diff --git a/protofiles/Applications.proto b/protofiles/Applications.proto index 9d6684c7a071c..8dbc171edcfcc 100644 --- a/protofiles/Applications.proto +++ b/protofiles/Applications.proto @@ -2184,4 +2184,62 @@ optional string visir = 2182 [default = "Icelandic news portal"]; optional string conviva = 2183 [default = "Conviva is a video streaming solution provider for audio/video content web services."]; optional string seneweb = 2184 [default = "Senegalese news portal"]; optional string hln = 2185 [default = "Belgian news portal"]; +optional string globalpublishers = 2186 [default = "Tanzanian news portal"]; +optional string ultimahora = 2187 [default = "Honduran news portal"]; +optional string octoshape = 2188 [default = "Octoshape is a video streaming solution provider for web streaming platforms which uses P2P technology."]; +optional string kwejk = 2189 [default = "Polish multimedia website"]; +optional string mercador = 2190 [default = "Romanian classified ads portal"]; +optional string retroshare = 2191 [default = "Retroshare is a communication and file-sharing Open Source platform which is secured and decentralized."]; +optional string haber7 = 2192 [default = "Turkish tv streaming website"]; +optional string scheduled_tp = 2193 [default = "STP is a connection-oriented data transfer protocol. It is found over the IP layer (IANA protocol number: 118)."]; +optional string moe_gov = 2194 [default = "Omanian Ministry of Education portal"]; +optional string top_channel = 2195 [default = "Albanina tv streaming website"]; +optional string bittorrent_application = 2196 [default = "This signature detects the access to the BitTorrent Apps web ressources from the BitTorrent application."]; +optional string livemail_attach = 2197 [default = "This signature detects Windows Live Mail File attachment uploads."]; +optional string sahafah = 2198 [default = "Yemeni news portal"]; +optional string newvision = 2199 [default = "Ugandan news portal"]; +optional string educarriere = 2200 [default = "Ivory Coast Job portal"]; +optional string eltiempo = 2201 [default = "Colombian news portal"]; +optional string yemen_net = 2202 [default = "Yemeni service provider portal"]; +optional string mihanwebads = 2203 [default = "Iranian Internet AD company website"]; +optional string arabiaweather = 2204 [default = "Jordanian meteorological portal"]; +optional string my_talking_tom = 2205 [default = "My Talking Tom is a mobile game."]; +optional string the_simpsons_tapped_out = 2206 [default = "Mobile game (EA Games)."]; +optional string aib = 2207 [default = "Irish banking website"]; +optional string noticias24 = 2208 [default = "Venezuelian news portal"]; +optional string deer_hunter_2014 = 2209 [default = "Mobile game."]; +optional string khmer_news = 2210 [default = "Cambodian news portal"]; +optional string fruit_ninja = 2211 [default = "Mobile game."]; +optional string clumsy_ninja = 2212 [default = "Mobile game."]; +optional string google_accounts = 2213 [default = "Detects SSL access to the Google Accounts server."]; +optional string gazetaexpress = 2214 [default = "Albanian news portal"]; +optional string jamaicaobserver = 2215 [default = "Jamaican news portal"]; +optional string xl = 2216 [default = "Portugese multisites and portal"]; +optional string mosaiquefm = 2217 [default = "Tunisian radio streaming website"]; +optional string mikogo = 2218 [default = "Mikogo is a free desktop sharing and web conferencing service."]; +optional string over_blog = 2219 [default = "French and American blog administration website"]; +optional string fnb = 2220 [default = "South African banking website"]; +optional string sarayanews = 2221 [default = "Jordanian news portal"]; +optional string oneworld_org = 2222 [default = "OneWorld is a NGO with a mission to provide internet and mobile phone applications to third-world countries inhabitants"]; +optional string mover = 2223 [default = "Uzbek vide streaming website"]; +optional string perfect_dark = 2224 [default = "Perfect Dark is a peer-to-peer file-sharing (P2P) protocol from Japan."]; +optional string gazzetta = 2225 [default = "Greek news portal"]; +optional string elhourriya = 2226 [default = "Mauritanian news portal"]; +optional string lapatilla = 2227 [default = "Venezuelian news portal"]; +optional string palweather = 2228 [default = "Palestinian meteorological portal"]; +optional string armorgames_play = 2229 [default = "This signature detects requests to play games on ArmorGames.com an on-line flash-based video game site. Users can play simple video games for free."]; +optional string telegrafi = 2230 [default = "Albanian news and media portal"]; +optional string eluniverso = 2231 [default = "Ecuadorian news portal"]; +optional string kohsantepheapdaily = 2232 [default = "Cambodian news portal"]; +optional string a_dakar = 2233 [default = "Senegalese news portal"]; +optional string news_au = 2234 [default = "Australian news portal"]; +optional string air_video = 2235 [default = "Air Video can stream videos to your iPhone iPad and iPod touch."]; +optional string myjoyonline = 2236 [default = "Ghanaian news portal"]; +optional string sigmalive = 2237 [default = "Cypriot news portal"]; +optional string femina = 2238 [default = "Macedonian website specialised in women news trends gears etc"]; +optional string free = 2239 [default = "French ISP and mobile operator website."]; +optional string foxbusiness = 2240 [default = "Fox Business Network (FBN) is an American cable and satellite business news television channel that is owned by the Fox Entertainment Group division of 21st Century Fox. The network discusses business and financial news."]; +optional string vecernji = 2241 [default = "Crotaian news portal"]; +optional string free_music_download = 2242 [default = "Download play sort organize media files."]; +optional string tayyar = 2243 [default = "Lebaneese news portal"]; } diff --git a/protofiles/DpiMsgLRproto.proto b/protofiles/DpiMsgLRproto.proto index ced740109cb89..32bfbfe748c18 100644 --- a/protofiles/DpiMsgLRproto.proto +++ b/protofiles/DpiMsgLRproto.proto @@ -2369,34 +2369,6 @@ repeated bytes contact_firstnameQ_PROTO_YMAIL_CLASSIC = 2656; // QOSMOS:Q_PROTO_ repeated bytes contact_lastnameQ_PROTO_YMAIL_CLASSIC = 2657; // QOSMOS:Q_PROTO_YMAIL_CLASSIC,Q_MPA_CONTACT_LASTNAME repeated bytes folderQ_PROTO_YMAIL_CLASSIC = 2658; // QOSMOS:Q_PROTO_YMAIL_CLASSIC,Q_MPA_FOLDER repeated bytes attach_fileidQ_PROTO_YMAIL_CLASSIC = 2659; // QOSMOS:Q_PROTO_YMAIL_CLASSIC,Q_YMAIL_CLASSIC_ATTACH_FILEID -repeated bytes msglist_senderQ_PROTO_YMAIL_MOBILE = 2660; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSGLIST_SENDER -repeated bytes msglist_sender_aliasQ_PROTO_YMAIL_MOBILE = 2661; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSGLIST_SENDER_ALIAS -repeated bytes msglist_receiverQ_PROTO_YMAIL_MOBILE = 2662; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSGLIST_RECEIVER -repeated bytes msglist_receiver_aliasQ_PROTO_YMAIL_MOBILE = 2663; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSGLIST_RECEIVER_ALIAS -repeated bytes msglist_subjectQ_PROTO_YMAIL_MOBILE = 2664; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSGLIST_SUBJECT -repeated bytes msglist_msgidQ_PROTO_YMAIL_MOBILE = 2665; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSGLIST_MSGID -optional uint32 draftQ_PROTO_YMAIL_MOBILE = 2666; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_DRAFT -repeated bytes attach_idQ_PROTO_YMAIL_MOBILE = 2667; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_ATTACH_ID -repeated bytes attach_filenameQ_PROTO_YMAIL_MOBILE = 2668; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_ATTACH_FILENAME -repeated bytes receiver_typeQ_PROTO_YMAIL_MOBILE = 2669; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_RECEIVER_TYPE -repeated bytes receiver_aliasQ_PROTO_YMAIL_MOBILE = 2670; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_RECEIVER_ALIAS -repeated bytes receiver_emailQ_PROTO_YMAIL_MOBILE = 2671; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_RECEIVER_EMAIL -repeated bytes receiverQ_PROTO_YMAIL_MOBILE = 2672; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_RECEIVER -repeated bytes dateQ_PROTO_YMAIL_MOBILE = 2673; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_DATE -repeated bytes sender_aliasQ_PROTO_YMAIL_MOBILE = 2674; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_SENDER_ALIAS -repeated bytes sender_emailQ_PROTO_YMAIL_MOBILE = 2675; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_SENDER_EMAIL -repeated bytes senderQ_PROTO_YMAIL_MOBILE = 2676; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_SENDER -repeated bytes subjectQ_PROTO_YMAIL_MOBILE = 2677; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_SUBJECT -repeated bytes msg_idQ_PROTO_YMAIL_MOBILE = 2678; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_MSG_ID -repeated bytes actionQ_PROTO_YMAIL_MOBILE = 2679; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_ACTION -repeated bytes folderQ_PROTO_YMAIL_MOBILE = 2680; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_FOLDER -repeated bytes contact_emailQ_PROTO_YMAIL_MOBILE = 2681; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_CONTACT_EMAIL -repeated bytes contact_aliasQ_PROTO_YMAIL_MOBILE = 2682; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_CONTACT_ALIAS -repeated bytes passwordQ_PROTO_YMAIL_MOBILE = 2683; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_PASSWORD -repeated bytes loginQ_PROTO_YMAIL_MOBILE = 2684; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_LOGIN -repeated bytes contactQ_PROTO_YMAIL_MOBILE = 2685; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_CONTACT -repeated bytes attach_typeQ_PROTO_YMAIL_MOBILE = 2686; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_ATTACH_TYPE -repeated bytes session_idQ_PROTO_YMAIL_MOBILE = 2687; // QOSMOS:Q_PROTO_YMAIL_MOBILE,Q_MPA_SESSION_ID optional uint32 draftQ_PROTO_YMAIL_MOBILE_NEW = 2688; // QOSMOS:Q_PROTO_YMAIL_MOBILE_NEW,Q_MPA_DRAFT optional uint32 attach_sizeQ_PROTO_YMAIL_MOBILE_NEW = 2689; // QOSMOS:Q_PROTO_YMAIL_MOBILE_NEW,Q_MPA_ATTACH_SIZE repeated bytes attach_typeQ_PROTO_YMAIL_MOBILE_NEW = 2690; // QOSMOS:Q_PROTO_YMAIL_MOBILE_NEW,Q_MPA_ATTACH_TYPE @@ -2652,4 +2624,25 @@ repeated bytes titleQ_PROTO_KASKUS = 2940; // QOSMOS:Q_PROTO_KASKUS,Q_KASKUS_TIT repeated bytes msglist_receiverQ_PROTO_OWA = 2941; // QOSMOS:Q_PROTO_OWA,Q_MPA_MSGLIST_RECEIVER repeated bytes _3gpp_imsiQ_PROTO_RADIUS = 2942; // QOSMOS:Q_PROTO_RADIUS,Q_RADIUS_3GPP_IMSI repeated bytes msglist_contentQ_PROTO_YMAIL_MOBILE_NEW = 2943; // QOSMOS:Q_PROTO_YMAIL_MOBILE_NEW,Q_YMAIL_MOBILE_NEW_MSGLIST_CONTENT +optional string service_duration_tvQ_PROTO_FACETIME = 2944; // QOSMOS:Q_PROTO_FACETIME,Q_MPA_SERVICE_DURATION_TV,timeval,timevalToString +optional uint32 data_port_start_offsetQ_PROTO_FTP = 2945; // QOSMOS:Q_PROTO_FTP,Q_FTP_DATA_PORT_START_OFFSET +optional uint32 data_port_end_offsetQ_PROTO_FTP = 2946; // QOSMOS:Q_PROTO_FTP,Q_FTP_DATA_PORT_END_OFFSET +repeated bytes msglist_sender_emailQ_PROTO_IMP = 2947; // QOSMOS:Q_PROTO_IMP,Q_MPA_MSGLIST_SENDER_EMAIL +optional string service_duration_tvQ_PROTO_LINE = 2948; // QOSMOS:Q_PROTO_LINE,Q_MPA_SERVICE_DURATION_TV,timeval,timevalToString +optional uint32 service_durationQ_PROTO_LINE = 2949; // QOSMOS:Q_PROTO_LINE,Q_MPA_SERVICE_DURATION +optional uint32 service_idQ_PROTO_LINE = 2950; // QOSMOS:Q_PROTO_LINE,Q_MPA_SERVICE_ID +optional uint32 uri_start_offsetQ_PROTO_RTSP = 2951; // QOSMOS:Q_PROTO_RTSP,Q_RTSP_URI_START_OFFSET +optional uint32 uri_end_offsetQ_PROTO_RTSP = 2952; // QOSMOS:Q_PROTO_RTSP,Q_RTSP_URI_END_OFFSET +optional uint32 media_attr_addr_start_offsetQ_PROTO_SIP = 2953; // QOSMOS:Q_PROTO_SIP,Q_MPA_MEDIA_ATTR_ADDR_START_OFFSET +optional uint32 media_attr_addr_end_offsetQ_PROTO_SIP = 2954; // QOSMOS:Q_PROTO_SIP,Q_MPA_MEDIA_ATTR_ADDR_END_OFFSET +optional uint32 media_attr_port_start_offsetQ_PROTO_SIP = 2955; // QOSMOS:Q_PROTO_SIP,Q_MPA_MEDIA_ATTR_PORT_START_OFFSET +optional uint32 media_attr_port_end_offsetQ_PROTO_SIP = 2956; // QOSMOS:Q_PROTO_SIP,Q_MPA_MEDIA_ATTR_PORT_END_OFFSET +optional string service_duration_tvQ_PROTO_SKYPE = 2957; // QOSMOS:Q_PROTO_SKYPE,Q_MPA_SERVICE_DURATION_TV,timeval,timevalToString +repeated bytes loginQ_PROTO_SOCKS5 = 2958; // QOSMOS:Q_PROTO_SOCKS5,Q_MPA_LOGIN +repeated bytes passwordQ_PROTO_SOCKS5 = 2959; // QOSMOS:Q_PROTO_SOCKS5,Q_MPA_PASSWORD +repeated bytes attach_filenameQ_PROTO_TANGO = 2960; // QOSMOS:Q_PROTO_TANGO,Q_MPA_ATTACH_FILENAME +optional string service_duration_tvQ_PROTO_TANGO = 2961; // QOSMOS:Q_PROTO_TANGO,Q_MPA_SERVICE_DURATION_TV,timeval,timevalToString +optional uint32 service_durationQ_PROTO_TANGO = 2962; // QOSMOS:Q_PROTO_TANGO,Q_MPA_SERVICE_DURATION +optional uint32 service_idQ_PROTO_TANGO = 2963; // QOSMOS:Q_PROTO_TANGO,Q_MPA_SERVICE_ID +optional string service_duration_tvQ_PROTO_VIBER = 2964; // QOSMOS:Q_PROTO_VIBER,Q_MPA_SERVICE_DURATION_TV,timeval,timevalToString } diff --git a/resources/Applications.csv b/resources/Applications.csv index 804d4520a0a6a..672e0e47d6bc7 100644 --- a/resources/Applications.csv +++ b/resources/Applications.csv @@ -2177,3 +2177,61 @@ visir,2182,"Icelandic news portal" conviva,2183,"Conviva is a video streaming solution provider for audio/video content web services." seneweb,2184,"Senegalese news portal" hln,2185,"Belgian news portal" +globalpublishers,2186,"Tanzanian news portal" +ultimahora,2187,"Honduran news portal" +octoshape,2188,"Octoshape is a video streaming solution provider for web streaming platforms which uses P2P technology." +kwejk,2189,"Polish multimedia website" +mercador,2190,"Romanian classified ads portal" +retroshare,2191,"Retroshare is a communication and file-sharing Open Source platform which is secured and decentralized." +haber7,2192,"Turkish tv streaming website" +scheduled_tp,2193,"STP is a connection-oriented data transfer protocol. It is found over the IP layer (IANA protocol number: 118)." +moe_gov,2194,"Omanian Ministry of Education portal" +top_channel,2195,"Albanina tv streaming website" +bittorrent_application,2196,"This signature detects the access to the BitTorrent Apps web ressources from the BitTorrent application." +livemail_attach,2197,"This signature detects Windows Live Mail File attachment uploads." +sahafah,2198,"Yemeni news portal" +newvision,2199,"Ugandan news portal" +educarriere,2200,"Ivory Coast Job portal" +eltiempo,2201,"Colombian news portal" +yemen_net,2202,"Yemeni service provider portal" +mihanwebads,2203,"Iranian Internet AD company website" +arabiaweather,2204,"Jordanian meteorological portal" +my_talking_tom,2205,"My Talking Tom is a mobile game." +the_simpsons_tapped_out,2206,"Mobile game (EA Games)." +aib,2207,"Irish banking website" +noticias24,2208,"Venezuelian news portal" +deer_hunter_2014,2209,"Mobile game." +khmer_news,2210,"Cambodian news portal" +fruit_ninja,2211,"Mobile game." +clumsy_ninja,2212,"Mobile game." +google_accounts,2213,"Detects SSL access to the Google Accounts server." +gazetaexpress,2214,"Albanian news portal" +jamaicaobserver,2215,"Jamaican news portal" +xl,2216,"Portugese multisites and portal" +mosaiquefm,2217,"Tunisian radio streaming website" +mikogo,2218,"Mikogo is a free desktop sharing and web conferencing service." +over_blog,2219,"French and American blog administration website" +fnb,2220,"South African banking website" +sarayanews,2221,"Jordanian news portal" +oneworld_org,2222,"OneWorld is a NGO with a mission to provide internet and mobile phone applications to third-world countries inhabitants" +mover,2223,"Uzbek vide streaming website" +perfect_dark,2224,"Perfect Dark is a peer-to-peer file-sharing (P2P) protocol from Japan." +gazzetta,2225,"Greek news portal" +elhourriya,2226,"Mauritanian news portal" +lapatilla,2227,"Venezuelian news portal" +palweather,2228,"Palestinian meteorological portal" +armorgames_play,2229,"This signature detects requests to play games on ArmorGames.com an on-line flash-based video game site. Users can play simple video games for free." +telegrafi,2230,"Albanian news and media portal" +eluniverso,2231,"Ecuadorian news portal" +kohsantepheapdaily,2232,"Cambodian news portal" +a_dakar,2233,"Senegalese news portal" +news_au,2234,"Australian news portal" +air_video,2235,"Air Video can stream videos to your iPhone iPad and iPod touch." +myjoyonline,2236,"Ghanaian news portal" +sigmalive,2237,"Cypriot news portal" +femina,2238,"Macedonian website specialised in women news trends gears etc" +free,2239,"French ISP and mobile operator website." +foxbusiness,2240,"Fox Business Network (FBN) is an American cable and satellite business news television channel that is owned by the Fox Entertainment Group division of 21st Century Fox. The network discusses business and financial news." +vecernji,2241,"Crotaian news portal" +free_music_download,2242,"Download play sort organize media files." +tayyar,2243,"Lebaneese news portal" diff --git a/resources/NetMonFieldNames.csv b/resources/NetMonFieldNames.csv index 10f5115650940..56e9e5e00fc3b 100644 --- a/resources/NetMonFieldNames.csv +++ b/resources/NetMonFieldNames.csv @@ -1,2634 +1,2645 @@ -Application,QProto Name,NetMon Old Name,NetMon New Short Name,NetMon New Long Name,Syslog Field,SIEM MPE Tag,SIEM Mapped Field (6.3 Name),SIEM Long Name 6.3,Status, -_n/a,   optional string Application = 29;,,Application,Application,csv,,Process,,Complete, -_n/a,   optional uint32 ApplicationID = 36 [default = 0];,,ApplicationID,Application ID,csv,,Vendor Message ID,,Complete, -_n/a,   optional string ApplicationPath = 30;,,ApplicationPath,ApplicationPath,n/a,,,,Complete, -_n/a,   optional bool Captured = 25 [default = false];,,Captured,Captured,n/a,,,,Complete, -_n/a,   optional bool CaptureRemoved = 40;,,CaptureRemoved,Capture Removed,n/a,,,,Complete, -_n/a,   optional uint32 ChildFlowNumber = 26;,,ChildFlowNumber,Child Flow Number,n/a,,,,Complete, -_n/a,   repeated bytes CustomApplication = 23;,,CustomApplication,Custom Application,n/a,,,,Complete, -_n/a,   optional string DebugMessage = 35;,,DebugMessage,Debug Message,n/a,,,,Complete, -_n/a,   optional string Delay = 11;,,Delay,Delay,n/a,,,,Complete, -_n/a,   optional uint64 BytesDest = 16;,,DestBytes,Destination Bytes,csv,,Impacted Host KB Received,,Complete, -_n/a,   optional uint64 BytesDestDelta = 21;,,DestBytesDelta,Destination Bytes Delta,n/a,,,,Complete, -_n/a,   optional uint32 IPDest = 5;,,DestIP,Destination IP,csv,,Impacted IP,,Complete, -_n/a,   optional uint64 MACDest = 3;,,DestMAC,Destination MAC,csv,,Impacted MAC Address,,Complete, -_n/a,   optional uint32 PortDest = 9;,,DestPort,Destination Port,csv,,Impacted Port,,Complete, -_n/a,   optional uint64 Duration = 31;,,Duration,Duration,n/a,,,,Complete, -_n/a,   optional uint64 FieldCount = 34;,,FieldCount,Field Count,n/a,,,,Complete, -_n/a,   optional bool FlowCompleted = 10;,,FlowCompleted,Flow Completed,n/a,,,,Complete, -_n/a,   optional uint32 FlowSessionCount = 7;,,FlowSessionCount,Flow Session Count,n/a,,,,Complete, -_n/a,   optional FlowStateType FlowState = 24 [default = CLOSED_UNKNOWN];,,FlowState,Flow State,n/a,,,,Complete, -_n/a,   optional Type FlowType = 18;,,FlowType,Flow Type,n/a,,,,Complete, -_n/a,   optional bool LatestUpdate = 37 [default = true];,,LatestUpdate,Latest Update,n/a,,,,Complete, -_n/a,   optional uint64 MessageSize = 32;,,MessageSize,Message Size,n/a,,,,Complete, -_n/a,   optional string PktPath = 6;,,PacketPath,Packet Path,n/a,,,,Complete, -_n/a,   optional uint64 PacketsDelta = 19;,,PacketsDelta,Packets Delta,n/a,,,,Complete, -_n/a,   optional uint32 ProtoID = 12;,,Protocol,Protocol,csv,,Protocol ,,Complete, -_n/a, optional string SessionID = 1;,,Session,Session,csv,,Session,,Complete, -_n/a,   optional uint64 BytesSource = 17;,,SrcBytes,Source Bytes,csv,,Impacted Host KB Sent,,Complete, -_n/a,   optional uint64 BytesSourceDelta = 22;,,SrcBytesDelta,Source Bytes Delta,n/a,,,,Complete, -_n/a,   optional uint32 IPSource = 4;,,SrcIP,Source IP,csv,,Origin IP,,Complete, -_n/a,   optional uint64 MACSource = 2;,,SrcMAC,Source MAC,csv,,Origin MAC Address,,Complete, -_n/a,   optional uint32 PortSource = 8;,,SrcPort,Source Port,csv,,Origin Port,,Complete, -_n/a,   optional uint32 ThreadID = 33;,,ThreadID,Thread ID,n/a,,,,Complete, -_n/a,   optional uint64 TimeDelta = 20;,,TimeDelta,Time Delta,csv,,Duration,,Complete, -_n/a,   optional uint64 TimePrevious = 38;,,TimePrevious,Time Previous,n/a,,,,Complete, -_n/a,   optional uint64 TimeStart = 14;,,TimeStart,Time Start,n/a,,,,Complete, -_n/a,   optional uint64 TimeUpdated = 15;,,TimeUpdated,Time Updated,n/a,,,,Complete, -_n/a,   optional uint64 BytesTotal = 27;,,TotalBytes,Total Bytes,n/a,,,,Complete, -_n/a,   optional uint64 BytesTotalDelta = 28;,,TotalBytesDelta,Total Bytes Delta,n/a,,,,Complete, -_n/a,   optional uint32 PacketTotal = 13;,,TotalPackets,Total Packets,csv,,Impacted Host Packets In,,Complete, -_n/a,   optional bool Written = 39;,,Written,Written,n/a,,,,Complete, -0ZZ0,actionQ_PROTO_0ZZ0,action,Action,Action,command,,Command,,1st Review, -0ZZ0,download_urlQ_PROTO_0ZZ0,download_url,DownloadURL,Download URL,url,,URL,,1st Review, -0ZZ0,email_addressQ_PROTO_0ZZ0,email_address,EmailAddr,Email Address,sender,,Sender,,1st Review, -0ZZ0,email_invitedQ_PROTO_0ZZ0,email_invited,EmailInvited,Email Invited,,,,,1st Review, -0ZZ0,filenameQ_PROTO_0ZZ0,filename,Filename,Filename,objectname,,Object Name,,1st Review, -0ZZ0,filesizeQ_PROTO_0ZZ0,filesize,FileSize,File Size,,,,,1st Review, -0ZZ0,loginQ_PROTO_0ZZ0,login,Login,Login,login,,Login,,1st Review, -0ZZ0,nameQ_PROTO_0ZZ0,name,Name,Name,,,,,1st Review, -0ZZ0,name_invitedQ_PROTO_0ZZ0,name_invited,NameInvited,Name Invited,,,,,1st Review, -0ZZ0,passwordQ_PROTO_0ZZ0,password,Passwd,Password,,,,,1st Review, -0ZZ0,sidQ_PROTO_0ZZ0,sid,SID,SID,,,,,1st Review, -0ZZ0,sidcQ_PROTO_0ZZ0,sidc,SIDC,SIDC,,,,,1st Review, -0ZZ0,upload_descriptionQ_PROTO_0ZZ0,upload_description,UploadDescription,Upload Description,object,,Object,,1st Review, -3GPP_LI,country_codeQ_PROTO_3GPP_LI,country_code,CountryCode,Country Code,,,,,1st Review, -3GPP_LI,ice_typeQ_PROTO_3GPP_LI,ice_type,IceType,Ice Type,,,,,1st Review, -3GPP_LI,liidQ_PROTO_3GPP_LI,liid,LIID,LIID,,,,,1st Review, -3GPP_LI,sequence_numberQ_PROTO_3GPP_LI,sequence_number,SeqNum,Sequence Number,,,,,1st Review, -3GPP_LI,timestampQ_PROTO_3GPP_LI,timestamp,Timestamp,Timestamp,,,,,1st Review, -3GPP_LI,t_pdu_directionQ_PROTO_3GPP_LI,t_pdu_direction,TPDUDirection,T PDU Direction,,,,,1st Review, -3GPP_LI,versionQ_PROTO_3GPP_LI,version,Version,Version,version,,Version,,1st Review, -ADC,client_versionQ_PROTO_ADC,client_version,ClientVersion,Client Version,version,,Version,,1st Review, -ADC,command_codeQ_PROTO_ADC,command_code,CommandCode,Command Code,command,,Command,,1st Review, -ADC,command_typeQ_PROTO_ADC,command_type,CommandType,Command Type,,,,,1st Review, -ADC,file_chunk_data_offsetQ_PROTO_ADC,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -ADC,file_chunk_lenQ_PROTO_ADC,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -ADC,file_hashQ_PROTO_ADC,file_hash,FileHash,File Hash,object,,Object,,1st Review, -ADC,filenameQ_PROTO_ADC,filename,Filename,Filename,objectname,,Object Name,,1st Review, -ADC,filesizeQ_PROTO_ADC,filesize,FileSize,File Size,,,,,1st Review, -ADC,peer_hashQ_PROTO_ADC,peer_hash,PeerHash,Peer Hash,,,,,1st Review, -ADC,peer_idQ_PROTO_ADC,peer_id,PeerID,Peer ID,,,,,1st Review, -ADC,queryQ_PROTO_ADC,query,Query,Query,subject,,Subject,,1st Review, -ADOBE_UPDATE,actionQ_PROTO_ADOBE_UPDATE,action,Action,Action,command,,Command,,1st Review, -ADOBE_UPDATE,component_list_descQ_PROTO_ADOBE_UPDATE,component_list_desc,ComponentListDesc,Component List Description,subject,,Subject,,1st Review, -ADOBE_UPDATE,component_list_nameQ_PROTO_ADOBE_UPDATE,component_list_name,ComponentListName,Component List Name,objectname,,Object Name,,1st Review, -ADOBE_UPDATE,component_list_urlQ_PROTO_ADOBE_UPDATE,component_list_url,ComponentListURL,Component List URL,url,,URL,,1st Review, -ADOBE_UPDATE,component_list_versionQ_PROTO_ADOBE_UPDATE,component_list_version,ComponentListVersion,Component List Version,version,,Version,,1st Review, -ADOBE_UPDATE,product_nameQ_PROTO_ADOBE_UPDATE,product_name,ProductName,Product Name,object,,Object,,1st Review, -ADOBE_UPDATE,update_managerQ_PROTO_ADOBE_UPDATE,update_manager,UpdateManager,Update Manager,,,,,1st Review, -AIM,channelQ_PROTO_AIM,channel,Channel,Channel,,,,,1st Review, -AIM,client_statusQ_PROTO_AIM,client_status,ClientStatus,Client Status,,,,,1st Review, -AIM,contact_loginQ_PROTO_AIM,contact_login,ContactLogin,Contact Login,,,,,1st Review, -AIM,contact_statusQ_PROTO_AIM,contact_status,ContactStatus,Contact Status,,,,,1st Review, -AIM,external_ip_addressQ_PROTO_AIM,external_ip_address,ExtIPAddr,External IP Address,,,,,1st Review, -AIM,filenameQ_PROTO_AIM,filename,Filename,Filename,objectname,,Object Name,,1st Review, -AIM,filename_encodingQ_PROTO_AIM,filename_encoding,FilenameEncoding,Filename Encoding,,,,,1st Review, -AIM,file_receiverQ_PROTO_AIM,file_receiver,FileReceiver,File Receiver,,,,,1st Review, -AIM,file_senderQ_PROTO_AIM,file_sender,FileSender,File Sender,,,,,1st Review, -AIM,filesizeQ_PROTO_AIM,filesize,FileSize,File Size,,,,,1st Review, -AIM,icon_buddyQ_PROTO_AIM,icon_buddy,IconBuddy,Icon Buddy,,,,,1st Review, -AIM,internal_ip_addressQ_PROTO_AIM,internal_ip_address,InternalIPAddr,Internal IP Address,,,,,1st Review, -AIM,loginQ_PROTO_AIM,login,Login,Login,login,,Login,,1st Review, -AIM,messageQ_PROTO_AIM,message,Msg,Message,subject,,Subject,,1st Review, -AIM,receiverQ_PROTO_AIM,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -AIM,senderQ_PROTO_AIM,sender,Sender,Sender,sender,,Sender,,1st Review, -AIM,serviceQ_PROTO_AIM,service,Service,Service,process,,Process,,1st Review, -AIM,user_agentQ_PROTO_AIM,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -AIM,user_emailQ_PROTO_AIM,user_email,UserEmail,User Email,,,,,1st Review, -AIM,versionQ_PROTO_AIM,version,Version,Version,version,,Version,,1st Review, -AIM_EXPRESS,chat_idQ_PROTO_AIM_EXPRESS,chat_id,ChatID,Chat ID,,,,,1st Review, -AIM_EXPRESS,chat_typeQ_PROTO_AIM_EXPRESS,chat_type,ChatType,Chat Type,,,,,1st Review, -AIM_EXPRESS,client_statusQ_PROTO_AIM_EXPRESS,client_status,ClientStatus,Client Status,,,,,1st Review, -AIM_EXPRESS,contact_loginQ_PROTO_AIM_EXPRESS,contact_login,ContactLogin,Contact Login,,,,,1st Review, -AIM_EXPRESS,contact_statusQ_PROTO_AIM_EXPRESS,contact_status,ContactStatus,Contact Status,,,,,1st Review, -AIM_EXPRESS,loginQ_PROTO_AIM_EXPRESS,login,Login,Login,login,,Login,,1st Review, -AIM_EXPRESS,messageQ_PROTO_AIM_EXPRESS,message,Msg,Message,subject,,Subject,,1st Review, -AIM_EXPRESS,receiverQ_PROTO_AIM_EXPRESS,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -AIM_EXPRESS,senderQ_PROTO_AIM_EXPRESS,sender,Sender,Sender,sender,,Sender,,1st Review, -AIM_EXPRESS,versionQ_PROTO_AIM_EXPRESS,version,Version,Version,version,,Version,,1st Review, -AIM_TRANSFER,filenameQ_PROTO_AIM_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review, -AIM_TRANSFER,filename_encodingQ_PROTO_AIM_TRANSFER,filename_encoding,FilenameEncoding,Filename Encoding,object,,Object,,1st Review, -AIM_TRANSFER,filesizeQ_PROTO_AIM_TRANSFER,filesize,FileSize,File Size,,,,,1st Review, -AIMS,loginQ_PROTO_AIMS,login,Login,Login,login,,Login,,1st Review, -AMQP,major_versionQ_PROTO_AMQP,major_version,MajorVersion,Major Version,version,,Version,,1st Review, -AMQP,minor_versionQ_PROTO_AMQP,minor_version,MinorVersion,Minor Version,,,,,1st Review, -AMQP,response_timeQ_PROTO_AMQP,response_time,ResponseTime,Response Time,,,,,1st Review, -APPLE_UPDATE,pkg_nameQ_PROTO_APPLE_UPDATE,pkg_name,PkgName,Package Name,objectname,,Object Name,,1st Review, -APPSTORE,application_nameQ_PROTO_APPSTORE,application_name,AppName,Application Name,objectname,,Object Name,,1st Review, -APPSTORE,connection_typeQ_PROTO_APPSTORE,connection_type,ConnectionType,Connection Type,,,,,1st Review, -APPSTORE,device_typeQ_PROTO_APPSTORE,device_type,DeviceType,Device Type,object,,Object,,1st Review, -ARCHIVE,actionQ_PROTO_ARCHIVE,action,Action,Action,command,,Command,,1st Review, -ARCHIVE,creatorQ_PROTO_ARCHIVE,creator,Creator,Creator,,,,,1st Review, -ARCHIVE,descriptionQ_PROTO_ARCHIVE,description,Description,Description,,,,,1st Review, -ARCHIVE,encodingQ_PROTO_ARCHIVE,encoding,Encoding,Encoding,,,,,1st Review, -ARCHIVE,filenameQ_PROTO_ARCHIVE,filename,Filename,Filename,objectname,,Object Name,,1st Review, -ARCHIVE,loginQ_PROTO_ARCHIVE,login,Login,Login,login,,Login,,1st Review, -ARCHIVE,passwordQ_PROTO_ARCHIVE,password,Passwd,Password,,,,,1st Review, -ARCHIVE,query_indexQ_PROTO_ARCHIVE,query_index,QueryIndex,Query Index,,,,,1st Review, -ARCHIVE,query_rawQ_PROTO_ARCHIVE,query_raw,QueryRaw,Query Raw,,,,,1st Review, -ARCHIVE,query_textQ_PROTO_ARCHIVE,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -ARCHIVE,query_typeQ_PROTO_ARCHIVE,query_type,QueryType,Query Type,,,,,1st Review, -ARCHIVE,subjectQ_PROTO_ARCHIVE,subject,Subject,Subject,subject,,Subject,,1st Review, -ARCHIVE,titleQ_PROTO_ARCHIVE,title,Title,Title,,,,,1st Review, -ARES,file_hashQ_PROTO_ARES,file_hash,FileHash,File Hash,,,,,1st Review, -ARES,nicknameQ_PROTO_ARES,nickname,Nickname,Nickname,objectname,,Object Name,,1st Review, -ARES,queryQ_PROTO_ARES,query,Query,Query,command,,Command,,1st Review, -BADONGO,actionQ_PROTO_BADONGO,action,Action,Action,command,,Command,,1st Review, -BADONGO,filenameQ_PROTO_BADONGO,filename,Filename,Filename,objectname,,Object Name,,1st Review, -BADONGO,filesizeQ_PROTO_BADONGO,filesize,FileSize,File Size,,,,,1st Review, -BADONGO,loginQ_PROTO_BADONGO,login,Login,Login,login,,Login,,1st Review, -BADONGO,passwordQ_PROTO_BADONGO,password,Passwd,Password,,,,,1st Review, -BADONGO,upload_descriptionQ_PROTO_BADONGO,upload_description,UploadDescription,Upload Description,subject,,Subject,,1st Review, -BADOO,contact_loginQ_PROTO_BADOO,contact_login,ContactLogin,Contact Login,,,,,1st Review, -BADOO,contact_uidQ_PROTO_BADOO,contact_uid,ContactUID,Contact UID,,,,,1st Review, -BADOO,loginQ_PROTO_BADOO,login,Login,Login,login,,Login,,1st Review, -BADOO,messageQ_PROTO_BADOO,message,Msg,Message,subject,,Subject,,1st Review, -BADOO,nicknameQ_PROTO_BADOO,nickname,Nickname,Nickname,,,,,1st Review, -BADOO,passwordQ_PROTO_BADOO,password,Passwd,Password,,,,,1st Review, -BADOO,receiverQ_PROTO_BADOO,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -BADOO,receiver_uidQ_PROTO_BADOO,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review, -BADOO,senderQ_PROTO_BADOO,sender,Sender,Sender,sender,,Sender,,1st Review, -BAIDU,encodingQ_PROTO_BAIDU,encoding,Encoding,Encoding,,,,,1st Review, -BAIDU,query_indexQ_PROTO_BAIDU,query_index,QueryIndex,Query Index,,,,,1st Review, -BAIDU,query_rawQ_PROTO_BAIDU,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -BAIDU,query_textQ_PROTO_BAIDU,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -BAIDU,query_typeQ_PROTO_BAIDU,query_type,QueryType,Query Type,,,,,1st Review, -BASE,applicationQ_PROTO_BASE,application,App,Application,,,,,1st Review, -BASE,application_endQ_PROTO_BASE,application_end,AppEnd,Application End,,,,,1st Review, -BASE,application_idQ_PROTO_BASE,application_id,AppID,Application ID,,,,,1st Review, -BASE,application_id_endQ_PROTO_BASE,application_id_end,AppIDEnd,Application ID End,,,,,1st Review, -BASE,declassifiedQ_PROTO_BASE,declassified,Declassified,Declassified,,,,,1st Review, -BASE,devQ_PROTO_BASE,dev,Dev,Dev,,,,,1st Review, -BASE,familyQ_PROTO_BASE,family,Family,Family,,,,,1st Review, -BASE,family_endQ_PROTO_BASE,family_end,FamilyEnd,Family End,,,,,1st Review, -BASE,flow_idQ_PROTO_BASE,flow_id,FlowID,Flow ID,,,,,1st Review, -BASE,multi_match_proto_idQ_PROTO_BASE,multi_match_proto_id,MultiMatchProtoID,Multi Match Protocol ID,,,,,1st Review, -BASE,path_lenQ_PROTO_BASE,path_len,PathLen,Path Length,,,,,1st Review, -BASE,packet_counterQ_PROTO_BASE,packet_counter,PktCounter,Packet Counter,,,,,1st Review, -BASE,session_packet_counterQ_PROTO_BASE,session_packet_counter,SessionPktCounter,Session Packet Counter,,,,,1st Review, -BASE,timeQ_PROTO_BASE,time,Time,Time,,,,,1st Review, -BEBO,is_mobile_serviceQ_PROTO_BEBO,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review, -BEBO,loginQ_PROTO_BEBO,login,Login,Login,login,,Login,,1st Review, -BEBO,passwordQ_PROTO_BEBO,password,Passwd,Password,,,,,1st Review, -BGP,identifierQ_PROTO_BGP,identifier,Identifier,Identifier,,,,,1st Review, -BGP,nlri_prefixQ_PROTO_BGP,nlri_prefix,NLRIPrefix,NLRI Prefix,,,,,1st Review, -BGP,path_attr_value_as_numQ_PROTO_BGP,path_attr_value_as_num,PathAttrValueAsNum,Path Attribute Value As Number,,,,,1st Review, -BGP,path_attr_value_local_prefQ_PROTO_BGP,path_attr_value_local_pref,PathAttrValueLocalPref,Path Attribute Value Local Preference,,,,,1st Review, -BGP,path_attr_value_next_hop_ipQ_PROTO_BGP,path_attr_value_next_hop_ip,PathAttrValueNextHopIP,Path Attribute Value Next Hop IP,,,,,1st Review, -BGP,withdrawn_prefixQ_PROTO_BGP,withdrawn_prefix,WithdrawnPrefix,Withdrawn Prefix,,,,,1st Review, -BING,encodingQ_PROTO_BING,encoding,Encoding,Encoding,,,,,1st Review, -BING,query_indexQ_PROTO_BING,query_index,QueryIndex,Query Index,,,,,1st Review, -BING,query_rawQ_PROTO_BING,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -BING,query_textQ_PROTO_BING,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -BING,query_typeQ_PROTO_BING,query_type,QueryType,Query Type,,,,,1st Review, -BITTORRENT,canceled_chunk_data_offsetQ_PROTO_BITTORRENT,canceled_chunk_data_offset,CanceledChunkDataOffset,Canceled Chunk Data Offset,,,,,1st Review, -BITTORRENT,canceled_chunk_lengthQ_PROTO_BITTORRENT,canceled_chunk_length,CanceledChunkLength,Canceled Chunk Length,,,,,1st Review, -BITTORRENT,canceled_chunk_numberQ_PROTO_BITTORRENT,canceled_chunk_number,CanceledChunkNumber,Canceled Chunk Number,,,,,1st Review, -BITTORRENT,classification_typeQ_PROTO_BITTORRENT,classification_type,ClassificationType,Classification Type,,,,,1st Review, -BITTORRENT,client_versionQ_PROTO_BITTORRENT,client_version,ClientVersion,Client Version,,,,,1st Review, -BITTORRENT,file_chunk_data_offsetQ_PROTO_BITTORRENT,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -BITTORRENT,file_chunk_lenQ_PROTO_BITTORRENT,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -BITTORRENT,file_chunk_numberQ_PROTO_BITTORRENT,file_chunk_number,FileChunkNum,File Chunk Number,,,,,1st Review, -BITTORRENT,file_completedQ_PROTO_BITTORRENT,file_completed,FileCompleted,File Completed,,,,,1st Review, -BITTORRENT,file_downloadedQ_PROTO_BITTORRENT,file_downloaded,FileDownloaded,File Downloaded,,,,,1st Review, -BITTORRENT,file_incompleteQ_PROTO_BITTORRENT,file_incomplete,FileIncomplete,File Incomplete,,,,,1st Review, -BITTORRENT,file_leftQ_PROTO_BITTORRENT,file_left,FileLeft,File Left,,,,,1st Review, -BITTORRENT,filenameQ_PROTO_BITTORRENT,filename,Filename,Filename,objectname,,Object Name,,1st Review, -BITTORRENT,filesizeQ_PROTO_BITTORRENT,filesize,FileSize,File Size,,,,,1st Review, -BITTORRENT,file_uploadedQ_PROTO_BITTORRENT,file_uploaded,FileUploaded,File Uploaded,,,,,1st Review, -BITTORRENT,peer_portQ_PROTO_BITTORRENT,peer_port,PeerPort,Peer Port,,,,,1st Review, -BITTORRENT,peer_share_idQ_PROTO_BITTORRENT,peer_share_id,PeerShareID,Peer Share ID,,,,,1st Review, -BITTORRENT,peer_share_ipQ_PROTO_BITTORRENT,peer_share_ip,PeerShareIP,Peer Share IP,,,,,1st Review, -BITTORRENT,piece_lengthQ_PROTO_BITTORRENT,piece_length,PieceLength,Piece Length,,,,,1st Review, -BITTORRENT,torrent_filenameQ_PROTO_BITTORRENT,torrent_filename,TorrentFilename,Torrent Filename,,,,,1st Review, -BITTORRENT,trackerQ_PROTO_BITTORRENT,tracker,Tracker,Tracker,dname,,Group,,1st Review, -BITTORRENT,user_agentQ_PROTO_BITTORRENT,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -BMFF,video_avgdatarateQ_PROTO_BMFF,video_avgdatarate,VidAvgDataRate,Video Average Data Rate,,,,,1st Review, -BMFF,video_datarateQ_PROTO_BMFF,video_datarate,VidDataRate,Video Data Rate,,,,,1st Review, -BMFF,video_durationQ_PROTO_BMFF,video_duration,VidDuration,Video Duration,,,,,1st Review, -BMFF,video_brandQ_PROTO_BMFF,video_brand,VideBrand,Video Brand,,,,,1st Review, -BMFF,video_heightQ_PROTO_BMFF,video_height,VidHeight,Video Height,,,,,1st Review, -BMFF,video_typeQ_PROTO_BMFF,video_type,VidType,Video Type,,,,,1st Review, -BMFF,video_uuidQ_PROTO_BMFF,video_uuid,VidUUID,Video UUID,,,,,1st Review, -BMFF,video_widthQ_PROTO_BMFF,video_width,VidWidth,Video Width,,,,,1st Review, -BSSAP,imei_receiverQ_PROTO_BSSAP,imei_receiver,IMEIReceiver,IMEI Receiver,recipient,,Recipient,,1st Review, -BSSAP,imei_senderQ_PROTO_BSSAP,imei_sender,IMEISender,IMEI Sender,sender,,Sender,,1st Review, -BSSAP,imsi_receiverQ_PROTO_BSSAP,imsi_receiver,IMSIReceiver,IMSI Receiver,,,,,1st Review, -BSSAP,imsi_senderQ_PROTO_BSSAP,imsi_sender,IMSISender,IMSI Sender,,,,,1st Review, -BSSAP,msisdn_receiverQ_PROTO_BSSAP,msisdn_receiver,MSISDNReceiver,MSISDN Receiver,,,,,1st Review, -BSSAP,msisdn_senderQ_PROTO_BSSAP,msisdn_sender,MSISDNSender,MSISDN Sender,,,,,1st Review, -BSSAP,timestampQ_PROTO_BSSAP,timestamp,Timestamp,Timestamp,,,,,1st Review, -BSSAP,validity_periodQ_PROTO_BSSAP,validity_period,ValidityPeriod,Validity Period,,,,,1st Review, -BXML,versionQ_PROTO_BXML,version,Version,Version,version,,Version,,1st Review, -CDP,addressQ_PROTO_CDP,address,Addr,Address,,,,,1st Review, -CDP,device_idQ_PROTO_CDP,device_id,DeviceID,Device ID,object,,Object,,1st Review, -CDP,platformQ_PROTO_CDP,platform,Platform,Platform,,,,,1st Review, -CDP,port_idQ_PROTO_CDP,port_id,PortID,Port ID,,,,,1st Review, -CDP,software_versionQ_PROTO_CDP,software_version,SoftwareVersion,Software Version,version,,Version,,1st Review, -CDP,VTP_mgmt_domainQ_PROTO_CDP,VTP_mgmt_domain,VTPMgmtDomain,VTP Management Domain,domain,,Domain,,1st Review, -CHAP,challenge_nameQ_PROTO_CHAP,challenge_name,ChallengeName,Challenge Name,command,,Command,,1st Review, -CHAP,message_typeQ_PROTO_CHAP,message_type,MsgType,Message Type,subject,,Subject,,1st Review, -CHAP,response_nameQ_PROTO_CHAP,response_name,ResponseName,Response Name,objectname,,Object Name,,1st Review, -CHROME_UPDATE,current_versionQ_PROTO_CHROME_UPDATE,current_version,CurrentVersion,Current Version,,,,,1st Review, -CHROME_UPDATE,new_versionQ_PROTO_CHROME_UPDATE,new_version,NewVersion,New Version,version,,Version,,1st Review, -CHROME_UPDATE,plugin_current_versionQ_PROTO_CHROME_UPDATE,plugin_current_version,PluginCurrentVersion,Plugin Current Version,,,,,1st Review, -CHROME_UPDATE,plugin_idQ_PROTO_CHROME_UPDATE,plugin_id,PluginID,Plugin ID,,,,,1st Review, -CHROME_UPDATE,plugin_new_versionQ_PROTO_CHROME_UPDATE,plugin_new_version,PluginNewVersion,Plugin New Version,,,,,1st Review, -CUPS,informationQ_PROTO_CUPS,information,Information,Information,object,,Object,,1st Review, -CUPS,locationQ_PROTO_CUPS,location,Location,Location,,,,,1st Review, -CUPS,modelQ_PROTO_CUPS,model,Model,Model,objectname,,Object Name,,1st Review, -CUPS,printerQ_PROTO_CUPS,printer,Printer,Printer,dname,,Group,,1st Review, -DAILYMOTION,emailQ_PROTO_DAILYMOTION,email,Email,Email,sender,,Sender,,1st Review, -DAILYMOTION,loginQ_PROTO_DAILYMOTION,login,Login,Login,login,,Login,,1st Review, -DAILYMOTION,passwordQ_PROTO_DAILYMOTION,password,Passwd,Password,,,,,1st Review, -DAILYMOTION,query_rawQ_PROTO_DAILYMOTION,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -DAILYMOTION,query_textQ_PROTO_DAILYMOTION,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -DCERPC,interface_uuidQ_PROTO_DCERPC,interface_uuid,InterfaceUUID,Interface UUID,,,,,1st Review, -DCERPC,serviceQ_PROTO_DCERPC,service,Service,Service,process,,Process,,1st Review, -DEBIAN_UPDATE,package_nameQ_PROTO_DEBIAN_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review, -DEBIAN_UPDATE,package_versionQ_PROTO_DEBIAN_UPDATE,package_version,PkgVersion,Package Version,version,,Version,,1st Review, -DHCP,bootfilenameQ_PROTO_DHCP,bootfilename,BootFilename,Boot Filename,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,chaddrQ_PROTO_DHCP,chaddr,CHAddr,CH Address,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,ciaddrQ_PROTO_DHCP,ciaddr,CIAddr,CI Address,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,circuit_idQ_PROTO_DHCP,circuit_id,CircuitID,Circuit ID,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,dns_serverQ_PROTO_DHCP,dns_server,DNSServer,DNS Server,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,end_statusQ_PROTO_DHCP,end_status,EndStatus,End Status,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,giaddrQ_PROTO_DHCP,giaddr,GIAddr,GI Address,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,ip_lease_timeQ_PROTO_DHCP,ip_lease_time,IPLeaseTime,IP Lease Time,amount,,Amount,,1st Review,Relevant DHCP info already passed via host info. -DHCP,remote_idQ_PROTO_DHCP,remote_id,RemoteID,Remote ID,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,remote_id_subtypeQ_PROTO_DHCP,remote_id_subtype,RemoteIDSubtype,Remote ID Subtype,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,remote_id_typeQ_PROTO_DHCP,remote_id_type,RemoteIDType,Remote ID Type,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,routerQ_PROTO_DHCP,router,Router,Router,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,siaddrQ_PROTO_DHCP,siaddr,SIAddr,SI Address,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,snameQ_PROTO_DHCP,sname,Sname,Surname,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,subnetmaskQ_PROTO_DHCP,subnetmask,Subnetmask,Subnetmask,,,,,1st Review,Relevant DHCP info