian news and information portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1146,Q_PROTO_SABERINDO,saberindo,,Saberindo.co.id,This protocol plug-in classifies the http traffic to the host saberindo.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2066,Q_PROTO_SABQ,sabq,,Sabq.org,Saudi Arabian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2173,Q_PROTO_SAHAFAH,sahafah,,Sahafah,Yemeni news portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2132,Q_PROTO_SAHARAMEDIAS,saharamedias,,SaharaMedias.net,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1937,Q_PROTO_SAHIBINDEN,sahibinden,,Sahibinden.com,Turkish online classified ads and e-commerce platform.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1938,Q_PROTO_SAITEBI,saitebi,,Saitebi.ge,Georgian internet catalog.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1321,Q_PROTO_SAKURA_NE,sakura_ne,,Sakura.ne.jp,Japanese professional web hosting services.,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -844,Q_PROTO_SALESFORCE,salesforce,,Salesforce.com,This protocol plug-in classifies the ssl traffic to the Common Name .salesforce.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -2067,Q_PROTO_SAMEERBOOK,sameerbook,,Sameerbook.com,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1121,Q_PROTO_SAMSUNG_APPS,samsung_apps,,Samsung Apps,Samsung Apps is an application store for Samsung mobile and TV users.,Application Service,amazon_aws;facebook;http;https;ssl;twitter,Mobile-Android-Samsung Apps 2.6.148,Mobile-Android-4.1.2-Samsung Apps-1.1.203- (2014-06-03);Mobile-Bada-2.0-Samsung Apps-1.0.2- (2014-04-30);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-23),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -2133,Q_PROTO_SANA,sana,,Sana.sy,Syrian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1762,Q_PROTO_SANOOK,sanook,,Sanook.com,"Thailandese website providing lottery games, music. chat, news, jobs, shopping and entertainment.",Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -178,Q_PROTO_SAP,sap,,SAP,SAP is both a protocol and the name of an ERP application used by most companies.,ERP,tcp,SAP R/3,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1788,Q_PROTO_SAPO,sapo,,Sapo.mz - Sapo.pt,"Mozambican web portal including mail, news, lifestyle. This portal is also accessed from Portugal.",Web,http;https,20140130,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2186,Q_PROTO_SARAYANEWS,sarayanews,,Sarayanews,Jordanian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -673,Q_PROTO_SAT_EXPAK,sat_expak,,SATNET and Backroom EXPAK,The sat_expak protocol (SATNET and Backroom EXPAK) is found over the IP layer (IANA protocol number: 64).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -674,Q_PROTO_SAT_MON,sat_mon,,SATNET Monitoring,The sat_mon protocol (SATNET Monitoring) is found over the IP layer (IANA protocol number: 69).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1978,Q_PROTO_SAVEFILE_COM,savefile_com,,savefile.com,Classifies web browsing on the savefile.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1220,Q_PROTO_SAYCLUB,sayclub,,SayClub.com,This protocol plug-in classifies the http traffic to the host sayclub.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1221,Q_PROTO_SBS,sbs,,Sbs.co.kr,This protocol plug-in classifies the http traffic to the host sbs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -725,Q_PROTO_SCC_SP,scc_sp,,Semaphore Communications Sec. Pro.,The scc_sp protocol (Semaphore Communications Sec. Pro.) is found over the IP layer (IANA protocol number: 96).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1909,Q_PROTO_SCCM,sccm,,System Center Configuration Manager,"System Center Configuration Manager, is a systems management software product by Microsoft for managing large groups of computers running Windows, Mac OS X, Linux or UNIX, as well as various mobile operating systems. [Note: sccm is also known as mssms.]",Network Management,http;https,20130701,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -179,Q_PROTO_SCCP,sccp,,Skinny Client Control Protocol,Skinny Client Control Protocol (SCCP) is a Cisco proprietary protocol used between Cisco Call Manager and Cisco VOIP phones. It is also supported by some other vendors.,Audio/Video,tcp,20051122,7/4/2008,,,,x,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, -1307,Q_PROTO_SCCP_SS7,sccp_ss7,,Stream Connection Control Part,"SCCP is a network layer protocol that provides routing, flow control or error detection services in SS7 networks.",Network Service,m3ua,RFC 2960,,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1737,Q_PROTO_SCENEHD,scenehd,,SceneHD Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2014,Q_PROTO_SCHEDULED_TP,scheduled_tp,,Scheduled Transfer Protocol,STP is a connection-oriented data transfer protocol. It is found over the IP layer (IANA protocol number: 118).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -484,Q_PROTO_SCIENCESTAGE,sciencestage,,ScienceStage.com,This protocol plug-in classifies the http traffic to the host sciencestage.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -485,Q_PROTO_SCISPACE,scispace,,Scispace.com,This protocol plug-in classifies the http traffic to the host scispace.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2237,Q_PROTO_SCORECARDRESEARCH,scorecardresearch,,ScorecardResearch,Scorecard Research provides a web data collection service.,Web,http;https;ssl,20140409,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -675,Q_PROTO_SCPS,scps,,SCPS,The scps protocol (SCPS) is found over the IP layer (IANA protocol number: 105).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1166,Q_PROTO_SCRIBD,scribd,,Scribd.com,This protocol plug-in classifies the http traffic to the host scribd.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -180,Q_PROTO_SCTP,sctp,,Stream Control Transmission Protocol,SCTP (Stream Control Transmission Protocol) is a protocol designed to transport PSTN signaling messages over IP networks.,Network Service,ip;ip6,RFC 2960,7/4/2008,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1415,Q_PROTO_SDO,sdo,,Sdo.com,Chinese entertainment portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -708,Q_PROTO_SDRP,sdrp,,Source Demand Routing Protocol,The sdrp protocol (Source Demand Routing Protocol) is found over the IP layer (IANA protocol number: 42).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1774,Q_PROTO_SEARCHNU,searchnu,,Searchnu,Browser toolbar search engine,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -250,Q_PROTO_SECONDLIFE,secondlife,,SecondLife.com,Secondlife is is an Internet-based virtual world which enables its users to interact with each other through motional avatars.,Web,http;https;udp,20081118,1/14/2009,,x,,x,,,,,,,,,,,,x,x,,,,x,,x,,,,,,,,,,x,,,, -676,Q_PROTO_SECURE_VMTP,secure_vmtp,,Secure VMTP,The secure_vmtp protocol (SECURE_VMTP) is found over the IP layer (IANA protocol number: 82).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -845,Q_PROTO_SEEQPOD,seeqpod,,Intertrust.com,This protocol plug-in classifies the http traffic to the host intertrust.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1317,Q_PROTO_SEESAA,seesaa,,Seesaa,Japanese web portal dedicated to smartphone applications and other web sites,Web,http;https;ssl,20140617,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -846,Q_PROTO_SEESMIC,seesmic,,Seesmic.com,This protocol plug-in classifies the http traffic to the host seesmic.com. It also classifies the ssl traffic to the Common Name .seesmic.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1222,Q_PROTO_SEGYE,segye,,Segye.com,This protocol plug-in classifies the http traffic to the host segye.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -317,Q_PROTO_SENDSPACE,sendspace,,SendSpace.com,This protocol plug-in classifies the http traffic to the host sendspace.com.,Web,http;https;ssl,PC-Windows-Browser-www.sendspace.com (2014-02-18);Mobile-Android (2014-02-18);PC-Windows 7 (2014-02-19),Mac-Mac OS-10.9.3-Sendspace-1.4.2- (2014-05-20);Mobile-Android-4.4.2-Sendspace-2.2.3- (2014-03-13);PC-Linux-14.04-Sendspace-1.3.9- (2014-06-10);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-15);PC-Windows-7-Sendspace-1.4.2- (2014-06-06);iPhone-iOS-7.0.4-iShare-3.0.2- (2014-05-23),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2068,Q_PROTO_SENEWEB,seneweb,,Seneweb.com,Senegalese news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1190,Q_PROTO_SEOUL_NEWS,seoul_news,,Seoul.co.kr,This protocol plug-in classifies the http traffic to the host seoul.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1939,Q_PROTO_SEZNAM,seznam,,Seznam.cz,Czech internet web protal.,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1048,Q_PROTO_SFR,sfr,,SFR.fr,This protocol plug-in classifies the http traffic to the host sfr.fr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1444,Q_PROTO_SHARE,share,,Share,Share is a free peer-to-peer application allowing users to exchange files anonymously and in a secure way.,Peer to Peer,tcp,EX2,3/21/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1988,Q_PROTO_SHAREBEE_COM,sharebee_com,,sharebee.com,Classifies web browsing on the sharebee.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2013-12-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1738,Q_PROTO_SHAREBOX,sharebox,,Sharebox Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -756,Q_PROTO_SHAREPOINT,sharepoint,,Microsoft SharePoint,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems.",Web,http;https,SharePoint 2010,7/4/2008,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,, -757,Q_PROTO_SHAREPOINT_ADMIN,sharepoint_admin,,Microsoft SharePoint Administration Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the administration back-end of SharePoint.",Web,sharepoint,SharePoint 2010,7/11/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -924,Q_PROTO_SHAREPOINT_BLOG,sharepoint_blog,,Microsoft SharePoint Blog Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the blog management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -925,Q_PROTO_SHAREPOINT_CALENDAR,sharepoint_calendar,,Microsoft SharePoint Calendar Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the calendar management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -926,Q_PROTO_SHAREPOINT_DOCUMENT,sharepoint_document,,Microsoft SharePoint Document Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the document management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1453,Q_PROTO_SHAREPOINT_ONLINE,sharepoint_online,,SharePoint Online,On-line version of the Microsoft Sharepoint services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -1739,Q_PROTO_SHAREREACTOR,sharereactor,,Sharereactor Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -486,Q_PROTO_SHARETHEMUSIC,sharethemusic,,ShareTheMusic.com,This protocol plug-in classifies the http traffic to the host sharethemusic.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1178,Q_PROTO_SHAZAM,shazam,,Shazamid.com,This protocol plug-in classifies the http traffic to the hosts shazamid.com and cdn.shazam.com. It also classifies the ssl traffic to the Common Name beacon.shazam.com.,Web,http;https;ssl,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -2134,Q_PROTO_SHEKULLI,shekulli,,Shekulli.com.al,Albanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -487,Q_PROTO_SHELFARI,shelfari,,Shelfari.com,This protocol plug-in classifies the http traffic to the host shelfari.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -731,Q_PROTO_SHIM6,shim6,,Shim6 Protocol,The shim6 protocol (Shim6 Protocol) is found over the IP layer (IANA protocol number: 140).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1223,Q_PROTO_SHINHAN,shinhan,,Shinhan.com,This protocol plug-in classifies the http traffic to the host shinhan.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1940,Q_PROTO_SHOBIDDAK,shobiddak,,Shobiddak.com,Palestinian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -181,Q_PROTO_SHOUTCAST,shoutcast,,ShoutCast,Shoutcast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;tcp,PC-Windows-Browser-www.shoutcast.com (2014-02-22),Mobile-Android-4.4.2-XiiaLive-3.2.0.7- (2014-02-22);Mobile-iOS-7.1-Internet Radio Box-2.1.7- (2014-04-23);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);PC-Windows-7-Winamp-5.666- (2014-02-22);PC-Windows-8-RADYO-1.1.4.4- (2014-02-22),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -847,Q_PROTO_SHOWMYPC,showmypc,,ShowMyPc.com,This protocol plug-in classifies the http traffic to the host showmypc.com. It also classifies the ssl traffic to the Common Name showmypc.com.,Thin Client,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, -848,Q_PROTO_SHUTTERFLY,shutterfly,,Shutterfly.com,This protocol plug-in classifies the http traffic to the host shutterfly.com. It also classifies the ssl traffic to the Common Name shutterfly.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -944,Q_PROTO_SIEBEL_CRM,siebel_crm,,Siebel CRM,A customer relationship management (CRMs) solution by Siebel Systems.,Web,http;https,20110826,10/21/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -2202,Q_PROTO_SIGMALIVE,sigmalive,,Sigmalive,Cypriot news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -737,Q_PROTO_SILVERLIGHT,silverlight,,Silverlight,"Silverlight is a Microsoft web browser plugin designed to render programable animations and to stream videos. It quite similar with Adobe Flash: animated vector graphics, H264 video streaming",Audio/Video,akamai;http;https,PC-Windows-Internet Explorer-Silverlight 5.0 (2011-12-09),Mac-Mac OS-10.9-Silverlight-4.1.10329.0- (2014-04-23);PC-Windows-7-Silverlight-5.1.30214.0- (2014-03-27);PC-Windows-8-Silverlight-5.1.30214.0- (2014-05-07);Xbox-360-Silverlight-5- (2013-10-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -679,Q_PROTO_SIMPLE_MSG_P,simple_msg_p,,Simple Message Protocol,The simple_msg_p protocol (Simple Message Protocol) is found over the IP layer (IANA protocol number: 121).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1995,Q_PROTO_SIMPLEUPLOAD_NET,simpleupload_net,,simpleupload.net,Classifies web browsing on the simpleupload.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1088,Q_PROTO_SINA,sina,,Sina.com.cn,"Sina is a Chinese chat client similar to MSN Messenger or ICQ. It contains several features like chat, news portal, micro blogging, music player, online storage (files, photos, etc..).",Web,http;https;jabber;ssl;udp,Mobile-Android-Sina 1.7;PC-Windows-Browser-www.sina.com.cn (2014-02-23),PC-Windows-Firefox- (2013-10-17);PC-Windows-Sina UC-8.3.4- (2013-10-11),,x,,x,,,,,,,x,,,,,x,,,,,x,,,,,,,,,,,,,,,, -1416,Q_PROTO_SINA_BLOG,sina_blog,,Sina blog,Sina blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1417,Q_PROTO_SINA_FINANCE,sina_finance,,Sina finance,Sina finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1418,Q_PROTO_SINA_NEWS,sina_news,,Sina News,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1462,Q_PROTO_SINA_VIDEO,sina_video,,Sina Video,Chinese on-line video streaming and VOD service.,Web,sina,"1.0 (CLIENT),20130425 (Web)",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1097,Q_PROTO_SINA_WEIBO,sina_weibo,,Sina Weibo,Sina Weibo is a Chinese microblogging website.,Web,sina,20111121,BlackBerry-BlackBerry OS-10.2.1.2102-Sina Weibo-1.1.0.6- (2012-01-25);Mobile-Android-4.4.2-Sina Weibo-4.3.5- (2012-01-25);PC-Windows-7-Chrome-34.0.1847.137- (2012-01-25);PC-Windows-7-Sina Weibo-3.0.5.35670- (2012-01-25);PC-Windows-8-Sina Weibo-1.4.0.31- (2012-01-25);Windows Phone-Windows Phone OS-8-Sina Weibo-3.3.1.0- (2012-01-25);iPhone-iOS-7.1-Sina Weibo-4.3.0- (2012-01-25),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2069,Q_PROTO_SIOL,siol,,Siol.net,Slovenian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -182,Q_PROTO_SIP,sip,,Session Initiation Protocol,"Session Initiation Protocol (SIP) is the Internet Engineering Task Force's (IETF's) standard for multimedia conferencing over IP. Like other VoIP protocols, SIP is designed to address the functions of signaling and session management within a packet telephony network.",Audio/Video,aim;http;msn;sip;stun;tcp;udp,2.0,3/24/2014,,,,x,sip,,,x,,x,x,,,,,x,,x,x,,,x,,,,,,,,,,,,,,, -2261,Q_PROTO_SKEE_BALL_ARCADE,skee_ball_arcade,,Skee Ball Arcade,Mobile game,Game,amazon_aws;http;https;ssl,iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1941,Q_PROTO_SKELBIU,skelbiu,,Skelbiu.lt,Lithuanian online classified ads and trading website.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -677,Q_PROTO_SKIP,skip,,SKIP,The skip protocol (SKIP) is found over the IP layer (IANA protocol number: 57).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2135,Q_PROTO_SKROUTZ,skroutz,,Skroutz.gr,Greek price comparator,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1049,Q_PROTO_SKY,sky,,Sky,This protocol plug-in classifies the http traffic to the host www.sky.com.,Audio/Video,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -849,Q_PROTO_SKY_PLAYER,sky_player,,SkyPlayer.sky.com,This protocol plug-in classifies the http traffic to the host skyplayer.sky.com. It also classifies the ssl traffic to the Common Name .sky.com.,Audio/Video,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -323,Q_PROTO_SKYBLOG,skyblog,,skyblog,SkyBlog is a website where users can have blogs.,Web,http;https;ssl,20131118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1050,Q_PROTO_SKYCN,skycn,,Skycn.com,This protocol plug-in classifies the http traffic to the host skycn.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -850,Q_PROTO_SKYDRIVE,skydrive,,Windows Live SkyDrive,"This protocol plug-in classifies the ssl traffic to the Common Names live.com.nsatc.net, gateway.edge.messenger.live.com, skydrive.live.com and skyapi.live.net.",Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1575,Q_PROTO_SKYDRIVE_LOGIN,skydrive_login,,Windows Live SkyDrive Login,On-line file storage service owned by Microsoft.,Web,http;https,20130909,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -183,Q_PROTO_SKYPE,skype,,skype,"Skype is a widely used voice over IP protocol. Since the merge with MSN service in 2013, it may be required to use this protocol in conjonction with msn and windowslive protocols to optimise the coverage of traffic generated by Skype clients.",Instant Messaging,http;https;ssl;tcp;udp,PC-Windows 7-Skype 6.9.0.106;Mobile-Android-Skype 3.2.0.6673;iPad-iOS-Skype 4.8;Windows Phone-Windows Phone OS-Skype 2.6.0.148,Blackberry-Blackberry OS-10.2.1.337-Skype-4.4.507.41401- (2014-02-12);Kindle Fire-Kindle Fire-7.4.8-Skype-4.4.506.41181- (2014-02-12);Mac-Mac OS-Skype-6.17- (2014-03-06);Mobile-Android-4.2.1-Skype-4.9.0.45564- (2014-06-03);PC-Linux-Skype-4.2.0.13- (2014-02-12);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-7-Skype-6.16.105- (2014-06-03);PC-Windows-8-Skype-6.3.73.105- (2014-02-12);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-Skype-2.16.0.274- (2014-05-05);iPhone-iOS-7.1.1-Skype-4.17.3- (2014-06-03),,x,,x,skype,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -302,Q_PROTO_SKYROCK,skyrock,x,Skyrock.com,This protocol plug-in classifies the http traffic to the host www.skyrock.com. Now classified as skyblog.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1179,Q_PROTO_SLACKER,slacker,,Slacker Personal Radio,This protocol plug-in classifies the http traffic to the host .slacker.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1786,Q_PROTO_SLANDO,slando,x,Slando.by (now Olx.by),Belarusian free classified ads,Web,,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1051,Q_PROTO_SLIDESHARE,slideshare,,Slideshare.net,This protocol plug-in classifies the http traffic to the host slideshare.net.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -892,Q_PROTO_SLINGBOX,slingbox,,Slingbox,Slingbox is a streaming protocol over the Internet used to watch and control TV shows received from your home devices.,Audio/Video,http;https;ssl;tcp,1.5.1.119,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -184,Q_PROTO_SLSK,slsk,,SoulSeek,Soulseek is a peer-to-peer protocol.,Peer to Peer,tcp,<=1.57,PC-Linux-Soulseek-157 NS 13 e- (2013-03-05),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -678,Q_PROTO_SM,sm,,Sparse Mode,The sm protocol (SM) is found over the IP layer (IANA protocol number: 122).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -185,Q_PROTO_SMB,smb,,Server Message Block (Windows File Server),The Server Message Block Protocol (SMB/SMB2) provides a method for client applications to read and write to files and to request services from server programs in a computers network.,File Server,netbios,smb;smb2,PC-Linux-Samba Server-3.4.0- (2014-02-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -2070,Q_PROTO_SME,sme,,Sme.sk,Slovak news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -738,Q_PROTO_SMPP,smpp,,Short message peer-to-peer protocol,SMPP is a telecommunications industry protocol for exchanging SMS messages between SMS peer entities.,Wap,tcp,3.4;5.0,2/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -186,Q_PROTO_SMTP,smtp,,Simple Mail Transfer Protocol,The Simple Mail Transfer Protocol (SMTP) is a protocol used for transfering mail reliably and efficiently.,Mail,socks4;socks5;tcp,RFC 821;RFC 5321,4/28/2014,,,,x,,,,,,,x,,,x,,,,,,,,,,,,,,,,,,,,,,, -187,Q_PROTO_SMTPS,smtps,,Simple Mail Transfer Protocol Secure,Secure version of the SMTP protocol.,Mail,ssl,RFC 821;RFC 5321,7/4/2008,,,,,,465,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -188,Q_PROTO_SNA,sna,,Systems Network Architecture,SNA (Systems Network Architecture) is an IBM's mainframe network standards.,Network Service,8021q;eth;llc;ppp,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -189,Q_PROTO_SNAP,snap,,Sub-Network Access Protocol,Sub-Network Access Protocol (SNAP) is a protocol encapsulated in the LLC protocol enabling the encapsulation of a greater number of protocols in Ethernet II frames.,Network Service,llc,RFC 1042,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -2210,Q_PROTO_SNAPCHAT,snapchat,,Snapchat,Snapchat is a photo/video sharing service.,Web,http;https;ssl,Mobile-Android;iPhone-iOS,Mobile-Android-Snapchat-4.0.20- (2014-03-27);iPhone-iOS-Snapchat-6.0.2- (2014-03-27),,x,,,,,,,,,,,,,,x,x,,,,x,,x,,,,x,,,,,,,,,, -190,Q_PROTO_SNMP,snmp,,Simple Network Management Protocol,SNMP is a request/response protocol that communicates management information between two types of SNMP software entities: SNMP applications (also called SNMP managers) and SNMP agents.,Network Management,hpellc;udp,1;2c;2u;3,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -680,Q_PROTO_SNP,snp,,Sitara Networks Protocol,The snp protocol (Sitara Networks Protocol) is found over the IP layer (IANA protocol number: 109).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -264,Q_PROTO_SNPP,snpp,,Simple Network Paging Protocol,This protocol defines a method by which a pager can receive a message over the Internet,Network Service,tcp,SNPP v3,4/16/2009,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -191,Q_PROTO_SOAP,soap,,Simple Object Access Protocol,"SOAP is a lightweight protocol intended for exchanging structured information in a decentralized, distributed environment. It defines, using XML technologies, an extensible messaging framework containing a message construct that can be exchanged over a variety of underlying protocols.",Middleware,http,SOAP v1.1;SOAP v1.2,2/3/2012,,,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, -851,Q_PROTO_SOCIALTV,socialtv,,Social-tv.net,This protocol plug-in classifies the http traffic to the host srv.sixdegs.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -488,Q_PROTO_SOCIALVIBE,socialvibe,x,SocialVibe.com,This protocol plug-in used to classify the http traffic to the host socialvibe.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -927,Q_PROTO_SOCKS2HTTP,socks2http,,socks2http,Socks2http is a client software aiming to make a tunnel.,Tunneling,http;https;tcp,1.0.2.411,10/21/2011,,x,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -192,Q_PROTO_SOCKS4,socks4,,SOCKet Secure v4,Socks 4 is an authentication protocol.,Tunneling,tcp,SOCKS-v4,7/4/2008,,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -193,Q_PROTO_SOCKS5,socks5,,SOCKet Secure v5,Socks 5 is an authentication protocol.,Tunneling,tcp,SOCKS-v5,7/4/2008,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1419,Q_PROTO_SOFT4FUN,soft4fun,,Soft4fun.net,Hardware and software news site.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1457,Q_PROTO_SOFTBANK,softbank,,SoftBank.com,SoftBank network operator services.,Web,http;https;ssl,20130304,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1756,Q_PROTO_SOFTONIC,softonic,,Softonic.com,Softonic.com is a software download portal based in Barcelona,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1695,Q_PROTO_SOFTROS_MESSENGER,softros_messenger,,Softros LAN Instant Messenger,Softros Messenger is a LAN messaging and file transfer application.,Instant Messaging,tcp,5.1.1 (Windows),PC-Windows-Softros LAN Messenger-5.1.3- (2013-12-23),,,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -1251,Q_PROTO_SOGOU,sogou,,Sogou.com,This protocol plug-in classifies the http traffic to the host sogou.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1243,Q_PROTO_SOHU,sohu,,Sohu.com,Sohu services (except blogging classified in sohu_blog).,Web,http;https,20130215,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1420,Q_PROTO_SOHU_BLOG,sohu_blog,,Sohu blog,Sohu blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1264,Q_PROTO_SOKU,soku,,Soku.com,This protocol plug-in classifies the http traffic to the host soku.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1910,Q_PROTO_SOMUD,somud,,SoMud Bittorrent tracker,SoMud is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the SoMud client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https,1.3.8,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1324,Q_PROTO_SONET_NE,sonet_ne,,So-net.ne.jp,Japanese web portal of the internet provider So-net,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -489,Q_PROTO_SONICO,sonico,,Sonico.com,This protocol plug-in classifies the http traffic to the host sonico.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -194,Q_PROTO_SONMP,sonmp,,Nortel/SynOptics Netwok Management Protocol,Nortel/SynOptics Network Management Protocol is a proprietary Nortel Networks management protocol.,Network Management,snap,RFC 1042,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -572,Q_PROTO_SOPCAST,sopcast,,Sopcast.org,Sopcast is a video streaming service based on a peer-to-peer protocol : SOP (Streaming Over Peer-to-peer).,Audio/Video,http;https;udp,3.2.9,10/3/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -1096,Q_PROTO_SOPHOS_UPDATE,sophos_update,,Sophos update,Sophos antivirus update protocol.,Antivirus,http;https,7.3,PC-Windows-Sophos Antvirus-9.7- (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x,,,,, -852,Q_PROTO_SORIBADA,soribada,,Soribada.com,This protocol plug-in classifies the http traffic to the host kpop.soribada.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1244,Q_PROTO_SOSO,soso,,Soso.com,This protocol plug-in classifies the http traffic to the host soso.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1271,Q_PROTO_SOUFUN,soufun,,Soufun.com,This protocol plug-in classifies the http traffic to the host soufun.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1180,Q_PROTO_SOUNDCLOUD,soundcloud,,SoundCloud.com,This protocol plug-in classifies the http traffic to the hosts soundcloud.com and sndcdn.com. It also classifies the ssl traffic to the Common Names .soundcloud.com and sndcdn.com.,Audio/Video,http;https;ssl,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2136,Q_PROTO_SOUQ,souq,,Souq.com,Saudi Arabian ecommerce website,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -289,Q_PROTO_SOUTHWEST,southwest,,Southwest.com,This protocol plug-in classifies the http traffic to the host southwest.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -937,Q_PROTO_SP,sp,,ISO 8327 Session Protocol,ISO 8327-1/X.225 OSI Session Protocol (SP).,Network Service,cotp,ISO 8327-1/X.225,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1469,Q_PROTO_SPDY,spdy,,SPDY,SPDY is an open networking protocol developed primarily at Google for transporting web content.,Web,tcp,3,7/11/2013,,,,x,,,,,,,x,x,,,,,,,,,,,x,,,,,,,,,,,,,, -1465,Q_PROTO_SPEEDTEST,speedtest,,Speedtest.net,Web site and mobile application for testing both bandwidth and latency of any internet connection.,Web,http;https;ssl,"3.0 (iOS), 2.0 (Android),20130425",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1446,Q_PROTO_SPID,spid,,Statistical Protocol IDentification,"SPID (Statistical Protocol IDentification) is a statistical classification engine, used to identify encrypted or obfuscated streams from advanced Peer-to-peer or VPN protocols (ex: BitTorrent RC4 streams).",Behavioral,tcp;udp,1,,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1052,Q_PROTO_SPIEGEL,spiegel,,Spiegel.de,This protocol plug-in classifies the http traffic to the host spiegel.de.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1224,Q_PROTO_SPORTCHOSUN,sportchosun,,Sports.chosun.com,This protocol plug-in classifies the http traffic to the host sportschosun.com. It also classifies the ssl traffic to the Common Name member.sportchosun.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1053,Q_PROTO_SPORTSILLUSTRATED,sportsillustrated,,SportsIllustrated.com,This protocol plug-in classifies the http traffic to the hosts sportsillustrated.cnn.com and sportsillustrated.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1225,Q_PROTO_SPORTSSEOUL,sportsseoul,,SportsSeoul.com,This protocol plug-in classifies the http traffic to the host sportsseoul.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -534,Q_PROTO_SPOTIFY,spotify,,Spotify,Spotify is an application of musical streaming.,Audio/Video,amazon_aws;http;https;rtmp;socks4;socks5;ssl;tcp;twitter;udp,PC-Windows-Spotify 0.9.7.16g4b197456;iPhone-iOS-Spotify 0.9.0.8;Mobile-Android-Spotify 0.7.6.357;Mac-Mac OS-Spotify 0.9.7.16.g4b197456 (2014-02-18);PC-Windows-Browser-www.spotify.com (2014-02-17);PC-Windows-Google Chrome-www.spotify.com (2014-03-12),BlackBerry-BlackBerry OS-Spotify-0.5.1.1.g8d00422e- (2014-03-10);Mac-Mac OS-10.9-Spotify-0.9.10.14.g578d350b- (2014-06-03);Mobile-Moto G-Android-4.4.2-Spotify-1.1.0.113- (2014-05-30);Nokia Mobile-Symbian-Spotify-0.4.8.17.g21854b59- (2014-03-10);PC-Windows-7-Chrome-33.0.1750.146-Spotify-0.2.3- (2014-03-12);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);PC-Windows-7-Spotify-0.9.8.296.g91f68827- (2014-05-06);Windows Phone-Windows Phone OS-Spotify-2.0.4933.0- (2014-02-04);iPhone-iOS-7.1.1-Spotify-1.1.0- (2014-05-06),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1054,Q_PROTO_SPRINT,sprint,,Sprint.com,This protocol plug-in classifies the http traffic to the host sprint.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -681,Q_PROTO_SPRITE_RPC,sprite_rpc,,Sprite RPC Protocol,The sprite_rpc protocol (Sprite RPC Protocol) is found over the IP layer (IANA protocol number: 90).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -682,Q_PROTO_SPS,sps,,Secure Packet Shield,The sps protocol (Secure Packet Shield) is found over the IP layer (IANA protocol number: 130).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -920,Q_PROTO_SQLI,sqli,,Structured Query Language Interface,The SQLI protocol (Structured Query Language Interface) is a proprietary protocol seemingly used exclusively in IBM Informix servers.,Database,tcp,9.7,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -195,Q_PROTO_SQUIRRELMAIL,squirrelmail,,SquirrelMail,SquirrelMail is a web-based email application written in the PHP scripting language.,Webmail,http;https,20110527,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -683,Q_PROTO_SRP,srp,,SpectraLink Radio Protocol,The srp protocol (SpectraLink Radio Protocol) is found over the IP layer (IANA protocol number: 119).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -196,Q_PROTO_SRVLOC,srvloc,,Service Location Protocol,"Service Location Protocol is a decentralized, lightweight, scalable and extensible protocol for service discovery within a local area network.",Application Service,tcp;udp,SRVLOC v1;SRVLOC v2,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1943,Q_PROTO_SS,ss,,Ss.lv,Latvian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -684,Q_PROTO_SSCOPMCE,sscopmce,,Service Specific Connection Oriented Protocol for M-Cast Env,The sscopmce protocol (Service Specific Connection Oriented Protocol for M-Cast Env) is found over the IP layer (IANA protocol number: 128).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -197,Q_PROTO_SSDP,ssdp,,Simple Service Discovery Protocol,Simple Service Discovery Protocol (SSDP) provides a mechanism whereby network clients can discover desired network services.,Application Service,udp,SSDP v1.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -198,Q_PROTO_SSH,ssh,,Secure Shell,"Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and a protocol for obtaining secure access to a remote computer.",Encrypted,http;http_tunnel;tcp,ssh v2.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x -199,Q_PROTO_SSL,ssl,,Secure Socket Layer,"Secure Sockets Layer (SSL) is a commonly-used protocol for managing the security of a message transmission on the Internet. SSL has recently been succeeded by Transport Layer Security (TLS), which is based on SSL.",Encrypted,cotp;http;postgres;socks4;socks5;tcp,SSL-V2.0;SSL-V3.0,7/4/2008,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -685,Q_PROTO_ST,st,,Stream protocol,The st protocol (Stream) is found over the IP layer (IANA protocol number: 5).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1138,Q_PROTO_STAFABAND,stafaband,,Stafaband.info,This protocol plug-in classifies the http traffic to the host stafaband.info.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -853,Q_PROTO_STAGEVU,stagevu,,Stagevu.com,This protocol plug-in classifies the http traffic to the host stagevu.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2071,Q_PROTO_STANDARDMEDIA,standardmedia,,StandardMedia.co.ke,Kenyan news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1790,Q_PROTO_STARTIMES,startimes,,Startimes.com,Arabic forum hosting site,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1055,Q_PROTO_STAYFRIENDS,stayfriends,,StayFriends.de,This protocol plug-in classifies the http traffic to the host stayfriends.de.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1696,Q_PROTO_STEALTHNET,stealthnet,,Stealthnet,Stealthnet is a file sharing application between two or more hosts.,Peer to Peer,http;https;tcp,0.8.7.9,10/2/2013,,x,,x,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,, -339,Q_PROTO_STEAM,steam,,Steampowered.com,"Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.",Game,akamai;http;https;ssl;tcp;udp,PC-Windows-Steam 1393366296 (2014-02-27);Mobile-Android-Steam 1.0.6 (2014-02-25);iPhone-iOS-Steam 1.3 (2014-02-25);Mac-Mac OS-Steam 1393366296 (2014-02-27),Mac-Mac OS-10.9.3-Steam-1400690891- (2014-05-26);Mobile-Android-4.1.2-Steam-1.0.6- (2014-02-25);PC-Windows-7-Steam-1400690891- (2014-05-27);Windows Phone-Windows Phone OS-8.0.10517.150-Steam Center-2.6.5.0- (2014-02-27);iPhone-iOS-7.1.1-Steam Mobile-1.4.2- (2014-04-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -2230,Q_PROTO_STICK_CRICKET,stick_cricket,,Stick Cricket,Mobile game,Game,google_ads;http;https,iPhone-iOS (2014-04-09),iPhone-iOS-Stick Cricket-2.5.0- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -490,Q_PROTO_STICKAM,stickam,,Stickam.com,This protocol plug-in classifies the http traffic to the host stickam.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1421,Q_PROTO_STOCKQ,stockq,,Stockq.org,Taiwanese stock market information.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -200,Q_PROTO_STP,stp,,Spanning Tree Protocol,"Spanning Tree Protocol allows the use of layer 2 networks with redundant paths by creating a covering tree on which frames will be transmitted. The newly created topology of the network (the tree) is loop free, thus preventing problems such as broadcast storm from occurring.",Routing,eth;llc;ppp,RFC 2674;RFC 1525;RFC 1493,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -854,Q_PROTO_STREAMAUDIO,streamaudio,,StreamAudio.com,This protocol plug-in classifies the http traffic to the host streamaudio.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -491,Q_PROTO_STUDIVZ,studivz,,STudiVZ.net,This protocol plug-in classifies the http traffic to the host studivz.net. It also classifies the ssl traffic to the Common Name secure.studivz.net.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2137,Q_PROTO_STUFF,stuff,,Stuff.co.nz,New zealander news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -492,Q_PROTO_STUMBLEUPON,stumbleupon,,StumbleUpon.com,This protocol plug-in classifies the http traffic to the host stumbleupon.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -201,Q_PROTO_STUN,stun,,Session Traversal Utilities for NAT,STUN (Session Traversal Utilities for NAT) allows a client behind a NAT to establish UDP tunnels between two hosts.,Network Service,stun;tcp;udp,STUN v0(RFC 3489);STUN v1(RFC 5389);TURN,4/28/2014,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1303,Q_PROTO_SUA,sua,,SCCP User Adaptation Layer,This protocol defines the transport of SCCP signalization over an IP network through SCTP.,Network Service,sctp,1.2 - RFC 3868,5/16/2014,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2241,Q_PROTO_SUBWAY_SURFERS,subway_surfers,,Subway Surfers,Mobile game,Game,http;https,iPhone-iOS;Mobile-Android,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1101,Q_PROTO_SUGAR_CRM,sugar_crm,,SugarCRM.com,"Sugar CRM, a client relationship management solution.",Web,http;https,Sugar CRM 6.2.1 - Build 6405,PC-Windows-7-SugarCRM-6.3.0- (2011-12-01),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1477,Q_PROTO_SUGAR_SYNC,sugar_sync,,SugarSync.com,On-line file backup and sync service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1944,Q_PROTO_SULIT,sulit,x,Sulit.com.ph (now Olx.ph),Filipino online classified ads.,Web,,20131023,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -686,Q_PROTO_SUN_ND,sun_nd,,SUN ND PROTOCOL_Temporary,The sun_nd protocol (SUN ND PROTOCOL_Temporary) is found over the IP layer (IANA protocol number: 77).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1422,Q_PROTO_SUNING,suning,,Suning.com,Chinese online shopping.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1945,Q_PROTO_SUPER,super,,Super.cz,Prague based agency represents models from Czech and Slovak Republic.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1157,Q_PROTO_SUPPERSOCCER,suppersoccer,,SupperSoccer.co.id,This protocol plug-in classifies the http traffic to the host m.supersoccer.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -354,Q_PROTO_SURROGAFIER,surrogafier,,Surrogafier.info,This protocol plug-in classifies the http traffic to the hosts surrogafier.info and go.vfserver.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1056,Q_PROTO_SURVEYMONKEY,surveymonkey,,SurveyMonkey.com,This protocol plug-in classifies the http traffic to the host surveymonkey.com. It also classifies the ssl traffic to the Common Name .surveymonkey.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1109,Q_PROTO_SVN,svn,,Subversion,"Subversion, version control system.",Network Service,http;https;tcp,2,PC-Linux-svn-1.7.2- (2012-01-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -855,Q_PROTO_SVTPLAY,svtplay,,SVT Play,Sveriges Television video-on-demand website.,Web,akamai;http;https;ssl,PC-Windows-Browser-www.svt.se (2014-05-15);Mobile-Android-SVT Play 3.1.0 (2014-02-27);iPhone-iOS-SVT Play 2.1.0 (2014-02-27);Windows Phone-Windows Phone OS-SVT Play 0.1.0.2511 (2014-02-26),Mobile-Android-4.4.2-SVTPlay-4.0.0- (2014-06-11);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);Windows Phone-Windows Phone OS-8-SVTPlay-0.1.0.3064- (2014-04-25);iPhone-iOS-7.0.4-SVTPlay-2.1.0- (2014-02-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1777,Q_PROTO_SWEDBANK,swedbank,,Swedbank.ee,Estonian online banking and investment web portal,Web,http;https;ssl,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1740,Q_PROTO_SWEPIRACY,swepiracy,,Swepiracy Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -721,Q_PROTO_SWIPE,swipe,,IP with Encryption,The swipe protocol (IP with Encryption) is found over the IP layer (IANA protocol number: 53).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -947,Q_PROTO_SYBASE,sybase,,Sybase,Sybase protocols are used to exchange messages (namely authentication and SQL queries) between database clients and servers developed by the Sybase Company.,Database,mobilink;tds,5.0,10/11/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -2250,Q_PROTO_SYMANTEC,symantec,,Symantec,"Symantec Corporation makes security, storage, backup and availability software.",Web,http;https;ocsp;ssl,2294,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -202,Q_PROTO_SYNC,sync,,Sync,The Sync protocol is an RPC service allowing data synchronisation.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -203,Q_PROTO_SYNFLOOD,synflood,x,TCP Syn flood,This plug-in is no longer supported.,Standard,tcp,na,10/2/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -204,Q_PROTO_SYSLOG,syslog,,Syslog,Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.,Application Service,tcp;udp,RFC3164,PC-Windows-CorreLog/WinSyslog- (2012-03-01),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -525,Q_PROTO_T38,t38,,T.38,This protocol is used to exchanges FAXes on top on TCP/IP.,Network Service,rtp;tcp;udp,T38 v3,7/2/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, -1763,Q_PROTO_T_ONLINE,t_online,,T-Online.de,T-Online Deutch ISP web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,x,,,,,,,,,,,, -1326,Q_PROTO_TABELOG,tabelog,,Tabelog.com,Online Japanese restaurant guide,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1085,Q_PROTO_TACACS_PLUS,tacacs_plus,,Terminal Access Controller Access-Control System Plus,"TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco Systems proprietary protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.",Authentication,tcp,1.78,11/2/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, -285,Q_PROTO_TAGGED,tagged,,Tagged.com,"Tagged is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https,20090528,12/1/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -856,Q_PROTO_TAGOO,tagoo,,Tagoo.ru,This protocol plug-in classifies the http traffic to the host tagoo.ru. It also classifies the ssl traffic to the Common Name tagoo.ru.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1423,Q_PROTO_TAIWANLOTTERY,taiwanlottery,,Taiwanlottery.com.tw,Taiwan lottery website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -857,Q_PROTO_TAKU_FILE_BIN,taku_file_bin,,Taku File Bin (aka filesend.to),"Japanese Direct Download web platform, allowing free sharing of large files.",Web,http;https;ssl,20140320,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -493,Q_PROTO_TALENTTROVE,talenttrove,,Lafango (formerly TalentTrove),Lafango (aka TalentTrove) is a media sharing and social network website.,Web,http;https;ssl,20140617,PC-Linux-BasicTest- (2014-06-19),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -494,Q_PROTO_TALKBIZNOW,talkbiznow,,Talkbiznow.com,This protocol plug-in classifies the http traffic to the host talkbiznow.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -495,Q_PROTO_TALTOPIA,taltopia,,Taltopia.com,This protocol plug-in classifies the http traffic to the host taltopia.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1741,Q_PROTO_TAMILTHUNDER_COM,tamilthunder_com,,Tamilthunder Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -598,Q_PROTO_TANGO,tango,,Tango Video Calls,Tango is an embedded smartphone application dedicated to audio/video-conference.,Audio/Video,amazon_aws;google_gen;http;https;jabber;ssl;stun;tcp;udp,PC-Windows-Browser-tango.me (2014-02-20);PC-Windows-Tango 1.6.14117 (2014-02-24);Mobile-Android-Tango 3.0.5 (2013-07-19);iPhone-iOS-Tango 3.0.5 (2013-07-19),Mobile-Android-4.2.1-Tango-3.6.84179- (2014-05-20);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);PC-Windows-7-Tango-1.6.14117- (2014-05-21);iPhone-iOS-7.1.1-Tango-3.6.84179- (2014-05-20),,x,,x,,,,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,, -1098,Q_PROTO_TAOBAO,taobao,,Taobaocdn.com,This protocol plug-in classifies the http traffic to the hosts taobaocdn.com and taobao.com. It also classifies the ssl traffic to the Common Name .taobao.com.,Web,http;https;ssl,20111121,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2215,Q_PROTO_TAPATALK,tapatalk,,Tapatalk,Mobile app which allows to browse forums.,Forum,google_analytics;http;https;ssl,Mobile-Android;iPhone-iOS,Mobile-Android-Tapatalk-4.3.4- (2014-03-27);iPhone-iOS-Tapatalk-2.5.1- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, -496,Q_PROTO_TARINGA,taringa,,Taringa.net,This protocol plug-in classifies the http traffic to the host taringa.net.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2072,Q_PROTO_TASWEERNEWS,tasweernews,,Tasweernews.com,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2138,Q_PROTO_TAWARY,tawary,,Tawary.com,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2205,Q_PROTO_TAYYAR,tayyar,,Tayyar,Lebaneese news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -687,Q_PROTO_TCF,tcf,,TCF,The tcf protocol (TCF) is found over the IP layer (IANA protocol number: 87).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -321,Q_PROTO_TCHATCHE,tchatche,,tchatche,Tchatche is an instant messaging website.,Web,http;https,20080118,7/17/2009,,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -205,Q_PROTO_TCP,tcp,,Transmission Control Protocol,TCP is a protocol providing a connection-oriented and reliable transfer service. It is used by most TCP/IP applications today.,Network Service,dns;ip;ip6,TCP v2,10/28/2010,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1084,Q_PROTO_TCP_OVER_DNS,tcp_over_dns,,AnalogBit tcp-over-dns,Tcp-over-dns contains a special dns server and a special dns client. The client and server work in tandem to provide a TCP and UDP tunnel through the standard DNS protocol.,Tunneling,dns,tcp-over-dns v.1.3,10/20/2011,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -208,Q_PROTO_TDS,tds,,Tabular Data Stream,TDS protocol is used to communicate between SQL applications and a SQL Server.,Database,tcp,tds5;tds7/8;Microsoft SQL Server 2008;Sybase,8/14/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -858,Q_PROTO_TEACHERTUBE,teachertube,,TeacherTube.com,This protocol plug-in classifies the http traffic to the hosts teachertube.com and teachertube.biz.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -497,Q_PROTO_TEACHSTREET,teachstreet,,TeachStreet.com,This protocol plug-in classifies the http traffic to the host teachstreet.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -526,Q_PROTO_TEAMSPEAK,teamspeak,,Teamspeak v2,The proprietary TeamSpeak2 protocol is used by gamers and oriented TeamSpeak2 VoIP software.,Instant Messaging,udp,Teamspeak-V2,12/16/2011,,,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, -1120,Q_PROTO_TEAMSPEAK_V3,teamspeak_v3,,TeamSpeak v3,TeamSpeak 3 continues the legacy of the original TeamSpeak communication system. TeamSpeak 3 is not merely an extension of its predecessors but rather a complete rewrite in C++ of its proprietary protocol and core technology.,Instant Messaging,http;https;tcp;udp,32bits 3.0.3 PC-clt;amd64 3.0.1 PC-srv;3.0.0-beta Android-clt,Mobile-Android-Teamspeak-3.0.0 beta- (2012-04-10);PC-Windows-Teamspeak-3.0.3- (2012-04-10),,x,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, -545,Q_PROTO_TEAMVIEWER,teamviewer,,teamviewer,"TeamViewer is an application that enables a connection to a remote computer in order to perform maintenance operations. It is also possible to show the current display to a remote computer, to transfer files, and to create a VPN tunnel.",Thin Client,http;https;tcp;udp,5;6,11/23/2010,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -859,Q_PROTO_TECHINLINE,techinline,,Techinline.com,This protocol plug-in classifies the http traffic to the host techinline.com. It also classifies the ssl traffic to the Common Name techinline.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1760,Q_PROTO_TELEGRAAF,telegraaf,,Telegraaf.nl,Dutch news web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1785,Q_PROTO_TELEGRAF,telegraf,,Telegraf.rs,Serbian web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2198,Q_PROTO_TELEGRAFI,telegrafi,,Telegrafi,Albanian news and media portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2240,Q_PROTO_TELEGRAM,telegram,,Telegram,Telegram is an instant messaging protocol like Whatsapp.,Instant Messaging,tcp,Mobile-Android-Telegram 1.4.12;iPhone-iOS-Telegram 2.1,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -209,Q_PROTO_TELNET,telnet,,Telnet,"Telnet provides a fairly general, bi-directional, eight-bit byte oriented communications facility. Its primary aim is to provide a standard method of interfacing between terminal devices and terminal-oriented processes.",Terminal,tcp,RFC 854,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -210,Q_PROTO_TELNETS,telnets,,Secure TELNET,Secure version of the Telnet.,Terminal,ssl,RFC 854,,,,,,,992,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1142,Q_PROTO_TEMPOINTERAKTIF,tempointeraktif,,TempoInteraktif.com,This protocol plug-in classifies the http traffic to the hosts tempointeraktif.com and tempo.co.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1424,Q_PROTO_TENCENT,tencent,,Tencent.com,"Instant communications service provider in Asia, providing corporate and personal instant messaging, online entertainment and value-added services.",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -555,Q_PROTO_TEREDO,teredo,,Teredo protocol,"The Teredo protocol enables IPv6 tunnelling over UDP, traversing NATs, and with minimum over-head.",Tunneling,udp,20101214,12/14/2010,,,,x,teredo,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1057,Q_PROTO_TF1,tf1,,TF1.fr,This protocol plug-in classifies the http traffic to the host tf1.fr.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -211,Q_PROTO_TFTP,tftp,,Trivial File Transfer Protocol,Trivial File Transfer Protocol (TFTP) is a file transfer protocol that is simpler to use than the File Transfer Protocol (FTP) but that proposes less features. TFTP uses the User Datagram Protocol (UDP) rather than the Transmission Control Protocol (TCP).,File Server,udp,TFTP v2,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -1425,Q_PROTO_TGBUS,tgbus,,Tgbus.com,Chinese games portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -362,Q_PROTO_THE_AUTEURS,the_auteurs,x,The Auteurs,This protocol plug-in used to classify the http traffic to the host theauteurs.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2179,Q_PROTO_THE_SIMPSONS_TAPPED_OUT,the_simpsons_tapped_out,,The Simpsons: Tapped Out,Mobile game (EA Games).,Game,http;https;ssl,Mobile-Android;iPhone-iOS,Mobile-Android-The Simpsons: Taped Out-4.6.0- (2014-03-13);iPhone-iOS-The Simpsons: Taped Out-4.6.1- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -1484,Q_PROTO_THEPIRATEBAY,thepiratebay,,ThePirateBay.se,The most popular Swedish Torrent indexing website.,Web,http;https;ssl,20130713,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1158,Q_PROTO_THREE,three,,Three.co.id - tri.co.id,This protocol plug-in classifies the http traffic to the hosts three.co.id and tri.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -274,Q_PROTO_THUNDER,thunder,,Xunlei/Thunder protocol,"Xunlei/Thunder is a Chinese multi-protocol download manager. It uses several DDL websites and P2P protocols to retrieve files. This plug-in only classifies Thunder-specific P2P protocols, and miscellaneous HTTP/HTTPS traffic related to the Xunlei/Thunder application. Downloads made by the application from public HTTP or FTP websites won't be classified as thunder, but as http and ftp_data for most of them. The usage of third party P2P protocols won't be classified as thunder, but as bittorrent or edonkey instead.",Peer to Peer,http;https;scorecardresearch;socks4;socks5;tcp;udp,PC-Windows-Thunder 5.0;PC-Windows-Thunder 7.9.10,Mobile-Android-4.2.1-Xunlei-3.2.2.2080- (2013-10-21);Mobile-Android-4.4.2-Xunlei-3.3.2.2118-CN (2013-10-21);PC-Windows-7-Chrome-34.0.1847.137- (2013-10-21);PC-Windows-7-Xunlei-5.9.28.1564- (2013-10-21);PC-Windows-7-Xunlei-5.9.28.1564-CN (2013-10-21);PC-Windows-Xunlei-7.9.18.4724- (2013-10-21);PC-Windows-Xunlei-7.9.18.4724-CN (2013-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1253,Q_PROTO_TIANYA,tianya,,Tianya.cn,This protocol plug-in classifies the http traffic to the host tianya.cn.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -212,Q_PROTO_TIBCORDV,tibcordv,,TIBCO RendezVous Protocol,This protocol is used in the bank sector.,Network Service,udp,tibcordv v1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1226,Q_PROTO_TICKETMONSTER,ticketmonster,,Ticketmonster.co.kr,This protocol plug-in classifies the http traffic to the host ticketmonster.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -860,Q_PROTO_TIDALTV,tidaltv,,Portal.TidalTV.com,This protocol plug-in classifies the http traffic to the host portal.tidaltv.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -934,Q_PROTO_TIME,time,,Time Protocol,"This protocol provides a site-independent, machine readable date and time.",Network Service,tcp;udp,RFC 868,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -2073,Q_PROTO_TIMESOFMALTA,timesofmalta,,Timesofmalta.com,Maltese news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1227,Q_PROTO_TISTORY,tistory,,Tistory.com,This protocol plug-in classifies the http traffic to the host tistory.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -688,Q_PROTO_TLSP,tlsp,,Transport Layer Security,The tlsp protocol (Transport Layer Security) is found over the IP layer (IANA protocol number: 56).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1246,Q_PROTO_TMALL,tmall,,Tmal.com,This protocol plug-in classifies the http traffic to the host tmall.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -213,Q_PROTO_TNS,tns,,Transparent Network Service (Oracle),"Transparent Network Service (TNS) is the Oracle (version 8 or higher) networking technology that provides a single application interface to all industry-standard networking protocols. To connect to a database, users initiate a connect request by passing information (username and password) along with a short name for the database service they wish to connect to.",Database,tcp,oracle8i;oracle9i;oracle10g;oracle11g,7/4/2008,,,,x,tns,,,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -214,Q_PROTO_TNVIP,tnvip,,Telnet VIP,Telnet VIP is an emulation of the Telnet protocol for VIP (Visual Information Projection) terminals.,Terminal,telnet,Tnvip v1,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1791,Q_PROTO_TO_MATI,to_mati,,To-mati.net,Greek web portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -861,Q_PROTO_TOKBOX,tokbox,,Tokbox.com,This protocol plug-in classifies the http traffic to the host tokbox.com. It also classifies the ssl traffic to the Common Name .tokbox.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1133,Q_PROTO_TOKOBAGUS,tokobagus,,Tokobagus.com,This protocol plug-in classifies the http traffic to the host tokobagus.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2266,Q_PROTO_TONATON,tonaton,,Tonaton,Ghanean classified ads website.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2160,Q_PROTO_TOP_CHANNEL,top_channel,,Top.channel,Albanina tv streaming website,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2139,Q_PROTO_TOPKY,topky,,Topky.sk,Slovak news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -895,Q_PROTO_TOR,tor,,Tor,Tor is an application that intends to provide online anonymity.,Encrypted,https;ssl,0.2.1.30,10/8/2012,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -2074,Q_PROTO_TORG,torg,,Torg.com,Uzbek classified ads,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1058,Q_PROTO_TORRENTDOWNLOADS,torrentdownloads,,TorrentDownloads.net,Bittorrent tracker search engine,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1059,Q_PROTO_TORRENTZ,torrentz,,Torrentz.com,This protocol plug-in classifies the http traffic to the hosts torrentz.com and torrentz.eu.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1568,Q_PROTO_TOUCH,touch,,touch,"Touch is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,http;https;ssl;tcp,PC-Windows-Touch 3.4.3,BlackBerry-BlackBerry OS-7.1-Touch-3.4- (2014-02-20);Mobile-Android-4.2.1-Touch-3.4.2- (2014-03-08);PC-Windows-7-Chrome-34.0.1847.137- (2014-02-20);iPhone-iOS-7.0.4-Touch-3.4.4- (2014-02-20),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -2259,Q_PROTO_TOWER_OF_SAVIORS,tower_of_saviors,,Tower of Saviors,Mobile game,Game,amazon_aws;google_ads;http;https,Mobile-Android;iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -718,Q_PROTO_TP_PLUS_PLUS,tp_plus_plus,,TP++ Transport Protocol,The tp_plus_plus protocol (TP++ Transport Protocol) is found over the IP layer (IANA protocol number: 39).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1947,Q_PROTO_TRADEME,trademe,,Trademe.co.nz,New Zealander online trading site.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1972,Q_PROTO_TRANSFERBIGFILES_COM,transferbigfiles_com,,transferbigfiles.com,Classifies web browsing on the transferbigfiles.com Direct DownLoad links service.,Web,http;https;ssl,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -498,Q_PROTO_TRAVBUDDY,travbuddy,,TravBuddy.com,This protocol plug-in classifies the http traffic to the host travbuddy.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -499,Q_PROTO_TRAVELLERSPOINT,travellerspoint,,Travellerspoint.com,This protocol plug-in classifies the http traffic to the host travellerspoint.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -291,Q_PROTO_TRAVELOCITY,travelocity,,Travelocity.com,This protocol plug-in classifies the http traffic to the host travelocity.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1164,Q_PROTO_TRAVIAN,travian,,Travian.co.id,This protocol plug-in classifies the http traffic to the host travian.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2140,Q_PROTO_TREND,trend,,Trend.az,Azerbaijani news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -712,Q_PROTO_TRENDMICRO_UPDATE,trendmicro_update,,Trendmicro Update protocol,Trendmicro_update is the protocol used for trendmicro softwares updates.,Web,http;https,Trendmicro Antivirus 13.0.1303,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -500,Q_PROTO_TRIBE,tribe,,Tribe.net,This protocol plug-in classifies the http traffic to the host tribe.net.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1161,Q_PROTO_TRIBUNNEWS,tribunnews,,Tribunnews.com,This protocol plug-in classifies the http traffic to the host tribunnews.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2275,Q_PROTO_TRINIDADEXPRESS,trinidadexpress,,Trinidadexpress,Trinidadian news portal.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -303,Q_PROTO_TROMBI,trombi,,Trombi.com,This protocol plug-in classifies the http traffic to the host trombi.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -689,Q_PROTO_TRUNK_1,trunk_1,,Trunk 1,The trunk_1 protocol (Trunk 1) is found over the IP layer (IANA protocol number: 23).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -690,Q_PROTO_TRUNK_2,trunk_2,,Trunk 2,The trunk_2 protocol (Trunk 2) is found over the IP layer (IANA protocol number: 24).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2277,Q_PROTO_TRUSTE,truste,,TRUSTe,"TRUSTe is the leading online privacy management services provider offering a broad suite of consumer, advertising, mobile, cloud and data privacy solutions.",Web,http;https;ssl,20140423,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -691,Q_PROTO_TTP,ttp,,TTP,The ttp protocol (TTP) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1060,Q_PROTO_TU,tu,,Tu.tv,This protocol plug-in classifies the http traffic to the host tu.tv.,Audio/Video,http;https;ssl,PC-Windows-Browser-www.tu.tv (2013-07-13),PC-Windows-7-Chrome-35.0.1916.114- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1061,Q_PROTO_TUBE8,tube8,,Tube8.com,This protocol plug-in classifies the http traffic to the host tube8.com.,Web,http;https,PC-Windows-Browser-www.tube8.com (2014-03-14),PC-Windows-7-Chrome- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -862,Q_PROTO_TUDOU,tudou,,Tudou.com,This protocol plug-in classifies the http traffic to the hosts tudou.com and at-img4.tdimg.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -501,Q_PROTO_TUENTI,tuenti,,Tuenti.com,This protocol plug-in classifies the http traffic to the host tuenti.com. It also classifies the ssl traffic to the Common Name .tuenti.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -502,Q_PROTO_TUMBLR,tumblr,,Tumblr.com,This protocol plug-in classifies the http traffic to the host tumblr.com. It also classifies the ssl traffic to the Common Name TUMBLR.COM.,Web,apple_hls;http;https;ssl,PC-Windows-Browser-www.tumblr.com (2014-03-14);iPhone-iOS-tumblr 3.5.6 (2014-03-09);Mobile-Android-tumblr 3.5.6.02 (2014-03-08),Mobile-Android-4.4.2-Post To Tumblr-3.6.1.04- (2014-06-04);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-13);PC-Windows-7-Chrome-35.0.1916.114-Post To Tumblr-4.18- (2014-06-10);Windows Phone-Windows Phone OS-Tumblr-1.0.1.7- (2014-02-14);iPhone-iOS-Tumblr-3.5.6- (2014-03-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1181,Q_PROTO_TUNEIN,tunein,,TuneIn,This protocol plug-in classifies the http traffic to the hosts tunein.com and radiotime.com.,Audio/Video,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1466,Q_PROTO_TUNEWIKI,tunewiki,,TuneWiki.com,"Lyrics and photos sharing webservice, available in web and mobile-app versions.",Web,http;https,Web version (20130425),PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1948,Q_PROTO_TUNISIA_SAT,tunisia_sat,,Tunisia-Sat.com,Tunisian forum hosting platform.,Web,http;https,20131023,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2236,Q_PROTO_TURN,turn,,Turn,"Turn provides audience, campaign and analytics services.",Web,http;https,20140412,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1949,Q_PROTO_TUT,tut,,Tut.by,Belarusian internet portal.,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1062,Q_PROTO_TV,tv,,Tv.com,This protocol plug-in classifies the http traffic to the host .tv.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1792,Q_PROTO_TV2,tv2,,Tv2.dk,Danish news portal,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -863,Q_PROTO_TV4PLAY,tv4play,,Tv4Play.se,This protocol plug-in classifies the http traffic to the hosts tv4play.se and .tv4.se. It also classifies the ssl traffic to the Common Name ec2-184-73-252-58.compute-1.amazonaws.com.,Web,http;https;ssl;videoplaza,PC-Windows-Browser-www.tv4play.se (2013-11-04);iPhone-iOS-TV4 Play 2.4.0;Mobile-Android-TV4 Play 2.2.0,Mobile-Android-4.4.2-TV4 Play-2.5.3- (2014-05-13);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-13);iPhone-iOS-TV4 Play-2.5.1- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -546,Q_PROTO_TVANTS,tvants,,TVAnts Protocol,"TVAnts is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite as well as WebTV.",Audio/Video,tcp;udp,1.0.59,10/5/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -1911,Q_PROTO_TVKING,tvking,,TvKing,TvKing is an application which is able to get video stream lists from its own web site and from other ones. Classifies HTTP web browsing only.,Web,http;https,20131107,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -2141,Q_PROTO_TVNET,tvnet,,Tvnet.lv,Latvian news and content portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -575,Q_PROTO_TVUPLAYER,tvuplayer,,TVU Network Player,TVUPlayer is an application intended to watch TV in peer_to-peer.,Audio/Video,http;https;ssl;tcp;udp,>=2.5.3,PC-Windows-TVUPlayer-2.5.3.1- (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -864,Q_PROTO_TWITPIC,twitpic,,Twitpic.com,This protocol plug-in classifies the http traffic to the host twitpic.com. It also classifies the ssl traffic to the Common Name twitpic.com.,Web,amazon_aws;http;https;ssl,PC-Windows-Browser-www.twitpic.com (2014-02-25);Mobile-Android (2014-02-25);iPhone-iOS (2014-02-26),Mobile-Android-4.1.2-Twitpic-1.2.1- (2014-02-25);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21);iPhone-iOS-7.0.4-Twitpic-1.2.1- (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -503,Q_PROTO_TWITTER,twitter,,Twitter.com,Online microblogging service that enables its users to read and send text-based short messages.,Web,http;https;ssl,PC-Windows-Browser (2014-03-07);PC-Windows-Twitter REST API 1.0;Mobile-Android-Twitter 5.2.1 (2014-03-09);iPhone-iOS-Twitter 6.0.2,Mobile-Moto G-Android-4.4.2-Twitter-5.12.0- (2014-06-04);PC-Windows-7-Chrome-34.0.1847.131-Twitter for Chrome-2.2- (2014-05-06);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-8-Twitter-1.1.13.8- (2014-01-06);Windows Phone-Nokia Lumia 1320-Windows Phone OS-8.0.10517.155-Twitter-3.1.0.0- (2014-05-28);iPhone-5C-iOS-7.1.1-Twitter-6.6- (2014-06-02),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, -1501,Q_PROTO_UBUNTU_ONE,ubuntu_one,,Ubuntu One,Ubuntu One is a cloud file storage service available on PC and smartphones.,Application Service,https;ssl,"4.1.91(Windows),20130627(Android)",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1759,Q_PROTO_UCOZ,ucoz,,uCoz.ru,uCoz is a free web hosting with a built-in content management system.,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -215,Q_PROTO_UCP,ucp,,Universal Computer Protocol,Universal Computer Protocol is used by some mobile phones to send SMS.,Wap,tcp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, -1426,Q_PROTO_UDN,udn,,Udn.com,Taiwan news site.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -216,Q_PROTO_UDP,udp,,User Datagram Protocol,The User Datagram Protocol is a transport protocol providing a simple but non-reliable message transfer service in IP networks. It is used by most applications that do not require a reliable delivery transmission service.,Network Service,ip;ip6,UDP v1,7/4/2008,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -692,Q_PROTO_UDPLITE,udplite,,UDPLite,The udplite protocol (Connectionless protocol very similar to UDP) is found over the IP layer (IANA protocol number: 136).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2167,Q_PROTO_ULTIMAHORA,ultimahora,,Ultimahora,Honduran news portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1967,Q_PROTO_ULTRASHARE_NET,ultrashare_net,,ultrashare.net,Classifies web browsing on the ultrashare.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1238,Q_PROTO_ULTRASURF,ultrasurf,,Ultrasurf,Ultrasurf is a tunneling protocol used by the Ultrasurf software for Windows. The classification is based on an IP address range analysis.,Tunneling,http;https;ip;ssl,"10.08,12.02",PC-Windows-Ultrasurf-u12.02- (2012-08-09),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -1576,Q_PROTO_UNASSIGNED_IP_PROT_143,unassigned_ip_prot_143,,IANA Unassigned Internet Protocol Number 143,The unassigned_ip_prot_143 protocol (IANA Unassigned Internet Protocol Number 143) is found over the IP layer (IANA protocol number: 143).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1577,Q_PROTO_UNASSIGNED_IP_PROT_144,unassigned_ip_prot_144,,IANA Unassigned Internet Protocol Number 144,The unassigned_ip_prot_144 protocol (IANA Unassigned Internet Protocol Number 144) is found over the IP layer (IANA protocol number: 144).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1578,Q_PROTO_UNASSIGNED_IP_PROT_145,unassigned_ip_prot_145,,IANA Unassigned Internet Protocol Number 145,The unassigned_ip_prot_145 protocol (IANA Unassigned Internet Protocol Number 145) is found over the IP layer (IANA protocol number: 145).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1579,Q_PROTO_UNASSIGNED_IP_PROT_146,unassigned_ip_prot_146,,IANA Unassigned Internet Protocol Number 146,The unassigned_ip_prot_146 protocol (IANA Unassigned Internet Protocol Number 146) is found over the IP layer (IANA protocol number: 146).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1580,Q_PROTO_UNASSIGNED_IP_PROT_147,unassigned_ip_prot_147,,IANA Unassigned Internet Protocol Number 147,The unassigned_ip_prot_147 protocol (IANA Unassigned Internet Protocol Number 147) is found over the IP layer (IANA protocol number: 147).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1581,Q_PROTO_UNASSIGNED_IP_PROT_148,unassigned_ip_prot_148,,IANA Unassigned Internet Protocol Number 148,The unassigned_ip_prot_148 protocol (IANA Unassigned Internet Protocol Number 148) is found over the IP layer (IANA protocol number: 148).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1582,Q_PROTO_UNASSIGNED_IP_PROT_149,unassigned_ip_prot_149,,IANA Unassigned Internet Protocol Number 149,The unassigned_ip_prot_149 protocol (IANA Unassigned Internet Protocol Number 149) is found over the IP layer (IANA protocol number: 149).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1583,Q_PROTO_UNASSIGNED_IP_PROT_150,unassigned_ip_prot_150,,IANA Unassigned Internet Protocol Number 150,The unassigned_ip_prot_150 protocol (IANA Unassigned Internet Protocol Number 150) is found over the IP layer (IANA protocol number: 150).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1584,Q_PROTO_UNASSIGNED_IP_PROT_151,unassigned_ip_prot_151,,IANA Unassigned Internet Protocol Number 151,The unassigned_ip_prot_151 protocol (IANA Unassigned Internet Protocol Number 151) is found over the IP layer (IANA protocol number: 151).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1585,Q_PROTO_UNASSIGNED_IP_PROT_152,unassigned_ip_prot_152,,IANA Unassigned Internet Protocol Number 152,The unassigned_ip_prot_152 protocol (IANA Unassigned Internet Protocol Number 152) is found over the IP layer (IANA protocol number: 152).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1586,Q_PROTO_UNASSIGNED_IP_PROT_153,unassigned_ip_prot_153,,IANA Unassigned Internet Protocol Number 153,The unassigned_ip_prot_153 protocol (IANA Unassigned Internet Protocol Number 153) is found over the IP layer (IANA protocol number: 153).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1587,Q_PROTO_UNASSIGNED_IP_PROT_154,unassigned_ip_prot_154,,IANA Unassigned Internet Protocol Number 154,The unassigned_ip_prot_154 protocol (IANA Unassigned Internet Protocol Number 154) is found over the IP layer (IANA protocol number: 154).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1588,Q_PROTO_UNASSIGNED_IP_PROT_155,unassigned_ip_prot_155,,IANA Unassigned Internet Protocol Number 155,The unassigned_ip_prot_155 protocol (IANA Unassigned Internet Protocol Number 155) is found over the IP layer (IANA protocol number: 155).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1589,Q_PROTO_UNASSIGNED_IP_PROT_156,unassigned_ip_prot_156,,IANA Unassigned Internet Protocol Number 156,The unassigned_ip_prot_156 protocol (IANA Unassigned Internet Protocol Number 156) is found over the IP layer (IANA protocol number: 156).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1590,Q_PROTO_UNASSIGNED_IP_PROT_157,unassigned_ip_prot_157,,IANA Unassigned Internet Protocol Number 157,The unassigned_ip_prot_157 protocol (IANA Unassigned Internet Protocol Number 157) is found over the IP layer (IANA protocol number: 157).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1591,Q_PROTO_UNASSIGNED_IP_PROT_158,unassigned_ip_prot_158,,IANA Unassigned Internet Protocol Number 158,The unassigned_ip_prot_158 protocol (IANA Unassigned Internet Protocol Number 158) is found over the IP layer (IANA protocol number: 158).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1592,Q_PROTO_UNASSIGNED_IP_PROT_159,unassigned_ip_prot_159,,IANA Unassigned Internet Protocol Number 159,The unassigned_ip_prot_159 protocol (IANA Unassigned Internet Protocol Number 159) is found over the IP layer (IANA protocol number: 159).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1593,Q_PROTO_UNASSIGNED_IP_PROT_160,unassigned_ip_prot_160,,IANA Unassigned Internet Protocol Number 160,The unassigned_ip_prot_160 protocol (IANA Unassigned Internet Protocol Number 160) is found over the IP layer (IANA protocol number: 160).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1594,Q_PROTO_UNASSIGNED_IP_PROT_161,unassigned_ip_prot_161,,IANA Unassigned Internet Protocol Number 161,The unassigned_ip_prot_161 protocol (IANA Unassigned Internet Protocol Number 161) is found over the IP layer (IANA protocol number: 161).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1595,Q_PROTO_UNASSIGNED_IP_PROT_162,unassigned_ip_prot_162,,IANA Unassigned Internet Protocol Number 162,The unassigned_ip_prot_162 protocol (IANA Unassigned Internet Protocol Number 162) is found over the IP layer (IANA protocol number: 162).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1596,Q_PROTO_UNASSIGNED_IP_PROT_163,unassigned_ip_prot_163,,IANA Unassigned Internet Protocol Number 163,The unassigned_ip_prot_163 protocol (IANA Unassigned Internet Protocol Number 163) is found over the IP layer (IANA protocol number: 163).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1597,Q_PROTO_UNASSIGNED_IP_PROT_164,unassigned_ip_prot_164,,IANA Unassigned Internet Protocol Number 164,The unassigned_ip_prot_164 protocol (IANA Unassigned Internet Protocol Number 164) is found over the IP layer (IANA protocol number: 164).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1598,Q_PROTO_UNASSIGNED_IP_PROT_165,unassigned_ip_prot_165,,IANA Unassigned Internet Protocol Number 165,The unassigned_ip_prot_165 protocol (IANA Unassigned Internet Protocol Number 165) is found over the IP layer (IANA protocol number: 165).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1599,Q_PROTO_UNASSIGNED_IP_PROT_166,unassigned_ip_prot_166,,IANA Unassigned Internet Protocol Number 166,The unassigned_ip_prot_166 protocol (IANA Unassigned Internet Protocol Number 166) is found over the IP layer (IANA protocol number: 166).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1600,Q_PROTO_UNASSIGNED_IP_PROT_167,unassigned_ip_prot_167,,IANA Unassigned Internet Protocol Number 167,The unassigned_ip_prot_167 protocol (IANA Unassigned Internet Protocol Number 167) is found over the IP layer (IANA protocol number: 167).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1601,Q_PROTO_UNASSIGNED_IP_PROT_168,unassigned_ip_prot_168,,IANA Unassigned Internet Protocol Number 168,The unassigned_ip_prot_168 protocol (IANA Unassigned Internet Protocol Number 168) is found over the IP layer (IANA protocol number: 168).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1602,Q_PROTO_UNASSIGNED_IP_PROT_169,unassigned_ip_prot_169,,IANA Unassigned Internet Protocol Number 169,The unassigned_ip_prot_169 protocol (IANA Unassigned Internet Protocol Number 169) is found over the IP layer (IANA protocol number: 169).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1603,Q_PROTO_UNASSIGNED_IP_PROT_170,unassigned_ip_prot_170,,IANA Unassigned Internet Protocol Number 170,The unassigned_ip_prot_170 protocol (IANA Unassigned Internet Protocol Number 170) is found over the IP layer (IANA protocol number: 170).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1604,Q_PROTO_UNASSIGNED_IP_PROT_171,unassigned_ip_prot_171,,IANA Unassigned Internet Protocol Number 171,The unassigned_ip_prot_171 protocol (IANA Unassigned Internet Protocol Number 171) is found over the IP layer (IANA protocol number: 171).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1605,Q_PROTO_UNASSIGNED_IP_PROT_172,unassigned_ip_prot_172,,IANA Unassigned Internet Protocol Number 172,The unassigned_ip_prot_172 protocol (IANA Unassigned Internet Protocol Number 172) is found over the IP layer (IANA protocol number: 172).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1606,Q_PROTO_UNASSIGNED_IP_PROT_173,unassigned_ip_prot_173,,IANA Unassigned Internet Protocol Number 173,The unassigned_ip_prot_173 protocol (IANA Unassigned Internet Protocol Number 173) is found over the IP layer (IANA protocol number: 173).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1607,Q_PROTO_UNASSIGNED_IP_PROT_174,unassigned_ip_prot_174,,IANA Unassigned Internet Protocol Number 174,The unassigned_ip_prot_174 protocol (IANA Unassigned Internet Protocol Number 174) is found over the IP layer (IANA protocol number: 174).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1608,Q_PROTO_UNASSIGNED_IP_PROT_175,unassigned_ip_prot_175,,IANA Unassigned Internet Protocol Number 175,The unassigned_ip_prot_175 protocol (IANA Unassigned Internet Protocol Number 175) is found over the IP layer (IANA protocol number: 175).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1609,Q_PROTO_UNASSIGNED_IP_PROT_176,unassigned_ip_prot_176,,IANA Unassigned Internet Protocol Number 176,The unassigned_ip_prot_176 protocol (IANA Unassigned Internet Protocol Number 176) is found over the IP layer (IANA protocol number: 176).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1610,Q_PROTO_UNASSIGNED_IP_PROT_177,unassigned_ip_prot_177,,IANA Unassigned Internet Protocol Number 177,The unassigned_ip_prot_177 protocol (IANA Unassigned Internet Protocol Number 177) is found over the IP layer (IANA protocol number: 177).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1611,Q_PROTO_UNASSIGNED_IP_PROT_178,unassigned_ip_prot_178,,IANA Unassigned Internet Protocol Number 178,The unassigned_ip_prot_178 protocol (IANA Unassigned Internet Protocol Number 178) is found over the IP layer (IANA protocol number: 178).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1612,Q_PROTO_UNASSIGNED_IP_PROT_179,unassigned_ip_prot_179,,IANA Unassigned Internet Protocol Number 179,The unassigned_ip_prot_179 protocol (IANA Unassigned Internet Protocol Number 179) is found over the IP layer (IANA protocol number: 179).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1613,Q_PROTO_UNASSIGNED_IP_PROT_180,unassigned_ip_prot_180,,IANA Unassigned Internet Protocol Number 180,The unassigned_ip_prot_180 protocol (IANA Unassigned Internet Protocol Number 180) is found over the IP layer (IANA protocol number: 180).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1614,Q_PROTO_UNASSIGNED_IP_PROT_181,unassigned_ip_prot_181,,IANA Unassigned Internet Protocol Number 181,The unassigned_ip_prot_181 protocol (IANA Unassigned Internet Protocol Number 181) is found over the IP layer (IANA protocol number: 181).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1615,Q_PROTO_UNASSIGNED_IP_PROT_182,unassigned_ip_prot_182,,IANA Unassigned Internet Protocol Number 182,The unassigned_ip_prot_182 protocol (IANA Unassigned Internet Protocol Number 182) is found over the IP layer (IANA protocol number: 182).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1616,Q_PROTO_UNASSIGNED_IP_PROT_183,unassigned_ip_prot_183,,IANA Unassigned Internet Protocol Number 183,The unassigned_ip_prot_183 protocol (IANA Unassigned Internet Protocol Number 183) is found over the IP layer (IANA protocol number: 183).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1617,Q_PROTO_UNASSIGNED_IP_PROT_184,unassigned_ip_prot_184,,IANA Unassigned Internet Protocol Number 184,The unassigned_ip_prot_184 protocol (IANA Unassigned Internet Protocol Number 184) is found over the IP layer (IANA protocol number: 184).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1618,Q_PROTO_UNASSIGNED_IP_PROT_185,unassigned_ip_prot_185,,IANA Unassigned Internet Protocol Number 185,The unassigned_ip_prot_185 protocol (IANA Unassigned Internet Protocol Number 185) is found over the IP layer (IANA protocol number: 185).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1619,Q_PROTO_UNASSIGNED_IP_PROT_186,unassigned_ip_prot_186,,IANA Unassigned Internet Protocol Number 186,The unassigned_ip_prot_186 protocol (IANA Unassigned Internet Protocol Number 186) is found over the IP layer (IANA protocol number: 186).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1620,Q_PROTO_UNASSIGNED_IP_PROT_187,unassigned_ip_prot_187,,IANA Unassigned Internet Protocol Number 187,The unassigned_ip_prot_187 protocol (IANA Unassigned Internet Protocol Number 187) is found over the IP layer (IANA protocol number: 187).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1621,Q_PROTO_UNASSIGNED_IP_PROT_188,unassigned_ip_prot_188,,IANA Unassigned Internet Protocol Number 188,The unassigned_ip_prot_188 protocol (IANA Unassigned Internet Protocol Number 188) is found over the IP layer (IANA protocol number: 188).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1622,Q_PROTO_UNASSIGNED_IP_PROT_189,unassigned_ip_prot_189,,IANA Unassigned Internet Protocol Number 189,The unassigned_ip_prot_189 protocol (IANA Unassigned Internet Protocol Number 189) is found over the IP layer (IANA protocol number: 189).