L7 filtry jsem si nahazoval timhle skriptem jsou ty paterny atd funkcni kdo to pouziva? Jaky je rozdil v zatizeni CPU pri normalnim manglu + Qtree a pri pouzivani L7 na stejne masine ?
"These strings are taken from the L7 filter project and are licensed under GPL See: http://www.gnu.org/copyleft/gpl.html"
/ip firewall layer7-protocol
([ > 0) do={ "already have edonkey" } else={ add name=edonkey regexp="^.\?.\?.\?.\?([\01\02\05\14\15\16\18\19\1A\1B\1C\20\21\32\33\34\35\36\38\40\41\42\43\46\47\48\49\4A\4B\4C\4D\4E\4F\50\51\52\53\54\55\56\57\58|\59................\?|\96....\$)" }
([ > 0) do={ "already have goboogy" } else={ add name=goboogy regexp="<peerplat>|^get /getfilebyhash\\.cgi\\\?|^get /queue_register\\.cgi\\\?|^get /getupdowninfo\\.cgi\\\?" }
([ > 0) do={ "already have soribada" } else={ add name=soribada regexp="^GETMP3\0D\0AFilename|^\01.\?.\?.\?(\51\3A\\+|\51\32\3A)|^\10\10.\?.\?.\?.\?\$" }
([ > 0) do={ "already have rdp" } else={ add name=rdp regexp="rdpdr.*cliprdr.*rdpsnd" }
([ > 0) do={ "already have gnutella" } else={ add name=gnutella regexp="^(gnd\?.\?.\?\01|gnutella connect\\.\0D\0A|get /uri-res/n2r\\\?urn:|get /.*user-agent: (gtk-gnutella|bearshare|mactella|gnucleus|gnotella|limewire|imesh)|get /.*content-type: application/x-gnutella-packets|giv *:*/|queue * \?\?\\.\?\?\\.\?\?\\.\?\?:\?\?\?|gnutella.*content-type: application/x-gnutella|...................\?lime)" }
([ > 0) do={ "already have cvs" } else={ add name=cvs regexp="^BEGIN (AUTH|VERIFICATION|GSSAPI) REQUEST\0A" }
([ > 0) do={ "already have nbns" } else={ add name=nbns regexp="\01\10\01|\\)\10\01\01|0\10\01" }
([ > 0) do={ "already have shoutcast" } else={ add name=shoutcast regexp="icy *(content-type|icy-)" }
([ > 0) do={ "already have dns" } else={ add name=dns regexp="^.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?*\?\?(um)\?" }
([ > 0) do={ "already have quake-halflife" } else={ add name=quake-halflife regexp="^\FF\FF\FF\FFget(info|challenge)" }
([ > 0) do={ "already have poco" } else={ add name=poco regexp="^\80\94\0A\01....\1F\9E" }
([ > 0) do={ "already have ciscovpn" } else={ add name=ciscovpn regexp="^\01\F4\01\F4" }
([ > 0) do={ "already have x11" } else={ add name=x11 regexp="^.\?\0B" }
([ > 0) do={ "already have xboxlive" } else={ add name=xboxlive regexp="^\58\80........\F3|^\06\58\4E" }
([ > 0) do={ "already have applejuice" } else={ add name=applejuice regexp="^ajprot\0D\0A" }
([ > 0) do={ "already have zmaap" } else={ add name=zmaap regexp="^\1B\D7\3B\48\01\?\01" }