already passed via host info. -DHCP,yiaddrQ_PROTO_DHCP,yiaddr,Yiaddr,Yiaddr,,,,,1st Review,Relevant DHCP info already passed via host info. -DIAMETER,acct_input_octetsQ_PROTO_DIAMETER,acct_input_octets,AcctInputOctets,Account Input Octets,,,,,1st Review, -DIAMETER,acct_multi_session_idQ_PROTO_DIAMETER,acct_multi_session_id,AcctMultiSessionID,Account Multi Session ID,,,,,1st Review, -DIAMETER,acct_output_octetsQ_PROTO_DIAMETER,acct_output_octets,AcctOutputOctets,Account Output Octets,,,,,1st Review, -DIAMETER,acct_record_numberQ_PROTO_DIAMETER,acct_record_number,AcctRecordNum,Account Record Number,,,,,1st Review, -DIAMETER,acct_record_typeQ_PROTO_DIAMETER,acct_record_type,AcctRecordType,Account Record Type,,,,,1st Review, -DIAMETER,acct_session_idQ_PROTO_DIAMETER,acct_session_id,AcctSessionID,Account Session ID,,,,,1st Review, -DIAMETER,acct_sub_session_idQ_PROTO_DIAMETER,acct_sub_session_id,AcctSubSessionID,Account SubSession ID,,,,,1st Review, -DIAMETER,application_idQ_PROTO_DIAMETER,application_id,AppID,Application ID,,,,,1st Review, -DIAMETER,auth_request_typeQ_PROTO_DIAMETER,auth_request_type,AuthReqType,Authentication Request Type,,,,,1st Review, -DIAMETER,called_station_idQ_PROTO_DIAMETER,called_station_id,CalledStationID,Called Station ID,,,,,1st Review, -DIAMETER,calling_station_idQ_PROTO_DIAMETER,calling_station_id,CallingStationID,Calling Station ID,,,,,1st Review, -DIAMETER,command_codeQ_PROTO_DIAMETER,command_code,CommandCode,Command Code,command,,Command,,1st Review, -DIAMETER,destination_hostQ_PROTO_DIAMETER,destination_host,DestinationHost,Destination Host,dname,,Group,,1st Review, -DIAMETER,end_to_end_idQ_PROTO_DIAMETER,end_to_end_id,EndToEndID,End To End ID,,,,,1st Review, -DIAMETER,framed_ipQ_PROTO_DIAMETER,framed_ip,FramedIP,Framed IP,,,,,1st Review, -DIAMETER,hop_by_hop_idQ_PROTO_DIAMETER,hop_by_hop_id,HopByHopID,Hop By Hop ID,,,,,1st Review, -DIAMETER,loginQ_PROTO_DIAMETER,login,Login,Login,login,,Login,,1st Review, -DIAMETER,nas_idQ_PROTO_DIAMETER,nas_id,NASID,NAS ID,,,,,1st Review, -DIAMETER,nas_ipQ_PROTO_DIAMETER,nas_ip,NASIP,NAS IP,,,,,1st Review, -DIAMETER,nas_portQ_PROTO_DIAMETER,nas_port,NASPort,NAS Port,,,,,1st Review, -DIAMETER,nas_port_idQ_PROTO_DIAMETER,nas_port_id,NASPortID,NAS Port ID,,,,,1st Review, -DIAMETER,nas_port_typeQ_PROTO_DIAMETER,nas_port_type,NASPortType,NAS Port Type,,,,,1st Review, -DIAMETER,origin_hostQ_PROTO_DIAMETER,origin_host,OriginHost,Origin Host,,,,,1st Review, -DIAMETER,result_codeQ_PROTO_DIAMETER,result_code,ResultCode,Result Code,,,,,1st Review, -DIAMETER,session_idQ_PROTO_DIAMETER,session_id,SessionID,Session ID,,,,,1st Review, -DIAMETER,terminate_causeQ_PROTO_DIAMETER,terminate_cause,TerminateCause,Terminate Cause,,,,,1st Review, -DIMP,actionQ_PROTO_DIMP,action,Action,Action,command,,Command,,1st Review, -DIMP,attach_idQ_PROTO_DIMP,attach_id,AttachID,Attach ID,,,,,1st Review, -DIMP,attach_sizeQ_PROTO_DIMP,attach_size,AttachSize,Attach Size,,,,,1st Review, -DIMP,attach_typeQ_PROTO_DIMP,attach_type,AttachType,Attach Type,,,,,1st Review, -DIMP,dateQ_PROTO_DIMP,date,Date,Date,,,,,1st Review, -DIMP,draftQ_PROTO_DIMP,draft,Draft,Draft,,,,,1st Review, -DIMP,attach_filenameQ_PROTO_DIMP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -DIMP,loginQ_PROTO_DIMP,login,Login,Login,login,,Login,,1st Review, -DIMP,msg_idQ_PROTO_DIMP,msg_id,MsgID,Message ID,object,,Object,,1st Review, -DIMP,msglist_dateQ_PROTO_DIMP,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -DIMP,msglist_folderQ_PROTO_DIMP,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -DIMP,msglist_receiver_aliasQ_PROTO_DIMP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -DIMP,msglist_senderQ_PROTO_DIMP,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -DIMP,msglist_sender_aliasQ_PROTO_DIMP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -DIMP,msglist_sender_emailQ_PROTO_DIMP,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -DIMP,msglist_subjectQ_PROTO_DIMP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -DIMP,passwordQ_PROTO_DIMP,password,Passwd,Password,,,,,1st Review, -DIMP,receiverQ_PROTO_DIMP,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -DIMP,receiver_aliasQ_PROTO_DIMP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -DIMP,receiver_emailQ_PROTO_DIMP,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -DIMP,receiver_typeQ_PROTO_DIMP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -DIMP,senderQ_PROTO_DIMP,sender,Sender,Sender,sender,,Sender,,1st Review, -DIMP,sender_aliasQ_PROTO_DIMP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -DIMP,sender_emailQ_PROTO_DIMP,sender_email,SenderEmail,Sender Email,,,,,1st Review, -DIMP,subjectQ_PROTO_DIMP,subject,Subject,Subject,subject,,Subject,,1st Review, -DIRECTCONNECT,file_chunk_data_offsetQ_PROTO_DIRECTCONNECT,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -DIRECTCONNECT,file_chunk_lenQ_PROTO_DIRECTCONNECT,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -DIRECTCONNECT,file_compression_typeQ_PROTO_DIRECTCONNECT,file_compression_type,FileCompressionType,File Compression Type,,,,,1st Review, -DIRECTCONNECT,file_hashQ_PROTO_DIRECTCONNECT,file_hash,FileHash,File Hash,,,,,1st Review, -DIRECTCONNECT,file_is_compressedQ_PROTO_DIRECTCONNECT,file_is_compressed,FileIsCompressed,File Is Compressed,,,,,1st Review, -DIRECTCONNECT,loginQ_PROTO_DIRECTCONNECT,login,Login,Login,login,,Login,,1st Review, -DIRECTCONNECT,queryQ_PROTO_DIRECTCONNECT,query,Query,Query,command,,Command,,1st Review, -DIRECTCONNECT,query_wayQ_PROTO_DIRECTCONNECT,query_way,QueryWay,Query Way,,,,,1st Review, -DIRECTCONNECT,sr_filehashQ_PROTO_DIRECTCONNECT,sr_filehash,SrFileHash,Sr File Hash,,,,,1st Review, -DIRECTCONNECT,sr_filenameQ_PROTO_DIRECTCONNECT,sr_filename,SrFilename,Sr Filename,objectname,,Object Name,,1st Review, -DIRECTCONNECT,sr_filesizeQ_PROTO_DIRECTCONNECT,sr_filesize,SrFileSize,Sr File Size,,,,,1st Review, -DNS,ancountQ_PROTO_DNS,ancount,ANCount,AN Count,,,,,1st Review, -DNS,arcountQ_PROTO_DNS,arcount,ARCount,AR Count,,,,,1st Review, -DNS,hostQ_PROTO_DNS,host,Host,Host,,,,,1st Review, -DNS,host_addrQ_PROTO_DNS,host_addr,HostAddr,Host Address,object,,Object,,1st Review, -DNS,nameQ_PROTO_DNS,name,Name,Name,dname,,Group,,1st Review, -DNS,nscountQ_PROTO_DNS,nscount,NSCount,NS Count,,,,,1st Review, -DNS,qdcountQ_PROTO_DNS,qdcount,QDCount,QD Count,,,,,1st Review, -DNS,queryQ_PROTO_DNS,query,Query,Query,command,,Command,,1st Review, -DNS,response_timeQ_PROTO_DNS,response_time,ResponseTime,Response Time,,,,,1st Review, -DNS,reverse_addrQ_PROTO_DNS,reverse_addr,ReverseAddr,Reverse Address,,,,,1st Review, -DNS,transaction_idQ_PROTO_DNS,transaction_id,TransactionID,Transaction ID,subject,,Subject,,1st Review, -DNS,ttlQ_PROTO_DNS,ttl,TTL,Time To Live,,,,,1st Review, -EBAY,query_rawQ_PROTO_EBAY,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -EBAY,query_textQ_PROTO_EBAY,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -EBUDDY,chat_imQ_PROTO_EBUDDY,chat_im,ChatIM,Chat IM,,,,,1st Review, -EBUDDY,client_messageQ_PROTO_EBUDDY,client_message,ClientMessage,Client Message,,,,,1st Review, -EBUDDY,client_statusQ_PROTO_EBUDDY,client_status,ClientStatus,Client Status,,,,,1st Review, -EBUDDY,contact_blockedQ_PROTO_EBUDDY,contact_blocked,ContactBlocked,Contact Blocked,,,,,1st Review, -EBUDDY,contact_imQ_PROTO_EBUDDY,contact_im,ContactIM,Contact IM,,,,,1st Review, -EBUDDY,contact_loginQ_PROTO_EBUDDY,contact_login,ContactLogin,Contact Login,,,,,1st Review, -EBUDDY,contact_messageQ_PROTO_EBUDDY,contact_message,ContactMessage,Contact Message,,,,,1st Review, -EBUDDY,contact_nicknameQ_PROTO_EBUDDY,contact_nickname,ContactNickname,Contact Nickname,,,,,1st Review, -EBUDDY,contact_statusQ_PROTO_EBUDDY,contact_status,ContactStatus,Contact Status,,,,,1st Review, -EBUDDY,e_actionQ_PROTO_EBUDDY,e_action,EAction,E Action,command,,Command,,1st Review, -EBUDDY,im_networkQ_PROTO_EBUDDY,im_network,IMNetwork,IM Network,,,,,1st Review, -EBUDDY,loginQ_PROTO_EBUDDY,login,Login,Login,login,,Login,,1st Review, -EBUDDY,messageQ_PROTO_EBUDDY,message,Msg,Message,subject,,Subject,,1st Review, -EBUDDY,nicknameQ_PROTO_EBUDDY,nickname,Nickname,Nickname,,,,,1st Review, -EBUDDY,passwordQ_PROTO_EBUDDY,password,Passwd,Password,,,,,1st Review, -EBUDDY,receiverQ_PROTO_EBUDDY,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -EBUDDY,senderQ_PROTO_EBUDDY,sender,Sender,Sender,sender,,Sender,,1st Review, -EDONKEY,file_chunk_data_offsetQ_PROTO_EDONKEY,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -EDONKEY,file_chunk_lenQ_PROTO_EDONKEY,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -EDONKEY,file_compression_typeQ_PROTO_EDONKEY,file_compression_type,FileCompressionType,File Compression Type,,,,,1st Review, -EDONKEY,file_is_compressedQ_PROTO_EDONKEY,file_is_compressed,FileIsCompressed,File Is Compressed,,,,,1st Review, -EDONKEY,filenameQ_PROTO_EDONKEY,filename,Filename,Filename,objectname,,Object Name,,1st Review, -EDONKEY,filesizeQ_PROTO_EDONKEY,filesize,FileSize,File Size,,,,,1st Review, -EDONKEY,loginQ_PROTO_EDONKEY,login,Login,Login,login,,Login,,1st Review, -EDONKEY,queryQ_PROTO_EDONKEY,query,Query,Query,command,,Command,,1st Review, -EDONKEY,query_typeQ_PROTO_EDONKEY,query_type,QueryType,Query Type,,,,,1st Review, -EIGRP,as_numberQ_PROTO_EIGRP,as_number,ASNum,AS Number,object,,Object,,1st Review, -ETH,dst_netQ_PROTO_ETH,dst_net,DstNet,Destination Net,dname,,Group,,1st Review, -ETH,ignore_encapsulationsQ_PROTO_ETH,ignore_encapsulations,IgnoreEncapsulations,Ignore Encapsulations,,,,,1st Review, -ETH,src_netQ_PROTO_ETH,src_net,SrcNet,Source Network,object,,Object,,1st Review, -ETSI_LI,authorization_country_codeQ_PROTO_ETSI_LI,authorization_country_code,AuthCountryCode,Authorization Country Code,,,,,1st Review, -ETSI_LI,communication_id_numberQ_PROTO_ETSI_LI,communication_id_number,CommunicationIDNumber,Communication IDNumber,,,,,1st Review, -ETSI_LI,delivery_country_codeQ_PROTO_ETSI_LI,delivery_country_code,DeliveryCountryCode,Delivery Country Code,,,,,1st Review, -ETSI_LI,etsi_671_neiQ_PROTO_ETSI_LI,etsi_671_nei,ETSI671NEI,ETSI 671 NEI,,,,,1st Review, -ETSI_LI,liidQ_PROTO_ETSI_LI,liid,LIID,LIID,,,,,1st Review, -ETSI_LI,microsecondQ_PROTO_ETSI_LI,microsecond,Microsecond,Microsecond,,,,,1st Review, -ETSI_LI,network_element_idQ_PROTO_ETSI_LI,network_element_id,NetworkElementID,Network Element ID,,,,,1st Review, -ETSI_LI,operator_idQ_PROTO_ETSI_LI,operator_id,OperatorID,Operator ID,,,,,1st Review, -ETSI_LI,secondQ_PROTO_ETSI_LI,second,Second,Second,,,,,1st Review, -ETSI_LI,sequence_numberQ_PROTO_ETSI_LI,sequence_number,SeqNum,Sequence Number,,,,,1st Review, -ETSI_LI,time_stamp_qualifierQ_PROTO_ETSI_LI,time_stamp_qualifier,TimeStampQualifier,Time Stamp Qualifier,,,,,1st Review, -FACEBOOK,actionQ_PROTO_FACEBOOK,action,Action,Action,command,,Command,,1st Review, -FACEBOOK,application_actionQ_PROTO_FACEBOOK,application_action,AppAction,Application Action,,,,,1st Review, -FACEBOOK,application_nameQ_PROTO_FACEBOOK,application_name,AppName,Application Name,,,,,1st Review, -FACEBOOK,client_timeQ_PROTO_FACEBOOK,client_time,ClientTime,Client Time,,,,,1st Review, -FACEBOOK,collegeQ_PROTO_FACEBOOK,college,College,College,,,,,1st Review, -FACEBOOK,commentQ_PROTO_FACEBOOK,comment,Comment,Comment,,,,,1st Review, -FACEBOOK,contact_nameQ_PROTO_FACEBOOK,contact_name,ContactName,Contact Name,,,,,1st Review, -FACEBOOK,contact_uidQ_PROTO_FACEBOOK,contact_uid,ContactUID,Contact UID,,,,,1st Review, -FACEBOOK,employerQ_PROTO_FACEBOOK,employer,Employer,Employer,,,,,1st Review, -FACEBOOK,feed_likeQ_PROTO_FACEBOOK,feed_like,FeedLike,Feed Like,,,,,1st Review, -FACEBOOK,feed_textQ_PROTO_FACEBOOK,feed_text,FeedText,Feed Text,object,,Object,,1st Review, -FACEBOOK,feed_typeQ_PROTO_FACEBOOK,feed_type,FeedType,Feed Type,,,,,1st Review, -FACEBOOK,firstnameQ_PROTO_FACEBOOK,firstname,FirstName,First Name,,,,,1st Review, -FACEBOOK,highschoolQ_PROTO_FACEBOOK,highschool,Highschool,Highschool,,,,,1st Review, -FACEBOOK,is_mobile_serviceQ_PROTO_FACEBOOK,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review, -FACEBOOK,lastnameQ_PROTO_FACEBOOK,lastname,LastName,Last Name,,,,,1st Review, -FACEBOOK,locationQ_PROTO_FACEBOOK,location,Location,Location,,,,,1st Review, -FACEBOOK,loginQ_PROTO_FACEBOOK,login,Login,Login,login,,Login,,1st Review, -FACEBOOK,messageQ_PROTO_FACEBOOK,message,Msg,Message,subject,,Subject,,1st Review, -FACEBOOK,message_idQ_PROTO_FACEBOOK,message_id,MsgID,Message ID,,,,,1st Review, -FACEBOOK,nameQ_PROTO_FACEBOOK,name,Name,Name,,,,,1st Review, -FACEBOOK,passwordQ_PROTO_FACEBOOK,password,Passwd,Password,,,,,1st Review, -FACEBOOK,profile_nameQ_PROTO_FACEBOOK,profile_name,ProfileName,Profile Name,,,,,1st Review, -FACEBOOK,profile_valueQ_PROTO_FACEBOOK,profile_value,ProfileValue,Profile Value,,,,,1st Review, -FACEBOOK,query_rawQ_PROTO_FACEBOOK,query_raw,QueryRaw,Query Raw,,,,,1st Review, -FACEBOOK,query_textQ_PROTO_FACEBOOK,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -FACEBOOK,receiverQ_PROTO_FACEBOOK,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -FACEBOOK,receiver_sexQ_PROTO_FACEBOOK,receiver_sex,ReceiverSex,Receiver Sex,,,,,1st Review, -FACEBOOK,receiver_uidQ_PROTO_FACEBOOK,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review, -FACEBOOK,senderQ_PROTO_FACEBOOK,sender,Sender,Sender,sender,,Sender,,1st Review, -FACEBOOK,sender_emailQ_PROTO_FACEBOOK,sender_email,SenderEmail,Sender Email,,,,,1st Review, -FACEBOOK,sender_sexQ_PROTO_FACEBOOK,sender_sex,SenderSex,Sender Sex,,,,,1st Review, -FACEBOOK,sender_uidQ_PROTO_FACEBOOK,sender_uid,SenderUID,Sender UID,,,,,1st Review, -FACEBOOK,sexQ_PROTO_FACEBOOK,sex,Sex,Sex,,,,,1st Review, -FACEBOOK,share_textQ_PROTO_FACEBOOK,share_text,ShareText,Share Text,,,,,1st Review, -FACEBOOK,share_withQ_PROTO_FACEBOOK,share_with,ShareWith,Share With,,,,,1st Review, -FACEBOOK,status_updateQ_PROTO_FACEBOOK,status_update,StatusUpdate,Status Update,,,,,1st Review, -FACEBOOK,uidQ_PROTO_FACEBOOK,uid,UID,User ID,,,,,1st Review, -FACEBOOK_APPS,application_actionQ_PROTO_FACEBOOK_APPS,application_action,AppAction,Application Action,command,,Command,,1st Review, -FACEBOOK_APPS,application_nameQ_PROTO_FACEBOOK_APPS,application_name,AppName,Application Name,objectname,,Object Name,,1st Review, -FACEBOOK_MAIL,actionQ_PROTO_FACEBOOK_MAIL,action,Action,Action,command,,Command,,1st Review, -FACEBOOK_MAIL,attach_idQ_PROTO_FACEBOOK_MAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -FACEBOOK_MAIL,attach_sizeQ_PROTO_FACEBOOK_MAIL,attach_size,AttachSize,Attach Size,,,,,1st Review, -FACEBOOK_MAIL,attach_typeQ_PROTO_FACEBOOK_MAIL,attach_type,AttachType,Attach Type,object,,Object,,1st Review, -FACEBOOK_MAIL,contact_nameQ_PROTO_FACEBOOK_MAIL,contact_name,ContactName,Contact Name,,,,,1st Review, -FACEBOOK_MAIL,contact_uidQ_PROTO_FACEBOOK_MAIL,contact_uid,ContactUID,Contact UID,,,,,1st Review, -FACEBOOK_MAIL,dateQ_PROTO_FACEBOOK_MAIL,date,Date,Date,,,,,1st Review, -FACEBOOK_MAIL,attach_filenameQ_PROTO_FACEBOOK_MAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -FACEBOOK_MAIL,loginQ_PROTO_FACEBOOK_MAIL,login,Login,Login,login,,Login,,1st Review, -FACEBOOK_MAIL,msg_idQ_PROTO_FACEBOOK_MAIL,msg_id,MsgID,Message ID,,,,,1st Review, -FACEBOOK_MAIL,receiverQ_PROTO_FACEBOOK_MAIL,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -FACEBOOK_MAIL,receiver_aliasQ_PROTO_FACEBOOK_MAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -FACEBOOK_MAIL,receiver_emailQ_PROTO_FACEBOOK_MAIL,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -FACEBOOK_MAIL,receiver_uidQ_PROTO_FACEBOOK_MAIL,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review, -FACEBOOK_MAIL,senderQ_PROTO_FACEBOOK_MAIL,sender,Sender,Sender,sender,,Sender,,1st Review, -FACEBOOK_MAIL,sender_aliasQ_PROTO_FACEBOOK_MAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -FACEBOOK_MAIL,sender_emailQ_PROTO_FACEBOOK_MAIL,sender_email,SenderEmail,Sender Email,,,,,1st Review, -FACEBOOK_MAIL,sender_uidQ_PROTO_FACEBOOK_MAIL,sender_uid,SenderUID,Sender UID,,,,,1st Review, -FACEBOOK_MAIL,session_idQ_PROTO_FACEBOOK_MAIL,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -FACEBOOK_MAIL,subjectQ_PROTO_FACEBOOK_MAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -FACEBOOK_MAIL,thread_idQ_PROTO_FACEBOOK_MAIL,thread_id,ThreadNum,Thread Number,,,,,1st Review, -FACEBOOK_MAIL,uidQ_PROTO_FACEBOOK_MAIL,uid,UID,User ID,,,,,1st Review, -FACETIME,serviceQ_PROTO_FACETIME,service,Service,Service,process,,Process,,1st Review, -FACETIME,service_durationQ_PROTO_FACETIME,service_duration,ServiceDuration,Service Duration,,,,,1st Review, -FACETIME,service_idQ_PROTO_FACETIME,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review, -FIREFOX_UPDATE,current_versionQ_PROTO_FIREFOX_UPDATE,current_version,CurrentVersion,Current Version,version,,Version,,1st Review, -FIREFOX_UPDATE,new_versionQ_PROTO_FIREFOX_UPDATE,new_version,NewVersion,New Version,object,,Object,,1st Review, -FIREFOX_UPDATE,plugin_nameQ_PROTO_FIREFOX_UPDATE,plugin_name,PluginName,Plugin Name,subject,,Subject,,1st Review, -FIREFOX_UPDATE,plugin_new_versionQ_PROTO_FIREFOX_UPDATE,plugin_new_version,PluginNewVersion,Plugin New Version,command,,Command,,1st Review, -FLASHPLUGIN_UPDATE,current_versionQ_PROTO_FLASHPLUGIN_UPDATE,current_version,CurrentVersion,Current Version,,,,,1st Review, -FLASHPLUGIN_UPDATE,new_versionQ_PROTO_FLASHPLUGIN_UPDATE,new_version,NewVersion,New Version,version,,Version,,1st Review, -FREEBSD_UPDATE,package_nameQ_PROTO_FREEBSD_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review, -FRIENDSTER,loginQ_PROTO_FRIENDSTER,login,Login,Login,login,,Login,,1st Review, -FRIENDSTER,nameQ_PROTO_FRIENDSTER,name,Name,Name,,,,,1st Review, -FRIENDSTER,passwordQ_PROTO_FRIENDSTER,password,Passwd,Password,,,,,1st Review, -FTP,filenameQ_PROTO_FTP,filename,Filename,Filename,objectname,,Object Name,,1st Review, -FTP,filesizeQ_PROTO_FTP,filesize,FileSize,File Size,,,,,1st Review, -FTP,greeting_messageQ_PROTO_FTP,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review, -FTP,indexQ_PROTO_FTP,index,Index,Index,,,,,1st Review, -FTP,loadwayQ_PROTO_FTP,loadway,Loadway,Loadway,,,,,1st Review, -FTP,loginQ_PROTO_FTP,login,Login,Login,login,,Login,,1st Review, -FTP,methodQ_PROTO_FTP,method,Method,Method,command,,Command,,1st Review, -FTP,method_contentQ_PROTO_FTP,method_content,MethodContent,Method Content,,,,,1st Review, -FTP,offsetQ_PROTO_FTP,offset,Offset,Offset,,,,,1st Review, -FTP,passwordQ_PROTO_FTP,password,Passwd,Password,,,,,1st Review, -FTP,return_contentQ_PROTO_FTP,return_content,ReturnContent,Return Content,,,,,1st Review, -FTP,transfer_durationQ_PROTO_FTP,transfer_duration,TransferDuration,Transfer Duration,,,,,1st Review, -GIOP,ior_type_idQ_PROTO_GIOP,ior_type_id,IORTypeID,IOR Type ID,,,,,1st Review, -GIOP,message_typeQ_PROTO_GIOP,message_type,MsgType,Message Type,,,,,1st Review, -GIOP,request_idQ_PROTO_GIOP,request_id,RequestID,Request ID,,,,,1st Review, -GIOP,request_operationQ_PROTO_GIOP,request_operation,RequestOperation,Request Operation,command,,Command,,1st Review, -GIOP,versionQ_PROTO_GIOP,version,Version,Version,version,,Version,,1st Review, -GMAIL,actionQ_PROTO_GMAIL,action,Action,Action,,,,,1st Review, -GMAIL,attach_idQ_PROTO_GMAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -GMAIL,attach_sizeQ_PROTO_GMAIL,attach_size,AttachSize,Attach Size,,,,,1st Review, -GMAIL,attach_typeQ_PROTO_GMAIL,attach_type,AttachType,Attach Type,,,,,1st Review, -GMAIL,contact_aliasQ_PROTO_GMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -GMAIL,contact_emailQ_PROTO_GMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review, -GMAIL,current_ip_addressQ_PROTO_GMAIL,current_ip_address,CurrentIPAddr,Current IP Address,,,,,1st Review, -GMAIL,dateQ_PROTO_GMAIL,date,Date,Date,,,,,1st Review, -GMAIL,draftQ_PROTO_GMAIL,draft,Draft,Draft,,,,,1st Review, -GMAIL,encodingQ_PROTO_GMAIL,encoding,Encoding,Encoding,,,,,1st Review, -GMAIL,attach_filenameQ_PROTO_GMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -GMAIL,last_activityQ_PROTO_GMAIL,last_activity,LastActivity,Last Activity,,,,,1st Review, -GMAIL,last_activity_timestampQ_PROTO_GMAIL,last_activity_timestamp,LastActivityTimestamp,Last Activity Timestamp,,,,,1st Review, -GMAIL,loginQ_PROTO_GMAIL,login,Login,Login,login,,Login,,1st Review, -GMAIL,msg_idQ_PROTO_GMAIL,msg_id,MsgID,Message ID,,,,,1st Review, -GMAIL,msglist_dateQ_PROTO_GMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -GMAIL,msglist_folderQ_PROTO_GMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -GMAIL,msglist_msgidQ_PROTO_GMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -GMAIL,msglist_receiverQ_PROTO_GMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -GMAIL,msglist_receiver_aliasQ_PROTO_GMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -GMAIL,msglist_receiver_emailQ_PROTO_GMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -GMAIL,msglist_senderQ_PROTO_GMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -GMAIL,msglist_sender_aliasQ_PROTO_GMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -GMAIL,msglist_sender_emailQ_PROTO_GMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -GMAIL,msglist_subjectQ_PROTO_GMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -GMAIL,nameQ_PROTO_GMAIL,name,Name,Name,,,,,1st