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1623,Q_PROTO_UNASSIGNED_IP_PROT_190,unassigned_ip_prot_190,,IANA Unassigned Internet Protocol Number 190,The unassigned_ip_prot_190 protocol (IANA Unassigned Internet Protocol Number 190) is found over the IP layer (IANA protocol number: 190).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1624,Q_PROTO_UNASSIGNED_IP_PROT_191,unassigned_ip_prot_191,,IANA Unassigned Internet Protocol Number 191,The unassigned_ip_prot_191 protocol (IANA Unassigned Internet Protocol Number 191) is found over the IP layer (IANA protocol number: 191).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1625,Q_PROTO_UNASSIGNED_IP_PROT_192,unassigned_ip_prot_192,,IANA Unassigned Internet Protocol Number 192,The unassigned_ip_prot_192 protocol (IANA Unassigned Internet Protocol Number 192) is found over the IP layer (IANA protocol number: 192).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1626,Q_PROTO_UNASSIGNED_IP_PROT_193,unassigned_ip_prot_193,,IANA Unassigned Internet Protocol Number 193,The unassigned_ip_prot_193 protocol (IANA Unassigned Internet Protocol Number 193) is found over the IP layer (IANA protocol number: 193).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1627,Q_PROTO_UNASSIGNED_IP_PROT_194,unassigned_ip_prot_194,,IANA Unassigned Internet Protocol Number 194,The unassigned_ip_prot_194 protocol (IANA Unassigned Internet Protocol Number 194) is found over the IP layer (IANA protocol number: 194).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1628,Q_PROTO_UNASSIGNED_IP_PROT_195,unassigned_ip_prot_195,,IANA Unassigned Internet Protocol Number 195,The unassigned_ip_prot_195 protocol (IANA Unassigned Internet Protocol Number 195) is found over the IP layer (IANA protocol number: 195).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1629,Q_PROTO_UNASSIGNED_IP_PROT_196,unassigned_ip_prot_196,,IANA Unassigned Internet Protocol Number 196,The unassigned_ip_prot_196 protocol (IANA Unassigned Internet Protocol Number 196) is found over the IP layer (IANA protocol number: 196).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1630,Q_PROTO_UNASSIGNED_IP_PROT_197,unassigned_ip_prot_197,,IANA Unassigned Internet Protocol Number 197,The unassigned_ip_prot_197 protocol (IANA Unassigned Internet Protocol Number 197) is found over the IP layer (IANA protocol number: 197).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1631,Q_PROTO_UNASSIGNED_IP_PROT_198,unassigned_ip_prot_198,,IANA Unassigned Internet Protocol Number 198,The unassigned_ip_prot_198 protocol (IANA Unassigned Internet Protocol Number 198) is found over the IP layer (IANA protocol number: 198).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1632,Q_PROTO_UNASSIGNED_IP_PROT_199,unassigned_ip_prot_199,,IANA Unassigned Internet Protocol Number 199,The unassigned_ip_prot_199 protocol (IANA Unassigned Internet Protocol Number 199) is found over the IP layer (IANA protocol number: 199).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1633,Q_PROTO_UNASSIGNED_IP_PROT_200,unassigned_ip_prot_200,,IANA Unassigned Internet Protocol Number 200,The unassigned_ip_prot_200 protocol (IANA Unassigned Internet Protocol Number 200) is found over the IP layer (IANA protocol number: 200).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1634,Q_PROTO_UNASSIGNED_IP_PROT_201,unassigned_ip_prot_201,,IANA Unassigned Internet Protocol Number 201,The unassigned_ip_prot_201 protocol (IANA Unassigned Internet Protocol Number 201) is found over the IP layer (IANA protocol number: 201).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1635,Q_PROTO_UNASSIGNED_IP_PROT_202,unassigned_ip_prot_202,,IANA Unassigned Internet Protocol Number 202,The unassigned_ip_prot_202 protocol (IANA Unassigned Internet Protocol Number 202) is found over the IP layer (IANA protocol number: 202).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1636,Q_PROTO_UNASSIGNED_IP_PROT_203,unassigned_ip_prot_203,,IANA Unassigned Internet Protocol Number 203,The unassigned_ip_prot_203 protocol (IANA Unassigned Internet Protocol Number 203) is found over the IP layer (IANA protocol number: 203).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1637,Q_PROTO_UNASSIGNED_IP_PROT_204,unassigned_ip_prot_204,,IANA Unassigned Internet Protocol Number 204,The unassigned_ip_prot_204 protocol (IANA Unassigned Internet Protocol Number 204) is found over the IP layer (IANA protocol number: 204).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1638,Q_PROTO_UNASSIGNED_IP_PROT_205,unassigned_ip_prot_205,,IANA Unassigned Internet Protocol Number 205,The unassigned_ip_prot_205 protocol (IANA Unassigned Internet Protocol Number 205) is found over the IP layer (IANA protocol number: 205).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1639,Q_PROTO_UNASSIGNED_IP_PROT_206,unassigned_ip_prot_206,,IANA Unassigned Internet Protocol Number 206,The unassigned_ip_prot_206 protocol (IANA Unassigned Internet Protocol Number 206) is found over the IP layer (IANA protocol number: 206).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1640,Q_PROTO_UNASSIGNED_IP_PROT_207,unassigned_ip_prot_207,,IANA Unassigned Internet Protocol Number 207,The unassigned_ip_prot_207 protocol (IANA Unassigned Internet Protocol Number 207) is found over the IP layer (IANA protocol number: 207).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1641,Q_PROTO_UNASSIGNED_IP_PROT_208,unassigned_ip_prot_208,,IANA Unassigned Internet Protocol Number 208,The unassigned_ip_prot_208 protocol (IANA Unassigned Internet Protocol Number 208) is found over the IP layer (IANA protocol number: 208).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1642,Q_PROTO_UNASSIGNED_IP_PROT_209,unassigned_ip_prot_209,,IANA Unassigned Internet Protocol Number 209,The unassigned_ip_prot_209 protocol (IANA Unassigned Internet Protocol Number 209) is found over the IP layer (IANA protocol number: 209).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1643,Q_PROTO_UNASSIGNED_IP_PROT_210,unassigned_ip_prot_210,,IANA Unassigned Internet Protocol Number 210,The unassigned_ip_prot_210 protocol (IANA Unassigned Internet Protocol Number 210) is found over the IP layer (IANA protocol number: 210).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1644,Q_PROTO_UNASSIGNED_IP_PROT_211,unassigned_ip_prot_211,,IANA Unassigned Internet Protocol Number 211,The unassigned_ip_prot_211 protocol (IANA Unassigned Internet Protocol Number 211) is found over the IP layer (IANA protocol number: 211).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1645,Q_PROTO_UNASSIGNED_IP_PROT_212,unassigned_ip_prot_212,,IANA Unassigned Internet Protocol Number 212,The unassigned_ip_prot_212 protocol (IANA Unassigned Internet Protocol Number 212) is found over the IP layer (IANA protocol number: 212).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1646,Q_PROTO_UNASSIGNED_IP_PROT_213,unassigned_ip_prot_213,,IANA Unassigned Internet Protocol Number 213,The unassigned_ip_prot_213 protocol (IANA Unassigned Internet Protocol Number 213) is found over the IP layer (IANA protocol number: 213).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1647,Q_PROTO_UNASSIGNED_IP_PROT_214,unassigned_ip_prot_214,,IANA Unassigned Internet Protocol Number 214,The unassigned_ip_prot_214 protocol (IANA Unassigned Internet Protocol Number 214) is found over the IP layer (IANA protocol number: 214).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1648,Q_PROTO_UNASSIGNED_IP_PROT_215,unassigned_ip_prot_215,,IANA Unassigned Internet Protocol Number 215,The unassigned_ip_prot_215 protocol (IANA Unassigned Internet Protocol Number 215) is found over the IP layer (IANA protocol number: 215).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1649,Q_PROTO_UNASSIGNED_IP_PROT_216,unassigned_ip_prot_216,,IANA Unassigned Internet Protocol Number 216,The unassigned_ip_prot_216 protocol (IANA Unassigned Internet Protocol Number 216) is found over the IP layer (IANA protocol number: 216).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1650,Q_PROTO_UNASSIGNED_IP_PROT_217,unassigned_ip_prot_217,,IANA Unassigned Internet Protocol Number 217,The unassigned_ip_prot_217 protocol (IANA Unassigned Internet Protocol Number 217) is found over the IP layer (IANA protocol number: 217).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1651,Q_PROTO_UNASSIGNED_IP_PROT_218,unassigned_ip_prot_218,,IANA Unassigned Internet Protocol Number 218,The unassigned_ip_prot_218 protocol (IANA Unassigned Internet Protocol Number 218) is found over the IP layer (IANA protocol number: 218).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1652,Q_PROTO_UNASSIGNED_IP_PROT_219,unassigned_ip_prot_219,,IANA Unassigned Internet Protocol Number 219,The unassigned_ip_prot_219 protocol (IANA Unassigned Internet Protocol Number 219) is found over the IP layer (IANA protocol number: 219).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1653,Q_PROTO_UNASSIGNED_IP_PROT_220,unassigned_ip_prot_220,,IANA Unassigned Internet Protocol Number 220,The unassigned_ip_prot_220 protocol (IANA Unassigned Internet Protocol Number 220) is found over the IP layer (IANA protocol number: 220).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1654,Q_PROTO_UNASSIGNED_IP_PROT_221,unassigned_ip_prot_221,,IANA Unassigned Internet Protocol Number 221,The unassigned_ip_prot_221 protocol (IANA Unassigned Internet Protocol Number 221) is found over the IP layer (IANA protocol number: 221).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1655,Q_PROTO_UNASSIGNED_IP_PROT_222,unassigned_ip_prot_222,,IANA Unassigned Internet Protocol Number 222,The unassigned_ip_prot_222 protocol (IANA Unassigned Internet Protocol Number 222) is found over the IP layer (IANA protocol number: 222).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1656,Q_PROTO_UNASSIGNED_IP_PROT_223,unassigned_ip_prot_223,,IANA Unassigned Internet Protocol Number 223,The unassigned_ip_prot_223 protocol (IANA Unassigned Internet Protocol Number 223) is found over the IP layer (IANA protocol number: 223).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1657,Q_PROTO_UNASSIGNED_IP_PROT_224,unassigned_ip_prot_224,,IANA Unassigned Internet Protocol Number 224,The unassigned_ip_prot_224 protocol (IANA Unassigned Internet Protocol Number 224) is found over the IP layer (IANA protocol number: 224).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1658,Q_PROTO_UNASSIGNED_IP_PROT_225,unassigned_ip_prot_225,,IANA Unassigned Internet Protocol Number 225,The unassigned_ip_prot_225 protocol (IANA Unassigned Internet Protocol Number 225) is found over the IP layer (IANA protocol number: 225).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1659,Q_PROTO_UNASSIGNED_IP_PROT_226,unassigned_ip_prot_226,,IANA Unassigned Internet Protocol Number 226,The unassigned_ip_prot_226 protocol (IANA Unassigned Internet Protocol Number 226) is found over the IP layer (IANA protocol number: 226).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1660,Q_PROTO_UNASSIGNED_IP_PROT_227,unassigned_ip_prot_227,,IANA Unassigned Internet Protocol Number 227,The unassigned_ip_prot_227 protocol (IANA Unassigned Internet Protocol Number 227) is found over the IP layer (IANA protocol number: 227).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1661,Q_PROTO_UNASSIGNED_IP_PROT_228,unassigned_ip_prot_228,,IANA Unassigned Internet Protocol Number 228,The unassigned_ip_prot_228 protocol (IANA Unassigned Internet Protocol Number 228) is found over the IP layer (IANA protocol number: 228).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1662,Q_PROTO_UNASSIGNED_IP_PROT_229,unassigned_ip_prot_229,,IANA Unassigned Internet Protocol Number 229,The unassigned_ip_prot_229 protocol (IANA Unassigned Internet Protocol Number 229) is found over the IP layer (IANA protocol number: 229).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1663,Q_PROTO_UNASSIGNED_IP_PROT_230,unassigned_ip_prot_230,,IANA Unassigned Internet Protocol Number 230,The unassigned_ip_prot_230 protocol (IANA Unassigned Internet Protocol Number 230) is found over the IP layer (IANA protocol number: 230).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1664,Q_PROTO_UNASSIGNED_IP_PROT_231,unassigned_ip_prot_231,,IANA Unassigned Internet Protocol Number 231,The unassigned_ip_prot_231 protocol (IANA Unassigned Internet Protocol Number 231) is found over the IP layer (IANA protocol number: 231).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1665,Q_PROTO_UNASSIGNED_IP_PROT_232,unassigned_ip_prot_232,,IANA Unassigned Internet Protocol Number 232,The unassigned_ip_prot_232 protocol (IANA Unassigned Internet Protocol Number 232) is found over the IP layer (IANA protocol number: 232).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1666,Q_PROTO_UNASSIGNED_IP_PROT_233,unassigned_ip_prot_233,,IANA Unassigned Internet Protocol Number 233,The unassigned_ip_prot_233 protocol (IANA Unassigned Internet Protocol Number 233) is found over the IP layer (IANA protocol number: 233).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1667,Q_PROTO_UNASSIGNED_IP_PROT_234,unassigned_ip_prot_234,,IANA Unassigned Internet Protocol Number 234,The unassigned_ip_prot_234 protocol (IANA Unassigned Internet Protocol Number 234) is found over the IP layer (IANA protocol number: 234).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1668,Q_PROTO_UNASSIGNED_IP_PROT_235,unassigned_ip_prot_235,,IANA Unassigned Internet Protocol Number 235,The unassigned_ip_prot_235 protocol (IANA Unassigned Internet Protocol Number 235) is found over the IP layer (IANA protocol number: 235).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1669,Q_PROTO_UNASSIGNED_IP_PROT_236,unassigned_ip_prot_236,,IANA Unassigned Internet Protocol Number 236,The unassigned_ip_prot_236 protocol (IANA Unassigned Internet Protocol Number 236) is found over the IP layer (IANA protocol number: 236).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1670,Q_PROTO_UNASSIGNED_IP_PROT_237,unassigned_ip_prot_237,,IANA Unassigned Internet Protocol Number 237,The unassigned_ip_prot_237 protocol (IANA Unassigned Internet Protocol Number 237) is found over the IP layer (IANA protocol number: 237).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1671,Q_PROTO_UNASSIGNED_IP_PROT_238,unassigned_ip_prot_238,,IANA Unassigned Internet Protocol Number 238,The unassigned_ip_prot_238 protocol (IANA Unassigned Internet Protocol Number 238) is found over the IP layer (IANA protocol number: 238).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1672,Q_PROTO_UNASSIGNED_IP_PROT_239,unassigned_ip_prot_239,,IANA Unassigned Internet Protocol Number 239,The unassigned_ip_prot_239 protocol (IANA Unassigned Internet Protocol Number 239) is found over the IP layer (IANA protocol number: 239).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1673,Q_PROTO_UNASSIGNED_IP_PROT_240,unassigned_ip_prot_240,,IANA Unassigned Internet Protocol Number 240,The unassigned_ip_prot_240 protocol (IANA Unassigned Internet Protocol Number 240) is found over the IP layer (IANA protocol number: 240).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1674,Q_PROTO_UNASSIGNED_IP_PROT_241,unassigned_ip_prot_241,,IANA Unassigned Internet Protocol Number 241,The unassigned_ip_prot_241 protocol (IANA Unassigned Internet Protocol Number 241) is found over the IP layer (IANA protocol number: 241).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1675,Q_PROTO_UNASSIGNED_IP_PROT_242,unassigned_ip_prot_242,,IANA Unassigned Internet Protocol Number 242,The unassigned_ip_prot_242 protocol (IANA Unassigned Internet Protocol Number 242) is found over the IP layer (IANA protocol number: 242).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1676,Q_PROTO_UNASSIGNED_IP_PROT_243,unassigned_ip_prot_243,,IANA Unassigned Internet Protocol Number 243,The unassigned_ip_prot_243 protocol (IANA Unassigned Internet Protocol Number 243) is found over the IP layer (IANA protocol number: 243).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1677,Q_PROTO_UNASSIGNED_IP_PROT_244,unassigned_ip_prot_244,,IANA Unassigned Internet Protocol Number 244,The unassigned_ip_prot_244 protocol (IANA Unassigned Internet Protocol Number 244) is found over the IP layer (IANA protocol number: 244).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1678,Q_PROTO_UNASSIGNED_IP_PROT_245,unassigned_ip_prot_245,,IANA Unassigned Internet Protocol Number 245,The unassigned_ip_prot_245 protocol (IANA Unassigned Internet Protocol Number 245) is found over the IP layer (IANA protocol number: 245).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1679,Q_PROTO_UNASSIGNED_IP_PROT_246,unassigned_ip_prot_246,,IANA Unassigned Internet Protocol Number 246,The unassigned_ip_prot_246 protocol (IANA Unassigned Internet Protocol Number 246) is found over the IP layer (IANA protocol number: 246).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1680,Q_PROTO_UNASSIGNED_IP_PROT_247,unassigned_ip_prot_247,,IANA Unassigned Internet Protocol Number 247,The unassigned_ip_prot_247 protocol (IANA Unassigned Internet Protocol Number 247) is found over the IP layer (IANA protocol number: 247).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1681,Q_PROTO_UNASSIGNED_IP_PROT_248,unassigned_ip_prot_248,,IANA Unassigned Internet Protocol Number 248,The unassigned_ip_prot_248 protocol (IANA Unassigned Internet Protocol Number 248) is found over the IP layer (IANA protocol number: 248).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1682,Q_PROTO_UNASSIGNED_IP_PROT_249,unassigned_ip_prot_249,,IANA Unassigned Internet Protocol Number 249,The unassigned_ip_prot_249 protocol (IANA Unassigned Internet Protocol Number 249) is found over the IP layer (IANA protocol number: 249).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1683,Q_PROTO_UNASSIGNED_IP_PROT_250,unassigned_ip_prot_250,,IANA Unassigned Internet Protocol Number 250,The unassigned_ip_prot_250 protocol (IANA Unassigned Internet Protocol Number 250) is found over the IP layer (IANA protocol number: 250).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1684,Q_PROTO_UNASSIGNED_IP_PROT_251,unassigned_ip_prot_251,,IANA Unassigned Internet Protocol Number 251,The unassigned_ip_prot_251 protocol (IANA Unassigned Internet Protocol Number 251) is found over the IP layer (IANA protocol number: 251).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1685,Q_PROTO_UNASSIGNED_IP_PROT_252,unassigned_ip_prot_252,,IANA Unassigned Internet Protocol Number 252,The unassigned_ip_prot_252 protocol (IANA Unassigned Internet Protocol Number 252) is found over the IP layer (IANA protocol number: 252).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1063,Q_PROTO_UNIVISION,univision,,Univision.com,This protocol plug-in classifies the http traffic to the host univision.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -4,Q_PROTO_UNKNOWN,unknown,,Unknown virtual protocol,"Unknown is a virtual protocol created for DPI that represents flows that are not recognized by the system. Most of the time, its presence is due to the existence of a business application whose specifications are not made available to the public. Such flows can be defined in the system by means of a User Defined Application.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2075,Q_PROTO_UOL,uol,,UOL.com.br,Brazalian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1970,Q_PROTO_UPLOAD_COM,upload_com,,Upload.cnet.com,Classifies web browsing on the CNET upload.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2013-12-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1963,Q_PROTO_UPLOADED_NET,uploaded_net,,uploaded.net,Classifies web browsing on the uploaded.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1064,Q_PROTO_UPLOADING,uploading,,Uploading.com,This protocol plug-in classifies the http traffic to the host uploading.com. It also classifies the ssl traffic to the Common Name api.uploading.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1993,Q_PROTO_UPLOADINGIT_COM,uploadingit_com,,uploadingit.com,Classifies web browsing on the uploadingit.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1742,Q_PROTO_USABIT_COM,usabit_com,,Usabit Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1065,Q_PROTO_USATODAY,usatoday,,USAToday.com,This protocol plug-in classifies the http traffic to the host usatoday.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -865,Q_PROTO_USEJUMP,usejump,,Usejump.com,This protocol plug-in classifies the http traffic to the host usejump.com. It also classifies the ssl traffic to the Common Name beta.usejump.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -866,Q_PROTO_USTREAM,ustream,,UStream,Ustream is a live video broadcasting webservice available on PC and mobile platforms.,Web,http;https;rtmp;ssl,PC-Windows-Browser-www.ustream.tv (2013-10-10),Mac-Mac OS-10.9-Ustream-5.0.3- (2014-05-20);Mobile-Android-4.4.2-Ustream-2.6.3- (2014-05-15);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-14);PC-Windows-Ustream Producer-5.0.2- (2014-01-31);Windows Phone-Windows Phone OS-7-Browser- (2013-10-18);iPhone-iOS-7.0.4-Ustream-2.4.3- (2014-02-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -694,Q_PROTO_UTI,uti,,UTI,The uti protocol (UTI) is found over the IP layer (IANA protocol number: 120).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2233,Q_PROTO_UTORRENT,utorrent,,uTorrent,uTorrent is a closed source BitTorrent client. This plugin classifies the traffic to the software company. The generated traffic by this software is classified as bittorrent.,Peer to Peer,http;https,20140403,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -580,Q_PROTO_UTP,utp,,uTP (Micro Transport Protocol),BitTorrent transport layer.,Peer to Peer,udp,;,PC-Windows-7-Utorrent-3.4.1- (2014-04-29),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,, -743,Q_PROTO_UUSEE,uusee,,UUSee Protocol,"Uusee is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite TV as well as WebTV on PC. It uses the network coding technology.",Audio/Video,http;https;tcp;udp,20110314,10/6/2011,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -1305,Q_PROTO_V5UA,v5ua,,V5.2-User Adaptation Layer,"V5UA is a transport mechanism for V5.2 messages in an IP network, through SCTP.",Network Service,sctp,1.2 - RFC 3807,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -867,Q_PROTO_VAKAKA,vakaka,,Vakaka.com,This protocol plug-in classifies the http traffic to the host vakaka.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -505,Q_PROTO_VAMPIREFREAKS,vampirefreaks,,VampireFreaks.com,This protocol plug-in classifies the http traffic to the host vampirefreaks.com. It also classifies the ssl traffic to the Common Name vampirefreaks.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2142,Q_PROTO_VANGUARDNGR,vanguardngr,,Vanguardngr.com,Nigerian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1950,Q_PROTO_VARZESH3,varzesh3,,Varzesh3.com,Persian online sports new portal.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1951,Q_PROTO_VBOX7,vbox7,,VBOX7.com,Bulgarian video streaming website.,Web,http;https;ssl,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2201,Q_PROTO_VECERNJI,vecernji,,Vecernji,Crotaian news portal,Web,http;https,20140318,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1743,Q_PROTO_VECTOR,vector,,Vector Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -868,Q_PROTO_VEETLE,veetle,,Veetle.com,This protocol plug-in classifies the http traffic to the host veetle.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -577,Q_PROTO_VEOHTV,veohtv,,veohtv,VeohTV is a VOD streaming service which includes both client software and a website with embedded flash videos.,Audio/Video,http;https;llnwd;rtmp;ssl;udp,20101116,PC-Windows-VEOH Player-beta- (2011-10-07),,x,,x,veohtv,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1182,Q_PROTO_VEVO,vevo,,VEVO.com,This protocol plug-in classifies the http traffic to the host .vevo.com.,Audio/Video,http;https;rtmp,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2076,Q_PROTO_VG,vg,,Vg.no,Norwegian news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -304,Q_PROTO_VIADEO,viadeo,,Viadeo.com,Viadeo is a web site designed to manage professional contacts.,Web,http;https,20101221,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -597,Q_PROTO_VIBER,viber,,viber,"Viber is a free embedded voice over-ip application, for smartphones.",Audio/Video,amazon_aws;http;https;ssl;tcp;udp,iPhone-iOS-Viber 4.0;Mobile-Android-Viber 4.0.0,Blackberry-Blackberry OS-7.1-Viber-3.1.16- (2013-11-14);Mac-Mac OS-Viber-3.0.0- (2014-02-06);Mobile-Android-4.2.1-Viber-4.3.3.67- (2014-06-05);Mobile-Bada-2.0S8600XXLC3-Viber-2.1.20- (2013-11-14);Nokia Mobile-Nokia Asha 311-Symbian-Viber-2.22.27 - (2014-06-10);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-7-Viber-4.1.0.1703- (2014-05-15);Windows Phone-1320-Windows Phone OS-8.0.10521.155-Viber-4.1.2- (2014-06-02);iPhone-4S-iOS-7.1.1-Viber-4.2.1- (2014-06-02),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1066,Q_PROTO_VIDEOBASH,videobash,,VideoBash.com,This protocol plug-in classifies the http traffic to the host videobash.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2281,Q_PROTO_VIDEOPLAZA,videoplaza,,Videoplaza,"Videoplaza provides tools to broadcasters, publishers and networks to maximise their advert revenues from their video content.",Web,http;https;ssl,20140513,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1067,Q_PROTO_VIDEOSURF,videosurf,,VideoSurf.com,This protocol plug-in classifies the http traffic to the host videosurf.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1068,Q_PROTO_VIETBAO,vietbao,,VietBao.vn,This protocol plug-in classifies the http traffic to the host vietbao.vn.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2285,Q_PROTO_VIEWPATH,viewpath,,Viewpath,Viewpath is an online project management and collaboration tool.,Web,http;https;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2143,Q_PROTO_VIJESTI,vijesti,,Vijesti.me,Serbian news portal.,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1069,Q_PROTO_VIMEO,vimeo,,Vimeo.com,"Vimeo is a high definition video streaming platform, to be accessed from a web browser or mobile applications.",Audio/Video,apple_hls;http;https;mms;ssl,PC-Windows-Browser-www.vimeo.com (2014-01-06);Mobile-Android-Vimeo 1.1.41,Mobile-Android-Vimeo-1.1.41- (2014-01-06);PC-Windows-7-Chrome-34.0.1847.116-Vimeo Couch Mode-1.0- (2014-04-24);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-23);PC-Windows-8-Vimeo-1.3.0.0- (2014-05-28);Windows Phone-Windows Phone OS-8-Vimeo-2.2.0.1- (2014-04-24);iPhone-iOS-7.1.1-Vimeo-4.1.00- (2014-05-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -217,Q_PROTO_VINES,vines,,Vines Banyan Systems,"Vines is a network layer protocol, enabling the routing of packets from the transport layer from one node to the transport layer in another node.",Network Service,8021q;eth;ip;ppp;snap,Vines v7.0,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -695,Q_PROTO_VISA,visa,,VISA,The visa protocol (VISA Protocol) is found over the IP layer (IANA protocol number: 70).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2077,Q_PROTO_VISIR,visir,,Visir.is,Icelandic news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1129,Q_PROTO_VIVANEWS,vivanews,,Vivanews.com,This protocol plug-in classifies the http traffic to the hosts vivanews.com and viva.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -218,Q_PROTO_VJC_COMP,vjc_comp,,Van Jacobson Compressed,"Van Jacobson TCP/IP Header Compression is a data compression protocol described in RFC 1144, specifically designed by Van Jacobson to improve TCP/IP performance.",Tunneling,ppp,RFC 1144,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -219,Q_PROTO_VJC_UNCOMP,vjc_uncomp,,Van Jacobson Uncompressed,"Van Jacobson TCP/IP Header Compression is a data compression protocol described in RFC 1144, specifically designed by Van Jacobson to improve TCP/IP performance.",Tunneling,ppp,RFC 1144,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -504,Q_PROTO_VKONTAKTE,vkontakte,,Vk.com (Vkontakte),vkontakte is an European social network service popular among Russian-Speaking users. It is quite similar to Facebook.,Forum,http;https;ssl,Mobile-Android-VK 3.4.1 (2014-03-10);iPhone-iOS-VK 2.0;Windows Phone-Windows Phone OS-VK 3.0.3,BlackBerry-BlackBerry OS-VK for BlackBerry-10.3.9- (2014-05-27);Mobile-Android-4.4.2-VK-3.6- (2014-06-02);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-7-Chrome-35.0.1916.114-VK Offline-4.8.9- (2014-06-09);Windows Phone-Windows Phone OS-VK-3.2.0.0- (2014-06-03);iPhone-iOS-7.0.4-VK-2.0- (2014-01-06),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, -696,Q_PROTO_VMTP,vmtp,,VMTP,The vmtp protocol (VMTP) is found over the IP layer (IANA protocol number: 81).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -220,Q_PROTO_VMWARE,vmware,,VMWare,"VMWare is a protocol used by the VMWare application, allowing it to have network interfaces and remote access to a virtual machine.",Thin Client,tcp,na,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -2144,Q_PROTO_VNEXPRESS,vnexpress,,VnExpress.net,Vietnamese news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -573,Q_PROTO_VODDLER,voddler,,Voddler.com,Voddler is a streaming client application distributing movies and television programming using a patented hybrid peer-to-peer distribution system.,Audio/Video,http;https;ssl;tcp;udp,20101112,10/3/2011,,x,,x,voddler,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -506,Q_PROTO_VOX,vox,,Vox.com,General news website.,Web,http;https,20140314,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -221,Q_PROTO_VRRP,vrrp,,Virtual Router Redundancy Protocol,Virtual Router Redundancy Protocol (VRRP) is a protocol designed to eliminate the single point of failure inherent in the static default routed environment. VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN.,Routing,ip,RFC 3768,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1697,Q_PROTO_VSEE,vsee,,Vsee,Vsee is a videoconferencing software.,Audio/Video,http;https;ssl;udp,13.0.0.814,10/2/2013,,x,,x,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,, -347,Q_PROTO_VTUNNEL,vtunnel,,Vtunnel.com - Vtunnels.info,"Vtunnel is a WEB proxy allowing the user to bybass firewalls and access restricted resources. This plug-in classifies the HTTP tunneled sessions, including both vtunnel and the tunneled application. When using HTTPs, the Vtunnel service may connect to the Freeproxies.org proxy: the corresponding sessions are then classified as freeproxies.",Web,http;https;ssl,20131227,12/20/2013,,x,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,,x -1768,Q_PROTO_VUBE,vube,,Vube.com,Monthly video contest and video sharing website.,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1573,Q_PROTO_VUZE,vuze,,Vuze Bittorrent client,Vuze is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the Vuze client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https,5.1.0.0,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -869,Q_PROTO_VYEW,vyew,,Vyew.com,This protocol plug-in classifies the http traffic to the host vyew.com. It also classifies the ssl traffic to the Common Name vyew.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -507,Q_PROTO_WAKOOPA,wakoopa,,Wakoopa.com,This protocol plug-in classifies the http traffic to the host wakoopa.com. It also classifies the ssl traffic to the Common Name .wakoopa.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1952,Q_PROTO_WALLA,walla,,Walla.co.il,Israelian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1427,Q_PROTO_WALLSTREETJOURNAL_CHINA,wallstreetjournal_china,,Wall Street Journal China (cn.wsj.com),Chinese version of the Wall Street Journal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1428,Q_PROTO_WANDOUJIA,wandoujia,,Wandoujia,Chinese mobile (Android applications.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -508,Q_PROTO_WASABI,wasabi,,Wasabi.com,This protocol plug-in classifies the http traffic to the host wasabi.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1070,Q_PROTO_WASHINGTONPOST,washingtonpost,,WahingtonPost.com,This protocol plug-in classifies the http traffic to the host washingtonpost.com.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1071,Q_PROTO_WAT,wat,,Wat.tv,This protocol plug-in classifies the http traffic to the host wat.tv.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2273,Q_PROTO_WATTAN,wattan,,Wattan,Palestinian multimedia news website.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -509,Q_PROTO_WAYN,wayn,,Wayn.com,This protocol plug-in classifies the http traffic to the host wayn.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2246,Q_PROTO_WAZE,waze,,Waze Social GPS Maps & Traffic,"Waze is a community based mapping, traffic & navigation app.",Web,http;https;ssl,iPhone-iOS;Mobile-Android,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,,,, -697,Q_PROTO_WB_EXPAK,wb_expak,,WIDEBAND EXPAK,The wb_expak protocol (WIDEBAND EXPAK) is found over the IP layer (IANA protocol number: 79).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -698,Q_PROTO_WB_MON,wb_mon,,WIDEBAND Monitoring,The wb_mon protocol (WIDEBAND Monitoring) is found over the IP layer (IANA protocol number: 78).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1072,Q_PROTO_WEATHER,weather,,Weather.com,This protocol plug-in classifies the http traffic to the hosts weather.com and weather.com.cn.,Web,http;https,20130713,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1793,Q_PROTO_WEATHER2UMBRELLA,weather2umbrella,,Weather2Umbrella.com,World Weather Forecast,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -870,Q_PROTO_WEB_CRAWLER,web_crawler,,WebCrawler.com,This protocol plug-in classifies the http traffic to the host webcrawler.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -510,Q_PROTO_WEBBIOGRAPHIES,webbiographies,,WebBiographies.com,This protocol plug-in classifies the http traffic to the host webbiographies.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -890,Q_PROTO_WEBEX,webex,,WebEx,"WebEx is an online meeting, videoconferencing and collaborative application",Audio/Video,http;https;ssl;udp,Meeting Center 8.5 (WBS 27) – Client build 27.24.0.10113,6/7/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -1473,Q_PROTO_WEBEX_WEBOFFICE,webex_weboffice,,Webex WebOffice,WebOffice is a collaboration suite for managing small businesses teams.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -1504,Q_PROTO_WEBSOCKET,websocket,,WebSocket,"The WebSocket Protocol, as described in IETF RFC6455.",Network Service,http,IETF RFC6455,7/25/2013,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2276,Q_PROTO_WEBTRETHO,webtretho,,Webtretho,Vietnamese women lifestyle website.,Web,http;https,20140526,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1296,Q_PROTO_WECHAT,wechat,,WeChat,"WeChat is a text and voice messaging application for mobile. This plug-in classifies file transfers, chat and audio/video calls.",Instant Messaging,http;https;tcp;udp,PC-Windows-Browser-www.wechat.com (2014-01-28);Mobile-Android-WeChat 5.0.3.1;iPhone-iOS-WeChat 5.0.3,BlackBerry-BlackBerry OS-10.2-WeChat-3.0.1.1- (2014-04-15);Mobile-Moto G-Android-4.4.2-WeChat-5.2.1- (2014-04-12);Mobile-Moto G-Android-4.4.2-WeChat-5.2.1-CN (2014-02-25);Nokia Mobile-Symbian-113.010.1506-WeChat-4.2.0- (2014-04-15);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);Windows Phone-Windows Phone OS-8-WeChat-5.1.3.1- (2014-05-21);iPhone-iOS-7.1-WeChat-5.2.1- (2014-04-15);iPhone-iOS-7.1-WeChat-5.2.1-CN (2014-02-25),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, -511,Q_PROTO_WEOURFAMILY,weourfamily,,WeOurFamily.com,This protocol plug-in classifies the http traffic to the host weourfamily.com. It also classifies the ssl traffic to the Common Name member.weourfamily.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -512,Q_PROTO_WERKENNTWEN,werkenntwen,,Wer-Kennt-Wen.de,This protocol plug-in classifies the http traffic to the host wer-kennt-wen.de.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -732,Q_PROTO_WESP,wesp,,Wrapped Encapsulating Security Payload,The wesp protocol (Wrapped Encapsulating Security Payload) is found over the IP layer (IANA protocol number: 141).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1748,Q_PROTO_WESTPAC,westpac,,Westpac.com.au,Australia s First Bank with a range of innovative financial packages,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -591,Q_PROTO_WFC,wfc,,Nintendo Wi-Fi Connection,Wi-Fi Connection (WFC) is the Nintendo on-line gaming service for the Wii and DS videogame systems.,Game,https;ssl,"Nintendo Wii,Nintendo DS",PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1093,Q_PROTO_WHATSAPP,whatsapp,,WhatsApp Messenger,"WhatsApp Messenger is a cross-platform, instant, mobile messaging application which allows the users to exchange messages without having to pay for SMS. WhatsApp Messenger is available for iPhone, BlackBerry, Android and Nokia and yes, those phones can all message each other.",Instant Messaging,http;https;ssl;tcp,Mobile-Android-WhatsApp 4.1.1;iPhone-iOS-WhatsApp 4.7.0.2,BlackBerry-BlackBerry OS-WhatsApp-2.11.414.2- (2014-04-07);Mobile-Android-4.2.1-WhatsApp-2.11.238- (2014-06-05);Nokia Mobile-Symbian-WhatsApp-2.11.398- (2014-04-23);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-04);Windows Phone-Windows Phone OS-WhatsApp-2.11.356.0- (2014-03-08),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -921,Q_PROTO_WHOIS,whois,,WHOIS,"WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other information.",Network Service,socks4;socks5;tcp,RFC 3912,3/20/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -600,Q_PROTO_WIICONNECT24,wiiconnect24,,WiiConnect24,"WiiConnect24 is an asynchronous communication protocol implemented on the Nintendo Wii gaming system. It used by some information channels and services embedded in the console, and by some games too.",Game,http;https,20110127,3/1/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1482,Q_PROTO_WIKIA,wikia,,Wikia.com,A free Wiki website hosting service.,Web,http;https,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -222,Q_PROTO_WIKIPEDIA,wikipedia,,Wikipedia.com,Wikipedia is the biggest multilingual free-content encyclopedia on the Internet.,Web,http;https;ssl,iPhone-iOS-Wikipedia Mobile 3.3.1;Mobile-Android-Wikipedia Mobile 1.3.4;PC-Windows-Browser-www.wikipedia.org (2013-10-10),Mobile-Android-Wikipedia-1.3.4- (2014-03-14);PC-Windows-7-Chrome-33.0.1750.117-Wikipedia for Desktop-1.0- (2014-04-24);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);Windows Phone-Windows Phone OS-8-Wikipedia-1.1.0.0- (2014-05-05);iPhone-iOS-Wikipedia-3.3.1- (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1953,Q_PROTO_WILLHABEN,willhaben,,Willhaben.at,Austrian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1288,Q_PROTO_WINDOWS_AZURE,windows_azure,,Windows Azure CDN,This protocol plug-in classifies the ssl traffic to the Common Name msecnd.net.,Web,http;https;ssl,20131115,PC-Linux-BasicTest- (2013-11-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1111,Q_PROTO_WINDOWS_MARKETPLACE,windows_marketplace,,Windows Marketplace,Windows Marketplace is a service by Microsoft for its Windows Phone 7/8 and Microsoft Windows 8 platforms that allows users to browse and download applications that have been developed by third-parties. The website of the chain of retail stores Microsoft Store is also classified.,Application Service,http;https;ssl,Windows Phone-Windows Phone OS 8;Windows Phone-Windows Phone OS 7;PC-Windows 8,PC-Windows-7-Chrome-33.0.1750.154- (2014-01-24);Windows Phone-Nokia Lumia 1320-Windows Phone OS-8-05/05/2014- (2014-01-24),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -562,Q_PROTO_WINDOWS_UPDATE,windows_update,,Windows Update,Windows_update is the protocol used for windows system updates.,Web,http;https;ssl,PC-Windows XP;PC-Windows Vista;PC-Windows 7,PC-Windows-7-7- (2013-10-16);PC-Windows-8-8.1- (2013-10-16);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-- (2013-10-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -298,Q_PROTO_WINDOWSLIVE,windowslive,,Windows Live,"WindowsLive is a pseudo-protocol which classifies generic web services related to the Microsoft ""Live""platform.",Web,http;https;ssl,PC-Windows-Browser-mail.live.com (2012-10-30),,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -513,Q_PROTO_WINDOWSLIVESPACE,windowslivespace,,Windows Live Spaces,This protocol plug-in classifies the http traffic to the host spaces.live.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1073,Q_PROTO_WINDOWSMEDIA,windowsmedia,,WindowsMedia.com,This protocol plug-in classifies the http traffic to the host windowsmedia.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -223,Q_PROTO_WINMX,winmx,,Winmx,"WinMX is a freeware peer-to-peer file sharing program authored by Frontcode Technologies that runs on Microsoft Windows operating systems, and created in 2000.",Peer to Peer,gnutella;socks4;socks5;tcp,3.53,5/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1442,Q_PROTO_WINNY,winny,,winNY,Winny (also known as WinNY) is a Japanese peer-to-peer (P2P) file-sharing program.,Peer to Peer,tcp,20130321,3/21/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -891,Q_PROTO_WINS,wins,,Windows Internet Naming Service,"WINS (Windows Internet Naming Service) is Microsoft's implementation of NetBIOS Name Service (NBNS), which is a name server and service for NetBIOS computer names. This plug-in classifies replication flows between servers. Client-to-Server flows are handled by the nbns plug-in.",Network Service,tcp,Microsoft Windows based networks,6/29/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -514,Q_PROTO_WISEREARTH,wiserearth,x,WiserEarth,This protocol plug-in classifies the http traffic to the host wiserearth.org.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -871,Q_PROTO_WIXI,wixi,,Wixi.com,This protocol plug-in classifies the http traffic to the host wixi.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1228,Q_PROTO_WOORIBANK,wooribank,,WooriBank.com,This protocol plug-in classifies the http traffic to the host wooribank.com. It also classifies the ssl traffic to the Common Name .wooribank.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -297,Q_PROTO_WORDPRESS,wordpress,,WordPress.com,This protocol plug-in classifies the http traffic to the host wordpress.com. It also classifies the ssl traffic to the Common Name wordpress.com.,Web,http;https;ssl,PC-Windows-Browser-www.wordpress.com (2014-02-26);Mobile-Android-Wordpress 2.6.3 (2014-02-26);iPhone-iOS-Wordpress 3.9.1 (2014-02-26);Windows Phone-Windows Phone OS-Wordpress 1.2.0.0 (2014-03-03),BlackBerry-BlackBerry OS-10.2.1.2102-2.3.1-Wordpress-1.6.7- (2014-06-07);Mobile-Android-4.4.2-Wordpress-2.8.1- (2014-05-27);Mobile-Bada-2.058600XXLC3-Wordpress-1.1.1- (2014-06-07);Nokia Mobile-Nokia Xpress 5800-Symbian-Wordpress-2.1.3- (2014-06-07);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);PC-Windows-7-Wordpress-3.8.1- (2014-06-07);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-WordPress for Phone-1.3.2.0- (2014-06-07);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-Wordpress-2.2.0.0- (2014-05-28);iPhone-iOS-7.1-Wordpress-4.0.2- (2014-04-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1914,Q_PROTO_WORKSITE,worksite,,Worksite,WorkSite is a Document Management System (DMS) application. It is primarily used by law firms and corporate legal departments.,File Server,rpc,20130703,PC-Windows-- (2013-07-03),x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, -340,Q_PROTO_WOW,wow,,World of Warcraft,WOW is an online role-playing game.,Game,tcp,4.0.3.13287,1/11/2010,,,,x,wow,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -2078,Q_PROTO_WP,wp,,Wp.pl,Polish news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1429,Q_PROTO_WRETCH,wretch,,Wretch.cc,Taiwanese Photo Album and Blog.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -699,Q_PROTO_WSN,wsn,,Wang Span Network,The wsn protocol (Wang Span Network) is found over the IP layer (IANA protocol number: 74).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2289,Q_PROTO_WSOP,wsop,,World Series of Poker,Mobile game.,Game,amazon_aws;http;https;ssl,iPhone-iOS;Mobile-Android,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,x,,,, -224,Q_PROTO_WSP,wsp,,Wireless Session Protocol,Wireless Session Protocol (WSP) is an application layer protocol present in the WAP stack. It is used by mobile stations to send SMS for example.,Wap,udp;wtp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, -225,Q_PROTO_WTLS,wtls,,Wireless Transport layer Security,"Wireless Transport Layer Security (WTLS) is a security protocol, part of the WAP stack. It sits between the WTP and WDP layers in the WAP communications stack.",Wap,udp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,,, -226,Q_PROTO_WTP,wtp,,Wireless Transaction Protocol,Wireless Transaction Protocol (WTP) is a transport layer protocol which belongs to the WAP stack. It provides a reliable transmission of network packets and is very similar to TCP.,Wap,udp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,,, -227,Q_PROTO_X11,x11,,X Window System,X11 is designed to communicate all the information necessary to operate a window system over a single asynchronous bi-directional stream of 8-bit bytes. The X protocol specifies four types of messages but named extensions can also be defined to extend the system.,Thin Client,tcp,Xorg-x11-1.1.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -228,Q_PROTO_X25,x25,,X.25,"X.25 is a packet switched data network protocol which defines an international recommendation for the exchange of data as well as control information between a user device (host), called Data Terminal Equipment (DTE) and a network node, called Data Circuit Terminating Equipment (DCE).",Audio/Video,xot,CCITT Recommendation X.25;ITU-T Recommendation X.25,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,x,,,,,,,,,,,,,,, -515,Q_PROTO_XANGA,xanga,,Xanga.com,This protocol plug-in classifies the http traffic to the host xanga.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1074,Q_PROTO_XBOX,xbox,,Xbox.com,This protocol plug-in classifies the http traffic to the host xbox.com. It also classifies the ssl traffic to the Common Name .xbox.com.,Web,http;https;ssl,20130427,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -342,Q_PROTO_XBOXLIVE,xboxlive,,Xbox Live,Online multiplayer gaming and digital media delivery service created and operated by Microsoft Corporation.,Game,http;https;ssl;udp;xbox,PC-Windows-Browser-www.xboxlive.com (2013-10-04),Xbox-One-Xbox OS-6.2.10951.0-- (2013-10-04),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1574,Q_PROTO_XBOXLIVE_MARKETPLACE,xboxlive_marketplace,,Xbox Live Marketplace,Xbox Live Marketplace is a service where users can purchase and download games and multimedia.,Game,http;https,20130830,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -592,Q_PROTO_XDMCP,xdmcp,,X Display Manager Control Protocol,XDMCP is an extension of the X11 protocol that addresses the issue of discovering and authenticating available X servers on the LAN.,Thin Client,udp,1.1,2/2/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -2228,Q_PROTO_XENDAN,xendan,,Xendan,Iranian news portal,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1108,Q_PROTO_XFS,xfs,,X Font Server,X Font Server is a standard communication protocol between an X server and a font renderer.,Application Service,tcp,2.0,PC-Linux-CentOS/5.6-X Font Server-1.0.2- (2012-01-24),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1487,Q_PROTO_XHAMSTER,xhamster,,xHamster.com,Pornographic videos streaming platform.,Web,http;https;ssl,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1430,Q_PROTO_XIAMI,xiami,,Xiami.com,Chinese Music P2P community website.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -516,Q_PROTO_XING,xing,,Xing.com,This protocol plug-in classifies the http traffic to the host xing.com. It also classifies the ssl traffic to the Common Name xing.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1263,Q_PROTO_XINHUANET,xinhuanet,,Xinhuanet.com,This protocol plug-in classifies the http traffic to the host xinhuanet.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2190,Q_PROTO_XL,xl,,Xl,Portugese multisites and portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,x,x,,,,,,,x,,,, -2013,Q_PROTO_XL_NONTON,xl_nonton,,XL Nonton,XL Nonton offers access streaming contents via PC and Smartphone.,Audio/Video,http;https;mpegts,"2.1 (Android),20131210",Mobile-Android-XL Nonton-2.1- (2014-06-07);PC-Windows-Chrome- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -1143,Q_PROTO_XL_WAP,xl_wap,,XL wap,This protocol plug-in classifies the http traffic to the host wap.xl.co.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1156,Q_PROTO_XL_WEBMAIL,xl_webmail,,XL Webmail,This protocol plug-in classifies the http traffic to the host webmail.xl.co.id. It also classifies the ssl traffic to the Common Name webmail.xl.co.id.,Web,http;https;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2012,Q_PROTO_XL_WEBPORTAL,xl_webportal,,XL.co.id,Indonesian mobile telecommunications services operator web portal.,Web,http;https,20120719,PC-Windows-Firefox- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1144,Q_PROTO_XLNET,xlnet,,XL.net.id,This protocol plug-in classifies the http traffic to the host xl.net.id.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -872,Q_PROTO_XM_RADIO,xm_radio,,SiriusXm.com,This protocol plug-in classifies the http traffic to the hosts xmradio.com and siriusxm.com. It also classifies the ssl traffic to the Common Name .siriusxm.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -229,Q_PROTO_XMLRPC,xmlrpc,,XMLRPC,"XMLRPC is a remote procedure calling using HTTP as the transport and XML as the encoding. XML-RPC is designed to be as simple as possible, while allowing complex data structures to be transmitted, processed and returned.",Web,http,20080118,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -700,Q_PROTO_XNET,xnet,,Cross Net Debugger,The xnet protocol (Cross Net Debugger) is found over the IP layer (IANA protocol number: 15).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -230,Q_PROTO_XNS,xns,,Xerox Network Systems,Xerox Network Systems is a protocol suite originally designed by Xerox PARC. Many PC networking companies such as Novell and 3Com used or currently use a variation of XNS as their primary transport protocol stack.,Network Service,8021q;eth;snap,XNS v1,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -701,Q_PROTO_XNS_IDP,xns_idp,,XEROX NS IDP,The xns_idp protocol (XEROX NS IDP) is found over the IP layer (IANA protocol number: 22).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1075,Q_PROTO_XNXX,xnxx,,XNXX.com,This protocol plug-in classifies the http traffic to the host xnxx.com.,Web,http;https,PC-Windows-Browser-www.xnxx.com (2014-01-31),PC-Windows-7-Chrome- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -231,Q_PROTO_XOT,xot,,XOT (X25 over TCP),Protocol used to transport x25 data over TCP in IP network.,Tunneling,tcp,XOT v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1076,Q_PROTO_XREA,xrea,,XREA.com,This protocol plug-in classifies the http traffic to the host xrea.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -517,Q_PROTO_XT3,xt3,,Xt3.com,This protocol plug-in classifies the http traffic to the host xt3.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -540,Q_PROTO_XTP,xtp,,XTP,The xtp protocol (XTP) is found over the IP layer (IANA protocol number: 36).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1431,Q_PROTO_XUITE,xuite,,Xuite.net,"Taiwanese blog platform, media file sharing, online games...",Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1077,Q_PROTO_XVIDEOS,xvideos,,Xvideos.com,This protocol plug-in classifies the http traffic to the host xvideos.com.,Web,http;https,PC-Windows-Browser-www.xvideos.com (2013-07-13),Mobile-Android-- (2014-06-07);PC-Windows-7-Chrome- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1078,Q_PROTO_XVIDEOSLIVE,xvideoslive,,Xvideoslive.com,This protocol plug-in classifies the http traffic to the host xvideoslive.com.,Web,http;https;rtmp,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -232,Q_PROTO_XYPLEX,xyplex,,XYPLEX,Xyplex is used to communicate with Xyplex servers.,Network Service,eth;gre,20030724,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1758,Q_PROTO_Y8,y8,,Y8.com,Y8.com has Free Online Mini Games in both Flash and Shockwave,Web,http;https,20131001,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -2232,Q_PROTO_YADRO,yadro,,Yadro,Yadro is an advertising company that is part of a network of sites and other technologies.,Web,http;https;ssl,20140410,PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1294,Q_PROTO_YAHOO,yahoo,,Yahoo.com,Yahoo is a pseudo-protocol which classifies generic web services related to Yahoo.,Web,http;https;ssl,20130001,2/4/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -518,Q_PROTO_YAHOO360PLUSVIETNAM,yahoo360plusvietnam,,Yahoo 360Plus Vietnam,This protocol plug-in classifies the http traffic to the host vn.360plus.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -286,Q_PROTO_YAHOO_ANSWERS,yahoo_answers,,Yahoo Answers,This protocol plug-in classifies the http traffic to the host answers.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -295,Q_PROTO_YAHOO_BIZ,yahoo_biz,x,Yahoo Biz,This protocol plug-in classifies the http traffic to the hosts fr.biz.yahoo.com and finance.yahoo.com.,Web,,20130713,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1432,Q_PROTO_YAHOO_BUY,yahoo_buy,,Yahoo Buy Taiwan,Yahoo Taiwanese Shopping portal.,Web,http;https,20140320,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -873,Q_PROTO_YAHOO_DOUGA,yahoo_douga,,Yahoo Douga,This protocol plug-in classifies the http traffic to the host streaming.yahoo.co.jp.,Web,http;https,20120709,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -308,Q_PROTO_YAHOO_GAMES,yahoo_games,,Yahoo Games,This protocol plug-in classifies the http traffic to the host games.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -299,Q_PROTO_YAHOO_GEOCITIES,yahoo_geocities,,Yahoo Geocities,This protocol plug-in classifies the http traffic to the host geocities.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -233,Q_PROTO_YAHOO_GROUPS,yahoo_groups,,Yahoo groups,"Yahoo! Groups offers free mailing lists, photo and file sharing, group calendars and more.",Forum,yahoo,20110419,5/27/2014,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1237,Q_PROTO_YAHOO_KOREA,yahoo_korea,,Yahoo Korea,This protocol plug-in classifies the http traffic to the hosts yahoo.co.kr and kr.yahoo.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -290,Q_PROTO_YAHOO_MAPS,yahoo_maps,,Yahoo Maps,Yahoo Maps can be used to calculate routes or to look at maps.,Web,nokia_ovi;yahoo,20120828,Mobile-Android-2.3.6-Browser- (2012-09-10);PC-Windows-7-Browser- (2012-09-10);iPhone-iOS-5.0.1-Safari- (2012-09-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -333,Q_PROTO_YAHOO_REALESTATE,yahoo_realestate,,Yahoo Homes,This protocol plug-in classifies the http traffic to the hosts realestate.yahoo.com and homes.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1177,Q_PROTO_YAHOO_SCREEN,yahoo_screen,,Yahoo Screen,This protocol plug-in classifies the http traffic to the host screen.yahoo.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -234,Q_PROTO_YAHOO_SEARCH,yahoo_search,,Yahoo Search,This protocol is used to send queries to the Yahoo search engine.,Web,yahoo,PC-Windows-Browser-search.yahoo.com (2014-02-18);Mobile-Android-Yahoo Search 3.0.6 (2014-03-06);iPhone-iOS-Yahoo Search 3.0.4 (2014-03-06),Mobile-Android-Yahoo Search-3.1.1- (2014-06-10);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-12);Windows Phone-Windows Phone OS-8-Search All-1.1.0.0- (2014-02-18);iPhone-iOS-Yahoo Search-3.1.1- (2014-04-08),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1433,Q_PROTO_YAHOO_STOCK_TW,yahoo_stock_tw,,Yahoo Stock,Yahoo finance Taiwanese portal.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -292,Q_PROTO_YAHOO_TRAVEL,yahoo_travel,,Yahoo Travel,This protocol plug-in classifies the http traffic to the hosts travel.yahoo.com and fr.voyage.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1434,Q_PROTO_YAM,yam,,Yam.com,This protocol plug-in classifies the http traffic to the host yam.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -519,Q_PROTO_YAMMER,yammer,,Yammer.com,Private social network solution for entreprises.,Web,http;https;ssl,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,x,,,,,,, -523,Q_PROTO_YANDEX,yandex,,Yandex.ru,Yandex is a Russian search engine.,Web,http;https;ssl,20120208,PC-Windows-Firefox- (2012-02-22),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -528,Q_PROTO_YANDEX_WEBMAIL,yandex_webmail,,Yandex webmail,Yandex webmail is the Russian webmail on webmail.yandex.ru.,Webmail,http;https;ssl,20121115,PC-Windows-Firefox- (2014-05-27),,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2220,Q_PROTO_YAPO,yapo,,Yapo,Chilian classified ads website,Web,http;https,20140804,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -520,Q_PROTO_YELP,yelp,,Yelp.com,This protocol plug-in classifies the http traffic to the host yelp.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2174,Q_PROTO_YEMEN_NET,yemen_net,,Yemen.net,Yemeni service provider portal,Web,http;https,20140210,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1270,Q_PROTO_YESKY,yesky,,Yesky.com,This protocol plug-in classifies the http traffic to the host yesky.com.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1771,Q_PROTO_YIELDMANAGER,yieldmanager,,Yield Manager,"Yield Manager is an advertising delivery technology operated by Right Media. Since 2007, this has operated as a subsidiary of Yahoo.",Web,yahoo,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1435,Q_PROTO_YIHAODIAN,yihaodian,,Yihaodian.com,Chinese Online shopping.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2145,Q_PROTO_YLE,yle,,Yle.fi,Finnish news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -236,Q_PROTO_YMAIL2,ymail2,,Yahoo Mail v.2.0,This protocol is the ajax based version of Webmail Yahoo.,Webmail,http;yahoo,PC-Windows-Browser-mail.yahoo.com (2012-12-13),PC-Windows-7-Chrome-35.0.1916.114- (2014-06-05);PC-Windows-8-Yahoo! Mail-1.7.0.23- (2014-05-27),,x,,x,,,,,x,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -259,Q_PROTO_YMAIL_CLASSIC,ymail_classic,,Yahoo Mail classic,Yahoo! Mail Classic was the original interface for Yahoo! Mail.,Webmail,http;yahoo,PC-Windows-Browser-mail.yahoo.com (2013-08-30),PC-Windows-7-Chrome-35.0.1916.114- (2014-05-28),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -328,Q_PROTO_YMAIL_MOBILE,ymail_mobile,x,Yahoo webmail for mobile,(Deprecated) Yahoo Mail Mobile is the yahoo.com webmail adapted to mobiles.,Webmail,,20091016,12/26/2012,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -332,Q_PROTO_YMAIL_MOBILE_NEW,ymail_mobile_new,,Yahoo webmail for mobile,Yahoo Mail Mobile_new is the new yahoo.com webmail adapted to mobiles.,Webmail,yahoo,iPhone-iOS-Yahoo! Mail 1.20.0.13;iPad-iOS-Yahoo! Mail 1.20.0.13,BlackBerry-BlackBerry OS-10.2.1.2102-Mail Mail-1.0.3.0- (2014-05-08);Mobile-Moto G-Android-4.4.2-Yahoo Mail-4.0.2- (2014-06-05);Nokia Mobile-Symbian-111.040.1511-Browser- (2014-03-10);Windows Phone-Windows Phone OS-8-Yahoo Mail-2.1.0.0- (2014-06-04);iPhone-iOS-7.1.1-Yahoo Mail-3.0.1- (2014-06-04),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -237,Q_PROTO_YMSG,ymsg,,Yahoo Messenger,"Yahoo Messenger is used by the Yahoo Instant Messenger application to send instant messages, files and emails between users.",Instant Messaging,http;sip;tcp;yahoo,10.0.0.1270,5/27/2014,,x,,x,,,,,,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, -238,Q_PROTO_YMSG_CONF,ymsg_conf,,Yahoo Messenger conference service,"This protocol is used in signaling part in a conference. Please note that since version 11.5.0, voice calls are not supported, therefore rtp inheritance is deprecated.",Instant Messaging,tcp;udp,10.0.0.1270,7/4/2008,,,,x,,,,,,x,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, -255,Q_PROTO_YMSG_TRANSFER,ymsg_transfer,,Yahoo Messenger Transfer Protocol,This protocol is used for file tranfers over ymsg.,File Transfer,yahoo,9.4,5/27/2014,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -239,Q_PROTO_YMSG_VIDEO,ymsg_video,,Yahoo Messenger Video,(versions prior to 10.0.0.270) This protocol is used by Yahoo Messenger for video conversations.,Audio/Video,tcp,10.0.0.1270,10/2/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, -276,Q_PROTO_YMSG_WEBMESSENGER,ymsg_webmessenger,,Yahoo Webmessenger,Yahoo webmessenger.,Instant Messaging,http;tcp;yahoo,PC-Windows-Browser-messenger.yahoo.com (2013-08-30),PC-Windows-7-Chrome-35.0.1916.114- (2014-05-27),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, -2079,Q_PROTO_YNET,ynet,,Ynet.co.il,Israeli news portal,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1436,Q_PROTO_YOKA,yoka,,Yoka.com,Chinese fashion portal.,Web,http;https,20130215,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1327,Q_PROTO_YOMIURI,yomiuri,,Yomiuri.co.jp,Japanese news web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -874,Q_PROTO_YOONO,yoono,,Yoono.com,This protocol plug-in classifies the http traffic to the host .yoono.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, -1079,Q_PROTO_YOUDAO,youdao,,Youdao.com,This protocol plug-in classifies the http traffic to the host youdao.com. It also classifies the ssl traffic to the Common Name .youdao.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -875,Q_PROTO_YOUKU,youku,,Youku.com,Youku is a Chinese video hosting web service.,Web,apple_hls;http;https;mms;ssl;udp,PC-Windows-Browser-www.youku.com (2014-01-24);Mobile-Android-youku (2014-01-24);iPhone-iOS-youku (2014-01-24);Windows Phone-Windows Phone OS-youku (2014-01-25),Mobile-Moto G-Android-4.4.2-Youku-4.0- (2014-05-09);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-7-Youku-4.6.0.4221- (2014-06-03);Windows Phone-Nokia Lumia 1320-Windows Phone OS-8.0.10521.155-Youku-3.2.0.0- (2014-05-05);iPhone-iOS-7.1.1-Youku-3.6- (2014-05-14),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1080,Q_PROTO_YOUM7,youm7,,Youm7.com,This protocol plug-in classifies the http traffic to the host youm7.com.,Web,http;https,20110930,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -521,Q_PROTO_YOUMEO,youmeo,,CalumBrannan.com,This protocol plug-in classifies the http traffic to the host calumbrannan.com.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1297,Q_PROTO_YOUNI,youni,,Youni SMS,Youni SMS is a totally free mobile messaging application.,Instant Messaging,http;https;jabber,3.1.0 (iOS and Android),1/24/2013,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -1081,Q_PROTO_YOUPORN,youporn,,Youporn.com,This protocol plug-in classifies the http traffic to the hosts youporn.com and youporn.phncdn.com.,Web,http;https,20130207,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -876,Q_PROTO_YOURFILEHOST,yourfilehost,,YourFileHost.com,This protocol plug-in classifies the http traffic to the host yourfilehost.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1965,Q_PROTO_YOURFILES_BIZ,yourfiles_biz,,yourfiles.biz,Classifies web browsing on the yourfiles.biz Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -877,Q_PROTO_YOUSEEMORE,youseemore,,YouSeeMore.com,This protocol plug-in classifies the http traffic to the host youseemore.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -878,Q_PROTO_YOUSENDIT,yousendit,,Hightail.com,Cloud file storage service with professional services.,Web,http;https;ssl,20130828,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -240,Q_PROTO_YOUTUBE,youtube,,Youtube.com,Youtube is a website where users can send or watch videos.,Web,http;https;rtmp;ssl,PC-Windows-Browser-www.youtube.com (2013-10-25),BlackBerry-BlackBerry OS-Player for youtube-1.3.15- (2014-05-30);Mobile-Android-4.4.2-Youtube-5.6.36- (2014-06-03);Mobile-Bada-1.0-Youtube-Youtube for bada 2.0- (2014-04-02);Nokia Mobile-Symbian-YouTube-2.3.17- (2014-04-03);PC-Windows-7-Chrome-32.0.1700.107-Youtube-4.2.6- (2014-02-13);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-02);Windows Phone-Windows Phone OS-8-YouTube-3.2.0.0- (2014-02-12);iPhone-iOS-7.1.1-YouTube-2.6.0.11251- (2014-06-04),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -558,Q_PROTO_YOUTUBE_HD,youtube_hd,x,Youtube HD,Youtube HD classification ensures that the user is watching a High Definition video (at least 720 lines).,Web,,PC-Windows-Browser-www.youtube.com (2014-03-13),Mobile-Android-4.4.2-Youtube-5.6.36- (2014-06-03);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-02);Windows Phone-Windows Phone OS-8-YouTube HD-3.33- (2014-06-03);iPhone-iOS-7.1.1-Youtube-2.6.0.11251- (2014-05-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1915,Q_PROTO_YPBIND,ypbind,,Yellow Page Bind,"The ypbind utility is the process that maintains NIS binding information. At startup, it searches for an NIS server responsible for serving the system's default domain (as set by the domainname(1) command) using net-work broadcasts",Network Service,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, -241,Q_PROTO_YPPASSWD,yppasswd,,Yellow Page Passwd,The Yellow Page Password protocol enables the modification of logins and passwords in Network Interface System cards.,Authentication,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, -242,Q_PROTO_YPSERV,ypserv,,Yellow Pages Server,Yellow Pages Server is a protocol used to distribute NIS databases to client systems within an NIS domain.,Authentication,rpc,RPC v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, -243,Q_PROTO_YPUPDATE,ypupdate,,Yellow Pages Update,The Yellow Pages Update protocol enables information updates in Network Information Services (NIS) cards.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, -746,Q_PROTO_YTIMG,ytimg,x,Ytimg.com,This protocol plug-in classified the http traffic to the host .ytimg.com. This traffic is now classified as youtube.,Web,,PC-Windows-Browser-*.ytimg.com (2011-03-31),10/3/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -879,Q_PROTO_YUGMA,yugma,,Yugma.com,This protocol plug-in classifies the http traffic to the host yugma.com. It also classifies the ssl traffic to the Common Name yugma.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -880,Q_PROTO_YUUGUU,yuuguu,,Yuugu.com,This protocol plug-in classifies the http traffic to the host share.yuuguu.com. It also classifies the ssl traffic to the Common Name share.yuuguu.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1114,Q_PROTO_ZABBIX_AGENT,zabbix_agent,,Zabbix agent,Agent for Zabbix monitoring server. Uses TCP port 10050.,Network Management,tcp,1.8,PC-Linux-Zabbix Agent-1.8.11- (2012-04-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -2146,Q_PROTO_ZALUU,zaluu,,Zaluu.com,Mongolian news portal,Web,http;https,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2080,Q_PROTO_ZAMUNDA,zamunda,,Zamunda.net,Bulgarian Torrent tracker,Web,http;https,20140117,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -279,Q_PROTO_ZATTOO,zattoo,,Zattoo.com,Zattoo is website and a set of peer-to-peer TV applications.,Audio/Video,akamai;http;https;ssl,"Web 2012/02/21, ios v1.3.1, windows v4.0.5, android v1.0.4",Mobile-Android-Zattoo-1.0.4- (2014-06-07);PC-Windows-Firefox- (2014-06-07);Windows Phone-Windows Phone OS-Zattoo-4.0.5- (2014-06-07);iPhone-iOS-Zattoo-1.3.1- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -346,Q_PROTO_ZELUNE,zelune,,Zelune,HTTP redirector service (anonymizing proxy).,Web,http;https,20140220,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2282,Q_PROTO_ZENDESK,zendesk,,Zendesk,"Zendesk is a cloud-based customer service platform, that includes ticketing, self-service options, and customer support features.",Web,http;https;ssl,20140513,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1159,Q_PROTO_ZIDDU,ziddu,,Ziddu.com,Ziddu is an online solution to upload and share files.,Web,http;https;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -311,Q_PROTO_ZIMBRA,zimbra,,Zimbra.com,Zimbra provides open source server and client software for messaging and collaboration.,Webmail,http;https,20130130,5/27/2014,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -325,Q_PROTO_ZIMBRA_STANDARD,zimbra_standard,,Zimbra Webmail Standard Version,zimbra_standard is the called standard version for the zimbra webmail.,Webmail,http;https,20090907,3/27/2012,,x,,,,,,,x,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2147,Q_PROTO_ZING,zing,,Zing.vn,Vietnamese classified ads.,Web,http;https;ssl,20140131,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1449,Q_PROTO_ZOHO,zoho,,Zoho Corporation,Zoho is a software development company providing online office suite named Zoho Office Suite.,Web,http;https;ssl,20140617,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -881,Q_PROTO_ZOHO_CRM,zoho_crm,,Zoho CRM,This protocol plug-in classifies the http traffic to the host crm.zoho.com. It also classifies the ssl traffic to the Common Name crm.zoho.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -882,Q_PROTO_ZOHO_DB,zoho_db,,ZOHO DB and Reports,The ZOHO DB and Reports is an online database and reporting application.,Web,facebook;http;https,20110707,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,x,,,,,, -883,Q_PROTO_ZOHO_IM,zoho_im,,Zoho Chat,Multi-protocol Instant Messaging web service owned by ZOHO Corp.,Instant Messaging,http;https;ssl,20140314,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -884,Q_PROTO_ZOHO_MEETING,zoho_meeting,,Zoho Meeting,"This protocol plug-in classifies the http traffic to the hosts wms8.zoho.com, chat.zoho.com and meeting.zoho.com. It also classifies the ssl traffic to the Common Name meeting.zoho.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1490,Q_PROTO_ZOHO_NOTEBOOK,zoho_notebook,,Zoho Notebook,Zoho Notebook application classification.,Web,http;https,20130531,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -885,Q_PROTO_ZOHO_PEOPLE,zoho_people,,Zoho People,This protocol plug-in classifies the http traffic to the host wms2.zoho.com.,Web,http;https,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1491,Q_PROTO_ZOHO_PLANNER,zoho_planner,,Zoho Planner,Zoho Planner application classification.,Web,http;https,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1492,Q_PROTO_ZOHO_SHARE,zoho_share,,Zoho Share,Zoho Share application classification.,Web,http;https,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1493,Q_PROTO_ZOHO_SHEET,zoho_sheet,,Zoho Sheet,Zoho Sheet application classification.,Web,http;https,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1494,Q_PROTO_ZOHO_SHOW,zoho_show,,Zoho Show,Zoho Show application classification.,Web,http;https,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1262,Q_PROTO_ZOL,zol,,Zol.com.cn,This protocol plug-in classifies the http traffic to the host zol.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2290,Q_PROTO_ZOMBIE_TSUNAMI,zombie_tsunami,,Zombie Tsunami,Mobile game.,Game,http;https,iPhone-iOS;Mobile-Android,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, -754,Q_PROTO_ZONEALARM_UPDATE,zonealarm_update,,ZoneAlarm Updates,This protocol plug-in classifies the http traffic to the hosts zonealarm.com and zonelabs.com. It also classifies the ssl traffic to the Common Name cm1.zonealarm.com.,Antivirus,http;https;ssl,ZoneAlarm Extreme Security Edition 9.3,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -522,Q_PROTO_ZOO,zoo,,Zoo.gr,This protocol plug-in classifies the http traffic to the host zoo.gr.,Web,http;https,20110331,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1954,Q_PROTO_ZOZNAM,zoznam,,Zoznam.sk,Slovakian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -315,Q_PROTO_ZSHARE,zshare,,zShare.com,"zShare is an online solution to store, send and share files.",Web,http;https,20120102,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1198,Q_PROTO_ZUM,zum,,Zum.com,This protocol plug-in classifies the http traffic to the host zum.com.,Web,http;https,20120719,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1285,Q_PROTO_ZYNGA,zynga,,Zynga.com,Zynga is a social network oriented on-line video games editor.,Web,akamai;http;https;ssl,20140114,PC-Linux-BasicTest- (2014-06-07),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, +,,,,,,,,,,,Classification,,,,,,Offloading,,,,,Tags,,,,,,,,,,,,,,,,,,,,,,,,, +,id,protocol_id_name,name,deprecated,longname,description,family,layer_below,supported version,Last checked versions,explicit,PDATA Signature(s),ip,pattern,correlation,Port based classification over SSL,tunneling,multiplexing,signalization,inheritance,declassification,basic,networking,email,webmail,im_mc,chat,audio_chat,video_chat,file_transfer,social_network,voip,web,web_search,web_ecom,web_sites,mobile,p2p,file_mngt,db,enterprise,update,gaming,aaa,remote_access,mm_streaming,vpn_tun +,948,Q_PROTO_01NET,01net,,01net.com,This protocol plug-in classifies the http traffic to the host 01net.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1123,Q_PROTO_050PLUS,050plus,,050 plus,050 plus is a Japanese embedded smartphone application dedicated to audio-conferencing.,Audio/Video,http;https;sip;spdy;ssl,iPhone-iOS-050plus 3.3.0;Mobile-Android-050plus 3.3.0,Mobile-Android-050Plus-2.1.5- (2012-05-30);iPhone-iOS-5.0.1-050Plus-2.0.4- (2012-05-30),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,,,,,,,,,,, +,584,Q_PROTO_0ZZ0,0zz0,,0zz0.com,"0zz0 is an online solution to store, send and share files",Web,http;https;spdy,20101216,PC-Windows-Chromium- (2010-12-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1339,Q_PROTO_10050NET,10050net,,10050.net,China Railcom group web portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,949,Q_PROTO_10086CN,10086cn,,10086.cn,This protocol plug-in classifies the http traffic to the host 10086.cn. It also classifies the ssl traffic to the Common Name 10086.cn.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1336,Q_PROTO_104COM,104com,,104.com,Web site dedicated to job research.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1338,Q_PROTO_1111TW,1111tw,,1111.com.tw,Website dedicated to job research in Taiwan.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,950,Q_PROTO_114LA,114la,,114la.com,This protocol plug-in classifies the http traffic to the host 114la.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,951,Q_PROTO_115COM,115com,,115.com,This protocol plug-in classifies the http traffic to the host 115.com. It also classifies the ssl traffic to the Common Name 115.com.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,952,Q_PROTO_118114CN,118114cn,,118114.cn,This protocol plug-in classifies the http traffic to the host 118114.cn.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1191,Q_PROTO_11ST,11st,,11st.co.kr,This protocol plug-in classifies the http traffic to the host 11st.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,953,Q_PROTO_123PEOPLE,123people,,123people.com,This protocol plug-in classifies the http traffic to the host 123people.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1700,Q_PROTO_1337X,1337x,,1337x.org,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1819,Q_PROTO_15MIN,15min,,15min.lt,Lithuanian news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1242,Q_PROTO_163COM,163com,,163.com,This protocol plug-in classifies the http traffic to the host 163.com. It also classifies the ssl traffic to the Common Name .163.com.,Web,http;https;spdy;ssl,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1340,Q_PROTO_17173COM,17173com,,17173.com,Website distributing Chinese games.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1341,Q_PROTO_17U,17u,,17u.com,Chinese online travel booking website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,2017,Q_PROTO_20MIN,20min,,20min.ch,Swiss news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1820,Q_PROTO_24H,24h,,24h.com.vn,Vietnamese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1821,Q_PROTO_24ORA,24ora,,24ora.com,Aruban news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1822,Q_PROTO_24SATA,24sata,,24sata.hr,Croatian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1823,Q_PROTO_24UR,24ur,,24ur.com,Slovenian news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1316,Q_PROTO_2CH,2ch,,2ch.net,Japanese adult videos web site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,266,Q_PROTO_2SHARED,2shared,,2shared.com,2shared is an online space for sharing and storage.,Web,http;https;spdy,20090312,PC-Windows-- (2009-07-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1248,Q_PROTO_360BUY,360buy,x,360buy.com,This protocol plug-in classified the http traffic to the host 360buy.com.,Web,,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1255,Q_PROTO_360CN,360cn,,360.cn,This protocol plug-in classifies the http traffic to the host 360.cn.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1437,Q_PROTO_3GPP_LI,3gpp_li,,3GPP LI,3gpp_li is a protocol which form a standard for telecoms operators and networks operators.,Tunneling,base,33.108 7.3.0,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,606,Q_PROTO_3PC,3pc,,Third Party Connect,The 3pc protocol (Third Party Connect Protocol) is found over the IP layer (IANA protocol number: 34).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1269,Q_PROTO_4399COM,4399com,,4399.com,This protocol plug-in classifies the http traffic to the host 4399.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,267,Q_PROTO_4SHARED,4shared,,4shared.com,4shared is an online space for sharing and storage.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.4shared.com (2014-02-20);PC-Windows-4shared 4.0.3.1 (2014-01-17);Mobile-Android-4shared 2.2.1 (2014-02-10);iPhone-iOS-4shared 1.8.0 (2014-01-15);Symbian-4shared 2.10.S.05 (2014-02-19);Windows Phone-Windows Phone OS 8-4shared 1.5 (2014-02-11);BlackBerry-BlackBerry OS-4shared 1.4.1.5 (2014-02-27);Mac-Mac OS-4shared 1.3 (2014-02-17);PC-Linux-4shared 1.3 (2014-02-17),BlackBerry-BlackBerry OS-4shared-1.4.1.5- (2014-07-11);BlackBerry-BlackBerry OS-4shared-1.4.1.5-KR (2014-07-11);Mac-Mac OS-4shared-1.3- (2014-07-11);Mac-Mac OS-4shared-1.3-KR (2014-07-11);Mobile-Moto G-Android-4.4.2-4shared-2.5.0- (2014-07-11);Mobile-Moto G-Android-4.4.2-4shared-2.5.0-KR (2014-07-11);Nokia Mobile-Nokia Asha 311-Symbian-4shared-0.4.8- (2014-07-11);Nokia Mobile-Symbian-4shared-2.10.S.05-KR (2014-07-11);PC-Linux-4shared-1.3- (2014-07-11);PC-Linux-4shared-1.3-KR (2014-07-11);PC-Windows-4shared-4.0.3.1-KR (2014-07-11);PC-Windows-7-4shared-4.0.3.1- (2014-07-11);PC-Windows-Chrome-35.0.1916.153- (2014-07-11);Windows Phone-Windows Phone OS-8-BoxFiles 4Shared Free-1.5- (2014-07-11);Windows Phone-Windows Phone OS-8-BoxFiles 4Shared Free-1.5-KR (2014-07-11);iPhone-4S-iOS-7.1.2-4shared-2.7.0.91- (2014-07-11);iPhone-4S-iOS-7.1.2-4shared-2.7.0.91-KR (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1505,Q_PROTO_51_COM,51_com,,51.com,"Provide social networking applications ( http://www.51.com ), IM, music, photo albums.",Web,http;https;spdy,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1508,Q_PROTO_51_COM_BBS,51_com_bbs,,51.com BBS,"BBS, Forum ( bbs.51.com )",Web,51_com,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1506,Q_PROTO_51_COM_MUSIC,51_com_music,,51.com Music,Music streaming ( http://music.51.com ),Web,51_com,20130715,10/17/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1507,Q_PROTO_51_COM_POSTING,51_com_posting,,51.com Posting,Collaboration web site ( http://home.51.com/posting ),Web,51_com,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1278,Q_PROTO_51JOB,51job,,51job.com,This protocol plug-in classifies the http traffic to the host 51job.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1277,Q_PROTO_51LA,51la,,51.la,This protocol plug-in classifies the http traffic to the host 51.la.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1259,Q_PROTO_56COM,56com,,56.com,This protocol plug-in classifies the http traffic to the host 56.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1257,Q_PROTO_58COM,58com,,58.com,This protocol plug-in classifies the http traffic to the host 58.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1337,Q_PROTO_591TW,591tw,,591.com.tw,Taiwanese real estate web site.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,2283,Q_PROTO_5PMWEB,5pmweb,,5pm - project management on time,5pmweb is a web-based project and task management software for teams.,Web,http;https;spdy;ssl,2294,7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,2292,Q_PROTO_6PLAY,6play,,6play,French mobile application provifing tv live broadcast and catchup TV.,Audio/Video,apple_hls;flurry;http;https;spdy,iPhone-iOS-6play 3.0.1;Mobile-Android-6play 3.0.1,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, +,1342,Q_PROTO_7K7K,7k7k,,7k7k.com,Chinese game portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,7,Q_PROTO_8021Q,8021q,,802.1Q Ethernet VLAN,802.1Q is a protocol which allows sending VLAN membership information of a frame.,Network Service,eth,8021q,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1290,Q_PROTO_802_11,802_11,,802.11,The 802.11 protocol is used to carry data (at MAC level) on IEEE 802.11 Wireless Local Area Networks.,Network Service,capwap,IEEE 802.11,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1335,Q_PROTO_91COM,91com,,91.com,The TQ game entertainment portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,2081,Q_PROTO_999_MD,999_md,,999.md,Moldavian classified ads,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1343,Q_PROTO_9GAME,9game,,9game.com,Chinese game distribution platform.