([ > 0) do={ "already have live365" } else={ add name=live365 regexp="membername.*session.*player" }
([ > 0) do={ "already have rlogin" } else={ add name=rlogin regexp="^+\?\?\?00" }
([ > 0) do={ "already have http" } else={ add name=http regexp="http/(0\\.9|1\\.0|1\\.1) *(connection:|content-type:|content-length:|date:)|post * http\\." }
([ > 0) do={ "already have sip" } else={ add name=sip regexp="^(invite|register|cancel) sip*sip\\." }
([ > 0) do={ "already have pop3" } else={ add name=pop3 regexp="^(\\+ok |-err )" }
([ > 0) do={ "already have smb" } else={ add name=smb regexp="\FFsmb" }
([ > 0) do={ "already have quake1" } else={ add name=quake1 regexp="^\80\0C\01quake\03" }
([ > 0) do={ "already have lpd" } else={ add name=lpd regexp="^(\01+|\02+\0A.*|++*|\05++(*+\?\?|root++).*)\0A\$" }
([ > 0) do={ "already have mute" } else={ add name=mute regexp="^(Public|AES)Key: *\0AEnd(Public|AES)Key\0A\$" }
([ > 0) do={ "already have ssh" } else={ add name=ssh regexp="^ssh-\\." }
([ > 0) do={ "already have jabber" } else={ add name=jabber regexp="<stream*xmlns=jabber" }
([ > 0) do={ "already have bittorrent" } else={ add name=bittorrent regexp="^(\13bittorrent protocol|azver\01\$|get /scrape\\\?info_hash=)|d1:|\08'7P\\)" }
([ > 0) do={ "already have ncp" } else={ add name=ncp regexp="^(dmdt.*\01.*(\"\"|\11\11|uu)|tncp.*33)" }
([ > 0) do={ "already have tls" } else={ add name=tls regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)" }
([ > 0) do={ "already have directconnect" } else={ add name=directconnect regexp="^(\\\$mynick |\\\$lock |\\\$key )" }
([ > 0) do={ "already have netbios" } else={ add name=netbios regexp="\81.\?.\?." }
([ > 0) do={ "already have tftp" } else={ add name=tftp regexp="^(\01|\02)*(netascii|octet|mail)" }
([ > 0) do={ "already have subspace" } else={ add name=subspace regexp="^\01....\11\10........\01\$" }
([ > 0) do={ "already have hotline" } else={ add name=hotline regexp="^....................TRTPHOTL\01\02" }
([ > 0) do={ "already have doom3" } else={ add name=doom3 regexp="^\FF\FFchallenge" }
([ > 0) do={ "already have ftp" } else={ add name=ftp regexp="^220*ftp" }
([ > 0) do={ "already have kugoo" } else={ add name=kugoo regexp="^\31..\8E" }
([ > 0) do={ "already have tsp" } else={ add name=tsp regexp="^\01.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?+" }
([ > 0) do={ "already have battlefield1942" } else={ add name=battlefield1942 regexp="^\01\11\10\\|\F8\02\10\40\06" }
([ > 0) do={ "already have ssdp" } else={ add name=ssdp regexp="^notify\\*http/1\\.1*ssdp:(alive|byebye)|^m-search\\*http/1\\.1*ssdp" }