Review, -GMAIL,next_attach_idQ_PROTO_GMAIL,next_attach_id,NextAttachID,Next Attach ID,,,,,1st Review, -GMAIL,other_ip_addressQ_PROTO_GMAIL,other_ip_address,OtherIPAddr,Other IP Address,,,,,1st Review, -GMAIL,real_sender_domainQ_PROTO_GMAIL,real_sender_domain,RealSenderDomain,Real Sender Domain,domain,,Domain,,1st Review, -GMAIL,real_sender_msgidQ_PROTO_GMAIL,real_sender_msgid,RealSenderMsgID,Real Sender Message ID,,,,,1st Review, -GMAIL,receiverQ_PROTO_GMAIL,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -GMAIL,receiver_aliasQ_PROTO_GMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -GMAIL,receiver_emailQ_PROTO_GMAIL,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -GMAIL,receiver_typeQ_PROTO_GMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -GMAIL,replytoQ_PROTO_GMAIL,replyto,ReplyTo,Reply To,,,,,1st Review, -GMAIL,senderQ_PROTO_GMAIL,sender,Sender,Sender,sender,,Sender,,1st Review, -GMAIL,sender_aliasQ_PROTO_GMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -GMAIL,sender_emailQ_PROTO_GMAIL,sender_email,SenderEmail,Sender Email,,,,,1st Review, -GMAIL,session_idQ_PROTO_GMAIL,session_id,SessionID,Session ID,,,,,1st Review, -GMAIL,subjectQ_PROTO_GMAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -GMAIL,thumbnailQ_PROTO_GMAIL,thumbnail,Thumbnail,Thumbnail,,,,,1st Review, -GMAIL,versionQ_PROTO_GMAIL,version,Version,Version,version,,Version,,1st Review, -GMAIL_BASIC,actionQ_PROTO_GMAIL_BASIC,action,Action,Action,command,,Command,,1st Review, -GMAIL_BASIC,attach_idQ_PROTO_GMAIL_BASIC,attach_id,AttachID,Attach ID,,,,,1st Review, -GMAIL_BASIC,attach_sizeQ_PROTO_GMAIL_BASIC,attach_size,AttachSize,Attach Size,,,,,1st Review, -GMAIL_BASIC,attach_typeQ_PROTO_GMAIL_BASIC,attach_type,AttachType,Attach Type,,,,,1st Review, -GMAIL_BASIC,contact_aliasQ_PROTO_GMAIL_BASIC,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -GMAIL_BASIC,contact_emailQ_PROTO_GMAIL_BASIC,contact_email,ContactEmail,Contact Email,,,,,1st Review, -GMAIL_BASIC,dateQ_PROTO_GMAIL_BASIC,date,Date,Date,,,,,1st Review, -GMAIL_BASIC,draftQ_PROTO_GMAIL_BASIC,draft,Draft,Draft,,,,,1st Review, -GMAIL_BASIC,attach_filenameQ_PROTO_GMAIL_BASIC,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -GMAIL_BASIC,loginQ_PROTO_GMAIL_BASIC,login,Login,Login,login,,Login,,1st Review, -GMAIL_BASIC,msg_idQ_PROTO_GMAIL_BASIC,msg_id,MsgID,Message ID,,,,,1st Review, -GMAIL_BASIC,msglist_dateQ_PROTO_GMAIL_BASIC,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -GMAIL_BASIC,msglist_folderQ_PROTO_GMAIL_BASIC,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -GMAIL_BASIC,msglist_msgidQ_PROTO_GMAIL_BASIC,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -GMAIL_BASIC,msglist_receiverQ_PROTO_GMAIL_BASIC,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -GMAIL_BASIC,msglist_senderQ_PROTO_GMAIL_BASIC,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -GMAIL_BASIC,msglist_subjectQ_PROTO_GMAIL_BASIC,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -GMAIL_BASIC,receiverQ_PROTO_GMAIL_BASIC,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -GMAIL_BASIC,receiver_aliasQ_PROTO_GMAIL_BASIC,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -GMAIL_BASIC,receiver_emailQ_PROTO_GMAIL_BASIC,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -GMAIL_BASIC,receiver_typeQ_PROTO_GMAIL_BASIC,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -GMAIL_BASIC,senderQ_PROTO_GMAIL_BASIC,sender,Sender,Sender,sender,,Sender,,1st Review, -GMAIL_BASIC,sender_aliasQ_PROTO_GMAIL_BASIC,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -GMAIL_BASIC,sender_emailQ_PROTO_GMAIL_BASIC,sender_email,SenderEmail,Sender Email,,,,,1st Review, -GMAIL_BASIC,session_idQ_PROTO_GMAIL_BASIC,session_id,SessionID,Session ID,,,,,1st Review, -GMAIL_BASIC,subjectQ_PROTO_GMAIL_BASIC,subject,Subject,Subject,subject,,Subject,,1st Review, -GMAIL_CHAT,calleeQ_PROTO_GMAIL_CHAT,callee,Callee,Callee,,,,,1st Review, -GMAIL_CHAT,callerQ_PROTO_GMAIL_CHAT,caller,Caller,Caller,,,,,1st Review, -GMAIL_CHAT,loginQ_PROTO_GMAIL_CHAT,login,Login,Login,login,,Login,,1st Review, -GMAIL_CHAT,messageQ_PROTO_GMAIL_CHAT,message,Msg,Message,subject,,Subject,,1st Review, -GMAIL_CHAT,receiverQ_PROTO_GMAIL_CHAT,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -GMAIL_CHAT,senderQ_PROTO_GMAIL_CHAT,sender,Sender,Sender,sender,,Sender,,1st Review, -GMAIL_MOBILE,actionQ_PROTO_GMAIL_MOBILE,action,Action,Action,command,,Command,,1st Review, -GMAIL_MOBILE,attach_idQ_PROTO_GMAIL_MOBILE,attach_id,AttachID,Attach ID,,,,,1st Review, -GMAIL_MOBILE,contact_aliasQ_PROTO_GMAIL_MOBILE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -GMAIL_MOBILE,contact_emailQ_PROTO_GMAIL_MOBILE,contact_email,ContactEmail,Contact Email,,,,,1st Review, -GMAIL_MOBILE,contact_uidQ_PROTO_GMAIL_MOBILE,contact_uid,ContactUID,Contact UID,,,,,1st Review, -GMAIL_MOBILE,dateQ_PROTO_GMAIL_MOBILE,date,Date,Date,,,,,1st Review, -GMAIL_MOBILE,draftQ_PROTO_GMAIL_MOBILE,draft,Draft,Draft,,,,,1st Review, -GMAIL_MOBILE,email_indexQ_PROTO_GMAIL_MOBILE,email_index,EmailIndex,Email Index,,,,,1st Review, -GMAIL_MOBILE,attach_filenameQ_PROTO_GMAIL_MOBILE,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -GMAIL_MOBILE,loginQ_PROTO_GMAIL_MOBILE,login,Login,Login,login,,Login,,1st Review, -GMAIL_MOBILE,msglist_folderQ_PROTO_GMAIL_MOBILE,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -GMAIL_MOBILE,msglist_msgidQ_PROTO_GMAIL_MOBILE,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -GMAIL_MOBILE,msglist_receiver_aliasQ_PROTO_GMAIL_MOBILE,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -GMAIL_MOBILE,msglist_sender_aliasQ_PROTO_GMAIL_MOBILE,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -GMAIL_MOBILE,msglist_subjectQ_PROTO_GMAIL_MOBILE,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -GMAIL_MOBILE,receiverQ_PROTO_GMAIL_MOBILE,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -GMAIL_MOBILE,receiver_aliasQ_PROTO_GMAIL_MOBILE,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -GMAIL_MOBILE,receiver_emailQ_PROTO_GMAIL_MOBILE,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -GMAIL_MOBILE,receiver_typeQ_PROTO_GMAIL_MOBILE,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -GMAIL_MOBILE,senderQ_PROTO_GMAIL_MOBILE,sender,Sender,Sender,sender,,Sender,,1st Review, -GMAIL_MOBILE,sender_aliasQ_PROTO_GMAIL_MOBILE,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -GMAIL_MOBILE,sender_emailQ_PROTO_GMAIL_MOBILE,sender_email,SenderEmail,Sender Email,,,,,1st Review, -GMAIL_MOBILE,session_idQ_PROTO_GMAIL_MOBILE,session_id,SessionID,Session ID,,,,,1st Review, -GMAIL_MOBILE,subjectQ_PROTO_GMAIL_MOBILE,subject,Subject,Subject,subject,,Subject,,1st Review, -GMX,attach_idQ_PROTO_GMX,attach_id,AttachID,Attach ID,,,,,1st Review, -GMX,attach_filenameQ_PROTO_GMX,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -GMX,loginQ_PROTO_GMX,login,Login,Login,login,,Login,,1st Review, -GMX,msg_idQ_PROTO_GMX,msg_id,MsgID,Message ID,,,,,1st Review, -GMX,receiverQ_PROTO_GMX,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -GMX,receiver_aliasQ_PROTO_GMX,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -GMX,receiver_emailQ_PROTO_GMX,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -GMX,receiver_typeQ_PROTO_GMX,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -GMX,senderQ_PROTO_GMX,sender,Sender,Sender,sender,,Sender,,1st Review, -GMX,sender_aliasQ_PROTO_GMX,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -GMX,sender_emailQ_PROTO_GMX,sender_email,SenderEmail,Sender Email,,,,,1st Review, -GMX,session_idQ_PROTO_GMX,session_id,SessionID,Session ID,,,,,1st Review, -GMX,subjectQ_PROTO_GMX,subject,Subject,Subject,subject,,Subject,,1st Review, -GNUTELLA,file_chunk_data_offsetQ_PROTO_GNUTELLA,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -GNUTELLA,file_chunk_lenQ_PROTO_GNUTELLA,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -GNUTELLA,file_ed2kQ_PROTO_GNUTELLA,file_ed2k,FileED2K,File ED2K,,,,,1st Review, -GNUTELLA,file_md5Q_PROTO_GNUTELLA,file_md5,FileMD5,File MD5,,,,,1st Review, -GNUTELLA,filenameQ_PROTO_GNUTELLA,filename,Filename,Filename,objectname,,Object Name,,1st Review, -GNUTELLA,file_sha1Q_PROTO_GNUTELLA,file_sha1,FileSHA1,File SHA1,,,,,1st Review, -GNUTELLA,filesizeQ_PROTO_GNUTELLA,filesize,FileSize,File Size,,,,,1st Review, -GNUTELLA,peer_addrQ_PROTO_GNUTELLA,peer_addr,PeerAddr,Peer Address,,,,,1st Review, -GNUTELLA,queryQ_PROTO_GNUTELLA,query,Query,Query,command,,Command,,1st Review, -GNUTELLA,serverQ_PROTO_GNUTELLA,server,Server,Server,dname,,Group,,1st Review, -GNUTELLA,user_agentQ_PROTO_GNUTELLA,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -GOOGLE,encodingQ_PROTO_GOOGLE,encoding,Encoding,Encoding,,,,,1st Review, -GOOGLE,loginQ_PROTO_GOOGLE,login,Login,Login,login,,Login,,1st Review, -GOOGLE,query_indexQ_PROTO_GOOGLE,query_index,QueryIndex,Query Index,,,,,1st Review, -GOOGLE,query_rawQ_PROTO_GOOGLE,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -GOOGLE,query_textQ_PROTO_GOOGLE,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -GOOGLE,query_typeQ_PROTO_GOOGLE,query_type,QueryType,Query Type,,,,,1st Review, -GOOGLE_ADS,ad_bid_typeQ_PROTO_GOOGLE_ADS,ad_bid_type,AdBidType,Ad Bid Type,,,,,1st Review, -GOOGLE_ADS,ad_channelQ_PROTO_GOOGLE_ADS,ad_channel,AdChannel,Ad Channel,,,,,1st Review, -GOOGLE_ADS,ad_clientQ_PROTO_GOOGLE_ADS,ad_client,AdClient,Ad Client,,,,,1st Review, -GOOGLE_ADS,ad_pageQ_PROTO_GOOGLE_ADS,ad_page,AdPage,Ad Page,,,,,1st Review, -GOOGLE_ADS,ad_statusQ_PROTO_GOOGLE_ADS,ad_status,AdStatus,Ad Status,object,,Object,,1st Review, -GOOGLE_ADS,ad_targeting_typeQ_PROTO_GOOGLE_ADS,ad_targeting_type,AdTargetingType,Ad Targeting Type,,,,,1st Review, -GOOGLE_ADS,ad_textQ_PROTO_GOOGLE_ADS,ad_text,AdText,Ad Text,,,,,1st Review, -GOOGLE_ADS,ad_titleQ_PROTO_GOOGLE_ADS,ad_title,AdTitle,Ad Title,,,,,1st Review, -GOOGLE_ADS,ad_typeQ_PROTO_GOOGLE_ADS,ad_type,AdType,Ad Type,,,,,1st Review, -GOOGLE_ADS,ad_urlQ_PROTO_GOOGLE_ADS,ad_url,AdURL,Ad URL,,,,,1st Review, -GOOGLE_ADS,ad_url_fullQ_PROTO_GOOGLE_ADS,ad_url_full,AdURLFull,Ad URL Full,url,,URL,,1st Review, -GOOGLE_ADS,ad_visible_urlQ_PROTO_GOOGLE_ADS,ad_visible_url,AdVisibleURL,Ad Visible URL,,,,,1st Review, -GOOGLE_EARTH,encodingQ_PROTO_GOOGLE_EARTH,encoding,Encoding,Encoding,,,,,1st Review, -GOOGLE_EARTH,end_addr_rawQ_PROTO_GOOGLE_EARTH,end_addr_raw,EndAddrRaw,End Address Raw,,,,,1st Review, -GOOGLE_EARTH,end_addr_textQ_PROTO_GOOGLE_EARTH,end_addr_text,EndAddrText,End Address Text,,,,,1st Review, -GOOGLE_EARTH,near_rawQ_PROTO_GOOGLE_EARTH,near_raw,NearRaw,Near Raw,,,,,1st Review, -GOOGLE_EARTH,near_textQ_PROTO_GOOGLE_EARTH,near_text,NearText,Near Text,,,,,1st Review, -GOOGLE_EARTH,query_rawQ_PROTO_GOOGLE_EARTH,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -GOOGLE_EARTH,query_textQ_PROTO_GOOGLE_EARTH,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -GOOGLE_EARTH,start_addr_rawQ_PROTO_GOOGLE_EARTH,start_addr_raw,StartAddrRaw,Start Address Raw,,,,,1st Review, -GOOGLE_EARTH,start_addr_textQ_PROTO_GOOGLE_EARTH,start_addr_text,StartAddrText,Start Address Text,,,,,1st Review, -GOOGLE_GROUPS,actionQ_PROTO_GOOGLE_GROUPS,action,Action,Action,command,,Command,,1st Review, -GOOGLE_GROUPS,aliasQ_PROTO_GOOGLE_GROUPS,alias,Alias,Alias,,,,,1st Review, -GOOGLE_GROUPS,dateQ_PROTO_GOOGLE_GROUPS,date,Date,Date,,,,,1st Review, -GOOGLE_GROUPS,group_detailed_descriptionQ_PROTO_GOOGLE_GROUPS,group_detailed_description,GroupDetailedDesc,Group Detailed Description,,,,,1st Review, -GOOGLE_GROUPS,group_join_requestQ_PROTO_GOOGLE_GROUPS,group_join_request,GroupJoinRequest,Group Join Request,,,,,1st Review, -GOOGLE_GROUPS,group_nameQ_PROTO_GOOGLE_GROUPS,group_name,GroupName,Group Name,objectname,,Object Name,,1st Review, -GOOGLE_GROUPS,loginQ_PROTO_GOOGLE_GROUPS,login,Login,Login,login,,Login,,1st Review, -GOOGLE_GROUPS,member_aliasQ_PROTO_GOOGLE_GROUPS,member_alias,MemberAlias,Member Alias,,,,,1st Review, -GOOGLE_GROUPS,msglist_contentQ_PROTO_GOOGLE_GROUPS,msglist_content,MsgListContent,Message List Content,,,,,1st Review, -GOOGLE_GROUPS,msglist_dateQ_PROTO_GOOGLE_GROUPS,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -GOOGLE_GROUPS,msglist_senderQ_PROTO_GOOGLE_GROUPS,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -GOOGLE_GROUPS,msglist_sender_aliasQ_PROTO_GOOGLE_GROUPS,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -GOOGLE_GROUPS,msglist_sender_emailQ_PROTO_GOOGLE_GROUPS,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -GOOGLE_GROUPS,msglist_subjectQ_PROTO_GOOGLE_GROUPS,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -GOOGLE_GROUPS,query_rawQ_PROTO_GOOGLE_GROUPS,query_raw,QueryRaw,Query Raw,,,,,1st Review, -GOOGLE_GROUPS,query_textQ_PROTO_GOOGLE_GROUPS,query_text,QueryText,Query Text,,,,,1st Review, -GOOGLE_GROUPS,receiverQ_PROTO_GOOGLE_GROUPS,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -GOOGLE_GROUPS,receiver_aliasQ_PROTO_GOOGLE_GROUPS,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -GOOGLE_GROUPS,receiver_emailQ_PROTO_GOOGLE_GROUPS,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -GOOGLE_GROUPS,receiver_typeQ_PROTO_GOOGLE_GROUPS,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -GOOGLE_GROUPS,senderQ_PROTO_GOOGLE_GROUPS,sender,Sender,Sender,sender,,Sender,,1st Review, -GOOGLE_GROUPS,sender_aliasQ_PROTO_GOOGLE_GROUPS,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -GOOGLE_GROUPS,sender_emailQ_PROTO_GOOGLE_GROUPS,sender_email,SenderEmail,Sender Email,,,,,1st Review, -GOOGLE_GROUPS,subjectQ_PROTO_GOOGLE_GROUPS,subject,Subject,Subject,subject,,Subject,,1st Review, -GOOGLE_MAPS,eastQ_PROTO_GOOGLE_MAPS,east,East,East,,,,,1st Review, -GOOGLE_MAPS,encodingQ_PROTO_GOOGLE_MAPS,encoding,Encoding,Encoding,,,,,1st Review, -GOOGLE_MAPS,end_addrQ_PROTO_GOOGLE_MAPS,end_addr,EndAddr,End Address,,,,,1st Review, -GOOGLE_MAPS,end_addr_rawQ_PROTO_GOOGLE_MAPS,end_addr_raw,EndAddrRaw,End Address Raw,,,,,1st Review, -GOOGLE_MAPS,northQ_PROTO_GOOGLE_MAPS,north,North,North,,,,,1st Review, -GOOGLE_MAPS,query_rawQ_PROTO_GOOGLE_MAPS,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -GOOGLE_MAPS,query_textQ_PROTO_GOOGLE_MAPS,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -GOOGLE_MAPS,southQ_PROTO_GOOGLE_MAPS,south,South,South,,,,,1st Review, -GOOGLE_MAPS,start_addrQ_PROTO_GOOGLE_MAPS,start_addr,StartAddr,Start Address,object,,Object,,1st Review, -GOOGLE_MAPS,start_addr_rawQ_PROTO_GOOGLE_MAPS,start_addr_raw,StartAddrRaw,Start Address Raw,objectname,,Object Name,,1st Review, -GOOGLE_MAPS,westQ_PROTO_GOOGLE_MAPS,west,West,West,,,,,1st Review, -GOOGLE_MAPS,zoomQ_PROTO_GOOGLE_MAPS,zoom,Zoom,Zoom,,,,,1st Review, -GOOGLE_PLAY,application_nameQ_PROTO_GOOGLE_PLAY,application_name,AppName,Application Name,objectname,,Object Name,,1st Review, -GOUGOU,query_rawQ_PROTO_GOUGOU,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -GOUGOU,query_textQ_PROTO_GOUGOU,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -GRE,protocolQ_PROTO_GRE,protocol,Proto,Protocol,,,,,1st Review, -GTP,access_pointQ_PROTO_GTP,access_point,AccessPoint,Access Point,,,,,1st Review, -GTP,create_ctxt_delayQ_PROTO_GTP,create_ctxt_delay,CreateCtxtDelay,Create Ctxt Delay,,,,,1st Review, -GTP,gsn_addressQ_PROTO_GTP,gsn_address,GSNAddr,GSN Address,,,,,1st Review, -GTP,gsn_address_controlQ_PROTO_GTP,gsn_address_control,GSNAddrControl,GSN Address Control,,,,,1st Review, -GTP,gsn_address_dataQ_PROTO_GTP,gsn_address_data,GSNAddrData,GSN Address Data,,,,,1st Review, -GTP,gsn_typeQ_PROTO_GTP,gsn_type,GSNType,GSN Type,,,,,1st Review, -GTP,imeiQ_PROTO_GTP,imei,IMEI,IMEI,,,,,1st Review, -GTP,imei_svQ_PROTO_GTP,imei_sv,IMEISV,IMEI SV,,,,,1st Review, -GTP,imei_tacQ_PROTO_GTP,imei_tac,IMEITAC,IMEI TAC,,,,,1st Review, -GTP,imsiQ_PROTO_GTP,imsi,IMSI,IMSI,,,,,1st Review, -GTP,imsi_ccQ_PROTO_GTP,imsi_cc,IMSICC,IMSI CC,,,,,1st Review, -GTP,imsi_ncQ_PROTO_GTP,imsi_nc,IMSINC,IMSI NC,,,,,1st Review, -GTP,locationQ_PROTO_GTP,location,Location,Location,,,,,1st Review, -GTP,location_ciQ_PROTO_GTP,location_ci,LocationCI,Location CI,,,,,1st Review, -GTP,location_lacQ_PROTO_GTP,location_lac,LocationLAC,Location LAC,,,,,1st Review, -GTP,location_mccQ_PROTO_GTP,location_mcc,LocationMCC,Location MCC,,,,,1st Review, -GTP,location_mncQ_PROTO_GTP,location_mnc,LocationMNC,Location MNC,,,,,1st Review, -GTP,location_raiQ_PROTO_GTP,location_rai,LocationRAI,Location RAI,,,,,1st Review, -GTP,location_sacQ_PROTO_GTP,location_sac,LocationSAC,Location SAC,,,,,1st Review, -GTP,location_typeQ_PROTO_GTP,location_type,LocationType,Location Type,,,,,1st Review, -GTP,ms_addressQ_PROTO_GTP,ms_address,MsAddr,Ms Address,,,,,1st Review, -GTP,ms_address_peerQ_PROTO_GTP,ms_address_peer,MsAddrPeer,Ms Address Peer,,,,,1st Review, -GTP,msisdnQ_PROTO_GTP,msisdn,MSISDN,MSISDN,,,,,1st Review, -GTP,qos_alloc_ret_prioQ_PROTO_GTP,qos_alloc_ret_prio,QosAllocRetPrio,Qos Alloc Ret Prio,,,,,1st Review, -GTP,qos_delayQ_PROTO_GTP,qos_delay,QosDelay,Qos Delay,,,,,1st Review, -GTP,qos_max_downlinkQ_PROTO_GTP,qos_max_downlink,QosMaxDownlink,Qos Max Downlink,,,,,1st Review, -GTP,qos_max_uplinkQ_PROTO_GTP,qos_max_uplink,QosMaxUplink,Qos Max Uplink,,,,,1st Review, -GTP,qos_meanQ_PROTO_GTP,qos_mean,QosMean,Qos Mean,,,,,1st Review, -GTP,qos_peakQ_PROTO_GTP,qos_peak,QosPeak,Qos Peak,,,,,1st Review, -GTP,qos_precedenceQ_PROTO_GTP,qos_precedence,QosPrecedence,Qos Precedence,,,,,1st Review, -GTP,qos_reliabilityQ_PROTO_GTP,qos_reliability,QosReliability,Qos Reliability,,,,,1st Review, -GTP,raiQ_PROTO_GTP,rai,RAI,RAI,,,,,1st Review, -GTP,reply_cause_codeQ_PROTO_GTP,reply_cause_code,ReplyCauseCode,Reply Cause Code,,,,,1st Review, -GTP,session_timeQ_PROTO_GTP,session_time,SessionTime,Session Time,,,,,1st Review, -GTP,start_timeQ_PROTO_GTP,start_time,StartTime,Start Time,,,,,1st Review, -GTP,stop_timeQ_PROTO_GTP,stop_time,StopTime,Stop Time,,,,,1st Review, -GTP,teidQ_PROTO_GTP,teid,TEID,TEID,,,,,1st Review, -GTP,teid_controlQ_PROTO_GTP,teid_control,TEIDControl,TEID Control,,,,,1st Review, -GTP,teid_dataQ_PROTO_GTP,teid_data,TEIDData,TEID Data,,,,,1st Review, -GTPV2,access_pointQ_PROTO_GTPV2,access_point,AccessPoint,Access Point,,,,,1st Review, -GTPV2,create_ctxt_delayQ_PROTO_GTPV2,create_ctxt_delay,CreateCtxtDelay,Create Ctxt Delay,,,,,1st Review, -GTPV2,imeiQ_PROTO_GTPV2,imei,IMEI,IMEI,,,,,1st Review, -GTPV2,imei_svQ_PROTO_GTPV2,imei_sv,IMEISV,IMEI SV,,,,,1st Review, -GTPV2,imei_tacQ_PROTO_GTPV2,imei_tac,IMEITAC,IMEI TAC,,,,,1st Review, -GTPV2,imsiQ_PROTO_GTPV2,imsi,IMSI,IMSI,,,,,1st Review, -GTPV2,imsi_ccQ_PROTO_GTPV2,imsi_cc,IMSICC,IMSI CC,,,,,1st Review, -GTPV2,imsi_ncQ_PROTO_GTPV2,imsi_nc,IMSINC,IMSI NC,,,,,1st Review, -GTPV2,ms_addressQ_PROTO_GTPV2,ms_address,MsAddr,Ms Address,,,,,1st Review, -GTPV2,msisdnQ_PROTO_GTPV2,msisdn,MSISDN,MSISDN,,,,,1st Review, -GTPV2,reply_cause_codeQ_PROTO_GTPV2,reply_cause_code,ReplyCauseCode,Reply Cause Code,,,,,1st Review, -GTPV2,s10_mme_gtpc_addressQ_PROTO_GTPV2,s10_mme_gtpc_address,S10MMEGTPCAddr,S10 Mme Gtpc Address,,,,,1st Review, -GTPV2,s10_mme_gtpc_teidQ_PROTO_GTPV2,s10_mme_gtpc_teid,S10MMEGTPCTEID,S10 Mme Gtpc Gtpc TEID,,,,,1st Review, -GTPV2,s11_mme_gtpc_addressQ_PROTO_GTPV2,s11_mme_gtpc_address,S11MMEGTPCAddr,S11 Mme Gtpc Address,,,,,1st Review, -GTPV2,s11_mme_gtpc_teidQ_PROTO_GTPV2,s11_mme_gtpc_teid,S11MMEGTPCTEID,S11 Mme Gtpc Gtpc TEID,,,,,1st Review, -GTPV2,s11_s4_sgw_gtpc_addressQ_PROTO_GTPV2,s11_s4_sgw_gtpc_address,S11S4SGWGTPCAddr,S11 S4 Sgw Gtpc Address,,,,,1st Review, -GTPV2,s11_s4_sgw_gtpc_teidQ_PROTO_GTPV2,s11_s4_sgw_gtpc_teid,S11S4SGWGTPCTEID,S11 S4 SGW GTPC TEID,,,,,1st Review, -GTPV2,s12_rnc_gtpu_addressQ_PROTO_GTPV2,s12_rnc_gtpu_address,S12RNCGTPUAddr,S12 RNC GTPU Address,,,,,1st Review, -GTPV2,s12_rnc_gtpu_teidQ_PROTO_GTPV2,s12_rnc_gtpu_teid,S12RNCGTPUTEID,S12 RNC GTPU TEID,,,,,1st Review, -GTPV2,s12_sgw_gtpu_addressQ_PROTO_GTPV2,s12_sgw_gtpu_address,S12SGWGTPUAddr,S12 SGW GTPU Address,,,,,1st Review, -GTPV2,s12_sgw_gtpu_teidQ_PROTO_GTPV2,s12_sgw_gtpu_teid,S12SGWGTPUTEID,S12 SGW GTPU TEID,,,,,1st Review, -GTPV2,s1u_enodeb_gtpu_addressQ_PROTO_GTPV2,s1u_enodeb_gtpu_address,S1UEnodebGTPUAddr,S1U Enodeb GTPU Address,,,,,1st Review, -GTPV2,s1u_enodeb_gtpu_teidQ_PROTO_GTPV2,s1u_enodeb_gtpu_teid,S1UenodebGTPUTEID,S1U Enodeb GTPU TEID,,,,,1st Review, -GTPV2,s1u_sgw_gtpu_addressQ_PROTO_GTPV2,s1u_sgw_gtpu_address,S1USGWGTPUAddr,S1 USGW GTPU Address,,,,,1st Review, -GTPV2,s1u_sgw_gtpu_teidQ_PROTO_GTPV2,s1u_sgw_gtpu_teid,S1USGWGTPUTEID,S1 