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,2208,Q_PROTO_A_DAKAR,a_dakar,,A.dakar,Senegalese news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2225,Q_PROTO_AASTOCKS,aastocks,,Aastocks,Chinese financial services and stock market website,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1690,Q_PROTO_ABC,abc,,ABC Bittorrent client,ABC is a Bittorrent client based on BitTornado,Peer to Peer,bittorrent;http;https;spdy,3.1,PC-Windows-ABC-3.1- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,1824,Q_PROTO_ABC_NEWS,abc_news,,ABC.com.py,Paraguayan news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,954,Q_PROTO_ABCNEWS,abcnews,,ABCNews.go.com,This protocol plug-in classifies the http traffic to the hosts abcnews.com and abcnews.go.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1825,Q_PROTO_ABIDJAN,abidjan,,Abidjan.net,Cote d Ivoire news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2018,Q_PROTO_ABOLA,abola,,Abola.pt,Portugese sports news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,955,Q_PROTO_ABOUT,about,,About.com,This protocol plug-in classifies the http traffic to the host about.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1826,Q_PROTO_ABV,abv,,Abv.bg,Bulgarian webmail,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,956,Q_PROTO_ACCUWEATHER,accuweather,,AccuWeather.com,This protocol plug-in classifies the http traffic to the host accuweather.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,957,Q_PROTO_ACER,acer,,Acer.com,This protocol plug-in classifies the http traffic to the host acer.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,958,Q_PROTO_ACROBAT,acrobat,,Acrobat.com,This protocol plug-in classifies the http traffic to the host www.acrobat.com. It also classifies the ssl traffic to the Common Name www.acrobat.com.,Web,http;https;spdy,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,939,Q_PROTO_ACSE,acse,,Association Control Service,ISO 8650-1/X.227 OSI Association Control SErvice (ACSE).,Network Service,pp,ISO 8650-1/X.227,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,607,Q_PROTO_ACTIVENET,activenet,,Active Networks,The activenet protocol (Active Networks) is found over the IP layer (IANA protocol number: 107).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,911,Q_PROTO_ACTIVESYNC,activesync,,Microsoft ActiveSync,"Microsoft ActiveSync is a mobile data synchronization technology and protocol developed by Microsoft, originally released in 1996.",Web,rpc,20110209,8/2/2011,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1438,Q_PROTO_ADC,adc,,Advanced Direct Connect,ADC is a peer-to-peer protocol widely used in Direct Connect networks. It superseeds the protocol NMDC and corrects many flaws identified in this older protocol.,Peer to Peer,socks4;socks5;ssl;tcp;udp,DC++ v0.830 (ADC 1.0.3),2/28/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1782,Q_PROTO_ADCASH,adcash,,Adcash Advertising Network,Adcash is an international Ad network providing Internet publishers,Web,http;https;spdy;ssl,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,960,Q_PROTO_ADDICTINGGAMES,addictinggames,,Addictinggames.com,This protocol plug-in classifies the http traffic to the host addictinggames.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2231,Q_PROTO_ADDTHIS,addthis,,AddThis,AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.,Web,http;https;spdy;ssl,PC-Windows-Browser-http://www.addthis.com/ (2014-06-17),PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,758,Q_PROTO_ADNSTREAM,adnstream,,ADNStream.tv,This protocol plug-in classifies the ssl traffic to the Common Name adnstream.tv.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2280,Q_PROTO_ADOBE,adobe,,Adobe,Adobe Systems is a computer software company. It develops graphic designer software and Andio and Video editing and visual effects. This plug-in classifies traffic to the website.,Web,http;https;spdy;ssl,20140513,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,929,Q_PROTO_ADOBE_CONNECT,adobe_connect,,Adobe Connect,"Adobe Connect is a web communication system for the training, the marketing, the conferences and the online collaboration.",Audio/Video,http;https;rtmp;spdy;ssl,Adobe connect 8;20130830,10/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +,759,Q_PROTO_ADOBE_MEETING_RC,adobe_meeting_rc,,Adobe Meeting Remote Control,"This protocol plug-in classifies the http traffic to the hosts connectpro97286496.emea.acrobat.com, connectpro97286496.adobeconnect.com and www.emea.acrobat.com. It also classifies the ssl traffic to the Common Name emea.acrobat.com.",Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,x,,,,,,, +,1556,Q_PROTO_ADOBE_ONLINE_OFFICE,adobe_online_office,,Adobe online office,Online collaborative office. ( http://www.acrobat.com/main/fr_FR/home.html ),Web,https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,549,Q_PROTO_ADOBE_UPDATE,adobe_update,,Adobe Update Manager,The Adobe Update Manager is a program which maintains up-to-date versions of Adobe Acrobat Reader software.,Web,http;https;spdy;ssl,PC-Windows-Adobe Reader 10.1.8,Mac-Mac OS-10.9.3-Adobe Reader-11.0.07- (2014-06-11);PC-Windows-Adobe Reader-11.0.07- (2014-06-10),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,760,Q_PROTO_ADRIVE,adrive,,Adrive.com,This protocol plug-in classifies the http traffic to the host adrive.com. It also classifies the ssl traffic to the Common Name adrive.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1794,Q_PROTO_ADSERVERPLUS,adserverplus,,Adserverplus,Online advertisement,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,961,Q_PROTO_ADULTADWORLD,adultadworld,,AdultAdWorld.com,This protocol plug-in classifies the http traffic to the host adultadworld.com.,Web,http;https;spdy,PC-Windows-Browser-www.adultadworld.com (2013-07-13),PC-Linux-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,962,Q_PROTO_ADULTFRIENDFINDER,adultfriendfinder,,AdultFriendFinder.com,This protocol plug-in classifies the http traffic to the host adultfriendfinder.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,357,Q_PROTO_ADVOGATO,advogato,,Advogato.org,This protocol plug-in classifies the http traffic to the host advogato.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1827,Q_PROTO_AFTONBLADET,aftonbladet,,Aftonbladet.se,Swedish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,963,Q_PROTO_AGAME,agame,,Agame.com,This protocol plug-in classifies the http traffic to the host agame.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,720,Q_PROTO_AH,ah,,Authentication Header,The ah protocol (Authentication Header) is found over the IP layer (IANA protocol number: 51).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,964,Q_PROTO_AIAIGAME,aiaigame,,AiAiGame.com,This protocol plug-in classifies the http traffic to the host aiaigame.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,2185,Q_PROTO_AIB,aib,,Aib,Irish banking website,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1344,Q_PROTO_AILI,aili,,Aili.com,Chinese fashion shopping website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,8,Q_PROTO_AIM,aim,,AOL Instant Messenger (formerly OSCAR),AIM (originally AOL Instant Messenger) is an instant messaging application. The protocol name is OSCAR (Open System for CommunicAtion in Realtime) and is used in both ICQ and AIM services. [Note: aim is also known as oscar.],Instant Messaging,http;https;rtmp;scorecardresearch;spdy;tcp,PC-Windows-Aim 8.0;PC-Windows-Aim 7.5.9;PC-Windows 7-Pidgin 2.10.7 (2013-07-25),Mac-Mac OS-AIM-8.0.5.2- (2014-01-21);Mobile-Moto G-Android-4.4.2-AIM-2.7.5.5- (2014-05-04);PC-Linux-Chromium- (2014-07-01);PC-Windows-7-AIM-8.0.7.1- (2014-04-12);PC-Windows-Pidgin-2.10.7- (2013-07-25);iPhone-iOS-7.1.2-AIM-6.0.1.9- (2014-07-04),,x,,x,,,,,x,x,x,,,,,x,x,,,x,,,,,,,,,,,,,,,,, +,275,Q_PROTO_AIM_EXPRESS,aim_express,,AIM express,"AOL Instant Messaging Express supports many of the standard features included in AIM, but does not provide advanced features like file transfer, audio chat or video conferencing",Instant Messaging,http;https;spdy;ssl,v0.1,10/15/2012,,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, +,245,Q_PROTO_AIM_TRANSFER,aim_transfer,,AIM Transfer,AIM is an instant messaging protocol,File Transfer,tcp,<=6.5,10/2/2008,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,1239,Q_PROTO_AIMINI,aimini,,Aimini.net,"Aimini is an online solution to store, send and share files.",File Server,http;https;spdy,20120802,PC-Windows-Chrome-21.0.1180.89m- (2014-07-11);PC-Windows-Internet Explorer-8.0.7600- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,x,,,,,,,, +,281,Q_PROTO_AIMS,aims,,Secure AIM,AIMS is the secure version of AIM.,Instant Messaging,http;https;spdy;ssl,aimv7,6/10/2011,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,2196,Q_PROTO_AIR_VIDEO,air_video,,Air Video,"Air Video can stream videos to your iPhone, iPad and iPod touch.",Audio/Video,apple_hls;http;https;spdy,iPhone-iOS-Air Video Free 2.4.16 (2014-03-19),iPhone-iOS-Air Video-2.4.16- (2014-03-21),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, +,761,Q_PROTO_AIRAIM,airaim,,AirAIM.com,This protocol plug-in classifies the http traffic to the host airaim.com. It also classifies the ssl traffic to the Common Name airaim.com.,Instant Messaging,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1268,Q_PROTO_AIZHAN,aizhan,,Aizhan.com,This protocol plug-in classifies the http traffic to the host aizhan.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1284,Q_PROTO_AKAMAI,akamai,,Akamai Technologies CDN,"This protocol plug-in classifies the http traffic to the hosts akamai.net, akamaihd.net, akamaiedge.net, edgesuite.net, edgekey.net and srip.net. It also classifies the ssl traffic to the Common Names akamai.net and akamaihd.net.",Web,http;https;spdy;ssl,20121025,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2214,Q_PROTO_AKINATOR,akinator,,Akinator the Genie,Mobile game.,Game,flurry;google_ads;http;https;spdy,Mobile-Android-Akinator the Genie FREE 2.45;iPhone-iOS-Akinator the Genie 2.4.1,Mobile-Android-Akinator the Genie-2.45- (2014-03-27);iPhone-iOS-Akinator the Genie-2.4.1- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1828,Q_PROTO_AKTUALITY,aktuality,,Aktuality.sk,Slovak news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2019,Q_PROTO_ALAKHBAR,alakhbar,,Alakhbar.info,Mauritanian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2265,Q_PROTO_ALBAWABHNEWS,albawabhnews,,Albawabhnews,Egyptian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,965,Q_PROTO_ALEXA,alexa,,Alexa.com,This protocol plug-in classifies the http traffic to the host alexa.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1829,Q_PROTO_ALFAJERTV,alfajertv,,Alfajertv.com,Palestinian news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1258,Q_PROTO_ALIBABA,alibaba,,Alibaba.com,Alibaba is the world largest online business-to-business trading platform for small businesses.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2020,Q_PROTO_ALIEXPRESS,aliexpress,,AliExpress.com,Chinese ecommerce website,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1275,Q_PROTO_ALIMAMA,alimama,,Alimama.com,This protocol plug-in classifies the http traffic to the host alimama.com.,Web,http;https;spdy;ssl,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1250,Q_PROTO_ALIPAY,alipay,,Alipay.com,This protocol plug-in classifies the http traffic to the host alipay.com. It also classifies the ssl traffic to the Common Name alipay.com.,Web,http;https;spdy;ssl,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,966,Q_PROTO_ALJAZEERA,aljazeera,,AlJazeera.net,This protocol plug-in classifies the http traffic to the host aljazeera.net.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,762,Q_PROTO_ALL_SLOTS_CASINO,all_slots_casino,,All Slots Casino,This protocol plug-in classifies the http traffic to the host setup.realgaming.com.,Game,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1830,Q_PROTO_ALLEGRO,allegro,,Allegro.pl,Polish shopping web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2003,Q_PROTO_ALLMUSIC,allmusic,,AllMusic.com,"Allmusic is an online music guide service website. This plug-in classifies navigation on the AllMusic web service, and MP3 music playback. Video clip streaming is handled by youtube.",Audio/Video,http;https;spdy,20131211,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,967,Q_PROTO_ALLOCINE,allocine,,AlloCine.fr,This protocol plug-in classifies the http traffic to the host allocine.fr.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1831,Q_PROTO_ALMANAR,almanar,,AlManar.com,Lebanese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2264,Q_PROTO_ALMASRYALYOUM,almasryalyoum,,Almasryalyoum,Egyptian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1832,Q_PROTO_ALNILIN,alnilin,,Alnilin.com,Sudanese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1833,Q_PROTO_ALRAKOBA,alrakoba,,Alrakoba.net,Sudanese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,897,Q_PROTO_ALTIRIS,altiris,,Altiris,Altiris provides service-oriented management solutions which allow managing IT infrastructures.,Network Management,http;https;spdy;tcp,Altiris Client Management Suite 7.1,6/28/2011,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,2021,Q_PROTO_ALWAKEELNEWS,alwakeelnews,,Alwakeelnews.com,Jordanian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1834,Q_PROTO_ALWATANVOICE,alwatanvoice,,Alwatanvoice.com,Palestinian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,968,Q_PROTO_AMAZON,amazon,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the generic http trafic to Amazon services.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.amazon.com (2012-10-25);Windows Phone-Windows Phone OS-Amazon 2.2.82.13 (2014-02-25),BlackBerry-BlackBerry OS-10.2.1.3175-Search for Amazon-1.4.10.4- (2014-06-09);Mobile-Android-4.4.2-Amazon-2.10.0- (2014-06-12);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);PC-Windows-8-Amazon-3.1.2.7- (2014-06-18);Windows Phone-Windows Phone OS-8-Amazon Mobile-2.3.82.9- (2014-07-01);iPhone-iOS-7.1.1-Amazon-3.5.1- (2014-06-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2207,Q_PROTO_AMAZON_ADSYSTEM,amazon_adsystem,,Amazon Adsytem,This protocol plug-in classifies the trafic related to Amazon adsystem services.,Web,amazon,20140225,PC-Linux-BasicTest- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1183,Q_PROTO_AMAZON_AWS,amazon_aws,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the http trafic coming from the Amazon content delivery network.,Web,http;https;spdy;ssl,20121025,PC-Linux-BasicTest- (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1167,Q_PROTO_AMAZON_MP3,amazon_mp3,,Amazon MP3,Amazon MP3 is an online music store owned and operated by Amazon.com.,Web,amazon;llnwd,20120530,PC-Windows-Firefox- (2012-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1240,Q_PROTO_AMAZON_VIDEO,amazon_video,,Amazon Video,Amazon Video is an online video on demand service owned and operated by Amazon.com.,Web,amazon;rtmp,20130620,PC-Windows-Firefox- (2013-07-01),,x,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1835,Q_PROTO_AMBEBI,ambebi,,Ambebi.ge,Georgian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1312,Q_PROTO_AMEBA,ameba,,Ameba.jp,Japanese web portal for teenagers,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,969,Q_PROTO_AMERICANEXPRESS,americanexpress,,AmericanExpress.com,This protocol plug-in classifies the http traffic to the host americanexpress.com. It also classifies the ssl traffic to the Common Name americanexpress.com.,Web,http;https;spdy;ssl,20120930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,358,Q_PROTO_AMIE_STREET,amie_street,,AmieStreet.com,This protocol plug-in classifies the http traffic to the host amiestreet.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2272,Q_PROTO_AMJILT,amjilt,,Amjilt,Mongolian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2269,Q_PROTO_AMMONNEWS,ammonnews,,Ammonnews,Jordanian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,9,Q_PROTO_AMQP,amqp,,Advance Message Queuing Protocol,AMQP (Advanced Message Queuing Protocol) is an open standard application layer protocol for message-oriented middleware,Middleware,tcp,0.8;0.9,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,2242,Q_PROTO_ANGRY_BIRDS,angry_birds,,Angry Birds,Angry Birds is a mobile game edited by Rovio.,Game,http;https;spdy,iPhone-iOS-Angry Birds 3.4.0;Mobile-Android-Angry Birds 3.4.0,PC-Linux-BasicTest- (2014-05-15),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1702,Q_PROTO_ANIMEBW,animebw,,AnimeBW Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,359,Q_PROTO_ANOBII,anobii,,aNobii.com,This protocol plug-in classifies the http traffic to the host anobii.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,970,Q_PROTO_ANSWERS,answers,,Answers.com,This protocol plug-in classifies the http traffic to the host answers.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1691,Q_PROTO_ANTS_P2P,ants_p2p,,ANts P2P client,Ants is a distributed P2P client.,Peer to Peer,https;spdy;ssl,v1.6.0 Beta - Protocol 1.0.0,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,727,Q_PROTO_ANY_0HOP,any_0hop,,Any 0-hop,The any_0hop protocol (Any 0-hop protocol) is found over the IP layer (IANA protocol number: 114).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1751,Q_PROTO_ANZ,anz,,Australia and New Zealand Banking Group,"Offers home, car, and business loans, as well as internet banking, and insurance.",Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,1345,Q_PROTO_ANZHI,anzhi,,Anzhi.com,Chinese mobile device games and forums.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,2209,Q_PROTO_AOL,aol,,Aol,This protocol plug-in classifies the trafic related to the AOL portal.,Web,http;https;spdy;ssl,,PC-Linux-BasicTest- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2257,Q_PROTO_AOL_ON,aol_on,,Aol.On,AOL On is a video streaming web site.,Audio/Video,http;https;spdy;ssl,20131218,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2022,Q_PROTO_APA,apa,,APA.az,Azerbaijani news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2226,Q_PROTO_APARAT,aparat,,Aparat,Iranian multimedia website,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1118,Q_PROTO_APNS,apns,,Apple Push Notification Service,Apple Push Notification Service is an Apple service which forwards notifications from the servers of third party applications to iOS devices.,Application Service,https;spdy;ssl,iPhone-iOS 7.0.3,iPhone-iOS-7.1.2-iMessage- (2014-07-04),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,10,Q_PROTO_APOLLO,apollo,,Apollo Domain:XEROX,Apollo is the routing protocol implemented natively in Apollo workstations.,Routing,8021q;eth;snap,Apollo v1,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,2082,Q_PROTO_APOLLO_LV,apollo_lv,,Apollo.lv,Latvian news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1346,Q_PROTO_APPCHINA,appchina,,APPChina.com,Chinese Android application market.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,306,Q_PROTO_APPLE,apple,,Apple.com,This protocol plug-in classifies the http traffic to the host www.apple.com. It also classifies the ssl traffic to the Common Name apple.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1688,Q_PROTO_APPLE_AIRPLAY,apple_airplay,,Apple Airplay,Apple airplay is a protocol for display picture and video to a connected tv from a device connected to the same private network,Audio/Video,http;https;spdy;tcp;udp,Airplay 160.10,Mac-Mac OS-Reflector-1.5.4- (2013-10-04);PC-Windows-AirServer-1.9.1.0- (2013-10-04);PC-Windows-Reflector-1.2.6- (2013-10-04),,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,946,Q_PROTO_APPLE_AIRPORT,apple_airport,,Apple Airport,Apple Airport is a protocol aiming to configure a wireless device.,Web,http;https;spdy;tcp,Apple Airport,10/24/2011,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, +,1689,Q_PROTO_APPLE_AIRPRINT,apple_airprint,,Apple AirPrint,Apple Airprint is a network printing feature for Apple systems. It's based on the Dns Service Discovery protocol and IPP(needs URF format support).,Printer,ipp,ios 6,Mac-Mac OS-Printopia-2.1.10- (2013-10-04),x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1799,Q_PROTO_APPLE_HLS,apple_hls,,Apple HTTP Live Streaming,Apple implementation of the HTTP Live Streaming IETF draft. Used on Apple iOS devices.,Audio/Video,http;https;spdy,"draft-pantos-http-live-streaming-11,iOS 3.x and more",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1500,Q_PROTO_APPLE_MAPS,apple_maps,,Apple Maps,Apple Maps is a proprietary map application for iOS 6 devices.,Web,http;https;spdy,iOS 6.0,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1481,Q_PROTO_APPLE_SIRI,apple_siri,,Apple SIRI,Advanced voice recognition system used on some Apple iPhone devices.,Web,https;spdy;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,563,Q_PROTO_APPLE_UPDATE,apple_update,,Apple Update,Apple_update is the protocol used for apple softwares updates.,Web,http;https;spdy;ssl,Mac-Mac OS 10.6-Apple Software Update;PC-Windows 7-Apple Software Update,Mac-Mac OS-10.9.3-- (2014-06-19);PC-Windows-7-QuickTime-7.7.5- (2014-02-28);PC-Windows-7-iTunes-11.2.2- (2014-06-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1347,Q_PROTO_APPLEDAILY,appledaily,,AppleDaily.com.tw,Taiwanese news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,566,Q_PROTO_APPLEJUICE,applejuice,,AppleJuice,AppleJuice is a peer-to-peer file exchange protocol similar to E-Donkey.,Peer to Peer,tcp,0.31,4/16/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1348,Q_PROTO_APPSHOPPER,appshopper,,AppShopper.com,"Mac Apps, Mac App Store, iPad, iPhone and iPod touch app store listings, news, and price drops.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1106,Q_PROTO_APPSTORE,appstore,,Apple App Store,The Apple App Store is a digital application distribution platform for iOS developed and maintained by Apple Inc.,Application Service,itunes,PC-Windows (2014-01-13);iPhone-iOS 7.0.4 (2014-01-13),PC-Linux-Chromium- (2014-06-28);iPhone-iOS-7.1.2-- (2014-07-01),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1836,Q_PROTO_APROD,aprod,x,Aprod.hu (now Olx.hu),Hungarian free classifieds website,Web,,20140515,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2187,Q_PROTO_ARABIAWEATHER,arabiaweather,,Arabiaweather,Jordanian meteorological portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,564,Q_PROTO_ARCHIVE,archive,,Archive.org,"Archive.org is building a digital library of Internet sites and other cultural artifacts in digital form. Like a paper library, Archive.org provides free access to researchers, historians, scholars, and the general audience.",Web,http;https;spdy;ssl,20110913,PC-Windows-Chrome- (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,272,Q_PROTO_ARES,ares,,Ares,Ares is a peer-to-peer protocol.,Peer to Peer,socks4;socks5;spid;tcp;udp,PC-Linux ubuntu 12.04.1 LTS-ares 2.2.4.3048 (2014-02-27),PC-Linux-Ares Galaxy-2.2.4.3048- (2014-03-04);PC-Windows-Ares Galaxy-2.2.8.3052- (2014-05-20),,,,x,ares,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,608,Q_PROTO_ARGUS,argus,,ARGUS,The argus protocol (ARGUS) is found over the IP layer (IANA protocol number: 13).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,609,Q_PROTO_ARIS,aris,,ARIS,The aris protocol (ARIS) is found over the IP layer (IANA protocol number: 104).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,971,Q_PROTO_ARMORGAMES,armorgames,,Armorgames.com,This protocol plug-in classifies the http traffic to the host armorgames.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,2156,Q_PROTO_ARMORGAMES_PLAY,armorgames_play,,Armorgames Game Play,"This signature detects requests to play games on ArmorGames.com, an on-line, flash-based video game site. Users can play simple video games for free.",Web,http;https;spdy,20110930,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,11,Q_PROTO_ARP,arp,,Address Resolution Protocol,The ARP protocol is used to determine the MAC Address of a PC for which the IP address is known.,Network Service,8021q;eth;gre;llc;snap,ARP IP v4,7/4/2008,x,,,,,,,x,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1192,Q_PROTO_ASIAE,asiae,,Asiae.co.kr,This protocol plug-in classifies the http traffic to the host asiae.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1703,Q_PROTO_ASIANDVDCLUB,asiandvdclub,,AsianDVDClub.org,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,283,Q_PROTO_ASK,ask,,Ask.com,This protocol plug-in classifies the http traffic to the host .ask.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,2083,Q_PROTO_ASK_FM,ask_fm,,Ask.fm,International Social network,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,360,Q_PROTO_ASMALLWORLD,asmallworld,,ASmallWorld.net,This protocol plug-in classifies the http traffic to the host asmallworld.net.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2010,Q_PROTO_ASPROXY,asproxy,,ASProxy,"ASProxy is a free and open-source web proxy which allows the user to surf the net anonymously. This plug-in classifies the usage of this proxy for web browsing, as a fallback to other recognized applications/protocols.",Tunneling,http;https;spdy,ASProxy Server 5.5.0,PC-Windows-ASProxy-5.5.0- (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,12,Q_PROTO_ATALK,atalk,,AppleTalk,"The AppleTalk Protocol Suite implements services for routing, file transfer, printer sharing and emails in Apple environments.",Network Service,8021q;eth;gre;snap,AppleTalk v60.0a6,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,361,Q_PROTO_ATHLINKS,athlinks,,Athlinks.com,This protocol plug-in classifies the http traffic to the host athlinks.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2023,Q_PROTO_ATLASINFO,atlasinfo,,Atlasinfo.info,Mauritanian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,972,Q_PROTO_ATT,att,,ATT.com (AT&T),This protocol plug-in classifies the http traffic to the host att.com. It also classifies the ssl traffic to the Common Name att.com.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1322,Q_PROTO_ATWIKI,atwiki,,Atwiki.jp,Japanese web site design service and wiki hosting,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1229,Q_PROTO_AUCTION,auction,,Auction.co.kr,This protocol plug-in classifies the http traffic to the host www.auction.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,973,Q_PROTO_AUFEMININ,aufeminin,,Aufeminin.com,This protocol plug-in classifies the http traffic to the host aufeminin.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1334,Q_PROTO_AUONE,auone,,Auone.jp,Multi services web portal owned by KDDI,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,363,Q_PROTO_AVATARS_UNITED,avatars_united,,AvatarsUnited.com,This protocol plug-in classifies the http traffic to the host avatarsunited.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2024,Q_PROTO_AVAZ,avaz,,Avaz.ba,Croatian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1755,Q_PROTO_AVG,avg,,AVG.com,Antivirus and security software products for home and business users.,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,714,Q_PROTO_AVG_UPDATE,avg_update,,Avg Update,Avg_update is the protocol used for AVG softwares updates.,Web,http;https;spdy,AVG Antivirus 2011,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,604,Q_PROTO_AVIRA_UPDATE,avira_update,,Avira Update,Avira_update is the protocol used for Avira softwares updates.,Web,http;https;spdy,Avira AntiVir Premium V10,3/14/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1800,Q_PROTO_AVITO_MA,avito_ma,,Avito.ma,Free Moroccan classified ads,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1801,Q_PROTO_AVITO_RU,avito_ru,,Avito.ru,Free russian classified ads,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,353,Q_PROTO_AVOIDR,avoidr,,Avoidr.com,This protocol plug-in classifies the http traffic to the host avoidr.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,1837,Q_PROTO_AVTO,avto,,Avto.net,Slovenian vehicle related classifieds,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,723,Q_PROTO_AX25,ax25,,AX.25 Frames,The ax25 protocol (AX.25 Frames) is found over the IP layer (IANA protocol number: 93).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1509,Q_PROTO_AXIFILE,axifile,,AxiFile.com,AXifile is a file sharing service. ( http://www.axifile.com ),Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1838,Q_PROTO_AZET,azet,,Azet.sk,Slovak web portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1839,Q_PROTO_B92,b92,,B92.net,Serbian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,763,Q_PROTO_BABELGUM,babelgum,,Babelgum.com,This protocol plug-in classifies the http traffic to the host babelgum.com.,Audio/Video,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,364,Q_PROTO_BABYCENTER,babycenter,,BabyCenter.com,"This protocol plug-in classifies the http traffic to the host babycenter.com.,This protocol is not supported with Basic DPI over rtmp.",Web,http;https;rtmp;spdy;ssl,PC-Windows-Browser-www.babycenter.com (2014-02-26);Mobile-Android-My Baby Today 1.2.0 (2014-02-25);iPhone-iOS-My Baby Today 1.6.2 (2014-02-25),Mobile-Android-4.4.2-My Baby Today-1.3.0- (2014-06-12);PC-Windows-7-Chrome-35.0.1916.153-. (2014-06-17);iPhone-iOS-7.1.2-My Baby Today-2.0.1- (2014-07-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1349,Q_PROTO_BABYHOME,babyhome,,BabyHome.com.tw,"Taiwanese pregnancy and parenting information, albums and parenting diaries.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1766,Q_PROTO_BABYLON,babylon,,Babylon.com,Babylon is a leading global provider of language and search solutions,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1350,Q_PROTO_BACKPACKERS,backpackers,,Backpackers.com.tw,"Taiwanese most popular tourist site, backpacking forum, cheap flights parity Reservation parity.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,586,Q_PROTO_BADONGO,badongo,,Badongo.com,"Badongo is an online solution to store, send and share files",Web,http;https;spdy,20110111,2/24/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,365,Q_PROTO_BADOO,badoo,,Badoo.com,Badoo is a dating oriented social networking website.,Instant Messaging,facebook;google_maps;http;https;spdy;ssl;tcp,PC-Windows-Browser-badoo.com (2013-10-10),BlackBerry-BlackBerry OS-10.2.1.3175-Badoo-15.522.713- (2014-06-10);Mobile-Android-4.4.2-Badoo-2.41.2- (2014-06-11);PC-Windows-7-Chrome-31.0.1650.63-Badoo-0.1.166- (2014-01-16);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-08);Windows Phone-Windows Phone OS-8.0.10517.150-Badoo-1.8.0- (2014-04-16);iPhone-iOS-7.1.2-Badoo-3.6.2- (2014-07-02),,x,,x,,,,,,,,,,,,x,x,,,,x,,,,,,,,,,,,,,,, +,548,Q_PROTO_BAIDU,baidu,,Baidu.com,"Baidu is a Chinese search engine for websites, audio files and images.",Web,conduit;http;https;sohu;spdy;ssl;tcp;xing,PC-Windows-Browser-www.baidu.com (2014-01-10);iPhone-iOS-Baidu 5.0.1;Mobile-Android-Baidu 5.0,Mobile-Android-4.2.1-Baidu-5.2- (2014-04-22);PC-Linux-Chromium- (2014-07-01);PC-Windows-7-Baidu-2.4.0.2965- (2014-06-05);PC-Windows-7-Baidu-2.4.0.2965-CN (2014-06-04);PC-Windows-8-Baidu HD-1.0.0.5- (2014-05-26);Windows Phone-Windows Phone OS-Baidu-4.5.0.0- (2014-02-24);iPhone-iOS-7.1.2-Baidu-5.3.5- (2014-07-03),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,x,,,,,,,,,, +,1510,Q_PROTO_BAIDU_HI_GAMES,baidu_hi_games,,Baidu Games (youxi.baidu.com),"CHinese online game site, Flash and html5 based. ( http://youxi.baidu.com )",Web,baidu,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1464,Q_PROTO_BAIDU_PLAYER,baidu_player,,Baidu Player,"BaiduPlayer is a video player that can play local, online and OnDemand videos.",Audio/Video,facebook;http;https;spdy,2.5.1.17-net-player;1.19.0.159-browserZ-player,PC-Linux-Baidu Player-1.19.0.68- (2013-07-02),,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,1351,Q_PROTO_BAIKE,baike,,Baike.com,Interactive encyclopedia online encyclopedia based on the Chinese Wikipedia.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1840,Q_PROTO_BALKANWEB,balkanweb,,BalkanWeb.com,Albanian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1841,Q_PROTO_BANGLANEWS24,banglanews24,,Banglanews24.com,Bangladeshi news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2025,Q_PROTO_BANKMELLAT,bankmellat,,Bankmellat.ir,Iranian Banking website,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1352,Q_PROTO_BAOFENG,baofeng,,Baofeng.com,Chinese video streaming portal.,Audio/Video,http;https;spdy;tcp,5.25.0613.1111-win7,PC-Windows-Baofeng-5.25.0613.1111- (2013-07-03),,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,3,Q_PROTO_BASE,base,,Base virtual protocol,"Base is a virtual protocol, specific to DPI, that encapsulates all other protocols. It contains fundamental protocol attributes such as time characteristics.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1754,Q_PROTO_BBC,bbc,,BBC.co.uk,The BBC Homepage providing News and Broadcast,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,736,Q_PROTO_BBC_PLAYER,bbc_player,,BBC Player,BBC Player is an in-browser live video streaming service.,Audio/Video,http;https;rtmp;spdy;ssl,20120718,10/12/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1557,Q_PROTO_BBM,bbm,,BlackBerry Messenger,BBM is the messenger/voip/Video protocol for blackberry. This plug-in classifies the audio and video data flows of BlackBerry Messenger.,Instant Messaging,stun;udp,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424-- (2014-01-06),,,,x,,,,,x,,,,,,,x,x,x,x,,,,,,,,x,,,,,,,,,, +,1558,Q_PROTO_BBM_AUDIO,bbm_audio,,BlackBerry Messenger Audio,bbm_audio is the voip layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424-- (2014-01-06),x,,,,,,,,,,,,,,,,,x,,,,,,,,,x,,,,,,,,,, +,1559,Q_PROTO_BBM_VIDEO,bbm_video,,BlackBerry Messenger Video,BBM_video is the video layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424-- (2014-01-06),x,,,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,, +,610,Q_PROTO_BBN_RCC_MON,bbn_rcc_mon,,BBN RCC Monitoring,The bbn_rcc_mon protocol (BBN RCC Monitoring) is found over the IP layer (IANA protocol number: 10).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1154,Q_PROTO_BCA_CO,bca_co,,Bank BCA (bca.co.id),This protocol plug-in classifies the http traffic to the host bca.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1842,Q_PROTO_BDNEWS24,bdnews24,,Bdnews24.com,Bangladeshi news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1353,Q_PROTO_BEANFUN,beanfun,,Beanfun.com,"Taiwanese largest game portal, a single account to log into all games.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,268,Q_PROTO_BEBO,bebo,,Bebo.com,"Bebo is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;spdy;ssl,20100311,PC-Windows-7-Chrome- (2013-03-01);iPhone-iOS-Bebo-1.2.2- (2013-03-01);iPhone-iOS-Safari- (2013-03-01),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1511,Q_PROTO_BEBO_MAIL,bebo_mail,,Bebo mail,Bebo is a social networking website. ( www.bebo.com ),Web,bebo;google_ads,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1704,Q_PROTO_BEMANISO,bemaniso,,Bemaniso Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1162,Q_PROTO_BERNIAGA,berniaga,,Berniaga.com,This protocol plug-in classifies the http traffic to the host berniaga.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1974,Q_PROTO_BESTSHARING_COM,bestsharing_com,,bestsharing.com,Classifies web browsing on the bestsharing.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1512,Q_PROTO_BET365,bet365,,Bet365.com,ONline betting site ( http://www.bet365.com ),Web,http;https;rtmp;spdy;ssl,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,13,Q_PROTO_BGP,bgp,,Border Gateway Protocol,Border Gateway Protocol (BGP) is an inter Autonomous Systems routing protocol used by most ISPs.,Routing,tcp,BGP v1,12/8/2010,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,2026,Q_PROTO_BIDORBUY,bidorbuy,,Bidorbuy.co.za,South African auction and shopping website,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,366,Q_PROTO_BIGADDA,bigadda,,BigAdda.com,This protocol plug-in classifies the http traffic to the host bigadda.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1323,Q_PROTO_BIGLOBE_NE,biglobe_ne,,Biglobe.ne.jp,Japanese web portal and search site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,367,Q_PROTO_BIGTENT,bigtent,,BigTent.com,This protocol plug-in classifies the http traffic to the host bigtent.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,764,Q_PROTO_BIGUPLOAD,bigupload,,Bigupload.com,This protocol plug-in classifies the http traffic to the host bigupload.com. It also classifies the ssl traffic to the Common Name www3.bigupload.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,368,Q_PROTO_BIIP,biip,,Biip.no,This protocol plug-in classifies the http traffic to the host biip.no.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2027,Q_PROTO_BIKHIR,bikhir,,Bikhir.ma,Moroccan classified ads,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2028,Q_PROTO_BILD,bild,,Bild.de,German news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,547,Q_PROTO_BING,bing,,Bing.com (formerly MSN Search),This protocol is used for sending user queries to the Bing search engine.,Web,http;https;spdy;ssl,20140326,PC-Windows-- (2012-03-06),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1692,Q_PROTO_BITCOIN,bitcoin,,Bitcoin client,Bitcoin is a distributed payment system.,Peer to Peer,tcp,0.8.3,10/2/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,593,Q_PROTO_BITDEFENDER_UPDATE,bitdefender_update,,BitDefender Update,BitDefender_update is the protocol used for BitDefender softwares updates.,Web,http;https;spdy;ssl,Bitdefender Antivirus 2011,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1705,Q_PROTO_BITENOVA,bitenova,,Bitenova Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1706,Q_PROTO_BITHQ,bithq,,BitHQ Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2234,Q_PROTO_BITLORD,bitlord,,BitLord,BitLord is a free BitTorrent client. This plugin classifies the traffic to the software company website. The generated traffic by this software is classified as bittorrent.,Peer to Peer,http;https;spdy,20140403,PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1707,Q_PROTO_BITME,bitme,,BitMe Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1708,Q_PROTO_BITMETV,bitmetv,,BitMeTV Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1913,Q_PROTO_BITS,bits,,Background Intelligent Transfer Service,Background Intelligent Transfer Service (BITS) transfers files (downloads or uploads) between a client and server and provides progress information related to the transfers.,File Transfer,http;https;spdy,7.5,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,, +,1709,Q_PROTO_BITSEDUCE,bitseduce,,BitSeduce Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1710,Q_PROTO_BITSHOCK,bitshock,,BitShock Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1711,Q_PROTO_BITSOUP,bitsoup,,Bitsoup Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2253,Q_PROTO_BITSTRIPS,bitstrips,,Bitstrips,BitStrips allows to design cartoon versions of yourself and your friends.,Game,flurry;http;https;spdy;ssl,Mobile-Android-Bitstrips 1.1.12;iPhone-iOS-Bitstrips 1.1.12,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,15,Q_PROTO_BITTORRENT,bittorrent,,BitTorrent,BitTorrent is a peer-to-peer protocol. [Note: bittorrent is also known as kadmelia.],Peer to Peer,http;https;soap;socks4;socks5;spdy;spid;tcp;udp;utp,PC-Windows-Vuze 5.1.0.0;PC-Windows-uTorrent 3.3.2;PC-Windows-BitComet 1.34;PC-Windows-Deluge 1.3.0;PC-Windows-qBittorrent 3.0.2;PC-Windows-BitTorrent 7.7.0;PC-Windows-SoMud 1.3.8;PC-Windows-Thunder 7.9.10.4610,Mac-Mac OS-10.9.2-1.3.5- (2014-01-21);Mac-Mac OS-10.9.2-Vuze-5.3.0.0- (2014-04-01);Mac-Mac OS-BitLord-2.3.2-87- (2014-04-03);Mac-Mac OS-Bittorrent-7.4.1- (2014-03-10);Mac-Mac OS-Frostwire-5.7.4- (2014-07-10);Mac-Mac OS-uTorrent-1.8.4- (2014-03-20);Mobile-Android-4.2.1-Bittorrent-2.43.95- (2014-06-30);Mobile-Android-4.2.1-uTorrent-2.11.42- (2014-06-26);Mobile-Android-4.4.2-Frostwire-1.3.3- (2014-07-14);PC-Linux-Frostwire-5.7.3- (2014-06-13);PC-Linux-Vuze-5.3.0.0- (2014-01-22);PC-Linux-uTorrent-3.3- (2014-04-03);PC-Windows-7-Bitcomet-1.37- (2014-04-30);PC-Windows-7-Bittorrent-7.9.2- (2014-06-12);PC-Windows-7-Frostwire-5.7.4- (2014-07-09);PC-Windows-7-Torrent for Google Chrome-3.11.2- (2014-04-04);PC-Windows-7-Xunlei-5.9.28.1564- (2014-05-08);PC-Windows-7-Xunlei-7.9.23.4792- (2014-07-01);PC-Windows-7-uTorrent-3.4.2- (2014-06-12);PC-Windows-BitLord-2.3.2- (2013-10-14);PC-Windows-SoMud-1.4.2- (2014-07-03);PC-Windows-Transmission-2.13- (2014-01-23);PC-Windows-Vuze-5.3.0.0- (2014-03-12);PC-Windows-qBittorrent-3.0.4- (2014-01-23),,x,,x,BitTorrent,,,,x,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,2152,Q_PROTO_BITTORRENT_APPLICATION,bittorrent_application,,Bittorrent Apps,This signature detects the access to the BitTorrent Apps web ressources from the BitTorrent application.,Peer to Peer,bittorrent,PC-Windows-BitTorrent 7.x,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1712,Q_PROTO_BITVAULTTORRENT,bitvaulttorrent,,Bitvaulttorrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1701,Q_PROTO_BITWORLD,bitworld,,BitWorld Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,932,Q_PROTO_BLACKBERRY,blackberry,,BlackBerry.com,This protocol refers to all Blackberry mobile device communications over wifi. This includes the chat flows of BlackBerry Messenger.,Web,http;https;spdy;ssl,BlackBerry-BlackBerry OS 10.2,BlackBerry-Q5-BlackBerry OS-10.2.1.2102-- (2014-04-24),,x,,,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,1560,Q_PROTO_BLACKBERRY_LOCATE,blackberry_locate,,BlackBerry Locate,This protocol refers to all Blackberry mobile device communications about localization over wifi.,Web,https;spdy;ssl,Blackberry OS 10.2.x,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1563,Q_PROTO_BLACKBERRY_UPDATE,blackberry_update,,BlackBerry OS Updates,This protocol classifies the Blackberry 10 family OS software updates.,Web,http;https;spdy;ssl,Blackberry 0S 10.2.x,BlackBerry-Q5-BlackBerry OS-10.2.1.2941-BBM-10.3.33.18- (2014-07-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,369,Q_PROTO_BLACKPLANET,blackplanet,,BlackPlanet.com,This protocol plug-in classifies the http traffic to the host blackplanet.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1806,Q_PROTO_BLIC,blic,,Blic.rs,Serbian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2029,Q_PROTO_BLICK,blick,,Blick.ch,Swiss news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1168,Q_PROTO_BLIP_TV,blip_tv,,Blip.tv TV Series,This protocol plug-in classifies the http traffic to the host blip.tv.,Audio/Video,http;https;rtmp;spdy,20120530,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1169,Q_PROTO_BLOCKBUSTER,blockbuster,,Blockbuster.com,This protocol plug-in classifies the http traffic to the host .blockbuster.com.,Audio/Video,http;https;spdy,20120530,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1843,Q_PROTO_BLOCKET,blocket,,Blocket.se,Swedish local classified ads,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1844,Q_PROTO_BLOG,blog,,Blog.hu,Hungarian blog hosting website,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1163,Q_PROTO_BLOGDETIK,blogdetik,,BlogDetik.com,This protocol plug-in classifies the http traffic to the host blogdetik.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1796,Q_PROTO_BLOGFA,blogfa,,Blogfa.com,Persian Blog Hosting,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,974,Q_PROTO_BLOGGER,blogger,,Blogger.com,Blogger (formerly Blogspot) is a blog-publishing service that allows multi-user blogs with time-stamped entries. It was bought by Google in 2003.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.blogger.com (2013-11-04),Mobile-A250-Android-4.2.1-Blogger-2.1.1- (2014-04-22);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);iPhone-iOS-Blogger-2.1.7.2- (2014-03-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1320,Q_PROTO_BLOGIMG,blogimg,,Blogpark.jp,Japanese blog site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,975,Q_PROTO_BLOGSPOT,blogspot,x,Blogspot.com,This protocol plug-in classifies the http traffic to the host blogspot.com.,Web,,PC-Windows-Browser-www.blogspot.com (2013-11-04),PC-Windows-Internet Explorer- (2013-11-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,370,Q_PROTO_BLOGSTER,blogster,,Blogster.com,This protocol plug-in classifies the http traffic to the host blogster.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,765,Q_PROTO_BLOKUS,blokus,,Blokus.fr,This protocol plug-in classifies the http traffic to the host blokus.fr.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,893,Q_PROTO_BLOOMBERG,bloomberg,,Bloomberg.com,Bloomberg is a website about business and financial news.,Web,akamai;http;https;rtmp;spdy;ssl,20110526,5/30/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1279,Q_PROTO_BLUBSTER,blubster,,Blubster,"Blubster is a peer-to-peer music file sharing software. Blubster uses the Manolito protocol, therefore a part of its traffic is classified as Manolito.",Peer to Peer,http;https;spdy,3.1.1,PC-Windows-Blubster-3.1.1- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,976,Q_PROTO_BLUEJAYFILMS,bluejayfilms,,Bluejayfilms.webs.com,This protocol plug-in classifies the http traffic to the host bluejayfilms.webs.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1845,Q_PROTO_BLUEWIN,bluewin,,Bluewin.ch,Swiss news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1293,Q_PROTO_BMFF,bmff,,ISO Base Media File Format,"The ISO Base Media File Format, as described in ISO/IEC 14496-12:2008 (MPEG-4 Part 12).",Audio/Video,http;nba,ISO/IEC 14496/15444-12 (2008),,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,611,Q_PROTO_BNA,bna,,BNA,The bna protocol (BNA) is found over the IP layer (IANA protocol number: 49).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1846,Q_PROTO_BOLHA,bolha,,Bolha.com,Slovenian local classified ads,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,371,Q_PROTO_BOLT,bolt,,Bolt.com - Bolt3.com,This protocol plug-in classifies the http traffic to the hosts bolt.com and bolt3.com.,Web,http;https;spdy,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1514,Q_PROTO_BONDISK,bondisk,,Bondisk.com,Site for downloading videos.,Peer to Peer,http;https;spdy,1.0.0.3,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,766,Q_PROTO_BONPOO,bonpoo,,Bonpoo.com,This protocol plug-in classifies the http traffic to the host bonpoo.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1354,Q_PROTO_BOOKS,books,,Books.com.tw,Taiwanese on-line books store.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,372,Q_PROTO_BOOKS_IREAD,books_iread,x,Books iRead,This protocol plug-in classified the http traffic to the host weread.com. Moved to flipkart.com/books service.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1713,Q_PROTO_BOOTYTAPE,bootytape,,BootyTape Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,767,Q_PROTO_BOX_NET,box_net,,Box.com,This protocol plug-in classifies the http traffic to the host .box.net. It also classifies the ssl traffic to the Common Names .box.net and .box.com.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,612,Q_PROTO_BR_SAT_MON,br_sat_mon,,Backroom SATNET Monitoring,The br_sat_mon protocol (Backroom SATNET Monitoring) is found over the IP layer (IANA protocol number: 76).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,769,Q_PROTO_BRIGHTTALK,brighttalk,,BrightTALK.com,This protocol plug-in classifies the http traffic to the host brighttalk.com. It also classifies the ssl traffic to the Common Name .brighttalk.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1714,Q_PROTO_BROWNTRACKER,browntracker,,Brown Tracker Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,741,Q_PROTO_BSSAP,bssap,,BSS Application Part,BSSAP is a telephony protocol used in SS7 networks.,Telephony,sccp_ss7;sctp,BSSAP v1,3/23/2011,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,x,,,,,,,,,, +,1802,Q_PROTO_BT_BT,bt_bt,,Bhutan Telecom (bt.bt),Bhutan Telecom Limited (BTL) is the leading provider of telecommunications and Internet services in the Kingdom of Bhutan.,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,1715,Q_PROTO_BT_CHAT,bt_chat,,BT Chat Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1803,Q_PROTO_BT_DK,bt_dk,,Bt.dk,Danish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1716,Q_PROTO_BT_WRZRU,bt_wrzru,,BT Wrzru Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1717,Q_PROTO_BTJUNKIE,btjunkie,,BT Junkie Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1193,Q_PROTO_BUDDYBUDDY,buddybuddy,x,BuddyBuddy.co.kr,This protocol plug-in classified the http traffic to the host buddybuddy.co.kr.,Web,,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,1194,Q_PROTO_BUGS,bugs,,Bugs.co.kr,This protocol plug-in classifies the http traffic to the host bugs.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,2239,Q_PROTO_BURT,burt,,Burt,Burt is a web analytics platform.,Web,http;https;spdy;ssl,20140410,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,977,Q_PROTO_BUSINESSWEEK,businessweek,,Businessweek.com,This protocol plug-in classifies the http traffic to the host businessweek.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1355,Q_PROTO_BUSINESSWEEKLY,businessweekly,,Businessweekly.com.tw,"Weekly financial news, delivered every Thursday, providing industry information, enterprise Interviews, enterprise stories, financial news and other content.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1476,Q_PROTO_BUZZFEED,buzzfeed,,BuzzFeed.com,International news webportal.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,373,Q_PROTO_BUZZNET,buzznet,,Buzznet.com,This protocol plug-in classifies the http traffic to the host buzznet.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,16,Q_PROTO_BXML,bxml,,WAP Binary XML,The WAP Binary XML protocol defines an encoding scheme for the binary data used in WAP environments.,Wap,wsp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,352,Q_PROTO_BYPASSTHAT,bypassthat,,BypassThat.com,This protocol plug-in classifies the http traffic to the host bypassthat.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,2030,Q_PROTO_CAAK,caak,,Caak.mn,Mongolian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1805,Q_PROTO_CAF,caf,,Caisse d'Allocations Familiales,French National Fund for Family Allowances (Caisse d Allocation familiale),Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,374,Q_PROTO_CAFEMOM,cafemom,,CafeMom.com,This protocol plug-in classifies the http traffic to the host cafemom.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,979,Q_PROTO_CAM4,cam4,,Cam4.com,This protocol plug-in classifies the http traffic to the host cam4.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2219,Q_PROTO_CAMEROON_INFO,cameroon_info,,Cameroon.info,Cameroonian news portal,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,770,Q_PROTO_CAMPFIRE,campfire,,Campfire.com,This protocol plug-in classifies the http traffic to the host campfirenow.com. It also classifies the ssl traffic to the Common Name campfirenow.com.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,980,Q_PROTO_CAMZAP,camzap,,Campzap.com,This protocol plug-in classifies the http traffic to the host camzap.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2244,Q_PROTO_CANDY_CRUSH_SAGA,candy_crush_saga,,Candy Crush Saga,Candy Crush Saga is a mobile puzzle game edited by King Entertainment,Game,http;https;spdy,iPhone-iOS-Candy Crush Saga 1.21.0;Mobile-Android-Candy Crush Saga 1.21.0.10,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,981,Q_PROTO_CAPITALONE,capitalone,,CapitalOne.com,This protocol plug-in classifies the http traffic to the host capitalone.com. It also classifies the ssl traffic to the Common Name capitalone.com.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1289,Q_PROTO_CAPWAP,capwap,,Control And Provisioning of Wireless Access Points,"CAPWAP stands for Control And Provisioning of Wireless Access Points. It is a standard, interoperable protocol that enables a controller to manage a collection of wireless access points.",Tunneling,udp,RFC 5415,11/23/2012,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2314,Q_PROTO_CARBONITE,carbonite,,CARBONITE,"This signature detects Carbonite, a service that manages online backups.",Web,http;https;spdy;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,376,Q_PROTO_CARE2,care2,,Care2.com,This protocol plug-in classifies the http traffic to the host care2.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,982,Q_PROTO_CARTOONNETWORK,cartoonnetwork,,CartoonNetwork.com,This protocol plug-in classifies the http traffic to the host cartoonnetwork.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,x, +,2031,Q_PROTO_CAS,cas,,CAS.sk,Slovak news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,613,Q_PROTO_CBT,cbt,,Core-based trees,The cbt protocol (Core-based trees) is found over the IP layer (IANA protocol number: 7).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,17,Q_PROTO_CCP,ccp,,Compression Control Protocol,The Compression Control Protocol (CCP) is responsible for configuring data compression algorithms on a point-to-point link.,Compression,ppp,RFC 1962,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1463,Q_PROTO_CCTV_VOD,cctv_vod,,VodCCTV,VodCCTV provides a web on-line video and video on demand client for the CCTV Chinese television network.,Audio/Video,cntv;rtmp;udp,2.4.0.7,6/6/2013,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,983,Q_PROTO_CDISCOUNT,cdiscount,,Cdiscount.com,This protocol plug-in classifies the http traffic to the host cdiscount.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2032,Q_PROTO_CDM,cdm,,CdM.me,Montenegrin news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,18,Q_PROTO_CDP,cdp,,Cisco Discovery Protocol,Cisco Discovery Protocol (CDP) is a layer 2 protocol used by Cisco network equipments to discover other Cisco network equipments present on a link.,Network Management,8021q;eth;gre;ppp;snap,CDP v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,377,Q_PROTO_CELLUFUN,cellufun,,Cellufun.com,This protocol plug-in classifies the http traffic to the host m.cellufun.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, +,1718,Q_PROTO_CENTRAL_TORRENT,central_torrent,,Central Torrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1807,Q_PROTO_CENTRUM_CZ,centrum_cz,,Centrum.cz,Czech web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1808,Q_PROTO_CENTRUM_SK,centrum_sk,,Centrum.sk,Slovakian web portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,256,Q_PROTO_CFT,cft,,Cross File Transfer,CFT (Cross File Transfer) is a file transfer software developed by Axway,File Server,tcp;x25,CFT v2.2,1/14/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,614,Q_PROTO_CFTP,cftp,,Covert File Transfer Protocol,The cftp protocol (CFTP) is found over the IP layer (IANA protocol number: 62).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1087,Q_PROTO_CGIPROXY,cgiproxy,,CGIProxy,CGIProxy is a proxy software package. A CGI (Common Gateway Interface) Proxy is a proxy that appears as a web page allowing the user access to all sites through it.,Network Service,http;https;spdy,20111019,,,x,,,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, +,19,Q_PROTO_CGMP,cgmp,,Cisco Group Management Protocol,Cisco Group Management Protocol (CGMP) limits the forwarding of IP multicast packets to only those ports associated with IP multicast clients.,Network Service,eth;gre;snap,CGMP v1;CGMP v2,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,2211,Q_PROTO_CHAMPION_FOOTBALL,champion_football,,Champion Football,Mobile game.,Game,http;https;spdy,iPhone-iOS-Champion Football 1.0.5,iPhone-iOS-Champion Football-1.0.5- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,771,Q_PROTO_CHANNEL4,channel4,,Channel4.com,This protocol plug-in classifies the http traffic to the host channel4.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,615,Q_PROTO_CHAOS,chaos,,Chaos,The chaos protocol (Chaos) is found over the IP layer (IANA protocol number: 16).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,20,Q_PROTO_CHAP,chap,,Challenge Handshake Authentication Protocol,The CHAP protocol is used to verify the identity of a peer on a point-to-point link.,Authentication,ppp,RFC 1994,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x +,1567,Q_PROTO_CHAT_ON,chat_on,,ChatON,ChatON is a global mobile communication service introduced by Samsung Electronics.,Instant Messaging,amazon_aws;http;https;spdy;ssl;tcp,Mobile-Bada-ChatON 1.9.0 (2014-03-25),Mobile-Android-4.2.1-ChatON-3.5.701-KR (2014-06-26);Mobile-Bada-Chat_ON-1.9.0-KR (2014-03-25);PC-Windows-8-ChatON-2.0.43- (2014-06-24);iPhone-iOS-7.1.1-ChatON-3.0.2-KR (2014-06-09),,x,,x,,,,,,,,,,,,x,,x,,,,,,,,,x,,,,,,,,,, +,1515,Q_PROTO_CHATROULETTE,chatroulette,,Chatroulette.com,Chatroulette is an online chat website. ( http://chatroulette.com ),Web,http;https;rtmp;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1356,Q_PROTO_CHINA_AIRLINES,china_airlines,,China-airlines.com,China-airlines booking site.,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,984,Q_PROTO_CHINACOM,chinacom,,China.com,This protocol plug-in classifies the http traffic to the host china.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,985,Q_PROTO_CHINACOMCN,chinacomcn,,china.com.cn,This protocol plug-in classifies the http traffic to the host china.com.cn.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1357,Q_PROTO_CHINANEWS,chinanews,,Chinanews.com,Chinese news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1516,Q_PROTO_CHINAREN,chinaren,,ChinaRen.com,Chinese social networking website for former classmates. ( class.chinaren.com ),Web,http;https;sohu;spdy,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1358,Q_PROTO_CHINATIMES,chinatimes,,Chinatimes.com,One of Taiwan top news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1249,Q_PROTO_CHINAZ,chinaz,,Chinaz.com,This protocol plug-in classifies the http traffic to the host chinaz.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1195,Q_PROTO_CHOSUN,chosun,,Chosun services,This protocol plug-in classifies the http traffic to the host chosun.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1230,Q_PROTO_CHOSUN_DAILY,chosun_daily,,Chosun website,This protocol plug-in classifies the http traffic to the host www.chosun.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,567,Q_PROTO_CHROME_UPDATE,chrome_update,,Chrome Update,Chrome Update is the protocol for the updates of the Google chrome browser.,Web,google_gen,PC-Windows 7-Chrome 30.0.1599.69,Mac-Mac OS-10.9.3-Chrome-35.0.1916.114- (2014-05-27);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-21),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1719,Q_PROTO_CINEMAGEDDON,cinemageddon,,Cinemageddon Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1474,Q_PROTO_CITRIX_ONLINE,citrix_online,,Citrix Online,On-line collaboration suite for small businesses.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,1196,Q_PROTO_CJ_MALL,cj_mall,,Cjmall.com,This protocol plug-in classifies the http traffic to the host cjmall.com. It also classifies the ssl traffic to the Common Name .cjmall.com.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1359,Q_PROTO_CK101,ck101,,CK101.com,ck101 is one of the major forum sites in Taiwan.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2034,Q_PROTO_CLARIN,clarin,,Clarin.com,Argentinian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1847,Q_PROTO_CLASIFICADOSONLINE,clasificadosonline,,ClasificadosOnline.com,Puerto Rican classified ads,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,378,Q_PROTO_CLASSMATES,classmates,,Classmates.com,This protocol plug-in classifies the http traffic to the host classmates.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,902,Q_PROTO_CLEARCASE,clearcase,,Rational ClearCase,"ClearCase is a source control / configuration management tool from IBM's ""Rational""division",Thin Client,http;https;spdy,7.1.2,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1517,Q_PROTO_CLEARSPACE,clearspace,,Jive,Enterprise collaboration and knowlegde management platform ( https://jiveon.com ),Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,772,Q_PROTO_CLIP2NET,clip2net,,Clip2Net.com,This protocol plug-in classifies the http traffic to the host clip2net.com.,Peer to Peer,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,x, +,379,Q_PROTO_CLOOB,cloob,,Cloob.com,This protocol plug-in classifies the http traffic to the host cloob.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1445,Q_PROTO_CLOUDFLARE,cloudflare,,CloudFlare CDN,CloudFlare CDN is a content delivery network with advanced security and analytics features.,Web,http;https;spdy;ssl,20130315,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1471,Q_PROTO_CLOUDME,cloudme,,CloudMe.com,Free on-line file storage service.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1518,Q_PROTO_CLUBBOX,clubbox,,Clubbox.co.kr,Korean file sharing web site that requires installing a p2p client called zmlauncher.exe ( http://www.clubbox.co.kr ),Peer to Peer,http;https;rtmp;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,986,Q_PROTO_CLUBIC,clubic,,Clubic.com,This protocol plug-in classifies the http traffic to the host clubic.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2178,Q_PROTO_CLUMSY_NINJA,clumsy_ninja,,Clumsy Ninja,Mobile game.,Game,http;https;spdy,iPhone-iOS-Clumsy Ninja 1.3.1,iPhone-iOS-Clumsy Ninja-1.3.1- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,987,Q_PROTO_CNET,cnet,,Cnet.com,This protocol plug-in classifies the http traffic to the host .cnet.com.,Audio/Video,http;https;rtmp;spdy;ssl,PC-Windows-Browser-www.cnet.com (2014-02-26);Mobile-Android-CNET 2.5 (2014-02-26);iPhone-iOS-CNET 2.4.1 (2014-02-26),Mobile-Android-4.4.2-CNET-2.6- (2014-06-17);Mobile-Bada-CNET France-1.0.0- (2014-04-26);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-24);PC-Windows-8-CNET-1.0.1.1- (2014-05-26);Windows Phone-Windows Phone OS-8-CNET-1.0.0.1- (2014-06-12);iPhone-iOS-7.1-CNET-3.0.1- (2014-06-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1170,Q_PROTO_CNET_TV,cnet_tv,,Cnettv.cnet.com,This protocol plug-in classifies the http traffic to the host cnettv.cnet.com.,Audio/Video,akamai;http;https;rtmp;spdy,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,988,Q_PROTO_CNN,cnn,,CNN (Cable News Network),"CNN is an international TV network, broadcasting news to the web and to mobile device applications.",Web,akamai;apple_hls;http;https;mms;spdy,PC-Windows-Browser-www.cnn.com (2014-01-03);iPhone-iOS-CNN App 2.0 (2014-01-12);Mobile-Android-CNN App 1.4.1 (2014-01-15);Windows Phone-Windows Phone OS-CNN 1.5.1.0 (2014-01-13),BlackBerry-BlackBerry OS-10.2.1.537-CNN App for BlackBerry-1.0.0.0- (2014-07-11);Mobile-Android-CNN App for Android Phones-2.1.3- (2014-07-11);Mobile-Bada-2.0S8600XXLC3-CNN-0.04- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-8-CNN App for Windows-1.0.0.0- (2014-07-11);Windows Phone-Windows Phone OS-8-CNN-1.5.5.0- (2014-07-11);iPhone-5C-iOS-7.1-CNN App for iPhone-2.2- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +,989,Q_PROTO_CNTV,cntv,,China Network Television,Chinese Central Television and China Network Television web site.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1360,Q_PROTO_CNYES,cnyes,,cnYES.com,cnYES.com is the most trusted and consulted leading financial portal among the Chinese online professionals.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1254,Q_PROTO_CNZZ,cnzz,,cnzz.com,This protocol plug-in classifies the http traffic to the hosts cnzz.com and cnzz.net.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2035,Q_PROTO_COCCOC,coccoc,,Coccoc.com,Vietnamese search engine,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1328,Q_PROTO_COCOLOG_NIFTY,cocolog_nifty,,Cocolog-nifty.com,Japanese blog web site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,380,Q_PROTO_COLLEGE_BLENDER,college_blender,,CollegeBlender.com,This protocol plug-in classifies the http traffic to the host collegeblender.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,990,Q_PROTO_COMCAST,comcast,,Comcast.com,This protocol plug-in classifies the http traffic to the hosts comcast.com and comcast.net.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1496,Q_PROTO_COMM,comm,,COMM,COMM is a VoIP and Instant messaging application for mobile phones commonly used in Japan.,Audio/Video,https;spdy;ssl,20130604,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,x,,,,,,,,,,x,,,,,,,,,, +,1757,Q_PROTO_COMMENTCAMARCHE,commentcamarche,,CommentCaMarche.net,CommentCaMarche.net is a french website providing technical explanations as well as forums.,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,21,Q_PROTO_COMP,comp,,COMP,COMP protocol is used for data compression over PPP.,Compression,ppp,RFC 1661,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,616,Q_PROTO_COMPAQ_PEER,compaq_peer,,Compaq Peer,The compaq_peer protocol (Compaq Peer Protocol) is found over the IP layer (IANA protocol number: 110).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,773,Q_PROTO_CONCUR,concur,,Concur.com,This protocol plug-in classifies the http traffic to the hosts concur.com and concursolutions.com. It also classifies the ssl traffic to the Common Names concursolutions.com and .concur.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1443,Q_PROTO_CONDUIT,conduit,,Conduit Services,Conduit provides services for web sites audience increase.,Web,http;https;spdy;ssl,20140114,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2015,Q_PROTO_CONVIVA,conviva,,Conviva CDN,"Conviva is a video streaming solution provider for audio/video content web services.,This protocol is not supported with Basic DPI.",Web,http;https;spdy;ssl,20140114,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,774,Q_PROTO_CORALCDN_USER,coralcdn_user,,CoralCDN user,This protocol plug-in classifies the http traffic to the host nyud.net.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,22,Q_PROTO_COTP,cotp,,Connection Oriented Transfer Protocol,COTP (Connection Oriented Transport Protocol) is a protocol ensuring the transport service in the OSI model.,Network Service,tcp,RFC 905/ISO 8073/X.224,7/4/2008,,,,x,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,, +,381,Q_PROTO_COUCH_SURFING,couch_surfing,,CouchSurfing.org,This protocol plug-in classifies the http traffic to the host couchsurfing.org. It also classifies the ssl traffic to the Common Name .couchsurfing.org.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1197,Q_PROTO_COUPANG,coupang,,Coupang.com,This protocol plug-in classifies the http traffic to the host coupang.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,617,Q_PROTO_CPHB,cphb,,Computer Protocol Heart Beat,The cphb protocol (Computer Protocol Heart Beat) is found over the IP layer (IANA protocol number: 73).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,618,Q_PROTO_CPNX,cpnx,,Computer Protocol Network Executive,The cpnx protocol (Computer Protocol Network Executive) is found over the IP layer (IANA protocol number: 72).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1848,Q_PROTO_CRAIGSLIST,craigslist,,craigslist,Online classified ads mostly used in the US and Canada,Web,http;https;spdy;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1720,Q_PROTO_CRAZYSALOON,crazysaloon,,Crazysaloon Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2221,Q_PROTO_CRHOY,crhoy,,Crhoy,Coasta rican news portal,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2279,Q_PROTO_CRITEO,criteo,,Criteo,Criteo is a personalized retargeting company.,Web,http;https;spdy;ssl,20140424,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2301,Q_PROTO_CRITTERCISM,crittercism,,Crittercism,Crittercism is a mobile application for performance management.,Web,http;https;spdy;ssl,20140507,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1849,Q_PROTO_CRNOBELO,crnobelo,,Crnobelo.com,Macedonian news portal,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1450,Q_PROTO_CROCKO,crocko,,Crocko.com (CROCKOTEC),CROCKOTec is a Direct Download (DDL file sharing website).,Web,http;https;spdy;ssl,20130415,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,619,Q_PROTO_CRTP,crtp,,Combat Radio Transport Protocol,The crtp protocol (Combat Radio Transport Protocol) is found over the IP layer (IANA protocol number: 126).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,620,Q_PROTO_CRUDP,crudp,,Combat Radio User Datagram,The crudp protocol (Combat Radio User Datagram) is found over the IP layer (IANA protocol number: 127).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1519,Q_PROTO_CRYPTOHEAVEN,cryptoheaven,,CryptoHeaven.com,Secure email and online file storage service.,Peer to Peer,http;https;spdy,3.7.6,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,1265,Q_PROTO_CSDN,csdn,,Chinese Software Developer Network,This protocol plug-in classifies the http traffic to the host csdn.net.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,23,Q_PROTO_CSTRIKE,cstrike,,CounterStrike,"Cstrike is a protocol used by CounterStrike game, by Steam.",Game,tcp;udp,CounterStrike v1.5;CounterStrike v1.6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1361,Q_PROTO_CTRIP,ctrip,,Ctrip.com?,"Travel Destination Guide, online booking of hotels, flights and holiday.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,24,Q_PROTO_CUPS,cups,,Common Unix Printer System,"The Common Unix Printer System (CUPS) protocol is a cross-platform printing solution for UNIX environments. It is based on the ""Internet Printing Protocol""and it is compatible with Microsoft operating systems since Windows 2000.",Printer,udp,CUPS v1.5,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1721,Q_PROTO_CUTEYHONEYFLASH,cuteyhoneyflash,,Cutey Honey Flash Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1100,Q_PROTO_CVS,cvs,,Concurrent Versions System,"The Concurrent Versions System keeps track of all work and all changes in a set of files, typically the implementation of a software project, and allows several developers to collaborate.",Network Service,tcp;udp,20111030,12/1/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1722,Q_PROTO_CYBER12,cyber12,,Cyber12 Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2036,Q_PROTO_CYBERCTM,cyberctm,,CyberCTM.com,Chinese news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1520,Q_PROTO_CYWORLD,cyworld,,Cyworld.com,CYworld is a South Korean social network service which belongs to nate.com. ( http://www.nate.com/cymain/?f=auto_cymain ),Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1850,Q_PROTO_DAGBLADET,dagbladet,,Dagbladet.no,Norwegian news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,382,Q_PROTO_DAILY_BOOTH,daily_booth,,DailyBooth.com,This protocol plug-in classifies the http traffic to the host dailybooth.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,383,Q_PROTO_DAILY_STRENGH,daily_strengh,,DailyStrengh.org,This protocol plug-in classifies the http traffic to the host dailystrength.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,991,Q_PROTO_DAILYMAIL,dailymail,,DailyMail.co.uk,This protocol plug-in classifies the http traffic to the host dailymail.co.uk.,Web,http;https;rtmp;spdy;ssl,PC-Windows-Browser-www.dailymail.co.uk (2014-03-13);iPhone-iOS-Mail Online 1.7.3 (2014-02-28);Windows Phone-Windows Phone OS-Mail Online 1.0.0.0 (2014-02-28);Mobile-Android-Daily Mail Online 3.0.7 (2014-02-28);BlackBerry-BlackBerry OS-Daily Mail Online 1.1.5.22344 (2014-02-28),BlackBerry-BlackBerry OS-10.2.1.2102-Daily Mail Online-1.1.5.22344- (2014-04-14);Mobile-Android-4.4.2-Daily Mail Online-3.1.2- (2014-07-10);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-24);Windows Phone-Windows Phone OS-8-Mail online-1.0.0.0- (2014-02-28);iPhone-iOS-7.1.1-MailOnline-2.0.2- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,25,Q_PROTO_DAILYMOTION,dailymotion,,Dailymotion.com,Dailymotion is a website where users can send or watch videos.,Web,http;https;rtmp;spdy;ssl,PC-Windows-Browser-www.dailymotion.com (2013-10-09);Mobile-Android-Dailymotion 4.0.0.1 (2014-01-29),BlackBerry-Q5-BlackBerry OS-10.2.1.2102-Dailymotion-3.0.2- (2014-05-05);Mobile-Android-4.4.2-Dailymotion-4.1.0.2- (2014-06-30);Mobile-Bada-1.0.5- (2014-03-19);Nokia Mobile-Symbian-113.010.1506-Dailymotion-1.2- (2014-04-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);PC-Windows-8-Dailymotion-1.0.1.13- (2014-05-26);Windows Phone-Windows Phone OS-8-Dailymotion-3.0.0.3- (2014-07-08);iPhone-iOS-7.0.6-Dailymotion-3.5.2- (2014-03-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2037,Q_PROTO_DAKARACTU,dakaractu,,Dakaractu.com,Senegalese news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1362,Q_PROTO_DANGDANG,dangdang,,Dangdang.com,"Books, film and television productions, and digital products shopping site.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1723,Q_PROTO_DANISHBITS,danishbits,,Danishbits Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy;ssl,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1851,Q_PROTO_DANTRI,dantri,,Dantri.com.vn,Vietnamese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1852,Q_PROTO_DAP_NEWS,dap_news,,Dap-News.com,Cambodian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1955,Q_PROTO_DATA_HU,data_hu,,data.hu,Classifies web browsing on the data.hu Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,992,Q_PROTO_DAUM,daum,,Daum.net,This protocol plug-in classifies the http traffic to the host daum.net.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1521,Q_PROTO_DAUMMAIL,daummail,,Daum Mail,Webmail for daum.net ( http://mail.daum.net ),Web,daum,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,993,Q_PROTO_DAVIDOV,davidov,,Davidov.do.am,This protocol plug-in classifies the http traffic to the host davidov.do.am.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2038,Q_PROTO_DAY,day,,Day.az,Azerbaijani news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,901,Q_PROTO_DB2,db2,,DB2,DB2 is a relational model database server from IBM which has its roots in the early 1980s. It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;tcp,9.7,8/3/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,2263,Q_PROTO_DBA,dba,,Dba,Danish classified ads website.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1853,Q_PROTO_DBS,dbs,,DBS Bank (dbs.com.sg),Singaporian online banking website,Web,http;https;spdy;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,621,Q_PROTO_DCCP,dccp,,Datagram Congestion Control Protocol,The dccp protocol (Datagram Congestion Control Protocol) is found over the IP layer (IANA protocol number: 33).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,26,Q_PROTO_DCERPC,dcerpc,,Distributed Computing Environment - Remote Procedure Call,The DCERPC protocol is an RPC implementation used in Distributed Computing Environments. This protocol is used by many software applications including Microsft Exchange.,Middleware,smb;tcp;udp,DCE/RPC v1.2,7/4/2008,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1522,Q_PROTO_DCINSIDE,dcinside,,DCinside.com,Information portal ( www.dcinside.com ),Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,622,Q_PROTO_DCN_MEAS,dcn_meas,,DCN Measurement Subsystems,The dcn_meas protocol (DCN Measurement Subsystems) is found over the IP layer (IANA protocol number: 19).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,623,Q_PROTO_DDP,ddp,,Datagram Delivery Protocol,The ddp protocol (Datagram Delivery Protocol) is found over the IP layer (IANA protocol number: 37).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,624,Q_PROTO_DDX,ddx,,D-II Data Exchange,The ddx protocol (D-II Data Exchange (DDX) is found over the IP layer (IANA protocol number: 116).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2039,Q_PROTO_DEALFISH,dealfish,x,Dealfish.co.th,Thai classified ads,Web,,20140117,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,574,Q_PROTO_DEBIAN_UPDATE,debian_update,,Debian/Ubuntu Update,"Update protocol of APT, the Debian/Ubuntu packet manager.",Web,http;https;spdy,PC-Debian 5;PC-Debian 6;PC-Debian 6;PC-Ubuntu 10.10,PC-Debian-7.5-Debian- (2014-05-29),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,28,Q_PROTO_DEC,dec,,Digital Equipment Corporation,DEC is a Digital Equipment Corporation's proprietary network protocol.,Network Service,8021q;eth;gre;snap,na,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,384,Q_PROTO_DECAYENNE,decayenne,,Decayenne.com,This protocol plug-in classifies the http traffic to the host decayenne.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1724,Q_PROTO_DEEPSEEK,deepseek,,DeepSeek Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2180,Q_PROTO_DEER_HUNTER_2014,deer_hunter_2014,,Deer Hunter 2014,Mobile game.,Game,http;https;spdy,Mobile-Android-Deer Hunder 2014 1.1.3;iPhone-iOS-DEER HUNTER 2014 1.1.0,Mobile-Android-Deer Hunter 2014-1.1.3- (2014-03-13);iPhone-iOS-Deer Hunter 2014-1.1.0- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,310,Q_PROTO_DEEZER,deezer,,Deezer.com,"This protocol plug-in classifies the http traffic to the host deezer.com. It also classifies the ssl traffic to the Common Name .deezer.com.,This protocol is not supported with Basic DPI.",Web,http;https;spdy;ssl,PC-Windows 7-Browser-www.deezer.com (2014-03-05);Windows Phone-Windows Phone OS-Deezer 2.1.1.1 (2014-03-04);Mobile-Android-Deezer 4.2.3.1 (2014-03-04);BlackBerry-BlackBerry OS-Deezer 3.137 (2014-03-04);PC-Windows 7-Chrome 33.0.1750.146-Deezer 1.3.2 (2014-03-05),BlackBerry-BlackBerry OS-10.2.1.2141-Deezer-3.137- (2014-07-11);Mac-Mac OS-10.9.3-Safari-7.0.4- (2014-07-11);Mobile-Android-4.4.2-Deezer-4.4.1.11- (2014-07-11);PC-Linux-14.04-Firefox-30.0 - (2014-07-11);PC-Windows-7-Chrome-33.0.1750.146-Deezer-1.3.2- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-8-Deezer-1.1.1.5 x64- (2014-07-11);Windows Phone-Windows Phone OS-8-Deezer-2.2.5.0- (2014-07-11);iPhone-iOS-7.1.1-Deezer-4.9- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1854,Q_PROTO_DEFIMEDIA,defimedia,,Defimedia.info,Mauritian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1784,Q_PROTO_DELFI,delfi,,Delfi,"Estonian news portal, also accessible from Latvia and Lituania.",Web,http;https;spdy,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,605,Q_PROTO_DELICIOUS,delicious,,Delicious.com,"Delicious (formerly del.icio.us, pronounced ""delicious"") is a social bookmarking web service for storing, sharing, and discovering web bookmarks.",Web,http;https;spdy;ssl;yahoo,20110209,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1765,Q_PROTO_DELTA_SEARCH,delta_search,,Delta Search,Browser toolbar search engine,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,775,Q_PROTO_DEPOSITFILES,depositfiles,,DepositFiles.com,This protocol plug-in classifies the http traffic to the host depositfiles.com. It also classifies the ssl traffic to the Common Name .depositfiles.com.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.depositfiles.com (2013-06-16),Mobile-Android-Depositfiles FileManager-20.131112.50- (2014-07-11);PC-Linux-DepositFiles Filemanager-1.0 build 2122- (2014-07-11);PC-Windows-7-Chrome-34.0.1847.137- (2014-07-11);iPhone-iOS-7.1.1-Safari- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,2040,Q_PROTO_DERSTANDARD,derstandard,,derStandard.at,Austrian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2287,Q_PROTO_DESKAWAY,deskaway,,DeskAway,"DeskAway is a web-based team and project management software that makes it easy to organize, manage and track projects from a central location.",Web,http;https;spdy;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1128,Q_PROTO_DETIK,detik,,Detik.com,This protocol plug-in classifies the http traffic to the host detik.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1132,Q_PROTO_DETIKNEWS,detiknews,,Detiknews.com,This protocol plug-in classifies the http traffic to the hosts detiknews.com and news.detik.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,385,Q_PROTO_DEVIANT_ART,deviant_art,,DeviantArt.com,This protocol plug-in classifies the http traffic to the host deviantart.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,625,Q_PROTO_DFS,dfs,,Distributed File System,The dfs protocol (Any distributed file system) is found over the IP layer (IANA protocol number: 68).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,626,Q_PROTO_DGP,dgp,,Dissimilar Gateway Protocol,The dgp protocol (Dissimilar Gateway Protocol) is found over the IP layer (IANA protocol number: 86).