([ > 0) do={ "already have imap" } else={ add name=imap regexp="^(\\* ok|a+ noop)" }
([ > 0) do={ "already have ares" } else={ add name=ares regexp="^\03.\?.\?\05\$" }
([ > 0) do={ "already have fasttrack" } else={ add name=fasttrack regexp="^get (/.download*|/.supernode|/.status|/.network*|/.files|/.hash=**) http/1.1|user-agent: kazaa|x-kazaa(-username|-network|-ip|-supernodeip|-xferid|-xferuid|tag)|^give \?\?\?" }
([ > 0) do={ "already have qq" } else={ add name=qq regexp="^.\?\02.+\03\$" }
([ > 0) do={ "already have 100bao" } else={ add name=100bao regexp="^\01\01\05\0A" }
([ > 0) do={ "already have aim" } else={ add name=aim regexp="^(\\*.*\03\0B|\\*\01.\?.\?.\?.\?\01)|flapon|toc_signon.*0x" }
([ > 0) do={ "already have unknown" } else={ add name=unknown regexp="." }
([ > 0) do={ "already have msn-filetransfer" } else={ add name=msn-filetransfer regexp="^(ver *msnftp\0D\0Aver msnftp\0D\0Ausr|method msnmsgr:)" }
([ > 0) do={ "already have yahoo" } else={ add name=yahoo regexp="^(ymsg|ypns|yhoo).\?.\?.\?.\?.\?.\?.\?.*\C0\80" }
([ > 0) do={ "already have validcertssl" } else={ add name=validcertssl regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B).*(thawte|equifax secure|rsa data security, inc|verisign, inc|gte cybertrust root|entrust\\.net limited)" }
([ > 0) do={ "already have ntp" } else={ add name=ntp regexp="^(|.......\?.\?.\?.\?.\?.\?.\?.\?.\?)" }
([ > 0) do={ "already have gnucleuslan" } else={ add name=gnucleuslan regexp="gnuclear connect*user-agent: gnucleus *lan:" }
([ > 0) do={ "already have vnc" } else={ add name=vnc regexp="^rfb 00\\.00\0A\$" }
([ > 0) do={ "already have bgp" } else={ add name=bgp regexp="^\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF..\?\01" }
([ > 0) do={ "already have tesla" } else={ add name=tesla regexp="\03\9A\89\22\31\31\31\\.\30\30\20\42\65\74\61\20|\E2\3C\69\1E\1C\E9" }
([ > 0) do={ "already have openft" } else={ add name=openft regexp="x-openftalias: " }
([ > 0) do={ "already have h323" } else={ add name=h323 regexp="^\03..\?\08...\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\05" }
([ > 0) do={ "already have finger" } else={ add name=finger regexp="^+|login: * name: * Directory:" }
([ > 0) do={ "already have ident" } else={ add name=ident regexp="^\?\?\?\?*,*\?\?\?\?(\0D\0A|)\?\$" }
([ > 0) do={ "already have gkrellm" } else={ add name=gkrellm regexp="^gkrellm ..\0A\$" }
([ > 0) do={ "already have hddtemp" } else={ add name=hddtemp regexp="^\\|/dev\\|*\\|\\|\\|" }