USGW GTPU TEID,,,,,1st Review, -GTPV2,s3_mme_gtpc_addressQ_PROTO_GTPV2,s3_mme_gtpc_address,S3MMEGTPCAddr,S3 MME GTPC Address,,,,,1st Review, -GTPV2,s3_mme_gtpc_teidQ_PROTO_GTPV2,s3_mme_gtpc_teid,S3MMEGTPCTEID,S3 MME GTPC TEID,,,,,1st Review, -GTPV2,s3_sgsn_gtpc_addressQ_PROTO_GTPV2,s3_sgsn_gtpc_address,S3SGSNGTPCAddr,S3 SGSN GTPC Address,,,,,1st Review, -GTPV2,s3_sgsn_gtpc_teidQ_PROTO_GTPV2,s3_sgsn_gtpc_teid,S3SGSNGTPCTEID,S3 SGSN GTPC TEID,,,,,1st Review, -GTPV2,s4_sgsn_gtpc_addressQ_PROTO_GTPV2,s4_sgsn_gtpc_address,S4SGSNGTPCAddr,S4 SGSN GTPC Address,,,,,1st Review, -GTPV2,s4_sgsn_gtpc_teidQ_PROTO_GTPV2,s4_sgsn_gtpc_teid,S4SGSNGTPCTEID,S4 SGSN GTPC TEID,,,,,1st Review, -GTPV2,s4_sgsn_gtpu_addressQ_PROTO_GTPV2,s4_sgsn_gtpu_address,S4SGSNGTPUAddr,S4 SGSN GTPU Address,,,,,1st Review, -GTPV2,s4_sgsn_gtpu_teidQ_PROTO_GTPV2,s4_sgsn_gtpu_teid,S4SGSNGTPUTEID,S4 SGSN GTPU TEID,,,,,1st Review, -GTPV2,s4_sgw_gtpu_addressQ_PROTO_GTPV2,s4_sgw_gtpu_address,S4SGWGTPUAddr,S4 SGW GTPU Address,,,,,1st Review, -GTPV2,s4_sgw_gtpu_teidQ_PROTO_GTPV2,s4_sgw_gtpu_teid,S4SGWGTPUTEID,S4 SGW GTPU TEID,,,,,1st Review, -GTPV2,s5_s8_pgw_gtpc_addressQ_PROTO_GTPV2,s5_s8_pgw_gtpc_address,S5S8PGWGTPCAddr,S5 S8 PGW GTPC Address,,,,,1st Review, -GTPV2,s5_s8_pgw_gtpc_teidQ_PROTO_GTPV2,s5_s8_pgw_gtpc_teid,S5S8PGWGTPCTEID,S5 S8 PGW GTPC TEID,,,,,1st Review, -GTPV2,s5_s8_pgw_gtpu_addressQ_PROTO_GTPV2,s5_s8_pgw_gtpu_address,S5S8PGWGTPUAddr,S5 S8 PGW GTPU Address,,,,,1st Review, -GTPV2,s5_s8_pgw_gtpu_teidQ_PROTO_GTPV2,s5_s8_pgw_gtpu_teid,S5S8PGWGTPUTEID,S5 S8 PGW GTPU TEID,,,,,1st Review, -GTPV2,s5_s8_sgw_gtpc_addressQ_PROTO_GTPV2,s5_s8_sgw_gtpc_address,S5S8SGWGTPCAddr,S5 S8 SGW GTPC Address,,,,,1st Review, -GTPV2,s5_s8_sgw_gtpc_teidQ_PROTO_GTPV2,s5_s8_sgw_gtpc_teid,S5S8SGWGTPCTEID,S5 S8 SGW GTPC TEID,,,,,1st Review, -GTPV2,s5_s8_sgw_gtpu_addressQ_PROTO_GTPV2,s5_s8_sgw_gtpu_address,S5S8SGWGTPUAddr,S5 S8 SGW GTPU Address,,,,,1st Review, -GTPV2,s5_s8_sgw_gtpu_teidQ_PROTO_GTPV2,s5_s8_sgw_gtpu_teid,S5S8SGWGTPUTEID,S5 S8 SGW GTPU TEID,,,,,1st Review, -GTPV2,seqQ_PROTO_GTPV2,seq,Seq,Sequence,,,,,1st Review, -GTPV2,session_durationQ_PROTO_GTPV2,session_duration,SessionDuration,Session Duration,,,,,1st Review, -GTPV2,start_timeQ_PROTO_GTPV2,start_time,StartTime,Start Time,,,,,1st Review, -GTPV2,stop_timeQ_PROTO_GTPV2,stop_time,StopTime,Stop Time,,,,,1st Review, -GTPV2,teidQ_PROTO_GTPV2,teid,TEID,TEID,,,,,1st Review, -H225,audio_dataQ_PROTO_H225,audio_data,AudioData,Audio Data,,,,,1st Review, -H225,call_durationQ_PROTO_H225,call_duration,CallDuration,Call Duration,,,,,1st Review, -H225,calleeQ_PROTO_H225,callee,Callee,Callee,,,,,1st Review, -H225,callerQ_PROTO_H225,caller,Caller,Caller,,,,,1st Review, -H225,call_idQ_PROTO_H225,call_id,CallID,Call ID,,,,,1st Review, -H225,call_setupQ_PROTO_H225,call_setup,CallSetup,Call Setup,,,,,1st Review, -H225,end_statusQ_PROTO_H225,end_status,EndStatus,End Status,,,,,1st Review, -H225,h245_addrQ_PROTO_H225,h245_addr,H245Addr,H245 Address,,,,,1st Review, -H225,h245_methodQ_PROTO_H225,h245_method,H245Method,H245 Method,,,,,1st Review, -H225,languageQ_PROTO_H225,language,Language,Language,,,,,1st Review, -H225,media_attr_encodingQ_PROTO_H225,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review, -H225,media_channel_addrQ_PROTO_H225,media_channel_addr,MediaChannelAddr,Media Channel Address,,,,,1st Review, -H225,media_control_channel_addrQ_PROTO_H225,media_control_channel_addr,MediaControlChannelAddr,Media Control Channel Address,,,,,1st Review, -H225,methodQ_PROTO_H225,method,Method,Method,command,,Command,,1st Review, -H225,product_idQ_PROTO_H225,product_id,ProductID,Product ID,,,,,1st Review, -H225,request_calleeQ_PROTO_H225,request_callee,RequestCallee,Request Callee,,,,,1st Review, -H225,request_callerQ_PROTO_H225,request_caller,RequestCaller,Request Caller,,,,,1st Review, -H225,request_call_idQ_PROTO_H225,request_call_id,RequestCallID,Request Call ID,,,,,1st Review, -H225,session_durationQ_PROTO_H225,session_duration,SessionDuration,Session Duration,,,,,1st Review, -H225,start_timeQ_PROTO_H225,start_time,StartTime,Start Time,,,,,1st Review, -H225,time_before_spkQ_PROTO_H225,time_before_spk,TimeBeforeSpk,Time Before Spk,,,,,1st Review, -H225,versionQ_PROTO_H225,version,Version,Version,version,,Version,,1st Review, -H245,media_attr_encodingQ_PROTO_H245,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review, -H245,media_channel_addrQ_PROTO_H245,media_channel_addr,MediaChannelAddr,Media Channel Address,,,,,1st Review, -H245,media_control_channel_addrQ_PROTO_H245,media_control_channel_addr,MediaControlChannelAddr,Media Control Channel Address,,,,,1st Review, -H245,methodQ_PROTO_H245,method,Method,Method,command,,Command,,1st Review, -H248_TEXT,context_idQ_PROTO_H248_TEXT,context_id,ContextID,Context ID,,,,,1st Review, -HI5,is_mobile_serviceQ_PROTO_HI5,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review, -HI5,loginQ_PROTO_HI5,login,Login,Login,login,,Login,,1st Review, -HI5,nicknameQ_PROTO_HI5,nickname,Nickname,Nickname,,,,,1st Review, -HI5,passwordQ_PROTO_HI5,password,Passwd,Password,,,,,1st Review, -HIGH_ENTROPY,entropyQ_PROTO_HIGH_ENTROPY,entropy,Entropy,Entropy,,,,,1st Review, -HSRP,virtual_addrQ_PROTO_HSRP,virtual_addr,VirtualAddr,Virtual Address,,,,,1st Review, -HTTP,accept_encodingQ_PROTO_HTTP,accept_encoding,AcceptEncoding,Accept Encoding,,,,,1st Review, -HTTP,audio_datarateQ_PROTO_HTTP,audio_datarate,AuditDataRate,Audio Data Rate,,,,,1st Review, -HTTP,auth_passwordQ_PROTO_HTTP,auth_password,AuthPass,Authentication Password,,,,,1st Review, -HTTP,auth_usernameQ_PROTO_HTTP,auth_username,AuthUsername,Authentication Username,,,,,1st Review, -HTTP,charsetQ_PROTO_HTTP,charset,Charset,Charset,,,,,1st Review, -HTTP,codeQ_PROTO_HTTP,code,Code,Code,,,,,1st Review, -HTTP,connection_headerQ_PROTO_HTTP,connection_header,ConnectionHeader,Connection Header,,,,,1st Review, -HTTP,content_dispositionQ_PROTO_HTTP,content_disposition,ContentDisposition,Content Disposition,,,,,1st Review, -HTTP,content_encodingQ_PROTO_HTTP,content_encoding,ContentEncoding,Content Encoding,,,,,1st Review, -HTTP,content_lenQ_PROTO_HTTP,content_len,ContentLen,Content Length,,,,,1st Review, -HTTP,content_rangeQ_PROTO_HTTP,content_range,ContentRange,Content Range,,,,,1st Review, -HTTP,cookieQ_PROTO_HTTP,cookie,Cookie,Cookie,,,,,1st Review, -HTTP,dechunk_sizeQ_PROTO_HTTP,dechunk_size,DechunkSize,Dechunk Size,,,,,1st Review, -HTTP,decompress_sizeQ_PROTO_HTTP,decompress_size,DecompressSize,Decompress Size,,,,,1st Review, -HTTP,directoryQ_PROTO_HTTP,directory,Directory,Directory,,,,,1st Review, -HTTP,filenameQ_PROTO_HTTP,filename,Filename,Filename,objectname,,Object Name,,1st Review, -HTTP,forward_addrQ_PROTO_HTTP,forward_addr,FwdAddr,Forward Address,,,,,1st Review, -HTTP,forward_redlineQ_PROTO_HTTP,forward_redline,FwdRedline,Forward Redline,,,,,1st Review, -HTTP,header_end_offsetQ_PROTO_HTTP,header_end_offset,HeaderEndOffset,Header End Offset,,,,,1st Review, -HTTP,header_nameQ_PROTO_HTTP,header_name,HeaderName,Header Name,,,,,1st Review, -HTTP,header_rawQ_PROTO_HTTP,header_raw,HeaderRaw,Header Raw,,,,,1st Review, -HTTP,header_statuslineQ_PROTO_HTTP,header_statusline,HeaderStatusline,Header Statusline,,,,,1st Review, -HTTP,header_valueQ_PROTO_HTTP,header_value,HeaderValue,Header Value,,,,,1st Review, -HTTP,hostQ_PROTO_HTTP,host,Host,Host,dname,,Group,,1st Review, -HTTP,host_start_offsetQ_PROTO_HTTP,host_start_offset,HostStartOffset,Host Start Offset,,,,,1st Review, -HTTP,image_heightQ_PROTO_HTTP,image_height,ImageHeight,Image Height,,,,,1st Review, -HTTP,image_typeQ_PROTO_HTTP,image_type,ImageType,Image Type,,,,,1st Review, -HTTP,image_widthQ_PROTO_HTTP,image_width,ImageWidth,Image Width,,,,,1st Review, -HTTP,indexQ_PROTO_HTTP,index,Index,Index,,,,,1st Review, -HTTP,last_modifiedQ_PROTO_HTTP,last_modified,LastModified,Last Modified,,,,,1st Review, -HTTP,locationQ_PROTO_HTTP,location,Location,Location,,,,,1st Review, -HTTP,methodQ_PROTO_HTTP,method,Method,Method,command,,Command,,1st Review, -HTTP,mime_typeQ_PROTO_HTTP,mime_type,MIMEType,MIMEType,subject,,Subject,,1st Review, -HTTP,mime_type_mainQ_PROTO_HTTP,mime_type_main,MIMETypeMain,MIMEType Main,,,,,1st Review, -HTTP,mime_type_subQ_PROTO_HTTP,mime_type_sub,MIMETypeSub,MIMEType Sub,,,,,1st Review, -HTTP,ntlm_domainQ_PROTO_HTTP,ntlm_domain,NTLMDomain,NTLM Domain,domain,,Domain,,1st Review, -HTTP,ntlm_userQ_PROTO_HTTP,ntlm_user,NTLMUser,NTLM User,login,,Login,,1st Review, -HTTP,ntlm_workstationQ_PROTO_HTTP,ntlm_workstation,NTLMWorkstation,NTLM Workstation,,,,,1st Review, -HTTP,part_filenameQ_PROTO_HTTP,part_filename,PartFilename,Part Filename,,,,,1st Review, -HTTP,part_header_nameQ_PROTO_HTTP,part_header_name,PartHeaderName,Part Header Name,,,,,1st Review, -HTTP,part_header_valueQ_PROTO_HTTP,part_header_value,PartHeaderValue,Part Header Value,,,,,1st Review, -HTTP,part_nameQ_PROTO_HTTP,part_name,PartName,Part Name,,,,,1st Review, -HTTP,post_variable_decodedQ_PROTO_HTTP,post_variable_decoded,PostVariableDecoded,Post Variable Decoded,,,,,1st Review, -HTTP,proxy_authQ_PROTO_HTTP,proxy_auth,ProxyAuth,Proxy Authentication,,,,,1st Review, -HTTP,proxy_loginQ_PROTO_HTTP,proxy_login,ProxyLogin,Proxy Login,,,,,1st Review, -HTTP,proxy_realmQ_PROTO_HTTP,proxy_realm,ProxyRealm,Proxy Realm,,,,,1st Review, -HTTP,refererQ_PROTO_HTTP,referer,Referer,Referer,process,,Process,,1st Review, -HTTP,referer_pathQ_PROTO_HTTP,referer_path,RefererPath,Referer Path,,,,,1st Review, -HTTP,referer_serverQ_PROTO_HTTP,referer_server,RefererServer,Referer Server,,,,,1st Review, -HTTP,request_sizeQ_PROTO_HTTP,request_size,RequestSize,Request Size,,,,,1st Review, -HTTP,request_tsQ_PROTO_HTTP,request_ts,RequestTS,Request TS,,,,,1st Review, -HTTP,response_tsQ_PROTO_HTTP,response_ts,ResponseTS,Response TS,,,,,1st Review, -HTTP,rttQ_PROTO_HTTP,rtt,RTT,RTT,,,,,1st Review, -HTTP,serverQ_PROTO_HTTP,server,Server,Server,,,,,1st Review, -HTTP,server_agentQ_PROTO_HTTP,server_agent,ServerAgent,Server Agent,,,,,1st Review, -HTTP,smb_clientQ_PROTO_HTTP,smb_client,SMBClient,SMB Client,,,,,1st Review, -HTTP,start_timeQ_PROTO_HTTP,start_time,StartTime,Start Time,,,,,1st Review, -HTTP,total_datarateQ_PROTO_HTTP,total_datarate,TotalDataRate,Total Data Rate,,,,,1st Review, -HTTP,upgrade_headerQ_PROTO_HTTP,upgrade_header,UpgradeHeader,Upgrade Header,,,,,1st Review, -HTTP,uriQ_PROTO_HTTP,uri,URI,URI,,,,,1st Review, -HTTP,uri_decodedQ_PROTO_HTTP,uri_decoded,URIDecoded,URI Decoded,,,,,1st Review, -HTTP,uri_end_offsetQ_PROTO_HTTP,uri_end_offset,URIEndOffset,URI End Offset,,,,,1st Review, -HTTP,uri_fullQ_PROTO_HTTP,uri_full,URIFull,URI Full,url,,URL,,1st Review, -HTTP,uri_get_decodedQ_PROTO_HTTP,uri_get_decoded,URIGetDecoded,URI Get Decoded,,,,,1st Review, -HTTP,uri_param_nameQ_PROTO_HTTP,uri_param_name,URIParamName,URI Parameter Name,,,,,1st Review, -HTTP,uri_param_valueQ_PROTO_HTTP,uri_param_value,URIParamValue,URI Parameter Value,,,,,1st Review, -HTTP,uri_pathQ_PROTO_HTTP,uri_path,URIPath,URI Path,,,,,1st Review, -HTTP,uri_path_decodedQ_PROTO_HTTP,uri_path_decoded,URIPathDecoded,URI Path Decoded,,,,,1st Review, -HTTP,uri_post_decodedQ_PROTO_HTTP,uri_post_decoded,URIPostDecoded,URI Post Decoded,,,,,1st Review, -HTTP,uri_start_offsetQ_PROTO_HTTP,uri_start_offset,URIStartOffset,URI Start Offset,,,,,1st Review, -HTTP,user_agentQ_PROTO_HTTP,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -HTTP,user_agent_end_offsetQ_PROTO_HTTP,user_agent_end_offset,UserAgentEndOffset,User Agent End Offset,,,,,1st Review, -HTTP,user_agent_start_offsetQ_PROTO_HTTP,user_agent_start_offset,UserAgentStartOffset,User Agent Start Offset,,,,,1st Review, -HTTP,versionQ_PROTO_HTTP,version,Version,Version,version,,Version,,1st Review, -HTTP,video_avgdatarateQ_PROTO_HTTP,video_avgdatarate,VidAvgDataRate,Video Average Data Rate,,,,,1st Review, -HTTP,video_datarateQ_PROTO_HTTP,video_datarate,VidDataRate,Video Data Rate,,,,,1st Review, -HTTP,video_durationQ_PROTO_HTTP,video_duration,VidDuration,Video Duration,,,,,1st Review, -HTTP,video_brandQ_PROTO_HTTP,video_brand,VideBrand,Video Brand,,,,,1st Review, -HTTP,video_framerateQ_PROTO_HTTP,video_framerate,VidFrameRate,Video Frame Rate,,,,,1st Review, -HTTP,video_heightQ_PROTO_HTTP,video_height,VidHeight,Video Height,,,,,1st Review, -HTTP,video_typeQ_PROTO_HTTP,video_type,VidType,Video Type,,,,,1st Review, -HTTP,video_widthQ_PROTO_HTTP,video_width,VidWidth,Video Width,,,,,1st Review, -HTTP,wap_profileQ_PROTO_HTTP,wap_profile,WAPProfile,WAP Profile,,,,,1st Review, -HTTP,x_content_urnQ_PROTO_HTTP,x_content_urn,XContentUrn,X Content Urn,,,,,1st Review, -ICA,applicationQ_PROTO_ICA,application,App,Application,object,,Object,,1st Review, -ICA,login_infoQ_PROTO_ICA,login_info,LoginInfo,Login Info,login,,Login,,1st Review, -ICA,serviceQ_PROTO_ICA,service,Service,Service,process,,Process,,1st Review, -ICAP,code_respmod_reqQ_PROTO_ICAP,code_respmod_req,CodeRespmodReq,Code Respmod Req,,,,,1st Review, -ICAP,content_type_respmod_reqQ_PROTO_ICAP,content_type_respmod_req,ContentTypeRespmodReq,Content Type Respmod Req,,,,,1st Review, -ICAP,host_respmod_reqQ_PROTO_ICAP,host_respmod_req,HostRespmodReq,Host Respmod Req,,,,,1st Review, -ICAP,method_respmod_reqQ_PROTO_ICAP,method_respmod_req,MethodRespmodReq,Method Respmod Request,command,,Command,,1st Review, -ICAP,referer_respmod_reqQ_PROTO_ICAP,referer_respmod_req,RefererRespmodReq,Referer Respmod Request,,,,,1st Review, -ICAP,uri_respmod_reqQ_PROTO_ICAP,uri_respmod_req,URIRespmodReq,URI Respmod Req,url,,URL,,1st Review, -ICAP,user_agent_respmod_reqQ_PROTO_ICAP,user_agent_respmod_req,UserAgentRespmodReq,User Agent Respmod Request,object,,Object,,1st Review, -ICAP,x_client_ip_respmod_reqQ_PROTO_ICAP,x_client_ip_respmod_req,XClientIPRespmodReq,X Client IP Respmod Request,,,,,1st Review, -ICLOUD,serviceQ_PROTO_ICLOUD,service,Service,Service,process,,Process,,1st Review, -ICMP,rttQ_PROTO_ICMP,rtt,RTT,RTT,,,,,1st Review, -ICMP6,link_layer_addr_typeQ_PROTO_ICMP6,link_layer_addr_type,LinkLayerAddrType,Link Layer Address Type,,,,,1st Review, -ICMP6,link_layer_eui64_addrQ_PROTO_ICMP6,link_layer_eui64_addr,LinkLayerEui64Addr,Link Layer Eui64 Address,,,,,1st Review, -ICMP6,link_layer_mac_addrQ_PROTO_ICMP6,link_layer_mac_addr,LinkLayerMacAddr,Link Layer Mac Address,,,,,1st Review, -ICMP6,rttQ_PROTO_ICMP6,rtt,RTT,RTT,,,,,1st Review, -IDENT,client_portQ_PROTO_IDENT,client_port,ClientPort,Client Port,,,,,1st Review, -IDENT,server_portQ_PROTO_IDENT,server_port,ServerPort,Server Port,,,,,1st Review, -IGMP,addressQ_PROTO_IGMP,address,Addr,Address,,,,,1st Review, -IGMP,record_maddressQ_PROTO_IGMP,record_maddress,RecordMAddr,Record M Address,,,,,1st Review, -IGMP,versionQ_PROTO_IGMP,version,Version,Version,version,,Version,,1st Review, -IMAP,attach_mime_typeQ_PROTO_IMAP,attach_mime_type,AttachMIMEType,Attach MIME Type,,,,,1st Review, -IMAP,attach_transfer_encodingQ_PROTO_IMAP,attach_transfer_encoding,AttachTransferEncoding,Attach Transfer Encoding,,,,,1st Review, -IMAP,dateQ_PROTO_IMAP,date,Date,Date,,,,,1st Review, -IMAP,email_indexQ_PROTO_IMAP,email_index,EmailIndex,Email Index,,,,,1st Review, -IMAP,attach_filenameQ_PROTO_IMAP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -IMAP,greeting_messageQ_PROTO_IMAP,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review, -IMAP,indexQ_PROTO_IMAP,index,Index,Index,,,,,1st Review, -IMAP,loginQ_PROTO_IMAP,login,Login,Login,login,,Login,,1st Review, -IMAP,login_serverQ_PROTO_IMAP,login_server,LoginServer,Login Server,,,,,1st Review, -IMAP,methodQ_PROTO_IMAP,method,Method,Method,command,,Command,,1st Review, -IMAP,mime_typeQ_PROTO_IMAP,mime_type,MIMEType,MIMEType,,,,,1st Review, -IMAP,message_idQ_PROTO_IMAP,message_id,MsgID,Message ID,,,,,1st Review, -IMAP,msglist_attach_filenameQ_PROTO_IMAP,msglist_attach_filename,MsgListAttachFilename,Message List Attach Filename,,,,,1st Review, -IMAP,msglist_attach_mime_typeQ_PROTO_IMAP,msglist_attach_mime_type,MsgListAttachMIMEType,Message List Attach MIMEType,,,,,1st Review, -IMAP,msglist_dateQ_PROTO_IMAP,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -IMAP,msglist_mime_typeQ_PROTO_IMAP,msglist_mime_type,MsgListMIMEType,Message List MIMEType,,,,,1st Review, -IMAP,msglist_receiverQ_PROTO_IMAP,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -IMAP,msglist_receiver_aliasQ_PROTO_IMAP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -IMAP,msglist_receiver_emailQ_PROTO_IMAP,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -IMAP,msglist_senderQ_PROTO_IMAP,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -IMAP,msglist_sender_aliasQ_PROTO_IMAP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -IMAP,msglist_sender_emailQ_PROTO_IMAP,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -IMAP,msglist_subjectQ_PROTO_IMAP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -IMAP,passwordQ_PROTO_IMAP,password,Passwd,Password,,,,,1st Review, -IMAP,received_by_ipQ_PROTO_IMAP,received_by_ip,RcvdByIP,Received By IP,,,,,1st Review, -IMAP,received_by_nameQ_PROTO_IMAP,received_by_name,RcvdByName,Received By Name,,,,,1st Review, -IMAP,received_dateQ_PROTO_IMAP,received_date,RcvdDate,Received Date,,,,,1st Review, -IMAP,received_from_ipQ_PROTO_IMAP,received_from_ip,RcvdFromIP,Received From IP,,,,,1st Review, -IMAP,received_from_nameQ_PROTO_IMAP,received_from_name,RcvdFromName,Received From Name,,,,,1st Review, -IMAP,received_server_agentQ_PROTO_IMAP,received_server_agent,RcvdServerAgent,Received Server Agent,,,,,1st Review, -IMAP,received_withQ_PROTO_IMAP,received_with,RcvdWith,Received With,,,,,1st Review, -IMAP,receiverQ_PROTO_IMAP,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -IMAP,receiver_aliasQ_PROTO_IMAP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -IMAP,receiver_emailQ_PROTO_IMAP,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -IMAP,receiver_typeQ_PROTO_IMAP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -IMAP,replytoQ_PROTO_IMAP,replyto,ReplyTo,Reply To,,,,,1st Review, -IMAP,senderQ_PROTO_IMAP,sender,Sender,Sender,sender,,Sender,,1st Review, -IMAP,sender_aliasQ_PROTO_IMAP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -IMAP,sender_emailQ_PROTO_IMAP,sender_email,SenderEmail,Sender Email,,,,,1st Review, -IMAP,server_responseQ_PROTO_IMAP,server_response,ServerResp,Server Response,,,,,1st Review, -IMAP,subjectQ_PROTO_IMAP,subject,Subject,Subject,subject,,Subject,,1st Review, -IMAP,user_agentQ_PROTO_IMAP,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -IMAP,xmailerQ_PROTO_IMAP,xmailer,Xmailer,Xmailer,,,,,1st Review, -IMP,actionQ_PROTO_IMP,action,Action,Action,,,,,1st Review, -IMP,attach_idQ_PROTO_IMP,attach_id,AttachID,Attach ID,,,,,1st Review, -IMP,attach_sizeQ_PROTO_IMP,attach_size,AttachSize,Attach Size,,,,,1st Review, -IMP,attach_typeQ_PROTO_IMP,attach_type,AttachType,Attach Type,,,,,1st Review, -IMP,contactQ_PROTO_IMP,contact,Contact,Contact,,,,,1st Review, -IMP,contact_aliasQ_PROTO_IMP,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -IMP,contact_emailQ_PROTO_IMP,contact_email,ContactEmail,Contact Email,,,,,1st Review, -IMP,dateQ_PROTO_IMP,date,Date,Date,,,,,1st Review, -IMP,attach_filenameQ_PROTO_IMP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -IMP,loginQ_PROTO_IMP,login,Login,Login,login,,Login,,1st Review, -IMP,login_serverQ_PROTO_IMP,login_server,LoginServer,Login Server,,,,,1st Review, -IMP,msglist_dateQ_PROTO_IMP,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -IMP,msglist_folderQ_PROTO_IMP,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -IMP,msglist_msgidQ_PROTO_IMP,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -IMP,msglist_receiver_aliasQ_PROTO_IMP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -IMP,msglist_receiver_emailQ_PROTO_IMP,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -IMP,msglist_sender_aliasQ_PROTO_IMP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -IMP,msglist_subjectQ_PROTO_IMP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -IMP,passwordQ_PROTO_IMP,password,Passwd,Password,,,,,1st Review, -IMP,receiverQ_PROTO_IMP,receiver,Receiver,Receiver,,,,,1st Review, -IMP,receiver_aliasQ_PROTO_IMP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -IMP,receiver_emailQ_PROTO_IMP,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -IMP,receiver_typeQ_PROTO_IMP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -IMP,senderQ_PROTO_IMP,sender,Sender,Sender,,,,,1st Review, -IMP,sender_aliasQ_PROTO_IMP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -IMP,sender_emailQ_PROTO_IMP,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -IMP,session_idQ_PROTO_IMP,session_id,SessionID,Session ID,,,,,1st Review, -IMP,subjectQ_PROTO_IMP,subject,Subject,Subject,subject,,Subject,,1st Review, -IMP,versionQ_PROTO_IMP,version,Version,Version,version,,Version,,1st