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,29,Q_PROTO_DHCP,dhcp,,Dynamic Host Configuration Protocol,The DHCP protocol is used to configure automatically the network parameters of a station.,Network Service,udp,DHCP IPv4,7/4/2008,,,,x,dhcp,,,x,,x,,x,x,,,,,,,,,,,,,,,,,,,,,x,,, +,2293,Q_PROTO_DHCP6,dhcp6,,Dynamic Host Configuration Protocol for IPv6,The DHCPv6 protocol is used to automatically configure the network parameters of a station in an IPv6 network.,Network Service,udp,DHCP IPv6,,,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,x,,, +,602,Q_PROTO_DIAMETER,diameter,,Diameter,"Diameter is an AAA (authentication, authorization and accounting) protocol for computer networks and an alternative to RADIUS.",Authentication,sctp;tcp,Diameter v1,2/22/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, +,30,Q_PROTO_DICT,dict,,Dictionary Server,The DICT protocol is a TCP transaction based query/response protocol that enables a client to access dictionary definitions from a set of natural language dictionary databases.,Application Service,tcp,DICT v1,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,995,Q_PROTO_DIGG,digg,,Digg.com,This protocol plug-in classifies the http traffic to the host digg.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2227,Q_PROTO_DIGIKALA,digikala,,Digikala,Iranian electronics and tech review website,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2302,Q_PROTO_DIGITALRIVER,digitalriver,,Digital River,Digital River is a public company that provides internet commerce services.,Web,http;https;spdy;ssl,20140526,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,386,Q_PROTO_DIGITALVERSE,digitalverse,,DigitalVerse.org,This protocol plug-in classifies the http traffic to the host digitalverse.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,776,Q_PROTO_DIINO,diino,,Diino.com,This protocol plug-in classifies the ssl traffic to the Common Name diino.com.,Peer to Peer,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,329,Q_PROTO_DIMP,dimp,,Dynamic Internet Messaging Program,DIMP is a Webmail protocol,Webmail,http;https;imp;spdy,20090904,6/6/2011,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,1523,Q_PROTO_DIODEO,diodeo,,Diodeo.com,Information portal ( www.diodeo.com ),Web,http;https;rtmp;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,914,Q_PROTO_DIOP,diop,,Datagram Inter-ORB Protocol,DIOP is a GIOP implementation over UDP which aims to be more efficient than the TCP one.,Middleware,giop,20110801,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1855,Q_PROTO_DIR,dir,,Dir.bg,Bulgarian news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,31,Q_PROTO_DIRECTCONNECT,directconnect,,DirectConnect (NMDC),DirectConnect is a peer-to-peer protocol. [Note: directconnect is also known as nmdc.],Peer to Peer,socks4;socks5;tcp;udp,PC-Windows-DC++ 0.830;Mac-Mac OS 10.9.1-valknut 0.4.9 (2014-02-13);PC-Linux 12.04.1 lts-valknut 0.4.9 (2014-02-13),Mac-Mac OS-10.9.1-Valknut-0.4.9- (2014-03-03);PC-Linux-Valknut-0.4.9- (2014-03-06);PC-Windows-7-DC++-0.843- (2014-05-19),,,,x,directconnect,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,713,Q_PROTO_DIRECTDOWNLOADLINKS,directdownloadlinks,x,DirectDownload Links,"Direct download link is a term used within the Internet-based file sharing community. It is used to describe a hyperlink that points to a location within the Internet where the user can download a file. This protocol used to contain a list of DDL websites, that was split into multiple protocols.",Web,,PC-Windows-Browser-www.directdownloadlinks.com (2013-07-13),10/3/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1776,Q_PROTO_DIRECTREV,directrev,,DirectREV.com,"DirectREV Media Delivery Platform is a real-time digital ad marketplace that connects publishers with agencies, ad networks and third-party technology providers.",Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,996,Q_PROTO_DIRECTV,directv,,DirecTV.com,This protocol plug-in classifies the http traffic to the host directv.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2041,Q_PROTO_DIRETUBE,diretube,,DireTube.com,Ethiopian media website,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,387,Q_PROTO_DISABOOM,disaboom,,Disaboom.com,This protocol plug-in classifies the http traffic to the host disaboom.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2268,Q_PROTO_DISCUSS,discuss,,Discuss,Hong Kongese forum about media and lifestyle.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,777,Q_PROTO_DIVSHARE,divshare,,DivShare.com,This protocol plug-in classifies the http traffic to the host divshare.com. It also classifies the ssl traffic to the Common Name divshare.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1314,Q_PROTO_DMM_CO,dmm_co,,Dmm.co.jp,Japanese adult videos web site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,32,Q_PROTO_DNS,dns,,Domain Name Service,The DNS protocol is used to translate internet names (www.site.com) into IP addresses and vice versa.,Network Service,tcp;udp,DNS IPv4;DNS IPv6,7/4/2008,,,,x,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1199,Q_PROTO_DNSHOP,dnshop,,Dnshop.com,This protocol plug-in classifies the http traffic to the host dnshop.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,778,Q_PROTO_DOCSTOC,docstoc,,Docstoc.com,This protocol plug-in classifies the http traffic to the hosts docstoccdn.com and docstoc.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2042,Q_PROTO_DOISONGPHAPLUAT,doisongphapluat,,Doisongphapluat.com,Vietnamese news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,388,Q_PROTO_DOL2DAY,dol2day,,Dol2day.com,This protocol plug-in classifies the http traffic to the host dol2day.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1856,Q_PROTO_DONEDEAL,donedeal,,DoneDeal.ie,Irish classified ads website,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1200,Q_PROTO_DONGA,donga,,Donga.com,This protocol plug-in classifies the http traffic to the host donga.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,389,Q_PROTO_DONTSTAYIN,dontstayin,,DontStayIn.com,This protocol plug-in classifies the http traffic to the host dontstayin.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2252,Q_PROTO_DOODLE_JUMP,doodle_jump,,Doodle Jump,Mobile game developped by Lima Sky LLC. It will be classified only in http,Game,flurry;http;https;spdy,"3.8 iOS,2.1.0 Android",,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1315,Q_PROTO_DOORBLOG,doorblog,,Doorblog.jp,This protocol plug-in classifies the http traffic to the host doorblog.jp. It also classifies the ssl traffic to the Common Name doorblog.jp.,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1857,Q_PROTO_DORGIO,dorgio,,Dorgio.mn,Mongolian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1252,Q_PROTO_DOUBAN,douban,,Douban.com,This protocol plug-in classifies the http traffic to the host douban.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2043,Q_PROTO_DR,dr,,Dr.dk,Danish news and content portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1858,Q_PROTO_DRAUGAS,draugas,,Draugas.lt,Lithuanian web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,390,Q_PROTO_DRAUGIEM,draugiem,,Draugiem.lv,This protocol plug-in classifies the http traffic to the host draugiem.lv.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,912,Q_PROTO_DRDA,drda,,Distributed Relational Database Architecture,DRDA is a protocol for carrying out SQL queries and commands.,Database,sna;tcp,4,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,1725,Q_PROTO_DREAMORA,dreamora,,Dreamora Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1201,Q_PROTO_DREAMWIZ,dreamwiz,,DreamWiz.com,This protocol plug-in classifies the http traffic to the host dreamwiz.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,779,Q_PROTO_DROPBOX,dropbox,,Dropbox.com,Dropbox is a free in-the-cloud file storage and synchronization service providing both web and smart application interfaces.,Web,http;https;spdy;ssl;udp,PC-Windows-Browser-www.dropbox.com (2013-07-13),Kindle Fire-Kindle Fire-Dropbox-2.3.10.4- (2014-04-08);Mac-Mac OS-10.9.3-DropBox-2.8.4- (2014-07-02);Mobile-Android-4.4.2-Dropbox-2.4.2- (2014-06-30);PC-Linux-DropBox-2.8.4- (2014-07-03);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);PC-Windows-7-DropBox-2.8.4- (2014-07-01);PC-Windows-8-Dropbox-2.0.0.0- (2014-06-18);Windows Phone-Windows Phone OS-8-Dropbox-3.0.0.0- (2014-02-11);iPhone-iOS-7.1.1-Dropbox-3.2- (2014-07-01),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1859,Q_PROTO_DRUKNET,druknet,,DrukNet.bt (Bhutan Telecom),Buthan Telecom website,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,997,Q_PROTO_DRUPAL,drupal,,Drupal.org,This protocol plug-in classifies the http traffic to the host drupal.org. It also classifies the ssl traffic to the Common Name .drupal.org.,Web,http;https;spdy;ssl,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,702,Q_PROTO_DSR,dsr,,Dynamic Source Routing,The dsr protocol (Dynamic Source Routing Protocol) is found over the IP layer (IANA protocol number: 48).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1860,Q_PROTO_DSTV,dstv,,Dstv,Program synopsis and channel information for South Africa satellite network.,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1291,Q_PROTO_DTLS,dtls,,Datagram Transport Layer Security,"DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents eavesdropping, tampering, or message forgery.",Network Service,capwap,1.2,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,33,Q_PROTO_DTP,dtp,,Dynamic Trunking Protocol,DTP (Dynamic Trunk Protocol) is a proprietary networking protocol developed by Cisco Systems for the purpose of negociating trunking on a link between two VLAN-aware switches.,Network Service,8021q;eth;gre;snap,DTP v1,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1817,Q_PROTO_DUBIZZLE,dubizzle,,Dubizzle.com,"Dubizzle is your free classifieds website to buy, sell and find anything in your local community. It is covering Arabian Peninsula and Maghreb.",Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1363,Q_PROTO_DUOWAN,duowan,,Duowan.com,Chinese online game media.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1861,Q_PROTO_DV,dv,,DV.is,Icelandic news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,780,Q_PROTO_DYNAMICINTRANET,dynamicintranet,,DynamicIntranet.com,This protocol plug-in classifies the http traffic to the host dynamicintranet.com. It also classifies the ssl traffic to the Common Name dynamicintranet.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,781,Q_PROTO_EARTHCAM,earthcam,,EarthCam.com,This protocol plug-in classifies the http traffic to the host earthcam.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1364,Q_PROTO_EASTMONEY,eastmoney,,Eastmoney.com,"One of Chinese most influential financial media, providing comprehensive financial news and financial market information, covering stocks, finance, securities, finance, market, funds, Hong Kong stocks, foreign exchange, futures, bonds, insurance, banking.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1365,Q_PROTO_EASYTRAVEL,easytravel,,Easytravel.com.tw,Taiwanese travel booking agency.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,34,Q_PROTO_EBAY,ebay,,eBay.com,Ebay is a famous online auction and shopping website.,Web,http;https;spdy,20090924,3/6/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,269,Q_PROTO_EBUDDY,ebuddy,,eBuddy.com,eBuddy is a web and mobile messenger which supports various instant messaging.,Instant Messaging,http;https;spdy;ssl;tcp,20120926,PC-Windows-Firefox- (2014-05-27),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, +,935,Q_PROTO_ECHO,echo,,Echo,The echo service simply sends back to the originating source any data it receives.,Network Service,tcp;udp,RFC 862,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1862,Q_PROTO_ECHOROUKONLINE,echoroukonline,,Echoroukonline.com,Algerian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2222,Q_PROTO_ECUAVISA,ecuavisa,,Ecuavisa,Ecuadorian TV channel website,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2016,Q_PROTO_EDGECAST,edgecast,,EdgeCast Networks CDN,Edgecast is a file streaming solution provider for audio/video content web services.,Web,http;https;spdy;ssl,20140114,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,35,Q_PROTO_EDONKEY,edonkey,,Edonkey,Edonkey is a peer-to-peer protocol. Classification is not guaranteed when the protocol obfuscation feature is enable (feature appeared in eMule version 0.47b). [Note: edonkey is also known as kadmelia and emule.],Peer to Peer,http;socks4;socks5;tcp;udp,PC-Windows-eMule 0.48a,PC-Linux-aMule-2.2.6- (2012-10-29);PC-Windows-Lphant-3.51- (2012-10-29);PC-Windows-eMule-0.50a- (2014-02-03),,,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,2161,Q_PROTO_EDUCARRIERE,educarriere,,Educarriere,Ivory Coast Job portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2311,Q_PROTO_EGLOOS,egloos,,Egloos,Egloos is a South Korean blog hosting website.,Web,http;https;spdy,PC-Windows-Google Chrome-www.egloos.com (2014-06-30),,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1524,Q_PROTO_EGNYTE,egnyte,,Egnyte Enterprise File Sharing,Enterprise online file sharing ( https://www-am2.egnyte.com/corp/registration/lp-join-the-thousands.html ),Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,710,Q_PROTO_EGP,egp,,Exterior Gateway Protocol,The egp protocol (Exterior Gateway Protocol) is found over the IP layer (IANA protocol number: 8).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,36,Q_PROTO_EIGRP,eigrp,,Enhanced Interior Gateway Routing Protocol,"The Enhanced Interior Gateway Routing Protocol (EIGRP) is an improved version of its predecessor IGRP, a Cisco proprietary protocol.",Routing,ip,EIGRP v2,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1863,Q_PROTO_EKANTIPUR,ekantipur,,Ekantipur.com,Nepalese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1864,Q_PROTO_EKSTRABLADET,ekstrabladet,,EkstraBladet.dk,Danish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1865,Q_PROTO_ELCAT,elcat,,ElCat.kg,Kyrgyzstanese internet service provider,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2044,Q_PROTO_ELCOMERCIO,elcomercio,,Elcomercio.pe,Peruvian news portal.,Web,http;https;spdy,20140220,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2045,Q_PROTO_ELDEBER,eldeber,,Eldeber.com.bo,Bolivian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,391,Q_PROTO_ELFTOWN,elftown,,Elftown.com,This protocol plug-in classifies the http traffic to the host elftown.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1866,Q_PROTO_ELHEDDAF,elheddaf,,ElHeddaf.com,Algerian sports new portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2046,Q_PROTO_ELHERALDO,elheraldo,,Elheraldo.hn,Honduran news portral,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2165,Q_PROTO_ELHOURRIYA,elhourriya,,Elhourriya,Mauritanian news portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1366,Q_PROTO_ELLE_TW,elle_tw,,Elle.com.tw,"Taiwanese portal Beauty, style trends, editor's picks, shopping, astrology, reader forums and supplemental content from the print publication.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1525,Q_PROTO_ELLUMINATE,elluminate,,Elluminate.com,Rent virtual rooms where people can hold classes and meetings ( http://try.bbcollaborate.com/trial/register.go ).,Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2047,Q_PROTO_ELMUNDO,elmundo,,Elmundo.es,Spanish news portal.,Web,http;https;spdy,20140220,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2084,Q_PROTO_ELNASHRA,elnashra,,Elnashra.com,Lebanese news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1867,Q_PROTO_ELNUEVODIA,elnuevodia,,ElNuevoDia.com,Puerto Rican news portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1868,Q_PROTO_ELNUEVODIARIO,elnuevodiario,,ElNuevoDiario.com.ni,Nicaraguan news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1761,Q_PROTO_ELPAIS,elpais,,ElPais.com,"Spanish news web portal, also accessed from Uruguay and Colombia.",Web,http;https;spdy,20140130,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2085,Q_PROTO_ELSALVADOR,elsalvador,,Elsalvador.com,EL Salvadorian news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2183,Q_PROTO_ELTIEMPO,eltiempo,,Eltiempo,Colombian news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2203,Q_PROTO_ELUNIVERSO,eluniverso,,Eluniverso,Ecuadorian news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1202,Q_PROTO_EMAPS,emaps,x,Empas,This protocol plug-in classifies the http traffic to the host empas.com.,Web,,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,627,Q_PROTO_EMCON,emcon,,EMCON,The emcon protocol (EMCON) is found over the IP layer (IANA protocol number: 14).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2086,Q_PROTO_EMOL,emol,,Emol.com,Chilean news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2260,Q_PROTO_EMPIRE_FOUR_KINGDOMS,empire_four_kingdoms,,Empire: Four Kingdoms,Mobile game,Game,http;https;spdy,Mobile-Android-Empire: Four Kingdoms 1.2.11;iPhone-iOS-Empire: Four Kingdoms 1.2.10,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,726,Q_PROTO_ENCAP,encap,,Encapsulation Header,The encap protocol (Encapsulation Header) is found over the IP layer (IANA protocol number: 98).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1783,Q_PROTO_ENCUENTRA24,encuentra24,,Encuentra24.com,"Official Panama Classifieds Portal. Publish ads for rent or sale real estate, or jobs, cars, pet",Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1726,Q_PROTO_ENERGY_TORRENT,energy_torrent,,Energy-Torrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,393,Q_PROTO_EONS,eons,,Eons.com,This protocol plug-in classifies the http traffic to the host eons.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,392,Q_PROTO_EPERNICUS,epernicus,,Epernicus.com,This protocol plug-in classifies the http traffic to the host epernicus.com. It also classifies the ssl traffic to the Common Name epernicus.com.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,37,Q_PROTO_EPM,epm,,EndPoint Mapper,End Point Mapper is a protocol used by Exchange to determine the ports used by various services.,Application Service,dcerpc;msrpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,782,Q_PROTO_EROOM_NET,eroom_net,,eRoom.net,This protocol plug-in classifies the ssl traffic to the Common Name project1.eroom.net.,Web,https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,783,Q_PROTO_ESNIPS,esnips,,eSnips.com,This protocol plug-in classifies the http traffic to the host esnips.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,719,Q_PROTO_ESP,esp,x,Encapsulating Security Payload,The esp protocol (Encap Security Payload) is found over the IP layer (IANA protocol number: 50). See IPsec.,Network Service,,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1467,Q_PROTO_ESPN,espn,,ESPN.go.com,American news website/resources about sports.,Web,http;https;spdy,20130425,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1773,Q_PROTO_ESPNCRICINFO,espncricinfo,,ESPNCricinfo.com,"International cricket news, live scores, photos, columns and player profiles.",Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2271,Q_PROTO_ESSAHRAA,essahraa,,Essahraa,Mauritanian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2087,Q_PROTO_ESSIRAGE,essirage,,EssirageNet,Mauritanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,42,Q_PROTO_ESTABLISHED,established,,Established TCP Connection,The Established protocol is a virtual protocol grouping all TCP connections already established before starting analyzing the traffic (no SYNC).,Standard,tcp,NA,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1367,Q_PROTO_ETAO,etao,,Etao.com,eTao is the most comprehensive shopping search engine in China in terms of product and merchant information.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,43,Q_PROTO_ETH,eth,,Ethernet,The Ethernet protocol enables the addressing and sending of data between stations of an Ethernet segment.,Network Service,base;capwap;isl;mpls;pwe,Ethernet II,,x,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,44,Q_PROTO_ETHERIP,etherip,,Ethernet Over IP,The EtherIP protocol is used to encapsulate Ethernet frames in IP packets.,Tunneling,ip,RFC 3378,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2088,Q_PROTO_ETHIOJOBS,ethiojobs,,Ethiojobs.net,Ethiopian job ads,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2089,Q_PROTO_ETHIOTUBE,ethiotube,,EthioTube.net,Ethiopian video hosting website,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,537,Q_PROTO_ETSI_LI,etsi_li,,ETSI Lawful Interception TS 10 232-1 V2.1.1,Etsi LI is a protocol which forms a standard for telecoms operators and networks operators.,Tunneling,base,ETSI v2.1.1,,x,,,,,,x,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1368,Q_PROTO_ETTODAY,ettoday,,Ettoday.net,"ETtoday.net provide real-time news, including political, financial, social and international news, as well as life, consumption, pets, novelty, entertainment, sports, travel information and related news stories.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1112,Q_PROTO_EVE_ONLINE,eve_online,,Eve Online,Eve Online is a multiplayer online game edited by CCP.,Game,amazon_aws;http;https;sip;spdy;ssl;tcp,7.41.377968,Mac-Mac OS-- (2012-05-29);PC-Windows-7-- (2012-05-29),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1495,Q_PROTO_EVERNOTE,evernote,,Evernote.com,Web-based portal for note taking.,Web,akamai;http;https;spdy;ssl,20130701,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1282,Q_PROTO_EVERQUEST,everquest,,EverQuest - EverQuest II,"Everquest is a 3D fantasy massively multiplayer online role-playing game (MMORPG), for Windows platforms, developed by Sony Online Entertainment(SOE).",Game,http;https;spdy;ssl;udp,20041008,PC-Windows-EverQuest-2- (2012-10-31),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,784,Q_PROTO_EVONY,evony,,Evony.com,This protocol plug-in classifies the http traffic to the host evony.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1330,Q_PROTO_EXBLOG,exblog,,Exblog.jp,Japanase blog hosting services owned by Excite,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2262,Q_PROTO_EXPATRIATES,expatriates,,Expatriates,International Classified Ads website for expatriates.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,288,Q_PROTO_EXPEDIA,expedia,,Expedia.fr,This protocol plug-in classifies the http traffic to the hosts expedia.com and expedia.fr.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,394,Q_PROTO_EXPERIENCE_PROJECT,experience_project,,ExperienceProject.com,This protocol plug-in classifies the http traffic to the host experienceproject.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,395,Q_PROTO_EXPLOROO,exploroo,,Exploroo.com,This protocol plug-in classifies the http traffic to the host exploroo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1727,Q_PROTO_EXTREMEBITS,extremebits,,ExtremeBits Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1728,Q_PROTO_EXTREMENOVA,extremenova,,ExtremeNova Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,785,Q_PROTO_EYEJOT,eyejot,,Eyejot.com,"This protocol plug-in classifies the http traffic to the hosts eyejot.com, eyejot.typepad.com and eyejot.uservoice.com. It also classifies the ssl traffic to the Common Name .eyejot.com.",Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1369,Q_PROTO_EYNY,eyny,,Eyny.com,"Hot topic, leisure and entertainment, academic, computer, information exchange forum.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1370,Q_PROTO_EZFLY,ezfly,,Ezfly.com,Taiwanese online travel agency.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1526,Q_PROTO_EZPEER,ezpeer,,MyMusic.net.tw,P2p for music. music files downloading ( http://www.ezpeer.com ),Peer to Peer,http;https;spdy;ssl,6.0.1.7,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,1371,Q_PROTO_EZTRAVEL,eztravel,,EzTravel.com.tw,Taiwanese online travel agency.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,244,Q_PROTO_FACEBOOK,facebook,,Facebook.com,Facebook is a social network.,Web,akamai;http;https;spdy;ssl,PC-Windows-Browser-www.facebook.com (2014-02-12);Mobile-Android-Facebook 4.0.0;iPhone-iOS-Facebook 6.9.1 (2014-02-07);Nokia Mobile-Windows Phone OS 8.0.10517.150-Facebook 5.2.3.0 (2014-02-12);BlackBerry-BlackBerry OS 10.2.1.1925-Facebook 10.3.0.2 (2014-02-12),BlackBerry-BlackBerry OS-10.2.1.2141-Facebook-10.4.1.11- (2014-06-12);Mobile-Android-4.4.2-Facebook Messenger-6.0.0.27.0- (2014-06-24);Mobile-Android-4.4.2-Facebook-11.0.0.11.23- (2014-06-30);Mobile-Android-Browser- (2014-05-27);Mobile-Bada-Facebook-0.9.11- (2014-04-04);Nokia Mobile-Nokia Asha 311-Symbian-Facebook-3.2.2- (2014-06-09);PC-Windows-7-Chrome-33.0.1750.154-Facebook for Chrome-6.4.2- (2014-05-05);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-14);PC-Windows-7-Chrome-Facebook-1.0.3- (2014-06-05);PC-Windows-8-Facebook-1.3.0.9- (2014-06-18);Windows Phone-Windows Phone OS-8-Facebook-5.2.6.0- (2014-06-03);Windows Phone-Windows Phone OS-8.0.10517.155-Messenger-5.0.3.0- (2014-06-25);iPhone-iOS-7.1.1-Facebook-10.0- (2014-06-03);iPhone-iOS-7.1.2-Facebook Messenger-6.1- (2014-07-03),,x,,,,,,,,,x,,,,,x,x,,,,x,,x,,,,x,,,,,,,,,, +,1280,Q_PROTO_FACEBOOK_APPS,facebook_apps,,Facebook Apps,Facebook Applications.,Web,facebook;zynga,PC-Windows-Browser-apps.facebook.com (2014-11-14);Mobile-Android-Facebook 4.0.0;iPhone-iOS-Facebook 6.8,BlackBerry-BlackBerry OS-10.2.1.3175-Facebook-10.4.1.11- (2014-06-27);Mobile-Android-4.2.1-Facebook-10.0.0.28.27- (2014-06-19);PC-Windows-7-Chrome-35.0.1916.153-angrybirds/farmville- (2014-06-16);iPhone-iOS-7.1.1-Facebook-10.0-angrybirds/farmville- (2014-06-02),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,x,,,, +,524,Q_PROTO_FACEBOOK_MAIL,facebook_mail,,facebook mail,Facebook_mail is a webmail environment on Facebook. Encrypted traffic is classified as Facebook.,Webmail,facebook;http,PC-Windows-Browser-www.facebook.com (2013-08-30),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-16),,x,,x,,,,,,,x,,,,x,,,,,,x,,x,,,,,,,,,,,,,, +,1869,Q_PROTO_FACENAMA,facenama,,Facenama.com,Iranian social network,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,396,Q_PROTO_FACEPARTY,faceparty,,Faceparty.com,This protocol plug-in classifies the http traffic to the host faceparty.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,397,Q_PROTO_FACES,faces,,Faces.com,This protocol plug-in classifies the http traffic to the host faces.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1117,Q_PROTO_FACETIME,facetime,,Apple FaceTime,FaceTime is an Apple video calling software which runs on iOS based mobile devices.,Audio/Video,rtp;sip,Mac-Mac OS 10.9.2-FaceTime 3.0;Mac-iOS-FaceTime 7.1.1,Mac-Mac OS-10.9.2-Facetime-3.0- (2014-05-02);iPhone-iOS-7.1.2-Facetime-7.1.2- (2014-07-04),,x,,,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +,2218,Q_PROTO_FARMVILLE,farmville,,FarmVille,FarmVille is a farming simulation social network game developed by Zynga.,Web,http;https;spdy;ssl,PC-Windows-Browser-http://zynga.com/game/farmville (2014-03-06),PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,x,,,, +,1870,Q_PROTO_FARSNEWS,farsnews,,FarsNews.com,Iranian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1372,Q_PROTO_FASHIONGUIDE,fashionguide,,FashionGuide.com.tw,"Fashion, beauty, discount information guide, fashion and beauty forum, cosmetic reviews.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1871,Q_PROTO_FATAKAT,fatakat,,Fatakat.com,Egyptian portal targeted to arab wowen lifestyle,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1308,Q_PROTO_FC2,fc2,,FC2.com,Japanese free blog platform and social website,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2206,Q_PROTO_FEMINA,femina,,Femina,"Women news, trends and gears specialised websites.",Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1729,Q_PROTO_FENOPY,fenopy,,Fenopy Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,398,Q_PROTO_FETLIFE,fetlife,,FetLife.com,This protocol plug-in classifies the http traffic to the host fetlife.com. It also classifies the ssl traffic to the Common Name fetlife.com.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,629,Q_PROTO_FIBRE_CHANNEL,fibre_channel,,Fibre Channel,The fibre_channel protocol (Fibre Channel) is found over the IP layer (IANA protocol number: 133).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1872,Q_PROTO_FIJITIMES,fijitimes,,FijiTimes.com,Fijian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,787,Q_PROTO_FILE_DROPPER,file_dropper,,FileDropper.com,This protocol plug-in classifies the http traffic to the host filedropper.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,786,Q_PROTO_FILE_HOST,file_host,,FileHost.ro,This protocol plug-in classifies the http traffic to the host filehost.ro.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1991,Q_PROTO_FILEFACTORY_COM,filefactory_com,,filefactory.com,Classifies web browsing on the filefactory.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,316,Q_PROTO_FILEFLYER,fileflyer,,FileFlyer.com,"FileFlyer is an online solution to store, send and share files",Web,http;https;spdy,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1527,Q_PROTO_FILEGURI,fileguri,,Fileguri.com,File sharing web site and p2p client ( http://www.fileguri.com ),Peer to Peer,http;https;spdy;ssl,6.9.2,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,1528,Q_PROTO_FILEI,filei,,Filei.co.kr,P2P website. ( http://www.filei.co.kr ),Peer to Peer,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,2090,Q_PROTO_FILELIST,filelist,,Filelist.ro,Romanian torrent indexing website,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1529,Q_PROTO_FILEMAIL,filemail,,Filemail.com,File transfer service for private business. Uses Microsoft Cloud ( http://www.filemail.com ),Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1086,Q_PROTO_FILEMAKER_PRO,filemaker_pro,,FileMaker Pro,FileMaker Pro is a relational database application from FileMaker Inc and which runs on Microsoft Windows as well as Mac OS.,Database,http;https;iiop;spdy,7,11/7/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1957,Q_PROTO_FILEPOST_RU,filepost_ru,,filepost.ru,Classifies web browsing on the filepost.ru Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,788,Q_PROTO_FILER_CX,filer_cx,,Filer.cx,This protocol plug-in classifies the http traffic to the host filer.cx.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1998,Q_PROTO_FILER_NET,filer_net,,filer.net,Classifies web browsing on the filer.net Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,789,Q_PROTO_FILES_TO,files_to,x,Files.to,This protocol plug-in classifies the http traffic to the host files.to.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1997,Q_PROTO_FILESEND_NET,filesend_net,,filesend.net,Classifies web browsing on the filesend.net Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1530,Q_PROTO_FILESERVE,fileserve,,FileServe.com,Fileserve is a file share service for personal use. ( http://www.fileserve.com ),Web,http;https;spdy,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1907,Q_PROTO_FILESHAREPRO,filesharepro,,WWW File Share Pro (wfshome.com),"File transfer application, allowing file sharing on a LAN network, or on the Internet.",File Transfer,http;https;spdy,7.0 (Windows),PC-Windows-FileSharePro-7.0- (2013-12-23),,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,1693,Q_PROTO_FILESOVERMILES,filesovermiles,,Filesovermiles.com,Filesovermiles is a p2p written in Flash which is meant to be executed from a browser page (blocking use case is supported but flow classification is limited to web).,Peer to Peer,http;https;spdy,20130819,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,790,Q_PROTO_FILESTUBE,filestube,,FilesTube.com,This protocol plug-in classifies the http traffic to the host filestube.com.,Web,http;https;spdy,20140617,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,560,Q_PROTO_FILETOPIA,filetopia,,Filetopia.org,"Filetopia is a free, proprietary peer-to-peer client software for Windows. It uses an encrypted protocol for all its communications. In addition to the usual peer-to-peer features, Filetopia provides a chat, a buddy search and a message board.",Peer to Peer,https;socks4;socks5;tcp;udp,Filetopia 3.04d,4/13/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,399,Q_PROTO_FILLOS_DE_GALICIA,fillos_de_galicia,,Fillos de Galicia (fillos.org),This protocol plug-in classifies the http traffic to the host fillos.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,400,Q_PROTO_FILMAFFINITY,filmaffinity,,FilmAffinity.com,This protocol plug-in classifies the http traffic to the host filmaffinity.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1873,Q_PROTO_FINN,finn,,FINN.no,Norwegian web portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,630,Q_PROTO_FIRE,fire,,FIRE,The fire protocol (FIRE) is found over the IP layer (IANA protocol number: 125).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,556,Q_PROTO_FIREFOX_UPDATE,firefox_update,,Firefox Update,Mozilla Firefox update protocol for the browser and its plugins. This only applies to updates made from the browser and not those manually downloaded.,Web,conduit;mozilla,PC-Windows-Firefox 24,Mac-Mac OS-10.9.4-Firefox-30.0- (2014-07-02);PC-Linux-12.04-Firefox-30.0- (2014-06-30);PC-Windows-7-Firefox-30.0- (2014-07-03);PC-Windows-Firefox-29.0.1- (2014-05-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,942,Q_PROTO_FLASH,flash,,Flash Media Playback,Adobe Flash Media Playback is a dynamic HTTP streaming protocol used to access video contents from a smart client application.,Audio/Video,http;https;spdy,2.0,9/28/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,550,Q_PROTO_FLASHPLUGIN_UPDATE,flashplugin_update,,Adobe Flash Plugin Update,Flash exchanges plug-in version numbers with Adobe servers.,Web,http;https;spdy,PC-Windows 7-Firefox 17;PC-Windows 7-Firefox 17,Mac-Mac OS-10.9.3-Flash Player-14.0.0.125- (2014-06-23);PC-Linux-ubuntu 13.04-Adobe Flash Player-11.2.202.356- (2014-05-06);PC-Windows-8-Flash Player-14.0.0.125- (2014-06-17);PC-Windows-Flash Player-14.0.0.125- (2014-06-12),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,401,Q_PROTO_FLEDGEWING,fledgewing,,FledgeWing.com,This protocol plug-in classifies the http traffic to the host fledgewing.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,300,Q_PROTO_FLICKR,flickr,,Flickr.com,This protocol plug-in classifies the http traffic to the host flickr.com. Encrypted traffic is classified as yahoo.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.flickr.com (2014-03-10);Mobile-Android 4.2.1-Flickr 2.1.5.29352 (2014-03-13),Mobile-Android-4.4.2-Flickr-3.1- (2014-07-01);Mobile-Bada-Flickr-1.0.0- (2014-04-08);PC-Windows-7-Chrome-34.0.1847.116-Flickr-7- (2014-04-16);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-30);Windows Phone-Windows Phone OS-Flickr-2.1.0.0- (2014-01-07);iPhone-iOS-7.1.1-Flickr-3.1.0- (2014-07-01),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2091,Q_PROTO_FLIPKART,flipkart,,Flipkart.com,Indian ecommerce website,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,402,Q_PROTO_FLIXSTER,flixster,,Flixster.com,This protocol plug-in classifies the http traffic to the host flixster.com.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,791,Q_PROTO_FLUMOTION,flumotion,,Flumotion.com,This protocol plug-in classifies the http traffic to the host flumotion.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2300,Q_PROTO_FLURRY,flurry,,Flurry,Flurry provides services to optimize customer's mobile experience through apps and personalized ads.,Web,http;https;spdy;ssl,20140507,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,792,Q_PROTO_FLUXIOM,fluxiom,,Fluxiom.com,This protocol plug-in classifies the http traffic to the host fluxiom.com. It also classifies the ssl traffic to the Common Name fluxiom.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,793,Q_PROTO_FLY_PROXY,fly_proxy,,FlyProxy.com,This protocol plug-in classifies the http traffic to the host flyproxy.com. It also classifies the ssl traffic to the Common Names flyproxy.com and SD259.slicebox.net.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1809,Q_PROTO_FLYCELL_EC,flycell_ec,,Flycell.ec,SMS alerts service based in Ecuador,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1810,Q_PROTO_FLYCELL_PE,flycell_pe,,Flycell.pe,"Peruvian ringtone, wallpaper and mobile game portal",Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2168,Q_PROTO_FNB,fnb,,Fnb,South African banking website,Web,http;https;spdy;ssl,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,794,Q_PROTO_FOGBUGZ,fogbugz,,FogCreek.com,This protocol plug-in classifies the http traffic to the host fogbugz.com. It also classifies the ssl traffic to the Common Name fogbugz.com.,Web,http;https;spdy;ssl,20130828,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1874,Q_PROTO_FORENINGSSPARBANKEN,foreningssparbanken,,ForeningsSparbanken (swedbank.se),Swedish web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1373,Q_PROTO_FORTUNECHINA,fortunechina,,Fortunechina.com,Chinese top fortune news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2092,Q_PROTO_FORUM,forum,,Forum.ge,Coratian forum,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,795,Q_PROTO_FOTKI,fotki,,Fotki.com,This protocol plug-in classifies the http traffic to the host fotki.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,403,Q_PROTO_FOTOLOG,fotolog,,Fotolog.com,This protocol plug-in classifies the http traffic to the host fotolog.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1531,Q_PROTO_FOTOWEB,fotoweb,,Fotoweb.fotoware.com,Digital asset management workflow solutions ( http://fotoweb.fotoware.com ),Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,404,Q_PROTO_FOURSQUARE,foursquare,,Foursquare.com,This protocol plug-in classifies the http traffic to the host foursquare.com. It also classifies the ssl traffic to the Common Name foursquare.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2195,Q_PROTO_FOXBUSINESS,foxbusiness,,Fox Business Network,Fox Business Network (FBN) is an American cable and satellite business news television channel that is owned by the Fox Entertainment Group division of 21st Century Fox. The network discusses business and financial news.,Web,http;https;spdy,2294,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,998,Q_PROTO_FOXMOVIES,foxmovies,,Foxmovies.jp,"This protocol plug-in classifies the http traffic to the hosts foxmovies.jp, foxmovies.com.",Web,http;https;spdy,20140320,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,999,Q_PROTO_FOXNEWS,foxnews,,FoxNews.com,This protocol plug-in classifies the http traffic to the host foxnews.com.,Web,akamai;http;https;spdy;ssl,PC-Windows-Browser-www.foxnews.com (2014-03-14),PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-8-Fox News-1.0.0.22- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1000,Q_PROTO_FOXSPORTS,foxsports,,FoxSports.com,This protocol plug-in classifies the http traffic to the host foxsports.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,887,Q_PROTO_FOXY,foxy,,Foxy,Foxy is a peer-to-peer protocol based on GnucDNA.,Peer to Peer,gnutella;http;https;spdy,1,6/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1811,Q_PROTO_FREE,free,,Free,French ISP and mobile operator website.,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2197,Q_PROTO_FREE_MUSIC_DOWNLOAD,free_music_download,,Free Music Download Pro - Downloader and Player,"Download, play, sort, organize media files.",Audio/Video,http;https;scorecardresearch;spdy,iPhone-iOS-Free Music Download Pro 1.4 (2014-03-19),iPhone-iOS-Free Music Download Pro-1.4- (2014-03-21),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, +,568,Q_PROTO_FREEBSD_UPDATE,freebsd_update,,FreeBSD Updates,This protocol is used for FreeBSD updates.,Web,http;https;spdy,FreeBSD v8.1,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,796,Q_PROTO_FREEETV,freeetv,,FreeeTV.com,This protocol plug-in classifies the http traffic to the host freeetv.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1730,Q_PROTO_FREELOADER,freeloader,,Freeloader Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1875,Q_PROTO_FREEMAIL,freemail,,Freemail.hu,Hungarian webmail,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,2007,Q_PROTO_FREEPROXIES,freeproxies,,Freeproxies.org,"Proxy hosting service (redirector and anonymizer) that uses the CGI Proxy script. Main features are SSL support and Youtube.com video streaming proxying. It hosts several proxy websites, like Vtunnel.com.",Web,http;https;spdy;ssl,20131227,PC-Windows-- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,1731,Q_PROTO_FREETORRENT,freetorrent,,Freetorrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,405,Q_PROTO_FRIENDS_REUNITED,friends_reunited,,FriendsReunited.com,This protocol plug-in classifies the http traffic to the host friendsreunited.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,320,Q_PROTO_FRIENDSTER,friendster,,Friendster.com,"Friendster is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;spdy;ssl,20111115,11/4/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,797,Q_PROTO_FRIENDVOX,friendvox,,FriendVox.com,This protocol plug-in classifies the http traffic to the host friendvox.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,536,Q_PROTO_FRING,fring,,fring - Peer to Peer Mobile VOIP,Fring is a peer-to-peer Mobile VoIP based Internet telephony network.,Audio/Video,http;https;spdy;ssl;tcp;udp,20100804,12/12/2011,,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,2001,Q_PROTO_FROSTWIRE,frostwire,,FrostWire Bittorrent client,FrostWire is a BitTorrent client. This signature classifies flows to the official software website,Peer to Peer,bittorrent;http;https;spdy,20131204,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,406,Q_PROTO_FRUHSTUCKSTREFF,fruhstuckstreff,,Fruhstuckstreff.de,This protocol plug-in classifies the http traffic to the host fruehstueckstreff.de.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2176,Q_PROTO_FRUIT_NINJA,fruit_ninja,,Fruit Ninja,Mobile game.,Game,http;https;spdy,Mobile-Android-Fruit Ninja 1.8.8;iPhone-iOS-Fruit Ninja 1.8.8,Mobile-Android-Fruit Ninja-1.8.8- (2014-03-13);iPhone-iOS-Fruit Ninja-1.8.8- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,2249,Q_PROTO_FSECURE,fsecure,,Fsecure,F-Secure Corporation is a Finnish computer security company,Security Service,http;https;spdy;ssl,2294,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,589,Q_PROTO_FSECURE_UPDATE,fsecure_update,,Fsecure Update,Fsecure_update is the protocol used for Fsecure softwares updates.,Web,http;https;spdy,PC-Windows 7-F-Secure Anti-Virus 1.77.132.0,Mac-Mac OS-10.9.3-F-Secure Anti-Virus-1.0.282(13406)- (2014-06-25);PC-Windows-7-F-Secure Anti-Virus-2.6.303.0- (2014-05-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,45,Q_PROTO_FTP,ftp,,File Transfer Protocol,The FTP protocol is used for reliable data transfer between a client and a server.,File Server,http;socks4;socks5;tcp,File Transfer Protocol IPv4;File Transfer Protocol IPv6,2/14/2014,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,46,Q_PROTO_FTP_DATA,ftp_data,,File Transfer Protocol Data,This protocol is used to transport data in data connection of FTP communication.,File Server,http;tcp,FTP Data IPv4;FTP Data IPv6,7/4/2008,,,,,ftp,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,751,Q_PROTO_FTPS,ftps,,File Transfer Protocol Secure,Secure version of the FTP protocol.,File Server,ssl,Secure FTP IPv4;Secure FTP IPv6,,,,,,,989 and 990,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,407,Q_PROTO_FUBAR,fubar,,Fubar.com,This protocol plug-in classifies the http traffic to the host fubar.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1094,Q_PROTO_FUNSHION,funshion,,Funshion video player,Funshion player is a Chinese service for downloading and streaming movies.,Web,http;https;spdy;tcp;udp,2.4.5.9,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1532,Q_PROTO_FUZE_MEETING,fuze_meeting,,Fuze meeting,"Video-conferencing application (audio, video HD, desktop sharing, file transfer)",Audio/Video,https;spdy;ssl,1.10.45735.0,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,343,Q_PROTO_GADUGADU,gadugadu,,Gadu-Gadu,Gadu Gadu is a Polish instant messaging protocol.,Instant Messaging,http;https;spdy;tcp,GaduGadu v10,10/16/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,408,Q_PROTO_GAIAONLINE,gaiaonline,,GaiaOnline.com,This protocol plug-in classifies the http traffic to the host gaiaonline.com. It also classifies the ssl traffic to the Common Name .gaiaonline.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1374,Q_PROTO_GAMEBASE_TW,gamebase_tw,,Gamebase.com.tw,"Taiwanese game information portal providing game reviews, walkthrough, cheats.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2213,Q_PROTO_GAMELOFT,gameloft,,Gameloft Games,Games for mobile devices by Gameloft.,Game,http;https;spdy;ssl,20131218,7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1375,Q_PROTO_GAMER_TW,gamer_tw,,Gamer.com.tw,"Taiwanese game portal providing game reviews, forum, news.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,409,Q_PROTO_GAMERDNA,gamerdna,,GamerDNA.com,This protocol plug-in classifies the http traffic to the host gamerdna.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1150,Q_PROTO_GAMES_CO,games_co,,Games.co.id,This protocol plug-in classifies the http traffic to the host games.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1376,Q_PROTO_GAMESMOMO,gamesmomo,,Gamesmomo.net,"Selection of fun games, Flash Games.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1273,Q_PROTO_GANJI,ganji,,Ganji.com,This protocol plug-in classifies the http traffic to the host ganji.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1876,Q_PROTO_GARAANEWS,garaanews,,GaraaNews.com,Jordanian news portal,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,48,Q_PROTO_GARP,garp,,Generic Attribute Registration Protocol,The Generic Attribute Registration Protocol (GARP) provides a generic framework whereby devices in a bridged LAN can register or delete attribute values between each other.,Application Service,8021q;eth;gre,RFC 3945,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,410,Q_PROTO_GATHER,gather,,Gather.com,This protocol plug-in classifies the http traffic to the host gather.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1533,Q_PROTO_GATHERPLACE,gatherplace,,GatherPlace.net,Gatherplace is a web conferencing software.,Web,http;https;spdy;ssl,4.3.8.2,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,411,Q_PROTO_GAYS,gays,,Gays.com,This protocol plug-in classifies the http traffic to the host gays.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1877,Q_PROTO_GAZETA,gazeta,,Gazeta.pl,Polish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2181,Q_PROTO_GAZETAEXPRESS,gazetaexpress,,Gazetaexpress,Albanian news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2184,Q_PROTO_GAZZETTA,gazzetta,,Gazzetta,Greek news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2009,Q_PROTO_GBRIDGE,gbridge,,Gbridge.com,"Gbridge is a free software that lets you remotely control PCs, sync folders, share files, and chat securely.",Tunneling,http;https;spdy;udp,2.0.0.1363,PC-Windows-Gbridge-2.0.0.1363- (2013-12-17),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,412,Q_PROTO_GENI,geni,,Geni.com,This protocol plug-in classifies the http traffic to the host geni.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,, +,2093,Q_PROTO_GERASANEWS,gerasanews,,Gerasanews.com,Jordanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1377,Q_PROTO_GFAN,gfan,,Gfan.com,"One of the largest Android communities providing ROM, applications, tutorials and other content.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,631,Q_PROTO_GGP,ggp,,Gateway-to-Gateway Protocol,The ggp protocol (Gateway_to_Gateway) is found over the IP layer (IANA protocol number: 3).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1878,Q_PROTO_GHANAWEB,ghanaweb,,GhanaWeb.com,Ghanaian news portal,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1107,Q_PROTO_GHOSTSURF,ghostsurf,,GhostSurf,GhostSurf is an internet privacy application.,Security Service,ssl;tcp,6.0,PC-Windows-7-GhostSurf-6.0- (2012-04-20),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1987,Q_PROTO_GIGASIZE_COM,gigasize_com,,gigasize.com,Classifies web browsing on the gigasize.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1534,Q_PROTO_GIGATRIBE,gigatribe,,GigaTribe.com,GigaTribe is a peer-to-peer file sharing network (classification of web/authentication part only).,Peer to Peer,http;https;spdy;ssl,3.04.012,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,798,Q_PROTO_GIGAUP,gigaup,,GigaUP.fr,This protocol plug-in classifies the http traffic to the host gigaup.fr. It also classifies the ssl traffic to the Common Name gigaup.fr.,Web,http;https;spdy;ssl,20120209,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,49,Q_PROTO_GIOP,giop,,General Inter-ORB Protocol,The General Inter-Orb protocol (GIOP) is used to make requests or return replies between ORBs in a Corba environment.,Middleware,tcp;udp,1.0;1.1;1.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,752,Q_PROTO_GIOPS,giops,,General Inter-ORB Protocol Secure ,This protocol is the secure version of the GIOP protocol.,Middleware,ssl,Secure General Inter-ORB Protocol v1,,,,,,,684,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,50,Q_PROTO_GIZMO,gizmo,x,Gizmo,"Gizmo was an instant messaging service, acquired and closed by Google.",Instant Messaging,http,WinGizmo;Gizmo-s2n1,7/4/2008,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, +,799,Q_PROTO_GLIDE,glide,,Glide services,This protocol plug-in classifies the http traffic to the host desktop.glidesociety.com. It also classifies the ssl traffic to the Common Name glidesociety.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2192,Q_PROTO_GLOBALPUBLISHERS,globalpublishers,,Globalpublishers,Tanzanian news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1879,Q_PROTO_GLOBO,globo,,Globo.com,Brazilian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,51,Q_PROTO_GMAIL,gmail,,Google Mail,Gmail is the Google webmail service.,Webmail,google_gen,PC-Windows-Browser-www.gmail.com (2013-08-30),Mobile-Android-Gmail-4.8- (2014-06-05);PC-Windows-7-Chrome-35.0.1916.153 - (2014-06-13);Windows Phone-Windows Phone OS-8-Mail-8.3.0.5- (2014-06-10);iPhone-iOS-Gmail-3.0.2- (2014-04-30),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,263,Q_PROTO_GMAIL_BASIC,gmail_basic,,Gmail basic,Gmail basic is the HTML version of the Google Webmail service. Encrypted traffic is classified as Gmail.,Webmail,google_gen,PC-Windows-Browser-www.gmail.com (2013-07-05),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,273,Q_PROTO_GMAIL_CHAT,gmail_chat,,Google Chat,Google chat is an online Webmessenger from Google.,Instant Messaging,google_gen,20110210,3/7/2012,,x,,,,,,,,x,x,,,,,x,x,,,,,,,,,,,,,,,,,,,, +,906,Q_PROTO_GMAIL_DRIVE,gmail_drive,,Gmail drive,"GMAIL Drive is a Shell Namespace Extension that creates a virtual file system around a Google Mail account, allowing Gmail as a storage medium. GMAIL Drive is only classified over http and not over https.",File Server,gmail,1.0.17,8/2/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,280,Q_PROTO_GMAIL_MOBILE,gmail_mobile,,Gmail Mobile,Gmail_mobile is the Google webmail for mobile phones. This protocol decodes only the non-ciphered version.,Webmail,google_gen,20120229,5/27/2014,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +,1203,Q_PROTO_GMARKET,gmarket,,Gmarket.co.kr,This protocol plug-in classifies the http traffic to the host gmarket.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,632,Q_PROTO_GMTP,gmtp,,GMTP,The gmtp protocol (GMTP) is found over the IP layer (IANA protocol number: 100).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1116,Q_PROTO_GMX,gmx,,GMX webmail,GMX is a German webmail.,Webmail,http;https;spdy;ssl,20130418,PC-Windows-Chrome- (2013-04-29),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,903,Q_PROTO_GNUNET,gnunet,,GNUnet,GNUnet is a framework for secure peer-to-peer networking mainly used for anonymous file sharing. It is part of the GNU project.,Peer to Peer,http;https;spdy;tcp;udp,9.7,8/9/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,52,Q_PROTO_GNUTELLA,gnutella,,gnutella,Gnutella is a peer-to-peer protocol. [Note: gnutella is also known as kadmelia.],Peer to Peer,http;https;spdy;tcp;udp,PC-Windows-Gnutella 2.0;PC-Windows-LimeWire 4.16.6;PC-Windows-imesh 7.2;PC-Windows 7-Shareaza 2.7.0.0 (2013-11-25),Mobile-Android-4.2.1-DroidG (gnutella)-1.2- (2014-02-19);Mobile-Android-4.2.1-DroidG2 (gnutella 2)-1.1.f- (2014-02-19);PC-Windows-7-LimeRunner-3.5.0- (2014-07-01);PC-Windows-7-Shareaza-2.7.4.0- (2014-04-03);PC-Windows-Shareaza-2.7.4.0- (2014-05-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1780,Q_PROTO_GOAL,goal,,Goal.com,New media company that provides soccer news and entertainment,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2094,Q_PROTO_GOB,gob,,Gob.bo,Bolivian government portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,53,Q_PROTO_GOBOOGY,goboogy,,GoBoogy,GoBoogy is a peer-to-peer (p2p) application used to share files with other GoBoogy users over the Internet.,Peer to Peer,http;https;spdy;tcp,Goboogy v2.3.9,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1880,Q_PROTO_GOGO,gogo,,Gogo.mn,Mongolian search engine and web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1535,Q_PROTO_GOGOBOX,gogobox,,Gogobox.com.tw,Cloud file storage web service.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,413,Q_PROTO_GOGOYOKO,gogoyoko,,Gogoyoko.com,This protocol plug-in classifies the http traffic to the host gogoyoko.com.,Web,amazon_aws;http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1378,Q_PROTO_GOHAPPY,gohappy,,Gohappy.com.tw,Taiwanese E-commerce web portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2307,Q_PROTO_GOLDEN_VILLAGE,golden_village,,Golden Village,Singaporian online cinema ticket booking.,Web,http;https;spdy,PC-Windows-Google Chrome-www.gv.com.sg (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1536,Q_PROTO_GOMEETNOW,gomeetnow,,Gomeetnow,Gomeetnow is a web conferencing software.,Web,http;https;spdy;ssl,5.0.1.40,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1503,Q_PROTO_GOMTV_VOD,gomtv_vod,,GOMTV.net (VOD),Gom TV is a social video website designed for gamers.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1310,Q_PROTO_GOO_NE,goo_ne,,Goo.ne.jp,Japanese web portal owned by NTT,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,414,Q_PROTO_GOODREADS,goodreads,,Goodreads.com,This protocol plug-in classifies the http traffic to the host goodreads.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,54,Q_PROTO_GOOGLE,google,,Google.com,This protocol is used for sending user queries to the Google search engine.,Web,google_gen;http;https;spdy;ssl,PC-Windows-Browser-www.google.com (2014-02-06);Mobile-Android-Google Search 3.1.24.941712 (2014-02-06);iPhone-iOS-Google Search 3.2.1.25875 (2014-02-06);Windows Phone-Windows Phone OS-Google 2.0.295.80 (2014-02-06);BlackBerry-BlackBerry OS-Google Search Popup 1.7.1 (2014-02-06),BlackBerry-BlackBerry OS-Google Search Pop Up from RadicalAppz-1.7.1- (2014-02-06);Mobile-Android-4.4.2-Google Search-3.5.16.1262550- (2014-07-08);Mobile-Samsung Wave 3-Bada-2.0S8600XXLC3-Google Search-0.04- (2014-05-05);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);PC-Windows-8-Google Search-1.2.1.12- (2014-06-17);Windows Phone-520 Nokia Lumia-Windows Phone OS-8.0.10517.150-Google Search-2.0.295.80- (2014-04-02);iPhone-iOS-7.1.1-Google Search-4.1.0- (2014-07-01),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,2150,Q_PROTO_GOOGLE_ACCOUNTS,google_accounts,,Google Accounts,Detects SSL access to the Google Accounts server.,Web,google_gen,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,247,Q_PROTO_GOOGLE_ADS,google_ads,,Google ads,Google Ads is the online ad service from Google.,Web,google_gen,PC-Windows-Browser-adwords.google.com (2013-10-09),PC-Windows-7-Chrome-35.0.1916.153- (2014-07-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,744,Q_PROTO_GOOGLE_ANALYTICS,google_analytics,,Google Analytics,Google Analytics is the enterprise-class web analytics solution that gives you rich insights into your website traffic and marketing effectiveness.,Web,google_gen,PC-Windows-Browser-www.google.com/analytics/ (2013-10-09),Mobile-Android-4.4.2-Google Analytics-2.2.5- (2014-06-10);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-08);iPhone-iOS-7.1-Dashboard for Google Analytics-4.0.1- (2014-05-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1104,Q_PROTO_GOOGLE_APPENGINE,google_appengine,,Google App Engine,Google App Engine is a platform as a service (PaaS) cloud computing platform for developing and hosting web applications in Google-managed data centers.,Web,google_gen,PC-Windows 7-Google App Engine 1.8.8 (2013-11-19),PC-Windows-7-Google App Engine-1.9.6- (2014-06-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,800,Q_PROTO_GOOGLE_CACHE,google_cache,,Google Cache,Google Cache saves a copy of the webpages which were found by the Google search engine.,Web,google_gen,20111107,3/29/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1099,Q_PROTO_GOOGLE_DESKTOP,google_desktop,,Google Desktop (discontinued on 2011-09-14),"Google Desktop is a desktop search software made by Google, with indexed document metadata.",Web,google_gen,20111122,PC-Windows-Google Desktop-5.9.1005.12335- (2011-12-20),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1489,Q_PROTO_GOOGLE_DOCS,google_docs,,Google Documents,"On-line file storage and sharing web-service by Google. Most of the traffic is encrypted with generic Google certificates, and cannot be classified. Classification is correct for traffic under a proxy and some limited workflows. [Note: google_docs is also known as google_drive.]",Web,google_gen,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,55,Q_PROTO_GOOGLE_EARTH,google_earth,,Google Earth,Google Earth is a program used to view a virtual Earth in 3D.,Web,google_gen,PC-Windows 7-Google Earth 7.1.1.1888 (2013-07-15),Mac-Mac OS-10.9.2-Google Earth-7.1.2.2041- (2014-03-20);Mobile-Android-4.4.2-Google Earth-7.1.3.1255- (2014-05-08);PC-Linux-Ubuntu 13.04-Google Earth-7.1.2.2041- (2014-03-20);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-24);PC-Windows-7-Google Earth-7.1.2.2041- (2014-03-11);iPhone-iOS-7.1-Google Earth-7.1.1.1843- (2014-04-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,943,Q_PROTO_GOOGLE_GEN,google_gen,,Google Generic,This protocol is a generic layer used as a base for all the Google protocols.,Web,http;https;spdy;ssl,20110621,,,x,,,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,, +,56,Q_PROTO_GOOGLE_GROUPS,google_groups,,Google groups,Google groups,Forum,google_gen,20110119,10/4/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,57,Q_PROTO_GOOGLE_MAPS,google_maps,,Google Maps,Google Maps can be used to calculate routes and to look at maps. The encrypted traffic is classified as google.,Web,google_gen;gstatic;windows_azure,PC-Windows-Browser-maps.google.com (2013-10-09);Windows Phone-Windows Phone OS-Google Maps 8.0.9.1,Mobile-Android-4.4.2-Google Maps-8.1.1- (2014-06-30);Mobile-Nokia 701-Symbian-113.010.1506-Google Maps-2.3.2- (2014-05-28);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);Windows Phone-Windows Phone OS-8-Gmaps-8.7.1.4- (2014-06-30);iPhone-iOS-7.1.1-Google Maps-3.1.0- (2014-06-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,594,Q_PROTO_GOOGLE_PICASA,google_picasa,,Google Picasa,Google Picasa is a digital photo and video organizer used to edit and synchronize pictures or videos over the web.,Web,google_gen;http,20110225,"PC-Windows-XP-Picasa-3.8.0 (117.29,0)- (2011-08-02)",,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1122,Q_PROTO_GOOGLE_PLAY,google_play,,Google Play,Google Play (formerly Android Market) is an online software store developed by Google for Android OS devices.,Application Service,google_gen,PC-Windows-Browser-play.google.com (2012-03-29),Mobile-Android-4.4.2-Google Play-4.8.20- (2014-06-10);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1125,Q_PROTO_GOOGLE_PLUS,google_plus,,Google Plus,Google Plus is a social network. It is classified when sharing from an external link. Other traffic is classified as google or google_cache.,Web,google_gen,PC-Windows-Browser-plus.google.com (2013-11-25),Mobile-Android-4.4.2-Google+-4.4.3.69327528- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-16);Windows Phone-Windows Phone OS-8-Google+-3.0.0.0- (2014-01-15);iPhone-iOS-7.1.1-Google+-4.7.1- (2014-06-10),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2288,Q_PROTO_GOOGLE_SAFEBROWSING,google_safebrowsing,,Google Safe Browsing,Google Safe Browsing is a web-service and API for checking web pages against threats. This signature detects a Google Safebrowse Submission.,Web,http;https;spdy,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1171,Q_PROTO_GOOGLE_SKYMAP,google_skymap,,Google Analytics,Google Sky Map is an outer space viewer Android mobile application.,Web,google_analytics,20120530,Mobile-Android-Google Skymap-1.6.4- (2012-06-19),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1105,Q_PROTO_GOOGLE_TOOLBAR,google_toolbar,,Google Toolbar,"The Google Toolbar is an extension for Internet Explorer and Mozilla Firefox which provides a search box, a pop-up blocker, a translator, etc..,This protocol is not supported with Basic DPI.",Web,google,Google Toolbar 7.0,PC-Windows-Internet Explorer- (2011-12-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,801,Q_PROTO_GOOGLE_TRANSLATE,google_translate,,Google Translate,Google Translate is the Google translation tool.,Web,google_gen,20120530,6/4/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2316,Q_PROTO_GOPLAN,goplan,,Goplan,Goplan is an online project management and collaboration tool for individuals and teams.,Web,http;https;spdy;ssl,20140617,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,2095,Q_PROTO_GOSSIPLANKANEWS,gossiplankanews,,GossipLankaNews.com,SriLankan news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,886,Q_PROTO_GOTODEVICE,gotodevice,,GoToDevice Remote Administration,GoToDevice is a remote control and administration tool.,Thin Client,ipx;netbios;tcp;udp,Gotodevice v2.1.8087,6/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,889,Q_PROTO_GOTOMEETING,gotomeeting,,GoToMeeting Online Meeting,GoToMeeting is an online meeting service developed by Citrix.,Audio/Video,http;https;spdy;ssl;udp,GotoMeeting v4.8.0.708,6/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +,894,Q_PROTO_GOTOMYPC,gotomypc,,GoToMyPC Remote Access,"Citrix GoToMyPC is a secured web-based remote access solution, enabling to take control of a PC/MAC from a web browser.",Thin Client,http;https;spdy;ssl,Citrix GoToMyPC 7.0,6/15/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, +,338,Q_PROTO_GOUGOU,gougou,,Gougou.com,Gougou is a chinese web search engine.,Web,http;https;spdy,20091112,10/11/2011,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1147,Q_PROTO_GRATISINDO,gratisindo,,Gratisindo.co.id,This protocol plug-in classifies the gratisindo http traffic.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,58,Q_PROTO_GRE,gre,,Generic Routing Encapsulation,The Generic Routing Encapsulation protocol (GRE) is used to encapsulate a protocol into another one generically.,Tunneling,ip;mobile_ip,RFC 1701;RFC 2784,7/4/2008,,x,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1333,Q_PROTO_GREE,gree,,GREE Games,Japanese web portal dedicated to smartphone games,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1881,Q_PROTO_GRID,grid,,Grid.mk,Macedonian news portal,Web,http;https;spdy;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,417,Q_PROTO_GRONO,grono,,Grono.net,This protocol plug-in classifies the http traffic to the host grono.net.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,261,Q_PROTO_GROOVE,groove,,Microsoft Office Groove,Microsoft Office Groove is a desktop application designed for document collaboration in teams with members who are regularly off-line or who do not share the same network security clearance.,Microsoft Office,http;https;spdy;ssl;tcp;udp,20081103,1/14/2009,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,532,Q_PROTO_GROOVESHARK,grooveshark,,Grooveshark.com,Grooveshark is an online unlimited service for music.,Audio/Video,http;https;spdy;ssl,PC-Windows-Chrome 30.0.1599.66 (2013-10-04),Mobile-Android-4.2.1-Grooveshark-2.7.6- (2014-06-30);Mobile-Android-4.4.2-Grooveshark-1.0.15- (2014-06-23);PC-Windows-Chrome-35.0.1916.153- (2014-07-08);iPhone-iOS-6.1.6-Grooveshark-2.7.2- (2014-05-23),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1001,Q_PROTO_GROUPON,groupon,,Groupon,"This protocol plug-in classifies the http traffic to the hosts groupon.com, groupon.com.br, groupon.fr and groupon.jp. It also classifies the ssl traffic to the Common Name .groupon..",Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,936,Q_PROTO_GROUPWISE,groupwise,,Groupwise (Novell),"Novell Groupwise is a groupware, instant-messaging and mail-application.",Web,http;tcp,8.0,10/18/2011,,,,x,,,,,,,,,,,x,x,,,,,,,x,,,,,,,x,,,,,,, +,1204,Q_PROTO_GSSHOP,gsshop,,Gsshop.com,This protocol plug-in classifies the http traffic to the host gsshop.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,745,Q_PROTO_GSTATIC,gstatic,,Google GStatic,GStatic is a download server providing static resources (like CSS or scripts) for Google web applications.,Web,google_gen,PC-Windows-Browser-www.gstatic.com (2013-10-09),Mac-Mac OS-Safari-7.0.4- (2014-06-09);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-09);PC-Windows-7-Firefox-30.0- (2014-06-12);PC-Windows-8-Chrome-35.0.1916.153- (2014-06-12);Windows Phone-Windows Phone OS-8-Internet Explorer- (2014-06-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2212,Q_PROTO_GT_RACING_2,gt_racing_2,,GT Racing 2: The Real Car Experience,"Mobile game, edited by Gameloft. Most of the traffic should be classified as gameloft.",Game,gameloft;http;https;spdy,Mobile-Android-GT Racing 2: The Real Car Exp 1.0.2;iPhone-iOS-GT Racing 2: The Real Car Experience 1.0.1,Mobile-Android-GT Racing: The Real Car Experience-1.0.2- (2014-03-27);iPhone-iOS-GT Racing: The Real Car Experience-1.0.1- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1441,Q_PROTO_GTALK,gtalk,,Google Hangouts (formerly Google Talk),"Google Hangouts is an instant messaging service available on desktop and mobile devices. The former Google Talk version uses XMPP, and provides both text and voice communication. This plug-in also classifies RTP Audio/Video streams of Google Hangouts using DNS Caching. [Note: gtalk is also known as google_hangouts.]",Instant Messaging,google_gen;ip;jabber,20130803,,,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,59,Q_PROTO_GTP,gtp,,GPRS Tunneling Protocol,"The GPRS Tunneling Protocol (GTP) is used to create a tunnel between the SGSN and GGSNs of a mobile operator network, thus allowing mobile station data to be transmitted.",Tunneling,udp,GTP v0;GTP v1,7/4/2008,,,,x,,,x,x,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,735,Q_PROTO_GTPV2,gtpv2,,GPRS Tunneling Protocol version 2,"The GPRS Tunneling Protocol (GTP) version 2 is used in G4 mobile networks (LTE). Its purpose is to exchange control message between the MME, the SGW et the PGW. These messages lead to the creation of an IP data tunnel between the eNodeB, the SGW and the PGW, thus allowing mobile station data to be transmited.",Tunneling,udp,GPRS Tunneling Protocol V2,3/3/2011,,,,x,,,,x,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1882,Q_PROTO_GUAMPDN,guampdn,,GuamPDN.com,Guamanian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1141,Q_PROTO_GUDANGLAGU,gudanglagu,,Gudanglagu.com,This protocol plug-in classifies the http traffic to the host gudanglagu.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1816,Q_PROTO_GULFUP,gulfup,,Gulfup.com,Online file sharing website popular in Saudi Arabia and countries around the Gulf,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1798,Q_PROTO_GUMTREE,gumtree,,Gumtree.com,"Gumtree is the first site for free classifieds ads in the UK for buying and selling items, cars, properties, and find or offer jobs. It's also accessed from South Africa, Australia and Poland.",Web,http;https;spdy,20140130,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,802,Q_PROTO_GYAO,gyao,,GyaO.yahoo.co.jp,This protocol plug-in classifies the http traffic to the host gyao.yahoo.co.jp.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,60,Q_PROTO_H225,h225,,H225,"The H225 Protocol is a VoIP protocol, used for call signaling and RAS (Registration, Admission and Status).",Audio/Video,q931;udp,H225 v5,7/4/2008,,,,x,,,,,x,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,61,Q_PROTO_H245,h245,,H245,"H245 is a VoIP protocol, used for call signaling codec negotiation.",Audio/Video,tcp,H245 v10,7/4/2008,,,,,h323,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,1187,Q_PROTO_H248_BINARY,h248_binary,,h248 Protocol (Megaco) in binary mode,h248 Protocol (Megaco) in binary mode.,Audio/Video,udp,1;2;3,4/24/2014,,,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,, +,1188,Q_PROTO_H248_TEXT,h248_text,,h248 Protocol (Megaco) in text mode,h248 Protocol (Megaco) in text mode.,Audio/Video,udp,1;2;3,4/28/2014,,,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,, +,418,Q_PROTO_HABBO,habbo,,Habbo.com,Habbo is a is a social-networking site that offers games and chat.,Web,http;https;llnwd;spdy;ssl;tcp,20110331,,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,2170,Q_PROTO_HABER7,haber7,,Haber7,Turkish tv streaming website,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,590,Q_PROTO_HALFLIFE,halflife,,Half-Life - Half-Life 2,Half-Life and Half-Life 2 are two first-person shooter video games developed by Valve Corporation and provide on-line gaming features.,Game,http;https;spdy;udp,Half-Life and Half-Life 2,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,2005,Q_PROTO_HAMACHI,hamachi,,LogMeIn Hamachi,"Hamachi is a VPN service provided by LogMeIn. This signature classifies traffic to the LogMeIn servers used by Hamachi. The P2P VPN streams between users are using IPSEC, and won't be classified as hamachi, but ipsec instead.",Tunneling,ip,2.2.0 (Windows),PC-Windows-Hamachi-2.2.0.109- (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,803,Q_PROTO_HANGAME,hangame,,Hangame.com,This protocol plug-in classifies the http traffic to the host hangame.com/.co.jp.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1205,Q_PROTO_HANKOOKI,hankooki,,Hankooki.com,This protocol plug-in classifies the http traffic to the host hankooki.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1206,Q_PROTO_HANKYUNG,hankyung,,Hankyung.com,This protocol plug-in classifies the http traffic to the host hankyung.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1247,Q_PROTO_HAO123,hao123,,Hao123,This protocol plug-in classifies the http traffic to the host hao123.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1002,Q_PROTO_HARDSEXTUBE,hardsextube,,Hardsextube.com,This protocol plug-in classifies the http traffic to the host hardsextube.com.,Web,http;https;spdy,PC-Windows-Browser-www.hardsextube.com (2013-07-13),PC-Linux-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1313,Q_PROTO_HATENA_NE,hatena_ne,,Hatena.ne.jp,Japanese web portal dedicated to social networking,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1883,Q_PROTO_HAVEERU,haveeru,,Haveeru.com.mv,Maldivian news portal,Web,http;https;spdy;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1172,Q_PROTO_HBO_GO,hbo_go,,HBO GO,On-demand video streaming website powered by the HBO american TV channel.,Audio/Video,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1207,Q_PROTO_HERALDM,heraldm,,Heraldm.com,This protocol plug-in classifies the http traffic to the host heraldm.com. It also classifies the ssl traffic to the Common Name emember.heraldcorp.com.,Web,http;https;spdy;ssl,20130828,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1451,Q_PROTO_HERE,here,,Nokia Here API,"On-line maps and localization service brought by NAVTEQ and Nokia Maps. This plug-in both classifies the ""here.com""maps website browsing, and the Nokia NLP API (REST) usage by third party applications.",Web,http;https;nokia_ovi;spdy,20140114,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1884,Q_PROTO_HESPRESS,hespress,,Hespress.com,Moroccan news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1795,Q_PROTO_HEUREKA,heureka,,Heureka.cz,Czech e-commerce website,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1379,Q_PROTO_HEXUN,hexun,,Hexun.com,Chinese finance news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1003,Q_PROTO_HGTV,hgtv,,HGTV.com,This protocol plug-in classifies the http traffic to the host hgtv.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,301,Q_PROTO_HI5,hi5,,Hi5.com,"Hi5 is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;spdy;ssl,20111115,3/9/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1561,Q_PROTO_HIGH_ENTROPY,high_entropy,,High Entropy,"High Entropy is a virtual protocol used to detect potentially encrypted payloads. Important note: the classification of this layer is effective since the 4.18.0 version of the ixEngine framework. The classification is based on two methods: entropy value computation, and printable strings detection.",Behavioral,unknown,1.0,,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1380,Q_PROTO_HINET_GAMES,hinet_games,,HiNet Games (games.hinet.net),"Taiwanese game portal providing game reviews, forum, news.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,730,Q_PROTO_HIP,hip,,Host Identity Protocol,The hip protocol (Host Identity Protocol) is found over the IP layer (IANA protocol number: 139).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1804,Q_PROTO_HKGOLDEN,hkgolden,,Hkgolden.com,Game and electonics news portal based in Hong Kong,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2096,Q_PROTO_HLN,hln,,HLN.be,Belgian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,633,Q_PROTO_HMP,hmp,,Host Monitoring Protocol,The hmp protocol (Host Monitoring) is found over the IP layer (IANA protocol number: 20).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,703,Q_PROTO_HOPOPT,hopopt,,IPv6 Hop-by-Hop Option,The hopopt protocol (IPv6 Hop-by-Hop Option) is found over the IP layer (IANA protocol number: 0).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,419,Q_PROTO_HOSPITALITY_CLUB,hospitality_club,,HospitalityClub.org,This protocol plug-in classifies the http traffic to the host hospitalityclub.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,634,Q_PROTO_HOST,host,,Host internal protocol,The host protocol (Any host internal protocol) is found over the IP layer (IANA protocol number: 61).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1485,Q_PROTO_HOTFILE,hotfile,,Hotfile.com,On-line file sharing service.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,739,Q_PROTO_HOTLINE,hotline,,HotLine,"The Hotline protocol is used to upload/download files, to chat and to get news about chatters (it is not a peer-to-peer protocol).",File Server,http;https;spdy;tcp,20110301,3/1/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2002,Q_PROTO_HOTSPOT_SHIELD,hotspot_shield,,Hotspot Shield,The Hotspot Shield application secures internet connections made from public access points using a VPN network.,Tunneling,tcp,3.20(Windows);3.19(MacOSX),Mac-Mac OS-HotSpot Shield-3.19- (2013-12-05);PC-Windows-Hotspot Shield-3.20- (2013-12-05),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,804,Q_PROTO_HOVRS,hovrs,,Hands On Video Relay Services,"This protocol plug-in classifies the http traffic to the hosts i711.com, hovrs.com and purple.us. It also classifies the ssl traffic to the Common Name hovrs.com.",Instant Messaging,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1173,Q_PROTO_HOWCAST,howcast,,Howcast.com,This protocol plug-in classifies the http traffic to the host .howcast.com.,Audio/Video,http;https;spdy,20120530,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1004,Q_PROTO_HOWSTUFFWORKS,howstuffworks,,HowStuffWorks.com,This protocol plug-in classifies the http traffic to the host howstuffworks.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,65,Q_PROTO_HPELLC,hpellc,,HP Extended Local-Link Control,HP Extended Local-Link Control is an LLC protocol enhancement. It is HP proprietary.,Network Service,llc,HPELLC v1.4.7,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,2097,Q_PROTO_HS,hs,,Hs.fi (Helsingin Sanomat),Finnish news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1750,Q_PROTO_HSBC,hsbc,,HSBC Bank,HSBC banking website,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,66,Q_PROTO_HSRP,hsrp,,Hot Standby Router Protocol,The Cisco Hot Standby Router Protocol (HSRP) enables you to manage router redundancy in a network.,Routing,udp,HSRP v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,67,Q_PROTO_HTTP,http,,HyperText Transfer Protocol,The Hypertext Transfer Protocol (HTTP) is used for browsing the web.,Web,http_tunnel;socks4;socks5;tcp;udp,0.9;1.0;1.1,2/11/2014,,x,,x,,,,,,,x,x,,,,,,,,,,,x,,,,,,,,,,,,,, +,750,Q_PROTO_HTTP_TUNNEL,http_tunnel,,HTTP Tunnel,HTTP Tunnel protocol is used to tunnel protocols inside an HTTP stream.,Tunneling,http;https;spdy,http_tunnel3.3,5/30/2011,,x,,,,,,,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,68,Q_PROTO_HTTPS,https,,HyperText Transfer Protocol Secure,HTTPS is the secure version of HTTP.,Web,http;ssl,HTTP 1.1;SSL-V2.0;SSL-V3.0,7/4/2008,,,,,,443,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,, +,1272,Q_PROTO_HUDONG,hudong,x,Hudong.com,This protocol plug-in classifies the http traffic to the host hudong.com.,Web,,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2247,Q_PROTO_HUFFINGTON_POST,huffington_post,,Huffington Post,The Huffington Post is an American online news aggregator and blog.,Web,http;https;spdy,20140412,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1174,Q_PROTO_HULU,hulu,,Hulu.com,This protocol plug-in classifies the http traffic to the host .hulu.com.,Audio/Video,http;https;spdy,20120530,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2305,Q_PROTO_HUNGRYGOWHERE,hungrygowhere,,hungrygowhere,Singaporean fooding website.,Web,http;https;spdy,PC-Windows-Google Chrome-www.hungrygowhere.com (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1885,Q_PROTO_HURRIYET,hurriyet,,Hurriyet.com.tr,Turkish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,420,Q_PROTO_HYVES,hyves,,Hyves Games,This protocol plug-in classifies the http traffic to the host hyves.nl.,Web,http;https;spdy;ssl,20140220,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1381,Q_PROTO_I_GAMER,i_gamer,,iGamer.com,Online games and manga website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,638,Q_PROTO_I_NLSP,i_nlsp,,Integrated Net Layer Security Protocol,The i_nlsp protocol (Integrated Net Layer Security TUBA) is found over the IP layer (IANA protocol number: 52).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1382,Q_PROTO_I_PART,i_part,,i-Part.com.tw,Taiwanese online dating site.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1383,Q_PROTO_IAPP,iapp,,Iapp.com.tw,News site about mobile applications.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,635,Q_PROTO_IATP,iatp,,Interactive Agent Transfer Protocol,The iatp protocol (Interactive Agent Transfer Protocol) is found over the IP layer (IANA protocol number: 117).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,565,Q_PROTO_IAX,iax,,Inter Asterisk eXchange,Inter Asterisk eXchange (IAX2) is a data exchange protocol between Asterisk servers.,Audio/Video,udp,2,12/15/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,755,Q_PROTO_IBACKUP,ibackup,,iBackup.com,ibackup is an online file backup protocol.,File Server,http;https;rsync;spdy;ssl,Ibackup for Mac v1.2.3,6/22/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1886,Q_PROTO_IBAY,ibay,,Ibay.com.mv,Maldivian online classified ads,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,421,Q_PROTO_IBIBO,ibibo,,Ibibo.com,This protocol plug-in classifies the http traffic to the host ibibo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,69,Q_PROTO_ICA,ica,,Independant Computing Architecture (Citrix),ICA (Independent Computing Architecture) is a communication protocol and a property of the Citrix Company.,Thin Client,http;https;spdy;tcp;udp,nfuse v1.1,7/4/2008,,x,,x,ica,,,,x,,,,,,,x,,,,,,,,,,,,,,x,,,,,x,, +,557,Q_PROTO_ICALL,icall,,icall,icall is proprietary voice/video over IP protocol.,Audio/Video,http;https;rtmp;sip;spdy;ssl,icall v7,PC-Windows-iCall-4.0.0.22- (2010-12-15);iPhone-iOS-iCall-1.3.1- (2010-12-15),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,1103,Q_PROTO_ICAP,icap,,Internet Content Adaptation Protocol,"The Internet Content Adaptation Protocol (ICAP) is a lightweight HTTP-like protocol which is used to extend transparent proxy servers, thereby freeing up resources and standardizing the way in which new features are implemented. ICAP is generally used to implement virus scanning and content filters (including censorware) in transparent HTTP proxy caches.",Web,tcp,1.0,PC-Linux-GreasySpoon-1.0.8- (2012-01-03),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,941,Q_PROTO_ICCP,iccp,,Inter-Control Center Communications Protocol,"IEC 60870-6/TASE.2. Inter-Control Center Communications Protocol (ICCP) provides data exchange over Wide Area Networks (WANs) between utility control centers, utilities, power pools, regional control centers, and Non-Utility Generators.",Network Service,mms_iso,IEC 60870-6/TASE.