([ > 0) do={ "already have socks" } else={ add name=socks regexp="\05*\05\?.*\05.*\05\?" }
([ > 0) do={ "already have biff" } else={ add name=biff regexp="^+@+\$" }
([ > 0) do={ "already have dhcp" } else={ add name=dhcp regexp="^\06.*c\82sc" }
([ > 0) do={ "already have smtp" } else={ add name=smtp regexp="^220* (e\?smtp|simple mail)" }
([ > 0) do={ "already have ipp" } else={ add name=ipp regexp="ipp://" }
([ > 0) do={ "already have msnmessenger" } else={ add name=msnmessenger regexp="ver + msnp\? *cvr0\0D\0A\$|usr 1 + +\0D\0A\$|ans 1 + +\0D\0A\$" }
([ > 0) do={ "already have irc" } else={ add name=irc regexp="^(nick*user*:|user*:*nick*\0D\0A)" }
([ > 0) do={ "already have gopher" } else={ add name=gopher regexp="^**\09*\09*\\..\?.\?\09" }
([ > 0) do={ "already have telnet" } else={ add name=telnet regexp="^\FF.\FF.\FF" }
([ > 0) do={ "already have snmp" } else={ add name=snmp regexp="^\02\01\04.+(\02.\?.\?.\?.\?\02\01.\?\02\01.\?\30|\A4\06.+\40\04.\?.\?.\?.\?\02\01.\?\02\01.\?\43)" }
([ > 0) do={ "already have nntp" } else={ add name=nntp regexp="^(20*AUTHINFO USER|20*news)" }
([ > 0) do={ "already have aimwebcontent" } else={ add name=aimwebcontent regexp="user-agent/" }
([ > 0) do={ "already have rtsp" } else={ add name=rtsp regexp="rtsp/1.0 200 ok" }
([ > 0) do={ "already have skypeout" } else={ add name=skypeout regexp="^(\01.\?.\?.\?.\?.\?.\?.\?.\?\01|\02.\?.\?.\?.\?.\?.\?.\?.\?\02|\03.\?.\?.\?.\?.\?.\?.\?.\?\03|\04.\?.\?.\?.\?.\?.\?.\?.\?\04|\05.\?.\?.\?.\?.\?.\?.\?.\?\05|\06.\?.\?.\?.\?.\?.\?.\?.\?\06|\07.\?.\?.\?.\?.\?.\?.\?.\?\07|\08.\?.\?.\?.\?.\?.\?.\?.\?\08|\09.\?.\?.\?.\?.\?.\?.\?.\?\09|\0A.\?.\?.\?.\?.\?.\?.\?.\?\0A|\0B.\?.\?.\?.\?.\?.\?.\?.\?\0B|\0C.\?.\?.\?.\?.\?.\?.\?.\?\0C|\0D.\?.\?.\?.\?.\?.\?.\?.\?\0D|\0E.\?.\?.\?.\?.\?.\?.\?.\?\0E|\0F.\?.\?.\?.\?.\?.\?.\?.\?\0F|\10.\?.\?.\?.\?.\?.\?.\?.\?\10|\11.\?.\?.\?.\?.\?.\?.\?.\?\11|\12.\?.\?.\?.\?.\?.\?.\?.\?\12|\13.\?.\?.\?.\?.\?.\?.\?.\?\13|\14.\?.\?.\?.\?.\?.\?.\?.\?\14|\15.\?.\?.\?.\?.\?.\?.\?.\?\15|\16.\?.\?.\?.\?.\?.\?.\?.\?\16|\17.\?.\?.\?.\?.\?.\?.\?.\?\17|\18.\?.\?.\?.\?.\?.\?.\?.\?\18|\19.\?.\?.\?.\?.\?.\?.\?.\?\19|\1A.\?.\?.\?.\?.\?.\?.\?.\?\1A|\1B.\?.\?.\?.\?.\?.\?.\?.\?\1B|\1C.\?.\?.\?.\?.\?.\?.\?.\?\1C|\1D.\?.\?.\?.\?.\?.\?.\?.\?\1D|\1E.\?.\?.\?.\?.\?.\?.\?.\?\1E|\1F.\?.\?.\?.\?.\?.\?.\?.\?\1F|\20.\?.\?.\?.\?.\?.\?.\?.\?\20|\21.\?.\?.\?.\?.\?.\?.\?.\?\21|\22.\?.\?.\?.\?.\?.\?.\?.\?\22|\23.\?.\?.\?.\?.\?.\?.\?.\?\23|\\\$.\?.\?.\?.\?.\?.\?.\?.\?\\\$|\25.\?.\?.\?.\?.\?.\?.\?.\?\25|\26.\?.\?.