Review, -IP,client_addrQ_PROTO_IP,client_addr,ClientAddr,Client Address,,,,,1st Review, -IP,client_addr32Q_PROTO_IP,client_addr32,ClientAddr32,Client Address 32,,,,,1st Review, -IP,client_netQ_PROTO_IP,client_net,ClientNet,Client Net,,,,,1st Review, -IP,dst_netQ_PROTO_IP,dst_net,DstNet,Destination Net,,,,,1st Review, -IP,fragment_lost_sizeQ_PROTO_IP,fragment_lost_size,FragmentLostSize,Fragment Lost Size,,,,,1st Review, -IP,server_addrQ_PROTO_IP,server_addr,ServerAddr,Server Address,,,,,1st Review, -IP,server_addr32Q_PROTO_IP,server_addr32,ServerAddr32,Server Address 32,,,,,1st Review, -IP,server_netQ_PROTO_IP,server_net,ServerNet,Server Net,,,,,1st Review, -IP,src_netQ_PROTO_IP,src_net,SrcNet,Source Network,,,,,1st Review, -IP6,labelQ_PROTO_IP6,label,Label,Label,,,,,1st Review, -IPCP,dns_ip_addrQ_PROTO_IPCP,dns_ip_addr,DNSIPAddr,DNS IP Address,,,,,1st Review, -IPCP,ip_addrQ_PROTO_IPCP,ip_addr,IPAddr,IP Address,,,,,1st Review, -IPCP,mobile_ip_addrQ_PROTO_IPCP,mobile_ip_addr,MobileIPAddr,Mobile IP Address,,,,,1st Review, -IPCP,second_dns_ip_addrQ_PROTO_IPCP,second_dns_ip_addr,SecondDNSIPAddr,Second DNS IP Address,,,,,1st Review, -IPCP,second_win_ip_addrQ_PROTO_IPCP,second_win_ip_addr,SecondWinIPAddr,Second Win IP Address,,,,,1st Review, -IPCP,win_ip_addrQ_PROTO_IPCP,win_ip_addr,WinIPAddr,Win IP Address,,,,,1st Review, -IPP,versionQ_PROTO_IPP,version,Version,Version,version,,Version,,1st Review, -IPX,dst_netQ_PROTO_IPX,dst_net,DstNet,Destination Net,,,,,1st Review, -IPX,src_netQ_PROTO_IPX,src_net,SrcNet,Source Network,,,,,1st Review, -IRC,channelQ_PROTO_IRC,channel,Channel,Channel,object,,Object,,1st Review, -IRC,file_identifierQ_PROTO_IRC,file_identifier,FileIdentifier,File Identifier,,,,,1st Review, -IRC,filenameQ_PROTO_IRC,filename,Filename,Filename,objectname,,Object Name,,1st Review, -IRC,loginQ_PROTO_IRC,login,Login,Login,login,,Login,,1st Review, -IRC,login_serverQ_PROTO_IRC,login_server,LoginServer,Login Server,,,,,1st Review, -IRC,mode_channelQ_PROTO_IRC,mode_channel,ModeChannel,Mode Channel,,,,,1st Review, -IRC,mode_statusQ_PROTO_IRC,mode_status,ModeStatus,Mode Status,,,,,1st Review, -IRC,messageQ_PROTO_IRC,message,Msg,Message,subject,,Subject,,1st Review, -IRC,nicknameQ_PROTO_IRC,nickname,Nickname,Nickname,,,,,1st Review, -IRC,receiverQ_PROTO_IRC,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -IRC,senderQ_PROTO_IRC,sender,Sender,Sender,sender,,Sender,,1st Review, -IRC,serverQ_PROTO_IRC,server,Server,Server,dname,,Group,,1st Review, -ISAKMP,life_durationQ_PROTO_ISAKMP,life_duration,LifeDuration,Life Duration,,,,,1st Review, -ISAKMP,versionQ_PROTO_ISAKMP,version,Version,Version,version,,Version,,1st Review, -ISL,dst_addrQ_PROTO_ISL,dst_addr,DstAddr,Destination Address,,,,,1st Review, -ISL,src_addrQ_PROTO_ISL,src_addr,SrcAddr,Source Address,,,,,1st Review, -ISL,typeQ_PROTO_ISL,type,Type,Type,,,,,1st Review, -ISUP,call_durationQ_PROTO_ISUP,call_duration,CallDuration,Call Duration,,,,,1st Review, -ISUP,calleeQ_PROTO_ISUP,callee,Callee,Callee,,,,,1st Review, -ISUP,callerQ_PROTO_ISUP,caller,Caller,Caller,,,,,1st Review, -ISUP,call_idQ_PROTO_ISUP,call_id,CallID,Call ID,,,,,1st Review, -ISUP,call_setupQ_PROTO_ISUP,call_setup,CallSetup,Call Setup,,,,,1st Review, -ISUP,dest_point_codeQ_PROTO_ISUP,dest_point_code,DestPointCode,Dest Point Code,,,,,1st Review, -ISUP,message_nameQ_PROTO_ISUP,message_name,MsgName,Message Name,subject,,Subject,,1st Review, -ISUP,message_tsQ_PROTO_ISUP,message_ts,MsgTS,Message TS,,,,,1st Review, -ISUP,message_wayQ_PROTO_ISUP,message_way,MsgWay,Message Way,,,,,1st Review, -ISUP,orig_point_codeQ_PROTO_ISUP,orig_point_code,OrigPointCode,Orig Point Code,,,,,1st Review, -ISUP,session_durationQ_PROTO_ISUP,session_duration,SessionDuration,Session Duration,,,,,1st Review, -ISUP,start_timeQ_PROTO_ISUP,start_time,StartTime,Start Time,,,,,1st Review, -ISUP,time_before_spkQ_PROTO_ISUP,time_before_spk,TimeBeforeSpk,Time Before Spk,,,,,1st Review, -JABBER,call_durationQ_PROTO_JABBER,call_duration,CallDuration,Call Duration,,,,,1st Review, -JABBER,calleeQ_PROTO_JABBER,callee,Callee,Callee,,,,,1st Review, -JABBER,callee_addrQ_PROTO_JABBER,callee_addr,CalleeAddr,Callee Address,,,,,1st Review, -JABBER,callerQ_PROTO_JABBER,caller,Caller,Caller,,,,,1st Review, -JABBER,caller_addrQ_PROTO_JABBER,caller_addr,CallerAddr,Caller Address,,,,,1st Review, -JABBER,call_idQ_PROTO_JABBER,call_id,CallID,Call ID,,,,,1st Review, -JABBER,contact_loginQ_PROTO_JABBER,contact_login,ContactLogin,Contact Login,,,,,1st Review, -JABBER,contact_nameQ_PROTO_JABBER,contact_name,ContactName,Contact Name,,,,,1st Review, -JABBER,contact_statusQ_PROTO_JABBER,contact_status,ContactStatus,Contact Status,,,,,1st Review, -JABBER,encodingQ_PROTO_JABBER,encoding,Encoding,Encoding,,,,,1st Review, -JABBER,end_statusQ_PROTO_JABBER,end_status,EndStatus,End Status,,,,,1st Review, -JABBER,file_chunk_lenQ_PROTO_JABBER,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -JABBER,file_chunk_numberQ_PROTO_JABBER,file_chunk_number,FileChunkNum,File Chunk Number,,,,,1st Review, -JABBER,file_chunk_sidQ_PROTO_JABBER,file_chunk_sid,FileChunkSID,File Chunk SID,,,,,1st Review, -JABBER,filenameQ_PROTO_JABBER,filename,Filename,Filename,objectname,,Object Name,,1st Review, -JABBER,file_receiverQ_PROTO_JABBER,file_receiver,FileReceiver,File Receiver,,,,,1st Review, -JABBER,file_senderQ_PROTO_JABBER,file_sender,FileSender,File Sender,,,,,1st Review, -JABBER,file_sidQ_PROTO_JABBER,file_sid,FileSID,File SID,,,,,1st Review, -JABBER,filesizeQ_PROTO_JABBER,filesize,FileSize,File Size,,,,,1st Review, -JABBER,loginQ_PROTO_JABBER,login,Login,Login,login,,Login,,1st Review, -JABBER,messageQ_PROTO_JABBER,message,Msg,Message,subject,,Subject,,1st Review, -JABBER,nicknameQ_PROTO_JABBER,nickname,Nickname,Nickname,,,,,1st Review, -JABBER,osQ_PROTO_JABBER,os,OS,Operating System,,,,,1st Review, -JABBER,receiverQ_PROTO_JABBER,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -JABBER,senderQ_PROTO_JABBER,sender,Sender,Sender,sender,,Sender,,1st Review, -JABBER,start_timeQ_PROTO_JABBER,start_time,StartTime,Start Time,,,,,1st Review, -JABBER,user_agentQ_PROTO_JABBER,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -JABBER,versionQ_PROTO_JABBER,version,Version,Version,version,,Version,,1st Review, -JAVA_UPDATE,new_versionQ_PROTO_JAVA_UPDATE,new_version,NewVersion,New Version,version,,Version,,1st Review, -JAVA_UPDATE,typeQ_PROTO_JAVA_UPDATE,type,Type,Type,,,,,1st Review, -KAKAOTALK,filenameQ_PROTO_KAKAOTALK,filename,Filename,Filename,objectname,,Object Name,,1st Review, -KAKAOTALK,loginQ_PROTO_KAKAOTALK,login,Login,Login,login,,Login,,1st Review, -KAKAOTALK,mime_typeQ_PROTO_KAKAOTALK,mime_type,MIMEType,MIMEType,,,,,1st Review, -KASKUS,query_rawQ_PROTO_KASKUS,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -KASKUS,query_textQ_PROTO_KASKUS,query_text,QueryText,Query Text,,,,,1st Review, -KASKUS,titleQ_PROTO_KASKUS,title,Title,Title,subject,,Subject,,1st Review, -KAZAA,filenameQ_PROTO_KAZAA,filename,Filename,Filename,objectname,,Object Name,,1st Review, -KAZAA,loginQ_PROTO_KAZAA,login,Login,Login,login,,Login,,1st Review, -KAZAA,mime_typeQ_PROTO_KAZAA,mime_type,MIMEType,MIMEType,,,,,1st Review, -KRB5,enc_data_typeQ_PROTO_KRB5,enc_data_type,EncDataType,Enc Data Type,,,,,1st Review, -KRB5,err_cname_nameQ_PROTO_KRB5,err_cname_name,ErrCnameName,Error Cname Name,,,,,1st Review, -KRB5,err_cname_typeQ_PROTO_KRB5,err_cname_type,ErrCnameType,Error Cname Type,,,,,1st Review, -KRB5,error_codeQ_PROTO_KRB5,error_code,ErrCode,Error Code,,,,,1st Review, -KRB5,err_crealmQ_PROTO_KRB5,err_crealm,ErrCrealm,Error Crealm,,,,,1st Review, -KRB5,err_realmQ_PROTO_KRB5,err_realm,ErrRealm,Error Realm,,,,,1st Review, -KRB5,err_sname_nameQ_PROTO_KRB5,err_sname_name,ErrSnameName,Error Surname Name,,,,,1st Review, -KRB5,err_sname_typeQ_PROTO_KRB5,err_sname_type,ErrSnameType,Error Surname Type,,,,,1st Review, -KRB5,err_textQ_PROTO_KRB5,err_text,ErrText,Error Text,,,,,1st Review, -KRB5,loginQ_PROTO_KRB5,login,Login,Login,login,,Login,,1st Review, -KRB5,pa_data_typeQ_PROTO_KRB5,pa_data_type,PADataType,PA Data Type,,,,,1st Review, -KRB5,realmQ_PROTO_KRB5,realm,Realm,Realm,domain,,Domain,,1st Review, -KRB5,serverQ_PROTO_KRB5,server,Server,Server,dname,,Group,,1st Review, -KRB5,serviceQ_PROTO_KRB5,service,Service,Service,process,,Process,,1st Review, -KRB5,ticket_nameQ_PROTO_KRB5,ticket_name,TicketName,Ticket Name,,,,,1st Review, -KRB5,ticket_name_typeQ_PROTO_KRB5,ticket_name_type,TicketNameType,Ticket Name Type,,,,,1st Review, -L2TP,hostnameQ_PROTO_L2TP,hostname,Hostname,Hostname,dname,,Group,,1st Review, -L2TP,vendor_nameQ_PROTO_L2TP,vendor_name,VendorName,Vendor Name,object,,Object,,1st Review, -LAPOSTE_WEBMAIL,loginQ_PROTO_LAPOSTE_WEBMAIL,login,Login,Login,login,,Login,,1st Review, -LAPOSTE_WEBMAIL,session_idQ_PROTO_LAPOSTE_WEBMAIL,session_id,SessionID,Session ID,,,,,1st Review, -LDAP,assertion_valueQ_PROTO_LDAP,assertion_value,AssertionValue,Assertion Value,,,,,1st Review, -LDAP,attribute_descQ_PROTO_LDAP,attribute_desc,AttributeDesc,Attribute Description,,,,,1st Review, -LDAP,contains_saslQ_PROTO_LDAP,contains_sasl,ContainsSASL,Contains SASL,,,,,1st Review, -LDAP,hostnameQ_PROTO_LDAP,hostname,Hostname,Hostname,dname,,Group,,1st Review, -LDAP,message_idQ_PROTO_LDAP,message_id,MsgID,Message ID,object,,Object,,1st Review, -LDAP,message_typeQ_PROTO_LDAP,message_type,MsgType,Message Type,,,,,1st Review, -LDAP,nameQ_PROTO_LDAP,name,Name,Name,objectname,,Object Name,,1st Review, -LDAP,numberQ_PROTO_LDAP,number,Number,Number,,,,,1st Review, -LDAP,payload_is_cryptedQ_PROTO_LDAP,payload_is_crypted,PayloadIsCrypted,Payload Is Crypted,,,,,1st Review, -LDAP,seal_algoQ_PROTO_LDAP,seal_algo,SealAlgo,Seal Algo,,,,,1st Review, -LDAP,typeQ_PROTO_LDAP,type,Type,Type,,,,,1st Review, -LDAP,value_stringQ_PROTO_LDAP,value_string,ValueString,Value String,,,,,1st Review, -LINE,call_byte_countQ_PROTO_LINE,call_byte_count,CallByteCount,Call Byte Count,,,,,1st Review, -LINE,call_durationQ_PROTO_LINE,call_duration,CallDuration,Call Duration,,,,,1st Review, -LINE,calleeQ_PROTO_LINE,callee,Callee,Callee,,,,,1st Review, -LINE,callerQ_PROTO_LINE,caller,Caller,Caller,,,,,1st Review, -LINE,caller_addrQ_PROTO_LINE,caller_addr,CallerAddr,Caller Address,,,,,1st Review, -LINE,call_idQ_PROTO_LINE,call_id,CallID,Call ID,,,,,1st Review, -LINE,call_pkt_countQ_PROTO_LINE,call_pkt_count,CallPktCount,Call Packet Count,,,,,1st Review, -LINE,proto_versionQ_PROTO_LINE,proto_version,ProtoVersion,Proto Version,,,,,1st Review, -LINE,serviceQ_PROTO_LINE,service,Service,Service,process,,Process,,1st Review, -LINE,start_timeQ_PROTO_LINE,start_time,StartTime,Start Time,,,,,1st Review, -LINE,user_agentQ_PROTO_LINE,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -LINKEDIN,actionQ_PROTO_LINKEDIN,action,Action,Action,,,,,1st Review, -LINKEDIN,contact_aliasQ_PROTO_LINKEDIN,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -LINKEDIN,contact_emailQ_PROTO_LINKEDIN,contact_email,ContactEmail,Contact Email,,,,,1st Review, -LINKEDIN,contact_firstnameQ_PROTO_LINKEDIN,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review, -LINKEDIN,contact_lastnameQ_PROTO_LINKEDIN,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review, -LINKEDIN,dateQ_PROTO_LINKEDIN,date,Date,Date,,,,,1st Review, -LINKEDIN,folderQ_PROTO_LINKEDIN,folder,Folder,Folder,object,,Object,,1st Review, -LINKEDIN,loginQ_PROTO_LINKEDIN,login,Login,Login,login,,Login,,1st Review, -LINKEDIN,msg_idQ_PROTO_LINKEDIN,msg_id,MsgID,Message ID,,,,,1st Review, -LINKEDIN,msglist_dateQ_PROTO_LINKEDIN,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -LINKEDIN,msglist_folderQ_PROTO_LINKEDIN,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -LINKEDIN,msglist_msgidQ_PROTO_LINKEDIN,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -LINKEDIN,msglist_receiverQ_PROTO_LINKEDIN,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -LINKEDIN,msglist_receiver_aliasQ_PROTO_LINKEDIN,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -LINKEDIN,msglist_senderQ_PROTO_LINKEDIN,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -LINKEDIN,msglist_sender_aliasQ_PROTO_LINKEDIN,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -LINKEDIN,msglist_subjectQ_PROTO_LINKEDIN,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -LINKEDIN,query_textQ_PROTO_LINKEDIN,query_text,QueryText,Query Text,command,,Command,,1st Review, -LINKEDIN,query_typeQ_PROTO_LINKEDIN,query_type,QueryType,Query Type,,,,,1st Review, -LINKEDIN,receiverQ_PROTO_LINKEDIN,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -LINKEDIN,receiver_aliasQ_PROTO_LINKEDIN,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -LINKEDIN,receiver_emailQ_PROTO_LINKEDIN,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -LINKEDIN,receiver_typeQ_PROTO_LINKEDIN,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -LINKEDIN,senderQ_PROTO_LINKEDIN,sender,Sender,Sender,sender,,Sender,,1st Review, -LINKEDIN,sender_aliasQ_PROTO_LINKEDIN,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -LINKEDIN,sender_emailQ_PROTO_LINKEDIN,sender_email,SenderEmail,Sender Email,,,,,1st Review, -LINKEDIN,subjectQ_PROTO_LINKEDIN,subject,Subject,Subject,subject,,Subject,,1st Review, -LIVE_GROUPS,actionQ_PROTO_LIVE_GROUPS,action,Action,Action,command,,Command,,1st Review, -LIVE_GROUPS,dateQ_PROTO_LIVE_GROUPS,date,Date,Date,,,,,1st Review, -LIVE_GROUPS,group_idQ_PROTO_LIVE_GROUPS,group_id,GroupID,Group ID,,,,,1st Review, -LIVE_GROUPS,group_nameQ_PROTO_LIVE_GROUPS,group_name,GroupName,Group Name,objectname,,Object Name,,1st Review, -LIVE_GROUPS,loginQ_PROTO_LIVE_GROUPS,login,Login,Login,login,,Login,,1st Review, -LIVE_GROUPS,member_aliasQ_PROTO_LIVE_GROUPS,member_alias,MemberAlias,Member Alias,,,,,1st Review, -LIVE_GROUPS,member_emailQ_PROTO_LIVE_GROUPS,member_email,MemberEmail,Member Email,,,,,1st Review, -LIVE_GROUPS,msglist_senderQ_PROTO_LIVE_GROUPS,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -LIVE_GROUPS,msglist_sender_aliasQ_PROTO_LIVE_GROUPS,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -LIVE_GROUPS,msglist_subjectQ_PROTO_LIVE_GROUPS,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -LIVE_GROUPS,nameQ_PROTO_LIVE_GROUPS,name,Name,Name,,,,,1st Review, -LIVE_GROUPS,senderQ_PROTO_LIVE_GROUPS,sender,Sender,Sender,,,,,1st Review, -LIVE_GROUPS,sender_aliasQ_PROTO_LIVE_GROUPS,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -LIVE_GROUPS,sender_emailQ_PROTO_LIVE_GROUPS,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -LIVE_GROUPS,session_idQ_PROTO_LIVE_GROUPS,session_id,SessionID,Session ID,,,,,1st Review, -LIVE_GROUPS,subjectQ_PROTO_LIVE_GROUPS,subject,Subject,Subject,subject,,Subject,,1st Review, -LIVE_HOTMAIL,actionQ_PROTO_LIVE_HOTMAIL,action,Action,Action,command,,Command,,1st Review, -LIVE_HOTMAIL,attach_fileidQ_PROTO_LIVE_HOTMAIL,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review, -LIVE_HOTMAIL,attach_idQ_PROTO_LIVE_HOTMAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -LIVE_HOTMAIL,attach_sizeQ_PROTO_LIVE_HOTMAIL,attach_size,AttachSize,Attach Size,,,,,1st Review, -LIVE_HOTMAIL,attach_typeQ_PROTO_LIVE_HOTMAIL,attach_type,AttachType,Attach Type,,,,,1st Review, -LIVE_HOTMAIL,contactQ_PROTO_LIVE_HOTMAIL,contact,Contact,Contact,,,,,1st Review, -LIVE_HOTMAIL,contact_aliasQ_PROTO_LIVE_HOTMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -LIVE_HOTMAIL,contact_emailQ_PROTO_LIVE_HOTMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review, -LIVE_HOTMAIL,dateQ_PROTO_LIVE_HOTMAIL,date,Date,Date,,,,,1st Review, -LIVE_HOTMAIL,draftQ_PROTO_LIVE_HOTMAIL,draft,Draft,Draft,,,,,1st Review, -LIVE_HOTMAIL,attach_filenameQ_PROTO_LIVE_HOTMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -LIVE_HOTMAIL,folderQ_PROTO_LIVE_HOTMAIL,folder,Folder,Folder,,,,,1st Review, -LIVE_HOTMAIL,loginQ_PROTO_LIVE_HOTMAIL,login,Login,Login,login,,Login,,1st Review, -LIVE_HOTMAIL,msg_idQ_PROTO_LIVE_HOTMAIL,msg_id,MsgID,Message ID,,,,,1st Review, -LIVE_HOTMAIL,msglist_dateQ_PROTO_LIVE_HOTMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -LIVE_HOTMAIL,msglist_folderQ_PROTO_LIVE_HOTMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -LIVE_HOTMAIL,msglist_msgidQ_PROTO_LIVE_HOTMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -LIVE_HOTMAIL,msglist_receiverQ_PROTO_LIVE_HOTMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -LIVE_HOTMAIL,msglist_receiver_aliasQ_PROTO_LIVE_HOTMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -LIVE_HOTMAIL,msglist_receiver_emailQ_PROTO_LIVE_HOTMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -LIVE_HOTMAIL,msglist_senderQ_PROTO_LIVE_HOTMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -LIVE_HOTMAIL,msglist_sender_aliasQ_PROTO_LIVE_HOTMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -LIVE_HOTMAIL,msglist_sender_emailQ_PROTO_LIVE_HOTMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -LIVE_HOTMAIL,msglist_subjectQ_PROTO_LIVE_HOTMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -LIVE_HOTMAIL,nameQ_PROTO_LIVE_HOTMAIL,name,Name,Name,,,,,1st Review, -LIVE_HOTMAIL,receiverQ_PROTO_LIVE_HOTMAIL,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -LIVE_HOTMAIL,receiver_aliasQ_PROTO_LIVE_HOTMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -LIVE_HOTMAIL,receiver_emailQ_PROTO_LIVE_HOTMAIL,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -LIVE_HOTMAIL,receiver_typeQ_PROTO_LIVE_HOTMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -LIVE_HOTMAIL,replytoQ_PROTO_LIVE_HOTMAIL,replyto,ReplyTo,Reply To,,,,,1st Review, -LIVE_HOTMAIL,senderQ_PROTO_LIVE_HOTMAIL,sender,Sender,Sender,sender,,Sender,,1st Review, -LIVE_HOTMAIL,sender_aliasQ_PROTO_LIVE_HOTMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -LIVE_HOTMAIL,sender_emailQ_PROTO_LIVE_HOTMAIL,sender_email,SenderEmail,Sender Email,,,,,1st Review, -LIVE_HOTMAIL,session_idQ_PROTO_LIVE_HOTMAIL,session_id,SessionID,Session ID,,,,,1st Review, -LIVE_HOTMAIL,subjectQ_PROTO_LIVE_HOTMAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -LIVEMAIL_MOBILE,actionQ_PROTO_LIVEMAIL_MOBILE,action,Action,Action,command,,Command,,1st Review, -LIVEMAIL_MOBILE,attach_fileidQ_PROTO_LIVEMAIL_MOBILE,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review, -LIVEMAIL_MOBILE,attach_idQ_PROTO_LIVEMAIL_MOBILE,attach_id,AttachID,Attach ID,,,,,1st Review, -LIVEMAIL_MOBILE,attach_sizeQ_PROTO_LIVEMAIL_MOBILE,attach_size,AttachSize,Attach Size,,,,,1st Review, -LIVEMAIL_MOBILE,contact_aliasQ_PROTO_LIVEMAIL_MOBILE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -LIVEMAIL_MOBILE,contact_emailQ_PROTO_LIVEMAIL_MOBILE,contact_email,ContactEmail,Contact Email,,,,,1st Review, -LIVEMAIL_MOBILE,dateQ_PROTO_LIVEMAIL_MOBILE,date,Date,Date,,,,,1st Review, -LIVEMAIL_MOBILE,attach_filenameQ_PROTO_LIVEMAIL_MOBILE,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -LIVEMAIL_MOBILE,loginQ_PROTO_LIVEMAIL_MOBILE,login,Login,Login,login,,Login,,1st Review, -LIVEMAIL_MOBILE,msg_idQ_PROTO_LIVEMAIL_MOBILE,msg_id,MsgID,Message ID,,,,,1st Review, -LIVEMAIL_MOBILE,msglist_msgidQ_PROTO_LIVEMAIL_MOBILE,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -LIVEMAIL_MOBILE,msglist_sender_aliasQ_PROTO_LIVEMAIL_MOBILE,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -LIVEMAIL_MOBILE,msglist_sender_emailQ_PROTO_LIVEMAIL_MOBILE,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -LIVEMAIL_MOBILE,msglist_subjectQ_PROTO_LIVEMAIL_MOBILE,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -LIVEMAIL_MOBILE,receiverQ_PROTO_LIVEMAIL_MOBILE,receiver,Receiver,Receiver,,,,,1st Review, -LIVEMAIL_MOBILE,receiver_aliasQ_PROTO_LIVEMAIL_MOBILE,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -LIVEMAIL_MOBILE,receiver_emailQ_PROTO_LIVEMAIL_MOBILE,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -LIVEMAIL_MOBILE,receiver_typeQ_PROTO_LIVEMAIL_MOBILE,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -LIVEMAIL_MOBILE,senderQ_PROTO_LIVEMAIL_MOBILE,sender,Sender,Sender,,,,,1st Review, -LIVEMAIL_MOBILE,sender_aliasQ_PROTO_LIVEMAIL_MOBILE,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -LIVEMAIL_MOBILE,sender_emailQ_PROTO_LIVEMAIL_MOBILE,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -LIVEMAIL_MOBILE,session_idQ_PROTO_LIVEMAIL_MOBILE,session_id,SessionID,Session ID,,,,,1st Review, -LIVEMAIL_MOBILE,subjectQ_PROTO_LIVEMAIL_MOBILE,subject,Subject,Subject,subject,,Subject,,1st Review, -LOTUSNOTES,attach_compressQ_PROTO_LOTUSNOTES,attach_compress,AttachCompress,Attach Compress,,,,,1st Review, -LOTUSNOTES,attach_content_seqQ_PROTO_LOTUSNOTES,attach_content_seq,AttachContentSeq,Attach Content Sequence,,,,,1st Review, -LOTUSNOTES,attach_content_sizeQ_PROTO_LOTUSNOTES,attach_content_size,AttachContentSize,Attach Content Size,,,,,1st Review, -LOTUSNOTES,attach_idQ_PROTO_LOTUSNOTES,attach_id,AttachID,Attach ID,,,,,1st Review, -LOTUSNOTES,attach_sizeQ_PROTO_LOTUSNOTES,attach_size,AttachSize,Attach