ident.pat 628 B

1234567891011121314
  1. # Ident - Identification Protocol - RFC 1413
  2. # Pattern quality: good veryfast
  3. # Usually runs on port 113
  4. #
  5. # This pattern is believed to work. If it does not
  6. # work for you, or you believe it could be improved, please post to
  7. # l7-filter-developers@lists.sf.net . This list may be subscribed to at
  8. # http://lists.sourceforge.net/lists/listinfo/l7-filter-developers
  9. ident
  10. # "number , numberCRLF" possibly without the CR and/or LF.
  11. # ^$ is appropriate because the first packet should never have anything
  12. # else in it.
  13. ^[1-9][0-9]?[0-9]?[0-9]?[0-9]?[\x09-\x0d]*,[\x09-\x0d]*[1-9][0-9]?[0-9]?[0-9]?[0-9]?(\x0d\x0a|[\x0d\x0a])?$