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,579,Q_PROTO_ICECAST,icecast,,icecast,Icecast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;mms;spdy,PC-Windows 7-Icecast 2.3.1 (2013-11-06),Mobile-Android-4.4.2-Icecast Player-4.2- (2014-03-17);PC-Windows-Icecast-2.3.1- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1126,Q_PROTO_ICLOUD,icloud,,iCloud (Apple),"iCloud is a cloud computing service developed by Apple Inc. which allows to store and share data, from an iOS mobile (iPhone, iPad, iPod Touch) or a Macintosh.",Application Service,http;https;spdy;ssl,PC-Windows-Browser-www.icloud.com (2014-02-18);PC-Windows 7-iCloud 3.1 (2014-02-19);PC-Windows 8-iCloud 3.1 (2014-02-18);iPhone-iOS-iCloud 7.0.4 (2014-02-18);Mac-Mac OS-iCloud 10.9.1 (2014-02-19),Mac-A1347 Mac Mini-Mac OS-10.9.2-OS X-10.9.2- (2014-06-11);PC-Windows Pro-7-http://support.apple.com/kb/dl1455-3.1- (2014-03-27);PC-Windows Pro-8-iCloud-3.1- (2014-06-19);PC-Windows-7-Chrome-35.0.1916.114- (2014-05-22);iPhone-4S-iOS-7.1.1-iOS-7.1.1- (2014-04-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,70,Q_PROTO_ICMP,icmp,,Internet Control Message Protocol,The Internet Control Message protocol (ICMP) is the diagnostic protocol of IPv4 networks.,Network Service,ip,ICMP v4,7/4/2008,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,71,Q_PROTO_ICMP6,icmp6,,Internet Control Message Protocol for IP6,ICMPv6 is the diagnostic protocol used in IPv6 networks.,Network Service,ip6,ICMP v6,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,805,Q_PROTO_ICQ2GO,icq2go,,Web-ICQ,This protocol plug-in classifies the http traffic to the hosts icq.com and icq.net. It also classifies the ssl traffic to the Common Names icq.com and icq.net.,Instant Messaging,http;https;spdy;ssl,20130117,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,73,Q_PROTO_IDENT,ident,,Identification Protocol,The Identification Protocol provides a means to determine the identity of a user of a specific TCP connection.,Authentication,tcp,RFC 1413,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,, +,1887,Q_PROTO_IDNES,idnes,,iDNES.cz,Czech news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,704,Q_PROTO_IDPR,idpr,,Inter Domain Policy Routing,The idpr protocol (Inter_Domain Policy Routing Protocol) is found over the IP layer (IANA protocol number: 35).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,705,Q_PROTO_IDPR_CMTP,idpr_cmtp,,IDPR Control Message Transport Protocol,The idpr_cmtp protocol (IDPR Control Message Transport Proto) is found over the IP layer (IANA protocol number: 38).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,706,Q_PROTO_IDRP,idrp,,Inter Domain Routing Protocol,The idrp protocol (Inter_Domain Routing Protocol) is found over the IP layer (IANA protocol number: 45).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1245,Q_PROTO_IFENG,ifeng,,Ifeng.com,"The leading new media company providing premium content on an integrated platform across Internet, mobile and TV channels in China.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1384,Q_PROTO_IFENG_FINANCE,ifeng_finance,,Ifeng finance,Ifeng finance news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,806,Q_PROTO_IFILE_IT,ifile_it,,iFile.it (Filecloud.io),This protocol plug-in classifies the http traffic to the host filecloud.io.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,636,Q_PROTO_IFMP,ifmp,,Ipsilon Flow Management Protocol,The ifmp protocol (Ipsilon Flow Management Protocol) is found over the IP layer (IANA protocol number: 101).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1958,Q_PROTO_IFOLDER_RU,ifolder_ru,,iFolder.ru,Classifies web browsing on the ifolder.ru Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1888,Q_PROTO_IGIHE,igihe,,Igihe.com,Rwandan news website,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,74,Q_PROTO_IGMP,igmp,,Internet Group Management Protocol,The Internet Group Management Protocol (IGMP) is used by IP hosts to report their multicast group membership to routers.,Network Service,ip,IGMPv3,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,716,Q_PROTO_IGP,igp,,Interior Gateway Protocol,The igp protocol (any private interior gateway (used by Cisco for their IGRP)) is found over the IP layer (IANA protocol number: 9).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,807,Q_PROTO_IHEARTRADIO,iheartradio,,iHeartradio.com - iHeart.com,This protocol plug-in classifies the http traffic to the hosts iheartradio.com and iheart.com.,Audio/Video,http;https;rtmp;spdy,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,913,Q_PROTO_IIOP,iiop,,Internet Inter-ORB Protocol,IIOP is the GIOP implementation over TCP.,Middleware,giop,20110801,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1005,Q_PROTO_IKEA,ikea,,IKEA.com,This protocol plug-in classifies the http traffic to the host ikea.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1889,Q_PROTO_IKMAN,ikman,,Ikman.lk,Sri Lankan free online classified ads,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1890,Q_PROTO_IKUB,ikub,,Ikub.al,Albanian web portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,637,Q_PROTO_IL,il,,Internet Link (Transport protocol),The il protocol (IL Transport Protocol) is found over the IP layer (IANA protocol number: 40).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1781,Q_PROTO_ILIVID,ilivid,,Ilivid,Browser toolbar search engine and video player,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,808,Q_PROTO_ILOVEIM,iloveim,,IloveIM.com,This protocol plug-in classifies the http traffic to the host iloveim.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1891,Q_PROTO_ILTALEHTI,iltalehti,,Iltalehti.fi,Finnish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1892,Q_PROTO_ILTASANOMAT,iltasanomat,,Ilta-Sanomat.fi,Finnish news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1486,Q_PROTO_IMAGESHACK,imageshack,,ImageShack,On-line free image sharing service.,Web,http;https;spdy;ssl,20140702,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,75,Q_PROTO_IMAP,imap,,Internet Message Access Protocol version 4,The IMAP protocol (Internet Message Access Protocol Version 4) enables a client to access and manipulate electronic mail messages on a server.,Mail,socks4;socks5;tcp,IMAP v4,3/21/2014,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +,76,Q_PROTO_IMAPS,imaps,,Internet Message Access Protocol Secure,IMAPS is the secure version of the IMAP protocol.,Mail,ssl,IMAPS v4,7/4/2008,,,,,,993,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +,1480,Q_PROTO_IMDB,imdb,,Internet Movie Database,On-line information database related to movies and tv-shows.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,422,Q_PROTO_IMEEM,imeem,,Imeem.com,This protocol plug-in classifies the http traffic to the host imeem.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1472,Q_PROTO_IMEET,imeet,,iMeet.com,On-line video-conferencing service using cloud-based technology.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,, +,271,Q_PROTO_IMESH,imesh,,imesh,iMesh is a peer-to-peer protocol.,Peer to Peer,http;https;spdy;ssl;tcp;udp,PC-Windows 7-iMesh 12.0.0.2883 (2013-11-25),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);PC-Windows-7-iMesh-12.5.0.134249- (2014-04-05),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1912,Q_PROTO_IMESSAGE_FILE_DOWNLOAD,imessage_file_download,,iMessage File Download,Apple Web Service used to retrieve video messages sent between two iOS devices via the iMessage application. This signature only classifies video download from the message receiver device. The video upload from the sender will be classified as apns (Apple Push Notification),File Transfer,http;https;spdy,iMessage 1.0.0,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1483,Q_PROTO_IMGUR,imgur,,Imgur.com,A free online image hosting service.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1744,Q_PROTO_IMINENT,iminent,,Iminent.com,Website providing add-ons for most messengers,Application Service,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,77,Q_PROTO_IMP,imp,,Internet Messaging Program,IMP is the IMAP webmail of the Horde project,Webmail,http;https;spdy,20090908,5/27/2014,,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,1331,Q_PROTO_IMPRESS,impress,,Impress.co.jp,Japanese IT news web site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,809,Q_PROTO_IMVU,imvu,,IMVU.com (Instant Message Virtuel Universe),This protocol plug-in classifies the http traffic to the host imvu.com.,Game,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, +,1893,Q_PROTO_INBOX,inbox,,Inbox.lv,Latvian webmail and wep portal,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,6,Q_PROTO_INCOMPLETE,incomplete,,Incomplete virtual protocol,Incomplete is used when the protocol signature is too long.,Standard,eth;ip;ip6;isl;llc;ppp;pppoe;sctp;snap;udp,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,423,Q_PROTO_INDABA_MUSIC,indaba_music,,Indaba Music,This protocol plug-in classifies the http traffic to the host indabamusic.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2270,Q_PROTO_INDEPENDENT,independent,,Independent,Irish news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1812,Q_PROTO_INDEX_HR,index_hr,,Index.hr,Croatian web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1813,Q_PROTO_INDEX_HU,index_hu,,Index.hu,Hungarian web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1894,Q_PROTO_INDIATIMES,indiatimes,,Indiatimes,"This signature detects indiatimes and a large number of its subdomains, which is one of the most popular Internet and mobile value-added services web portal in India.",Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1137,Q_PROTO_INDONETWORK,indonetwork,,Indonetwork.co.id,This protocol plug-in classifies the http traffic to the host indonetwork.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1136,Q_PROTO_INDOWEBSTER,indowebster,,Indowebster.com,This protocol plug-in classifies the http traffic to the host indowebster.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2217,Q_PROTO_INFINITY_BLADE_II,infinity_blade_ii,,Infinity Blade II,Mobile game.,Game,http;https;spdy;ssl,iPhone-iOS-Infinity Blade II 1.3.2,iPhone-iOS-Infinity Blade II-1.3.2- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,928,Q_PROTO_INFORMIX,informix,,IBM Informix,Informix is a family of relational database management systems developed by IBM. IBM acquired the Informix technology in 2001 but it dates back to 1981.It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;sqli,11.70,9/14/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,1895,Q_PROTO_ING,ing,,ING Bank,ING online banking website,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1140,Q_PROTO_INILAH,inilah,,Inilah.com,This protocol plug-in classifies the http traffic to the host inilah.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2299,Q_PROTO_INNERACTIVE,inneractive,,Inneractive,Inneractive is a monetizer for cross-platform mobile applications.,Web,http;https;spdy,20140421,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1175,Q_PROTO_INSTAGRAM,instagram,,Instagram,This protocol plug-in classifies the http traffic to the hosts instagr.am and instagram.com. It also classifies the ssl traffic to the Common Name instagram.com.,Web,amazon_aws;http;https;spdy;ssl,PC-Windows-Browser-www.instagram.com (2014-02-10);Mobile-Android-Instagram 5.0.6 (2014-02-10);iPhone-iOS-Facebook 5.0.3 (2014-02-10),Mobile-Android-4.4.2-Instagram-6.0.2- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);iPhone-iOS-7.1.1-Instagram-5.0.13- (2014-06-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1385,Q_PROTO_INTALKING,intalking,,Intalking.com,"Taiwanese beauty, makeup portal.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1896,Q_PROTO_INTERIA,interia,,Interia.pl,Polish news portal,Web,http;https;spdy;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,426,Q_PROTO_INTERNATIONS,internations,,InterNations.org,This protocol plug-in classifies the http traffic to the host internations.org. It also classifies the ssl traffic to the Common Name .internations.org.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1232,Q_PROTO_INTERPARK,interpark,,Interpark.com,This protocol plug-in classifies the http traffic to the host www.interpark.com. It also classifies the ssl traffic to the Common Name .interpark.com.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1006,Q_PROTO_INTUIT,intuit,,Intuit.com,This protocol plug-in classifies the http traffic to the host intuit.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2099,Q_PROTO_INVESTIGATOR,investigator,,Investigator.co.ug,Ugandan news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1119,Q_PROTO_IOS_OTA_UPDATE,ios_ota_update,,iOS over-the-air (OTA update),iOS OTA Update is the protocol used for iOS updates Over The Air.,Application Service,http;https;itunes;spdy,iPhone-iOS 7.0.3 (2013-10-25),iPhone-iOS-7.1.1-OTA Update-7.1.2- (2014-07-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,, +,81,Q_PROTO_IP,ip,,Internet Protocol,The Internet Protocol allows logical addressing of stations over an interconnected system of networks.,Network Service,3gpp_li;8021q;base;eth;etsi_li;gre;gtp;icmp;ip;ip6;llc;mobile_ip;mpls;ppp;pwe;snap,IP v4,,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,82,Q_PROTO_IP6,ip6,,Internet Protocol V6,"IPv6 is the next generation protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 (IPv4).",Network Service,8021q;base;eth;gre;gtp;ip;ip6;llc;mpls;ppp;teredo,IP v6,,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1686,Q_PROTO_IP_EXP_1,ip_exp_1,,IANA Internet Protocol Number 253,The ip_exp_1 protocol (IANA Internet Protocol Number 253 used for experimentation and testing) is found over the IP layer (IANA protocol number: 253).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1687,Q_PROTO_IP_EXP_2,ip_exp_2,,IANA Internet Protocol Number 254,The ip_exp_2 protocol (IANA Internet Protocol Number 254 used for experimentation and testing) is found over the IP layer (IANA protocol number: 254).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,715,Q_PROTO_IP_IN_IP,ip_in_ip,,IP-in-IP tunneling,The ip_in_ip protocol (IP_within_IP Encapsulation Protocol) is found over the IP layer (IANA protocol number: 94).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,717,Q_PROTO_IP_RDP,ip_rdp,,Reliable Data Protocol over IP,The ip_rdp protocol (Reliable Data Protocol over IP) is found over the IP layer (IANA protocol number: 27).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,671,Q_PROTO_IP_RESERVED,ip_reserved,,IANA Reserved Internet Protocol Number,The ip_reserved protocol (IANA Reserved Internet Protocol Number) is found over the IP layer (IANA protocol number: 255).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,639,Q_PROTO_IPCOMP,ipcomp,,IP Payload Compression Protocol,The ipcomp protocol (IP Payload Compression Protocol) is found over the IP layer (IANA protocol number: 108).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,83,Q_PROTO_IPCP,ipcp,,Internet Protocol Control Protocol,The IP Control Protocol (IPCP) is used to configure IP parameters of a station on a Point To Point link.,Network Service,ppp,RFC 1172,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,640,Q_PROTO_IPCV,ipcv,,IPCV Internet Packet Core Utility,The ipcv protocol (Internet Packet Core Utility) is found over the IP layer (IANA protocol number: 71).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1461,Q_PROTO_IPERF,iperf,,iperf,The iperf protocol is used by the self-titled tool for network performance measures.,Network Management,tcp;udp,20130604,6/14/2013,,,,x,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,,,,, +,641,Q_PROTO_IPLT,iplt,,IPDS MES Physical Layer Tester,The iplt protocol (IPDS MES Physical Layer Tester) is found over the IP layer (IANA protocol number: 129).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,84,Q_PROTO_IPP,ipp,,Internet Printing Protocol,Internet Printing Protocol (IPP) is a standard used for remote printing using Internet tools and technologies.,Printer,http;https;spdy,RFC 2911,7/4/2008,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,642,Q_PROTO_IPPC,ippc,,Internet Pluribus Packet Core,The ippc protocol (Internet Pluribus Packet Core) is found over the IP layer (IANA protocol number: 67).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,85,Q_PROTO_IPSEC,ipsec,,IPsec Encapsulating Security Payload,"IPSec protocol provides services for securing hosts communications. IPsec provides two security services: Authentication Header (AH), which allows authentication of the sender and Encapsulating Security Payload (ESP), which allows both authentication of the sender and encryption of data.",Encrypted,ip;ip6;udp,See Protobook,7/4/2008,,x,,x,isakmp,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,722,Q_PROTO_IPTM,iptm,,Internet Protocol Traffic Manager,The iptm protocol (Protocol Internet Protocol Traffic Manager) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,86,Q_PROTO_IPV6CP,ipv6cp,,IPv6 Control Protocol,This Protocol is used for establishing and configuring IPv6 over PPP.,Tunneling,ppp,RFC 2472,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,87,Q_PROTO_IPX,ipx,,Internet Protocol eXchange,Internet Protocol Exchange (IPX) is Novell's network layer 3 protocol.,Network Service,8021q;eth;gre;llc;ppp;snap,RFC 1132,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,643,Q_PROTO_IPX_IN_IP,ipx_in_ip,,Internet Protocol eXchange in IP,The ipx_in_ip protocol (IPX in IP) is found over the IP layer (IANA protocol number: 111).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,88,Q_PROTO_IPXRIP,ipxrip,,Routine Information Protocol over IPX,RIPIPX is the equivalent of the RIP protocol in Novell networks.,Routing,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,89,Q_PROTO_IPXSAP,ipxsap,,IPX Service Advertisement Protocol,Service Advertisement Protocol (SAP) allows servers to advertise their services to clients in a Novell network.,Network Service,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1261,Q_PROTO_IQIYI,iqiyi,,iQiyi.com,This protocol plug-in classifies the http traffic to the host iqiyi.com. It also classifies the ssl traffic to the Common Name .iqiyi.com.,Web,http;https;spdy;ssl,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,90,Q_PROTO_IRC,irc,,Internet Relay Chat,IRC (Internet Relay Chat) is an instant messaging protocol.,Instant Messaging,http;tcp,RFC 1459,9/23/2011,,,,x,irc,,,,x,x,x,,,,,x,x,,,x,x,,,,,,,,,,,,,,,, +,424,Q_PROTO_IRC_GALLERIA,irc_galleria,,IRC-Galleria.net,This protocol plug-in classifies the http traffic to the host irc-galleria.net.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1113,Q_PROTO_IRC_TRANSFER,irc_transfer,,IRC File Transfer Data,This protocol is used to transport data in IRC file transfer.,File Transfer,tcp,20120124,PC-Linux-xchat-2.8.8- (2012-06-18),,,,,irc,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,91,Q_PROTO_IRCS,ircs,,Internet Relay Chat Secure,IRCs is the secure version of the IRC protocol.,Forum,http;https;spdy;ssl,RFC 1459,9/12/2011,,x,,,,994,,,,,,,,,,x,,,,,x,,,,,,,,,,,,,,,, +,644,Q_PROTO_IRTP,irtp,,Internet Reliable Transaction Protocol,The irtp protocol (Internet Reliable Transaction) is found over the IP layer (IANA protocol number: 28).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,92,Q_PROTO_ISAKMP,isakmp,,Internet Security Association and Key Management Protocol,"The Internet Security Association and Key Management Protocol (ISAKMP) defines procedures and packet formats to establish, negotiate, modify and delete Security Associations (SA).",Encrypted,udp,Internet Security Association and Key Management Protocol v1,7/4/2008,,,,x,,,,,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,, +,1906,Q_PROTO_ISCSI,iscsi,,Internet Small Computer Systems Interface,"Internet Small Computer Systems Interface (iSCSI), as described in RFC3720.",Network Service,tcp,RFC3720 April 2004,PC-Linux-iscsi_initiator_utils/netbsd_iscsi- (2013-12-03),,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,707,Q_PROTO_ISIS,isis,,ISIS,The isis protocol (ISIS for ipv4) is found over the IP layer (IANA protocol number: 124).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,93,Q_PROTO_ISL,isl,,InterSwitch Link,InterSwitch Link Frame Format is a Cisco proprietary protocol used between network equipment of a LAN to transmit VLAN membership information of a frame.,Network Service,base,IEEE 802.1Q,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,645,Q_PROTO_ISO_IP,iso_ip,,ISO Internet Protocol,The iso_ip protocol (ISO Internet Protocol) is found over the IP layer (IANA protocol number: 80).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,646,Q_PROTO_ISO_TP4,iso_tp4,,ISO Transport Protocol Class 4,The iso_tp4 protocol (ISO Transport Protocol Class 4) is found over the IP layer (IANA protocol number: 29).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1537,Q_PROTO_ISSUU,issuu,,Issuu.com,Digital publishing website. ( http://issuu.com/ ),Web,amazon_aws;http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,344,Q_PROTO_ISUP,isup,,ISDN User Part,ISUP (ISDN User Part) is a telephony protocol used in SS7 networks.,Telephony,m3ua;sctp,ISDN User Part v1,3/31/2010,,,,x,,,,,,,x,,,,,,,,,,,x,,,,,x,,,,,,,,,, +,425,Q_PROTO_ITALKI,italki,,Italki.com,This protocol plug-in classifies the http traffic to the host italki.com. It also classifies the ssl traffic to the Common Name .italki.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,427,Q_PROTO_ITSMY,itsmy,,Itsmy.com,This protocol plug-in classifies the http traffic to the host mobile.itsmy.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,530,Q_PROTO_ITUNES,itunes,,iTunes,"iTunes is an Apple proprietary digital media player application, used for playing and organizing digital music and video files.",Audio/Video,http;https;spdy;ssl,Mac-Mac OS 10-iTunes 10;Mac-Mac OS 10-iTunes 11.1.0.126,Mac-Mac OS-10.9.2-iTunes-11.2.2- (2014-06-12);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13);PC-Windows-7-iTunes-11.2.2- (2014-06-09);iPhone-4S-iOS-7.1.2-iTunes- (2014-07-04),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,1562,Q_PROTO_ITV_PLAYER,itv_player,,ITV Player,Proprietary iOS application and website for VOD content (TV catch up) and live channels streaming.,Web,apple_hls;http;https;scorecardresearch;spdy;ssl,2.2.1(iOS);20130828(Web),PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,428,Q_PROTO_IWIW,iwiw,,iWiW.hu,This protocol plug-in classifies the http traffic to the host iwiw.hu.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1897,Q_PROTO_JA,ja,,Ja.is,Icelandic web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,94,Q_PROTO_JABBER,jabber,,XMPP Protocol (Jabber),Jabber is an open standard instant messaging and presence system involving the XMPP protocol. [Note: jabber is also known as xmpp.],Instant Messaging,google_gen;http;https;socks4;socks5;ssl;tcp,jingle;pidgin;psi;RFC3920,5/27/2014,,,,x,,,,,x,x,x,,,,,x,x,x,,x,,x,,,,,,,,,,,,,,, +,260,Q_PROTO_JABBER_TRANSFER,jabber_transfer,,Jabber File Transfer,Jabber transfer is an open standard to transfer file between two Jabber clients.,File Transfer,tcp,jingle;pidgin;psi,,,,,,jabber,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,429,Q_PROTO_JAIKU,jaiku,,Jaiku.com,This protocol plug-in classifies the http traffic to the host jaiku.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1281,Q_PROTO_JAJAH,jajah,x,Jajah,"Jajah was a VoIP provider owned by Telefonica Europe; Telefonica has shut down Jajah on January 31, 2014.",Audio/Video,,iPhone-iOS-Jajah 1.0.0 (2012-10-25);Mobile-Android 2.3.7-Jajah 1.0.0 (2012-10-25);PC-Windows-Browser-www.jajah.com (2012-08-30),Mobile-Android-2.3.7-Jajah-1.0.0- (2012-10-25);iPhone-iOS-Jajah-1.0.0- (2012-10-25),,x,,,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,2163,Q_PROTO_JAMAICAOBSERVER,jamaicaobserver,,Jamaicaobserver,Jamaican news portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1898,Q_PROTO_JAMIIFORUMS,jamiiforums,,JamiiForums.com,Tanzanian forum and blog hosting site,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,430,Q_PROTO_JAMMERDIRECT,jammerdirect,,JammerDirect.com,This protocol plug-in classifies the http traffic to the host jammerdirect.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,810,Q_PROTO_JANGO,jango,,Jango.com,This protocol plug-in classifies the http traffic to the host jango.com.,Web,http;https;spdy;ssl,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1538,Q_PROTO_JAP,jap,,Jap,VPN/Anonymizer application.,Web,http;https;spdy,0.18.1.0,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,561,Q_PROTO_JAVA_UPDATE,java_update,,Java Update,"Java Update is the protocol for the update of the java virtual machines, also called JVM.",Web,http;https;spdy;ssl,PC-Windows-Java ME SDK 3.0;PC-Windows-Java 1.6.0;PC-Windows-Java 1.7.0_40,Mac-Mac OS-10.9.3-Java 7-7.5.5- (2014-05-27);PC-Linux-ubuntu 13.04-Java 7-1.7.0_51- (2014-04-29);PC-Windows-7-Java 7-7u60- (2014-07-09);PC-Windows-8-Java 7-7.55- (2014-05-24),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,918,Q_PROTO_JEDI,jedi,,JEDI (Citrix),JEDI is the name of the CITRIX streaming connection protocol.,Thin Client,https;tcp,20110609,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,95,Q_PROTO_JETDIRECT,jetdirect,,HP Printer Job Language,The Jetdirect protocol is used by HP network printers.,Printer,tcp,HP Jetdirect,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1797,Q_PROTO_JFRANEWS,jfranews,,Jfranews.com,New portal popular in Jordan and Palestinian Territory,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1498,Q_PROTO_JINGDONG,jingdong,,JingDong,Popular chinese on-line hi-tech shop.,Web,http;https;spdy,20130613,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,811,Q_PROTO_JIRA,jira,,Onjira.com (JIRA),This protocol plug-in classifies the http traffic to the host onjira.com. It also classifies the ssl traffic to the Common Name onjira.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1152,Q_PROTO_JNE,jne,,JNE.co.id,This protocol plug-in classifies the http traffic to the host jne.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1814,Q_PROTO_JOBS_AF,jobs_af,,Jobs.af,Online job search in Afghanistan,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1815,Q_PROTO_JOBS_BG,jobs_bg,,Jobs.bg,Bulgarian online job search,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2304,Q_PROTO_JOBSDB,jobsdb,,jobsDB,Job seeking website.,Web,http;https;spdy,PC-Windows-Google Chrome-jobsdb.com (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1149,Q_PROTO_JOBSTREET,jobstreet,,JobStreet.co.id,This protocol plug-in classifies the http traffic to the host jobstreet.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1233,Q_PROTO_JOONGANG_DAILY,joongang_daily,,Joongang Daily,This protocol plug-in classifies the http traffic to the hosts www.joins.com and www.joinsmsn.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,813,Q_PROTO_JUBII,jubii,,Jubii.dk,This protocol plug-in classifies the http traffic to the host jubii.dk.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,814,Q_PROTO_JUSTIN_TV,justin_tv,,Justin.tv,This protocol plug-in classifies the http traffic to the host justin.tv. It also classifies the ssl traffic to the Common Name .justin.tv.,Web,http;https;spdy;ssl,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2100,Q_PROTO_JUTARNJI,jutarnji,,Jutarnji.hr,Croatian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1699,Q_PROTO_JXTA,jxta,,Juxtapose,Open source peer-to-peer protocol launched by Sun Microsystems.,Peer to Peer,tcp;udp,2.5,10/1/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,431,Q_PROTO_KAIOO,kaioo,,Kaioo.com,This protocol plug-in classifies the http traffic to the host kaioo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,815,Q_PROTO_KAIXIN_CHAT,kaixin_chat,,Kaixin001.com,This protocol plug-in classifies the http traffic to the host kaixin001.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,2101,Q_PROTO_KAJGANA,kajgana,,Kajgana.com,Macedonian news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1311,Q_PROTO_KAKAKU,kakaku,,Kakaku.com,Website dedicated to price comparisons and product tests.,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2258,Q_PROTO_KAKAOSTORY,kakaostory,,KakaoStory,KakaoStory is a photo sharing social networking service for KakaoTalk users,Web,http;https;spdy,Mobile-Android-KakaoStory 1.9.7;iPhone-iOS-KakaoStory 1.9.6,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,,,, +,1186,Q_PROTO_KAKAOTALK,kakaotalk,,KakaoTalk,"KakaoTalk is an instant messenging platform for mobile devices; users or group of users can send messages, share photos, videos and contact information. Audio flows are classified as RTP only.",Instant Messaging,http;https;spdy;ssl;tcp,iPhone-iOS-Kakao Talk 4.0.0;Mobile-Android-Kakao Talk 4.2.3;iPhone-iOS-Kakao Story 1.8.6;Mobile-Android-Kakao Story 1.8.6;PC-Windows-Kakao Talk 1.1.5.484;Windows Phone-Windows Phone OS-Kakao Talk 2.0.0 (2014-01-15),BlackBerry-BlackBerry OS-7.1.0.907-KakaoTalk Messenger-3.5.2- (2014-07-10);BlackBerry-BlackBerry OS-7.1.0.907-KakaoTalk Messenger-3.5.2-JP (2014-07-10);BlackBerry-BlackBerry OS-7.1.0.907-KakaoTalk Messenger-3.5.2-KR (2014-07-11);Mobile-Android-4.2.1-KakaoTalk-4.4.1-JP (2014-05-21);Mobile-Android-4.2.1-KakaoTalk-4.4.1-KR (2014-05-21);Mobile-Android-4.4.2-KakaoTalk-4.5.3- (2014-07-09);Mobile-Bada-2.0S600XXLC3-KakaoTalk-2.0.4- (2014-04-14);Mobile-Bada-2.0S600XXLC3-KakaoTalk-2.0.4-JP (2014-04-15);Mobile-Bada-2.0S600XXLC3-KakaoTalk-2.0.4-KR (2014-04-15);Nokia Mobile-Nokia Asha 311-Symbian-Kakaotalk-0.9.4- (2014-06-10);PC-Windows-7-KakaoTalk-1.2.0.587- (2014-06-10);Windows Phone-Windows Phone OS-8-KakaoTalk-2.0.9.0- (2014-07-01);Windows Phone-Windows Phone OS-8-KakaoTalk-2.0.9.0-JP (2014-07-03);Windows Phone-Windows Phone OS-8-KakaoTalk-2.0.9.0-KR (2014-07-03);iPhone-iOS-7.1.2-KakaoTalk-4.2.1- (2014-07-02);iPhone-iOS-7.1.2-KakaoTalk-4.2.1-JP (2014-07-03);iPhone-iOS-7.1.2-KakaoTalk-4.2.1-KR (2014-07-03),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,1447,Q_PROTO_KANKAN,kankan,,Kankan.com,Chinese video streaming website.,Web,http;https;spdy,20130412,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1134,Q_PROTO_KAPANLAGI,kapanlagi,,KapanLagi.com,This protocol plug-in classifies the http traffic to the host kapanlagi.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1752,Q_PROTO_KAPOOK,kapook,,Kapook.com,Thailandese web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1008,Q_PROTO_KAROSGAME,karosgame,,Karosgame.ru,This protocol plug-in classifies the http traffic to the host karosgame.ru.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1127,Q_PROTO_KASKUS,kaskus,,Kaskus.co.id,Kaskus is an indonesian forum hosting platform.,Forum,http;https;spdy;ssl,20131227,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1009,Q_PROTO_KASPERSKY,kaspersky,,Kaspersky.com,This protocol plug-in classifies the http traffic to the host kaspersky.com.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.kaspersky.com (2013-07-13),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,603,Q_PROTO_KASPERSKY_UPDATE,kaspersky_update,,Kaspersky Update,Kaspersky_update is the protocol used for Kaspersky softwares updates.,Web,kaspersky;tcp,PC-Windows 7-Kasperspy antivirus 11.0.2.55,Mac-A1347 Mac Mini-Mac OS-10.9.4-Kaspersky Anti-Virus-14.0.1.46- (2014-07-01);Mobile-Android-4.2.1-Kaspersky Anti-Virus-10.2.10.18- (2014-04-24);PC-Windows-7-Kaspersky Anti-Virus-14.0.0.4651ab- (2014-05-26);PC-Windows-8-Kaspersky Anti-Virus-15.0.0.463- (2014-06-18),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,96,Q_PROTO_KAZAA,kazaa,,Kazaa (FastTrack protocol),KaZaA is a peer-to-peer protocol. [Note: kazaa is also known as fasttrack.],Peer to Peer,http;https;spdy;udp,Kazaa Lite K++ 2.7;Kazaa Lite Resurrection 0.0.9,PC-Windows-Kazaa Lite K++-2.7- (2013-03-05);PC-Windows-Kazaa Lite Resurrection-0.0.9- (2013-03-05),,x,,x,kazaa,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1235,Q_PROTO_KB_BANK,kb_bank,,Kbstar.com (KB Kookmin Bank),This protocol plug-in classifies the http traffic to the host .kbstar.com. It also classifies the ssl traffic to the Common Name .kbstar.com.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1234,Q_PROTO_KBS,kbs,,KBS.co.kr,This protocol plug-in classifies the http traffic to the host www.kbs.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1208,Q_PROTO_KBSTAR,kbstar,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1010,Q_PROTO_KEEZMOVIES,keezmovies,,KeezMovies.com,This protocol plug-in classifies the http traffic to the host keezmovies.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1145,Q_PROTO_KEMENKUMHAM,kemenkumham,,Kemenkumham.go.id,This protocol plug-in classifies the http traffic to the host kemenkumham.go.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1209,Q_PROTO_KHAN,khan,,Khan.co.kr,This protocol plug-in classifies the http traffic to the host khan.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2182,Q_PROTO_KHMER_NEWS,khmer_news,,Khmer.news,Cambodian news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1899,Q_PROTO_KHMERLOAD,khmerload,,Khmerload.com,Cambodian web portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1900,Q_PROTO_KIGALITODAY,kigalitoday,,KigaliToday.com,Rwandese news portal,Web,http;https;spdy,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1901,Q_PROTO_KIJIJI,kijiji,,Kijiji.ca,Canadian free local classifieds,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1295,Q_PROTO_KIK,kik,,KIK Messenger,KIK Messenger is a Chinese Instant Messaging service.,Instant Messaging,amazon_aws;http;https;ip;spdy;ssl;tcp;zendesk,PC-Windows-Browser-www.kik.com (2014-03-07);iPhone-iOS 7.0.6-Kik Messenger 7.0.0 (2014-03-09);Mobile-Android 4.1.2-Kik Messenger 7.0.1.76 (2014-03-12);Windows Phone-Windows Phone OS 8-Kik Messenger 2.1.0.0 (2014-02-17);Nokia Mobile-Symbian-Kik Messenger 5.02(3) (2014-03-10),Mobile-Android-4.4.2-Kik Messenger-7.2.2.99- (2014-06-10);Nokia Mobile-Nokia Xpress 5800-Symbian-113.010.1506-Kik Messenger-5.02- (2014-06-10);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-11);Windows Phone-Windows Phone OS-7-Kik Messenger-2.1.0.0- (2013-10-14);iPhone-iOS-7.1-Kik Messenger-7.2.1- (2014-06-11),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, +,2245,Q_PROTO_KING,king,,King Digital Entertainment,King is a mobile game editor. This plug-in handles King games content delivery traffic and King.com website access.,Game,http;https;spdy;ssl,20150515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1732,Q_PROTO_KINGDOMXXX,kingdomxxx,,Kingdom XXX Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,816,Q_PROTO_KINO,kino,x,Kino,This protocol plug-in classifies the http traffic to the host kino.to.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,433,Q_PROTO_KIWIBOX,kiwibox,,Kiwibox.com,This protocol plug-in classifies the http traffic to the host kiwibox.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1131,Q_PROTO_KLIKBCA,klikbca,,KlikBCA.com,This protocol plug-in classifies the http traffic to the host klikbca.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2102,Q_PROTO_KLIX,klix,,Klix.ba,Bosnian news portal.,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2200,Q_PROTO_KOHSANTEPHEAPDAILY,kohsantepheapdaily,,Kohsantepheapdaily,Cambodian news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1130,Q_PROTO_KOMPAS,kompas,,Kompass.com,This protocol plug-in classifies the http traffic to the host kompas.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1160,Q_PROTO_KOMPASIANA,kompasiana,,Kompasiana.com,This protocol plug-in classifies the http traffic to the host kompasiana.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1439,Q_PROTO_KONAMINET,konaminet,,Konaminet.jp,This protocol plug-in classifies the http traffic to the host konaminet.jp. It also classifies the ssl traffic to the Common Name konaminet.jp.,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,817,Q_PROTO_KOOLIM,koolim,,KoolIM.com,This protocol plug-in classifies the http traffic to the host koolim.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1769,Q_PROTO_KOOORA,kooora,,Kooora.com,Arabic sports news portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,351,Q_PROTO_KPROXY,kproxy,,Kproxy.com,This protocol plug-in classifies the http traffic to the host kproxy.com. It also classifies the ssl traffic to the Common Name .kproxy.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,97,Q_PROTO_KRB5,krb5,,Kerberos,Kerberos provides a means to verify the identities of the different workstations on an open (unprotected) network.,Authentication,dns;ldap;msrpc;smb;tcp;udp,Kerberos 5,7/4/2008,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,, +,647,Q_PROTO_KRYPTOLAN,kryptolan,,Kryptolan,The kryptolan protocol (Kryptolan) is found over the IP layer (IANA protocol number: 65).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1266,Q_PROTO_KU6,ku6,,Ku6.com,This protocol plug-in classifies the http traffic to the host ku6.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1902,Q_PROTO_KUENSELONLINE,kuenselonline,,KuenselOnline.com,Bhutanese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,740,Q_PROTO_KUGOU,kugou,,Kugou/Kugoo,"Kugou is a multimedia peer-to-peer application providing file sharing, chat or broadcasting services.",Peer to Peer,http;https;spdy;udp,20110125,3/14/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,x,x,,,,,,,x, +,1818,Q_PROTO_KURIR_INFO,kurir_info,,Kurir Info,Serbian news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1386,Q_PROTO_KUXUN,kuxun,,Kuxun.cn,Chinese travel website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2189,Q_PROTO_KWEJK,kwejk,,Kwejk,Polish multimedia website,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, +,98,Q_PROTO_L2TP,l2tp,,Layer 2 Tunneling Protocol,Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider (ISP) to enable the operation of a virtual private network (VPN) over the Internet.,Tunneling,ip;udp,L2TP v2 and v3,L2TP v2-- (2014-02-11);L2TP v3-- (2014-02-11),,x,,x,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1746,Q_PROTO_LABANQUEPOSTALE,labanquepostale,,LaBanquePostale.fr,French bank offering insurance an banking services,Web,http;https;spdy;ssl,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,1387,Q_PROTO_LADY8844,lady8844,,Lady8844.com,Chinese fashion and beauty website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,709,Q_PROTO_LAN,lan,,Local Area Network,The lan protocol (Any local network) is found over the IP layer (IANA protocol number: 63).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2103,Q_PROTO_LANACION,lanacion,,Lanacion.com.ar,Argentinian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1694,Q_PROTO_LANSHARK,lanshark,,LanShark,Lanshark is a p2p client for LAN.,Peer to Peer,http;https;spdy,0.0.2,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,2223,Q_PROTO_LAPAGINA,lapagina,,Lapagina,El salvadorian news portal,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2172,Q_PROTO_LAPATILLA,lapatilla,,Lapatilla,Venezuelian news portal,Web,http;https;spdy;ssl,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,270,Q_PROTO_LAPOSTE_WEBMAIL,laposte_webmail,,La Poste Webmail,Laposte Webmail is a webmail protocol.,Webmail,http;https;spdy,20090311,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,1903,Q_PROTO_LAPRENSA,laprensa,,Laprensa.com,"Nicaraguan news portal, also accessed from Honduras.",Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1011,Q_PROTO_LAREDOUTE,laredoute,,LaRedoute.fr,This protocol plug-in classifies the http traffic to the host laredoute.fr.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,648,Q_PROTO_LARP,larp,,Locus Address Resolution Protocol,The larp protocol (Locus Address Resolution Protocol) is found over the IP layer (IANA protocol number: 91).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,434,Q_PROTO_LASTFM,lastfm,,Last.fm,"Last.fm is a web-radio service, featuring a music recommender system (called Audioscrobbler).",Web,http;https;spdy,20140320,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1539,Q_PROTO_LASTPASS,lastpass,,LastPass.com,Password manager application.,Web,http;https;spdy;ssl,2.0.20,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1388,Q_PROTO_LATIV,lativ,,Lativ.com.tw,Taiwanese online clothes shop.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,99,Q_PROTO_LCP,lcp,,Line Control Protocol,"LCP is used to establish, configure and test the data-link connection for a PPP link. This protocol is used to automatically agree upon the encapsulation format options, handle varying limits on sizes of packets, detect a looped-back link and other common misconfiguration errors, and terminate the link. This protocol is used to establish, configure and test the data-link connection for a PPP link.",Network Management,ppp,RFC 1663,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,100,Q_PROTO_LDAP,ldap,,Lighweight Directory Access Protocol,LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this protocol to send queries to Active Directory. [Note: ldap is also known as cldap.],Application Service,tcp;udp,LDAP v3,1/30/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, +,101,Q_PROTO_LDAPS,ldaps,,Lighweight Directory Access Protocol Secure,Secure LDAP is the Secure version of the LDAP protocol.,Application Service,ssl,LDAPS v3,7/4/2008,,,,,,636,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, +,1332,Q_PROTO_LDBLOG,ldblog,,Livedoor Blog,Japanese blog dedicated to IT and Hacking,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,649,Q_PROTO_LEAF_1,leaf_1,,Leaf 1,The leaf_1 protocol (Leaf 1) is found over the IP layer (IANA protocol number: 25).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,650,Q_PROTO_LEAF_2,leaf_2,,Leaf 2,The leaf_2 protocol (Leaf 2) is found over the IP layer (IANA protocol number: 26).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,819,Q_PROTO_LEAPFILE,leapfile,,LeapFILE.com,This protocol plug-in classifies the http traffic to the host leapfile.com. It also classifies the ssl traffic to the Common Name leapfile.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1013,Q_PROTO_LEBONCOIN,leboncoin,,LeBonCoin.fr,"Leboncoin is a french classified ads website.,This protocol is not supported with Basic DPI.",Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1904,Q_PROTO_LERAL,leral,,Leral.net,Senegalese news portal,Web,http;https;spdy,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1964,Q_PROTO_LETECKAPOSTA_CZ,leteckaposta_cz,,leteckaposta.cz,Classifies web browsing on the leteckaposta.cz Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1014,Q_PROTO_LETV,letv,,LeTV.com,This protocol plug-in classifies the http traffic to the host letv.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1287,Q_PROTO_LEVEL3,level3,,Level 3 Communications CDN,"This protocol plug-in classifies the http traffic to the hosts l3.net, level3.net and level3.com.",Web,http;https;spdy,20121025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2104,Q_PROTO_LEXPRESS,lexpress,,lexpress.mu,Mauritian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1210,Q_PROTO_LG_ESHOP,lg_eshop,,Lgeshop.com,This protocol plug-in classifies the http traffic to the host lgeshop.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,820,Q_PROTO_LIBERO_VIDEO,libero_video,,Libero.it,This protocol plug-in classifies the http traffic to the hosts libero.it and video.libero.it.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,435,Q_PROTO_LIBRARYTHING,librarything,,LibraryThing.com,This protocol plug-in classifies the http traffic to the host librarything.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,436,Q_PROTO_LIFEKNOT,lifeknot,,LifeKnot.com,This protocol plug-in classifies the http traffic to the host lifeknot.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1124,Q_PROTO_LINE,line,,Line,"Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Call metadata is no more extracted from line, but can be raised from the SIP layer (not valid since version 3).",Instant Messaging,http;https;naver;rtsp;sip;spdy;ssl;stun;udp,Mobile-Android (2014-05-26);iPhone-iOS (2014-06-09),BlackBerry-BlackBerry OS-Line-2.2.21- (2014-06-04);Mac-Mac OS-10.9.4-Line-3.7.0- (2014-07-11);Mobile-Android-4.4.2-Line-4.5.0- (2014-07-10);Nokia Mobile-Nokia Asha 311-Symbian-Line-1.8.13- (2014-06-09);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-19);PC-Windows-7-Line-3.7.0.34- (2014-07-01);PC-Windows-8-Line-1.0.9.91- (2014-05-07);PC-Windows-8-Line-1.0.9.91- (2014-06-24);Windows Phone-Windows Phone OS-8-Line-3.5.0.388- (2014-06-04);iPhone-iOS-7.1.2-Line-4.4.1- (2014-07-08),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,1572,Q_PROTO_LINE_GAMES,line_games,,LineGames.jp,"This protocol plug-in classifies the http traffic to the host linegame.jp, the portal of various Line games.",Game,http;https;spdy,20130904,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1570,Q_PROTO_LINE_WIND_RUNNER,line_wind_runner,,LINE WIND runner application,Line Wind Runner is a popular asian mobile device game accessible from the Line application.,Game,hangame;line_games,1.1.5,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1283,Q_PROTO_LINEAGE2,lineage2,,Lineage II,Lineage2 is a MMORPG developed by NCSoft.,Game,http;https;spdy;tcp,1.0.0.15-1.0.0.19;1.2.1.21,PC-Windows-7-Line Age-1.2.1.21- (2012-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,305,Q_PROTO_LINKEDIN,linkedin,,LinkedIn.com,LinkedIn is professional social network.,Forum,http;https;spdy;ssl,Mobile-Android-Linkedin 3.2.2 (2014-01-06);iPhone-iOS-Linkedin 7.0.2 (2014-01-06);Windows Phone-Windows Phone OS-Linkedin 1.6.0 (2014-01-06),"BlackBerry-BlackBerry OS-10.2.1.3175-Linkedin-10.1.7.80- (2014-06-18);Mobile-Android-4.4.2-Linkedin-3.3.5- (2014-07-08);Nokia Mobile-Nokia Asha 311-Symbian-Linkedin-1.0.4- (2014-06-12);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-20);PC-Windows-7-Yoono - Twitter, Facebook, LinkedIn-0.2.7.32- (2014-03-20);Windows Phone-Windows Phone OS-8-Linkedin-1.6.0.0- (2014-01-23);iPhone-iOS-7.1.1-Linkedin-7.1.5- (2014-07-03)",,x,,x,,,,,,,,,,x,,,,,,,x,,x,,,,x,,,,,,,,,, +,1139,Q_PROTO_LINTASBERITA,lintasberita,,LintasBerita.com - Lintas.me,This protocol plug-in classifies the http traffic to the hosts lintasberita.com and lintas.me. It also classifies the ssl traffic to the Common Name lintas.me.,Web,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1155,Q_PROTO_LIONAIR,lionair,,LionAir.co.id,This protocol plug-in classifies the http traffic to the host lionair.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1389,Q_PROTO_LIONTRAVEL,liontravel,,LionTravel.com,Liontravel.com is the official website of Lion Travel Service which is the leading travel agency headquartered in Taipei.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,437,Q_PROTO_LISTOGRAFY,listografy,,Listografy.com,This protocol plug-in classifies the http traffic to the host listography.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,335,Q_PROTO_LIVE_GROUPS,live_groups,,Windows Live Groups,"Windows Live Groups is an online service by Microsoft that enables users to create their social groups for sharing, discussion and coordination.",Forum,http;https;spdy;ssl,20110415,10/4/2012,,x,,,,,,,,,x,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,262,Q_PROTO_LIVE_HOTMAIL,live_hotmail,,Windows Live Hotmail,Windows Live Hotmail is a free webmail service operated by Microsoft. The service is now named Outlook.,Webmail,http;https;spdy;ssl,PC-Windows-Browser-www.live.com (2014-01-15),"PC-Windows-7-Chrome-35.0.1916.153- (2014-07-09);PC-Windows-8-Mail, Calendar, and People-16.4.4206.722- (2014-07-04)",,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,888,Q_PROTO_LIVE_MEETING,live_meeting,,Microsoft Office Live Meeting,Microsoft Office Live Meeting is a commercial subscription-based web conferencing service operated by Microsoft.,Web,http;https;spdy;ssl,Live Meeting 2007,6/22/2011,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,821,Q_PROTO_LIVE_MESH,live_mesh,,Windows Live Mesh,"This protocol plug-in classifies the ssl traffic to the Common Names accounts.mesh.com, storage.mesh.com and enclosure.mesh.com.",Peer to Peer,https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1184,Q_PROTO_LIVE_STORAGE,live_storage,,Windows Live File Storage,"Windows Live File Storage is a Microsoft web service designed to be used by other Microsoft web services that may need storage, for example msn, skydrive, etc.",Network Service,http;https;spdy;ssl,20120613,6/29/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1015,Q_PROTO_LIVEDOOR,livedoor,,Livedoor.com,This protocol plug-in classifies the http traffic to the hosts livedoor.com and livedoor.jp.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1016,Q_PROTO_LIVEINTERNET,liveinternet,,LiveInternet.ru,This protocol plug-in classifies the http traffic to the host liveinternet.ru.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,438,Q_PROTO_LIVEJOURNAL,livejournal,,LiveJournal.com,This protocol plug-in classifies the http traffic to the host livejournal.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2158,Q_PROTO_LIVEMAIL_ATTACH,livemail_attach,,Windows Live Hotmail Attachements,This signature detects Windows Live Mail File attachment uploads.,Webmail,live_hotmail,PC-Windows-Browser-www.live.com (2014-01-15),PC-Linux-BasicTest- (2014-02-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,327,Q_PROTO_LIVEMAIL_MOBILE,livemail_mobile,,Live hotmail for mobile,Livemail_mobile is the livemail webmail for mobile phones. The application is now named Outlook. Encrypted traffic is classified as windowslive or live_hotmail.,Webmail,http;https;spdy,Windows Phone-Windows Phone OS (2014-01-17);Mobile-Android (2014-01-17),Mobile-Android-4.4.2-Outlook-7.8.2.12.49.7090- (2014-07-09);Windows Phone-Windows Phone OS-Browser- (2014-01-17),,x,,,,,,,,,,,,,x,,,,,,,x,,,,,x,,,,,,,,,, +,439,Q_PROTO_LIVEMOCHA,livemocha,,Livemocha.Com,This protocol plug-in classifies the http traffic to the host livemocha.com. It also classifies the ssl traffic to the Common Name .livemocha.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1148,Q_PROTO_LIVINGSOCIAL,livingsocial,,Livingsocial.co.id,This protocol plug-in classifies the http traffic to the host livingsocial.co.id.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,104,Q_PROTO_LLC,llc,,Logical Link Control,"The IEEE 802.2 Logical Link Control (LLC) protocol provides a link mechanism for upper layer protocols encapsulated in a frame. LLC type I service provides a datalink connectionless mode service, while LLC type II provides a connection-oriented service at the datalink layer.",Network Service,8021q;eth;ppp,RFC 1483,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1286,Q_PROTO_LLNWD,llnwd,,Limelight Networks CDN,"Content Delivery Network owned by the Limelight Networks company, providing media storage for several media content web services.",Web,http;https;spdy;ssl,20140114,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1961,Q_PROTO_LOAD_TO,load_to,,load.to,Classifies web browsing on the load.to Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,105,Q_PROTO_LOADBALAN,loadbalan,,Load Balancing,Load Balancing is a protocol used in the Windows environment to distribute traffic between servers.,Network Service,8021q;eth;gre,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1540,Q_PROTO_LOKALISTEN,lokalisten,,Lokalisten.de,German social networking website. ( http://www.lokalisten.de ),Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,106,Q_PROTO_LOOP,loop,,Loopback:XEROX,Loop is a protocol used by Cisco routers to test the status of a connected link.,Routing,8021q;eth;gre,Ethernet II,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1390,Q_PROTO_LOTOUR,lotour,,Lotour.com,Chinese travel website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1211,Q_PROTO_LOTTE,lotte,,Lotte.com,This protocol plug-in classifies the http traffic to the host lotte.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1905,Q_PROTO_LOTTERYPOST,lotterypost,,Lotterypost.com,Provides information about winning lottery numbers in the US,Web,http;https;spdy;ssl,20131025,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1499,Q_PROTO_LOTUS_LIVE,lotus_live,,IBM SmartCloud,"Lotus live, now IBM SmartCloud, is a web-based collaborative suite of applications for enterprises, including mail, file transfer, meetings and forms.",Web,https;spdy;ssl,20130628,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,x,x,,,,,,, +,896,Q_PROTO_LOTUS_SAMETIME,lotus_sametime,,IBM Lotus Sametime,"IBM Lotus Sametime is a client-server application and middleware platform that provides real-time, unified communications and collaboration for enterprises.",Instant Messaging,http;https;spdy;tcp,Lotus Sametime 8,6/23/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +,107,Q_PROTO_LOTUSNOTES,lotusnotes,,Lotus Notes,"Lotus Notes is a groupware knowledge management system which integrates various services such as web browsing, calendaring and mailing.",Mail,tcp,20070618,7/4/2008,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,, +,108,Q_PROTO_LPR,lpr,,Line Printer Remote,LPR is a protocol providing printing services and used in Berkeley distributions of the Unix operating system.,Printer,tcp,RFC 1179,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,109,Q_PROTO_LQR,lqr,,Link Quality Report,"The Link Quality Report (LQR) protocol is a part of the Point-to-Point Protocol (PPP), which allows two computers to connect to each other. LQR allows peers at either end of the PPP link to assess the state and quality of the PPP link.",Tunneling,ppp,RFC 1989,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,2105,Q_PROTO_LRYTAS,lrytas,,Lrytas.lt,Lithuanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1698,Q_PROTO_LUKE,luke,,LUKE,Luke is a P2P portal and software.,Peer to Peer,http;https;spdy;tcp,v1.0.0.0.0,10/1/2013,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,440,Q_PROTO_LUNARSTORM,lunarstorm,,LunarStorm.se,This protocol plug-in classifies the http traffic to the host lunarstorm.se.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1391,Q_PROTO_LVPING,lvping,,Lvping.com,"Chinese Hotel Reviews, Travel Guides, Forum and tourist guide.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1564,Q_PROTO_LYNC,lync,,Microsoft Lync,"Microsoft Lync IM, VoIP and desktop sharing services (Lync Server and Lync Online are supported).",Instant Messaging,https;rtp;spdy;ssl;stun,MS Lync 2010;Office 365,,,x,,,,,,,x,,,,,,,x,,,,,,x,,,,,,,,x,,,,,,, +,1454,Q_PROTO_LYNC_ONLINE,lync_online,,Microsoft Lync Online,On-line version of the Microsoft Lync IM and VoIP services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x,,,,,,, +,1304,Q_PROTO_M2PA,m2pa,,MTP2 User Peer-to-Peer Adaptation Layer,M2PA is a signaling peer-to-peer protocol used by MTP2 in the Signaling System 7 (SS7).,Network Service,sctp,1.2 - RFC 4165,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1302,Q_PROTO_M2UA,m2ua,,MTP2 User Adaptation Layer,M2UA is an SCTP adaptation layer for encapsulated MTP2 messages in the Signaling System 7 (SS7).,Network Service,sctp,1.2 - RFC 3331,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1301,Q_PROTO_M3UA,m3ua,,MTP3 User Adaptation Layer,"M3UA enables SS7 protocols stacking (ISUP, SCCP, ...) over an IP network.",Network Service,sctp,RFC 4666,,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1571,Q_PROTO_MAAII,maaii,,Maaii application,Maaii is a cross-platform messaging application which allows iPhone and Android users to send and receive text messages and phone calls for free.,Instant Messaging,http;https;spdy;ssl;udp,PC-Windows-browser-maaii.com (2014-03-07);Mobile-Android 2.3.5-Maaii 2.1.6 (2013-09-16);iPhone-iOS 6.1.3-Maaii 2.2.1 (2014-03-07),Mobile-Android-4.4.2-Maaii-2.3.2- (2014-07-02);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-08);iPhone-4S-iOS-7.1.2-Maaii-2.3.2- (2014-07-02),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,2106,Q_PROTO_MAANNEWS,maannews,,Maannews.net,Palestinian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2284,Q_PROTO_MAGICJACK,magicjack,,magicJack,"MagicJack is a VoIP service for home and business use, available as a mobile application and also with a proprietary device (magicJack PLUS).",Audio/Video,http;https;sip;spdy;ssl,Mobile-Android-magicApp: Free Calls 3.9.747,,,x,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,,, +,1566,Q_PROTO_MAGUMAGU,magumagu,,Magu-Magu (aka 2013 for Kakao),"2013 for Kakao (aka Magu-Magu) is Korean baseball game, developped by CJ E&M corp.",Game,netmarble,2.0.1,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1393,Q_PROTO_MAIL2000,mail2000,,Mail2000.com.tw,Taiwanese Webmail and SMS services.,Webmail,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,1392,Q_PROTO_MAIL_189,mail_189,,Mail189.cn,China Telecom email services.,Webmail,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,1542,Q_PROTO_MAIL_RU_GAMES,mail_ru_games,,Mail.ru games,ONline gaming site ( http://games.mail.ru ),Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1543,Q_PROTO_MAIL_RU_MOIMIR,mail_ru_moimir,,Mail.ru Moimir,Social networking website ( http://my.mail.ru ).,Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1544,Q_PROTO_MAIL_RU_WEBAGENT,mail_ru_webagent,,Mail.ru Webagent,Mail.ru custom web browser ( internet.mail.ru ).,Web,http;https;spdy,1.0.0.1326,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,334,Q_PROTO_MAILRU,mailru,,Mail.ru Webmail,"Mail.ru is a Russian web portal providing services such as webmail, search engine, instant messaging.",Webmail,http;https;spdy;ssl,PC-Windows-Browser-www.mailru.com (2013-07-15),Mobile-Android-4.4.2-Mail.Ru-2.3.3.6634- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-08);PC-Windows-8-????? Mail.Ru-1.1.1.90- (2014-05-28);Windows Phone-Windows Phone OS-8-Mail-2.0.5253.0- (2014-06-26);Windows Phone-Windows Phone OS-8-Mail.ru-1.6.2.0- (2014-06-12);iPhone-iOS-7.1.2-Mail.Ru-4.1.0.10887- (2014-07-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,2308,Q_PROTO_MAILRU_AGENT,mailru_agent,,Mail.ru Agent,"Mail.ru Agent is a cross-platform mobile messaging application supporting text, audio and video. It is featured by Mail.ru.",Instant Messaging,aim_express;http;https;spdy;tcp,iPhone-iOS-Mail.Ru Agent 4.5.7;Mobile-Android-Mailru Agent 3.4,,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,2107,Q_PROTO_MAKO,mako,,Mako.co.il,Israeli news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,246,Q_PROTO_MAKTOOB,maktoob,,Maktoob mail,Maktoob is a webmail protocol.,Webmail,http;https;spdy,20110321,1/14/2009,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,5,Q_PROTO_MALFORMED,malformed,,Malformed virtual protocol,A packet belongs to the protocol 'malformed' if the protocol announced by the lower level protocol does not correspond to the one determined by the system.,Standard,eth;ip;ip6;isl;llc;ppp;pppoe;sctp;snap;udp,na,7/4/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1918,Q_PROTO_MALTAPARK,maltapark,,Maltapark.com,Maltapark is the most popular trading website in Malta.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2108,Q_PROTO_MALTATODAY,maltatoday,,MaltaToday.com.mt,Maltese news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1919,Q_PROTO_MANA,mana,,Mana.pf,French Polynesian internet service provider website,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,583,Q_PROTO_MANDRIVA_UPDATE,mandriva_update,,Mandriva Update,"This protocol manages the mandriva update operations. It allows identifying package name, package version, package architecture and distribution, thanks to the HTTP User Agent, the HTTP Uri and the HTTP method used. The HTTP User Agent must be the Aria2 download manager, the HTTP URI must be finished with RPM extension and the HTTP method must be a GET request.",Web,http;https;spdy,Mandriva2010,PC-Mandriva-2010-- (2011-12-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,729,Q_PROTO_MANET,manet,,MANET Protocols,The manet protocol (MANET Protocols) is found over the IP layer (IANA protocol number: 138).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1394,Q_PROTO_MANGOCITY,mangocity,,Mangocity.com,Chinese Travel website.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,554,Q_PROTO_MANOLITO,manolito,,manolito,Manolito is a peer-to-peer file sharing software.,Peer to Peer,tcp;udp,Manolito v3.1.1,PC-Windows-Manolito-3.11- (2012-04-13),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,110,Q_PROTO_MAPI,mapi,,MS Exchange Message API,MS Exchange Message API is a protocol used by Exchange clients to retrieve their emails.,Mail,dcerpc;msrpc,Microsoft Outlook,7/4/2008,,,,x,,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,, +,1468,Q_PROTO_MAPQUEST,mapquest,,MapQuest.com,Free online web mapping service owned by AOL.,Web,http;https;spdy;ssl,20130828,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1764,Q_PROTO_MARCA,marca,,Marca.com,Spanish sports news portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1920,Q_PROTO_MARKTPLAATS,marktplaats,,Marktplaats.nl,"Dutch advertising site where you can sell, new and second-hand goods.",Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1017,Q_PROTO_MASHABLE,mashable,,Mashable.com,This protocol plug-in classifies the http traffic to the host mashable.com. It also classifies the ssl traffic to the Common Name .mashable.com.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,587,Q_PROTO_MASHARE,mashare,,Ma-Share.com,"mashare is an online solution to store, send and share files",Web,http;https;spdy,20110104,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1018,Q_PROTO_MATCH,match,,Match.com,This protocol plug-in classifies the http traffic to the host match.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2109,Q_PROTO_MAYBANK2U,maybank2u,,Maybank2u.com,Malay banking website,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1231,Q_PROTO_MBC,mbc,,iMBC.com,This protocol plug-in classifies the http traffic to the host www.imbc.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2110,Q_PROTO_MBL,mbl,,Mbl.is,Icelandic news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1212,Q_PROTO_MBN,mbn,,MBN.co.kr,This protocol plug-in classifies the http traffic to the host mbn.co.kr. It also classifies the ssl traffic to the Common Name .mbn.co.kr.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,111,Q_PROTO_MCAFEE,mcafee,,McAfee Client update,McAfee is one of the leaders in intrusion prevention and security risk management on the web.,Security Service,http;https;spdy;ssl,20050626,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,112,Q_PROTO_MCS,mcs,,Multipoint Communication Service,"Multipoint Communication Service (MCS) is a multipoint data delivery service for use in multimedia and audiovisual conferencing service. It provides the mechanism for multipoint aware applications to send data to all or a subset of the group with a single send primitive and to force, if desired, a uniformly sequenced reception of data for all users.",Network Service,capwap;cotp,2,7/4/2008,,,,x,,,,,,,,,x,,,x,,,,,,x,,,,,,,,,,,,,,, +,822,Q_PROTO_MEDIAFIRE,mediafire,,MediaFire.com,This protocol plug-in classifies the http traffic to the hosts a.1521.x.akamai.net and mediafire.com. It also classifies the ssl traffic to the Common Name mediafire.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,441,Q_PROTO_MEETIN,meetin,,MEETin.org,This protocol plug-in classifies the http traffic to the host meetin.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1083,Q_PROTO_MEETINGPLACE,meetingplace,,Cisco MeetingPlace,"MeetingPlace is a protocol used by the Cisco Unified MeetingPlace suite of voice, web, and video conferencing products.",Audio/Video,http;https;soap;spdy;ssl,20110928,10/26/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +,1452,Q_PROTO_MEETME,meetme,,MeetMe.com,Social networking web-service available on PC and mobile devices.,Web,http;https;spdy;ssl,20130415 (web app),PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,443,Q_PROTO_MEETTHEBOSS,meettheboss,,MeetTheBoss.tv,This protocol plug-in classifies the http traffic to the host meettheboss.tv.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,442,Q_PROTO_MEETUP,meetup,,Meetup.com,This protocol plug-in classifies the http traffic to the host meetup.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,823,Q_PROTO_MEEVEE,meevee,x,MeeVee,Closed on-line video aggregator website.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1299,Q_PROTO_MEGA,mega,,Mega.co.nz,This protocol plug-in classifies the http traffic to the host mega.co.nz. It also classifies the ssl traffic to the Common Name mega.co.nz.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,350,Q_PROTO_MEGAPROXY,megaproxy,,Megaproxy.com,This protocol plug-in classifies the http traffic to the hosts megaproxy.fr and megaproxy.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,1989,Q_PROTO_MEGASHARES_COM,megashares_com,,megashares.com,Classifies web browsing on the megashares.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,314,Q_PROTO_MEGAUPLOAD,megaupload,,megaupload,"Megaupload was an online solution to store, send and share files. Megaupload was shut in January 2012.",Web,http,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,824,Q_PROTO_MEGAVIDEO,megavideo,x,Megavideo,This protocol plug-in classifies the http traffic to the host megavideo.com.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1545,Q_PROTO_MEKUSHARIM,mekusharim,,Mekusharim.walla.co.il,Social network website ( http://mekusharim.walla.co.il/ ).,Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1546,Q_PROTO_MENDELEY,mendeley,,Mendeley.com,Sharing and annotating document web service. ( http://www.mendeley.com ),Web,amazon_aws;http;https;scribd;spdy;ssl;vimeo,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1770,Q_PROTO_MERCADOLIBRE,mercadolibre,,MercadoLibre.com,"MercadoLibre is a technology company that provides e-commerce solutions. Their website is accessed from Uruguay, Venezuela, Mexico, Columbia, Ecuador, Peru, Chile and Costa Rica.",Web,http;https;spdy,20140130,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,2191,Q_PROTO_MERCADOR,mercador,x,Mercador (now Olx.ro),Romanian classified ads portal,Web,,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,651,Q_PROTO_MERIT_INP,merit_inp,,MERIT Internodal Protocol,The merit_inp protocol (MERIT Internodal Protocol) is found over the IP layer (IANA protocol number: 32).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2111,Q_PROTO_MERRJEP,merrjep,,MerrJep.com,Kosovan classified ads,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,825,Q_PROTO_MESSENGERFX,messengerfx,,MessengerFX.com,This protocol plug-in classifies the http traffic to the host messengerfx.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1176,Q_PROTO_METACAFE,metacafe,,Metacafe.com,"This protocol plug-in classifies the http traffic to the hosts .metacafe.com, v.mccont.com and .mcstatic.com.",Audio/Video,http;https;spdy,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,652,Q_PROTO_MFE_NSP,mfe_nsp,,MFE Network Services Protocol,The mfe_nsp protocol (MFE Network Services Protocol) is found over the IP layer (IANA protocol number: 31).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,113,Q_PROTO_MGCP,mgcp,,Media Gateway Control Protocol,MGCP protocol is used as signaling protocol for voice IP applications.,Audio/Video,tcp;udp,MGCP v1.0,7/4/2008,,,,x,mgcp,,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,1547,Q_PROTO_MGOON,mgoon,,Mgoon.com,"Watch video, play games ( http://www.mgoon.com/ ).",Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,826,Q_PROTO_MIBBIT,mibbit,,Mibbit chat network,This protocol plug-in classifies the http traffic of any client for chat.mibbit.com. It also classifies the ssl traffic to the Common Names web2.mibbit.com and chat.mibbit.com.,Forum,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,724,Q_PROTO_MICP,micp,,Mobile Internetworking Control Protocol,The micp protocol (Mobile Internetworking Control Pro.) is found over the IP layer (IANA protocol number: 95).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1921,Q_PROTO_MIHANBLOG,mihanblog,,Mihanblog.com,Persian blogging platform,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2162,Q_PROTO_MIHANWEBADS,mihanwebads,,Mihanwebads,Iranian Internet AD company website,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2151,Q_PROTO_MIKOGO,mikogo,,Mikogo,Mikogo is a free desktop sharing and web conferencing service.,Web,cloudflare;http;https;spdy;ssl,20121004,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,x,, +,2112,Q_PROTO_MILLIYET,milliyet,,Milliyet.com.tr,Turkish news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,326,Q_PROTO_MIMP,mimp,,IMP mobile version,MIMP is the IMP webmail for mobile phones.,Webmail,http;https;spdy,20090817,6/6/2011,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +,114,Q_PROTO_MIPV6,mipv6,,Mobile IPv6,Mobile IP is a proposed standard protocol that builds on the Internet Protocol by making mobility transparent to applications and higher level protocols like TCP.,Network Service,ip6,Mobile IPv6,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1548,Q_PROTO_MIRO,miro,,Miro (getmiro.com),Multimedia player. ( http://www.getmiro.com ),Peer to Peer,http;https;spdy;ssl,6.0,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,2113,Q_PROTO_MISTRECI,mistreci,,Mistreci.com,Albanian movie streaming website,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1298,Q_PROTO_MITALK,mitalk,,MiTalk Messenger (Miliao),MiTalk (aka Miliao) is a mobile instant messaging application from Xiaomi Tech.,Instant Messaging,http;https;jabber;spdy;ssl;udp,iPhone-iOS-MiTalk 6.3.1 (2013-11-06);Mobile-Android-MiTalk 5.6.733 (2013-11-06),Mobile-Android-4.1.2-MiTalk-5.0.735- (2014-02-22);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-09);PC-Windows-8-MiTalk - Messenger Made By XIAOMI-2.1.39.0- (2014-07-10);Windows Phone-Windows Phone OS-MiTalk-1.5.38.0- (2014-02-25);iPhone-iOS-7.1.1-MiTalk-6.6.1- (2014-06-12),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,444,Q_PROTO_MIXI,mixi,,Mixi.jp,This protocol plug-in classifies the http traffic to the host mixi.jp.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1213,Q_PROTO_MK,mk,,Mk.co.kr,This protocol plug-in classifies the http traffic to the host mk.co.kr. It also classifies the ssl traffic to the Common Name member.mk.co.kr.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,115,Q_PROTO_MMS,mms,,Microsoft Multimedia Streaming,MMS protocol is used extensively nowadays by Microsoft video streaming servers. It enables to stream a file in real time to many simultaneous viewers.,Audio/Video,http;https;spdy;tcp;udp,MediaPlayer,9/29/2011,,x,,x,mms,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,940,Q_PROTO_MMS_ISO,mms_iso,,Manufacturing Message Specification (ISO 9506 ),ISO 9506 Manufacturing Message Specification (MMS).,Network Service,acse;pp,ISO 9506,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,116,Q_PROTO_MMSE,mmse,,MultiMedia Messages Encapsulation,The MultiMedia Messages Encapsulation protocol (MMSE) is used by mobile stations to send multimedia messages.,Wap,http;https;spdy;wsp,wap 1.0;wap 2.0;mmse 1.0,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1456,Q_PROTO_MOBAGE,mobage,,Mobage games,Mobile games download portal and identification services.,Web,http;https;spdy;ssl,20130304,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,653,Q_PROTO_MOBILE,mobile,,IP Mobility,The mobile protocol (IP Mobility) is found over the IP layer (IANA protocol number: 55).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1395,Q_PROTO_MOBILE01,mobile01,,Mobile01.com,Taiwanese social network.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1292,Q_PROTO_MOBILE_IP,mobile_ip,,Mobile IP,Mobile IP is an IETF standard communications protocol that is designed to allow mobile device users to move from one network to another while maintaining a permanent IP address.,Tunneling,udp,RFC 5944,11/23/2012,,,,x,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,827,Q_PROTO_MOBILE_ME,mobile_me,x,Mobile Me,On-line web application suite (me.com) created by Apple and remplaced by iCloud in 2011.,Web,,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,654,Q_PROTO_MOBILEHDR,mobilehdr,,Mobile Header,The mobilehdr protocol (Mobile Header) is found over the IP layer (IANA protocol number: 135).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1082,Q_PROTO_MOBILINK,mobilink,,Mobilink,"Mobilink is a proprietary, binary, TCP based protocol which is used to synchronize the contents of multiple mobile client databases with a central SQL Server. The clients can run on smartphones, Java applets, etc., in addition to PC computers.",Database,tcp,Mobilink 12.0.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,446,Q_PROTO_MOCOSPACE,mocospace,,MocoSpace.com,This protocol plug-in classifies the http traffic to the host mocospace.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2166,Q_PROTO_MOE_GOV,moe_gov,,Moe.gov,Omanian Ministry of Education portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,447,Q_PROTO_MOG,mog,,MOG.com,This protocol plug-in classifies the http traffic to the host mog.com. It also classifies the ssl traffic to the Common Name mog.com.,Audio/Video,http;https;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,828,Q_PROTO_MOGULUS,mogulus,,Livestream.com,This protocol plug-in classifies the http traffic to the hosts livestream.com and a749.g.akamai.net. It also classifies the ssl traffic to the Common Name livestream.com.,Audio/Video,http;https;rtmp;spdy;ssl,20120928,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1396,Q_PROTO_MOMOSHOP,momoshop,,Momoshop.com.tw,Taiwanese online shop.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1460,Q_PROTO_MONEX,monex,,Monex.com,Online broker.,Web,http;https;spdy;ssl,20130304,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1397,Q_PROTO_MONEY_163,money_163,,Money163.com,Chinese finance portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1398,Q_PROTO_MONEYDJ,moneydj,,MoneyDJ.com,Taiwanese finance portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2114,Q_PROTO_MONITOR,monitor,,Monitor.co.ug,Ugandan news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1019,Q_PROTO_MONSTER,monster,,Monster.com,This protocol plug-in classifies the http traffic to the hosts monster.com and monster.fr.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1922,Q_PROTO_MOOV,moov,,Moov.mg,Malagasy internet web portal,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1276,Q_PROTO_MOP,mop,,Mop.com,This protocol plug-in classifies the http traffic to the host mop.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1787,Q_PROTO_MOREFREECAMSECRETS,morefreecamsecrets,,MoreFreeCamSecrets.com,Adult live webcam site,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2169,Q_PROTO_MOSAIQUEFM,mosaiquefm,,Mosaiquefm,Tunisian radio streaming website,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1923,Q_PROTO_MOTIKA,motika,,Motika.com.mk,Macedonian video posting website.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,118,Q_PROTO_MOUNT,mount,,Mount,"The Mount protocol is related to the NFS protocol. It provides operating system specific services to launch the NFS protocol -- looking up server path names, validating user identity, and checking access permissions.",File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,448,Q_PROTO_MOUTHSHUT,mouthshut,,MouthShut.com,This protocol plug-in classifies the http traffic to the host mouthshut.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2193,Q_PROTO_MOVER,mover,,Mover,Uzbek vide streaming website,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1020,Q_PROTO_MOZILLA,mozilla,,Mozilla.com - Mozilla.org,This protocol plug-in classifies the http traffic to the hosts mozilla.com and mozilla.org. It also classifies the ssl traffic to the Common Name mozilla.org.,Web,http;https;spdy;ssl,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2224,Q_PROTO_MOZZI,mozzi,,Mozzi,International Mobile services provider,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2004,Q_PROTO_MP3_ROCKET,mp3_rocket,,MP3 Rocket application,"MP3 Rocket is a music file downloader application. It uses the Youtube (aka Google Video) service to search and download video clips, and then transforms them into MP3 files on the host machine using a MP3 converter. This plug-in only classifies secondary flows of the application, like client updates. Video clip downloads are classified as youtube.",Audio/Video,http;https;spdy,"6.3.15,6.4.3",PC-Windows-MP3 Rocket-6.4.3- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,251,Q_PROTO_MPEGTS,mpegts,,MPEG-Transport Stream,MPEG-Transport Stream is a protocol used for MPEG flows transmission,Audio/Video,http;https;rtp;spdy;udp,MPEG-2 Part1,10/13/2009,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,119,Q_PROTO_MPLS,mpls,,Multiprotocol Packet Label Switching,Multiprotocol Label Switching (MPLS) is an Internet Engineering Task Force (IETF) protocol. It is used for routing and allows you to define a delivery path to a flow identified by a specific label.,Routing,8021q;eth;mpls;ppp,RFC 3031,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,655,Q_PROTO_MPLS_IN_IP,mpls_in_ip,,Multi Protocol Label Switching data-carrying mechanism,The mpls_in_ip protocol (Multi Protocol Label Switching data-carrying mechanism) is found over the IP layer (IANA protocol number: 137).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1455,Q_PROTO_MPLUS_MESSENGER,mplus_messenger,,M+ Messenger,M+ is a taiwanese mobile IM application with audio/image file send feature.,Instant Messaging,http;https;spdy;ssl;tcp,1.7.0 (Android);1.6.10 (iOS),7/3/2013,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,287,Q_PROTO_MPQUEST,mpquest,x,MapQuest.com,This protocol plug-in classifies the http traffic to the hosts mapquest.com and mapquest.fr.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,312,Q_PROTO_MQ,mq,,IBM Websphere MQ,Mq (IBM Websphere MQ) is an inter-application communication protocol.,Application Service,tcp,IBM Websphere MQ 20090528,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,898,Q_PROTO_MS_COMMUNICATOR,ms_communicator,,Microsoft Communicator,"Microsoft Office Communicator is a client software launched in October 2007 for conferences which aims to communicate between collaborators using instant messaging, VoIP and videoconference.",Instant Messaging,https;spdy;ssl,MS Communicator 2007,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +,120,Q_PROTO_MSN,msn,,MSN Messenger,The MSN protocol allows the exchange of instant messages. The MSN protocol is used by the Microsoft software Microsoft Messenger,Instant Messaging,http;https;socks4;socks5;spdy;ssl;tcp;udp,PC-Windows-Msn Messenger 4.7;PC-Windows-Msn Messenger 6.5;PC-Windows-Msn Messenger 7.5;PC-Windows-Msn Messenger 8.1;PC-Windows-Msn Messenger 8.5;iPhone-iOS-Agile Messenger;PC-Windows-IM+;PC-Windows-T-Online Messenger;PC-Windows 7-Windows Live Messenger 2011,11/22/2013,,x,,x,msn,,,,x,x,x,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, +,121,Q_PROTO_MSN_GROUPS,msn_groups,x,MSN groups,"MSN Groups was a website part of the MSN network which hosted online communities, and which contained Web pages, hosted images, and contained a message board. MSN Groups was shut down on February 2009 as part of a migration of online applications and services to the Windows Live brand, and later renovated as Windows Live Groups.",Forum,,20080129fr;20080129en,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,122,Q_PROTO_MSN_SEARCH,msn_search,x,MSN Search,This protocol is used for sending user queries to the MSN Live search engine.,Web,,20071001,9/25/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,123,Q_PROTO_MSN_VIDEO,msn_video,,MSN Video,This protocol is used by MSN Messenger for video conversations (is not used anymore since MSN version 8.X).,Audio/Video,tcp;udp,4.7;6.5;7.5;8.1;8.5;AgileMessenger;IM+;TOnline;WLM 2011,7/4/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +,258,Q_PROTO_MSNMOBILE,msnmobile,,MSN live for Mobile,MSNMobile is the MSN instant messenger for mobile.,Instant Messaging,tcp,20080118,4/4/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,919,Q_PROTO_MSRP,msrp,,Message Session Relay Protocol,"Message Session Relay Protocol (MSRP) is a protocol for transmitting instant messages, defined by RFC 4975.",Audio/Video,tcp,rfc 4975,3/23/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,742,Q_PROTO_MSRPC,msrpc,,Microsoft Remote Procedure Call,Microsoft Remote Procedure Call (MSRPC) is the Microsoft implementation of the DCE RPC mechanism.,Middleware,dcerpc,RPC v1.2,3/25/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1214,Q_PROTO_MT,mt,,mt,This protocol plug-in classifies the http traffic to the host mt.co.kr.