\?.\?.\?.\?.\?.\?\26|\27.\?.\?.\?.\?.\?.\?.\?.\?\27|\\(.\?.\?.\?.\?.\?.\?.\?.\?\\(|\\).\?.\?.\?.\?.\?.\?.\?.\?\\)|\\*.\?.\?.\?.\?.\?.\?.\?.\?\\*|\\+.\?.\?.\?.\?.\?.\?.\?.\?\\+|\2C.\?.\?.\?.\?.\?.\?.\?.\?\2C|\2D.\?.\?.\?.\?.\?.\?.\?.\?\2D|\\..\?.\?.\?.\?.\?.\?.\?.\?\\.|\2F.\?.\?.\?.\?.\?.\?.\?.\?\2F|\30.\?.\?.\?.\?.\?.\?.\?.\?\30|\31.\?.\?.\?.\?.\?.\?.\?.\?\31|\32.\?.\?.\?.\?.\?.\?.\?.\?\32|\33.\?.\?.\?.\?.\?.\?.\?.\?\33|\34.\?.\?.\?.\?.\?.\?.\?.\?\34|\35.\?.\?.\?.\?.\?.\?.\?.\?\35|\36.\?.\?.\?.\?.\?.\?.\?.\?\36|\37.\?.\?.\?.\?.\?.\?.\?.\?\37|\38.\?.\?.\?.\?.\?.\?.\?.\?\38|\39.\?.\?.\?.\?.\?.\?.\?.\?\39|\3A.\?.\?.\?.\?.\?.\?.\?.\?\3A|\3B.\?.\?.\?.\?.\?.\?.\?.\?\3B|\3C.\?.\?.\?.\?.\?.\?.\?.\?\3C|\3D.\?.\?.\?.\?.\?.\?.\?.\?\3D|\3E.\?.\?.\?.\?.\?.\?.\?.\?\3E|\\\?.\?.\?.\?.\?.\?.\?.\?.\?\\\?|\40.\?.\?.\?.\?.\?.\?.\?.\?\40|\41.\?.\?.\?.\?.\?.\?.\?.\?\41|\42.\?.\?.\?.\?.\?.\?.\?.\?\42|\43.\?.\?.\?.\?.\?.\?.\?.\?\43|\44.\?.\?.\?.\?.\?.\?.\?.\?\44|\45.\?.\?.\?.\?.\?.\?.\?.\?\45|\46.\?.\?.\?.\?.\?.\?.\?.\?\46|\47.\?.\?.\?.\?.\?.\?.\?.\?\47|\48.\?.\?.\?.\?.\?.\?.\?.\?\48|\49.\?.\?.\?.\?.\?.\?.\?.\?\49|\4A.\?.\?.\?.\?.\?.\?.\?.\?\4A|\4B.\?.\?.\?.\?.\?.\?.\?.\?\4B|\4C.\?.\?.\?.\?.\?.\?.\?.\?\4C|\4D.\?.\?.\?.\?.\?.\?.\?.\?\4D|\4E.\?.\?.\?.\?.\?.\?.\?.\?\4E|\4F.\?.\?.\?.\?.\?.\?.\?.\?\4F|\50.\?.\?.\?.\?.\?.\?.\?.\?\50|\51.\?.\?.\?.\?.\?.\?.\?.\?\51|\52.\?.\?.\?.\?.\?.\?.\?.\?\52|\53.\?.\?.\?.\?.\?.\?.\?.\?\53|\54.\?.\?.\?.\?.\?.\?.\?.\?\54|\55.\?.\?.\?.\?.\?.\?.\?.\?\55|\56.\?.\?.\?.\?.\?.\?.\?.\?\56|\57.\?.\?.\?.\?.\?.\?.\?.\?\57|\58.\?.\?.\?.\?.\?.\?.\?.\?\58|\59.\?.\?.\?.\?.\?.\?.\?.\?\59|\5A.\?.\?.\?.\?.\?.\?.\?.\?\5A|\\[.\?.\?.\?.\?.\?.\?.\?.\?\\|\\^.\?.\?.\?.\?.\?.\?.\?.\?\\^|\5F.\?.\?.\?.\?.\?.\?.\?.\?\5F|\60.\?.\?.\?.\?.\?.\?.\?.\?\60|\61.\?.\?.\?.\?.\?.\?.\?.\?\61|\62.\?.\?.\?.\?.\?.\?.\?.\?\62|\63.\?.\?.\?.\?.\?.\?.\?.\?\63|\64.\?.\?.\?.\?.\?.\?.\?.\?\64|\65.\?.\?.\?.\?.\?.\?.\?.\?\65|\66.\?.\?.\?.\?.\?.\?.\?.\?\66|\67.\?.\?.\?.\?.\?.\?.\?.\?\67|\68.\?.\?.\?.\?.\?.\?.\?.\?\68|\69.\?.\?.\?.\?.\?.\?.\?.\?\69|\6A.\?.\?.\?.\?.\?.\?.\?.\?\6A|\6B.\?.\?.\?.\?.\?.\?.\?.\?\6B|\6C.\?.\?.\?.\?.\?.\?.\?.\?\6C|\6D.\?.\?.\?.\?.\?.\?.\?.\?\6D|\6E.\?.\?.\?.\?.\?.\?.\?.\?\6E|\6F.\?.\?.\?.\?.\?.\?.\?.\?\6F|\70.\?.\?.\?.\?.\?.\?.\?.\?\70|\71.\?.\?.\?.\?.\?.\?.\?.\?\71|\72.\?.\?.\?.\?.\?.\?.\?.\?\72|\73.\?.\?.\?.\?.\?.\?.\?.\?\73|\74.\?.\?.\?.\?.\?.\?.\?.\?\74|\75.\?.\?.\?.\?.\?.\?.\?.\?\75|\76.\?.\?.\?.\?.\?.\?.\?.\?\76|\77.\?.\?.\?.\?.\?.\?.\?.\?\77|\78.\?.\?.\?.\?.\?.\?.\?.\?\78|\79.\?.\?.\?.\?.\?.\?.