Size,,,,,1st Review, -LOTUSNOTES,attach_filenameQ_PROTO_LOTUSNOTES,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -LOTUSNOTES,header_nameQ_PROTO_LOTUSNOTES,header_name,HeaderName,Header Name,,,,,1st Review, -LOTUSNOTES,header_valueQ_PROTO_LOTUSNOTES,header_value,HeaderValue,Header Value,,,,,1st Review, -LOTUSNOTES,loginQ_PROTO_LOTUSNOTES,login,Login,Login,login,,Login,,1st Review, -LOTUSNOTES,mime_versionQ_PROTO_LOTUSNOTES,mime_version,MIMEVersion,MIMEVersion,,,,,1st Review, -LOTUSNOTES,msg_idQ_PROTO_LOTUSNOTES,msg_id,MsgID,Message ID,,,,,1st Review, -LOTUSNOTES,organizationQ_PROTO_LOTUSNOTES,organization,Organization,Organization,,,,,1st Review, -LOTUSNOTES,receiverQ_PROTO_LOTUSNOTES,receiver,Receiver,Receiver,,,,,1st Review, -LOTUSNOTES,receiver_aliasQ_PROTO_LOTUSNOTES,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -LOTUSNOTES,receiver_emailQ_PROTO_LOTUSNOTES,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -LOTUSNOTES,receiver_typeQ_PROTO_LOTUSNOTES,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -LOTUSNOTES,replytoQ_PROTO_LOTUSNOTES,replyto,ReplyTo,Reply To,,,,,1st Review, -LOTUSNOTES,senderQ_PROTO_LOTUSNOTES,sender,Sender,Sender,,,,,1st Review, -LOTUSNOTES,sender_aliasQ_PROTO_LOTUSNOTES,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -LOTUSNOTES,sender_emailQ_PROTO_LOTUSNOTES,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -LOTUSNOTES,serviceQ_PROTO_LOTUSNOTES,service,Service,Service,process,,Process,,1st Review, -LOTUSNOTES,subjectQ_PROTO_LOTUSNOTES,subject,Subject,Subject,subject,,Subject,,1st Review, -LOTUSNOTES,versionQ_PROTO_LOTUSNOTES,version,Version,Version,version,,Version,,1st Review, -LPR,jobQ_PROTO_LPR,job,Job,Job,command,,Command,,1st Review, -LPR,loginQ_PROTO_LPR,login,Login,Login,login,,Login,,1st Review, -LPR,serverQ_PROTO_LPR,server,Server,Server,dname,,Group,,1st Review, -MAILRU,actionQ_PROTO_MAILRU,action,Action,Action,command,,Command,,1st Review, -MAILRU,attach_idQ_PROTO_MAILRU,attach_id,AttachID,Attach ID,,,,,1st Review, -MAILRU,attach_sizeQ_PROTO_MAILRU,attach_size,AttachSize,Attach Size,,,,,1st Review, -MAILRU,attach_typeQ_PROTO_MAILRU,attach_type,AttachType,Attach Type,,,,,1st Review, -MAILRU,contactQ_PROTO_MAILRU,contact,Contact,Contact,,,,,1st Review, -MAILRU,contact_aliasQ_PROTO_MAILRU,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -MAILRU,contact_emailQ_PROTO_MAILRU,contact_email,ContactEmail,Contact Email,,,,,1st Review, -MAILRU,dateQ_PROTO_MAILRU,date,Date,Date,,,,,1st Review, -MAILRU,draftQ_PROTO_MAILRU,draft,Draft,Draft,,,,,1st Review, -MAILRU,attach_filenameQ_PROTO_MAILRU,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -MAILRU,folderQ_PROTO_MAILRU,folder,Folder,Folder,,,,,1st Review, -MAILRU,folderlist_item_idQ_PROTO_MAILRU,folderlist_item_id,FolderListItemID,Folder List Item ID,,,,,1st Review, -MAILRU,folderlist_item_nameQ_PROTO_MAILRU,folderlist_item_name,FolderListItemName,Folder List Item Name,,,,,1st Review, -MAILRU,importanceQ_PROTO_MAILRU,importance,Importance,Importance,,,,,1st Review, -MAILRU,loginQ_PROTO_MAILRU,login,Login,Login,login,,Login,,1st Review, -MAILRU,msg_idQ_PROTO_MAILRU,msg_id,MsgID,Message ID,,,,,1st Review, -MAILRU,msglist_attachQ_PROTO_MAILRU,msglist_attach,MsgListAttach,Message List Attach,,,,,1st Review, -MAILRU,msglist_dateQ_PROTO_MAILRU,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -MAILRU,msglist_folderQ_PROTO_MAILRU,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -MAILRU,msglist_importanceQ_PROTO_MAILRU,msglist_importance,MsgListImportance,Message List Importance,,,,,1st Review, -MAILRU,msglist_msgidQ_PROTO_MAILRU,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -MAILRU,msglist_receiverQ_PROTO_MAILRU,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -MAILRU,msglist_receiver_aliasQ_PROTO_MAILRU,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -MAILRU,msglist_receiver_emailQ_PROTO_MAILRU,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -MAILRU,msglist_senderQ_PROTO_MAILRU,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -MAILRU,msglist_sender_aliasQ_PROTO_MAILRU,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -MAILRU,msglist_sender_emailQ_PROTO_MAILRU,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -MAILRU,msglist_subjectQ_PROTO_MAILRU,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -MAILRU,msglist_unreadQ_PROTO_MAILRU,msglist_unread,MsgListUnread,Message List Unread,,,,,1st Review, -MAILRU,nameQ_PROTO_MAILRU,name,Name,Name,,,,,1st Review, -MAILRU,receiverQ_PROTO_MAILRU,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -MAILRU,receiver_aliasQ_PROTO_MAILRU,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -MAILRU,receiver_emailQ_PROTO_MAILRU,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review, -MAILRU,receiver_typeQ_PROTO_MAILRU,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -MAILRU,senderQ_PROTO_MAILRU,sender,Sender,Sender,sender,,Sender,,1st Review, -MAILRU,sender_aliasQ_PROTO_MAILRU,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -MAILRU,sender_emailQ_PROTO_MAILRU,sender_email,SenderEmail,Sender Email,,,,,1st Review, -MAILRU,subjectQ_PROTO_MAILRU,subject,Subject,Subject,subject,,Subject,,1st Review, -MAKTOOB,actionQ_PROTO_MAKTOOB,action,Action,Action,command,,Command,,1st Review, -MAKTOOB,attach_idQ_PROTO_MAKTOOB,attach_id,AttachID,Attach ID,,,,,1st Review, -MAKTOOB,attach_sizeQ_PROTO_MAKTOOB,attach_size,AttachSize,Attach Size,,,,,1st Review, -MAKTOOB,attach_typeQ_PROTO_MAKTOOB,attach_type,AttachType,Attach Type,,,,,1st Review, -MAKTOOB,contactQ_PROTO_MAKTOOB,contact,Contact,Contact,,,,,1st Review, -MAKTOOB,contact_aliasQ_PROTO_MAKTOOB,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -MAKTOOB,contact_emailQ_PROTO_MAKTOOB,contact_email,ContactEmail,Contact Email,,,,,1st Review, -MAKTOOB,dateQ_PROTO_MAKTOOB,date,Date,Date,,,,,1st Review, -MAKTOOB,draftQ_PROTO_MAKTOOB,draft,Draft,Draft,,,,,1st Review, -MAKTOOB,encodingQ_PROTO_MAKTOOB,encoding,Encoding,Encoding,,,,,1st Review, -MAKTOOB,attach_filenameQ_PROTO_MAKTOOB,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -MAKTOOB,folderQ_PROTO_MAKTOOB,folder,Folder,Folder,,,,,1st Review, -MAKTOOB,loginQ_PROTO_MAKTOOB,login,Login,Login,login,,Login,,1st Review, -MAKTOOB,msg_idQ_PROTO_MAKTOOB,msg_id,MsgID,Message ID,,,,,1st Review, -MAKTOOB,msglist_dateQ_PROTO_MAKTOOB,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -MAKTOOB,msglist_folderQ_PROTO_MAKTOOB,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -MAKTOOB,msglist_receiverQ_PROTO_MAKTOOB,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -MAKTOOB,msglist_receiver_aliasQ_PROTO_MAKTOOB,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -MAKTOOB,msglist_senderQ_PROTO_MAKTOOB,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -MAKTOOB,msglist_sender_aliasQ_PROTO_MAKTOOB,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -MAKTOOB,msglist_sizeQ_PROTO_MAKTOOB,msglist_size,MsgListSize,Message List Size,,,,,1st Review, -MAKTOOB,msglist_subjectQ_PROTO_MAKTOOB,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -MAKTOOB,nameQ_PROTO_MAKTOOB,name,Name,Name,,,,,1st Review, -MAKTOOB,receiverQ_PROTO_MAKTOOB,receiver,Receiver,Receiver,,,,,1st Review, -MAKTOOB,receiver_aliasQ_PROTO_MAKTOOB,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -MAKTOOB,receiver_emailQ_PROTO_MAKTOOB,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -MAKTOOB,receiver_typeQ_PROTO_MAKTOOB,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -MAKTOOB,replytoQ_PROTO_MAKTOOB,replyto,ReplyTo,Reply To,,,,,1st Review, -MAKTOOB,senderQ_PROTO_MAKTOOB,sender,Sender,Sender,,,,,1st Review, -MAKTOOB,sender_aliasQ_PROTO_MAKTOOB,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -MAKTOOB,sender_emailQ_PROTO_MAKTOOB,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -MAKTOOB,session_idQ_PROTO_MAKTOOB,session_id,SessionID,Session ID,,,,,1st Review, -MAKTOOB,subjectQ_PROTO_MAKTOOB,subject,Subject,Subject,subject,,Subject,,1st Review, -MANDRIVA_UPDATE,package_archiQ_PROTO_MANDRIVA_UPDATE,package_archi,PkgArch,Package Architecture,,,,,1st Review, -MANDRIVA_UPDATE,package_distribQ_PROTO_MANDRIVA_UPDATE,package_distrib,PkgDistrib,Package Distrib,,,,,1st Review, -MANDRIVA_UPDATE,package_nameQ_PROTO_MANDRIVA_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review, -MANDRIVA_UPDATE,package_versionQ_PROTO_MANDRIVA_UPDATE,package_version,PkgVersion,Package Version,version,,Version,,1st Review, -MAPI,actionQ_PROTO_MAPI,action,Action,Action,command,,Command,,1st Review, -MAPI,attach_idQ_PROTO_MAPI,attach_id,AttachID,Attach ID,,,,,1st Review, -MAPI,attach_sizeQ_PROTO_MAPI,attach_size,AttachSize,Attach Size,,,,,1st Review, -MAPI,dateQ_PROTO_MAPI,date,Date,Date,,,,,1st Review, -MAPI,domainQ_PROTO_MAPI,domain,Domain,Domain,domain,,Domain,,1st Review, -MAPI,email_typeQ_PROTO_MAPI,email_type,EmailType,Email Type,,,,,1st Review, -MAPI,flagsQ_PROTO_MAPI,flags,Flags,Flags,,,,,1st Review, -MAPI,hostQ_PROTO_MAPI,host,Host,Host,,,,,1st Review, -MAPI,importanceQ_PROTO_MAPI,importance,Importance,Importance,,,,,1st Review, -MAPI,loginQ_PROTO_MAPI,login,Login,Login,login,,Login,,1st Review, -MAPI,login_serverQ_PROTO_MAPI,login_server,LoginServer,Login Server,,,,,1st Review, -MAPI,msglist_dateQ_PROTO_MAPI,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -MAPI,msglist_flagsQ_PROTO_MAPI,msglist_flags,MsgListFlags,Message List Flags,,,,,1st Review, -MAPI,msglist_importanceQ_PROTO_MAPI,msglist_importance,MsgListImportance,Message List Importance,,,,,1st Review, -MAPI,msglist_msgidQ_PROTO_MAPI,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -MAPI,msglist_receiver_typeQ_PROTO_MAPI,msglist_receiver_type,MsgListReceiverType,Message List Receiver Type,,,,,1st Review, -MAPI,msglist_sensivityQ_PROTO_MAPI,msglist_sensivity,MsgListSensivity,Message List Sensivity,,,,,1st Review, -MAPI,msglist_sizeQ_PROTO_MAPI,msglist_size,MsgListSize,Message List Size,,,,,1st Review, -MAPI,receiver_typeQ_PROTO_MAPI,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -MAPI,sensivityQ_PROTO_MAPI,sensivity,Sensivity,Sensivity,,,,,1st Review, -MAPI,sizeQ_PROTO_MAPI,size,Size,Size,,,,,1st Review, -MASHARE,actionQ_PROTO_MASHARE,action,Action,Action,command,,Command,,1st Review, -MASHARE,delete_urlQ_PROTO_MASHARE,delete_url,DeleteURL,Delete URL,,,,,1st Review, -MASHARE,download_urlQ_PROTO_MASHARE,download_url,DownloadURL,Download URL,url,,URL,,1st Review, -MASHARE,fileidQ_PROTO_MASHARE,fileid,FileID,File ID,,,,,1st Review, -MASHARE,filenameQ_PROTO_MASHARE,filename,Filename,Filename,objectname,,Object Name,,1st Review, -MASHARE,filesizeQ_PROTO_MASHARE,filesize,FileSize,File Size,,,,,1st Review, -MGCP,call_durationQ_PROTO_MGCP,call_duration,CallDuration,Call Duration,,,,,1st Review, -MGCP,calleeQ_PROTO_MGCP,callee,Callee,Callee,,,,,1st Review, -MGCP,callerQ_PROTO_MGCP,caller,Caller,Caller,,,,,1st Review, -MGCP,call_idQ_PROTO_MGCP,call_id,CallID,Call ID,,,,,1st Review, -MGCP,call_wayQ_PROTO_MGCP,call_way,CallWay,Call Way,,,,,1st Review, -MGCP,codeQ_PROTO_MGCP,code,Code,Code,,,,,1st Review, -MGCP,connection_idQ_PROTO_MGCP,connection_id,ConnectionID,Connection ID,,,,,1st Review, -MGCP,digitmapQ_PROTO_MGCP,digitmap,Digitmap,Digitmap,,,,,1st Review, -MGCP,endpointQ_PROTO_MGCP,endpoint,Endpoint,Endpoint,,,,,1st Review, -MGCP,eventQ_PROTO_MGCP,event,Event,Event,,,,,1st Review, -MGCP,jitterQ_PROTO_MGCP,jitter,Jitter,Jitter,,,,,1st Review, -MGCP,latencyQ_PROTO_MGCP,latency,Latency,Latency,,,,,1st Review, -MGCP,media_attr_addrQ_PROTO_MGCP,media_attr_addr,MediaAttrAddr,Media Attribute Address,,,,,1st Review, -MGCP,media_attr_channelQ_PROTO_MGCP,media_attr_channel,MediaAttrChannel,Media Attribute Channel,,,,,1st Review, -MGCP,media_attr_encodingQ_PROTO_MGCP,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review, -MGCP,media_attr_labelQ_PROTO_MGCP,media_attr_label,MediaAttrLabel,Media Attribute Label,,,,,1st Review, -MGCP,media_attr_paramQ_PROTO_MGCP,media_attr_param,MediaAttrParam,Media Attribue Param,,,,,1st Review, -MGCP,media_attr_rateQ_PROTO_MGCP,media_attr_rate,MediaAttrRate,Media Attribute Rate,,,,,1st Review, -MGCP,media_attr_transportQ_PROTO_MGCP,media_attr_transport,MediaAttrTransport,Media Attribue Transport,,,,,1st Review, -MGCP,media_attr_typeQ_PROTO_MGCP,media_attr_type,MediaAttrType,Media Attribue Type,,,,,1st Review, -MGCP,media_attr_valueQ_PROTO_MGCP,media_attr_value,MediaAttrValue,Media Attribute Value,,,,,1st Review, -MGCP,media_formatQ_PROTO_MGCP,media_format,MediaFormat,Media Format,,,,,1st Review, -MGCP,media_protoQ_PROTO_MGCP,media_proto,MediaProto,Media Protocol,,,,,1st Review, -MGCP,media_typeQ_PROTO_MGCP,media_type,MediaType,Media Type,,,,,1st Review, -MGCP,methodQ_PROTO_MGCP,method,Method,Method,command,,Command,,1st Review, -MGCP,modeQ_PROTO_MGCP,mode,Mode,Mode,,,,,1st Review, -MGCP,message_typeQ_PROTO_MGCP,message_type,MsgType,Message Type,,,,,1st Review, -MGCP,notifiedEntityQ_PROTO_MGCP,notifiedEntity,NotifiedEntity,Notified Entity,,,,,1st Review, -MGCP,octets_receivedQ_PROTO_MGCP,octets_received,OctetsReceived,Octets Received,,,,,1st Review, -MGCP,octets_sentQ_PROTO_MGCP,octets_sent,OctetsSent,Octets Sent,,,,,1st Review, -MGCP,phone_numberQ_PROTO_MGCP,phone_number,PhoneNum,Phone Number,,,,,1st Review, -MGCP,packets_lostQ_PROTO_MGCP,packets_lost,PktsLost,Packets Lost,,,,,1st Review, -MGCP,packets_receivedQ_PROTO_MGCP,packets_received,PktsRcvd,Packets Received,,,,,1st Review, -MGCP,packets_sentQ_PROTO_MGCP,packets_sent,PktsSent,Packets Sent,,,,,1st Review, -MGCP,session_durationQ_PROTO_MGCP,session_duration,SessionDuration,Session Duration,,,,,1st Review, -MGCP,signalQ_PROTO_MGCP,signal,Signal,Signal,,,,,1st Review, -MGCP,start_timeQ_PROTO_MGCP,start_time,StartTime,Start Time,,,,,1st Review, -MGCP,tidQ_PROTO_MGCP,tid,TID,TID,,,,,1st Review, -MGCP,versionQ_PROTO_MGCP,version,Version,Version,version,,Version,,1st Review, -MIMP,actionQ_PROTO_MIMP,action,Action,Action,command,,Command,,1st Review, -MIMP,attach_sizeQ_PROTO_MIMP,attach_size,AttachSize,Attach Size,,,,,1st Review, -MIMP,dateQ_PROTO_MIMP,date,Date,Date,,,,,1st Review, -MIMP,attach_filenameQ_PROTO_MIMP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -MIMP,loginQ_PROTO_MIMP,login,Login,Login,login,,Login,,1st Review, -MIMP,msglist_folderQ_PROTO_MIMP,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -MIMP,msglist_receiver_aliasQ_PROTO_MIMP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -MIMP,msglist_sender_aliasQ_PROTO_MIMP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -MIMP,msglist_subjectQ_PROTO_MIMP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -MIMP,passwordQ_PROTO_MIMP,password,Passwd,Password,,,,,1st Review, -MIMP,receiverQ_PROTO_MIMP,receiver,Receiver,Receiver,,,,,1st Review, -MIMP,receiver_aliasQ_PROTO_MIMP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -MIMP,receiver_emailQ_PROTO_MIMP,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -MIMP,receiver_typeQ_PROTO_MIMP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -MIMP,senderQ_PROTO_MIMP,sender,Sender,Sender,,,,,1st Review, -MIMP,sender_aliasQ_PROTO_MIMP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -MIMP,sender_emailQ_PROTO_MIMP,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -MIMP,subjectQ_PROTO_MIMP,subject,Subject,Subject,subject,,Subject,,1st Review, -MMS,filenameQ_PROTO_MMS,filename,Filename,Filename,objectname,,Object Name,,1st Review, -MMSE,content_locationQ_PROTO_MMSE,content_location,ContentLocation,Content Location,url,,URL,,1st Review, -MMSE,content_part_filenameQ_PROTO_MMSE,content_part_filename,ContentPartFilename,Content Part Filename,objectname,,Object Name,,1st Review, -MMSE,content_part_idQ_PROTO_MMSE,content_part_id,ContentPartID,Content Part ID,,,,,1st Review, -MMSE,content_part_typeQ_PROTO_MMSE,content_part_type,ContentPartType,Content Part Type,,,,,1st Review, -MMSE,content_typeQ_PROTO_MMSE,content_type,ContentType,Content Type,,,,,1st Review, -MMSE,message_idQ_PROTO_MMSE,message_id,MsgID,Message ID,,,,,1st Review, -MMSE,message_szQ_PROTO_MMSE,message_sz,MsgSZ,Message SZ,,,,,1st Review, -MMSE,nb_receiverQ_PROTO_MMSE,nb_receiver,NBReceiver,NB Receiver,,,,,1st Review, -MMSE,receiverQ_PROTO_MMSE,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -MMSE,response_status_codeQ_PROTO_MMSE,response_status_code,ResponseStatusCode,Response Status Code,,,,,1st Review, -MMSE,response_status_textQ_PROTO_MMSE,response_status_text,ResponseStatusText,Response Status Text,,,,,1st Review, -MMSE,senderQ_PROTO_MMSE,sender,Sender,Sender,sender,,Sender,,1st Review, -MMSE,subjectQ_PROTO_MMSE,subject,Subject,Subject,subject,,Subject,,1st Review, -MMSE,tidQ_PROTO_MMSE,tid,TID,TID,,,,,1st Review, -MMSE,versionQ_PROTO_MMSE,version,Version,Version,version,,Version,,1st Review, -MPEGTS,chunk_lenQ_PROTO_MPEGTS,chunk_len,ChunkLen,Chunk Length,,,,,1st Review, -MPLS,labelQ_PROTO_MPLS,label,Label,Label,,,,,1st Review, -MPLUS_MESSENGER,serviceQ_PROTO_MPLUS_MESSENGER,service,Service,Service,process,,Process,,1st Review, -MPLUS_MESSENGER,service_idQ_PROTO_MPLUS_MESSENGER,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review, -MSN,calleeQ_PROTO_MSN,callee,Callee,Callee,,,,,1st Review, -MSN,callerQ_PROTO_MSN,caller,Caller,Caller,,,,,1st Review, -MSN,call_idQ_PROTO_MSN,call_id,CallID,Call ID,,,,,1st Review, -MSN,client_nicknameQ_PROTO_MSN,client_nickname,ClientNickname,Client Nickname,,,,,1st Review, -MSN,client_statusQ_PROTO_MSN,client_status,ClientStatus,Client Status,,,,,1st Review, -MSN,contactQ_PROTO_MSN,contact,Contact,Contact,,,,,1st Review, -MSN,contact_idQ_PROTO_MSN,contact_id,ContactID,Contact ID,,,,,1st Review, -MSN,contact_loginQ_PROTO_MSN,contact_login,ContactLogin,Contact Login,,,,,1st Review, -MSN,contact_nicknameQ_PROTO_MSN,contact_nickname,ContactNickname,Contact Nickname,,,,,1st Review, -MSN,contact_statusQ_PROTO_MSN,contact_status,ContactStatus,Contact Status,,,,,1st Review, -MSN,encodingQ_PROTO_MSN,encoding,Encoding,Encoding,subject,,Subject,,1st Review, -MSN,file_chunk_data_offsetQ_PROTO_MSN,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -MSN,file_chunk_identifierQ_PROTO_MSN,file_chunk_identifier,FileChunkIdentifier,File Chunk Identifier,,,,,1st Review, -MSN,file_chunk_lenQ_PROTO_MSN,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -MSN,file_chunk_typeQ_PROTO_MSN,file_chunk_type,FileChunkType,File Chunk Type,,,,,1st Review, -MSN,file_identifierQ_PROTO_MSN,file_identifier,FileIdentifier,File Identifier,,,,,1st Review, -MSN,filenameQ_PROTO_MSN,filename,Filename,Filename,objectname,,Object Name,,1st Review, -MSN,file_receiverQ_PROTO_MSN,file_receiver,FileReceiver,File Receiver,,,,,1st Review, -MSN,file_senderQ_PROTO_MSN,file_sender,FileSender,File Sender,,,,,1st Review, -MSN,filesizeQ_PROTO_MSN,filesize,FileSize,File Size,,,,,1st Review, -MSN,groupQ_PROTO_MSN,group,Group,Group,dname,,Group,,1st Review, -MSN,ip_localQ_PROTO_MSN,ip_local,IPLocal,IP Local,,,,,1st Review, -MSN,loginQ_PROTO_MSN,login,Login,Login,login,,Login,,1st Review, -MSN,methodQ_PROTO_MSN,method,Method,Method,command,,Command,,1st Review, -MSN,messageQ_PROTO_MSN,message,Msg,Message,object,,Object,,1st Review, -MSN,message_lenQ_PROTO_MSN,message_len,MsgLen,Message Length,,,,,1st Review, -MSN,online_principalQ_PROTO_MSN,online_principal,OnlinePrincipal,Online Principal,,,,,1st Review, -MSN,profileQ_PROTO_MSN,profile,Profile,Profile,,,,,1st Review, -MSN,proto_versionQ_PROTO_MSN,proto_version,ProtoVersion,Proto Version,version,,Version,,1st Review, -MSN,receiverQ_PROTO_MSN,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -MSN,senderQ_PROTO_MSN,sender,Sender,Sender,sender,,Sender,,1st Review, -MSN,serviceQ_PROTO_MSN,service,Service,Service,process,,Process,,1st Review, -MSN,uidQ_PROTO_MSN,uid,UID,User ID,,,,,1st Review, -MSN_GROUPS,group_nameQ_PROTO_MSN_GROUPS,group_name,GroupName,Group Name,,,,,1st Review, -MSN_SEARCH,encodingQ_PROTO_MSN_SEARCH,encoding,Encoding,Encoding,,,,,1st Review, -MSN_SEARCH,query_rawQ_PROTO_MSN_SEARCH,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -MSN_SEARCH,query_textQ_PROTO_MSN_SEARCH,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -MSN_SEARCH,query_typeQ_PROTO_MSN_SEARCH,query_type,QueryType,Query Type,,,,,1st Review, -MSN_VIDEO,recipientidQ_PROTO_MSN_VIDEO,recipientid,RecipientID,Recipient ID,,,,,1st Review, -MSN_VIDEO,sessionidQ_PROTO_MSN_VIDEO,sessionid,SessionID,Session ID,,,,,1st Review, -MSRP,authorityQ_PROTO_MSRP,authority,Authority,Authority,,,,,1st Review, -MSRP,path_typeQ_PROTO_MSRP,path_type,PathType,Path Type,,,,,1st Review, -MSRP,session_idQ_PROTO_MSRP,session_id,SessionID,Session ID,,,,,1st Review, -MSRP,uriQ_PROTO_MSRP,uri,URI,URI,url,,URL,,1st Review, -MYSPACE,loginQ_PROTO_MYSPACE,login,Login,Login,login,,Login,,1st Review, -MYSPACE,nameQ_PROTO_MYSPACE,name,Name,Name,,,,,1st