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,656,Q_PROTO_MTP,mtp,,Multicast Transport Protocol,The mtp protocol (Multicast Transport Protocol) is found over the IP layer (IANA protocol number: 92).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1021,Q_PROTO_MTV,mtv,,MTV,This protocol plug-in classifies the http traffic to the host mtv.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1924,Q_PROTO_MUDAH,mudah,,Mudah.mi,Malaisian free classified ads.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,449,Q_PROTO_MULTIPLY,multiply,,Multiply.com,This protocol plug-in classifies the http traffic to the host multiply.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1022,Q_PROTO_MULTIUPLOAD,multiupload,,Multiupload.com,This protocol plug-in classifies the http traffic to the hosts multiupload.com and multiupload.nl.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1023,Q_PROTO_MUSICA,musica,,Musica.com,This protocol plug-in classifies the http traffic to the host musica.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,124,Q_PROTO_MUTE,mute,,Mute,Mute is a peer-to-peer protocol.,Peer to Peer,http;https;spdy;tcp,20111020,4/11/2012,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,657,Q_PROTO_MUX,mux,,Multiplexing,The mux protocol (Multiplexing) is found over the IP layer (IANA protocol number: 18).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,450,Q_PROTO_MUXLIM,muxlim,x,Muxlim,This protocol plug-in classifies the http traffic to the host muxlim.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,535,Q_PROTO_MXIT,mxit,,Mxit.com,"MXit (pronounced ""mix it"") is a free instant messaging software application developed by MXit Lifestyle in South Africa that runs on GPRS/3G mobile phones and on PCs.",Instant Messaging,http;https;spdy;tcp,20100803,10/1/2010,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,455,Q_PROTO_MY_OPERA,my_opera,,My Opera,This protocol plug-in classifies the http traffic to the host my.opera.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2177,Q_PROTO_MY_TALKING_TOM,my_talking_tom,,My Talking Tom,My Talking Tom is a mobile game.,Game,http;https;spdy,Mobile-Android-My Talking Tom 1.1;iPhone-iOS-My Talking Tom 1.1,Mobile-Android-My Talking Tom-1.1- (2014-03-13);iPhone-iOS-My Talking Tom-1.1- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,945,Q_PROTO_MY_YAHOO,my_yahoo,,My Yahoo,"A customizable web page with news, weather, etc., for Yahoo users.",Web,yahoo,20110926,10/12/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,451,Q_PROTO_MYANIMELIST,myanimelist,,MyAnimeList.net,This protocol plug-in classifies the http traffic to the host myanimelist.net.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,452,Q_PROTO_MYCHURCH,mychurch,,MyChurch.org,This protocol plug-in classifies the http traffic to the host mychurch.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1549,Q_PROTO_MYDOWNLOADER,mydownloader,,MyDownloader.net,Download files from multiple filesharing websites ( http://www.mydownloader.net/ ).,Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,453,Q_PROTO_MYHERITAGE,myheritage,,MyHeritage.com -MyHeritage.fr,This protocol plug-in classifies the http traffic to the hosts myheritage.fr and myheritage.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2204,Q_PROTO_MYJOYONLINE,myjoyonline,,Myjoyonline,Ghanaian news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,454,Q_PROTO_MYLIFE,mylife,,MyLife.com,This protocol plug-in classifies the http traffic to the host mylife.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1569,Q_PROTO_MYPEOPLE_MESSENGER,mypeople_messenger,,MyPeople Messenger,"MyPeople Messenger is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,daum;udp,iPhone-iOS 6.3-mypeople Messenger 4.2.3,Mac-Mac OS-10.9.4-Mypeople Messenger-3.10.7- (2014-07-09);Mobile-Android-4.4.2-mypeople Messenger-4.8.0- (2014-04-14);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-08);PC-Windows-7-Mypeople Messenger-3.10.7- (2014-04-14);PC-Windows-8-Mypeople Messenger-1.0.4.6- (2014-06-19);iPhone-iOS-7.1-mypeople Messenger-4.8.2- (2014-04-14),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,125,Q_PROTO_MYSPACE,myspace,,MySpace.com,MySpace is one of most popular social networking sites on the Web.,Web,http;https;spdy;ssl,20111114,5/27/2014,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,829,Q_PROTO_MYSPACE_VIDEO,myspace_video,,Myspace Video,This signature detects usage of the video-related features of Myspace.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, +,126,Q_PROTO_MYSQL,mysql,,MySQL Protocol,"MySQL is an open source relational database management system (RDBMS) that uses Structured Query Language (SQL), the most popular language for adding, accessing, and processing data in a database.",Database,tcp,MySQL 3.x;MySQL 4.1+,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,1024,Q_PROTO_MYVIDEO,myvideo,,Myvideo.de,This protocol plug-in classifies the http traffic to the host myvideo.de.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1025,Q_PROTO_MYWEBSEARCH,mywebsearch,,Mywebsearch.com,This protocol plug-in classifies the http traffic to the host mywebsearch.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,456,Q_PROTO_MYYEARBOOK,myyearbook,x,MyYearBook,This social networking service is closed.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2115,Q_PROTO_NACION,nacion,,Nacion.com,Costa Rican news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2048,Q_PROTO_NAGARIKNEWS,nagariknews,,NagarikNews.com,Nepali news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1925,Q_PROTO_NAIRALAND,nairaland,,Nairaland.com,Nigerian forum hosting site,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1926,Q_PROTO_NAMBA,namba,,Namba.kg,Kyrgyzstani forum and social networking site.,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,830,Q_PROTO_NAPSTER,napster,,Napster.com,"This protocol plug-in classifies the http traffic to the hosts napster.com, napsterinc.tt.omtrdc.net, a1082.b.akamai.net and a1702.b.akamai.net. It also classifies the ssl traffic to the Common Name sms.napster.com.",Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,127,Q_PROTO_NARP,narp,,NBMA Address Resolution Protocol,"NBMA Address Resolution Protocol (NARP) allows a source terminal (a host or router), wishing to communicate over a Non-Broadcast Multi-Access (NBMA) link layer network, to find out the NBMA addresses of a destination terminal if the destination terminal is connected to the same NBMA network as the source.",Network Service,ip,"RFC 1735,NARP v1",,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1026,Q_PROTO_NASA,nasa,,NASA.gov,This protocol plug-in classifies the http traffic to the host nasa.gov.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,457,Q_PROTO_NASZA_KLASA,nasza_klasa,,Nasza Klasa (nk.pl),This protocol plug-in classifies the http traffic to the hosts nasza-klasa.pl and nk.pl.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2318,Q_PROTO_NATE_MAIL,nate_mail,,Nate Mail,Nate Mail is a South Korea webmail.,Webmail,http;https;spdy,PC-Windows-Google Chrome-mail3.nate.com (2014-07-02),,,x,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,, +,1215,Q_PROTO_NATECYWORLD,natecyworld,,Nate.com,This protocol plug-in classifies the http traffic to the hosts nate.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,2049,Q_PROTO_NATION,nation,,Nation.co.ke,Kenyan news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1028,Q_PROTO_NATIONALGEOGRAPHIC,nationalgeographic,,NationalGeographic.com,This protocol plug-in classifies the http traffic to the host nationalgeographic.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1027,Q_PROTO_NATIONALLOTTERY,nationallottery,,National-lottery.co.uk,This protocol plug-in classifies the http traffic to the host national-lottery.co.uk.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2050,Q_PROTO_NATIONNEWS,nationnews,,NationNews.com,Barbadian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1029,Q_PROTO_NAVER,naver,,Naver Corporation (formerly NHN Corporation),"Naver is a popular Internet content service operator in South Korea. The group features a proprietary search portal, the Line messaging application, and gaming services.",Web,http;https;spdy;ssl,20140617,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,2312,Q_PROTO_NAVER_BLOG,naver_blog,,Naver Blog,Naver Blog is a South Korean blog hosting website.,Web,http;https;spdy,PC-Windows-Google Chrome-blog.naver.com (2014-06-30),,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2229,Q_PROTO_NAVER_MOBILE,naver_mobile,,Naver,Mobile application for Naver (Korean Search Engine).,Web,naver,Mobile-Android-네이버 - NAVER 5.2.0 (2014-04-09);iPhone-iOS-네이버 - NAVER 2.5.1 (2014-04-09),Mobile-Android-Naver-2.5.1- (2014-07-11);iPhone-iOS-Naver-5.2.0- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,1550,Q_PROTO_NAVERDRIVE,naverdrive,,Naver Drive,The file storage client of Naver ( http://ndrive.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1551,Q_PROTO_NAVERMAIL,navermail,,Naver Mail,The webmail client of naver.com ( http://mail.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1030,Q_PROTO_NBA,nba,,NBA.com,"This protocol is not supported with Basic DPI.,News website dedicated to the NBA, featuring video clips.",Web,akamai;apple_hls;http;https;rtmp;spdy;ssl,iPhone-iOS-NBA Game Time 4.4 (2014-03-13);Mobile-Android-NBA Game Time 4.1106;PC-Windows-Browser-www.nba.com (2014-01-17),Mobile-Android-NBA Game Time-5.0609- (2014-06-11);PC-Windows-8-NBA Fan-1.0.0.5- (2014-05-26);PC-Windows-Chrome-35.0.1916.153- (2014-06-23);Tablet-NBA Game Time-2.8.117- (2014-04-30);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-NBA Game Time-2.0.5.0- (2014-04-30);iPhone-5C-iOS-7.1.1-NBA Game Time-63(5.3.5)- (2014-06-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +,1399,Q_PROTO_NBA_CHINA,nba_china,,Nba China,Chinese NBA website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,128,Q_PROTO_NBNS,nbns,,Netbios Name Service,"NetBios Name Service (NBNS) is a protocol resulting from NetBios, and which makes it possible to manage the names in a Microsoft NetBios network. NetBios names are human readable and NBNS serves the same purpose as the DNS system in IP environments.",Network Service,8021q;gre;ipx;llc;tcp;udp,RFC 1002,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,933,Q_PROTO_NCP,ncp,,Netware Core Protocol,"The NetWare Core Protocol (NCP) is a network protocol used to access file, print, directory, clock synchronization, messaging, remote command execution and other network service functions.",Network Service,ipx;tcp,20110919,10/21/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1917,Q_PROTO_NDMP,ndmp,,Network Data Management Protocol,NDMP (Network Data Management Protocol) is an open protocol for enterprise-wide network based backup over TCP.,Network Service,tcp,4,NDMP v3-- (2013-12-03);NDMP v4-- (2013-12-03),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,,, +,1400,Q_PROTO_NDUOA,nduoa,,Nduoa.com,Chinese Android forum and applications sharing.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1552,Q_PROTO_NEFSYS,nefsys,,Nefsys.com,Video conference website ( http://www.nefsis.com/ ),Web,http;https;spdy,20130715,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1459,Q_PROTO_NEND,nend,,Nend.net,Mobile in-apps ads integration service.,Web,http;https;spdy;ssl,20130304,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1767,Q_PROTO_NEOBUX,neobux,,NeoBux.com,NeoBux excels in providing new business solutions as a Paid-to-Click service,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2051,Q_PROTO_NET,net,,Net.hr,Croatian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,129,Q_PROTO_NETBIOS,netbios,,Netbios,"NetBIOS defines a software interface and standard methods providing a communication interface between the application program and the attached medium. NetBIOS is used in various LAN (Ethernet, Token Ring etc) as well as WAN environments such TCP/IP, PPP and X.25 networks.",File Server,8021q;gre;ipx;llc;tcp;udp,RFC 1002,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,658,Q_PROTO_NETBLT,netblt,,Bulk Data Transfer Protocol,The netblt protocol (Bulk Data Transfer Protocol) is found over the IP layer (IANA protocol number: 30).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,569,Q_PROTO_NETBSD_UPDATE,netbsd_update,,NetBSD Updates,NetBSD update manages the updates for NetBSD. NetBSD is a Unix-like Open Source operating system.,Web,http;https;spdy,NetBSD-4.0,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,734,Q_PROTO_NETFLIX,netflix,,Netflix.com,NetFlix is a site using Silverlight protocol to stream videos.,Audio/Video,akamai;http;https;ip;spdy;ssl,20120930,Mobile-Android-NetFlix-2.4.0- (2013-08-28);iPhone-iOS-NetFlix-4.2- (2013-08-28),,x,,x,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,130,Q_PROTO_NETFLOW,netflow,,Cisco Netflow,"NetFlow is a Cisco protocol that provides nearly real-time traffic monitoring, aggregation and statistic evaluation, multicriteria data flow selection, using source/destination IP addresses, protocols, etc.",Network Management,udp,Netflow v1;Netflow v5;Netflow v7;Netflow v8;Netflow v9,7/22/2013,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,831,Q_PROTO_NETLOAD,netload,,Netload.in,This protocol plug-in classifies the http traffic to the host netload.in.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,322,Q_PROTO_NETLOG,netlog,,Netlog.com,"Netlog is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;spdy,20080118,11/3/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1216,Q_PROTO_NETMARBLE,netmarble,,NetMarble.com,This protocol plug-in classifies the http traffic to the host netmarble.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,931,Q_PROTO_NETMEETING_ILS,netmeeting_ils,,NetMeeting ILS,Netmeeting ILS is the protocol used between Netmeeting and Internet Locator Servers (ILS). Netmeeting is a VoIP and multi-point videoconferencing client included in many versions of Microsoft Window. A Internet Locator Server (ILS) is a directory used to find other users and facilitate rendezvous.,Instant Messaging,ldap,11.70,10/5/2011,x,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +,458,Q_PROTO_NETTBY,nettby,,Nettby.no,This protocol plug-in classifies the http traffic to the host nettby.no.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2117,Q_PROTO_NEWS24,news24,,News24.com,South African news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1778,Q_PROTO_NEWS_AM,news_am,,News.am,Armenian news portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2199,Q_PROTO_NEWS_AU,news_au,,News,Australian news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2116,Q_PROTO_NEWS_MN,news_mn,,News.mn,Mongolian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2052,Q_PROTO_NEWSIT,newsit,,Newsit.gr,Greek news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2171,Q_PROTO_NEWVISION,newvision,,Newvision,Ugandan news portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1151,Q_PROTO_NEXIAN,nexian,,Nexian.co.id - Nexian.us.to,This protocol plug-in classifies the http traffic to the hosts nexian.co.id and nexian.us.to.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1236,Q_PROTO_NEXON,nexon,,Nexon.com,This protocol plug-in classifies the http traffic to the host www.nexon.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,459,Q_PROTO_NEXOPIA,nexopia,,Nexopia.com,This protocol plug-in classifies the http traffic to the host nexopia.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1031,Q_PROTO_NFL,nfl,,National Football League (NFL.com),This protocol plug-in classifies the http traffic to the host nfl.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,131,Q_PROTO_NFS,nfs,,Network File System,The NFS protocol provides transparent remote access to shared file systems across networks as described in RFC 1813.,File Server,rpc,NFS V3.0 (RFC 1813);RPC V2 (RFC 5531),7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,460,Q_PROTO_NGO_POST,ngo_post,,NGOPost.org,This protocol plug-in classifies the http traffic to the host ngopost.org.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,832,Q_PROTO_NICONICO_DOUGA,niconico_douga,,Nicovideo.jp (aka Nico Nico Douga),Nico Nico Douga is a Japanese video streaming platform for mobile devices and PC.,Audio/Video,http;https;rtmp;spdy;ssl;tcp,2019091;0.1.18_p1,Mobile-Android-Niconico Douga-0.1.18_p1.KARI- (2013-01-24);PC-Linux-Browser- (2013-01-24),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +,1318,Q_PROTO_NIFTY,nifty,,Nifty.com,Japanese web portal and search site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1033,Q_PROTO_NIKE,nike,,Nike.com,This protocol plug-in classifies the http traffic to the host nike.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1329,Q_PROTO_NIKKEI,nikkei,,Nikkei.com,Online version of a Japanese newspaper for economists,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1488,Q_PROTO_NIMBUZZ_WEB,nimbuzz_web,,Nimbuzz,Instant Messaging client for mobile devices.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, +,461,Q_PROTO_NING,ning,,Ning.com,This protocol plug-in classifies the http traffic to the host ning.com.,Web,http;https;spdy,PC-Windows-Browser-www.ning.com (2013-07-13),PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1927,Q_PROTO_NJUSKALO,njuskalo,,Njuskalo.hr,Croatian online classified ads,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,132,Q_PROTO_NLOCKMGR,nlockmgr,,Network Lock Manager,The network lock manager is a facility that works in cooperation with the Network File System (NFS) to provide a System V style of advisory file and record locking over the network.,File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,133,Q_PROTO_NLSP,nlsp,,Netware Link Services Protocol,NetWare Link Services Protocol (NLSP) provides link state routing for Internetwork Packet Exchange networks.,Routing,ipx,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,134,Q_PROTO_NNTP,nntp,,Network News Transport Protocol,"The Network News Transport Protocol (NNTP) is used for the distribution, inquiry, retrieval and posting of net news articles using a reliable stream-based mechanism.",Forum,socks4;socks5;tcp,RFC 977;RFC 3977,3/21/2014,,,,x,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, +,135,Q_PROTO_NNTPS,nntps,,Network News Transport Protocol Secure,Secure version of the NNTP protocol.,Forum,ssl,RFC 977;RFC 3977,7/4/2008,,,,,,563,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, +,595,Q_PROTO_NOD32_UPDATE,nod32_update,,ESET NOD32 Antivirus Updates,Virus definitions and engine updates for the ESET NOD32 anti-virus.,Web,http;https;spdy,20110214,2/9/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,2235,Q_PROTO_NOKIA,nokia,,Nokia,"Nokia is a leader in the fields of network infrastructure, location-based technologies and advanced technologies.",Web,http;https;spdy;ssl,20140411,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,576,Q_PROTO_NOKIA_OVI,nokia_ovi,,Nokia Ovi,"Nokia Ovi is a protocol used by customers to synchronize their personal data with their Nokia mobile phone (contacts, mail, calendar, music).",Web,http;https;spdy;ssl,PC-Windows 7-Browser-ovi.nokia.com (2013-10-25);Nokia Mobile N95-Symbian-Nokia Ovi Store 1.09,Nokia Mobile-Nokia Asha 311-Symbian-Nokia Ovi Store-3.34.1.18- (2014-09-05);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-23);PC-Windows-7-Nokia Suite-3.8.48- (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1217,Q_PROTO_NONGHYUP_BANK,nonghyup_bank,,Nonghyup Bank (Nohyup.com),This protocol plug-in classifies the http traffic to the host nohyup.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1779,Q_PROTO_NORDEA,nordea,,Nordea.dk,Danish online banking and investment web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,596,Q_PROTO_NORTON_UPDATE,norton_update,,Symantec Norton AntiVirus Updates,Virus definitions and engine updates for the Symantec Norton anti-virus.,Web,http;https;spdy;ssl,PC-Windows 7-Norton AntiVirus 21.1.0.18 (2013-11-25),Mac-Mac OS-10.9.3-Norton Antivirus-12.6(26)- (2014-06-30);PC-Windows-7-Norton Antivirus-21.2.0.38- (2014-04-24);PC-Windows-8-Norton Antivirus-21.3.0.12- (2014-06-20),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,2194,Q_PROTO_NOTICIAS24,noticias24,,Noticias24,Venezuelian news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2118,Q_PROTO_NOVINKY,novinky,,Novinky.cz,Czech news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1401,Q_PROTO_NOWNEWS,nownews,,NOWnews.com,Taiwanese news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2053,Q_PROTO_NRK,nrk,,NRK.no,Norwegian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,659,Q_PROTO_NSFNET_IGP,nsfnet_igp,,NSFNET-IGP,The nsfnet_igp protocol (NSFNET_IGP) is found over the IP layer (IANA protocol number: 85).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,136,Q_PROTO_NSPI,nspi,,Name Service Provider Interface,Name Service Provider Interface is a protocol used by Exchange.,Application Service,dcerpc;msrpc,NSPI-V5.5,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,137,Q_PROTO_NTP,ntp,,Network Time Protocol,Network Time Protocol (NTP) is a time synchronization system for computer clocks through the Internet network. It provides mechanisms to synchronize time and coordinate time distribution in a large network.,Network Service,udp,NTP-4.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1034,Q_PROTO_NTV,ntv,,Ntv.co.jp,This protocol plug-in classifies the http traffic to the host ntv.co.jp.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2119,Q_PROTO_NU,nu,,Nu.nl,Dutch news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,660,Q_PROTO_NVP_II,nvp_ii,,Network Voice Protocol II,The nvp_ii protocol (Network Voice Protocol) is found over the IP layer (IANA protocol number: 11).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1035,Q_PROTO_NYDAILYNEWS,nydailynews,,NYDailyNews.com,This protocol plug-in classifies the http traffic to the host nydailynews.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1036,Q_PROTO_NYTIMES,nytimes,,NYTimes.com,This protocol plug-in classifies the http traffic to the host nytimes.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2054,Q_PROTO_NZHERALD,nzherald,,NZHerald.co.nz,New zealander news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,330,Q_PROTO_OCSP,ocsp,,Online Certificate Status Protocol,This network protocol is used for validating certificates.,Encrypted,http;https;spdy,RFC 2560;RFC 4806,10/13/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,x,,, +,833,Q_PROTO_OCTOPZ,octopz,,Octopz.com,This protocol plug-in classifies the http traffic to the host octopz.net. It also classifies the ssl traffic to the Common Name cfs1.octopz.net.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2154,Q_PROTO_OCTOSHAPE,octoshape,,OctoShape,Octoshape is a video streaming solution provider for web streaming platforms which uses P2P technology.,Audio/Video,http;https;spdy;tcp;udp,PC-Windows-Octoshape Chrome Plug-in 1103234 (2014-01-24),PC-Windows-7-Chrome-Octoshape-1103234- (2014-02-21),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,462,Q_PROTO_ODNOKLASSNIKI,odnoklassniki,,Odnoklassniki.ru,Odnoklassniki is a Russian social network.,Forum,http;https;ip;spdy;ssl,PC-Windows-Browser-www.odnoklassniki.ru (2011-12-14),Mobile-Android-4.4.2-Odnoklassniki-3.8.1- (2014-07-09);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);PC-Windows-8-Odnoklassniki-1.1.0.0- (2014-05-27);iPhone-iOS-7.1.1-Odnoklassniki-4.2- (2014-06-02),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2000,Q_PROTO_ODSIEBIE_NAJLEPSZE_NET,odsiebie_najlepsze_net,,odsiebie.najlepsze.net,Classifies web browsing on the odsiebie.najlepsze.net Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1448,Q_PROTO_OFFICE365,office365,,Microsoft Office 365,Office 365 is a Microsoft on-line service which gives access to Office applications from the internet.,Web,http;https;spdy;ssl,20130415,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,296,Q_PROTO_OFFICEDEPOT,officedepot,,OfficeDepot.fr,This protocol plug-in classifies the http traffic to the hosts officedepot.com and officedepot.fr.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1095,Q_PROTO_OICQ,oicq,,OICQ,"Oicq is a proprietary messaging protocol developed by Tencent, at the origin of the qq protocol.",Instant Messaging,tcp;udp,20111108,7/4/2008,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1135,Q_PROTO_OKEZONE,okezone,,Okezone.com,This protocol plug-in classifies the http traffic to the host okezone.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1325,Q_PROTO_OKWAVE,okwave,,OKWave.jp,Decision support for professionals,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1772,Q_PROTO_OLX,olx,,Olx.com,Free international classified ads website.,Web,http;https;spdy,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,463,Q_PROTO_ONECLIMATE,oneclimate,x,OneWorld.net,This protocol plug-in is deprecated.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1553,Q_PROTO_ONEHUB,onehub,,OneHub.com,File sharing website ( https://onehub.com/ ).,Web,http;https;spdy;ssl,20130715,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2248,Q_PROTO_ONELIFE,onelife,,OneLife.fm,OneLife is a service of travelling photo sharing. Users can sort their Instagram photos by countries and follow other travelers.,Web,http;https;spdy,20140416,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2120,Q_PROTO_ONET,onet,,Onet.pl,Polish news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2175,Q_PROTO_ONEWORLD_ORG,oneworld_org,,OneWorld.org,OneWorld is a NGO with a mission to provide internet and mobile phone applications to third-world countries inhabitants,Web,http;https;spdy,20140218,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,464,Q_PROTO_ONEWORLDTV,oneworldtv,x,OneWorld TV,This protocol plug-in is deprecated.,Web,,20140220,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1037,Q_PROTO_ONLINEDOWN,onlinedown,,Onlinedown.net,This protocol plug-in classifies the http traffic to the host onlinedown.net.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2055,Q_PROTO_ONLINEKHABAR,onlinekhabar,,Onlinekhabar.com,Nepali news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2121,Q_PROTO_ONLINER,onliner,,Onliner.by,Belarussian ecommerce website,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,553,Q_PROTO_OOVOO,oovoo,,Oovoo,"oovoo is an instant messenger application, with audio/video support.",Instant Messaging,http;https;jabber;spdy;ssl;udp,Oovoo v2.8.0.39,10/15/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,834,Q_PROTO_OOYALA,ooyala,,Ooyala.jp,This protocol plug-in classifies the http traffic to the hosts l.player.ooyala.com and ooyala.jp. It also classifies the ssl traffic to the Common Name ooyala.jp.,Web,http;https;spdy;ssl,20140617,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,465,Q_PROTO_OPEN_DIARY,open_diary,,OpenDiary.com,This protocol plug-in classifies the http traffic to the host opendiary.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,570,Q_PROTO_OPENBSD_UPDATE,openbsd_update,,OpenBSD Updates,This protocol manages OpenBSD updates.,Web,http;https;spdy,OpenBSD4.8,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,138,Q_PROTO_OPENFT,openft,,OpenFT,OpenFT is a peer-to-peer protocol.,Peer to Peer,http,Apollon,4/20/2012,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,2008,Q_PROTO_OPENGW,opengw,,OpenGW (VPN Gate),"OpenGW (aka VPN Gate) is a Public VPN Relay Servers service, used in several VPN solutions (example: PacketiX. This service uses the SoftEther VPN technology.",Web,http;https;spdy;ssl,"SoftEther PacketiX v4.02,20131227",,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,1789,Q_PROTO_OPENSOOQ,opensooq,,Opensooq.com,Market place framework aimed to Arab countries,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,2278,Q_PROTO_OPENSTREETMAP,openstreetmap,,OpenStreetMap,OpenStreetMap is an open geographical database.,Web,http;https;spdy;ssl,20140423,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,336,Q_PROTO_OPENVPN,openvpn,,openvpn,OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities.,Tunneling,https;spdy;ssl;tcp;udp,OpenVPN 1.8.3,1/11/2010,,x,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,578,Q_PROTO_OPERA_UPDATE,opera_update,,Opera Update,Opera Update is the protocol used for the update of the Opera browser.,Web,http;https;spdy;ssl,Opera11.00,10/26/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,2251,Q_PROTO_ORACLE,oracle,,Oracle,"Oracle Corporation is multinational computer technology corporation. The company specializes in developing and marketing computer hardware systems and enterprise software products, particularly its own brands of database management systems.",Web,http;https;spdy;ssl,2294,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1753,Q_PROTO_ORANGE,orange,,Orange.com,"French telecom operator website providing internet and telephone services as well as web and media portal services. This portal provides services to countries like Mauritius, Madagascar, Uganda, Jordan, Kenya, Poland, Ivory Coast, Tunisia, or Moldova.",Web,http;https;spdy;ssl,20140130,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,265,Q_PROTO_ORANGEMAIL,orangemail,,Orange webmail,Orangemail is the webmail of webmail.orange.fr.,Webmail,http;https;spdy;ssl,PC-Windows-Browser-www.orangemail.com (2013-08-28),Mobile-Android-4.4.2-Mail Orange-1.4.2.1- (2014-06-04);Mobile-Android-4.4.2-Mail Orange-1.5.1.1- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-26);iPhone-iOS-7.1.1-Mail Orange-1.3.0- (2014-05-30);iPhone-iOS-7.1.1-Mail Orange-1.3.0- (2014-06-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,544,Q_PROTO_ORB,orb,,Orb (acquired by Qualcomm Connected Experiences),ORB is a streaming software that enables users to remotely access all their personal digital media files.,Web,tcp;udp,20101214,12/21/2010,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,2056,Q_PROTO_ORF,orf,,Orf.at,Austrian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2122,Q_PROTO_ORIGO,origo,,Origo.hu,Hungarian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,466,Q_PROTO_ORKUT,orkut,,Orkut.com,"Orkut is a social networking website competing with Facebook or Twitter, popular in Brazil and now owned and operated by Google Inc.",Web,google_desktop;http;https;spdy;ssl,20110331,7/2/2010,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,139,Q_PROTO_OSINL,osinl,,OSI Network Layer,"ISO Network Layer Protocol is used by Cisco Equipment to transmit OSI protocols (IS-IS, ...) over Ethernet.",Network Service,eth;gre;llc;osinl,RFC 1377,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,140,Q_PROTO_OSPF,ospf,,Open Shortest Path First,OSPF (Open Short Path First) is a link state routing protocol used within large autonomous system networks. It is is considered to be the best Inter Routing protocol today and it is use it strongly encouraged.,Routing,ip;ip6,OSPF v2;OSPF v3,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1928,Q_PROTO_OUEDKNISS,ouedkniss,,Ouedkniss.com,Algerian internet portal,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,467,Q_PROTO_OUTEVERYWHERE,outeverywhere,,OUTeverywhere.com,This protocol plug-in classifies the http traffic to the host outeverywhere.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1478,Q_PROTO_OUTLOOK,outlook,,Outlook Web Access (Office 365),"On-line Microsoft Outlook encrypted service, from the Office 365 productivity suite.",Web,office365,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,2164,Q_PROTO_OVER_BLOG,over_blog,,Over-blog,French and American blog administration website,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,141,Q_PROTO_OWA,owa,,Outlook Web App,"Outlook Web App is used to access e-mail (including support for S/MIME), calendars, contacts, tasks, documents (used with SharePoint or in 2010 Office Web Apps), and other mailbox content when access to the Microsoft Outlook desktop application is unavailable.",Webmail,http;https;spdy,20100129,7/4/2008,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,x,,,,,,, +,1274,Q_PROTO_PAIPAI,paipai,,Paipai.com,This protocol plug-in classifies the http traffic to the host paipai.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,142,Q_PROTO_PALTALK,paltalk,,PalTalk,Paltalk is an instant messaging protocol.,Instant Messaging,http;https;spdy;ssl;tcp,8.1;8.5;9.0;9.1;9.4;10.0,5/27/2014,,x,,x,,,,,x,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, +,143,Q_PROTO_PALTALK_AUDIO,paltalk_audio,,Paltalk audio chat,Proprietary protocol used by Paltalk in audio chats.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,5/27/2014,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, +,252,Q_PROTO_PALTALK_TRANSFER,paltalk_transfer,,PalTalk Transfer Protocol,Paltalk is an instant messaging protocol,File Transfer,tcp,9.4,5/27/2014,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,599,Q_PROTO_PALTALK_VIDEO,paltalk_video,,Paltalk video,Proprietary protocol used by Paltalk in video.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,PC-Windows-Paltalk Messenger-10.0- (2011-09-03),,,,,paltalk,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +,2188,Q_PROTO_PALWEATHER,palweather,,Palweather,Palestinian meteorological portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,711,Q_PROTO_PANDA_UPDATE,panda_update,,Panda Update,Panda_update is the protocol used for panda softwares updates.,Web,http;https;spdy;ssl,20110216,2/16/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,278,Q_PROTO_PANDO,pando,x,Pando,pando is a peer-to-peer protocol. Pando servers have been definitely shutted down in August 2013.,Peer to Peer,,PC-Windows-Pando 2.3.0.9 (2009-05-01),4/10/2012,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,835,Q_PROTO_PANDORA,pandora,,Pandora Radio,This protocol plug-in classifies the http traffic to the host pandora.com.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.pandora.com (2014-01-15),Blackberry-Blackberry OS-Pandora-1.1.12-USA (2014-04-11);Mobile-Android-Pandora internet radio-5.3-USA (2014-05-12);PC-Windows-7-Chrome-35.0.1916.114-USA (2014-05-29);Windows Phone-Windows Phone OS-Pandora-1.1.0.0-USA (2014-04-07);iPhone-iOS-7.1.2-Pandora Radio-5.4-USA (2014-07-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,836,Q_PROTO_PANDORA_TV,pandora_tv,,Pandora.tv,This protocol plug-in classifies the http traffic to the host pandora.tv.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1775,Q_PROTO_PANET,panet,,Panet.co.il,News and entertainment web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2057,Q_PROTO_PANTIP,pantip,,Pantip.com,Thai information and entertainment portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,144,Q_PROTO_PAP,pap,,Password Authentication Protocol,The Password Authentication Protocol (PAP) provides a simple authentication method over a PPP link.,Authentication,ppp,RFC 1334,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x +,2123,Q_PROTO_PARAGUAY,paraguay,,Paraguay.com,Paraguayan news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1219,Q_PROTO_PARAN,paran,x,Paran,This protocol plug-in classifies the http traffic to the host praran.com.,Web,,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,2058,Q_PROTO_PARTIS,partis,,Partis.si,Slovenian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,468,Q_PROTO_PARTNERUP,partnerup,,PartnerUp.com,This protocol plug-in classifies the http traffic to the host partnerup.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,837,Q_PROTO_PARTY_POKER,party_poker,,PartyPoker.com - PartyAccount.com,This protocol plug-in classifies the ssl traffic to the Common Names partyaccount.com and partypoker.com.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,469,Q_PROTO_PASSPORTSTAMP,passportstamp,,PassportStamp.com,This protocol plug-in classifies the http traffic to the host passportstamp.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2011,Q_PROTO_PATH,path,,Path,"It is a free social instant messenger for private messaging and sharing photos, videos, music, etc.",Instant Messaging,amazon_aws;http;https;jabber;spdy;ssl,3.2.2 (iOS);3.2.4 (Android),Mobile-Android-Path-3.2.4- (2013-12-18);iPhone-iOS-Path-3.2.2- (2013-12-18),,x,,x,,,,,,,,,,,,x,x,,,x,x,,,,,,x,,,,,,,,,, +,1402,Q_PROTO_PAYEASY,payeasy,,Payeasy.com.tw,Taiwanese online beauty store.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1747,Q_PROTO_PAYPAL,paypal,,Paypal.com,Online payment services,Web,http;https;spdy;ssl,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,2124,Q_PROTO_PAZAR3,pazar3,,Pazar3.mk,Macedonian classifed ads,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,324,Q_PROTO_PCANYWHERE,pcanywhere,,PCAnywhere,PCAnywhere is a remote control solution. It can manage both Windows and Linux systems. Enhanced video performance and built-in AES 256-bit encryption help make communications fast and secure. PCAnywhere also features powerful file-transfer capabilities.,Thin Client,tcp;udp,20070321,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,1403,Q_PROTO_PCGAMES,pcgames,,PCgames.com.cn,Chinese Games portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1404,Q_PROTO_PCHOME,pchome,,PChome.com.tw,"Taiwanese Web portal (news, webmail, shopping....",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1405,Q_PROTO_PCLADY,pclady,,PClady.com.cn,Chinese beauty and fashion portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1260,Q_PROTO_PCONLINE,pconline,,PConline.com.cn,This protocol plug-in classifies the http traffic to the host pconline.com.cn.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1475,Q_PROTO_PEERCAST,peercast,,PeerCast,PeerCast is an open-source multimedia streaming protocol.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2006,Q_PROTO_PEERGUARDIAN,peerguardian,,PeerGuardian,PeerGuardian is capable of blocking incoming and outgoing connections based on IP blacklists. This plug-in classifies the firewall attempts to update its blacklist from PeerGuardian servers.,Security Service,http;https;spdy,2.2.3 (Linux),PC-Linux-PeerGuardian-2.2.3- (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1256,Q_PROTO_PENGYOU,pengyou,,Pengyou.com,This protocol plug-in classifies the http traffic to the host pengyou.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1267,Q_PROTO_PEOPLE,people,,People.com.cn,This protocol plug-in classifies the http traffic to the host people.com.cn.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2148,Q_PROTO_PERFECT_DARK,perfect_dark,,Perfect Dark,Perfect Dark is a peer-to-peer file-sharing (P2P) protocol from Japan.,Peer to Peer,,PC-Windows-Perfect Dark 1.10 (2014-02-04),PC-Windows-7-Perfect Dark-1.10- (2014-01-23),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1091,Q_PROTO_PERFORCE,perforce,,Perforce Protocol,"Perforce is a commercial, proprietary, centralized revision control system developed by Perforce Software, Inc.",Application Service,tcp,2010.2,11/29/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,319,Q_PROTO_PERFSPOT,perfspot,,Perfspot.com,"Perfspot is a social networking website, enabling users to connect to relatives, friends, or unknown people and to share files.",Web,http;https;spdy,20080118,9/26/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1929,Q_PROTO_PERSIANBLOG,persianblog,,Persianblog.ir,Persian blogging platform,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1930,Q_PROTO_PETITESANNONCES,petitesannonces,,PetitesAnnonces.pf,French Polinesian online classified ads,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1931,Q_PROTO_PEYVANDHA,peyvandha,,Peyvandha.ir,Persian internet portal.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,661,Q_PROTO_PGM,pgm,,PGM Reliable Transport Protocol,The pgm protocol (PGM Reliable Transport Protocol) is found over the IP layer (IANA protocol number: 113).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2059,Q_PROTO_PHILENEWS,philenews,,Philenews.com,Cypriot news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,838,Q_PROTO_PHOTOBUCKET,photobucket,,Photobucket.com,"Photo sharing web-service, with advanced editing features, available for desktop and mobile devices.",Web,http;https;spdy;ssl,PC-Windows-Browser-www.photobucket.com (2014-02-20);Mobile-Android-Photobucket Mobile 3.0.11 (2014-02-21);Windows Phone-Windows Phone OS-Photobucket 2.0.0.0 (2014-02-21);iPhone-iOS-Photobucket 3.0.4 (2014-02-21),Mobile-Android-4.2.1-Photobucket Mobile-3.2.1- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);PC-Windows-8-Photobucket-1.0.1.1833- (2014-05-28);Windows Phone-Windows Phone OS-8-photobucket-2.0.0.0- (2014-02-21);iPhone-iOS-7.1.1-photobucket-3.2.1- (2014-07-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1092,Q_PROTO_PHPROXY,phproxy,,PHProxy,PHProxy is a web HTTP proxy programmed in PHP meant to bypass firewalls and access otherwise inaccessible resources.,Network Service,http,0.5 beta 2,PC-Linux-PHProxy-0.5b2- (2011-12-06),,,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, +,839,Q_PROTO_PHWEET,phweet,,Phweet.com,This protocol plug-in classifies the http traffic to the host phweet.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, +,1554,Q_PROTO_PICHAT,pichat,,Pichat.net,Online Chat Application ( pichat.net ).,Peer to Peer,http;https;spdy,v0.4.2,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,1932,Q_PROTO_PIK,pik,,Pik.ba,Bosnian online trading website.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,145,Q_PROTO_PIM,pim,,Protocol Independent Multicast,The PIM Protocol provides an efficient routing of multicast groups that may span wide-area Internet zones.,Network Service,ip;ip6,IPv4;IPv6,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1218,Q_PROTO_PIMANG,pimang,,Pmang.com,This protocol plug-in classifies the http traffic to the hosts pimang.com and www.pmang.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,470,Q_PROTO_PINGSTA,pingsta,,Pingsta.com,This protocol plug-in classifies the http traffic to the host pingsta.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1470,Q_PROTO_PINTEREST,pinterest,,Pinterest.com,On-line service that allows users to attach personal elements on some kind of pinboard.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.pinterest.com (2014-02-28);Mobile-Android-Pinterest 2.4.4 (2014-02-28);iPhone-iOS-Pinterest 3.4.1 (2014-02-28);Windows Phone-Windows Phone OS-Pinterest 1.0.0.0 (2014-02-28),BlackBerry-BlackBerry OS-10.2.1.537-Pinterest-1.1.0- (2014-03-26);Mobile-Android-4.4.2-Pinterest-2.9.1- (2014-06-10);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-24);Windows Phone-Windows Phone OS-8-Pinterest-1.0.0.0- (2014-02-28);iPhone-iOS-7.1.2-Pinterest-3.6.5- (2014-07-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1555,Q_PROTO_PIOLET,piolet,,Piolet.net,P2P for music files.,Peer to Peer,http;https;spdy,3.1.0,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,662,Q_PROTO_PIPE,pipe,,Private IP Encapsulation within IP,The pipe protocol (Private IP Encapsulation within IP) is found over the IP layer (IANA protocol number: 131).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1319,Q_PROTO_PIXIV,pixiv,,Pixiv.net,Web site dedicated to Japanese fanarts and drawings,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1406,Q_PROTO_PIXNET,pixnet,,Pixnet.net,Taiwanese web albums and blog service.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2256,Q_PROTO_PLANTS_VS_ZOMBIES,plants_vs_zombies,,Plants vs Zombies,Plants vs Zombie is a mobile game.,Game,http;https;spdy;ssl,Mobile-Android-Plants vs. Zombies 2 1.6.257161;iPhone-iOS-Plants vs. Zombies 2 1.6.257161,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,471,Q_PROTO_PLAXO,plaxo,,Plaxo.com,This protocol plug-in classifies the http traffic to the host plaxo.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,472,Q_PROTO_PLAYAHEAD,playahead,x,Playahead,This protocol plug-in classifies the http traffic to the host playahead.se.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1039,Q_PROTO_PLAYSTATION,playstation,,PlayStation.com,This protocol plug-in classifies the http traffic to the host playstation.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1933,Q_PROTO_PLIUS,plius,,Plius.lt,Lithuanian online classified ads.,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,474,Q_PROTO_PLURK,plurk,,Plurk.com,This protocol plug-in classifies the http traffic to the host plurk.com.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.plurk.com (2014-02-27);Mobile-Android-0.8.13 (2014-02-27),BlackBerry-BlackBerry OS-10.0.10.648-Browser- (2014-07-11);Mobile-Android-4.2.1-Plurk-0.8.21- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);Windows Phone-Windows Phone OS-8-PlurkPoster-1.3.0.0- (2014-07-11);iPhone-iOS-7.1.2-Mr. Plurk-3.3.0- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,663,Q_PROTO_PNNI,pnni,,PNNI over IP,The pnni protocol (PNNI over IP) is found over the IP layer (IANA protocol number: 102).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1300,Q_PROTO_POCO,poco,,POCO.cn,"Poco is a Chinese webportal, which allow users to share pictures, chat, exchange files, etc.",Web,http;https;spdy;ssl;udp,20130121,PC-Windows-InternetExplorer- (2013-01-23),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +,307,Q_PROTO_POGO,pogo,,Pogo.com,This protocol plug-in classifies the http traffic to the host pogo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,899,Q_PROTO_POKER_STARS,poker_stars,,Poker Stars,Poker Stars is an online poker cardroom.,Game,http;https;spdy;ssl,4.6.9.6_en;4.7.0.1_fr;4.6.9.8_es,7/29/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,1745,Q_PROTO_POLE_EMPLOI,pole_emploi,,Pole-emploi.fr,French website for job seekers.,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,147,Q_PROTO_POP3,pop3,,Post Office Protocol (Version 3),Post Office Protocol - Version 3 (POP3) allows a workstation to simply and dynamically access a mail stored on a mail server.,Mail,socks4;socks5;tcp,Post Office Protocol v3,3/21/2014,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +,148,Q_PROTO_POP3S,pop3s,,Secure POP3,Secure version of the POP3 protocol.,Mail,ssl,Secure Post Office Protocol v3,7/4/2008,,,,,,995,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +,1440,Q_PROTO_PORNHUB,pornhub,,Pornhub.com,This protocol plug-in classifies the http traffic to the hosts pornhub.com and pornhub.phncdn.com.,Web,http;https;spdy,20121023,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,149,Q_PROTO_PORTMAP,portmap,,Port Mapper,Port Mapper protocol maps RPC program and version numbers to port numbers. This program makes dynamic binding of remote programs possible.,Application Service,rpc,Port Mapping v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,150,Q_PROTO_POSTGRES,postgres,,PostgreSQL,"PostgreSQL is a sophisticated Object-Relational DBMS, supporting almost all SQL constructs, including subselects, transactions, and user-defined types and functions.",Database,tcp,7.3;7.4;8.0;8.1;8.2,7/4/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,2125,Q_PROTO_POSTIMEES,postimees,,Postimees.ee,Estonian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2254,Q_PROTO_POU,pou,,Pou,Mobile game,Game,amazon_aws;http;https;spdy,Mobile-Android-Pou 1.4.20;iPhone-iOS-Pou 1.4.19,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,938,Q_PROTO_PP,pp,,ISO 8823 Presentation Protocol,ISO 8823/X.226 OSI PRESENTATION PROTOCOL (PP).,Network Service,sp,ISO 8823/X.226,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1090,Q_PROTO_PPFILM,ppfilm,,PIPI Film,PP Film (aka PIPI.cn or PIPI Player) is a Chinese peer-to-peer and VOD service.,Web,http;https;spdy;udp,2.8.0.0,11/10/2011,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,331,Q_PROTO_PPLIVE,pplive,,pplive,PPLIVE is an application intended to watch TV in peer-to-peer. The PPLIVE application has two main functions : live TV(streaming) and on-demand TV (VOD). These are two different protocols. This protocol plug-in handles both.,Audio/Video,http;https;spdy;tcp;udp,1.9.35;2.6,10/22/2012,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,x, +,151,Q_PROTO_PPP,ppp,,Point-to-Point Protocol,"PPP (Point-to-Point Protocol) is a link layer protocol used for transferring data along a Point to Point link. It provides dynamic IP addressing, password support, error checking, and multiple protocols transmission on the same link.",Tunneling,eth;gre;l2tp;pppoe,RFC 1661,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,152,Q_PROTO_PPPOE,pppoe,,Point-to-Point Protocol Over Ethernet,PPP over Ethernet (PPPoE) provides the ability to connect a network of hosts over a simple bridging access device to a remote Access Concentrator.,Tunneling,8021q;eth;gre,RFC 2516,7/4/2008,x,,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1040,Q_PROTO_PPS,pps,x,Pps.tv,This protocol plug-in classifies the http traffic to the host pps.tv. This traffic is now classified as PPstream.,Web,,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,533,Q_PROTO_PPSTREAM,ppstream,,PPStream - P2P based Streamed Media,The ppstream protocol provides audio and video streaming. It is based on bittorent (peer-to-peer) technology. It is mainly used in China.,Audio/Video,http;https;iqiyi;spdy;tcp;udp,PC-Windows-PPstream 3.2.0.1003,Mobile-Android-4.4.2-PPS-2.6.4- (2014-06-11);PC-Windows-7-Chrome-34.0.1847.131- (2014-05-13);PC-Windows-7-PPStream-3.6.4.1040- (2014-07-03);PC-Windows-8-PPS Video-1.0.0.10- (2014-05-27);iPhone-iOS-7.1.2-PPS-3.0.2- (2014-07-11),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,153,Q_PROTO_PPTP,pptp,,Point-to-Point Tunneling Protocol,Point-to-Point Tunneling Protocol allows the Point to Point Protocol (PPP) to be tunnelled through an IP network.,Tunneling,tcp,PPTP v1.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1041,Q_PROTO_PPTV,pptv,,Pptv.com,This protocol plug-in classifies the http traffic to the host pptv.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2274,Q_PROTO_PRENSA,prensa,,Prensa,Panamanian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2267,Q_PROTO_PRENSALIBRE,prensalibre,,Prensalibre,Guatemalan news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,475,Q_PROTO_PRESENT,present,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2060,Q_PROTO_PRESS24,press24,,Press24.mk,Macedonian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2126,Q_PROTO_PRESSAN,pressan,,Pressan.is,Icelandic news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1042,Q_PROTO_PRICEMINISTER,priceminister,,PriceMinister.com,This protocol plug-in classifies the http traffic to the host priceminister.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,529,Q_PROTO_PRICERUNNER,pricerunner,,PriceRunner,pricerunner is a price comparison service,Web,http;https;spdy,20130116,9/19/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,664,Q_PROTO_PRIVATE_ENC,private_enc,,Private encryption scheme,The private_enc protocol (Any private encryption scheme) is found over the IP layer (IANA protocol number: 99).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,840,Q_PROTO_PRIVAX,privax,,Privax.us,This protocol plug-in classifies the http traffic to the host privax.us.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,665,Q_PROTO_PRM,prm,,Packet Radio Measurement,The prm protocol (Packet Radio Measurement) is found over the IP layer (IANA protocol number: 21).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2061,Q_PROTO_PRODAVALNIK,prodavalnik,x,Prodavalnik.com (now Olx.bg),Bulgarian classified ads,Web,,20140117,PC-Linux-BasicTest- (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,349,Q_PROTO_PROXEASY,proxeasy,,Proxeasy.com,This protocol plug-in classifies the http traffic to the host proxeasy.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,348,Q_PROTO_PROXONO,proxono,,Proxono.org - Proxono.info,This protocol plug-in classifies the http traffic to the hosts proxono.org and proxono.info.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,841,Q_PROTO_PSIPHON,psiphon,,Psiphon,Internet proxy/redirector which allows uncensored access to web content.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +,601,Q_PROTO_PSN,psn,,Playstation Network,PlayStation Network (PSN) is the on-line gaming service for consoles made by Sony.,Game,http;https;spdy;ssl,Playstation 3 (2013-11-07);PSP (2013-11-07),Playstation-3-PlayStation 3 OS-4.60-- (2014-06-30),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,666,Q_PROTO_PTP,ptp,,Performance Transparency Protocol,The ptp protocol (Performance Transparency Protocol) is found over the IP layer (IANA protocol number: 123).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2062,Q_PROTO_PULS24,puls24,,Puls24.mk,Macedonian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,667,Q_PROTO_PUP,pup,,PUP,The pup protocol (PUP) is found over the IP layer (IANA protocol number: 12).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2216,Q_PROTO_PUZZLE_AND_DRAGON,puzzle_and_dragon,,Puzzle and Dragon,Japanese Mobile game.,Game,http;https;spdy,iPhone-iOS,iPhone-iOS-Puzzle and Dragon-6.3.0- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,668,Q_PROTO_PVP,pvp,,Packet Video Protocol,The pvp protocol (Packet Video Protocol) is found over the IP layer (IANA protocol number: 75).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,345,Q_PROTO_PWE,pwe,,Pseudo Wire Emulation,Pseudo Wire Emulation (PWE) is a protocol for traffic encapsulation.,Routing,mpls,RFC 5287,3/31/2010,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,154,Q_PROTO_Q931,q931,,Q.931,"The Q.931 protocol enables the use of voice and image on networks for video conferencing. It provides no flow control, however, or retransmission, since the underlying layers are assumed to be reliable and the circuit-oriented nature of ISDN allocates bandwidth in fixed increments of 64 kbps. Q.931 does manage connection setup and close. Like TCP, Q.931 documents both the protocol itself and a state machine.",Audio/Video,tcp,Q931 recommendation (05/98),7/4/2008,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,476,Q_PROTO_QAPACITY,qapacity,x,Qapacity.com,This protocol plug-in classifies the http traffic to the host qapacity.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1934,Q_PROTO_QATARLIVING,qatarliving,,Qatarliving.com,Qatari online classified ads.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1502,Q_PROTO_QIK_VIDEO,qik_video,,QIK Video,QIK is a PC/smartphone application allowing live and VOD streaming from the web. The video chat additional feature is not supported yet.,Audio/Video,http;https;rtmp;spdy;ssl,"6.7(iOS 6.x),17.63(Android 2.3-4.0),20130627(PC/Adobe Air)",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +,669,Q_PROTO_QNX,qnx,,QNX,The qnx protocol (QNX) is found over the IP layer (IANA protocol number: 106).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2296,Q_PROTO_QOO10,qoo10,,Qoo10,Singaporian online fashion and trend shopping market.,Web,http;https;spdy,PC-Windows-Google Chrome-www.qoo10.com (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,156,Q_PROTO_QQ,qq,,QQ,QQ is the most popular free instant messaging computer program in China.,Instant Messaging,http;https;socks4;socks5;spdy;tcp;udp,Mobile-Android-QQ Mobile 4.5.11.1868;iPhone-iOS-QQ Mobile 4.2.2;PC-Windows 7-QQ 2.11 (2014-03-08);Mac-Mac OS-QQ 3.0.2 (2014-03-09),Mac-Mac OS-10.9-QQ-3.1.1- (2014-04-02);Mac-Mac OS-10.9.3-QQ-3.1.2-CN (2014-06-05);Mobile-Android-4.2.1-QQ-4.7.0-CN (2014-05-16);Mobile-Android-4.4.2-QQ international-4.6.12.6031- (2014-06-11);PC-Windows-7-QQ international-2.11- (2014-03-28);PC-Windows-7-QQ international-5.3-CN (2014-04-23);PC-Windows-8-QQ-2.0.8.1417- (2014-06-23);Windows Phone-Windows Phone OS-8-QQ-4.3.1.3645- (2014-07-02);iPhone-iOS-7.1.1-QQ international-4.6.11- (2014-06-05);iPhone-iOS-7.1.1-QQ-4.7.1.474-CN (2014-06-05),,x,,x,,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,, +,1407,Q_PROTO_QQ_BLOG,qq_blog,,QQ Blog,Tencent blog hosting service.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1408,Q_PROTO_QQ_FINANCE,qq_finance,,QQ finance,Tencent finance news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1409,Q_PROTO_QQ_GAMES,qq_games,,QQ Games,"Tencent game portal providing game reviews, forum, news.",Web,http;https;spdy;tcp;udp,PC-Windows-Browser-www.qqgames.com (2014-02-22);PC-Windows-QQ Game (2014-03-10),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);PC-Windows-7-QQ Games-3.4.0.3- (2014-06-02);PC-Windows-7-QQ Games-3.4.0.3-CN (2014-06-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1410,Q_PROTO_QQ_LADY,qq_lady,,QQ Lady,Tencent fashion website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1411,Q_PROTO_QQ_MAIL,qq_mail,,QQ Mail,Tencent Webmail.,Webmail,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,1412,Q_PROTO_QQ_NEWS,qq_news,,QQ News,Chinese news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,753,Q_PROTO_QQ_TRANSFER,qq_transfer,,QQ File Transfer,File transfer over QQ,File Transfer,http;https;spdy;tcp,QQ2003;EN QQ2005 V05.0.200.020;TM2008 Preview [34];QQ Beta3,5/31/2011,,x,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,1241,Q_PROTO_QQ_WEB,qq_web,,QQ.com,QQ.com is a multi-service Chinese web portal hosted by Tencent.,Web,http;https;soso;spdy;ssl,PC-Windows-Browser-www.qq.com (2012-08-27),PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1102,Q_PROTO_QQ_WEIBO,qq_weibo,,QQ WeiBo,QQ WeiBo is a Chinese Twitter-like micro-blogging website. It is part of Tencent's QQ.,Web,qq_web,20111128,1/25/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1089,Q_PROTO_QQDOWNLOAD,qqdownload,,QQDownload,QQDownload is a Chinese download manager. Its purpose is to download files quickly using HTTP or the BitTorrent protocol.,Web,bittorrent;http;https;qq_web;soap;soso;spdy,QQDownload v1.10,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,585,Q_PROTO_QQLIVE,qqlive,,QQLive Network Player,QQLive is an application intended to watch TV in Peer-to-Peer mode.,Audio/Video,qq_web,QQLive 2010;QQLive 2011,4/6/2012,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,842,Q_PROTO_QQMUSIC,qqmusic,,QQMusic,QQMusic is a Chinese peer-to-peer file sharing software. Its purpose is to download/stream audio files.,Peer to Peer,http;https;qq_web;spdy;tcp;udp,QQMusic 2011,PC-Windows-7-QQMusic 2011-2187- (2012-01-05),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x, +,1185,Q_PROTO_QQSTREAM,qqstream,,QQStream,QQStream is a Chinese peer-to-peer file sharing software. QQstream is a meta protocol which contains data stream of QQLive and QQMusic.,Peer to Peer,udp,QQStream 2011,PC-Windows-7-QQMusic 2011-2187- (2012-06-20),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1733,Q_PROTO_QTRAX,qtrax,,Qtrax Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,157,Q_PROTO_QUAKE,quake,,Quake,Quake is a protocol allowing communication between Quake Clients and Quake servers.,Game,udp,Quake v3,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,2238,Q_PROTO_QUANTCAST,quantcast,,Quantcast,Quantcast provides audience and advertisement services for web sites.,Web,http;https;spdy;ssl,20140409,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1916,Q_PROTO_QUANTUM_DXI_OST,quantum_dxi_ost,,Quantum DXi,Classifies the Symantec NetBackup streams that use the Quantum DXi replication solution. This implements the OpenStorage API (OST).,File Server,tcp,10.0.4.97;Quantum DXi6540,Quantum-DXi6540-- (2013-12-03),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,477,Q_PROTO_QUARTERLIFE,quarterlife,,Quarterlife.com,This protocol plug-in classifies the http traffic to the host quarterlife.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2255,Q_PROTO_QUIZUP,quizup,,QuizUp: The Biggest Trivia Game In The World!,Mobile game,Game,amazon_aws;http;https;spdy;ssl,iPhone-iOS,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1413,Q_PROTO_QUNAR,qunar,,Qunar.com,Chinese travel website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,749,Q_PROTO_QVOD,qvod,,QVOD Player,QVOD is a peer-to-peer based Video-On-Demand player.,Audio/Video,http;https;spdy;tcp;udp,5.9,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,478,Q_PROTO_QZONE,qzone,,Qzone.qq.com,Tencent social network.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1458,Q_PROTO_RADIKO,radiko,,Radiko.jp,Broadband broadcasts web retransmission services.,Web,http;https;spdy,20130304,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1935,Q_PROTO_RADIO1,radio1,,Radio1.pf,French Polinesian radio broadcast website.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,158,Q_PROTO_RADIUS,radius,,Remote Authentication Dial-In User Service,RADIUS (Remote Authentication Dial-In User Service) is a client/server protocol that enables remote access servers to communicate with a central server to authenticate dial-in users and authorize their access to the requested system or service.,Authentication,udp,Radius v2.0,12/19/2013,,,,x,radius,,,x,,x,,,x,,,,,,,,,,,,,,,,,,,,,x,,, +,843,Q_PROTO_RADIUSIM,radiusim,,RadiusIM.com,This protocol plug-in classifies the http traffic to the host radiusim.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,904,Q_PROTO_RADMIN,radmin,,Radmin,Radmin is a control software which is able to establish a remote secure connection between computers.,Thin Client,tcp,Radmin 3.4,9/12/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,1309,Q_PROTO_RAKUTEN,rakuten,,Rakuten.co.jp,Online market place for selling goods and auctions.,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,318,Q_PROTO_RAMBLER,rambler,,Rambler.ru,Rambler is a Russian information internet portal.,Web,http;https;spdy;ssl,20100430,3/7/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,527,Q_PROTO_RAMBLER_WEBMAIL,rambler_webmail,,Rambler webmail,Rambler webmail is the webmail of the Russian website rambler.ru.,Webmail,http;https;spdy,20120604,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,313,Q_PROTO_RAPIDSHARE,rapidshare,,RapidShare.com,"RapidShare is an online solution to store, send and share files",Web,http;https;spdy;ssl,20101209,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1971,Q_PROTO_RAPIDUPLOAD_COM,rapidupload_com,,rapidupload.com,Classifies web browsing on the rapidupload.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1734,Q_PROTO_RAULKEN,raulken,,Raulken Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,479,Q_PROTO_RAVELRY,ravelry,,Ravelry.com,This protocol plug-in classifies the http traffic to the host www.ravelry.com. It also classifies the ssl traffic to the Common Name .ravelry.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1735,Q_PROTO_RAYFILE,rayfile,,Rayfile Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,159,Q_PROTO_RDP,rdp,,Remote Desktop Protocol (Windows Terminal Server),"A key component of Terminal Server is the Remote Desktop Protocol which allows a thin client to communicate with the Terminal Server over the network. This protocol is based on International Telecommunications Union's (ITU) T.120 protocol, an international, standard multichannel conferencing protocol currently used in the Microsoft NetMeeting conferencing software product. It is tuned for high-bandwidth enterprise environments and will also support encrypted sessions.",Thin Client,cotp;mcs,4;5;6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,160,Q_PROTO_RDT,rdt,,Real Data Transport,This protocol is used to transport audio/video data.,Audio/Video,rtsp;udp,RDT v2;RDT v3,7/4/2008,,,,x,rtsp,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x, +,293,Q_PROTO_REALTOR,realtor,,Realtor.com,This protocol plug-in classifies the http traffic to the host realtor.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1479,Q_PROTO_REDDIT,reddit,,Reddit.com,Social news website.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,571,Q_PROTO_REDHAT_UPDATE,redhat_update,,RedHat Update,This protocol is used for Red Hat updates.,Web,http;https;spdy,Fedora14;CentOS5.5;Scientific5.5;RedHat6.0,11/29/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,1043,Q_PROTO_REDTUBE,redtube,,Redtube.com,This protocol plug-in classifies the http traffic to the host redtube.com.,Web,http;https;spdy,PC-Windows-Browser-www.redtube.com (2014-01-30),Mobile-Android-4.4.2-Redtube-1.3.5- (2014-07-11);PC-Linux-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2128,Q_PROTO_REKLAMA5,reklama5,,Reklama5.mk,Macedonian classifed ads,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,480,Q_PROTO_RENREN,renren,,Renren.com,This protocol plug-in classifies the http traffic to the host renren.com.,Web,http;https;spdy,20111121,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2063,Q_PROTO_REPUBBLICA,repubblica,,Repubblica.it,Italian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1153,Q_PROTO_REPUBLIKA,republika,,Republika.co.id,This protocol plug-in classifies the http traffic to the host republika.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,481,Q_PROTO_RESEARCHGATE,researchgate,,ResearchGATE.net,This protocol plug-in classifies the http traffic to the host researchgate.net.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1908,Q_PROTO_RETROSHARE,retroshare,,RetroShare,Retroshare is a communication and file-sharing Open Source platform which is secured and decentralized.,Peer to Peer,ssl,PC-Windows-Retroshare 0.5.4e_6268,PC-Windows-7-Retroshare-0.5.4e_6268- (2014-02-21),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1044,Q_PROTO_REUTERS,reuters,,Reuters.com,This protocol plug-in classifies the http traffic to the host reuters.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,482,Q_PROTO_REVERBNATION,reverbnation,,ReverbNation.com,This protocol plug-in classifies the http traffic to the host reverbnation.com. It also classifies the ssl traffic to the Common Name .reverbnation.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1045,Q_PROTO_REVERSO,reverso,,Reverso.net,This protocol plug-in classifies the http traffic to the host reverso.net.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,161,Q_PROTO_RFB,rfb,,Remote Frame Buffer,RFB (Remote Frame Buffer) is a simple protocol for remote access to graphical user interfaces.,Thin Client,tcp,RFB v3.3;RFB v3.7;RFB v3.8,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,1189,Q_PROTO_RHAPSODY,rhapsody,,Rhapsody,Rhapsody is a subcription based music streaming service.,Audio/Video,facebook;http;https;llnwd;rtmp;spdy;ssl,2.2.4-Android;2.2.10-iOS;20120611-web,Mobile-Android-Rhapsody-2.2.4.21- (2012-09-03);iPhone-iOS-Rhapsody-2.2.10- (2012-09-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1936,Q_PROTO_RICARDO,ricardo,,Ricardo.ch,Swiss online trading website.,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2129,Q_PROTO_RIMNOW,rimnow,,Rimnow.com,Mauritanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,162,Q_PROTO_RIP1,rip1,,Routing Information Protocol V1,RIP1 (Routing Information Protocol Version 1) is a Distance Vector routing protocol used in Inter Autonomous Systems.,Routing,udp,Routing Information Protocol V1,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,163,Q_PROTO_RIP2,rip2,,Routing Information Protocol V2,"RIP2 (Routing Information Protocol Version 2) is an enhancement of the Version 1 of the protocol. The main differences are the use of multicast instead of broadcast, and the support of variable length subnet mask networks since subnets are now sent inside the updates.",Routing,udp,Routing Information Protocol V2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,164,Q_PROTO_RIPNG1,ripng1,,Routing Internet Protocol ng1,RIPng (RIP New Generation) is intended to allow routers to exchange information for computing routes through an IPv6-based network. RIPng is a distance vector protocol. RIPng should be implemented only in routers since IPv6 provides other mechanisms for router discovery.,Routing,udp,RIPng v1,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,165,Q_PROTO_RLOGIN,rlogin,,Remote Login,The Rlogin protocol is used to establish a bidirectional communication to distant terminals.,Terminal,tcp,RFC 1282,PC-Windows-Putty-0.62- (2012-04-20),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,166,Q_PROTO_RLP,rlp,,Resource Location Protocol,Resource Location Protocol (RLP) is a protocol used to discover the location of resources present in a network.,Network Service,udp,RFC 887,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,905,Q_PROTO_RMI_IIOP,rmi_iiop,,Remote Method Invocation over Internet Inter-ORB Protocol,"RMI-IIOP (Remote Method Invocation over Internet Inter-ORB Protocol) delivers CORBA distributed architecture to Java 2 platform, using both remote method invocation system RMI and IIOP protocol.",Middleware,iiop,CORBA/IIOP 2.3.1,9/16/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1736,Q_PROTO_RMVBUSTERS,rmvbusters,,Rmvbusters Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2286,Q_PROTO_ROBOFORM,roboform,,Roboform,Roboform is a password management and web form filling program.,Web,http;https;spdy;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,733,Q_PROTO_ROHC,rohc,,Robust Header Compression,The rohc protocol (Robust Header Compression) is found over the IP layer (IANA protocol number: 142).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2243,Q_PROTO_ROVIO,rovio,,Rovio Entertainment,Rovio is a mobile game editor. This plug-in handles Rovio games content delivery traffic and Rovio website access.,Game,akamai;http;https;spdy;ssl,20150515,PC-Linux-BasicTest- (2014-05-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,167,Q_PROTO_RPC,rpc,,Remote Procedure Call,"RPC (Remote Procedure Call) is an easy and popular paradigm for implementing the client-server model of distributed computing. A request is sent to a remote system to execute a designated procedure, using arguments supplied, and the result is returned to the caller.",Middleware,http;https;spdy;tcp;udp,RPC v2,7/4/2008,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,168,Q_PROTO_RPL,rpl,,IBM Remote Program Load,IBM Remote Program Load allows a client computer to retrieve startup and configuration software from a server when it starts.,Network Service,8021q;eth;gre;llc,na,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,169,Q_PROTO_RQUOTA,rquota,,Rquota,The RQuota protocol enables the implementation of quotas on remote machines. It is used in conjunction with the NFS protocol.,File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,170,Q_PROTO_RSH,rsh,,Remote Shell,The RSH protocol allows a user to establish a secure connection to a remote host and to obtain a shell allowing commands to be sent to the remote machine to be executed.,Terminal,tcp,RSH 4.2BSD,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,922,Q_PROTO_RSS,rss,,RSS,RSS is a family of web feed formats used to publish frequently updated works in a standardized format.,Web,http;https;spdy,0.90;0.91;0.92;0.93;0.94;1.0;2.0,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,171,Q_PROTO_RSTAT,rstat,,Rstat,The RStat protocol is used in the Sun NFS family to exchange statistics on network activity.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,172,Q_PROTO_RSVP,rsvp,,Reservation Protocol,"RSVP is a Resource reSerVation setup Protocol designed for an integrated services Internet. RSVP provides receiver-initiated setup of resource reservations for multicast or unicast data flows, with good scaling and robustness properties. The RSVP protocol is used by a host to request specific qualities of service from the network for particular application data streams or flows. RSVP is also used by routers to deliver quality-of-service (QoS) requests to all nodes along the path(s) of the flows and to establish and maintain state to provide the requested service.",Network Management,ip,RSVP-V1.0,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,728,Q_PROTO_RSVP_E2E_IGNORE,rsvp_e2e_ignore,,Original experimental academic or proprietary protocols,The rsvp_e2e_ignore protocol (Original experimental academic or proprietary protocols) is found over the IP layer (IANA protocol number: 134).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,173,Q_PROTO_RSYNC,rsync,,Remote synchronous (file transfer),"Rsync is a protocol used by various services performing updates. It greatly speeds up the update process since only the differences between two sets of files are transfered, instead of the whole new file.",File Server,tcp;udp,RSYNC v2.0;RSYNC v3.0,PC-Linux-rsync-3.0.7- (2012-02-02),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,2064,Q_PROTO_RT,rt,,Rt.com,"Worldwide Russian news channel in Russian, Arabic, Spanish and English.",Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,174,Q_PROTO_RTCP,rtcp,,Real Time Control Protocol,"The real-time transport Control protocol RTP allows monitoring of the data delivery in a manner scalable to large multicast networks, and to provide minimal control and identification functionality.",Audio/Video,udp,RTCP v2,4/25/2014,,,,x,,,,,,,x,,,,,x,,,,,,x,,,,,,,,,,,,,,, +,1046,Q_PROTO_RTL,rtl,,rtl.de,This protocol plug-in classifies the http traffic to the host rtl.de.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,337,Q_PROTO_RTMP,rtmp,,Real Time Messaging Protocol,"Real Time Messaging Protocol (RTMP) is a proprietary protocol developed by Adobe Systems for streaming audio, video and data over the Internet, between a Flash player and a server.",Network Service,http;tcp,20101210,9/10/2012,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,175,Q_PROTO_RTP,rtp,,Real Time Protocol,"RTP is the real-time transport protocol used to transmit real-time data, such as audio, video or simulation data, over multicast or unicast network services.",Audio/Video,tcp;udp,RTP V2,6/20/2012,,,,x,"rtp, rtsp",,,x,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,x, +,176,Q_PROTO_RTSP,rtsp,,Real Time Streaming Protocol,"The Real Time Streaming Protocol (RTSP) is an application-level protocol for control over the delivery of data with real-time properties. RTSP provides an extensible framework to enable controlled, on-demand delivery of real-time data, such as audio and video.",Audio/Video,http;tcp,1.0,2/20/2014,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,,,x, +,2130,Q_PROTO_RTVSLO,rtvslo,,Rtvslo.si,Slovenian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,309,Q_PROTO_RUNESCAPE,runescape,,RuneScape,Massively Multiplayer Online Role Playing Game published by Jadex.,Game,http;https;spdy;ssl;tcp,3.1,PC-Windows-runescape-3.1- (2012-05-30),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,177,Q_PROTO_RUSERS,rusers,,Rusers,The RUser's protocol provides a service that lists users currently logged on a remote server.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,x,, +,1414,Q_PROTO_RUTEN,ruten,,Ruten.com.tw,Taiwanese auction website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1749,Q_PROTO_RUTRACKER,rutracker,,Rutracker Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2065,Q_PROTO_RUV,ruv,,Ruv.is,Icelandic news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,672,Q_PROTO_RVD,rvd,,MIT Remote Virtual Disk,The rvd protocol (MIT Remote Virtual Disk Protocol) is found over the IP layer (IANA protocol number: 66).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1047,Q_PROTO_RYANAIR,ryanair,,Ryanair.com,This protocol plug-in classifies the http traffic to the host ryanair.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,483,Q_PROTO_RYZE,ryze,,Ryze.com,This protocol plug-in classifies the http traffic to the host ryze.com. It also classifies the ssl traffic to the Common Name .ryze.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1306,Q_PROTO_S1AP,s1ap,,S1 Application Protocol,"S1 Application Protocol (S1AP), as described in 3GPP TS 36.413 version 11.2.1 Release 11 (2013-02).",Network Service,sctp,3GPP TS 36.413 version 11.2.1 Release 11 (2013-02),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1942,Q_PROTO_S_OMAN,s_oman,,S-oman.net,Omani forum hosting website.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1565,Q_PROTO_SAAVN_MUSIC,saavn_music,,Saavn Bollywood Music,Saavn is a streaming application providing free Indian and Bollywood music to listeners.,Web,http;https;spdy;ssl,2.1,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2317,Q_PROTO_SABAMEETING,sabameeting,,Saba Meeting,Saba Meeting is a web conferencing and desktop sharing service.,Web,http;https;spdy;ssl,20140617,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, +,2131,Q_PROTO_SABAY,sabay,,Sabay.com.kh,Cambodian news and information portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1146,Q_PROTO_SABERINDO,saberindo,,Saberindo.co.id,This protocol plug-in classifies the http traffic to the host saberindo.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2066,Q_PROTO_SABQ,sabq,,Sabq.org,Saudi Arabian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2173,Q_PROTO_SAHAFAH,sahafah,,Sahafah,Yemeni news portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2132,Q_PROTO_SAHARAMEDIAS,saharamedias,,SaharaMedias.net,Mauritanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1937,Q_PROTO_SAHIBINDEN,sahibinden,,Sahibinden.com,Turkish online classified ads and e-commerce platform.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1938,Q_PROTO_SAITEBI,saitebi,,Saitebi.ge,Georgian internet catalog.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1321,Q_PROTO_SAKURA_NE,sakura_ne,,Sakura.ne.jp,Japanese professional web hosting services.,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,844,Q_PROTO_SALESFORCE,salesforce,,Salesforce.com,This protocol plug-in classifies the ssl traffic to the Common Name .salesforce.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,2067,Q_PROTO_SAMEERBOOK,sameerbook,,Sameerbook.com,Jordanian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2303,Q_PROTO_SAMSUNG,samsung,,Samsung,Samsung is a South Korean multinational company.,Web,http;https;spdy;ssl,20140523,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1121,Q_PROTO_SAMSUNG_APPS,samsung_apps,,Samsung Apps,Samsung Apps is an application store for Samsung mobile and TV users.,Application Service,amazon_aws;facebook;http;https;spdy;ssl;twitter,Mobile-Android-Samsung Apps 2.6.148,Mobile-Android-4.1.2-Samsung Apps-1.1.203- (2014-06-03);Mobile-Bada-2.0-Samsung Apps-1.0.203- (2014-06-23);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-23),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,2133,Q_PROTO_SANA,sana,,Sana.sy,Syrian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1762,Q_PROTO_SANOOK,sanook,,Sanook.com,"Thailandese website providing lottery games, music. chat, news, jobs, shopping and entertainment.",Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,178,Q_PROTO_SAP,sap,,SAP,SAP is both a protocol and the name of an ERP application used by most companies.,ERP,tcp,SAP R/3,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1788,Q_PROTO_SAPO,sapo,,Sapo.mz - Sapo.pt,"Mozambican web portal including mail, news, lifestyle. This portal is also accessed from Portugal.",Web,http;https;spdy,20140130,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2186,Q_PROTO_SARAYANEWS,sarayanews,,Sarayanews,Jordanian news portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,673,Q_PROTO_SAT_EXPAK,sat_expak,,SATNET and Backroom EXPAK,The sat_expak protocol (SATNET and Backroom EXPAK) is found over the IP layer (IANA protocol number: 64).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,674,Q_PROTO_SAT_MON,sat_mon,,SATNET Monitoring,The sat_mon protocol (SATNET Monitoring) is found over the IP layer (IANA protocol number: 69).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1978,Q_PROTO_SAVEFILE_COM,savefile_com,,savefile.com,Classifies web browsing on the savefile.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1220,Q_PROTO_SAYCLUB,sayclub,,SayClub.com,This protocol plug-in classifies the http traffic to the host sayclub.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,1221,Q_PROTO_SBS,sbs,,Sbs.co.kr,This protocol plug-in classifies the http traffic to the host sbs.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,725,Q_PROTO_SCC_SP,scc_sp,,Semaphore Communications Sec. Pro.,The scc_sp protocol (Semaphore Communications Sec. Pro.) is found over the IP layer (IANA protocol number: 96).