\?.\?\79|\7A.\?.\?.\?.\?.\?.\?.\?.\?\7A|\\{.\?.\?.\?.\?.\?.\?.\?.\?\\{|\\|.\?.\?.\?.\?.\?.\?.\?.\?\\||\\}.\?.\?.\?.\?.\?.\?.\?.\?\\}|\7E.\?.\?.\?.\?.\?.\?.\?.\?\7E|\7F.\?.\?.\?.\?.\?.\?.\?.\?\7F|\80.\?.\?.\?.\?.\?.\?.\?.\?\80|\81.\?.\?.\?.\?.\?.\?.\?.\?\81|\82.\?.\?.\?.\?.\?.\?.\?.\?\82|\83.\?.\?.\?.\?.\?.\?.\?.\?\83|\84.\?.\?.\?.\?.\?.\?.\?.\?\84|\85.\?.\?.\?.\?.\?.\?.\?.\?\85|\86.\?.\?.\?.\?.\?.\?.\?.\?\86|\87.\?.\?.\?.\?.\?.\?.\?.\?\87|\88.\?.\?.\?.\?.\?.\?.\?.\?\88|\89.\?.\?.\?.\?.\?.\?.\?.\?\89|\8A.\?.\?.\?.\?.\?.\?.\?.\?\8A|\8B.\?.\?.\?.\?.\?.\?.\?.\?\8B|\8C.\?.\?.\?.\?.\?.\?.\?.\?\8C|\8D.\?.\?.\?.\?.\?.\?.\?.\?\8D|\8E.\?.\?.\?.\?.\?.\?.\?.\?\8E|\8F.\?.\?.\?.\?.\?.\?.\?.\?\8F|\90.\?.\?.\?.\?.\?.\?.\?.\?\90|\91.\?.\?.\?.\?.\?.\?.\?.\?\91|\92.\?.\?.\?.\?.\?.\?.\?.\?\92|\93.\?.\?.\?.\?.\?.\?.\?.\?\93|\94.\?.\?.\?.\?.\?.\?.\?.\?\94|\95.\?.\?.\?.\?.\?.\?.\?.\?\95|\96.\?.\?.\?.\?.\?.\?.\?.\?\96|\97.\?.\?.\?.\?.\?.\?.\?.\?\97|\98.\?.\?.\?.\?.\?.\?.\?.\?\98|\99.\?.\?.\?.\?.\?.\?.\?.\?\99|\9A.\?.\?.\?.\?.\?.\?.\?.\?\9A|\9B.\?.\?.\?.\?.\?.\?.\?.\?\9B|\9C.\?.\?.\?.\?.\?.\?.\?.\?\9C|\9D.\?.\?.\?.\?.\?.\?.\?.\?\9D|\9E.\?.\?.\?.\?.\?.\?.\?.\?\9E|\9F.\?.\?.\?.\?.\?.\?.\?.\?\9F|\A0.\?.\?.\?.\?.\?.\?.\?.\?\A0|\A1.\?.\?.\?.\?.\?.\?.\?.\?\A1|\A2.\?.\?.\?.\?.\?.\?.\?.\?\A2|\A3.\?.\?.\?.\?.\?.\?.\?.\?\A3|\A4.\?.\?.\?.\?.\?.\?.\?.\?\A4|\A5.\?.\?.\?.\?.\?.\?.\?.\?\A5|\A6.\?.\?.\?.\?.\?.\?.\?.\?\A6|\A7.\?.\?.\?.\?.\?.\?.\?.\?\A7|\A8.\?.\?.\?.\?.\?.\?.\?.\?\A8|\A9.\?.\?.\?.\?.\?.\?.\?.\?\A9|\AA.\?.\?.\?.\?.\?.\?.\?.\?\AA|\AB.\?.\?.\?.\?.\?.\?.\?.\?\AB|\AC.\?.\?.\?.\?.\?.\?.\?.\?\AC|\AD.\?.\?.\?.\?.\?.\?.\?.\?\AD|\AE.\?.\?.\?.\?.\?.\?.\?.\?\AE|\AF.\?.\?.\?.\?.\?.\?.\?.\?\AF|\B0.\?.\?.\?.\?.\?.\?.\?.\?\B0|\B1.\?.\?.\?.\?.\?.\?.\?.\?\B1|\B2.\?.\?.\?.\?.\?.\?.\?.\?\B2|\B3.\?.\?.\?.\?.\?.\?.\?.\?\B3|\B4.\?.\?.\?.\?.\?.\?.\?.\?\B4|\B5.\?.\?.\?.\?.\?.\?.\?.\?\B5|\B6.\?.\?.\?.\?.\?.\?.\?.\?\B6|\B7.\?.\?.\?.\?.\?.\?.\?.\?\B7|\B8.\?.\?.\?.\?.\?.\?.\?.\?\B8|\B9.\?.\?.\?.\?.\?.\?.\?.\?\B9|\BA.\?.\?.\?.\?.\?.\?.\?.\?\BA|\BB.\?.\?.\?.\?.\?.\?.\?.\?\BB|\BC.\?.\?.\?.\?.\?.\?.\?.\?\BC|\BD.\?.\?.\?.\?.\?.\?.\?.\?\BD|\BE.\?.\?.\?.\?.\?.\?.\?.\?\BE|\BF.\?.\?.\?.\?.\?.\?.\?.\?\BF|\C0.\?.\?.\?.\?.\?.\?.\?.\?\C0|\C1.\?.\?.\?.\?.\?.\?.\?.\?\C1|\C2.\?.\?.\?.\?.\?.\?.\?.\?\C2|\C3.\?.\?.\?.\?.\?.\?.\?.\?\C3|\C4.\?.\?.\?.\?.\?.\?.\?.\?\C4|\C5.\?.\?.\?.\?.\?.\?.\?.\?\C5|\C6.\?.\?.\?.\?.\?.\?.\?.\?\C6|\C7.\?.\?.\?.\?.\?.\?.\?.\?\C7|\C8.\?.\?.\?.\?.\?.\?.\?.\?\C8|\C9.\?.\?.\?.\?.\?.\?.\?.\?\C9|\CA.\?.\?.\?.\?.\?.\?.\?.\?\CA|\CB.