README

These are patterns for use with the Linux layer 7 packet classifier. 
In order to use them, you will need to use the kernel patch and the
modified version of tc available at http://sf.net/projects/l7-filter/
 
The HOWTO at http://l7-filter.sf.net explains how to use these.
The HOWTO in this directory is a guide to writing patterns.

These patterns should be used only with version >= 0.3.0 of the kernel patch.

The "weakpatterns" directory contains patterns that are too general for them
to be really useful.  They are included because (1) they may be good enough
for some purposes and (2) it will make it easier for people to improve them
if there's something to start with.

The "malware" directory contains patterns for viruses and worms.  The
"file_types" directory contains patterns for file types.  Please read
file_types/README if you plan to use any patterns in these directories.

Please report your experience with these patterns to 
l7-filter-developers@lists.sf.net .  You may subscribe to this list at 
http://lists.sourceforge.net/lists/listinfo/l7-filter-developers

Please note that many of these patterns were written by someone (me,
Matthew Strait) who didn't know anything about the protocol in question
until he started doing google searches for it.  So if you think a
pattern is broken and you know better, you probably do!  Let us know.