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1909,Q_PROTO_SCCM,sccm,,System Center Configuration Manager,"System Center Configuration Manager, is a systems management software product by Microsoft for managing large groups of computers running Windows, Mac OS X, Linux or UNIX, as well as various mobile operating systems. [Note: sccm is also known as mssms.]",Network Management,http;https;spdy,20130701,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,179,Q_PROTO_SCCP,sccp,,Skinny Client Control Protocol,Skinny Client Control Protocol (SCCP) is a Cisco proprietary protocol used between Cisco Call Manager and Cisco VOIP phones. It is also supported by some other vendors.,Audio/Video,tcp,20051122,7/4/2008,,,,x,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,1307,Q_PROTO_SCCP_SS7,sccp_ss7,,Stream Connection Control Part,"SCCP is a network layer protocol that provides routing, flow control or error detection services in SS7 networks.",Network Service,m3ua,RFC 2960,,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1737,Q_PROTO_SCENEHD,scenehd,,SceneHD Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,2014,Q_PROTO_SCHEDULED_TP,scheduled_tp,,Scheduled Transfer Protocol,STP is a connection-oriented data transfer protocol. It is found over the IP layer (IANA protocol number: 118).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,484,Q_PROTO_SCIENCESTAGE,sciencestage,,ScienceStage.com,This protocol plug-in classifies the http traffic to the host sciencestage.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,485,Q_PROTO_SCISPACE,scispace,,Scispace.com,This protocol plug-in classifies the http traffic to the host scispace.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2237,Q_PROTO_SCORECARDRESEARCH,scorecardresearch,,ScorecardResearch,Scorecard Research provides a web data collection service.,Web,http;https;spdy;ssl,20140409,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,675,Q_PROTO_SCPS,scps,,SCPS,The scps protocol (SCPS) is found over the IP layer (IANA protocol number: 105).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1166,Q_PROTO_SCRIBD,scribd,,Scribd.com,This protocol plug-in classifies the http traffic to the host scribd.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,180,Q_PROTO_SCTP,sctp,,Stream Control Transmission Protocol,SCTP (Stream Control Transmission Protocol) is a protocol designed to transport PSTN signaling messages over IP networks.,Network Service,ip;ip6,RFC 2960,7/4/2008,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1415,Q_PROTO_SDO,sdo,,Sdo.com,Chinese entertainment portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,708,Q_PROTO_SDRP,sdrp,,Source Demand Routing Protocol,The sdrp protocol (Source Demand Routing Protocol) is found over the IP layer (IANA protocol number: 42).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1774,Q_PROTO_SEARCHNU,searchnu,,Searchnu,Browser toolbar search engine,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,250,Q_PROTO_SECONDLIFE,secondlife,,SecondLife.com,Secondlife is is an Internet-based virtual world which enables its users to interact with each other through motional avatars.,Web,http;https;spdy;udp,20081118,1/14/2009,,x,,x,,,,,,,,,,,,x,x,,,,x,,x,,,,,,,,,,x,,,, +,676,Q_PROTO_SECURE_VMTP,secure_vmtp,,Secure VMTP,The secure_vmtp protocol (SECURE_VMTP) is found over the IP layer (IANA protocol number: 82).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,845,Q_PROTO_SEEQPOD,seeqpod,,Intertrust.com,This protocol plug-in classifies the http traffic to the host intertrust.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1317,Q_PROTO_SEESAA,seesaa,,Seesaa,Japanese web portal dedicated to smartphone applications and other web sites,Web,http;https;spdy;ssl,20140617,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,846,Q_PROTO_SEESMIC,seesmic,,Seesmic.com,This protocol plug-in classifies the http traffic to the host seesmic.com. It also classifies the ssl traffic to the Common Name .seesmic.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1222,Q_PROTO_SEGYE,segye,,Segye.com,This protocol plug-in classifies the http traffic to the host segye.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,317,Q_PROTO_SENDSPACE,sendspace,,SendSpace,File uploading service for large file sharing on web and mobile devices.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.sendspace.com (2014-02-18);Mobile-Android-SendSpace 2.1.1 (2014-02-18);PC-Windows 7-SendSpace 1.4.1 (2014-02-19),Mac-Mac OS-10.9.4-Sendspace-1.4.2- (2014-07-11);Mobile-Android-4.4.2-Sendspace-2.2.3- (2014-07-11);PC-Linux-14.04-Sendspace-1.3.9- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-7-Sendspace-1.4.2- (2014-07-11);iPhone-iOS-7.0.4-iShare-3.0.2- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,x,,,,,,,, +,2068,Q_PROTO_SENEWEB,seneweb,,Seneweb.com,Senegalese news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1190,Q_PROTO_SEOUL_NEWS,seoul_news,,Seoul.co.kr,This protocol plug-in classifies the http traffic to the host seoul.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1939,Q_PROTO_SEZNAM,seznam,,Seznam.cz,Czech internet web protal.,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1048,Q_PROTO_SFR,sfr,,SFR.fr,This protocol plug-in classifies the http traffic to the host sfr.fr.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2306,Q_PROTO_SGCARMART,sgcarmart,,sgCarMart,Singaporean online car market.,Web,http;https;spdy,PC-Windows-Google Chrome-www.sgcarmart.com (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1444,Q_PROTO_SHARE,share,,Share,Share is a free peer-to-peer application allowing users to exchange files anonymously and in a secure way.,Peer to Peer,tcp,EX2,3/21/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1988,Q_PROTO_SHAREBEE_COM,sharebee_com,,sharebee.com,Classifies web browsing on the sharebee.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1738,Q_PROTO_SHAREBOX,sharebox,,Sharebox Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,756,Q_PROTO_SHAREPOINT,sharepoint,,Microsoft SharePoint,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems.",Web,http;https;spdy,SharePoint 2010,7/4/2008,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,, +,757,Q_PROTO_SHAREPOINT_ADMIN,sharepoint_admin,,Microsoft SharePoint,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the administration back-end of SharePoint.",Web,sharepoint,SharePoint 2010,7/11/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,924,Q_PROTO_SHAREPOINT_BLOG,sharepoint_blog,,Microsoft SharePoint Blog Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the blog management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,925,Q_PROTO_SHAREPOINT_CALENDAR,sharepoint_calendar,,Microsoft SharePoint Calendar Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the calendar management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,926,Q_PROTO_SHAREPOINT_DOCUMENT,sharepoint_document,,Microsoft SharePoint Document Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the document management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1453,Q_PROTO_SHAREPOINT_ONLINE,sharepoint_online,,SharePoint Online,On-line version of the Microsoft Sharepoint services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,1739,Q_PROTO_SHAREREACTOR,sharereactor,,Sharereactor Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,486,Q_PROTO_SHARETHEMUSIC,sharethemusic,,ShareTheMusic.com,This protocol plug-in classifies the http traffic to the host sharethemusic.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1178,Q_PROTO_SHAZAM,shazam,,Shazamid.com,"This protocol plug-in classifies the http traffic to the hosts shazamid.com and cdn.shazam.com. It also classifies the ssl traffic to the Common Name beacon.shazam.com.,This protocol is not supported with Basic DPI.",Web,http;https;spdy;ssl,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,2134,Q_PROTO_SHEKULLI,shekulli,,Shekulli.com.al,Albanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,487,Q_PROTO_SHELFARI,shelfari,,Shelfari.com,This protocol plug-in classifies the http traffic to the host shelfari.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,731,Q_PROTO_SHIM6,shim6,,Shim6 Protocol,The shim6 protocol (Shim6 Protocol) is found over the IP layer (IANA protocol number: 140).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1223,Q_PROTO_SHINHAN,shinhan,,Shinhan.com,This protocol plug-in classifies the http traffic to the host shinhan.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1940,Q_PROTO_SHOBIDDAK,shobiddak,,Shobiddak.com,Palestinian online classified ads.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,181,Q_PROTO_SHOUTCAST,shoutcast,,ShoutCast,Shoutcast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;spdy;tcp,PC-Windows-Browser-www.shoutcast.com (2014-02-22),Mobile-Android-4.4.2-XiiaLive-3.2.0.7- (2014-06-10);Mobile-iOS-7.1-Internet Radio Box-2.1.7- (2014-04-23);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-16);PC-Windows-7-Winamp-5.666- (2014-06-16);PC-Windows-8-RADYO-1.1.4.4- (2014-02-22),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,847,Q_PROTO_SHOWMYPC,showmypc,,ShowMyPc.com,This protocol plug-in classifies the http traffic to the host showmypc.com. It also classifies the ssl traffic to the Common Name showmypc.com.,Thin Client,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, +,848,Q_PROTO_SHUTTERFLY,shutterfly,,Shutterfly.com,This protocol plug-in classifies the http traffic to the host shutterfly.com. It also classifies the ssl traffic to the Common Name shutterfly.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,944,Q_PROTO_SIEBEL_CRM,siebel_crm,,Siebel CRM,A customer relationship management (CRMs) solution by Siebel Systems.,Web,http;https;spdy,20110826,10/21/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,2202,Q_PROTO_SIGMALIVE,sigmalive,,Sigmalive,Cypriot news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,737,Q_PROTO_SILVERLIGHT,silverlight,,Silverlight,"Silverlight is a Microsoft web browser plugin designed to render programable animations and to stream videos. It quite similar with Adobe Flash: animated vector graphics, H264 video streaming,This protocol is not supported with Basic DPI.",Audio/Video,akamai;http;https;spdy,PC-Windows-Internet Explorer-Silverlight 5.0 (2011-12-09),Mac-Mac OS-10.9.3-Silverlight-5.1.30317.0- (2014-06-25);PC-Windows-7-Silverlight-5.1.30214.0- (2014-03-27);PC-Windows-8-Silverlight-5.1.30214.0- (2014-06-19);Xbox-360-Silverlight-5- (2013-10-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,679,Q_PROTO_SIMPLE_MSG_P,simple_msg_p,,Simple Message Protocol,The simple_msg_p protocol (Simple Message Protocol) is found over the IP layer (IANA protocol number: 121).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1995,Q_PROTO_SIMPLEUPLOAD_NET,simpleupload_net,,simpleupload.net,Classifies web browsing on the simpleupload.net Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1088,Q_PROTO_SINA,sina,,Sina.com.cn,"Sina is a Chinese chat client similar to MSN Messenger or ICQ. It contains several features like chat, news portal, micro blogging, music player, online storage (files, photos, etc..).",Web,http;https;jabber;spdy;ssl;udp,Mobile-Android-Sina 1.7;PC-Windows-Browser-www.sina.com.cn (2014-02-23),PC-Windows-Firefox- (2013-10-17);PC-Windows-Sina UC-8.3.4- (2013-10-17),,x,,x,,,,,,,x,,,,,x,,,,,x,,,,,,,,,,,,,,,, +,1416,Q_PROTO_SINA_BLOG,sina_blog,,Sina blog,Sina blog hosting service.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1417,Q_PROTO_SINA_FINANCE,sina_finance,,Sina finance,Sina finance news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1418,Q_PROTO_SINA_NEWS,sina_news,,Sina News,Chinese news portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1462,Q_PROTO_SINA_VIDEO,sina_video,,Sina Video,Chinese on-line video streaming and VOD service.,Web,sina,"1.0 (CLIENT),20130425 (Web)",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1097,Q_PROTO_SINA_WEIBO,sina_weibo,,Sina Weibo,Sina Weibo is a Chinese microblogging website.,Web,sina,20111121,BlackBerry-BlackBerry OS-10.2.1.2102-Sina Weibo-1.1.0.6- (2014-05-20);Mobile-Android-4.4.2-Sina Weibo-4.4.1- (2014-07-02);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-7-Sina Weibo-3.0.5.35670- (2014-07-03);PC-Windows-8-Sina Weibo-2.0.1.8- (2014-07-04);Windows Phone-Windows Phone OS-8-Sina Weibo-3.3.1.0- (2014-04-18);iPhone-iOS-7.1.1-Sina Weibo-4.4.0- (2014-06-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2069,Q_PROTO_SIOL,siol,,Siol.net,Slovenian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,182,Q_PROTO_SIP,sip,,Session Initiation Protocol,"Session Initiation Protocol (SIP) is the Internet Engineering Task Force's (IETF's) standard for multimedia conferencing over IP. Like other VoIP protocols, SIP is designed to address the functions of signaling and session management within a packet telephony network.",Audio/Video,aim;http;msn;sip;stun;tcp;udp,2.0,3/24/2014,,x,,,sip,,,x,,x,x,,,,,x,,x,x,,,x,,,,,,,,,,,,,,, +,2261,Q_PROTO_SKEE_BALL_ARCADE,skee_ball_arcade,,Skee Ball Arcade,Mobile game,Game,amazon_aws;flurry;http;https;spdy;ssl,iPhone-iOS-Skee Ball Arcade 1.6,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1941,Q_PROTO_SKELBIU,skelbiu,,Skelbiu.lt,Lithuanian online classified ads and trading website.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,677,Q_PROTO_SKIP,skip,,SKIP,The skip protocol (SKIP) is found over the IP layer (IANA protocol number: 57).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2135,Q_PROTO_SKROUTZ,skroutz,,Skroutz.gr,Greek price comparator,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1049,Q_PROTO_SKY,sky,,Sky,This protocol plug-in classifies the http traffic to the host www.sky.com.,Audio/Video,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,849,Q_PROTO_SKY_PLAYER,sky_player,,SkyPlayer.sky.com,This protocol plug-in classifies the http traffic to the host skyplayer.sky.com. It also classifies the ssl traffic to the Common Name .sky.com.,Audio/Video,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,323,Q_PROTO_SKYBLOG,skyblog,,skyblog,SkyBlog is a website where users can have blogs.,Web,http;https;spdy;ssl,20131118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1050,Q_PROTO_SKYCN,skycn,,Skycn.com,This protocol plug-in classifies the http traffic to the host skycn.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,850,Q_PROTO_SKYDRIVE,skydrive,,Windows Live SkyDrive,"This protocol plug-in classifies the ssl traffic to the Common Names live.com.nsatc.net, gateway.edge.messenger.live.com, skydrive.live.com and skyapi.live.net.",Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1575,Q_PROTO_SKYDRIVE_LOGIN,skydrive_login,,Windows Live SkyDrive Login,On-line file storage service owned by Microsoft.,Web,http;https;spdy,20130909,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,183,Q_PROTO_SKYPE,skype,,skype,"Skype is a widely used voice over IP protocol. Since the merge with MSN service in 2013, it's required to use this protocol in conjonction with msn and windowslive protocols to optimise the coverage of traffic generated by Skype clients. Skype is a widely used voice over IP protocol. UDP classification is assisted using DNS Caching.",Instant Messaging,http;https;ip;spdy;ssl;tcp;udp,PC-Windows 7-Skype 6.9.0.106;Mobile-Android-Skype 3.2.0.6673;iPad-iOS-Skype 4.8;Windows Phone-Windows Phone OS-Skype 2.6.0.148,Blackberry-Blackberry OS-10.2.1.3175-Skype-4.9.507.46973- (2014-06-26);Kindle Fire-Kindle Fire-7.4.8-Skype-4.9.505.47194- (2014-06-24);Mac-Mac OS-Skype-6.18.0.493- (2014-07-03);Mobile-Android-4.2.1-Skype-4.9.0.45564- (2014-06-03);PC-Linux-Skype-4.3.0.37-1- (2014-07-04);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-26);PC-Windows-7-Skype-6.16.0.105- (2014-06-03);PC-Windows-8-Skype-1.9.0.2016- (2014-06-26);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-Skype-2.16.0.274- (2014-05-05);iPhone-iOS-7.1.1-Skype-5.1- (2014-06-25),,x,,x,skype,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,302,Q_PROTO_SKYROCK,skyrock,x,Skyrock.com,This protocol plug-in classifies the http traffic to the host www.skyrock.com. Now classified as skyblog.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1179,Q_PROTO_SLACKER,slacker,,Slacker Personal Radio,This protocol plug-in classifies the http traffic to the host .slacker.com.,Audio/Video,http;https;rtmp;spdy,20120530,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1786,Q_PROTO_SLANDO,slando,x,Slando.by (now Olx.by),Belarusian free classified ads,Web,,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1051,Q_PROTO_SLIDESHARE,slideshare,,Slideshare.net,This protocol plug-in classifies the http traffic to the host slideshare.net.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,892,Q_PROTO_SLINGBOX,slingbox,,Slingbox,Slingbox is a streaming protocol over the Internet used to watch and control TV shows received from your home devices.,Audio/Video,http;https;spdy;ssl;tcp,1.5.1.119,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,184,Q_PROTO_SLSK,slsk,,SoulSeek,Soulseek is a peer-to-peer protocol.,Peer to Peer,tcp,<=1.57,PC-Linux-Soulseek-157 NS 13 e- (2013-03-05),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,678,Q_PROTO_SM,sm,,Sparse Mode,The sm protocol (SM) is found over the IP layer (IANA protocol number: 122).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,185,Q_PROTO_SMB,smb,,Server Message Block (Windows File Server),The Server Message Block Protocol (SMB/SMB2) provides a method for client applications to read and write to files and to request services from server programs in a computers network.,File Server,netbios,smb;smb2,PC-Linux-Samba Server-3.4.0- (2014-02-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,2070,Q_PROTO_SME,sme,,Sme.sk,Slovak news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,738,Q_PROTO_SMPP,smpp,,Short message peer-to-peer protocol,SMPP is a telecommunications industry protocol for exchanging SMS messages between SMS peer entities.,Wap,tcp,3.4;5.0,2/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,186,Q_PROTO_SMTP,smtp,,Simple Mail Transfer Protocol,The Simple Mail Transfer Protocol (SMTP) is a protocol used for transfering mail reliably and efficiently.,Mail,socks4;socks5;tcp,RFC 821;RFC 5321,4/28/2014,,,,x,,,,,,,x,,,x,,,,,,,,,,,,,,,,,,,,,,, +,187,Q_PROTO_SMTPS,smtps,,Simple Mail Transfer Protocol Secure,Secure version of the SMTP protocol.,Mail,ssl,RFC 821;RFC 5321,7/4/2008,,,,,,465,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +,188,Q_PROTO_SNA,sna,,Systems Network Architecture,SNA (Systems Network Architecture) is an IBM's mainframe network standards.,Network Service,8021q;eth;llc;ppp,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,189,Q_PROTO_SNAP,snap,,Sub-Network Access Protocol,Sub-Network Access Protocol (SNAP) is a protocol encapsulated in the LLC protocol enabling the encapsulation of a greater number of protocols in Ethernet II frames.,Network Service,llc,RFC 1042,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,2210,Q_PROTO_SNAPCHAT,snapchat,,Snapchat,Snapchat is a photo/video sharing service.,Web,http;https;spdy;ssl,Mobile-Android-Snapchat 4.0.20;iPhone-iOS-Snapchat 6.0.2,Mobile-Android-Snapchat-4.0.20- (2014-03-27);iPhone-iOS-Snapchat-6.0.2- (2014-03-27),,x,,,,,,,,,,,,,,x,x,,,,x,,x,,,,x,,,,,,,,,, +,190,Q_PROTO_SNMP,snmp,,Simple Network Management Protocol,SNMP is a request/response protocol that communicates management information between two types of SNMP software entities: SNMP applications (also called SNMP managers) and SNMP agents.,Network Management,hpellc;udp,1;2c;2u;3,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,680,Q_PROTO_SNP,snp,,Sitara Networks Protocol,The snp protocol (Sitara Networks Protocol) is found over the IP layer (IANA protocol number: 109).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,264,Q_PROTO_SNPP,snpp,,Simple Network Paging Protocol,This protocol defines a method by which a pager can receive a message over the Internet,Network Service,tcp,SNPP v3,4/16/2009,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,191,Q_PROTO_SOAP,soap,,SOAP,"SOAP is a lightweight protocol intended for exchanging structured information in a decentralized, distributed environment. It defines, using XML technologies, an extensible messaging framework containing a message construct that can be exchanged over a variety of underlying protocols.",Middleware,http,SOAP v1.1;SOAP v1.2,2/3/2012,,x,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, +,851,Q_PROTO_SOCIALTV,socialtv,,Social-tv.net,This protocol plug-in classifies the http traffic to the host srv.sixdegs.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,488,Q_PROTO_SOCIALVIBE,socialvibe,x,SocialVibe.com,This protocol plug-in used to classify the http traffic to the host socialvibe.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,927,Q_PROTO_SOCKS2HTTP,socks2http,,socks2http,Socks2http is a client software aiming to make a tunnel.,Tunneling,http;https;spdy;tcp,1.0.2.411,10/21/2011,,x,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,192,Q_PROTO_SOCKS4,socks4,,SOCKet Secure v4,Socks 4 is an authentication protocol.,Tunneling,tcp,SOCKS-v4,7/4/2008,,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,193,Q_PROTO_SOCKS5,socks5,,SOCKet Secure v5,Socks 5 is an authentication protocol.,Tunneling,tcp,SOCKS-v5,7/4/2008,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1419,Q_PROTO_SOFT4FUN,soft4fun,,Soft4fun.net,Hardware and software news site.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1457,Q_PROTO_SOFTBANK,softbank,,SoftBank.com,SoftBank network operator services.,Web,http;https;spdy;ssl,20130304,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1756,Q_PROTO_SOFTONIC,softonic,,Softonic.com,Softonic.com is a software download portal based in Barcelona,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1695,Q_PROTO_SOFTROS_MESSENGER,softros_messenger,,Softros LAN Instant Messenger,Softros Messenger is a LAN messaging and file transfer application.,Instant Messaging,tcp,5.1.1 (Windows),PC-Windows-Softros LAN Messenger-5.1.3- (2013-12-23),,,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +,1251,Q_PROTO_SOGOU,sogou,,Sogou.com,This protocol plug-in classifies the http traffic to the host sogou.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1243,Q_PROTO_SOHU,sohu,,Sohu.com,Sohu services (except blogging classified in sohu_blog).,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1420,Q_PROTO_SOHU_BLOG,sohu_blog,,Sohu blog,Sohu blog hosting service.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1264,Q_PROTO_SOKU,soku,,Soku.com,This protocol plug-in classifies the http traffic to the host soku.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1910,Q_PROTO_SOMUD,somud,,SoMud Bittorrent tracker,SoMud is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the SoMud client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https;spdy,1.3.8,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1324,Q_PROTO_SONET_NE,sonet_ne,,So-net.ne.jp,Japanese web portal of the internet provider So-net,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,489,Q_PROTO_SONICO,sonico,,Sonico.com,This protocol plug-in classifies the http traffic to the host sonico.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,194,Q_PROTO_SONMP,sonmp,,Nortel/SynOptics Netwok Management Protocol,Nortel/SynOptics Network Management Protocol is a proprietary Nortel Networks management protocol.,Network Management,snap,RFC 1042,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,572,Q_PROTO_SOPCAST,sopcast,,Sopcast.org,Sopcast is a video streaming service based on a peer-to-peer protocol : SOP (Streaming Over Peer-to-peer).,Audio/Video,http;https;spdy;udp,3.2.9,10/3/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,1096,Q_PROTO_SOPHOS_UPDATE,sophos_update,,Sophos update,Sophos antivirus update protocol.,Antivirus,http;https;spdy,7.3,PC-Windows-Sophos Antvirus-9.7- (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x,,,,, +,852,Q_PROTO_SORIBADA,soribada,,Soribada.com,This protocol plug-in classifies the http traffic to the host kpop.soribada.com.,Peer to Peer,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1244,Q_PROTO_SOSO,soso,,Soso.com,This protocol plug-in classifies the http traffic to the host soso.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1271,Q_PROTO_SOUFUN,soufun,,Soufun.com,This protocol plug-in classifies the http traffic to the host soufun.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1180,Q_PROTO_SOUNDCLOUD,soundcloud,,SoundCloud.com,This protocol plug-in classifies the http traffic to the hosts soundcloud.com and sndcdn.com. It also classifies the ssl traffic to the Common Names .soundcloud.com and sndcdn.com.,Audio/Video,http;https;spdy;ssl,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2136,Q_PROTO_SOUQ,souq,,Souq.com,Saudi Arabian ecommerce website,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,289,Q_PROTO_SOUTHWEST,southwest,,Southwest.com,This protocol plug-in classifies the http traffic to the host southwest.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,937,Q_PROTO_SP,sp,,ISO 8327 Session Protocol,ISO 8327-1/X.225 OSI Session Protocol (SP).,Network Service,cotp,ISO 8327-1/X.225,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1469,Q_PROTO_SPDY,spdy,,SPDY,SPDY is an open networking protocol developed primarily at Google for transporting web content.,Web,tcp,3,7/11/2013,,,,x,,,,,,,x,x,,,,,,,,,,,x,,,,,,,,,,,,,, +,1465,Q_PROTO_SPEEDTEST,speedtest,,Speedtest.net,Web site and mobile application for testing both bandwidth and latency of any internet connection.,Web,http;https;spdy;ssl;tcp,See protobook for details,,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1446,Q_PROTO_SPID,spid,,Statistical Protocol IDentification,"SPID (Statistical Protocol IDentification) is a statistical classification engine, used to identify encrypted or obfuscated streams from advanced Peer-to-peer or VPN protocols (ex: BitTorrent RC4 streams).",Behavioral,tcp;udp,1,,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,1052,Q_PROTO_SPIEGEL,spiegel,,Spiegel.de,This protocol plug-in classifies the http traffic to the host spiegel.de.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1224,Q_PROTO_SPORTCHOSUN,sportchosun,,Sports.chosun.com,This protocol plug-in classifies the http traffic to the host sportschosun.com. It also classifies the ssl traffic to the Common Name member.sportchosun.com.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1053,Q_PROTO_SPORTSILLUSTRATED,sportsillustrated,,SportsIllustrated.com,This protocol plug-in classifies the http traffic to the hosts sportsillustrated.cnn.com and sportsillustrated.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1225,Q_PROTO_SPORTSSEOUL,sportsseoul,,SportsSeoul.com,This protocol plug-in classifies the http traffic to the host sportsseoul.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,534,Q_PROTO_SPOTIFY,spotify,,Spotify,Spotify is an application of musical streaming.,Audio/Video,amazon_aws;http;https;rtmp;socks4;socks5;spdy;ssl;tcp;twitter;udp,PC-Windows-Spotify 0.9.7.16g4b197456;iPhone-iOS-Spotify 0.9.0.8;Mobile-Android-Spotify 0.7.6.357;Mac-Mac OS-Spotify 0.9.7.16.g4b197456 (2014-02-18);PC-Windows-Browser-www.spotify.com (2014-02-17);PC-Windows-Google Chrome-www.spotify.com (2014-03-12),BlackBerry-BlackBerry OS-Spotify-0.5.1.1.g8d00422e- (2014-04-04);Mac-Mac OS-10.9.3-Spotify-0.9.10.14.g578d350b- (2014-06-18);Mobile-Moto G-Android-4.4.2-Spotify-1.1.2.453- (2014-07-14);Nokia Mobile-Symbian-Spotify-0.4.8.17.g21854b59- (2014-07-01);PC-Windows-7-Chrome-33.0.1750.146-Spotify-0.2.3- (2014-03-12);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-14);PC-Windows-7-Spotify-0.9.10.14.g578d350b- (2014-06-16);Windows Phone-Windows Phone OS-Spotify-2.0.4933.0- (2014-02-04);iPhone-iOS-7.1.1-Spotify-1.2.0- (2014-06-19),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1054,Q_PROTO_SPRINT,sprint,,Sprint.com,This protocol plug-in classifies the http traffic to the host sprint.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,681,Q_PROTO_SPRITE_RPC,sprite_rpc,,Sprite RPC Protocol,The sprite_rpc protocol (Sprite RPC Protocol) is found over the IP layer (IANA protocol number: 90).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,682,Q_PROTO_SPS,sps,,Secure Packet Shield,The sps protocol (Secure Packet Shield) is found over the IP layer (IANA protocol number: 130).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,920,Q_PROTO_SQLI,sqli,,Structured Query Language Interface,The SQLI protocol (Structured Query Language Interface) is a proprietary protocol seemingly used exclusively in IBM Informix servers.,Database,tcp,9.7,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,195,Q_PROTO_SQUIRRELMAIL,squirrelmail,,SquirrelMail,SquirrelMail is a web-based email application written in the PHP scripting language.,Webmail,http;https;spdy,20110527,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,683,Q_PROTO_SRP,srp,,SpectraLink Radio Protocol,The srp protocol (SpectraLink Radio Protocol) is found over the IP layer (IANA protocol number: 119).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,196,Q_PROTO_SRVLOC,srvloc,,Service Location Protocol,"Service Location Protocol is a decentralized, lightweight, scalable and extensible protocol for service discovery within a local area network.",Application Service,tcp;udp,SRVLOC v1;SRVLOC v2,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1943,Q_PROTO_SS,ss,,Ss.lv,Latvian online classified ads.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,684,Q_PROTO_SSCOPMCE,sscopmce,,Service Specific Connection Oriented Protocol for M-Cast Env,The sscopmce protocol (Service Specific Connection Oriented Protocol for M-Cast Env) is found over the IP layer (IANA protocol number: 128).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,197,Q_PROTO_SSDP,ssdp,,Simple Service Discovery Protocol,Simple Service Discovery Protocol (SSDP) provides a mechanism whereby network clients can discover desired network services.,Application Service,udp,SSDP v1.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,198,Q_PROTO_SSH,ssh,,Secure Shell,"Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and a protocol for obtaining secure access to a remote computer.",Encrypted,http;http_tunnel;tcp,ssh v2.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x +,199,Q_PROTO_SSL,ssl,,Secure Socket Layer,"Secure Sockets Layer (SSL) is a commonly-used protocol for managing the security of a message transmission on the Internet. SSL has recently been succeeded by Transport Layer Security (TLS), which is based on SSL.",Encrypted,cotp;http;postgres;socks4;socks5;tcp,SSL-V2.0;SSL-V3.0,7/4/2008,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,685,Q_PROTO_ST,st,,Stream protocol,The st protocol (Stream) is found over the IP layer (IANA protocol number: 5).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1138,Q_PROTO_STAFABAND,stafaband,,Stafaband.info,This protocol plug-in classifies the http traffic to the host stafaband.info.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,853,Q_PROTO_STAGEVU,stagevu,,Stagevu.com,This protocol plug-in classifies the http traffic to the host stagevu.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2071,Q_PROTO_STANDARDMEDIA,standardmedia,,StandardMedia.co.ke,Kenyan news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1790,Q_PROTO_STARTIMES,startimes,,Startimes.com,Arabic forum hosting site,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1055,Q_PROTO_STAYFRIENDS,stayfriends,,StayFriends.de,This protocol plug-in classifies the http traffic to the host stayfriends.de.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1696,Q_PROTO_STEALTHNET,stealthnet,,Stealthnet,Stealthnet is a file sharing application between two or more hosts.,Peer to Peer,http;https;spdy;tcp,0.8.7.9,10/2/2013,,x,,x,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,, +,339,Q_PROTO_STEAM,steam,,Steampowered.com,"Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.",Game,akamai;http;https;spdy;ssl;tcp;udp,PC-Windows-Steam 1393366296 (2014-02-27);Mobile-Android-Steam 1.0.6 (2014-02-25);iPhone-iOS-Steam 1.3 (2014-02-25);Mac-Mac OS-Steam 1393366296 (2014-02-27),Mac-Mac OS-10.9.3-Steam-1401381906- (2014-06-23);Mobile-Android-4.1.2-Steam-1.0.6- (2014-02-25);PC-Windows-7-Steam-1401381906- (2014-06-23);Windows Phone-Windows Phone OS-8.0.10517.150-Steam Center-2.6.5.0- (2014-04-01);iPhone-iOS-7.1.1-Steam Mobile-1.4.2- (2014-04-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,2230,Q_PROTO_STICK_CRICKET,stick_cricket,,Stick Cricket,Mobile game,Game,flurry;google_ads;http;https;spdy,iPhone-iOS-Stick Cricket 2.5.0 (2014-04-09),iPhone-iOS-Stick Cricket-2.5.0- (2014-04-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,490,Q_PROTO_STICKAM,stickam,,Stickam.com,This protocol plug-in classifies the http traffic to the host stickam.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1421,Q_PROTO_STOCKQ,stockq,,Stockq.org,Taiwanese stock market information.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,200,Q_PROTO_STP,stp,,Spanning Tree Protocol,"Spanning Tree Protocol allows the use of layer 2 networks with redundant paths by creating a covering tree on which frames will be transmitted. The newly created topology of the network (the tree) is loop free, thus preventing problems such as broadcast storm from occurring.",Routing,eth;llc;ppp,RFC 2674;RFC 1525;RFC 1493,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,854,Q_PROTO_STREAMAUDIO,streamaudio,,StreamAudio.com,This protocol plug-in classifies the http traffic to the host streamaudio.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,491,Q_PROTO_STUDIVZ,studivz,,STudiVZ.net,This protocol plug-in classifies the http traffic to the host studivz.net. It also classifies the ssl traffic to the Common Name secure.studivz.net.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2137,Q_PROTO_STUFF,stuff,,Stuff.co.nz,New zealander news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,492,Q_PROTO_STUMBLEUPON,stumbleupon,,StumbleUpon.com,This protocol plug-in classifies the http traffic to the host stumbleupon.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,201,Q_PROTO_STUN,stun,,Session Traversal Utilities for NAT,STUN (Session Traversal Utilities for NAT) allows a client behind a NAT to establish UDP tunnels between two hosts.,Network Service,stun;tcp;udp,STUN v0(RFC 3489);STUN v1(RFC 5389);TURN,4/28/2014,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1303,Q_PROTO_SUA,sua,,SCCP User Adaptation Layer,This protocol defines the transport of SCCP signalization over an IP network through SCTP.,Network Service,sctp,1.2 - RFC 3868,5/16/2014,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,2241,Q_PROTO_SUBWAY_SURFERS,subway_surfers,,Subway Surfers,Mobile game,Game,http;https;spdy,iPhone-iOS-Subway Surfers 1.16.0;Mobile-Android-Subway Surfers 1.16.0,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1101,Q_PROTO_SUGAR_CRM,sugar_crm,,SugarCRM.com,"Sugar CRM, a client relationship management solution.",Web,http;https;spdy,Sugar CRM 6.2.1 - Build 6405,PC-Windows-7-SugarCRM-6.3.0- (2011-12-01),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1477,Q_PROTO_SUGAR_SYNC,sugar_sync,,SugarSync.com,On-line file backup and sync service.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1944,Q_PROTO_SULIT,sulit,x,Sulit.com.ph (now Olx.ph),Filipino online classified ads.,Web,,20131023,PC-Linux-BasicTest- (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,686,Q_PROTO_SUN_ND,sun_nd,,SUN ND PROTOCOL_Temporary,The sun_nd protocol (SUN ND PROTOCOL_Temporary) is found over the IP layer (IANA protocol number: 77).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1422,Q_PROTO_SUNING,suning,,Suning.com,Chinese online shopping.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1945,Q_PROTO_SUPER,super,,Super.cz,Prague based agency represents models from Czech and Slovak Republic.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1157,Q_PROTO_SUPPERSOCCER,suppersoccer,,SupperSoccer.co.id,This protocol plug-in classifies the http traffic to the host m.supersoccer.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,354,Q_PROTO_SURROGAFIER,surrogafier,,Surrogafier.info,This protocol plug-in classifies the http traffic to the hosts surrogafier.info and go.vfserver.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1056,Q_PROTO_SURVEYMONKEY,surveymonkey,,SurveyMonkey.com,This protocol plug-in classifies the http traffic to the host surveymonkey.com. It also classifies the ssl traffic to the Common Name .surveymonkey.com.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1109,Q_PROTO_SVN,svn,,Subversion,"Subversion, version control system.",Network Service,http;https;spdy;tcp,2,PC-Linux-svn-1.7.2- (2012-01-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,855,Q_PROTO_SVTPLAY,svtplay,,SVT Play,Sveriges Television video-on-demand website.,Web,akamai;http;https;spdy;ssl,PC-Windows-Browser-www.svt.se (2014-05-15);Mobile-Android-SVT Play 3.1.0 (2014-02-27);iPhone-iOS-SVT Play 2.1.0 (2014-02-27);Windows Phone-Windows Phone OS-SVT Play 0.1.0.2511 (2014-02-26),Mobile-Android-4.4.2-SVTPlay-4.0.0- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);Windows Phone-Windows Phone OS-8-SVTPlay-0.1.0.3064- (2014-07-11);iPhone-iOS-7.1.1-SVTPlay-3.0.1- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1777,Q_PROTO_SWEDBANK,swedbank,,Swedbank.ee,Estonian online banking and investment web portal,Web,http;https;spdy;ssl,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1740,Q_PROTO_SWEPIRACY,swepiracy,,Swepiracy Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,721,Q_PROTO_SWIPE,swipe,,IP with Encryption,The swipe protocol (IP with Encryption) is found over the IP layer (IANA protocol number: 53).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,947,Q_PROTO_SYBASE,sybase,,Sybase,Sybase protocols are used to exchange messages (namely authentication and SQL queries) between database clients and servers developed by the Sybase Company.,Database,mobilink;tds,5.0,10/11/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,2250,Q_PROTO_SYMANTEC,symantec,,Symantec,"Symantec Corporation makes security, storage, backup and availability software.",Web,http;https;ocsp;spdy;ssl,2294,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,202,Q_PROTO_SYNC,sync,,Sync,The Sync protocol is an RPC service allowing data synchronisation.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, +,203,Q_PROTO_SYNFLOOD,synflood,x,TCP Syn flood,This plug-in is no longer supported.,Standard,tcp,na,10/2/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,204,Q_PROTO_SYSLOG,syslog,,Syslog,Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.,Application Service,tcp;udp,RFC3164,PC-Windows-CorreLog/WinSyslog- (2012-03-01),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,525,Q_PROTO_T38,t38,,T.38,This protocol is used to exchanges FAXes on top on TCP/IP.,Network Service,rtp;tcp;udp,T38 v3,7/2/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,1763,Q_PROTO_T_ONLINE,t_online,,T-Online.de,T-Online Deutch ISP web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,x,,,,,,,,,,,, +,1326,Q_PROTO_TABELOG,tabelog,,Tabelog.com,Online Japanese restaurant guide,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1085,Q_PROTO_TACACS_PLUS,tacacs_plus,,Terminal Access Controller Access-Control System Plus,"TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco Systems proprietary protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.",Authentication,tcp,1.78,11/2/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, +,285,Q_PROTO_TAGGED,tagged,,Tagged.com,"Tagged is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;spdy,20090528,12/1/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,856,Q_PROTO_TAGOO,tagoo,,Tagoo.ru,This protocol plug-in classifies the http traffic to the host tagoo.ru. It also classifies the ssl traffic to the Common Name tagoo.ru.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1423,Q_PROTO_TAIWANLOTTERY,taiwanlottery,,Taiwanlottery.com.tw,Taiwan lottery website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,857,Q_PROTO_TAKU_FILE_BIN,taku_file_bin,,Taku File Bin (aka filesend.to),"Japanese Direct Download web platform, allowing free sharing of large files.",Web,http;https;spdy;ssl,20140320,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,493,Q_PROTO_TALENTTROVE,talenttrove,,Lafango (formerly TalentTrove),Lafango (aka TalentTrove) is a media sharing and social network website.,Web,http;https;spdy;ssl,20140617,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,494,Q_PROTO_TALKBIZNOW,talkbiznow,,Talkbiznow.com,This protocol plug-in classifies the http traffic to the host talkbiznow.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,495,Q_PROTO_TALTOPIA,taltopia,,Taltopia.com,This protocol plug-in classifies the http traffic to the host taltopia.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1741,Q_PROTO_TAMILTHUNDER_COM,tamilthunder_com,,Tamilthunder Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,598,Q_PROTO_TANGO,tango,,Tango Video Calls,Tango is an embedded smartphone application dedicated to audio/video-conference.,Audio/Video,amazon_aws;google_gen;http;https;jabber;spdy;ssl;stun;tcp;udp,Mobile-Windows (2014-02-12);Mobile-Android (2014-06-10);iPhone-iOS (2014-06-04),Mobile-Android-4.4.2-Tango-3.7.91828- (2014-06-30);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-7-Tango-1.6.14117- (2014-06-13);iPhone-iOS-7.1.1-Tango-3.7.91338- (2014-07-02),,x,,x,,,,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1098,Q_PROTO_TAOBAO,taobao,,Taobaocdn.com,This protocol plug-in classifies the http traffic to the hosts taobaocdn.com and taobao.com. It also classifies the ssl traffic to the Common Name .taobao.com.,Web,http;https;spdy;ssl,20111121,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2215,Q_PROTO_TAPATALK,tapatalk,,Tapatalk,Mobile app which allows to browse forums.,Forum,google_analytics;http;https;spdy;ssl,Mobile-Android-Tapatalk 4.3.4;iPhone-iOS-Tapatalk 2.5.1,Mobile-Android-Tapatalk-4.3.4- (2014-03-27);iPhone-iOS-Tapatalk-2.5.1- (2014-03-27),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, +,496,Q_PROTO_TARINGA,taringa,,Taringa.net,This protocol plug-in classifies the http traffic to the host taringa.net.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2072,Q_PROTO_TASWEERNEWS,tasweernews,,Tasweernews.com,Jordanian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2138,Q_PROTO_TAWARY,tawary,,Tawary.com,Mauritanian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2205,Q_PROTO_TAYYAR,tayyar,,Tayyar,Lebaneese news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,687,Q_PROTO_TCF,tcf,,TCF,The tcf protocol (TCF) is found over the IP layer (IANA protocol number: 87).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,321,Q_PROTO_TCHATCHE,tchatche,,tchatche,Tchatche is an instant messaging website.,Web,http;https;spdy,20080118,7/17/2009,,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +,205,Q_PROTO_TCP,tcp,,Transmission Control Protocol,TCP is a protocol providing a connection-oriented and reliable transfer service. It is used by most TCP/IP applications today.,Network Service,dns;ip;ip6,TCP v2,10/28/2010,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1084,Q_PROTO_TCP_OVER_DNS,tcp_over_dns,,AnalogBit tcp-over-dns,Tcp-over-dns contains a special dns server and a special dns client. The client and server work in tandem to provide a TCP and UDP tunnel through the standard DNS protocol.,Tunneling,dns,tcp-over-dns v.1.3,10/20/2011,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,208,Q_PROTO_TDS,tds,,Tabular Data Stream,TDS protocol is used to communicate between SQL applications and a SQL Server.,Database,tcp,tds5;tds7/8;Microsoft SQL Server 2008;Sybase,8/14/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,858,Q_PROTO_TEACHERTUBE,teachertube,,TeacherTube.com,This protocol plug-in classifies the http traffic to the hosts teachertube.com and teachertube.biz.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,497,Q_PROTO_TEACHSTREET,teachstreet,,TeachStreet.com,This protocol plug-in classifies the http traffic to the host teachstreet.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,526,Q_PROTO_TEAMSPEAK,teamspeak,,Teamspeak v2,The proprietary TeamSpeak2 protocol is used by gamers and oriented TeamSpeak2 VoIP software.,Instant Messaging,udp,Teamspeak-V2,12/16/2011,,,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, +,1120,Q_PROTO_TEAMSPEAK_V3,teamspeak_v3,,TeamSpeak v3,TeamSpeak 3 continues the legacy of the original TeamSpeak communication system. TeamSpeak 3 is not merely an extension of its predecessors but rather a complete rewrite in C++ of its proprietary protocol and core technology.,Instant Messaging,http;https;spdy;tcp;udp,32bits 3.0.3 PC-clt;amd64 3.0.1 PC-srv;3.0.0-beta Android-clt,Mobile-Android-Teamspeak-3.0.0 beta- (2012-04-10);PC-Windows-Teamspeak-3.0.3- (2012-04-10),,x,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, +,545,Q_PROTO_TEAMVIEWER,teamviewer,,teamviewer,"TeamViewer is an application that enables a connection to a remote computer in order to perform maintenance operations. It is also possible to show the current display to a remote computer, to transfer files, and to create a VPN tunnel.",Thin Client,http;https;spdy;tcp;udp,5;6,11/23/2010,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,859,Q_PROTO_TECHINLINE,techinline,,Techinline.com,This protocol plug-in classifies the http traffic to the host techinline.com. It also classifies the ssl traffic to the Common Name techinline.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1760,Q_PROTO_TELEGRAAF,telegraaf,,Telegraaf.nl,Dutch news web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1785,Q_PROTO_TELEGRAF,telegraf,,Telegraf.rs,Serbian web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2198,Q_PROTO_TELEGRAFI,telegrafi,,Telegrafi,Albanian news and media portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2240,Q_PROTO_TELEGRAM,telegram,,Telegram,Telegram is an instant messaging protocol like Whatsapp.,Instant Messaging,tcp,Mobile-Android-Telegram 1.4.12;iPhone-iOS-Telegram 2.1,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,209,Q_PROTO_TELNET,telnet,,Telnet,"Telnet provides a fairly general, bi-directional, eight-bit byte oriented communications facility. Its primary aim is to provide a standard method of interfacing between terminal devices and terminal-oriented processes.",Terminal,tcp,RFC 854,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,210,Q_PROTO_TELNETS,telnets,,Secure TELNET,Secure version of the Telnet.,Terminal,ssl,RFC 854,,,,,,,992,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,2291,Q_PROTO_TELTEL,teltel,,Teltel,VOIP software which allows calling other teltel users.,Audio/Video,http;https;spdy;ssl,1.0.3122.2 Beta,7/11/2014,,x,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, +,1142,Q_PROTO_TEMPOINTERAKTIF,tempointeraktif,,TempoInteraktif.com,This protocol plug-in classifies the http traffic to the hosts tempointeraktif.com and tempo.co.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1424,Q_PROTO_TENCENT,tencent,,Tencent.com,"Instant communications service provider in Asia, providing corporate and personal instant messaging, online entertainment and value-added services.",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,555,Q_PROTO_TEREDO,teredo,,Teredo protocol,"The Teredo protocol enables IPv6 tunnelling over UDP, traversing NATs, and with minimum over-head.",Tunneling,udp,20101214,12/14/2010,,,,x,teredo,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1057,Q_PROTO_TF1,tf1,,TF1.fr,This protocol plug-in classifies the http traffic to the host tf1.fr.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,211,Q_PROTO_TFTP,tftp,,Trivial File Transfer Protocol,Trivial File Transfer Protocol (TFTP) is a file transfer protocol that is simpler to use than the File Transfer Protocol (FTP) but that proposes less features. TFTP uses the User Datagram Protocol (UDP) rather than the Transmission Control Protocol (TCP).,File Server,udp,TFTP v2,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +,1425,Q_PROTO_TGBUS,tgbus,,Tgbus.com,Chinese games portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,362,Q_PROTO_THE_AUTEURS,the_auteurs,x,The Auteurs,This protocol plug-in used to classify the http traffic to the host theauteurs.com.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2179,Q_PROTO_THE_SIMPSONS_TAPPED_OUT,the_simpsons_tapped_out,,The Simpsons: Tapped Out,Mobile game (EA Games).,Game,http;https;spdy;ssl,Mobile-Android-The Simpsons: Tapped Out 4.6.0;iPhone-iOS-The Simpsons: Tapped Out 4.6.1,Mobile-Android-The Simpsons: Taped Out-4.6.0- (2014-03-13);iPhone-iOS-The Simpsons: Taped Out-4.6.1- (2014-03-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,1484,Q_PROTO_THEPIRATEBAY,thepiratebay,,ThePirateBay.se,The most popular Swedish Torrent indexing website.,Web,http;https;spdy;ssl,20130713,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1158,Q_PROTO_THREE,three,,Three.co.id - tri.co.id,This protocol plug-in classifies the http traffic to the hosts three.co.id and tri.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,274,Q_PROTO_THUNDER,thunder,,Xunlei/Thunder protocol,"Xunlei/Thunder is a Chinese multi-protocol download manager. It uses several DDL websites and P2P protocols to retrieve files. This plug-in only classifies Thunder-specific P2P protocols, and miscellaneous HTTP/HTTPS traffic related to the Xunlei/Thunder application. Downloads made by the application from public HTTP or FTP websites won't be classified as thunder, but as http and ftp_data for most of them. The usage of third party P2P protocols won't be classified as thunder, but as bittorrent or edonkey instead. UDP classification of Thunder/Xunlei streams is extended using DNS Caching.",Peer to Peer,http;https;ip;scorecardresearch;socks4;socks5;spdy;tcp;udp,PC-Windows-Thunder 5.0;PC-Windows-Thunder 7.9.10,Mobile-Android-4.2.1-Xunlei-3.3.2.2118- (2014-06-12);Mobile-Android-4.4.2-Xunlei-3.3.2.2118-CN (2014-06-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-26);PC-Windows-7-Xunlei-5.9.28.1564- (2014-06-10);PC-Windows-7-Xunlei-5.9.28.1564-CN (2014-06-12);PC-Windows-7-Xunlei-7.9.22.4780- (2014-06-11);PC-Windows-7-Xunlei-7.9.23.4792-CN (2014-06-24),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1253,Q_PROTO_TIANYA,tianya,,Tianya.cn,This protocol plug-in classifies the http traffic to the host tianya.cn.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,212,Q_PROTO_TIBCORDV,tibcordv,,TIBCO RendezVous Protocol,This protocol is used in the bank sector.,Network Service,udp,tibcordv v1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1226,Q_PROTO_TICKETMONSTER,ticketmonster,,Ticketmonster.co.kr,This protocol plug-in classifies the http traffic to the host ticketmonster.co.kr.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,860,Q_PROTO_TIDALTV,tidaltv,,Portal.TidalTV.com,This protocol plug-in classifies the http traffic to the host portal.tidaltv.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2297,Q_PROTO_TIGERAIR,tigerair,,tigerair,Singaporian online travel agency.,Web,http;https;spdy,PC-Windows-Google Chrome-www.tigerair.com (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,934,Q_PROTO_TIME,time,,Time Protocol,"This protocol provides a site-independent, machine readable date and time.",Network Service,tcp;udp,RFC 868,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,2073,Q_PROTO_TIMESOFMALTA,timesofmalta,,Timesofmalta.com,Maltese news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1227,Q_PROTO_TISTORY,tistory,,Tistory.com,This protocol plug-in classifies the http traffic to the host tistory.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,688,Q_PROTO_TLSP,tlsp,,Transport Layer Security,The tlsp protocol (Transport Layer Security) is found over the IP layer (IANA protocol number: 56).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1246,Q_PROTO_TMALL,tmall,,Tmal.com,This protocol plug-in classifies the http traffic to the host tmall.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,213,Q_PROTO_TNS,tns,,Transparent Network Service (Oracle),"Transparent Network Service (TNS) is the Oracle (version 8 or higher) networking technology that provides a single application interface to all industry-standard networking protocols. To connect to a database, users initiate a connect request by passing information (username and password) along with a short name for the database service they wish to connect to.",Database,tcp,oracle8i;oracle9i;oracle10g;oracle11g,7/4/2008,,,,x,tns,,,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +,214,Q_PROTO_TNVIP,tnvip,,Telnet VIP,Telnet VIP is an emulation of the Telnet protocol for VIP (Visual Information Projection) terminals.,Terminal,telnet,Tnvip v1,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,1791,Q_PROTO_TO_MATI,to_mati,,To-mati.net,Greek web portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2295,Q_PROTO_TOGGLE,toggle,,Toggle,Singaporian video streaming website.,Web,http;https;spdy,PC-Windows-Google Chrome-www.toggle.sg (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,861,Q_PROTO_TOKBOX,tokbox,,Tokbox.com,This protocol plug-in classifies the http traffic to the host tokbox.com. It also classifies the ssl traffic to the Common Name .tokbox.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1133,Q_PROTO_TOKOBAGUS,tokobagus,,Tokobagus.com,This protocol plug-in classifies the http traffic to the host tokobagus.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,2266,Q_PROTO_TONATON,tonaton,,Tonaton,Ghanean classified ads website.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2160,Q_PROTO_TOP_CHANNEL,top_channel,,Top.channel,Albanina tv streaming website,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2139,Q_PROTO_TOPKY,topky,,Topky.sk,Slovak news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,895,Q_PROTO_TOR,tor,,Tor,Tor is an application that intends to provide online anonymity.,Encrypted,https;ssl,0.2.1.30,10/8/2012,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,2074,Q_PROTO_TORG,torg,,Torg.com,Uzbek classified ads,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1058,Q_PROTO_TORRENTDOWNLOADS,torrentdownloads,,TorrentDownloads.net,Bittorrent tracker search engine,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1059,Q_PROTO_TORRENTZ,torrentz,,Torrentz.com,This protocol plug-in classifies the http traffic to the hosts torrentz.com and torrentz.eu.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1568,Q_PROTO_TOUCH,touch,,touch,"Touch is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,http;https;spdy;ssl;tcp,PC-Windows-Touch 3.4.3,BlackBerry-BlackBerry OS-7.1-Touch-3.4- (2014-04-15);Mobile-Android-4.4.2-Touch-3.4.4- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);iPhone-iOS-7.0.4-Touch-3.4.4- (2014-02-20),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,2259,Q_PROTO_TOWER_OF_SAVIORS,tower_of_saviors,,Tower of Saviors,Mobile game,Game,amazon_aws;google_ads;http;https;spdy,Mobile-Android-Tower of Saviors 4.62;iPhone-iOS-Tower of Saviors 4.62,PC-Linux-BasicTest- (2014-05-27),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,718,Q_PROTO_TP_PLUS_PLUS,tp_plus_plus,,TP++ Transport Protocol,The tp_plus_plus protocol (TP++ Transport Protocol) is found over the IP layer (IANA protocol number: 39).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1947,Q_PROTO_TRADEME,trademe,,Trademe.co.nz,New Zealander online trading site.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1972,Q_PROTO_TRANSFERBIGFILES_COM,transferbigfiles_com,,transferbigfiles.com,Classifies web browsing on the transferbigfiles.com Direct DownLoad links service.,Web,http;https;spdy;ssl,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,498,Q_PROTO_TRAVBUDDY,travbuddy,,TravBuddy.com,This protocol plug-in classifies the http traffic to the host travbuddy.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,499,Q_PROTO_TRAVELLERSPOINT,travellerspoint,,Travellerspoint.com,This protocol plug-in classifies the http traffic to the host travellerspoint.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,291,Q_PROTO_TRAVELOCITY,travelocity,,Travelocity.com,This protocol plug-in classifies the http traffic to the host travelocity.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1164,Q_PROTO_TRAVIAN,travian,,Travian.co.id,This protocol plug-in classifies the http traffic to the host travian.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2140,Q_PROTO_TREND,trend,,Trend.az,Azerbaijani news portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,712,Q_PROTO_TRENDMICRO_UPDATE,trendmicro_update,,Trendmicro Update protocol,Trendmicro_update is the protocol used for trendmicro softwares updates.,Web,http;https;spdy,Trendmicro Antivirus 13.0.1303,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,500,Q_PROTO_TRIBE,tribe,,Tribe.net,This protocol plug-in classifies the http traffic to the host tribe.net.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1161,Q_PROTO_TRIBUNNEWS,tribunnews,,Tribunnews.com,This protocol plug-in classifies the http traffic to the host tribunnews.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2275,Q_PROTO_TRINIDADEXPRESS,trinidadexpress,,Trinidadexpress,Trinidadian news portal.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,303,Q_PROTO_TROMBI,trombi,,Trombi.com,This protocol plug-in classifies the http traffic to the host trombi.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,689,Q_PROTO_TRUNK_1,trunk_1,,Trunk 1,The trunk_1 protocol (Trunk 1) is found over the IP layer (IANA protocol number: 23).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,690,Q_PROTO_TRUNK_2,trunk_2,,Trunk 2,The trunk_2 protocol (Trunk 2) is found over the IP layer (IANA protocol number: 24).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2277,Q_PROTO_TRUSTE,truste,,TRUSTe,"TRUSTe is the leading online privacy management services provider offering a broad suite of consumer, advertising, mobile, cloud and data privacy solutions.",Web,http;https;spdy;ssl,20140423,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,691,Q_PROTO_TTP,ttp,,TTP,The ttp protocol (TTP) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1060,Q_PROTO_TU,tu,,Tu.tv,This protocol plug-in classifies the http traffic to the host tu.tv.,Audio/Video,http;https;spdy;ssl,PC-Windows-Browser-www.tu.tv (2013-07-13),PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1061,Q_PROTO_TUBE8,tube8,,Tube8.com,This protocol plug-in classifies the http traffic to the host tube8.com.,Web,http;https;spdy,PC-Windows-Browser-www.tube8.com (2014-03-14),PC-Linux-Chrome-35.0.1916.153- (2014-07-08),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,862,Q_PROTO_TUDOU,tudou,,Tudou.com,This protocol plug-in classifies the http traffic to the hosts tudou.com and at-img4.tdimg.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,501,Q_PROTO_TUENTI,tuenti,,Tuenti.com,This protocol plug-in classifies the http traffic to the host tuenti.com. It also classifies the ssl traffic to the Common Name .tuenti.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,502,Q_PROTO_TUMBLR,tumblr,,Tumblr.com,This protocol plug-in classifies the http traffic to the host tumblr.com. It also classifies the ssl traffic to the Common Name TUMBLR.COM.,Web,apple_hls;http;https;spdy;ssl,PC-Windows-Browser-www.tumblr.com (2014-03-14);iPhone-iOS-tumblr 3.5.6 (2014-03-09);Mobile-Android-tumblr 3.5.6.02 (2014-03-08),Mobile-Android-4.4.2-Post To Tumblr-3.6.2.02- (2014-07-08);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-09);PC-Windows-7-Chrome-35.0.1916.153-Post To Tumblr-4.19- (2014-07-03);Windows Phone-Windows Phone OS-Tumblr-1.0.1.7- (2014-02-14);iPhone-iOS-7.1.1-Tumblr-3.6.1- (2014-06-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1181,Q_PROTO_TUNEIN,tunein,,TuneIn,This protocol plug-in classifies the http traffic to the hosts tunein.com and radiotime.com.,Audio/Video,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1466,Q_PROTO_TUNEWIKI,tunewiki,,TuneWiki.com,"Lyrics and photos sharing webservice, available in web and mobile-app versions.",Web,http;https;spdy,Web version (20130425),PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1948,Q_PROTO_TUNISIA_SAT,tunisia_sat,,Tunisia-Sat.com,Tunisian forum hosting platform.,Web,http;https;spdy,20131023,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2236,Q_PROTO_TURN,turn,,Turn,"Turn provides audience, campaign and analytics services.",Web,http;https;spdy,20140412,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1949,Q_PROTO_TUT,tut,,Tut.by,Belarusian internet portal.,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1062,Q_PROTO_TV,tv,,Tv.com,This protocol plug-in classifies the http traffic to the host .tv.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1792,Q_PROTO_TV2,tv2,,Tv2.dk,Danish news portal,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,863,Q_PROTO_TV4PLAY,tv4play,,Tv4Play.se,This protocol plug-in classifies the http traffic to the hosts tv4play.se and .tv4.se. It also classifies the ssl traffic to the Common Name ec2-184-73-252-58.compute-1.amazonaws.com.,Web,http;https;spdy;ssl;videoplaza,PC-Windows-Browser-www.tv4play.se (2013-11-04);iPhone-iOS-TV4 Play 2.4.0;Mobile-Android-TV4 Play 2.2.0,Mobile-Android-4.4.2-TV4 Play-2.5.3- (2014-05-13);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);iPhone-iOS-7.1.2-TV4 Play-2.5.3- (2014-07-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,546,Q_PROTO_TVANTS,tvants,,TVAnts Protocol,"TVAnts is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite as well as WebTV.",Audio/Video,tcp;udp,1.0.59,10/5/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,1911,Q_PROTO_TVKING,tvking,,TvKing,TvKing is an application which is able to get video stream lists from its own web site and from other ones. Classifies HTTP web browsing only.,Web,http;https;spdy,20131107,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +,2141,Q_PROTO_TVNET,tvnet,,Tvnet.lv,Latvian news and content portal,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,575,Q_PROTO_TVUPLAYER,tvuplayer,,TVU Network Player,TVUPlayer is an application intended to watch TV in peer_to-peer.,Audio/Video,http;https;spdy;ssl;tcp;udp,>=2.5.3,PC-Windows-TVUPlayer-2.5.3.1- (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,864,Q_PROTO_TWITPIC,twitpic,,Twitpic,Photo sharing web service dedicated to Twitter. This service enable users to share photos with their Twitter followers on web browser and mobile devices.,Web,amazon_aws;http;https;spdy;ssl,PC-Windows-Browser-www.twitpic.com (2014-02-25);Mobile-Android-Twitpic 1.2.1 (2014-02-25);iPhone-iOS-Twitpic 1.2.1 (2014-02-26),Mobile-Android-4.1.2-Twitpic-1.2.1- (2014-02-25);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-24);iPhone-iOS-7.0.4-Twitpic-1.2.1- (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,503,Q_PROTO_TWITTER,twitter,,Twitter.com,Online microblogging service that enables its users to read and send text-based short messages.,Web,http;https;spdy;ssl,PC-Windows-Browser (2014-03-07);PC-Windows-Twitter REST API 1.0;Mobile-Android-Twitter 5.2.1 (2014-03-09);iPhone-iOS-Twitter 6.0.2,Mobile-Moto G-Android-4.4.2-Twitter-5.14.0- (2014-06-23);PC-Windows-7-Chrome-34.0.1847.131-Twitter for Chrome-2.2- (2014-05-06);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-03);PC-Windows-8.1-Twitter-1.1.13.8- (2014-06-17);Windows Phone-Nokia Lumia 1320-Windows Phone OS-8.0.10517.155-Twitter-3.1.0.0- (2014-05-28);iPhone-4S-iOS-7.1.1-Twitter-6.8.1- (2014-07-10),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, +,1501,Q_PROTO_UBUNTU_ONE,ubuntu_one,,Ubuntu One,Ubuntu One is a cloud file storage service available on PC and smartphones.,Application Service,https;spdy;ssl,"4.1.91(Windows),20130627(Android)",PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1759,Q_PROTO_UCOZ,ucoz,,uCoz.ru,uCoz is a free web hosting with a built-in content management system.,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,215,Q_PROTO_UCP,ucp,,Universal Computer Protocol,Universal Computer Protocol is used by some mobile phones to send SMS.,Wap,tcp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, +,1426,Q_PROTO_UDN,udn,,Udn.com,Taiwan news site.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,216,Q_PROTO_UDP,udp,,User Datagram Protocol,The User Datagram Protocol is a transport protocol providing a simple but non-reliable message transfer service in IP networks. It is used by most applications that do not require a reliable delivery transmission service.,Network Service,ip;ip6,UDP v1,7/4/2008,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,692,Q_PROTO_UDPLITE,udplite,,UDPLite,The udplite protocol (Connectionless protocol very similar to UDP) is found over the IP layer (IANA protocol number: 136).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2167,Q_PROTO_ULTIMAHORA,ultimahora,,Ultimahora,Honduran news portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1967,Q_PROTO_ULTRASHARE_NET,ultrashare_net,,ultrashare.net,Classifies web browsing on the ultrashare.net Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1238,Q_PROTO_ULTRASURF,ultrasurf,,Ultrasurf,"Ultrasurf is a tunneling protocol used by the Ultrasurf software for Windows. The classification is based on an IP address range analysis.,This protocol is not supported with Basic DPI over https.",Tunneling,http;https;ip;spdy;ssl,"10.08,12.02",PC-Windows-Ultrasurf-u12.02- (2012-08-09),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,1576,Q_PROTO_UNASSIGNED_IP_PROT_143,unassigned_ip_prot_143,,IANA Unassigned Internet Protocol Number 143,The unassigned_ip_prot_143 protocol (IANA Unassigned Internet Protocol Number 143) is found over the IP layer (IANA protocol number: 143).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1577,Q_PROTO_UNASSIGNED_IP_PROT_144,unassigned_ip_prot_144,,IANA Unassigned Internet Protocol Number 144,The unassigned_ip_prot_144 protocol (IANA Unassigned Internet Protocol Number 144) is found over the IP layer (IANA protocol number: 144).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1578,Q_PROTO_UNASSIGNED_IP_PROT_145,unassigned_ip_prot_145,,IANA Unassigned Internet Protocol Number 145,The unassigned_ip_prot_145 protocol (IANA Unassigned Internet Protocol Number 145) is found over the IP layer (IANA protocol number: 145).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1579,Q_PROTO_UNASSIGNED_IP_PROT_146,unassigned_ip_prot_146,,IANA Unassigned Internet Protocol Number 146,The unassigned_ip_prot_146 protocol (IANA Unassigned Internet Protocol Number 146) is found over the IP layer (IANA protocol number: 146).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1580,Q_PROTO_UNASSIGNED_IP_PROT_147,unassigned_ip_prot_147,,IANA Unassigned Internet Protocol Number 147,The unassigned_ip_prot_147 protocol (IANA Unassigned Internet Protocol Number 147) is found over the IP layer (IANA protocol number: 147).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1581,Q_PROTO_UNASSIGNED_IP_PROT_148,unassigned_ip_prot_148,,IANA Unassigned Internet Protocol Number 148,The unassigned_ip_prot_148 protocol (IANA Unassigned Internet Protocol Number 148) is found over the IP layer (IANA protocol number: 148).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1582,Q_PROTO_UNASSIGNED_IP_PROT_149,unassigned_ip_prot_149,,IANA Unassigned Internet Protocol Number 149,The unassigned_ip_prot_149 protocol (IANA Unassigned Internet Protocol Number 149) is found over the IP layer (IANA protocol number: 149).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1583,Q_PROTO_UNASSIGNED_IP_PROT_150,unassigned_ip_prot_150,,IANA Unassigned Internet Protocol Number 150,The unassigned_ip_prot_150 protocol (IANA Unassigned Internet Protocol Number 150) is found over the IP layer (IANA protocol number: 150).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1584,Q_PROTO_UNASSIGNED_IP_PROT_151,unassigned_ip_prot_151,,IANA Unassigned Internet Protocol Number 151,The unassigned_ip_prot_151 protocol (IANA Unassigned Internet Protocol Number 151) is found over the IP layer (IANA protocol number: 151).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1585,Q_PROTO_UNASSIGNED_IP_PROT_152,unassigned_ip_prot_152,,IANA Unassigned Internet Protocol Number 152,The unassigned_ip_prot_152 protocol (IANA Unassigned Internet Protocol Number 152) is found over the IP layer (IANA protocol number: 152).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1586,Q_PROTO_UNASSIGNED_IP_PROT_153,unassigned_ip_prot_153,,IANA Unassigned Internet Protocol Number 153,The unassigned_ip_prot_153 protocol (IANA Unassigned Internet Protocol Number 153) is found over the IP layer (IANA protocol number: 153).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1587,Q_PROTO_UNASSIGNED_IP_PROT_154,unassigned_ip_prot_154,,IANA Unassigned Internet Protocol Number 154,The unassigned_ip_prot_154 protocol (IANA Unassigned Internet Protocol Number 154) is found over the IP layer (IANA protocol number: 154).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1588,Q_PROTO_UNASSIGNED_IP_PROT_155,unassigned_ip_prot_155,,IANA Unassigned Internet Protocol Number 155,The unassigned_ip_prot_155 protocol (IANA Unassigned Internet Protocol Number 155) is found over the IP layer (IANA protocol number: 155).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1589,Q_PROTO_UNASSIGNED_IP_PROT_156,unassigned_ip_prot_156,,IANA Unassigned Internet Protocol Number 156,The unassigned_ip_prot_156 protocol (IANA Unassigned Internet Protocol Number 156) is found over the IP layer (IANA protocol number: 156).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1590,Q_PROTO_UNASSIGNED_IP_PROT_157,unassigned_ip_prot_157,,IANA Unassigned Internet Protocol Number 157,The unassigned_ip_prot_157 protocol (IANA Unassigned Internet Protocol Number 157) is found over the IP layer (IANA protocol number: 157).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1591,Q_PROTO_UNASSIGNED_IP_PROT_158,unassigned_ip_prot_158,,IANA Unassigned Internet Protocol Number 158,The unassigned_ip_prot_158 protocol (IANA Unassigned Internet Protocol Number 158) is found over the IP layer (IANA protocol number: 158).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1592,Q_PROTO_UNASSIGNED_IP_PROT_159,unassigned_ip_prot_159,,IANA Unassigned Internet Protocol Number 159,The unassigned_ip_prot_159 protocol (IANA Unassigned Internet Protocol Number 159) is found over the IP layer (IANA protocol number: 159).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1593,Q_PROTO_UNASSIGNED_IP_PROT_160,unassigned_ip_prot_160,,IANA Unassigned Internet Protocol Number 160,The unassigned_ip_prot_160 protocol (IANA Unassigned Internet Protocol Number 160) is found over the IP layer (IANA protocol number: 160).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1594,Q_PROTO_UNASSIGNED_IP_PROT_161,unassigned_ip_prot_161,,IANA Unassigned Internet Protocol Number 161,The unassigned_ip_prot_161 protocol (IANA Unassigned Internet Protocol Number 161) is found over the IP layer (IANA protocol number: 161).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1595,Q_PROTO_UNASSIGNED_IP_PROT_162,unassigned_ip_prot_162,,IANA Unassigned Internet Protocol Number 162,The unassigned_ip_prot_162 protocol (IANA Unassigned Internet Protocol Number 162) is found over the IP layer (IANA protocol number: 162).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1596,Q_PROTO_UNASSIGNED_IP_PROT_163,unassigned_ip_prot_163,,IANA Unassigned Internet Protocol Number 163,The unassigned_ip_prot_163 protocol (IANA Unassigned Internet Protocol Number 163) is found over the IP layer (IANA protocol number: 163).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1597,Q_PROTO_UNASSIGNED_IP_PROT_164,unassigned_ip_prot_164,,IANA Unassigned Internet Protocol Number 164,The unassigned_ip_prot_164 protocol (IANA Unassigned Internet Protocol Number 164) is found over the IP layer (IANA protocol number: 164).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1598,Q_PROTO_UNASSIGNED_IP_PROT_165,unassigned_ip_prot_165,,IANA Unassigned Internet Protocol Number 165,The unassigned_ip_prot_165 protocol (IANA Unassigned Internet Protocol Number 165) is found over the IP layer (IANA protocol number: 165).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1599,Q_PROTO_UNASSIGNED_IP_PROT_166,unassigned_ip_prot_166,,IANA Unassigned Internet Protocol Number 166,The unassigned_ip_prot_166 protocol (IANA Unassigned Internet Protocol Number 166) is found over the IP layer (IANA protocol number: 166).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1600,Q_PROTO_UNASSIGNED_IP_PROT_167,unassigned_ip_prot_167,,IANA Unassigned Internet Protocol Number 167,The unassigned_ip_prot_167 protocol (IANA Unassigned Internet Protocol Number 167) is found over the IP layer (IANA protocol number: 167).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1601,Q_PROTO_UNASSIGNED_IP_PROT_168,unassigned_ip_prot_168,,IANA Unassigned Internet Protocol Number 168,The unassigned_ip_prot_168 protocol (IANA Unassigned Internet Protocol Number 168) is found over the IP layer (IANA protocol number: 168).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1602,Q_PROTO_UNASSIGNED_IP_PROT_169,unassigned_ip_prot_169,,IANA Unassigned Internet Protocol Number 169,The unassigned_ip_prot_169 protocol (IANA Unassigned Internet Protocol Number 169) is found over the IP layer (IANA protocol number: 169).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1603,Q_PROTO_UNASSIGNED_IP_PROT_170,unassigned_ip_prot_170,,IANA Unassigned Internet Protocol Number 170,The unassigned_ip_prot_170 protocol (IANA Unassigned Internet Protocol Number 170) is found over the IP layer (IANA protocol number: 170).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1604,Q_PROTO_UNASSIGNED_IP_PROT_171,unassigned_ip_prot_171,,IANA Unassigned Internet Protocol Number 171,The unassigned_ip_prot_171 protocol (IANA Unassigned Internet Protocol Number 171) is found over the IP layer (IANA protocol number: 171).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1605,Q_PROTO_UNASSIGNED_IP_PROT_172,unassigned_ip_prot_172,,IANA Unassigned Internet Protocol Number 172,The unassigned_ip_prot_172 protocol (IANA Unassigned Internet Protocol Number 172) is found over the IP layer (IANA protocol number: 172).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1606,Q_PROTO_UNASSIGNED_IP_PROT_173,unassigned_ip_prot_173,,IANA Unassigned Internet Protocol Number 173,The unassigned_ip_prot_173 protocol (IANA Unassigned Internet Protocol Number 173) is found over the IP layer (IANA protocol number: 173).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1607,Q_PROTO_UNASSIGNED_IP_PROT_174,unassigned_ip_prot_174,,IANA Unassigned Internet Protocol Number 174,The unassigned_ip_prot_174 protocol (IANA Unassigned Internet Protocol Number 174) is found over the IP layer (IANA protocol number: 174).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1608,Q_PROTO_UNASSIGNED_IP_PROT_175,unassigned_ip_prot_175,,IANA Unassigned Internet Protocol Number 175,The unassigned_ip_prot_175 protocol (IANA Unassigned Internet Protocol Number 175) is found over the IP layer (IANA protocol number: 175).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1609,Q_PROTO_UNASSIGNED_IP_PROT_176,unassigned_ip_prot_176,,IANA Unassigned Internet Protocol Number 176,The unassigned_ip_prot_176 protocol (IANA Unassigned Internet Protocol Number 176) is found over the IP layer (IANA protocol number: 176).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1610,Q_PROTO_UNASSIGNED_IP_PROT_177,unassigned_ip_prot_177,,IANA Unassigned Internet Protocol Number 177,The unassigned_ip_prot_177 protocol (IANA Unassigned Internet Protocol Number 177) is found over the IP layer (IANA protocol number: 177).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1611,Q_PROTO_UNASSIGNED_IP_PROT_178,unassigned_ip_prot_178,,IANA Unassigned Internet Protocol Number 178,The unassigned_ip_prot_178 protocol (IANA Unassigned Internet Protocol Number 178) is found over the IP layer (IANA protocol number: 178).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1612,Q_PROTO_UNASSIGNED_IP_PROT_179,unassigned_ip_prot_179,,IANA Unassigned Internet Protocol Number 179,The unassigned_ip_prot_179 protocol (IANA Unassigned Internet Protocol Number 179) is found over the IP layer (IANA protocol number: 179).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1613,Q_PROTO_UNASSIGNED_IP_PROT_180,unassigned_ip_prot_180,,IANA Unassigned Internet Protocol Number 180,The unassigned_ip_prot_180 protocol (IANA Unassigned Internet Protocol Number 180) is found over the IP layer (IANA protocol number: 180).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1614,Q_PROTO_UNASSIGNED_IP_PROT_181,unassigned_ip_prot_181,,IANA Unassigned Internet Protocol Number 181,The unassigned_ip_prot_181 protocol (IANA Unassigned Internet Protocol Number 181) is found over the IP layer (IANA protocol number: 181).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1615,Q_PROTO_UNASSIGNED_IP_PROT_182,unassigned_ip_prot_182,,IANA Unassigned Internet Protocol Number 182,The unassigned_ip_prot_182 protocol (IANA Unassigned Internet Protocol Number 182) is found over the IP layer (IANA protocol number: 182).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1616,Q_PROTO_UNASSIGNED_IP_PROT_183,unassigned_ip_prot_183,,IANA Unassigned Internet Protocol Number 183,The unassigned_ip_prot_183 protocol (IANA Unassigned Internet Protocol Number 183) is found over the IP layer (IANA protocol number: 183).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1617,Q_PROTO_UNASSIGNED_IP_PROT_184,unassigned_ip_prot_184,,IANA Unassigned Internet Protocol Number 184,The unassigned_ip_prot_184 protocol (IANA Unassigned Internet Protocol Number 184) is found over the IP layer (IANA protocol number: 184).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1618,Q_PROTO_UNASSIGNED_IP_PROT_185,unassigned_ip_prot_185,,IANA Unassigned Internet Protocol Number 185,The unassigned_ip_prot_185 protocol (IANA Unassigned Internet Protocol Number 185) is found over the IP layer (IANA protocol number: 185).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1619,Q_PROTO_UNASSIGNED_IP_PROT_186,unassigned_ip_prot_186,,IANA Unassigned Internet Protocol Number 186,The unassigned_ip_prot_186 protocol (IANA Unassigned Internet Protocol Number 186) is found over the IP layer (IANA protocol number: 186).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1620,Q_PROTO_UNASSIGNED_IP_PROT_187,unassigned_ip_prot_187,,IANA Unassigned Internet Protocol Number 187,The unassigned_ip_prot_187 protocol (IANA Unassigned Internet Protocol Number 187) is found over the IP layer (IANA protocol number: 187).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1621,Q_PROTO_UNASSIGNED_IP_PROT_188,unassigned_ip_prot_188,,IANA Unassigned Internet Protocol Number 188,The unassigned_ip_prot_188 protocol (IANA Unassigned Internet Protocol Number 188) is found over the IP layer (IANA protocol number: 188).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1622,Q_PROTO_UNASSIGNED_IP_PROT_189,unassigned_ip_prot_189,,IANA Unassigned Internet Protocol Number 189,The unassigned_ip_prot_189 protocol (IANA Unassigned Internet Protocol Number 189) is found over the IP layer (IANA protocol number: 189).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1623,Q_PROTO_UNASSIGNED_IP_PROT_190,unassigned_ip_prot_190,,IANA Unassigned Internet Protocol Number 190,The unassigned_ip_prot_190 protocol (IANA Unassigned Internet Protocol Number 190) is found over the IP layer (IANA protocol number: 190).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1624,Q_PROTO_UNASSIGNED_IP_PROT_191,unassigned_ip_prot_191,,IANA Unassigned Internet Protocol Number 191,The unassigned_ip_prot_191 protocol (IANA Unassigned Internet Protocol Number 191) is found over the IP layer (IANA protocol number: 191).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1625,Q_PROTO_UNASSIGNED_IP_PROT_192,unassigned_ip_prot_192,,IANA Unassigned Internet Protocol Number 192,The unassigned_ip_prot_192 protocol (IANA Unassigned Internet Protocol Number 192) is found over the IP layer (IANA protocol number: 192).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1626,Q_PROTO_UNASSIGNED_IP_PROT_193,unassigned_ip_prot_193,,IANA Unassigned Internet Protocol Number 193,The unassigned_ip_prot_193 protocol (IANA Unassigned Internet Protocol Number 193) is found over the IP layer (IANA protocol number: 193).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1627,Q_PROTO_UNASSIGNED_IP_PROT_194,unassigned_ip_prot_194,,IANA Unassigned Internet Protocol Number 194,The unassigned_ip_prot_194 protocol (IANA Unassigned Internet Protocol Number 194) is found over the IP layer (IANA protocol number: 194).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1628,Q_PROTO_UNASSIGNED_IP_PROT_195,unassigned_ip_prot_195,,IANA Unassigned Internet Protocol Number 195,The unassigned_ip_prot_195 protocol (IANA Unassigned Internet Protocol Number 195) is found over the IP layer (IANA protocol number: 195).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1629,Q_PROTO_UNASSIGNED_IP_PROT_196,unassigned_ip_prot_196,,IANA Unassigned Internet Protocol Number 196,The unassigned_ip_prot_196 protocol (IANA Unassigned Internet Protocol Number 196) is found over the IP layer (IANA protocol number: 196).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1630,Q_PROTO_UNASSIGNED_IP_PROT_197,unassigned_ip_prot_197,,IANA Unassigned Internet Protocol Number 197,The unassigned_ip_prot_197 protocol (IANA Unassigned Internet Protocol Number 197) is found over the IP layer (IANA protocol number: 197).