\?.\?.\?.\?.\?.\?.\?.\?\CB|\CC.\?.\?.\?.\?.\?.\?.\?.\?\CC|\CD.\?.\?.\?.\?.\?.\?.\?.\?\CD|\CE.\?.\?.\?.\?.\?.\?.\?.\?\CE|\CF.\?.\?.\?.\?.\?.\?.\?.\?\CF|\D0.\?.\?.\?.\?.\?.\?.\?.\?\D0|\D1.\?.\?.\?.\?.\?.\?.\?.\?\D1|\D2.\?.\?.\?.\?.\?.\?.\?.\?\D2|\D3.\?.\?.\?.\?.\?.\?.\?.\?\D3|\D4.\?.\?.\?.\?.\?.\?.\?.\?\D4|\D5.\?.\?.\?.\?.\?.\?.\?.\?\D5|\D6.\?.\?.\?.\?.\?.\?.\?.\?\D6|\D7.\?.\?.\?.\?.\?.\?.\?.\?\D7|\D8.\?.\?.\?.\?.\?.\?.\?.\?\D8|\D9.\?.\?.\?.\?.\?.\?.\?.\?\D9|\DA.\?.\?.\?.\?.\?.\?.\?.\?\DA|\DB.\?.\?.\?.\?.\?.\?.\?.\?\DB|\DC.\?.\?.\?.\?.\?.\?.\?.\?\DC|\DD.\?.\?.\?.\?.\?.\?.\?.\?\DD|\DE.\?.\?.\?.\?.\?.\?.\?.\?\DE|\DF.\?.\?.\?.\?.\?.\?.\?.\?\DF|\E0.\?.\?.\?.\?.\?.\?.\?.\?\E0|\E1.\?.\?.\?.\?.\?.\?.\?.\?\E1|\E2.\?.\?.\?.\?.\?.\?.\?.\?\E2|\E3.\?.\?.\?.\?.\?.\?.\?.\?\E3|\E4.\?.\?.\?.\?.\?.\?.\?.\?\E4|\E5.\?.\?.\?.\?.\?.\?.\?.\?\E5|\E6.\?.\?.\?.\?.\?.\?.\?.\?\E6|\E7.\?.\?.\?.\?.\?.\?.\?.\?\E7|\E8.\?.\?.\?.\?.\?.\?.\?.\?\E8|\E9.\?.\?.\?.\?.\?.\?.\?.\?\E9|\EA.\?.\?.\?.\?.\?.\?.\?.\?\EA|\EB.\?.\?.\?.\?.\?.\?.\?.\?\EB|\EC.\?.\?.\?.\?.\?.\?.\?.\?\EC|\ED.\?.\?.\?.\?.\?.\?.\?.\?\ED|\EE.\?.\?.\?.\?.\?.\?.\?.\?\EE|\EF.\?.\?.\?.\?.\?.\?.\?.\?\EF|\F0.\?.\?.\?.\?.\?.\?.\?.\?\F0|\F1.\?.\?.\?.\?.\?.\?.\?.\?\F1|\F2.\?.\?.\?.\?.\?.\?.\?.\?\F2|\F3.\?.\?.\?.\?.\?.\?.\?.\?\F3|\F4.\?.\?.\?.\?.\?.\?.\?.\?\F4|\F5.\?.\?.\?.\?.\?.\?.\?.\?\F5|\F6.\?.\?.\?.\?.\?.\?.\?.\?\F6|\F7.\?.\?.\?.\?.\?.\?.\?.\?\F7|\F8.\?.\?.\?.\?.\?.\?.\?.\?\F8|\F9.\?.\?.\?.\?.\?.\?.\?.\?\F9|\FA.\?.\?.\?.\?.\?.\?.\?.\?\FA|\FB.\?.\?.\?.\?.\?.\?.\?.\?\FB|\FC.\?.\?.\?.\?.\?.\?.\?.\?\FC|\FD.\?.\?.\?.\?.\?.\?.\?.\?\FD|\FE.\?.\?.\?.\?.\?.\?.\?.\?\FE|\FF.\?.\?.\?.\?.\?.\?.\?.\?\FF)" }
([ > 0) do={ "already have skypetoskype" } else={ add name=skypetoskype regexp="^..\02............." }
([ > 0) do={ "already have counterstrike-source" } else={ add name=counterstrike-source regexp="^\FF\FF\FF\FF.*cstrikeCounter-Strike" }
([ > 0) do={ "already have halflife2-deathmatch" } else={ add name=halflife2-deathmatch regexp="^\FF\FF\FF\FF.*hl2mpDeathmatch" }
([ > 0) do={ "already have freenet" } else={ add name=freenet regexp="^\01" }
([ > 0) do={ "already have battlefield2" } else={ add name=battlefield2 regexp="^(\11\20\01...\?\11|\FE\FD.\?.\?.\?.\?.\?.\?(\14\01\06|\FF\FF\FF))|.\?battlefield2" }
([ > 0) do={ "already have napster" } else={ add name=napster regexp="^(.+ + \?\?\?\? \"+\" (|10)|1(send|get)+ \"+\")" }
([ > 0) do={ "already have soulseek" } else={ add name=soulseek regexp="^(\05..\?|.\01.+\01F..\?.\?.\?.\?.\?.\?.\?)\$" }
([ > 0) do={ "already have xunlei" } else={ add name=xunlei regexp="^...\?.\?.\?(reg|get|query)" }
([ > 0) do={ "already have ssl" } else={ add name=ssl regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)" }
([ > 0) do={ "already have citrix" } else={ add name=citrix regexp="\32\26\85\92\58" }
([ > 0) do={ "already have whois" } else={ add name=whois regexp="^+\0D\0A\$" }
([ > 0) do={ "already have dayofdefeat-source" } else={ add name=dayofdefeat-source regexp="^\FF\FF\FF\FF.*dodDay of Defeat" }
([ > 0) do={ "already have teamspeak" } else={ add name=teamspeak regexp="^\F4\BE\03.*teamspeak" }
([ > 0) do={ "already have worldofwarcraft" } else={ add name=worldofwarcraft regexp="^\06\EC\01" }
([ > 0) do={ "already have ventrilo" } else={ add name=ventrilo regexp="^..\?v\\\$\CF" }
([ > 0) do={ "already have http-rtsp" } else={ add name=http-rtsp regexp="^(get* Accept: application/x-rtsp-tunnelled|http/(0\\.9|1\\.0|1\\.1) *a=control://)" }
([ > 0) do={ "already have thecircle" } else={ add name=thecircle regexp="^t\03ni.\?\?ts(glob|who are you\$|query data)" }
([ > 0) do={ "already have uucp" } else={ add name=uucp regexp="^\10here=" }
([ > 0) do={ "already have pcanywhere" } else={ add name=pcanywhere regexp="^(nq|st)\$" }
([ > 0) do={ "already have subversion" } else={ add name=subversion regexp="^\\( success \\( 1 2 \\(" }
([ > 0) do={ "already have imesh" } else={ add name=imesh regexp="^(post*<PasswordHash>................................</PasswordHash><ClientVer>|\34\80\?\0D\?\FC\FF\04|get*Host: imsh\\.download-prod\\.musicnet\\.com|\02(\01|\02)\83.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\02(\01|\02)\83)" }
([ > 0) do={ "already have cimd" } else={ add name=cimd regexp="\02:+.*\03\$" }
([ > 0) do={ "already have mohaa" } else={ add name=mohaa regexp="^\FF\FF\FF\FFgetstatus\0A" }
([ > 0) do={ "already have stun" } else={ add name=stun regexp="^................\?\$" }
([ > 0) do={ "already have tor" } else={ add name=tor regexp="TOR1.*<identity>" }
([ > 0) do={ "already have radmin" } else={ add name=radmin regexp="^\01\01(\08\08|\1B\1B)\$" }
([ > 0) do={ "already have unset" } else={ add name=unset regexp="." }
([ > 0) do={ "already have chikka" } else={ add name=chikka regexp="^CTPv1. Kamusta.*\0D\0A\$" }
([ > 0) do={ "already have replaytv-ivs" } else={ add name=replaytv-ivs regexp="^(get /ivs-IVSGetFileChunk|http/(0\\.9|1\\.0|1\\.1) *\23\23\23\23\23REPLAY_CHUNK_START\23\23\23\23\23)" }
([ > 0) do={ "already have armagetron" } else={ add name=armagetron regexp="YCLC_E|CYEL" }