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1631,Q_PROTO_UNASSIGNED_IP_PROT_198,unassigned_ip_prot_198,,IANA Unassigned Internet Protocol Number 198,The unassigned_ip_prot_198 protocol (IANA Unassigned Internet Protocol Number 198) is found over the IP layer (IANA protocol number: 198).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1632,Q_PROTO_UNASSIGNED_IP_PROT_199,unassigned_ip_prot_199,,IANA Unassigned Internet Protocol Number 199,The unassigned_ip_prot_199 protocol (IANA Unassigned Internet Protocol Number 199) is found over the IP layer (IANA protocol number: 199).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1633,Q_PROTO_UNASSIGNED_IP_PROT_200,unassigned_ip_prot_200,,IANA Unassigned Internet Protocol Number 200,The unassigned_ip_prot_200 protocol (IANA Unassigned Internet Protocol Number 200) is found over the IP layer (IANA protocol number: 200).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1634,Q_PROTO_UNASSIGNED_IP_PROT_201,unassigned_ip_prot_201,,IANA Unassigned Internet Protocol Number 201,The unassigned_ip_prot_201 protocol (IANA Unassigned Internet Protocol Number 201) is found over the IP layer (IANA protocol number: 201).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1635,Q_PROTO_UNASSIGNED_IP_PROT_202,unassigned_ip_prot_202,,IANA Unassigned Internet Protocol Number 202,The unassigned_ip_prot_202 protocol (IANA Unassigned Internet Protocol Number 202) is found over the IP layer (IANA protocol number: 202).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1636,Q_PROTO_UNASSIGNED_IP_PROT_203,unassigned_ip_prot_203,,IANA Unassigned Internet Protocol Number 203,The unassigned_ip_prot_203 protocol (IANA Unassigned Internet Protocol Number 203) is found over the IP layer (IANA protocol number: 203).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1637,Q_PROTO_UNASSIGNED_IP_PROT_204,unassigned_ip_prot_204,,IANA Unassigned Internet Protocol Number 204,The unassigned_ip_prot_204 protocol (IANA Unassigned Internet Protocol Number 204) is found over the IP layer (IANA protocol number: 204).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1638,Q_PROTO_UNASSIGNED_IP_PROT_205,unassigned_ip_prot_205,,IANA Unassigned Internet Protocol Number 205,The unassigned_ip_prot_205 protocol (IANA Unassigned Internet Protocol Number 205) is found over the IP layer (IANA protocol number: 205).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1639,Q_PROTO_UNASSIGNED_IP_PROT_206,unassigned_ip_prot_206,,IANA Unassigned Internet Protocol Number 206,The unassigned_ip_prot_206 protocol (IANA Unassigned Internet Protocol Number 206) is found over the IP layer (IANA protocol number: 206).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1640,Q_PROTO_UNASSIGNED_IP_PROT_207,unassigned_ip_prot_207,,IANA Unassigned Internet Protocol Number 207,The unassigned_ip_prot_207 protocol (IANA Unassigned Internet Protocol Number 207) is found over the IP layer (IANA protocol number: 207).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1641,Q_PROTO_UNASSIGNED_IP_PROT_208,unassigned_ip_prot_208,,IANA Unassigned Internet Protocol Number 208,The unassigned_ip_prot_208 protocol (IANA Unassigned Internet Protocol Number 208) is found over the IP layer (IANA protocol number: 208).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1642,Q_PROTO_UNASSIGNED_IP_PROT_209,unassigned_ip_prot_209,,IANA Unassigned Internet Protocol Number 209,The unassigned_ip_prot_209 protocol (IANA Unassigned Internet Protocol Number 209) is found over the IP layer (IANA protocol number: 209).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1643,Q_PROTO_UNASSIGNED_IP_PROT_210,unassigned_ip_prot_210,,IANA Unassigned Internet Protocol Number 210,The unassigned_ip_prot_210 protocol (IANA Unassigned Internet Protocol Number 210) is found over the IP layer (IANA protocol number: 210).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1644,Q_PROTO_UNASSIGNED_IP_PROT_211,unassigned_ip_prot_211,,IANA Unassigned Internet Protocol Number 211,The unassigned_ip_prot_211 protocol (IANA Unassigned Internet Protocol Number 211) is found over the IP layer (IANA protocol number: 211).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1645,Q_PROTO_UNASSIGNED_IP_PROT_212,unassigned_ip_prot_212,,IANA Unassigned Internet Protocol Number 212,The unassigned_ip_prot_212 protocol (IANA Unassigned Internet Protocol Number 212) is found over the IP layer (IANA protocol number: 212).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1646,Q_PROTO_UNASSIGNED_IP_PROT_213,unassigned_ip_prot_213,,IANA Unassigned Internet Protocol Number 213,The unassigned_ip_prot_213 protocol (IANA Unassigned Internet Protocol Number 213) is found over the IP layer (IANA protocol number: 213).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1647,Q_PROTO_UNASSIGNED_IP_PROT_214,unassigned_ip_prot_214,,IANA Unassigned Internet Protocol Number 214,The unassigned_ip_prot_214 protocol (IANA Unassigned Internet Protocol Number 214) is found over the IP layer (IANA protocol number: 214).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1648,Q_PROTO_UNASSIGNED_IP_PROT_215,unassigned_ip_prot_215,,IANA Unassigned Internet Protocol Number 215,The unassigned_ip_prot_215 protocol (IANA Unassigned Internet Protocol Number 215) is found over the IP layer (IANA protocol number: 215).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1649,Q_PROTO_UNASSIGNED_IP_PROT_216,unassigned_ip_prot_216,,IANA Unassigned Internet Protocol Number 216,The unassigned_ip_prot_216 protocol (IANA Unassigned Internet Protocol Number 216) is found over the IP layer (IANA protocol number: 216).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1650,Q_PROTO_UNASSIGNED_IP_PROT_217,unassigned_ip_prot_217,,IANA Unassigned Internet Protocol Number 217,The unassigned_ip_prot_217 protocol (IANA Unassigned Internet Protocol Number 217) is found over the IP layer (IANA protocol number: 217).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1651,Q_PROTO_UNASSIGNED_IP_PROT_218,unassigned_ip_prot_218,,IANA Unassigned Internet Protocol Number 218,The unassigned_ip_prot_218 protocol (IANA Unassigned Internet Protocol Number 218) is found over the IP layer (IANA protocol number: 218).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1652,Q_PROTO_UNASSIGNED_IP_PROT_219,unassigned_ip_prot_219,,IANA Unassigned Internet Protocol Number 219,The unassigned_ip_prot_219 protocol (IANA Unassigned Internet Protocol Number 219) is found over the IP layer (IANA protocol number: 219).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1653,Q_PROTO_UNASSIGNED_IP_PROT_220,unassigned_ip_prot_220,,IANA Unassigned Internet Protocol Number 220,The unassigned_ip_prot_220 protocol (IANA Unassigned Internet Protocol Number 220) is found over the IP layer (IANA protocol number: 220).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1654,Q_PROTO_UNASSIGNED_IP_PROT_221,unassigned_ip_prot_221,,IANA Unassigned Internet Protocol Number 221,The unassigned_ip_prot_221 protocol (IANA Unassigned Internet Protocol Number 221) is found over the IP layer (IANA protocol number: 221).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1655,Q_PROTO_UNASSIGNED_IP_PROT_222,unassigned_ip_prot_222,,IANA Unassigned Internet Protocol Number 222,The unassigned_ip_prot_222 protocol (IANA Unassigned Internet Protocol Number 222) is found over the IP layer (IANA protocol number: 222).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1656,Q_PROTO_UNASSIGNED_IP_PROT_223,unassigned_ip_prot_223,,IANA Unassigned Internet Protocol Number 223,The unassigned_ip_prot_223 protocol (IANA Unassigned Internet Protocol Number 223) is found over the IP layer (IANA protocol number: 223).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1657,Q_PROTO_UNASSIGNED_IP_PROT_224,unassigned_ip_prot_224,,IANA Unassigned Internet Protocol Number 224,The unassigned_ip_prot_224 protocol (IANA Unassigned Internet Protocol Number 224) is found over the IP layer (IANA protocol number: 224).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1658,Q_PROTO_UNASSIGNED_IP_PROT_225,unassigned_ip_prot_225,,IANA Unassigned Internet Protocol Number 225,The unassigned_ip_prot_225 protocol (IANA Unassigned Internet Protocol Number 225) is found over the IP layer (IANA protocol number: 225).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1659,Q_PROTO_UNASSIGNED_IP_PROT_226,unassigned_ip_prot_226,,IANA Unassigned Internet Protocol Number 226,The unassigned_ip_prot_226 protocol (IANA Unassigned Internet Protocol Number 226) is found over the IP layer (IANA protocol number: 226).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1660,Q_PROTO_UNASSIGNED_IP_PROT_227,unassigned_ip_prot_227,,IANA Unassigned Internet Protocol Number 227,The unassigned_ip_prot_227 protocol (IANA Unassigned Internet Protocol Number 227) is found over the IP layer (IANA protocol number: 227).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1661,Q_PROTO_UNASSIGNED_IP_PROT_228,unassigned_ip_prot_228,,IANA Unassigned Internet Protocol Number 228,The unassigned_ip_prot_228 protocol (IANA Unassigned Internet Protocol Number 228) is found over the IP layer (IANA protocol number: 228).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1662,Q_PROTO_UNASSIGNED_IP_PROT_229,unassigned_ip_prot_229,,IANA Unassigned Internet Protocol Number 229,The unassigned_ip_prot_229 protocol (IANA Unassigned Internet Protocol Number 229) is found over the IP layer (IANA protocol number: 229).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1663,Q_PROTO_UNASSIGNED_IP_PROT_230,unassigned_ip_prot_230,,IANA Unassigned Internet Protocol Number 230,The unassigned_ip_prot_230 protocol (IANA Unassigned Internet Protocol Number 230) is found over the IP layer (IANA protocol number: 230).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1664,Q_PROTO_UNASSIGNED_IP_PROT_231,unassigned_ip_prot_231,,IANA Unassigned Internet Protocol Number 231,The unassigned_ip_prot_231 protocol (IANA Unassigned Internet Protocol Number 231) is found over the IP layer (IANA protocol number: 231).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1665,Q_PROTO_UNASSIGNED_IP_PROT_232,unassigned_ip_prot_232,,IANA Unassigned Internet Protocol Number 232,The unassigned_ip_prot_232 protocol (IANA Unassigned Internet Protocol Number 232) is found over the IP layer (IANA protocol number: 232).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1666,Q_PROTO_UNASSIGNED_IP_PROT_233,unassigned_ip_prot_233,,IANA Unassigned Internet Protocol Number 233,The unassigned_ip_prot_233 protocol (IANA Unassigned Internet Protocol Number 233) is found over the IP layer (IANA protocol number: 233).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1667,Q_PROTO_UNASSIGNED_IP_PROT_234,unassigned_ip_prot_234,,IANA Unassigned Internet Protocol Number 234,The unassigned_ip_prot_234 protocol (IANA Unassigned Internet Protocol Number 234) is found over the IP layer (IANA protocol number: 234).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1668,Q_PROTO_UNASSIGNED_IP_PROT_235,unassigned_ip_prot_235,,IANA Unassigned Internet Protocol Number 235,The unassigned_ip_prot_235 protocol (IANA Unassigned Internet Protocol Number 235) is found over the IP layer (IANA protocol number: 235).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1669,Q_PROTO_UNASSIGNED_IP_PROT_236,unassigned_ip_prot_236,,IANA Unassigned Internet Protocol Number 236,The unassigned_ip_prot_236 protocol (IANA Unassigned Internet Protocol Number 236) is found over the IP layer (IANA protocol number: 236).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1670,Q_PROTO_UNASSIGNED_IP_PROT_237,unassigned_ip_prot_237,,IANA Unassigned Internet Protocol Number 237,The unassigned_ip_prot_237 protocol (IANA Unassigned Internet Protocol Number 237) is found over the IP layer (IANA protocol number: 237).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1671,Q_PROTO_UNASSIGNED_IP_PROT_238,unassigned_ip_prot_238,,IANA Unassigned Internet Protocol Number 238,The unassigned_ip_prot_238 protocol (IANA Unassigned Internet Protocol Number 238) is found over the IP layer (IANA protocol number: 238).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1672,Q_PROTO_UNASSIGNED_IP_PROT_239,unassigned_ip_prot_239,,IANA Unassigned Internet Protocol Number 239,The unassigned_ip_prot_239 protocol (IANA Unassigned Internet Protocol Number 239) is found over the IP layer (IANA protocol number: 239).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1673,Q_PROTO_UNASSIGNED_IP_PROT_240,unassigned_ip_prot_240,,IANA Unassigned Internet Protocol Number 240,The unassigned_ip_prot_240 protocol (IANA Unassigned Internet Protocol Number 240) is found over the IP layer (IANA protocol number: 240).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1674,Q_PROTO_UNASSIGNED_IP_PROT_241,unassigned_ip_prot_241,,IANA Unassigned Internet Protocol Number 241,The unassigned_ip_prot_241 protocol (IANA Unassigned Internet Protocol Number 241) is found over the IP layer (IANA protocol number: 241).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1675,Q_PROTO_UNASSIGNED_IP_PROT_242,unassigned_ip_prot_242,,IANA Unassigned Internet Protocol Number 242,The unassigned_ip_prot_242 protocol (IANA Unassigned Internet Protocol Number 242) is found over the IP layer (IANA protocol number: 242).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1676,Q_PROTO_UNASSIGNED_IP_PROT_243,unassigned_ip_prot_243,,IANA Unassigned Internet Protocol Number 243,The unassigned_ip_prot_243 protocol (IANA Unassigned Internet Protocol Number 243) is found over the IP layer (IANA protocol number: 243).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1677,Q_PROTO_UNASSIGNED_IP_PROT_244,unassigned_ip_prot_244,,IANA Unassigned Internet Protocol Number 244,The unassigned_ip_prot_244 protocol (IANA Unassigned Internet Protocol Number 244) is found over the IP layer (IANA protocol number: 244).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1678,Q_PROTO_UNASSIGNED_IP_PROT_245,unassigned_ip_prot_245,,IANA Unassigned Internet Protocol Number 245,The unassigned_ip_prot_245 protocol (IANA Unassigned Internet Protocol Number 245) is found over the IP layer (IANA protocol number: 245).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1679,Q_PROTO_UNASSIGNED_IP_PROT_246,unassigned_ip_prot_246,,IANA Unassigned Internet Protocol Number 246,The unassigned_ip_prot_246 protocol (IANA Unassigned Internet Protocol Number 246) is found over the IP layer (IANA protocol number: 246).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1680,Q_PROTO_UNASSIGNED_IP_PROT_247,unassigned_ip_prot_247,,IANA Unassigned Internet Protocol Number 247,The unassigned_ip_prot_247 protocol (IANA Unassigned Internet Protocol Number 247) is found over the IP layer (IANA protocol number: 247).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1681,Q_PROTO_UNASSIGNED_IP_PROT_248,unassigned_ip_prot_248,,IANA Unassigned Internet Protocol Number 248,The unassigned_ip_prot_248 protocol (IANA Unassigned Internet Protocol Number 248) is found over the IP layer (IANA protocol number: 248).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1682,Q_PROTO_UNASSIGNED_IP_PROT_249,unassigned_ip_prot_249,,IANA Unassigned Internet Protocol Number 249,The unassigned_ip_prot_249 protocol (IANA Unassigned Internet Protocol Number 249) is found over the IP layer (IANA protocol number: 249).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1683,Q_PROTO_UNASSIGNED_IP_PROT_250,unassigned_ip_prot_250,,IANA Unassigned Internet Protocol Number 250,The unassigned_ip_prot_250 protocol (IANA Unassigned Internet Protocol Number 250) is found over the IP layer (IANA protocol number: 250).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1684,Q_PROTO_UNASSIGNED_IP_PROT_251,unassigned_ip_prot_251,,IANA Unassigned Internet Protocol Number 251,The unassigned_ip_prot_251 protocol (IANA Unassigned Internet Protocol Number 251) is found over the IP layer (IANA protocol number: 251).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1685,Q_PROTO_UNASSIGNED_IP_PROT_252,unassigned_ip_prot_252,,IANA Unassigned Internet Protocol Number 252,The unassigned_ip_prot_252 protocol (IANA Unassigned Internet Protocol Number 252) is found over the IP layer (IANA protocol number: 252).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1063,Q_PROTO_UNIVISION,univision,,Univision.com,This protocol plug-in classifies the http traffic to the host univision.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,4,Q_PROTO_UNKNOWN,unknown,,Unknown virtual protocol,"Unknown is a virtual protocol created for DPI that represents flows that are not recognized by the system. Most of the time, its presence is due to the existence of a business application whose specifications are not made available to the public. Such flows can be defined in the system by means of a User Defined Application.",Standard,8021q;base;eth;ip;ip6;ipx;isl;llc;ppp;rpc;snap;ssl;tcp;udp,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,2075,Q_PROTO_UOL,uol,,UOL.com.br,Brazalian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1970,Q_PROTO_UPLOAD_COM,upload_com,,Upload.cnet.com,Classifies web browsing on the CNET upload.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2013-12-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1963,Q_PROTO_UPLOADED_NET,uploaded_net,,uploaded.net,Classifies web browsing on the uploaded.net Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1064,Q_PROTO_UPLOADING,uploading,,Uploading.com,This protocol plug-in classifies the http traffic to the host uploading.com. It also classifies the ssl traffic to the Common Name api.uploading.com.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1993,Q_PROTO_UPLOADINGIT_COM,uploadingit_com,,uploadingit.com,Classifies web browsing on the uploadingit.com Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1742,Q_PROTO_USABIT_COM,usabit_com,,Usabit Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,1065,Q_PROTO_USATODAY,usatoday,,USAToday.com,This protocol plug-in classifies the http traffic to the host usatoday.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,865,Q_PROTO_USEJUMP,usejump,,Usejump.com,This protocol plug-in classifies the http traffic to the host usejump.com. It also classifies the ssl traffic to the Common Name beta.usejump.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,866,Q_PROTO_USTREAM,ustream,,UStream,Ustream is a live video broadcasting webservice available on PC and mobile platforms.,Web,http;https;rtmp;spdy;ssl,PC-Windows-Browser-www.ustream.tv (2013-10-10),Mac-Mac OS-10.9.3-Ustream-5.0.3- (2014-06-18);Mobile-Android-4.4.2-Ustream-2.6.3- (2014-05-15);PC-Windows-7-Chrome-34.0.1847.137- (2014-05-14);PC-Windows-7-Ustream Producer-5.0.3- (2014-06-11);Windows Phone-Windows Phone OS-7-Browser- (2013-10-18);iPhone-iOS-7.0.4-Ustream-2.4.3- (2014-02-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,694,Q_PROTO_UTI,uti,,UTI,The uti protocol (UTI) is found over the IP layer (IANA protocol number: 120).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2233,Q_PROTO_UTORRENT,utorrent,,uTorrent,uTorrent is a closed source BitTorrent client. This plugin classifies the traffic to the software company. The generated traffic by this software is classified as bittorrent.,Peer to Peer,http;https;spdy,20140403,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,580,Q_PROTO_UTP,utp,,uTP (Micro Transport Protocol),BitTorrent transport layer.,Peer to Peer,udp,;,PC-Windows-7-Utorrent-3.4.1- (2014-04-29),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,, +,743,Q_PROTO_UUSEE,uusee,,UUSee Protocol,"Uusee is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite TV as well as WebTV on PC. It uses the network coding technology.",Audio/Video,http;https;spdy;tcp;udp,20110314,10/6/2011,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,1305,Q_PROTO_V5UA,v5ua,,V5.2-User Adaptation Layer,"V5UA is a transport mechanism for V5.2 messages in an IP network, through SCTP.",Network Service,sctp,1.2 - RFC 3807,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,867,Q_PROTO_VAKAKA,vakaka,,Vakaka.com,This protocol plug-in classifies the http traffic to the host vakaka.com.,Peer to Peer,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,505,Q_PROTO_VAMPIREFREAKS,vampirefreaks,,VampireFreaks.com,This protocol plug-in classifies the http traffic to the host vampirefreaks.com. It also classifies the ssl traffic to the Common Name vampirefreaks.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2142,Q_PROTO_VANGUARDNGR,vanguardngr,,Vanguardngr.com,Nigerian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1950,Q_PROTO_VARZESH3,varzesh3,,Varzesh3.com,Persian online sports new portal.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1951,Q_PROTO_VBOX7,vbox7,,VBOX7.com,Bulgarian video streaming website.,Web,http;https;spdy;ssl,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2201,Q_PROTO_VECERNJI,vecernji,,Vecernji,Crotaian news portal,Web,http;https;spdy,20140318,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1743,Q_PROTO_VECTOR,vector,,Vector Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,868,Q_PROTO_VEETLE,veetle,,Veetle.com,This protocol plug-in classifies the http traffic to the host veetle.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,577,Q_PROTO_VEOHTV,veohtv,,veohtv,VeohTV is a VOD streaming service which includes both client software and a website with embedded flash videos.,Audio/Video,http;https;llnwd;rtmp;spdy;ssl;udp,20101116,PC-Windows-VEOH Player-beta- (2011-10-07),,x,,x,veohtv,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1182,Q_PROTO_VEVO,vevo,,VEVO.com,This protocol plug-in classifies the http traffic to the host .vevo.com.,Audio/Video,http;https;rtmp;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2076,Q_PROTO_VG,vg,,Vg.no,Norwegian news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,304,Q_PROTO_VIADEO,viadeo,,Viadeo.com,Viadeo is a web site designed to manage professional contacts.,Web,http;https;spdy,20101221,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,597,Q_PROTO_VIBER,viber,,viber,"Viber is a free embedded voice over-ip application, for smartphones.",Audio/Video,amazon_aws;http;https;spdy;ssl;tcp;udp,PC-Windows 8.1 (2014-06-10);Mobile-Android (2014-05-14);iPhone-iOS (2014-05-08),Blackberry-Blackberry OS-7.1-Viber-3.1.16- (2014-04-03);Mac-Mac OS-Viber-3.0.0- (2014-02-06);Mobile-Android-4.2.1-Viber-4.3.3.67- (2014-06-05);Mobile-Bada-2.0S8600XXLC3-Viber-2.1.20- (2014-03-04);Nokia Mobile-Nokia Asha 311-Symbian-Viber-2.22.27 - (2014-06-10);PC-Ubuntu-14.04-Viber-3.1.2.3- (2014-06-18);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-25);PC-Windows-7-Viber-3.0.0.134678- (2014-07-04);PC-Windows-8-Viber-3.1.374.0- (2014-06-18);Windows Phone-1320-Windows Phone OS-8.0.10521.155-Viber-4.1.2- (2014-06-02);iPhone-4S-iOS-7.1.1-Viber-4.2.1- (2014-06-02),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +,1066,Q_PROTO_VIDEOBASH,videobash,,VideoBash.com,This protocol plug-in classifies the http traffic to the host videobash.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,2281,Q_PROTO_VIDEOPLAZA,videoplaza,,Videoplaza,"Videoplaza provides tools to broadcasters, publishers and networks to maximise their advert revenues from their video content.",Web,http;https;spdy;ssl,20140513,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1067,Q_PROTO_VIDEOSURF,videosurf,,VideoSurf.com,This protocol plug-in classifies the http traffic to the host videosurf.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1068,Q_PROTO_VIETBAO,vietbao,,VietBao.vn,This protocol plug-in classifies the http traffic to the host vietbao.vn.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2285,Q_PROTO_VIEWPATH,viewpath,,Viewpath,Viewpath is an online project management and collaboration tool.,Web,http;https;spdy;ssl,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2143,Q_PROTO_VIJESTI,vijesti,,Vijesti.me,Serbian news portal.,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1069,Q_PROTO_VIMEO,vimeo,,Vimeo.com,"Vimeo is a high definition video streaming platform, to be accessed from a web browser or mobile applications.",Audio/Video,apple_hls;http;https;mms;spdy;ssl,PC-Windows-Browser-www.vimeo.com (2014-01-06);Mobile-Android-Vimeo 1.1.41,Mobile-Android-4.4.2-Vimeo-1.1.42- (2014-07-11);PC-Windows-7-Chrome-34.0.1847.116-Vimeo Couch Mode-1.0- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-8-Vimeo-1.3.0.0- (2014-07-11);Windows Phone-Windows Phone OS-8-Vimeo-2.2.0.1- (2014-07-11);iPhone-iOS-7.1.1-Vimeo-4.1.2- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +,217,Q_PROTO_VINES,vines,,Vines Banyan Systems,"Vines is a network layer protocol, enabling the routing of packets from the transport layer from one node to the transport layer in another node.",Network Service,8021q;eth;ip;ppp;snap,Vines v7.0,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,695,Q_PROTO_VISA,visa,,VISA,The visa protocol (VISA Protocol) is found over the IP layer (IANA protocol number: 70).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2077,Q_PROTO_VISIR,visir,,Visir.is,Icelandic news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1129,Q_PROTO_VIVANEWS,vivanews,,Vivanews.com,This protocol plug-in classifies the http traffic to the hosts vivanews.com and viva.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,218,Q_PROTO_VJC_COMP,vjc_comp,,Van Jacobson Compressed,"Van Jacobson TCP/IP Header Compression is a data compression protocol described in RFC 1144, specifically designed by Van Jacobson to improve TCP/IP performance.",Tunneling,ppp,RFC 1144,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,219,Q_PROTO_VJC_UNCOMP,vjc_uncomp,,Van Jacobson Uncompressed,"Van Jacobson TCP/IP Header Compression is a data compression protocol described in RFC 1144, specifically designed by Van Jacobson to improve TCP/IP performance.",Tunneling,ppp,RFC 1144,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +,504,Q_PROTO_VKONTAKTE,vkontakte,,Vk.com (Vkontakte),vkontakte is an European social network service popular among Russian-Speaking users. It is quite similar to Facebook.,Forum,http;https;spdy;ssl,Mobile-Android-VK 3.4.1 (2014-03-10);iPhone-iOS-VK 2.0;Windows Phone-Windows Phone OS-VK 3.0.3,BlackBerry-BlackBerry OS-VK for BlackBerry-10.3.9- (2014-04-08);Mobile-Android-4.4.2-VK-3.6- (2014-06-02);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-16);PC-Windows-7-Chrome-35.0.1916.153-VK Offline-4.9- (2014-07-02);PC-Windows-8-VK-1.3.1.0- (2014-06-18);Windows Phone-Windows Phone OS-VK-3.2.0.0- (2014-06-03);iPhone-iOS-7.0.4-VK-2.0- (2014-01-06),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, +,696,Q_PROTO_VMTP,vmtp,,VMTP,The vmtp protocol (VMTP) is found over the IP layer (IANA protocol number: 81).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,220,Q_PROTO_VMWARE,vmware,,VMWare,"VMWare is a protocol used by the VMWare application, allowing it to have network interfaces and remote access to a virtual machine.",Thin Client,tcp,na,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,2144,Q_PROTO_VNEXPRESS,vnexpress,,VnExpress.net,Vietnamese news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,573,Q_PROTO_VODDLER,voddler,,Voddler.com,Voddler is a streaming client application distributing movies and television programming using a patented hybrid peer-to-peer distribution system.,Audio/Video,http;https;spdy;ssl;tcp;udp,20101112,10/3/2011,,x,,x,voddler,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,506,Q_PROTO_VOX,vox,,Vox.com,General news website.,Web,http;https;spdy,20140314,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,221,Q_PROTO_VRRP,vrrp,,Virtual Router Redundancy Protocol,Virtual Router Redundancy Protocol (VRRP) is a protocol designed to eliminate the single point of failure inherent in the static default routed environment. VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN.,Routing,ip,RFC 3768,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1697,Q_PROTO_VSEE,vsee,,Vsee,Vsee is a videoconferencing software.,Audio/Video,http;https;spdy;ssl;udp,13.0.0.814,10/2/2013,,x,,x,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,, +,347,Q_PROTO_VTUNNEL,vtunnel,,Vtunnel.com - Vtunnels.info,"Vtunnel is a WEB proxy allowing the user to bybass firewalls and access restricted resources. This plug-in classifies the HTTP tunneled sessions, including both vtunnel and the tunneled application. When using HTTPs, the Vtunnel service may connect to the Freeproxies.org proxy: the corresponding sessions are then classified as freeproxies.",Web,http;https;spdy;ssl,20131227,12/20/2013,,x,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,,x +,1768,Q_PROTO_VUBE,vube,,Vube.com,Monthly video contest and video sharing website.,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1573,Q_PROTO_VUZE,vuze,,Vuze Bittorrent client,Vuze is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the Vuze client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https;spdy,5.1.0.0,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,869,Q_PROTO_VYEW,vyew,,Vyew.com,This protocol plug-in classifies the http traffic to the host vyew.com. It also classifies the ssl traffic to the Common Name vyew.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,507,Q_PROTO_WAKOOPA,wakoopa,,Wakoopa.com,This protocol plug-in classifies the http traffic to the host wakoopa.com. It also classifies the ssl traffic to the Common Name .wakoopa.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1952,Q_PROTO_WALLA,walla,,Walla.co.il,Israelian internet portal.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1427,Q_PROTO_WALLSTREETJOURNAL_CHINA,wallstreetjournal_china,,Wall Street Journal China (cn.wsj.com),Chinese version of the Wall Street Journal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1428,Q_PROTO_WANDOUJIA,wandoujia,,Wandoujia,Chinese mobile (Android applications.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,508,Q_PROTO_WASABI,wasabi,,Wasabi.com,This protocol plug-in classifies the http traffic to the host wasabi.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1070,Q_PROTO_WASHINGTONPOST,washingtonpost,,WahingtonPost.com,This protocol plug-in classifies the http traffic to the host washingtonpost.com.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1071,Q_PROTO_WAT,wat,,Wat.tv,This protocol plug-in classifies the http traffic to the host wat.tv.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2273,Q_PROTO_WATTAN,wattan,,Wattan,Palestinian multimedia news website.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,509,Q_PROTO_WAYN,wayn,,Wayn.com,This protocol plug-in classifies the http traffic to the host wayn.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2246,Q_PROTO_WAZE,waze,,Waze Social GPS Maps & Traffic,"Waze is a community based mapping, traffic & navigation app.",Web,http;https;spdy;ssl,iPhone-iOS-Waze Social GPS Maps & Traffic 3.7.6;Mobile-Android-Waze Social GPS Maps & Traffic 3.7.6,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,,,, +,697,Q_PROTO_WB_EXPAK,wb_expak,,WIDEBAND EXPAK,The wb_expak protocol (WIDEBAND EXPAK) is found over the IP layer (IANA protocol number: 79).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,698,Q_PROTO_WB_MON,wb_mon,,WIDEBAND Monitoring,The wb_mon protocol (WIDEBAND Monitoring) is found over the IP layer (IANA protocol number: 78).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1072,Q_PROTO_WEATHER,weather,,Weather.com,This protocol plug-in classifies the http traffic to the hosts weather.com and weather.com.cn.,Web,http;https;spdy,20130713,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1793,Q_PROTO_WEATHER2UMBRELLA,weather2umbrella,,Weather2Umbrella.com,World Weather Forecast,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,870,Q_PROTO_WEB_CRAWLER,web_crawler,,WebCrawler.com,This protocol plug-in classifies the http traffic to the host webcrawler.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,510,Q_PROTO_WEBBIOGRAPHIES,webbiographies,,WebBiographies.com,This protocol plug-in classifies the http traffic to the host webbiographies.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,890,Q_PROTO_WEBEX,webex,,WebEx,"WebEx is an online meeting, videoconferencing and collaborative application",Audio/Video,http;https;spdy;ssl;udp,Meeting Center 8.5 (WBS 27) – Client build 27.24.0.10113,6/7/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +,1473,Q_PROTO_WEBEX_WEBOFFICE,webex_weboffice,,Webex WebOffice,WebOffice is a collaboration suite for managing small businesses teams.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,1504,Q_PROTO_WEBSOCKET,websocket,,WebSocket,"The WebSocket Protocol, as described in IETF RFC6455.",Network Service,http,IETF RFC6455,7/25/2013,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +,2276,Q_PROTO_WEBTRETHO,webtretho,,Webtretho,Vietnamese women lifestyle website.,Web,http;https;spdy,20140526,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1296,Q_PROTO_WECHAT,wechat,,WeChat,"WeChat is a text and voice messaging application for mobile. This plug-in classifies file transfers, chat and audio/video calls.",Instant Messaging,http;https;spdy;tcp;udp,PC-Windows-Browser-www.wechat.com (2014-01-28);Mobile-Android-WeChat 5.0.3.1;iPhone-iOS-WeChat 5.0.3,BlackBerry-BlackBerry OS-10.2.1.3175-WeChat-3.0.1.1- (2014-06-18);Mobile-Android-4.2.1-WeChat-5.3.0.96- (2014-07-08);Mobile-Android-4.2.1-WeChat-5.3.0.96-CN (2014-07-03);Nokia Mobile-Symbian-113.010.1506-WeChat-4.2.0- (2014-04-15);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-14);Windows Phone-Windows Phone OS-8-WeChat-5.1.3.1- (2014-05-21);iPhone-iOS-7.1.2-WeChat-5.3.1- (2014-07-01);iPhone-iOS-7.1.2-WeChat-5.3.1-CN (2014-07-07),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, +,511,Q_PROTO_WEOURFAMILY,weourfamily,,WeOurFamily.com,This protocol plug-in classifies the http traffic to the host weourfamily.com. It also classifies the ssl traffic to the Common Name member.weourfamily.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,512,Q_PROTO_WERKENNTWEN,werkenntwen,,Wer-Kennt-Wen.de,This protocol plug-in classifies the http traffic to the host wer-kennt-wen.de.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,732,Q_PROTO_WESP,wesp,,Wrapped Encapsulating Security Payload,The wesp protocol (Wrapped Encapsulating Security Payload) is found over the IP layer (IANA protocol number: 141).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1748,Q_PROTO_WESTPAC,westpac,,Westpac.com.au,Australia s First Bank with a range of innovative financial packages,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,591,Q_PROTO_WFC,wfc,,Nintendo Wi-Fi Connection,Wi-Fi Connection (WFC) is the Nintendo on-line gaming service for the Wii and DS videogame systems.,Game,https;spdy;ssl,"Nintendo Wii,Nintendo DS",PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1093,Q_PROTO_WHATSAPP,whatsapp,,WhatsApp Messenger,"WhatsApp Messenger is a cross-platform, instant, mobile messaging application which allows the users to exchange messages without having to pay for SMS. WhatsApp Messenger is available for iPhone, BlackBerry, Android and Nokia and yes, those phones can all message each other.",Instant Messaging,http;https;spdy;ssl;tcp,Mobile-Android-WhatsApp 4.1.1;iPhone-iOS-WhatsApp 4.7.0.2,BlackBerry-BlackBerry OS-WhatsApp-2.11.605- (2014-06-19);Mobile-Android-4.2.1-WhatsApp-2.11.238- (2014-06-05);Nokia Mobile-Symbian-WhatsApp-2.11.398- (2014-04-23);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-19);Windows Phone-Windows Phone OS-WhatsApp-2.11.516.0- (2014-07-02);iPhone-iOS-WhatsApp-2.11.8- (2014-04-03),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +,921,Q_PROTO_WHOIS,whois,,WHOIS,"WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other information.",Network Service,socks4;socks5;tcp,RFC 3912,3/20/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,600,Q_PROTO_WIICONNECT24,wiiconnect24,,WiiConnect24,"WiiConnect24 is an asynchronous communication protocol implemented on the Nintendo Wii gaming system. It used by some information channels and services embedded in the console, and by some games too.",Game,http;https;spdy,20110127,3/1/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1482,Q_PROTO_WIKIA,wikia,,Wikia.com,A free Wiki website hosting service.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,222,Q_PROTO_WIKIPEDIA,wikipedia,,Wikipedia.com,Wikipedia is the biggest multilingual free-content encyclopedia on the Internet.,Web,http;https;spdy;ssl,iPhone-iOS-Wikipedia Mobile 3.3.1;Mobile-Android-Wikipedia Mobile 1.3.4;PC-Windows-Browser-www.wikipedia.org (2013-10-10),Mobile-Android-Wikipedia-2.0- (2014-07-03);PC-Windows-7-Chrome-33.0.1750.117-Wikipedia for Desktop-1.0- (2014-04-24);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-24);Windows Phone-Windows Phone OS-8-Wikipedia-2.4.1- (2014-06-17);iPhone-iOS-Wikipedia-3.3.1- (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1953,Q_PROTO_WILLHABEN,willhaben,,Willhaben.at,Austrian online classified ads.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1288,Q_PROTO_WINDOWS_AZURE,windows_azure,,Windows Azure CDN,This protocol plug-in classifies the ssl traffic to the Common Name msecnd.net.,Web,http;https;spdy;ssl,20131115,PC-Linux-BasicTest- (2013-11-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1111,Q_PROTO_WINDOWS_MARKETPLACE,windows_marketplace,,Windows Marketplace,Windows Marketplace is a service by Microsoft for its Windows Phone 7/8 and Microsoft Windows 8 platforms that allows users to browse and download applications that have been developed by third-parties. The website of the chain of retail stores Microsoft Store is also classified.,Application Service,http;https;spdy;ssl,Windows Phone-Windows Phone OS 8;Windows Phone-Windows Phone OS 7;PC-Windows 8,PC-Windows-7-Chrome-33.0.1750.154- (2014-04-04);Windows Phone-Nokia Lumia 1320-Windows Phone OS-8-17/06/2014- (2014-06-17),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +,562,Q_PROTO_WINDOWS_UPDATE,windows_update,,Windows Update,Windows_update is the protocol used for windows system updates.,Web,http;https;spdy;ssl,PC-Windows XP;PC-Windows Vista;PC-Windows 7,PC-Windows-7-- (2014-04-25);PC-Windows-8-- (2014-05-06);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-- (2014-05-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +,298,Q_PROTO_WINDOWSLIVE,windowslive,,Windows Live,"WindowsLive is a pseudo-protocol which classifies generic web services related to the Microsoft ""Live""platform.",Web,http;https;spdy;ssl,PC-Windows-Browser-mail.live.com (2012-10-30),,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,513,Q_PROTO_WINDOWSLIVESPACE,windowslivespace,,Windows Live Spaces,This protocol plug-in classifies the http traffic to the host spaces.live.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1073,Q_PROTO_WINDOWSMEDIA,windowsmedia,,WindowsMedia.com,This protocol plug-in classifies the http traffic to the host windowsmedia.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,223,Q_PROTO_WINMX,winmx,,Winmx,"WinMX is a freeware peer-to-peer file sharing program authored by Frontcode Technologies that runs on Microsoft Windows operating systems, and created in 2000.",Peer to Peer,gnutella;socks4;socks5;tcp,3.53,5/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +,1442,Q_PROTO_WINNY,winny,,winNY,Winny (also known as WinNY) is a Japanese peer-to-peer (P2P) file-sharing program.,Peer to Peer,tcp,20130321,3/21/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +,891,Q_PROTO_WINS,wins,,Windows Internet Naming Service,"WINS (Windows Internet Naming Service) is Microsoft's implementation of NetBIOS Name Service (NBNS), which is a name server and service for NetBIOS computer names. This plug-in classifies replication flows between servers. Client-to-Server flows are handled by the nbns plug-in.",Network Service,tcp,Microsoft Windows based networks,6/29/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,514,Q_PROTO_WISEREARTH,wiserearth,x,WiserEarth,This protocol plug-in classifies the http traffic to the host wiserearth.org.,Web,,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,871,Q_PROTO_WIXI,wixi,,Wixi.com,This protocol plug-in classifies the http traffic to the host wixi.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1228,Q_PROTO_WOORIBANK,wooribank,,WooriBank.com,This protocol plug-in classifies the http traffic to the host wooribank.com. It also classifies the ssl traffic to the Common Name .wooribank.com.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,297,Q_PROTO_WORDPRESS,wordpress,,WordPress.com,This protocol plug-in classifies the http traffic to the host wordpress.com. It also classifies the ssl traffic to the Common Name wordpress.com.,Web,http;https;spdy;ssl,PC-Windows-Browser-www.wordpress.com (2014-02-26);Mobile-Android-Wordpress 2.6.3 (2014-02-26);iPhone-iOS-Wordpress 3.9.1 (2014-02-26);Windows Phone-Windows Phone OS-Wordpress 1.2.0.0 (2014-03-03),BlackBerry-BlackBerry OS-10.2.1.2102-2.3.1-Wordpress-1.6.7- (2014-07-11);Mobile-Android-4.2.1-Wordpress-2.9.1- (2014-07-11);Mobile-Bada-2.058600XXLC3-Wordpress-1.1.1- (2014-07-11);Nokia Mobile-Nokia Xpress 5800-Symbian-Wordpress-2.1.3- (2014-07-11);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-11);PC-Windows-7-Wordpress-3.8.1- (2014-07-11);Windows Phone-Nokia Lumia 520-Windows Phone OS-8.0.10517.150-Wordpress-2.2.0.0- (2014-07-11);Windows Phone-Windows Phone OS-8.0.10521.155-WordPress for Phone-1.3.4.0- (2014-07-11);iPhone-iOS-7.1-Wordpress-4.1.3- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1914,Q_PROTO_WORKSITE,worksite,,Worksite,WorkSite is a Document Management System (DMS) application. It is primarily used by law firms and corporate legal departments.,File Server,rpc,20130703,PC-Windows-- (2013-12-04),x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, +,340,Q_PROTO_WOW,wow,,World of Warcraft,WOW is an online role-playing game.,Game,tcp,4.0.3.13287,1/11/2010,,,,x,wow,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,2078,Q_PROTO_WP,wp,,Wp.pl,Polish news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1429,Q_PROTO_WRETCH,wretch,,Wretch.cc,Taiwanese Photo Album and Blog.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,2315,Q_PROTO_WRIKE,wrike,,Wrike,Wrike is web based project management software that gives you full visibility and control over your projects.,Web,amazon_aws;http;https;spdy;ssl,20140617,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,699,Q_PROTO_WSN,wsn,,Wang Span Network,The wsn protocol (Wang Span Network) is found over the IP layer (IANA protocol number: 74).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,2289,Q_PROTO_WSOP,wsop,,World Series of Poker,Mobile game.,Game,amazon_aws;http;https;spdy;ssl,iPhone-iOS-World Series of Poker - WSOP 2.0.1;Mobile-Android-World Series of Poker - WSOP 2.0.1,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,x,,,, +,224,Q_PROTO_WSP,wsp,,Wireless Session Protocol,Wireless Session Protocol (WSP) is an application layer protocol present in the WAP stack. It is used by mobile stations to send SMS for example.,Wap,udp;wtp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, +,225,Q_PROTO_WTLS,wtls,,Wireless Transport layer Security,"Wireless Transport Layer Security (WTLS) is a security protocol, part of the WAP stack. It sits between the WTP and WDP layers in the WAP communications stack.",Wap,udp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,,, +,226,Q_PROTO_WTP,wtp,,Wireless Transaction Protocol,Wireless Transaction Protocol (WTP) is a transport layer protocol which belongs to the WAP stack. It provides a reliable transmission of network packets and is very similar to TCP.,Wap,udp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,,, +,227,Q_PROTO_X11,x11,,X Window System,X11 is designed to communicate all the information necessary to operate a window system over a single asynchronous bi-directional stream of 8-bit bytes. The X protocol specifies four types of messages but named extensions can also be defined to extend the system.,Thin Client,tcp,Xorg-x11-1.1.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,228,Q_PROTO_X25,x25,,X.25,"X.25 is a packet switched data network protocol which defines an international recommendation for the exchange of data as well as control information between a user device (host), called Data Terminal Equipment (DTE) and a network node, called Data Circuit Terminating Equipment (DCE).",Audio/Video,xot,CCITT Recommendation X.25;ITU-T Recommendation X.25,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,x,,,,,,,,,,,,,,, +,515,Q_PROTO_XANGA,xanga,,Xanga.com,This protocol plug-in classifies the http traffic to the host xanga.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1074,Q_PROTO_XBOX,xbox,,Xbox.com,This protocol plug-in classifies the http traffic to the host xbox.com. It also classifies the ssl traffic to the Common Name .xbox.com.,Web,http;https;spdy;ssl,20130427,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,342,Q_PROTO_XBOXLIVE,xboxlive,,Xbox Live,Online multiplayer gaming and digital media delivery service created and operated by Microsoft Corporation.,Game,http;https;spdy;ssl;udp;xbox,PC-Windows-Browser-www.xboxlive.com (2013-10-04),Xbox-360-Xbox OS-2.0.16756.0-- (2014-07-16);Xbox-one-Xbox OS-6.2.11274.0-- (2014-07-17),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +,1574,Q_PROTO_XBOXLIVE_MARKETPLACE,xboxlive_marketplace,,Xbox Live Marketplace,Xbox Live Marketplace is a service where users can purchase and download games and multimedia.,Game,http;https;spdy,20130830,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,592,Q_PROTO_XDMCP,xdmcp,,X Display Manager Control Protocol,XDMCP is an extension of the X11 protocol that addresses the issue of discovering and authenticating available X servers on the LAN.,Thin Client,udp,1.1,2/2/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +,2228,Q_PROTO_XENDAN,xendan,,Xendan,Iranian news portal,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1108,Q_PROTO_XFS,xfs,,X Font Server,X Font Server is a standard communication protocol between an X server and a font renderer.,Application Service,tcp,2.0,PC-Linux-CentOS/5.6-X Font Server-1.0.2- (2012-01-24),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,1487,Q_PROTO_XHAMSTER,xhamster,,xHamster.com,Pornographic videos streaming platform.,Web,http;https;spdy;ssl,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1430,Q_PROTO_XIAMI,xiami,,Xiami.com,Chinese Music P2P community website.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,516,Q_PROTO_XING,xing,,Xing.com,This protocol plug-in classifies the http traffic to the host xing.com. It also classifies the ssl traffic to the Common Name xing.com.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1263,Q_PROTO_XINHUANET,xinhuanet,,Xinhuanet.com,This protocol plug-in classifies the http traffic to the host xinhuanet.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2190,Q_PROTO_XL,xl,,Xl,Portugese multisites and portal,Web,http;https;spdy,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,x,x,,,,,,,x,,,, +,2013,Q_PROTO_XL_NONTON,xl_nonton,,XL Nonton,XL Nonton offers access streaming contents via PC and Smartphone.,Audio/Video,http;https;mpegts;spdy,"2.1 (Android),20131210",Mobile-Android-XL Nonton-2.1- (2014-07-11);PC-Windows-Chrome- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +,1143,Q_PROTO_XL_WAP,xl_wap,,XL wap,This protocol plug-in classifies the http traffic to the host wap.xl.co.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +,1156,Q_PROTO_XL_WEBMAIL,xl_webmail,,XL Webmail,This protocol plug-in classifies the http traffic to the host webmail.xl.co.id. It also classifies the ssl traffic to the Common Name webmail.xl.co.id.,Web,http;https;spdy;ssl,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,2012,Q_PROTO_XL_WEBPORTAL,xl_webportal,,XL.co.id,Indonesian mobile telecommunications services operator web portal.,Web,http;https;spdy,20120719,PC-Windows-Firefox- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +,1144,Q_PROTO_XLNET,xlnet,,XL.net.id,This protocol plug-in classifies the http traffic to the host xl.net.id.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,872,Q_PROTO_XM_RADIO,xm_radio,,SiriusXm.com,This protocol plug-in classifies the http traffic to the hosts xmradio.com and siriusxm.com. It also classifies the ssl traffic to the Common Name .siriusxm.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,229,Q_PROTO_XMLRPC,xmlrpc,,XMLRPC,"XMLRPC is a remote procedure calling using HTTP as the transport and XML as the encoding. XML-RPC is designed to be as simple as possible, while allowing complex data structures to be transmitted, processed and returned.",Web,http,20080118,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,700,Q_PROTO_XNET,xnet,,Cross Net Debugger,The xnet protocol (Cross Net Debugger) is found over the IP layer (IANA protocol number: 15).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,230,Q_PROTO_XNS,xns,,Xerox Network Systems,Xerox Network Systems is a protocol suite originally designed by Xerox PARC. Many PC networking companies such as Novell and 3Com used or currently use a variation of XNS as their primary transport protocol stack.,Network Service,8021q;eth;snap,XNS v1,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,701,Q_PROTO_XNS_IDP,xns_idp,,XEROX NS IDP,The xns_idp protocol (XEROX NS IDP) is found over the IP layer (IANA protocol number: 22).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1075,Q_PROTO_XNXX,xnxx,,XNXX.com,This protocol plug-in classifies the http traffic to the host xnxx.com.,Web,http;https;spdy,PC-Windows-Browser-www.xnxx.com (2014-01-31),PC-Linux-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,231,Q_PROTO_XOT,xot,,XOT (X25 over TCP),Protocol used to transport x25 data over TCP in IP network.,Tunneling,tcp,XOT v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +,1076,Q_PROTO_XREA,xrea,,XREA.com,This protocol plug-in classifies the http traffic to the host xrea.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,517,Q_PROTO_XT3,xt3,,Xt3.com,This protocol plug-in classifies the http traffic to the host xt3.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,540,Q_PROTO_XTP,xtp,,XTP,The xtp protocol (XTP) is found over the IP layer (IANA protocol number: 36).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +,1431,Q_PROTO_XUITE,xuite,,Xuite.net,"Taiwanese blog platform, media file sharing, online games...",Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1077,Q_PROTO_XVIDEOS,xvideos,,Xvideos.com,This protocol plug-in classifies the http traffic to the host xvideos.com.,Web,http;https;spdy,PC-Windows-Browser-www.xvideos.com (2013-07-13),Mobile-Android-- (2014-07-11);PC-Linux-Chrome-35.0.1916.153- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1078,Q_PROTO_XVIDEOSLIVE,xvideoslive,,Xvideoslive.com,This protocol plug-in classifies the http traffic to the host xvideoslive.com.,Web,http;https;rtmp;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,232,Q_PROTO_XYPLEX,xyplex,,XYPLEX,Xyplex is used to communicate with Xyplex servers.,Network Service,eth;gre,20030724,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +,1758,Q_PROTO_Y8,y8,,Y8.com,Y8.com has Free Online Mini Games in both Flash and Shockwave,Web,http;https;spdy,20131001,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +,2232,Q_PROTO_YADRO,yadro,,Yadro,Yadro is an advertising company that is part of a network of sites and other technologies.,Web,http;https;spdy;ssl,20140410,PC-Linux-BasicTest- (2014-04-20),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1294,Q_PROTO_YAHOO,yahoo,,Yahoo.com,Yahoo is a pseudo-protocol which classifies generic web services related to Yahoo.,Web,http;https;spdy;ssl,20130001,2/4/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,518,Q_PROTO_YAHOO360PLUSVIETNAM,yahoo360plusvietnam,,Yahoo 360Plus Vietnam,This protocol plug-in classifies the http traffic to the host vn.360plus.yahoo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,286,Q_PROTO_YAHOO_ANSWERS,yahoo_answers,,Yahoo Answers,This protocol plug-in classifies the http traffic to the host answers.yahoo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,295,Q_PROTO_YAHOO_BIZ,yahoo_biz,x,Yahoo Biz,This protocol plug-in classifies the http traffic to the hosts fr.biz.yahoo.com and finance.yahoo.com.,Web,,20130713,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1432,Q_PROTO_YAHOO_BUY,yahoo_buy,,Yahoo Buy Taiwan,Yahoo Taiwanese Shopping portal.,Web,http;https;spdy,20140320,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,873,Q_PROTO_YAHOO_DOUGA,yahoo_douga,,Yahoo Douga,This protocol plug-in classifies the http traffic to the host streaming.yahoo.co.jp.,Web,http;https;spdy,20120709,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,308,Q_PROTO_YAHOO_GAMES,yahoo_games,,Yahoo Games,This protocol plug-in classifies the http traffic to the host games.yahoo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,299,Q_PROTO_YAHOO_GEOCITIES,yahoo_geocities,,Yahoo Geocities,This protocol plug-in classifies the http traffic to the host geocities.yahoo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,233,Q_PROTO_YAHOO_GROUPS,yahoo_groups,,Yahoo groups,"Yahoo! Groups offers free mailing lists, photo and file sharing, group calendars and more.",Forum,yahoo,20110419,5/27/2014,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +,1237,Q_PROTO_YAHOO_KOREA,yahoo_korea,,Yahoo Korea,This protocol plug-in classifies the http traffic to the hosts yahoo.co.kr and kr.yahoo.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,290,Q_PROTO_YAHOO_MAPS,yahoo_maps,,Yahoo Maps,Yahoo Maps can be used to calculate routes or to look at maps.,Web,nokia_ovi;yahoo,20120828,Mobile-Android-2.3.6-Browser- (2012-09-10);PC-Windows-7-Browser- (2012-09-10);iPhone-iOS-5.0.1-Safari- (2012-09-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,333,Q_PROTO_YAHOO_REALESTATE,yahoo_realestate,,Yahoo Homes,This protocol plug-in classifies the http traffic to the hosts realestate.yahoo.com and homes.yahoo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1177,Q_PROTO_YAHOO_SCREEN,yahoo_screen,,Yahoo Screen,This protocol plug-in classifies the http traffic to the host screen.yahoo.com.,Audio/Video,http;https;rtmp;spdy,20120530,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,234,Q_PROTO_YAHOO_SEARCH,yahoo_search,,Yahoo Search,This protocol is used to send queries to the Yahoo search engine.,Web,yahoo,PC-Windows-Browser-search.yahoo.com (2014-02-18);Mobile-Android-Yahoo Search 3.0.6 (2014-03-06);iPhone-iOS-Yahoo Search 3.0.4 (2014-03-06),Mobile-Android-4.4.2-Yahoo Search-3.1.2- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-17);Windows Phone-Windows Phone OS-8-Search All-1.1.0.0- (2014-05-19);iPhone-iOS-7.1.2-Yahoo Search-3.1.3- (2014-07-01),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1433,Q_PROTO_YAHOO_STOCK_TW,yahoo_stock_tw,,Yahoo Stock,Yahoo finance Taiwanese portal.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,292,Q_PROTO_YAHOO_TRAVEL,yahoo_travel,,Yahoo Travel,This protocol plug-in classifies the http traffic to the hosts travel.yahoo.com and fr.voyage.yahoo.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1434,Q_PROTO_YAM,yam,,Yam.com,This protocol plug-in classifies the http traffic to the host yam.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,519,Q_PROTO_YAMMER,yammer,,Yammer.com,Private social network solution for entreprises.,Web,http;https;spdy;ssl,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,x,,,,,,, +,523,Q_PROTO_YANDEX,yandex,,Yandex.ru,Yandex is a Russian search engine.,Web,http;https;spdy;ssl,20120208,PC-Windows-Firefox- (2012-02-22),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,528,Q_PROTO_YANDEX_WEBMAIL,yandex_webmail,,Yandex webmail,Yandex webmail is the Russian webmail on webmail.yandex.ru.,Webmail,http;https;spdy;ssl,20121115,PC-Windows-Firefox- (2014-05-27),,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,2220,Q_PROTO_YAPO,yapo,,Yapo,Chilian classified ads website,Web,http;https;spdy,20140804,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,520,Q_PROTO_YELP,yelp,,Yelp.com,This protocol plug-in classifies the http traffic to the host yelp.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2174,Q_PROTO_YEMEN_NET,yemen_net,,Yemen.net,Yemeni service provider portal,Web,http;https;spdy,20140210,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1270,Q_PROTO_YESKY,yesky,,Yesky.com,This protocol plug-in classifies the http traffic to the host yesky.com.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1771,Q_PROTO_YIELDMANAGER,yieldmanager,,Yield Manager,"Yield Manager is an advertising delivery technology operated by Right Media. Since 2007, this has operated as a subsidiary of Yahoo.",Web,yahoo,20131001,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1435,Q_PROTO_YIHAODIAN,yihaodian,,Yihaodian.com,Chinese Online shopping.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2145,Q_PROTO_YLE,yle,,Yle.fi,Finnish news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,236,Q_PROTO_YMAIL2,ymail2,,Yahoo Mail v.2.0,This protocol is the ajax based version of Webmail Yahoo.,Webmail,http;yahoo,PC-Windows-Browser-mail.yahoo.com (2012-12-13),PC-Windows-7-Chrome-35.0.1916.114- (2014-06-05);PC-Windows-8-Yahoo! Mail-1.7.0.23- (2014-06-17),,x,,x,,,,,x,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,259,Q_PROTO_YMAIL_CLASSIC,ymail_classic,,Yahoo Mail classic,Yahoo! Mail Classic was the original interface for Yahoo! Mail.,Webmail,http;yahoo,PC-Windows-Browser-mail.yahoo.com (2013-08-30),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-19),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,328,Q_PROTO_YMAIL_MOBILE,ymail_mobile,x,Yahoo webmail for mobile,(Deprecated) Yahoo Mail Mobile is the yahoo.com webmail adapted to mobiles.,Webmail,,20091016,12/26/2012,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +,332,Q_PROTO_YMAIL_MOBILE_NEW,ymail_mobile_new,,Yahoo webmail for mobile,Yahoo Mail Mobile_new is the new yahoo.com webmail adapted to mobiles.,Webmail,yahoo,iPhone-iOS-Yahoo! Mail 1.20.0.13;iPad-iOS-Yahoo! Mail 1.20.0.13,BlackBerry-BlackBerry OS-10.2.1.2102-Mail Mail-1.0.3.0- (2014-05-08);Mobile-Moto G-Android-4.4.2-Yahoo Mail-4.0.2- (2014-06-05);Nokia Mobile-Symbian-111.040.1511-Browser- (2014-03-10);Windows Phone-Windows Phone OS-8-Yahoo Mail-2.1.0.0- (2014-06-04);iPhone-iOS-7.1.2-Yahoo Mail-3.1.2- (2014-07-09),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +,237,Q_PROTO_YMSG,ymsg,,Yahoo Messenger,"Yahoo Messenger is used by the Yahoo Instant Messenger application to send instant messages, files and emails between users.",Instant Messaging,http;sip;tcp;yahoo,10.0.0.1270,5/27/2014,,x,,x,,,,,,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, +,238,Q_PROTO_YMSG_CONF,ymsg_conf,,Yahoo Messenger conference service,"This protocol is used in signaling part in a conference. Please note that since version 11.5.0, voice calls are not supported, therefore rtp inheritance is deprecated.",Instant Messaging,tcp;udp,10.0.0.1270,7/4/2008,,,,x,,,,,,x,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, +,255,Q_PROTO_YMSG_TRANSFER,ymsg_transfer,,Yahoo Messenger Transfer Protocol,This protocol is used for file tranfers over ymsg.,File Transfer,yahoo,9.4,5/27/2014,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +,239,Q_PROTO_YMSG_VIDEO,ymsg_video,,Yahoo Messenger Video,(versions prior to 10.0.0.270) This protocol is used by Yahoo Messenger for video conversations.,Audio/Video,tcp,10.0.0.1270,10/2/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +,276,Q_PROTO_YMSG_WEBMESSENGER,ymsg_webmessenger,,Yahoo Webmessenger,Yahoo webmessenger.,Instant Messaging,http;tcp;yahoo,PC-Windows-Browser-messenger.yahoo.com (2013-08-30),PC-Windows-7-Chrome-35.0.1916.153- (2014-06-13),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, +,2079,Q_PROTO_YNET,ynet,,Ynet.co.il,Israeli news portal,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2313,Q_PROTO_YODIZ,yodiz,,Yodiz,"Yodiz is online Agile Project Management tool, consisting of Product Backlog Management, Kanban Scrum Board, Issue Tracking Software, Team Discussions and issues.",Web,http;https;spdy;ssl,PC-Ubuntu-Mozilla Firefox-www.yodiz.com (2014-03-08),,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,1436,Q_PROTO_YOKA,yoka,,Yoka.com,Chinese fashion portal.,Web,http;https;spdy,20130215,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1327,Q_PROTO_YOMIURI,yomiuri,,Yomiuri.co.jp,Japanese news web site,Web,http;https;spdy;ssl,20130215,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,874,Q_PROTO_YOONO,yoono,,Yoono.com,This protocol plug-in classifies the http traffic to the host .yoono.com.,Instant Messaging,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, +,1079,Q_PROTO_YOUDAO,youdao,,Youdao.com,This protocol plug-in classifies the http traffic to the host youdao.com. It also classifies the ssl traffic to the Common Name .youdao.com.,Web,http;https;spdy;ssl,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,875,Q_PROTO_YOUKU,youku,,Youku.com,Youku is a Chinese video hosting web service.,Web,apple_hls;http;https;mms;spdy;ssl;udp,PC-Windows-Browser-www.youku.com (2014-01-24);Mobile-Android-youku (2014-01-24);iPhone-iOS-youku (2014-01-24);Windows Phone-Windows Phone OS-youku (2014-01-25),Mobile-Moto G-Android-4.4.2-Youku-4.0.1- (2014-07-01);PC-Windows-7-Chrome-35.0.1916.153- (2014-06-16);PC-Windows-7-Youku-5.0.1.6161- (2014-07-02);Windows Phone-Windows Phone OS-8.0.10517.150-Youku-3.4.0.0- (2014-07-04);iPhone-iOS-7.1.1-Youku-3.6- (2014-05-14),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1080,Q_PROTO_YOUM7,youm7,,Youm7.com,This protocol plug-in classifies the http traffic to the host youm7.com.,Web,http;https;spdy,20110930,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,521,Q_PROTO_YOUMEO,youmeo,,CalumBrannan.com,This protocol plug-in classifies the http traffic to the host calumbrannan.com.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1297,Q_PROTO_YOUNI,youni,,Youni SMS,Youni SMS is a totally free mobile messaging application.,Instant Messaging,http;https;jabber;spdy,3.1.0 (iOS and Android),1/24/2013,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +,1081,Q_PROTO_YOUPORN,youporn,,Youporn.com,This protocol plug-in classifies the http traffic to the hosts youporn.com and youporn.phncdn.com.,Web,http;https;spdy,20130207,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,876,Q_PROTO_YOURFILEHOST,yourfilehost,,YourFileHost.com,This protocol plug-in classifies the http traffic to the host yourfilehost.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,1965,Q_PROTO_YOURFILES_BIZ,yourfiles_biz,,yourfiles.biz,Classifies web browsing on the yourfiles.biz Direct DownLoad links service.,Web,http;https;spdy,20131129,PC-Linux-BasicTest- (2013-12-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,877,Q_PROTO_YOUSEEMORE,youseemore,,YouSeeMore.com,This protocol plug-in classifies the http traffic to the host youseemore.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,878,Q_PROTO_YOUSENDIT,yousendit,,Hightail.com,Cloud file storage service with professional services.,Web,http;https;spdy;ssl,20130828,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,240,Q_PROTO_YOUTUBE,youtube,,Youtube.com,Youtube is a website where users can send or watch videos.,Web,http;https;rtmp;spdy;ssl,PC-Windows-Browser-www.youtube.com (2013-10-25),BlackBerry-BlackBerry OS-Player for youtube - youtube videos-1.0.150.0- (2014-06-27);Mobile-Android-4.4.2-Youtube-5.7.41- (2014-07-09);Mobile-Bada-1.0-Youtube-Youtube for bada 2.0- (2014-04-02);Nokia Mobile-Symbian-YouTube-2.3.17- (2014-04-03);PC-Windows-7-Chrome-32.0.1700.107-Youtube-4.2.6- (2014-02-13);PC-Windows-7-Chrome-35.0.1916.153- (2014-07-14);Windows Phone-Windows Phone OS-8-YouTube-3.2.0.0- (2014-02-12);iPhone-iOS-7.1.1-YouTube-2.7.1.11281- (2014-07-02),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,558,Q_PROTO_YOUTUBE_HD,youtube_hd,x,Youtube HD,Youtube HD classification ensures that the user is watching a High Definition video (at least 720 lines).,Web,,PC-Windows-Browser-www.youtube.com (2014-03-13),Mobile-Android-4.4.2-Youtube-5.7.38- (2014-06-18);PC-Windows-7-Chrome-35.0.1916.114- (2014-06-02);Windows Phone-Windows Phone OS-8-YouTube HD-3.33- (2014-06-03);iPhone-iOS-7.1.1-Youtube-2.6.0.11251- (2014-05-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +,1915,Q_PROTO_YPBIND,ypbind,,Yellow Page Bind,"The ypbind utility is the process that maintains NIS binding information. At startup, it searches for an NIS server responsible for serving the system's default domain (as set by the domainname(1) command) using net-work broadcasts",Network Service,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, +,241,Q_PROTO_YPPASSWD,yppasswd,,Yellow Page Passwd,The Yellow Page Password protocol enables the modification of logins and passwords in Network Interface System cards.,Authentication,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, +,242,Q_PROTO_YPSERV,ypserv,,Yellow Pages Server,Yellow Pages Server is a protocol used to distribute NIS databases to client systems within an NIS domain.,Authentication,rpc,RPC v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, +,243,Q_PROTO_YPUPDATE,ypupdate,,Yellow Pages Update,The Yellow Pages Update protocol enables information updates in Network Information Services (NIS) cards.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, +,746,Q_PROTO_YTIMG,ytimg,x,Ytimg.com,This protocol plug-in classified the http traffic to the host .ytimg.com. This traffic is now classified as youtube.,Web,,PC-Windows-Browser-*.ytimg.com (2011-03-31),10/3/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,879,Q_PROTO_YUGMA,yugma,,Yugma.com,This protocol plug-in classifies the http traffic to the host yugma.com. It also classifies the ssl traffic to the Common Name yugma.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,880,Q_PROTO_YUUGUU,yuuguu,,Yuugu.com,This protocol plug-in classifies the http traffic to the host share.yuuguu.com. It also classifies the ssl traffic to the Common Name share.yuuguu.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1114,Q_PROTO_ZABBIX_AGENT,zabbix_agent,,Zabbix agent,Agent for Zabbix monitoring server. Uses TCP port 10050.,Network Management,tcp,1.8,PC-Linux-Zabbix Agent-1.8.11- (2012-04-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +,2146,Q_PROTO_ZALUU,zaluu,,Zaluu.com,Mongolian news portal,Web,http;https;spdy,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2080,Q_PROTO_ZAMUNDA,zamunda,,Zamunda.net,Bulgarian Torrent tracker,Web,http;https;spdy,20140117,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +,279,Q_PROTO_ZATTOO,zattoo,,Zattoo.com,Zattoo is website and a set of peer-to-peer TV applications.,Audio/Video,akamai;http;https;spdy;ssl,"Web 2012/02/21, ios v1.3.1, windows v4.0.5, android v1.0.4",Mobile-Android-Zattoo-1.0.4- (2014-07-11);PC-Windows-Firefox- (2014-07-11);Windows Phone-Windows Phone OS-Zattoo-4.0.5- (2014-07-11);iPhone-iOS-Zattoo-1.3.1- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +,346,Q_PROTO_ZELUNE,zelune,,Zelune,HTTP redirector service (anonymizing proxy).,Web,http;https;spdy,20140220,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2282,Q_PROTO_ZENDESK,zendesk,,Zendesk,"Zendesk is a cloud-based customer service platform, that includes ticketing, self-service options, and customer support features.",Web,http;https;spdy;ssl,20140513,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1159,Q_PROTO_ZIDDU,ziddu,,Ziddu.com,Ziddu is an online solution to upload and share files.,Web,http;https;spdy;ssl,20140515,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,311,Q_PROTO_ZIMBRA,zimbra,,Zimbra.com,Zimbra provides open source server and client software for messaging and collaboration.,Webmail,http;https;spdy;ssl,20130130,5/27/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,325,Q_PROTO_ZIMBRA_STANDARD,zimbra_standard,,Zimbra Webmail Standard Version,zimbra_standard is the called standard version for the zimbra webmail.,Webmail,http;https;spdy,20090907,3/27/2012,,x,,,,,,,x,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +,2147,Q_PROTO_ZING,zing,,Zing.vn,Vietnamese classified ads.,Web,http;https;spdy;ssl,20140131,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1449,Q_PROTO_ZOHO,zoho,,Zoho Corporation,Zoho is a software development company providing online office suite named Zoho Office Suite.,Web,http;https;spdy;ssl,20140617,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,881,Q_PROTO_ZOHO_CRM,zoho_crm,,Zoho CRM,This protocol plug-in classifies the http traffic to the host crm.zoho.com. It also classifies the ssl traffic to the Common Name crm.zoho.com.,Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,882,Q_PROTO_ZOHO_DB,zoho_db,,ZOHO DB and Reports,The ZOHO DB and Reports is an online database and reporting application.,Web,facebook;http;https;spdy,20110707,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,x,,,,,, +,883,Q_PROTO_ZOHO_IM,zoho_im,,Zoho Chat,Multi-protocol Instant Messaging web service owned by ZOHO Corp.,Instant Messaging,http;https;spdy;ssl,20140314,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +,884,Q_PROTO_ZOHO_MEETING,zoho_meeting,,Zoho Meeting,"This protocol plug-in classifies the http traffic to the hosts wms8.zoho.com, chat.zoho.com and meeting.zoho.com. It also classifies the ssl traffic to the Common Name meeting.zoho.com.",Web,http;https;spdy;ssl,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1490,Q_PROTO_ZOHO_NOTEBOOK,zoho_notebook,,Zoho Notebook,Zoho Notebook application classification.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,885,Q_PROTO_ZOHO_PEOPLE,zoho_people,,Zoho People,This protocol plug-in classifies the http traffic to the host wms2.zoho.com.,Web,http;https;spdy,20110630,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1491,Q_PROTO_ZOHO_PLANNER,zoho_planner,,Zoho Planner,Zoho Planner application classification.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1492,Q_PROTO_ZOHO_SHARE,zoho_share,,Zoho Share,Zoho Share application classification.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1493,Q_PROTO_ZOHO_SHEET,zoho_sheet,,Zoho Sheet,Zoho Sheet application classification.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1494,Q_PROTO_ZOHO_SHOW,zoho_show,,Zoho Show,Zoho Show application classification.,Web,http;https;spdy,20130531,PC-Linux-BasicTest- (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1262,Q_PROTO_ZOL,zol,,Zol.com.cn,This protocol plug-in classifies the http traffic to the host zol.com.cn.,Web,http;https;spdy,20120827,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,2290,Q_PROTO_ZOMBIE_TSUNAMI,zombie_tsunami,,Zombie Tsunami,Mobile game.,Game,flurry;http;https;spdy,iPhone-iOS-Zombie Tsunami 1.6.2;Mobile-Android-Zombie Tsunami 1.6.41,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +,754,Q_PROTO_ZONEALARM_UPDATE,zonealarm_update,,ZoneAlarm Updates,This protocol plug-in classifies the http traffic to the hosts zonealarm.com and zonelabs.com. It also classifies the ssl traffic to the Common Name cm1.zonealarm.com.,Antivirus,http;https;spdy;ssl,ZoneAlarm Extreme Security Edition 9.3,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +,522,Q_PROTO_ZOO,zoo,,Zoo.gr,This protocol plug-in classifies the http traffic to the host zoo.gr.,Web,http;https;spdy,20110331,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,1954,Q_PROTO_ZOZNAM,zoznam,,Zoznam.sk,Slovakian internet portal.,Web,http;https;spdy,20131023,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +,315,Q_PROTO_ZSHARE,zshare,,zShare.com,"zShare is an online solution to store, send and share files.",Web,http;https;spdy,20120102,PC-Linux-BasicTest- (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +,2298,Q_PROTO_ZUJI,zuji,,zuji,Singaporean online travel agency.,Web,http;https;spdy,PC-Windows-Google Chrome-www.zuji.com.sg (2014-06-24),7/11/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +,1198,Q_PROTO_ZUM,zum,,Zum.com,This protocol plug-in classifies the http traffic to the host zum.com.,Web,http;https;spdy,20120719,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +,1285,Q_PROTO_ZYNGA,zynga,,Zynga.com,Zynga is a social network oriented on-line video games editor.,Web,akamai;http;https;spdy;ssl,20140114,PC-Linux-BasicTest- (2014-07-11),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, diff --git a/resources/elasticsearch_networkrules_template_footer.json b/resources/elasticsearch_networkrules_template_footer.json new file mode 100644 index 00000000000000..be8817a918c4a9 --- /dev/null +++ b/resources/elasticsearch_networkrules_template_footer.json @@ -0,0 +1,3 @@ + } + } +} diff --git a/resources/elasticsearch_networkrules_template_header.json b/resources/elasticsearch_networkrules_template_header.json new file mode 100644 index 00000000000000..3425dd076fb702 --- /dev/null +++ b/resources/elasticsearch_networkrules_template_header.json @@ -0,0 +1,10 @@ +{ + "networkrules" : { + "template" : "networkrules", + "settings" : { + "index.refresh_interval" : "10s", + "index.cache.filter.expire" : "2m", + "index.cache.field.expire" : "2m" + }, + "mappings" : { + "rule" : { diff --git a/resources/networkrules.json b/resources/networkrules.json deleted file mode 100644 index 9c7fdac854e5a7..00000000000000 --- a/resources/networkrules.json +++ /dev/null @@ -1,33 +0,0 @@ -{ - "networkrules" : { - "template" : "networkrules", - "settings" : { - "index.refresh_interval" : "10s", - "index.cache.filter.expire" : "2m", - "index.cache.field.expire" : "2m" - }, - "mappings" : { - "rule" : { - "properties" : { - "enabled" : { - "type" : "boolean" - }, - "severity" : { - "type" : "string" - }, - "query" : { - "type" : "object" - }, - "createdDate" : { - "format" : "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ", - "type" : "date" - }, - "lastModifiedDate" : { - "format" : "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ", - "type" : "date" - } - } - } - } - } -} diff --git a/resources/remapping b/resources/remapping index 4057bc2a7d0501..6b288c611fee9b 100644 --- a/resources/remapping +++ b/resources/remapping @@ -1232,6 +1232,12 @@ sender Sender sender_alias SenderAlias sender_email SenderEmail subject Subject +file_id FileId +msg_receiver MsgReceiver +msg Msg +conference_id ConferenceId +im_action IMAction +user User action Action attach_id AttachID attach_size AttachSize diff --git a/scripts/buildApplicationsProto.pl b/scripts/buildApplicationsProto.pl index ab3af15b6cc1d6..10657d1d3eb4c6 100755 --- a/scripts/buildApplicationsProto.pl +++ b/scripts/buildApplicationsProto.pl @@ -44,10 +44,10 @@ while ( my $line = ) { @lineValues = split(/,/,$line); - $field = "$lineValues[2]"; + $field = "$lineValues[3]"; if ($field) { push(@newFields,$field); - $newComments{$field} = $lineValues[5]; + $newComments{$field} = $lineValues[6]; $newComments{$field} =~ s/\"//g; } } diff --git a/scripts/buildDpiMsgLRProto.pl b/scripts/buildDpiMsgLRProto.pl index 1814dda7f5af7a..99ed9de7ca8bab 100755 --- a/scripts/buildDpiMsgLRProto.pl +++ b/scripts/buildDpiMsgLRProto.pl @@ -83,17 +83,17 @@ sub CreateSummaryFile { while () { if ($_ =~ m/$includeFilter/ && $_ !~ /$excludeFilter/ ) { my @lineValues = split(/,/,$_); - if ($lineValues[3] eq '' ) { + if ($lineValues[4] eq '' ) { print summaryFile "base,"; } else { - print summaryFile "$lineValues[3],"; + print summaryFile "$lineValues[4],"; } - if ($lineValues[4] eq '' ) { + if ($lineValues[5] eq '' ) { print summaryFile "base,"; } else { - print summaryFile "$lineValues[4],"; + print summaryFile "$lineValues[5],"; } - print summaryFile '#'."$lineValues[7],$lineValues[10]\n"; + print summaryFile '#'."$lineValues[8],$lineValues[11]\n"; } } @@ -110,11 +110,11 @@ sub CheckRenameFile { while () { if ($_ =~ m/$includeFilter/ && $_ !~ /$excludeFilter/ ) { my @lineValues = split(/,/,$_); - if ( !defined $renameMapping { $lineValues[7] } && - !defined $renameMapping { "_$lineValues[7]" } ) { - die "Rename file does not account for field $lineValues[7]"; + if ( !defined $renameMapping { $lineValues[8] } && + !defined $renameMapping { "_$lineValues[8]" } ) { + die "Rename file does not account for field $lineValues[8]"; } - } + } } while (($key,$value) = each (%renameMapping)) { my @matches = grep { /$value/ } @$staticField_ptr; @@ -170,7 +170,7 @@ sub CreateRemappingFile { open qosmosWorkbook, "$ARGV[0]" or die $!; while ( my $line = ) { @lineValues = split(/,/,$line); - $field = "$lineValues[7]$lineValues[1]"; + $field = "$lineValues[8]$lineValues[2]"; my $index = 0; foreach (@previousData) { if ( $_ =~ /$field/ ) { @@ -188,34 +188,34 @@ sub CreateRemappingFile { while () { if ($_ =~ m/$includeFilter/ && $_ !~ /$excludeFilter/ ) { @lineValues = split(/,/,$_); - $field = "$lineValues[7]$lineValues[1]"; + $field = "$lineValues[8]$lineValues[2]"; if ( $field =~ /^[0-9]/ ) { - $field = "_$lineValues[7]$lineValues[1]"; + $field = "_$lineValues[8]$lineValues[2]"; } if ($callbackNames !~ /,$field,/ ) { $requirement = "optional"; $highest += 1; - $type = $lineValues[9]; + $type = $lineValues[10]; $optionalStuff = ""; - if ($lineValues[9] =~ /timeval/ ) { + if ($lineValues[10] =~ /timeval/ ) { $type = "string"; $optionalStuff = ",timeval,timevalToString"; - } elsif ( $lineValues[9] =~ /ip_addr/ ) { + } elsif ( $lineValues[10] =~ /ip_addr/ ) { $type = "string"; $optionalStuff = ",uint32,ip_addrToString"; - } elsif ( $lineValues[9] =~ /mac_addr/ ) { + } elsif ( $lineValues[10] =~ /mac_addr/ ) { $type = "string"; $optionalStuff = ",clep_mac_addr_t,mac_addrToString"; - } elsif ($lineValues[9] eq "" ) { + } elsif ($lineValues[10] eq "" ) { print "MALFORMED FILE!!!!"; - print "0:$lineValues[0],1:$lineValues[1],2:$lineValues[2],3:lineValues[3],4:$lineValues[4],5:$lineValues[5],6:$lineValues[6],7:$lineValues[7],8:$lineValues[8],9:$lineValues[9]"; + print "0:$lineValues[1],1:$lineValues[2],2:$lineValues[2],3:lineValues[4],4:$lineValues[5],5:$lineValues[6],6:$lineValues[7],7:$lineValues[8],8:$lineValues[9],9:$lineValues[10]"; exit(1); - } elsif ( $lineValues[9] =~ /string/ ) { + } elsif ( $lineValues[10] =~ /string/ ) { $type = "bytes"; $requirement = "repeated"; } - print "$requirement $type $field = $highest; // QOSMOS:$lineValues[1],$lineValues[6]$optionalStuff\n"; + print "$requirement $type $field = $highest; // QOSMOS:$lineValues[2],$lineValues[7]$optionalStuff\n"; } } } diff --git a/scripts/buildESTemplate.pl b/scripts/buildESTemplate.pl index fdc8d278e56e3b..284ff1e47fee05 100644 --- a/scripts/buildESTemplate.pl +++ b/scripts/buildESTemplate.pl @@ -43,8 +43,8 @@ sub ReadProtoFile { print "\"FileID\" "; print "]\n"; print "},\n"; -print "\"properties\" : {\n"; -print "\"SrcIP\" : { \"type\": \"ip\", \"ignore_malformed\" : true },\n"; +print "\"properties\" : {\n"; +print "\"SrcIP\" : { \"type\": \"ip\", \"ignore_malformed\" : true },\n"; print "\"SrcIP6\" : { \"type\": \"string\", \"index\" : \"not_analyzed\", \"ignore_malformed\" : true },\n"; print "\"DestIP\" : { \"type\": \"ip\", \"ignore_malformed\" : true },\n"; print "\"DestIP6\" : { \"type\": \"string\", \"index\" : \"not_analyzed\", \"ignore_malformed\" : true },\n"; @@ -64,6 +64,14 @@ sub ReadProtoFile { print "\"RuleSeverity\" : {\"type\" : \"string\", \"ignore_malformed\" : true},\n"; } +if ( $ARGV[2] eq "rules" ) { + print "\"enabled\" : { \"type\" : \"boolean\" },\n"; + print "\"severity\" : { \"type\" : \"string\" },\n"; + print "\"query\" : { \"type\" : \"object\" },\n"; + print "\"createdDate\" : { \"format\" : \"yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ\", \"type\" : \"date\" },\n"; + print "\"lastModifiedDate\" : { \"format\" : \"yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ\", \"type\" : \"date\" },\n"; +} + for $app ( keys %typeHash ) { if ($app eq "Timestamp" || $app eq "SyslogMessage" ) { print "\"$remapping{$app}\" : { \"type\" : \"string\", \"store\" : \"no\", \"index\" : \"not_analyzed\", \"ignore_malformed\" : true },\n" diff --git a/scripts/buildESTemplate.sh b/scripts/buildESTemplate.sh index d71c810d1e12f0..a93a7b32093888 100755 --- a/scripts/buildESTemplate.sh +++ b/scripts/buildESTemplate.sh @@ -2,6 +2,7 @@ ES_TEMPLATE=resources/network.json EVENTS_TEMPLATE=resources/events.json +NETWORKRULES_TEMPLATE=resources/networkrules.json cat resources/elasticsearch_network_template_header.json > $ES_TEMPLATE perl scripts/buildESTemplate.pl protofiles/DpiMsgLRproto.proto resources/remapping >> $ES_TEMPLATE @@ -10,3 +11,7 @@ cat resources/elasticsearch_network_template_footer.json >> $ES_TEMPLATE cat resources/elasticsearch_events_template_header.json > $EVENTS_TEMPLATE perl scripts/buildESTemplate.pl protofiles/DpiMsgLRproto.proto resources/remapping events >> $EVENTS_TEMPLATE cat resources/elasticsearch_events_template_footer.json >> $EVENTS_TEMPLATE + +cat resources/elasticsearch_networkrules_template_header.json > $NETWORKRULES_TEMPLATE +perl scripts/buildESTemplate.pl protofiles/DpiMsgLRproto.proto resources/remapping rules>> $NETWORKRULES_TEMPLATE +cat resources/elasticsearch_networkrules_template_footer.json >> $NETWORKRULES_TEMPLATE