Review, -MYSPACE,nicknameQ_PROTO_MYSPACE,nickname,Nickname,Nickname,,,,,1st Review, -MYSPACE,passwordQ_PROTO_MYSPACE,password,Passwd,Password,,,,,1st Review, -MYSPACE,query_rawQ_PROTO_MYSPACE,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -MYSPACE,query_textQ_PROTO_MYSPACE,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -MYSQL,baseQ_PROTO_MYSQL,base,Base,Base,object,,Object,,1st Review, -MYSQL,loginQ_PROTO_MYSQL,login,Login,Login,login,,Login,,1st Review, -MYSQL,queryQ_PROTO_MYSQL,query,Query,Query,command,,Command,,1st Review, -NBNS,queryQ_PROTO_NBNS,query,Query,Query,command,,Command,,1st Review, -NBNS,serviceQ_PROTO_NBNS,service,Service,Service,process,,Process,,1st Review, -NETBIOS,calleeQ_PROTO_NETBIOS,callee,Callee,Callee,,,,,1st Review, -NETBIOS,callerQ_PROTO_NETBIOS,caller,Caller,Caller,,,,,1st Review, -NETBSD_UPDATE,package_nameQ_PROTO_NETBSD_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review, -NETFLIX,dateQ_PROTO_NETFLIX,date,Date,Date,,,,,1st Review, -NETFLIX,descriptionQ_PROTO_NETFLIX,description,Description,Description,subject,,Subject,,1st Review, -NETFLIX,loginQ_PROTO_NETFLIX,login,Login,Login,login,,Login,,1st Review, -NETFLIX,titleQ_PROTO_NETFLIX,title,Title,Title,objectname,,Object Name,,1st Review, -NETFLIX,video_durationQ_PROTO_NETFLIX,video_duration,VidDuration,Video Duration,,,,,1st Review, -NETFLIX,videoidQ_PROTO_NETFLIX,videoid,VidID,Video ID,,,,,1st Review, -NETLOG,is_mobile_serviceQ_PROTO_NETLOG,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review, -NETLOG,loginQ_PROTO_NETLOG,login,Login,Login,login,,Login,,1st Review, -NETLOG,passwordQ_PROTO_NETLOG,password,Passwd,Password,,,,,1st Review, -NFS,filenameQ_PROTO_NFS,filename,Filename,Filename,objectname,,Object Name,,1st Review, -NFS,filesizeQ_PROTO_NFS,filesize,FileSize,File Size,,,,,1st Review, -NFS,gidQ_PROTO_NFS,gid,GID,GID,,,,,1st Review, -NFS,modeQ_PROTO_NFS,mode,Mode,Mode,,,,,1st Review, -NFS,offsetQ_PROTO_NFS,offset,Offset,Offset,,,,,1st Review, -NFS,type_stringQ_PROTO_NFS,type_string,TypeString,Type String,,,,,1st Review, -NFS,uidQ_PROTO_NFS,uid,UID,User ID,,,,,1st Review, -NFS,versionQ_PROTO_NFS,version,Version,Version,version,,Version,,1st Review, -NICONICO_DOUGA,dateQ_PROTO_NICONICO_DOUGA,date,Date,Date,,,,,1st Review, -NICONICO_DOUGA,descriptionQ_PROTO_NICONICO_DOUGA,description,Description,Description,subject,,Subject,,1st Review, -NICONICO_DOUGA,loginQ_PROTO_NICONICO_DOUGA,login,Login,Login,login,,Login,,1st Review, -NICONICO_DOUGA,nicknameQ_PROTO_NICONICO_DOUGA,nickname,Nickname,Nickname,,,,,1st Review, -NICONICO_DOUGA,query_rawQ_PROTO_NICONICO_DOUGA,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -NICONICO_DOUGA,query_textQ_PROTO_NICONICO_DOUGA,query_text,QueryText,Query Text,,,,,1st Review, -NICONICO_DOUGA,tagQ_PROTO_NICONICO_DOUGA,tag,Tag,Tag,,,,,1st Review, -NICONICO_DOUGA,titleQ_PROTO_NICONICO_DOUGA,title,Title,Title,objectname,,Object Name,,1st Review, -NICONICO_DOUGA,video_durationQ_PROTO_NICONICO_DOUGA,video_duration,VidDuration,Video Duration,,,,,1st Review, -NICONICO_DOUGA,videoidQ_PROTO_NICONICO_DOUGA,videoid,VidID,Video ID,,,,,1st Review, -NNTP,loginQ_PROTO_NNTP,login,Login,Login,login,,Login,,1st Review, -NNTP,newsgroupQ_PROTO_NNTP,newsgroup,Newsgroup,Newsgroup,object,,Object,,1st Review, -NNTP,passwordQ_PROTO_NNTP,password,Passwd,Password,,,,,1st Review, -NNTP,senderQ_PROTO_NNTP,sender,Sender,Sender,sender,,Sender,,1st Review, -NNTP,subjectQ_PROTO_NNTP,subject,Subject,Subject,subject,,Subject,,1st Review, -NTP,reference_clockQ_PROTO_NTP,reference_clock,ReferenceClock,Reference Clock,,,,,1st Review, -ODNOKLASSNIKI,contact_aliasQ_PROTO_ODNOKLASSNIKI,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -ODNOKLASSNIKI,group_nameQ_PROTO_ODNOKLASSNIKI,group_name,GroupName,Group Name,dname,,Group,,1st Review, -ODNOKLASSNIKI,loginQ_PROTO_ODNOKLASSNIKI,login,Login,Login,login,,Login,,1st Review, -ODNOKLASSNIKI,passwordQ_PROTO_ODNOKLASSNIKI,password,Passwd,Password,,,,,1st Review, -OOVOO,loginQ_PROTO_OOVOO,login,Login,Login,login,,Login,,1st Review, -OPENBSD_UPDATE,package_nameQ_PROTO_OPENBSD_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review, -OPENVPN,seqQ_PROTO_OPENVPN,seq,Seq,Sequence,quantity,,Quantity,,1st Review, -OPERA_UPDATE,current_versionQ_PROTO_OPERA_UPDATE,current_version,CurrentVersion,Current Version,version,,version,,1st Review, -OPERA_UPDATE,new_versionQ_PROTO_OPERA_UPDATE,new_version,NewVersion,New Version,,,,,1st Review, -ORANGEMAIL,actionQ_PROTO_ORANGEMAIL,action,Action,Action,object,,Object,,1st Review, -ORANGEMAIL,attach_idQ_PROTO_ORANGEMAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -ORANGEMAIL,attach_sizeQ_PROTO_ORANGEMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -ORANGEMAIL,contact_aliasQ_PROTO_ORANGEMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -ORANGEMAIL,contact_emailQ_PROTO_ORANGEMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review, -ORANGEMAIL,contact_firstnameQ_PROTO_ORANGEMAIL,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review, -ORANGEMAIL,contact_lastnameQ_PROTO_ORANGEMAIL,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review, -ORANGEMAIL,dateQ_PROTO_ORANGEMAIL,date,Date,Date,,,,,1st Review, -ORANGEMAIL,draftQ_PROTO_ORANGEMAIL,draft,Draft,Draft,,,,,1st Review, -ORANGEMAIL,attach_filenameQ_PROTO_ORANGEMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -ORANGEMAIL,folderQ_PROTO_ORANGEMAIL,folder,Folder,Folder,,,,,1st Review, -ORANGEMAIL,loginQ_PROTO_ORANGEMAIL,login,Login,Login,login,,Login,,1st Review, -ORANGEMAIL,msg_idQ_PROTO_ORANGEMAIL,msg_id,MsgID,Message ID,,,,,1st Review, -ORANGEMAIL,msglist_dateQ_PROTO_ORANGEMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -ORANGEMAIL,msglist_folderQ_PROTO_ORANGEMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -ORANGEMAIL,msglist_msgidQ_PROTO_ORANGEMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -ORANGEMAIL,msglist_receiverQ_PROTO_ORANGEMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -ORANGEMAIL,msglist_receiver_aliasQ_PROTO_ORANGEMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -ORANGEMAIL,msglist_senderQ_PROTO_ORANGEMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -ORANGEMAIL,msglist_sender_aliasQ_PROTO_ORANGEMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -ORANGEMAIL,msglist_subjectQ_PROTO_ORANGEMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -ORANGEMAIL,receiverQ_PROTO_ORANGEMAIL,receiver,Receiver,Receiver,,,,,1st Review, -ORANGEMAIL,receiver_aliasQ_PROTO_ORANGEMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -ORANGEMAIL,receiver_emailQ_PROTO_ORANGEMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -ORANGEMAIL,receiver_typeQ_PROTO_ORANGEMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -ORANGEMAIL,senderQ_PROTO_ORANGEMAIL,sender,Sender,Sender,,,,,1st Review, -ORANGEMAIL,sender_aliasQ_PROTO_ORANGEMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -ORANGEMAIL,sender_emailQ_PROTO_ORANGEMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -ORANGEMAIL,subjectQ_PROTO_ORANGEMAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -OSPF,area_idQ_PROTO_OSPF,area_id,AreaID,Area ID,,,,,1st Review, -OSPF,backup_routerQ_PROTO_OSPF,backup_router,BackupRouter,Backup Routerer,,,,,1st Review, -OSPF,dd_seq_nbrQ_PROTO_OSPF,dd_seq_nbr,DDSeqNbr,DD Seq Number,,,,,1st Review, -OSPF,dead_intervalQ_PROTO_OSPF,dead_interval,DeadInterval,Dead Interval,,,,,1st Review, -OSPF,designed_routerQ_PROTO_OSPF,designed_router,DesignedRouter,Designed Router,,,,,1st Review, -OSPF,external_fwd_addrQ_PROTO_OSPF,external_fwd_addr,ExtFwdAddr,External Forward Address,,,,,1st Review, -OSPF,external_route_tagQ_PROTO_OSPF,external_route_tag,ExtRouteTag,External Route Tag,,,,,1st Review, -OSPF,link_dataQ_PROTO_OSPF,link_data,LinkData,Link Data,,,,,1st Review, -OSPF,link_idQ_PROTO_OSPF,link_id,LinkID,Link ID,,,,,1st Review, -OSPF,ls_adv_routerQ_PROTO_OSPF,ls_adv_router,LsAdvRouter,Ls Adv Router,,,,,1st Review, -OSPF,ls_attach_routerQ_PROTO_OSPF,ls_attach_router,LsAttachRouter,Ls Attach Router,,,,,1st Review, -OSPF,ls_idQ_PROTO_OSPF,ls_id,LsID,Ls ID,,,,,1st Review, -OSPF,ls_metricQ_PROTO_OSPF,ls_metric,LsMetric,Ls Metric,,,,,1st Review, -OSPF,ls_netmaskQ_PROTO_OSPF,ls_netmask,LsNetmask,Ls Netmask,,,,,1st Review, -OSPF,ls_seq_numberQ_PROTO_OSPF,ls_seq_number,LsSeqNumber,Ls Seq Number,,,,,1st Review, -OSPF,ls_typeQ_PROTO_OSPF,ls_type,LsType,Ls Type,,,,,1st Review, -OSPF,neighborQ_PROTO_OSPF,neighbor,Neighbor,Neighbor,,,,,1st Review, -OSPF,netmaskQ_PROTO_OSPF,netmask,Netmask,Netmask,,,,,1st Review, -OSPF,router_idQ_PROTO_OSPF,router_id,RouterID,Router ID,,,,,1st Review, -OWA,actionQ_PROTO_OWA,action,Action,Action,command,,Command,,1st Review, -OWA,attach_idQ_PROTO_OWA,attach_id,AttachID,Attach ID,,,,,1st Review, -OWA,attach_sizeQ_PROTO_OWA,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -OWA,attach_typeQ_PROTO_OWA,attach_type,AttachType,Attach Type,,,,,1st Review, -OWA,contact_aliasQ_PROTO_OWA,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -OWA,contact_emailQ_PROTO_OWA,contact_email,ContactEmail,Contact Email,,,,,1st Review, -OWA,dateQ_PROTO_OWA,date,Date,Date,,,,,1st Review, -OWA,draftQ_PROTO_OWA,draft,Draft,Draft,,,,,1st Review, -OWA,attach_filenameQ_PROTO_OWA,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -OWA,folderQ_PROTO_OWA,folder,Folder,Folder,,,,,1st Review, -OWA,loginQ_PROTO_OWA,login,Login,Login,login,,Login,,1st Review, -OWA,login_serverQ_PROTO_OWA,login_server,LoginServer,Login Server,,,,,1st Review, -OWA,msg_idQ_PROTO_OWA,msg_id,MsgID,Message ID,,,,,1st Review, -OWA,msglist_dateQ_PROTO_OWA,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -OWA,msglist_folderQ_PROTO_OWA,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -OWA,msglist_msgidQ_PROTO_OWA,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -OWA,msglist_receiverQ_PROTO_OWA,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -OWA,msglist_receiver_aliasQ_PROTO_OWA,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -OWA,msglist_receiver_emailQ_PROTO_OWA,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -OWA,msglist_senderQ_PROTO_OWA,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -OWA,msglist_sender_aliasQ_PROTO_OWA,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -OWA,msglist_sender_emailQ_PROTO_OWA,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -OWA,msglist_subjectQ_PROTO_OWA,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -OWA,receiverQ_PROTO_OWA,receiver,Receiver,Receiver,,,,,1st Review, -OWA,receiver_aliasQ_PROTO_OWA,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -OWA,receiver_emailQ_PROTO_OWA,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -OWA,receiver_typeQ_PROTO_OWA,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -OWA,senderQ_PROTO_OWA,sender,Sender,Sender,,,,,1st Review, -OWA,sender_aliasQ_PROTO_OWA,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -OWA,sender_emailQ_PROTO_OWA,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -OWA,session_idQ_PROTO_OWA,session_id,SessionID,Session ID,object,,Object,,1st Review, -OWA,subjectQ_PROTO_OWA,subject,Subject,Subject,subject,,Subject,,1st Review, -PALTALK,call_durationQ_PROTO_PALTALK,call_duration,CallDuration,Call Duration,,,,,1st Review, -PALTALK,calleeQ_PROTO_PALTALK,callee,Callee,Callee,,,,,1st Review, -PALTALK,callee_addrQ_PROTO_PALTALK,callee_addr,CalleeAddr,Callee Address,,,,,1st Review, -PALTALK,callee_uidQ_PROTO_PALTALK,callee_uid,CalleeUID,Callee UID,,,,,1st Review, -PALTALK,callerQ_PROTO_PALTALK,caller,Caller,Caller,,,,,1st Review, -PALTALK,caller_addrQ_PROTO_PALTALK,caller_addr,CallerAddr,Caller Address,,,,,1st Review, -PALTALK,caller_uidQ_PROTO_PALTALK,caller_uid,CallerUID,Caller UID,,,,,1st Review, -PALTALK,call_idQ_PROTO_PALTALK,call_id,CallID,Call ID,,,,,1st Review, -PALTALK,channelQ_PROTO_PALTALK,channel,Channel,Channel,,,,,1st Review, -PALTALK,chat_idQ_PROTO_PALTALK,chat_id,ChatID,Chat ID,,,,,1st Review, -PALTALK,contact_loginQ_PROTO_PALTALK,contact_login,ContactLogin,Contact Login,,,,,1st Review, -PALTALK,contact_uidQ_PROTO_PALTALK,contact_uid,ContactUID,Contact UID,,,,,1st Review, -PALTALK,encodingQ_PROTO_PALTALK,encoding,Encoding,Encoding,,,,,1st Review, -PALTALK,loginQ_PROTO_PALTALK,login,Login,Login,login,,Login,,1st Review, -PALTALK,messageQ_PROTO_PALTALK,message,Msg,Message,,,,,1st Review, -PALTALK,receiverQ_PROTO_PALTALK,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -PALTALK,receiver_uidQ_PROTO_PALTALK,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review, -PALTALK,senderQ_PROTO_PALTALK,sender,Sender,Sender,sender,,Sender,,1st Review, -PALTALK,sender_uidQ_PROTO_PALTALK,sender_uid,SenderUID,Sender UID,,,,,1st Review, -PALTALK,start_timeQ_PROTO_PALTALK,start_time,StartTime,Start Time,,,,,1st Review, -PALTALK,uidQ_PROTO_PALTALK,uid,UID,User ID,,,,,1st Review, -PALTALK,user_emailQ_PROTO_PALTALK,user_email,UserEmail,User Email,,,,,1st Review, -PALTALK_TRANSFER,filenameQ_PROTO_PALTALK_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review, -PALTALK_TRANSFER,filesizeQ_PROTO_PALTALK_TRANSFER,filesize,FileSize,File Size,size,,Size,,1st Review, -PALTALK_TRANSFER,loginQ_PROTO_PALTALK_TRANSFER,login,Login,Login,login,,Login,,1st Review, -PALTALK_TRANSFER,receiverQ_PROTO_PALTALK_TRANSFER,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -PALTALK_TRANSFER,receiver_uidQ_PROTO_PALTALK_TRANSFER,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review, -PALTALK_TRANSFER,senderQ_PROTO_PALTALK_TRANSFER,sender,Sender,Sender,sender,,Sender,,1st Review, -PALTALK_TRANSFER,sender_uidQ_PROTO_PALTALK_TRANSFER,sender_uid,SenderUID,Sender UID,,,,,1st Review, -PAP,loginQ_PROTO_PAP,login,Login,Login,login,,Login,,1st Review, -PAP,message_typeQ_PROTO_PAP,message_type,MsgType,Message Type,object,,Object,,1st Review, -PAP,passwordQ_PROTO_PAP,password,Passwd,Password,,,,,1st Review, -PERFORCE,parameter_nameQ_PROTO_PERFORCE,parameter_name,ParamName,Parameter Name,object,,Object,,1st Review, -PERFORCE,parameter_sizeQ_PROTO_PERFORCE,parameter_size,ParamSize,Parameter Size,size,,Size,,1st Review, -PERFORCE,parameter_valueQ_PROTO_PERFORCE,parameter_value,ParamValue,Parameter Value,objectname,,Object Name,,1st Review, -PERFSPOT,is_mobile_serviceQ_PROTO_PERFSPOT,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review, -PERFSPOT,loginQ_PROTO_PERFSPOT,login,Login,Login,login,,Login,,1st Review, -PERFSPOT,passwordQ_PROTO_PERFSPOT,password,Passwd,Password,,,,,1st Review, -POP3,attach_dispositionQ_PROTO_POP3,attach_disposition,AttachDisposition,Attach Disposition,,,,,1st Review, -POP3,attach_transfer_encodingQ_PROTO_POP3,attach_transfer_encoding,AttachTransferEncoding,Attach Transfer Encoding,,,,,1st Review, -POP3,attach_typeQ_PROTO_POP3,attach_type,AttachType,Attach Type,,,,,1st Review, -POP3,dateQ_PROTO_POP3,date,Date,Date,,,,,1st Review, -POP3,email_indexQ_PROTO_POP3,email_index,EmailIndex,Email Index,,,,,1st Review, -POP3,attach_filenameQ_PROTO_POP3,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -POP3,greeting_messageQ_PROTO_POP3,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review, -POP3,indexQ_PROTO_POP3,index,Index,Index,,,,,1st Review, -POP3,loginQ_PROTO_POP3,login,Login,Login,login,,Login,,1st Review, -POP3,login_serverQ_PROTO_POP3,login_server,LoginServer,Login Server,,,,,1st Review, -POP3,methodQ_PROTO_POP3,method,Method,Method,command,,Command,,1st Review, -POP3,mime_typeQ_PROTO_POP3,mime_type,MIMEType,MIMEType,,,,,1st Review, -POP3,message_idQ_PROTO_POP3,message_id,MsgID,Message ID,,,,,1st Review, -POP3,passwordQ_PROTO_POP3,password,Passwd,Password,,,,,1st Review, -POP3,received_by_ipQ_PROTO_POP3,received_by_ip,RcvdByIP,Received By IP,,,,,1st Review, -POP3,received_by_nameQ_PROTO_POP3,received_by_name,RcvdByName,Received By Name,,,,,1st Review, -POP3,received_dateQ_PROTO_POP3,received_date,RcvdDate,Received Date,,,,,1st Review, -POP3,received_from_ipQ_PROTO_POP3,received_from_ip,RcvdFromIP,Received From IP,,,,,1st Review, -POP3,received_from_nameQ_PROTO_POP3,received_from_name,RcvdFromName,Received From Name,,,,,1st Review, -POP3,received_server_agentQ_PROTO_POP3,received_server_agent,RcvdServerAgent,Received Server Agent,,,,,1st Review, -POP3,received_withQ_PROTO_POP3,received_with,RcvdWith,Received With,,,,,1st Review, -POP3,receiverQ_PROTO_POP3,receiver,Receiver,Receiver,,,,,1st Review, -POP3,receiver_aliasQ_PROTO_POP3,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -POP3,receiver_emailQ_PROTO_POP3,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -POP3,receiver_typeQ_PROTO_POP3,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -POP3,replytoQ_PROTO_POP3,replyto,ReplyTo,Reply To,,,,,1st Review, -POP3,senderQ_PROTO_POP3,sender,Sender,Sender,,,,,1st Review, -POP3,sender_aliasQ_PROTO_POP3,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -POP3,sender_emailQ_PROTO_POP3,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -POP3,server_responseQ_PROTO_POP3,server_response,ServerResp,Server Response,,,,,1st Review, -POP3,subjectQ_PROTO_POP3,subject,Subject,Subject,subject,,Subject,,1st Review, -POP3,user_agentQ_PROTO_POP3,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -POP3,xmailerQ_PROTO_POP3,xmailer,Xmailer,Xmailer,,,,,1st Review, -POSTGRES,authentification_typeQ_PROTO_POSTGRES,authentification_type,AuthType,Authentication Type,,,,,1st Review, -POSTGRES,baseQ_PROTO_POSTGRES,base,Base,Base,object,,Object,,1st Review, -POSTGRES,errorQ_PROTO_POSTGRES,error,Err,Error,,,,,1st Review, -POSTGRES,loginQ_PROTO_POSTGRES,login,Login,Login,login,,Login,,1st Review, -POSTGRES,passwordQ_PROTO_POSTGRES,password,Passwd,Password,,,,,1st Review, -POSTGRES,proto_versionQ_PROTO_POSTGRES,proto_version,ProtoVersion,Proto Version,,,,,1st Review, -POSTGRES,queryQ_PROTO_POSTGRES,query,Query,Query,command,,Command,,1st Review, -POSTGRES,server_versionQ_PROTO_POSTGRES,server_version,ServerVersion,Server Version,version,,Version,,1st Review, -PPLIVE,methodQ_PROTO_PPLIVE,method,Method,Method,command,,Command,,1st Review, -PPP,protocolQ_PROTO_PPP,protocol,Proto,Protocol,,,,,1st Review, -PPTP,vendorQ_PROTO_PPTP,vendor,Vendor,Vendor,object,,Object,,1st Review, -PPTP,versionQ_PROTO_PPTP,version,Version,Version,version,,Version,,1st Review, -PRICERUNNER,query_rawQ_PROTO_PRICERUNNER,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -PRICERUNNER,query_textQ_PROTO_PRICERUNNER,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -Q931,call_durationQ_PROTO_Q931,call_duration,CallDuration,Call Duration,,,,,1st Review, -Q931,calleeQ_PROTO_Q931,callee,Callee,Callee,,,,,1st Review, -Q931,callerQ_PROTO_Q931,caller,Caller,Caller,,,,,1st Review, -Q931,displayQ_PROTO_Q931,display,Display,Display,,,,,1st Review, -Q931,session_durationQ_PROTO_Q931,session_duration,SessionDuration,Session Duration,,,,,1st Review, -Q931,setup_delayQ_PROTO_Q931,setup_delay,SetupDelay,Setup Delay,,,,,1st Review, -QQ,call_durationQ_PROTO_QQ,call_duration,CallDuration,Call Duration,,,,,1st Review, -QQ,calleeQ_PROTO_QQ,callee,Callee,Callee,,,,,1st Review, -QQ,callerQ_PROTO_QQ,caller,Caller,Caller,,,,,1st Review, -QQ,contact_loginQ_PROTO_QQ,contact_login,ContactLogin,Contact Login,,,,,1st Review, -QQ,loginQ_PROTO_QQ,login,Login,Login,login,,Login,,1st Review, -QQ,msg_codeQ_PROTO_QQ,msg_code,MsgCode,Message Code,object,,Object,,1st Review, -QQ,msg_typeQ_PROTO_QQ,msg_type,MsgType,Message Type,,,,,1st Review, -QQ,serviceQ_PROTO_QQ,service,Service,Service,process,,Process,,1st Review, -QQ,version_codeQ_PROTO_QQ,version_code,VersionCode,Version Code,version,,Version,,1st Review, -QQ_TRANSFER,actionQ_PROTO_QQ_TRANSFER,action,Action,Action,object,,Object,,1st Review, -QQ_TRANSFER,filekeyQ_PROTO_QQ_TRANSFER,filekey,FileKey,File Key,,,,,1st Review, -QQ_TRANSFER,filenameQ_PROTO_QQ_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review, -QQ_TRANSFER,filesizeQ_PROTO_QQ_TRANSFER,filesize,FileSize,File Size,size,,Size,,1st Review, -QQ_TRANSFER,loginQ_PROTO_QQ_TRANSFER,login,Login,Login,login,,Login,,1st Review, -QQ_TRANSFER,serviceQ_PROTO_QQ_TRANSFER,service,Service,Service,process,,Process,,1st Review, -QUAKE,serverQ_PROTO_QUAKE,server,Server,Server,dname,,Group,,1st Review, -QVOD,peer_ipQ_PROTO_QVOD,peer_ip,PeerIP,Peer IP,,,,,1st Review, -RADIUS,_3gpp_imsiQ_PROTO_RADIUS,_3gpp_imsi,3GPPIMSI,3GPP IMSI,,,,,1st Review, -RADIUS,_3gpp_sgsn_addressQ_PROTO_RADIUS,_3gpp_sgsn_address,3GPPSGSNAddr,3GPP SGSN Address,,,,,1st Review, -RADIUS,_3gpp_sgsn_mcc_mncQ_PROTO_RADIUS,_3gpp_sgsn_mcc_mnc,3GPPSGSNMCCMNC,3GPP SGSN MCC MNC,,,,,1st Review, -RADIUS,acct_input_octetsQ_PROTO_RADIUS,acct_input_octets,AcctInputOctets,Account Input Octets,,,,,1st Review, -RADIUS,acct_output_octetsQ_PROTO_RADIUS,acct_output_octets,AcctOutputOctets,Account Output Octets,,,,,1st Review, -RADIUS,acct_session_idQ_PROTO_RADIUS,acct_session_id,AcctSessionID,Account Session ID,object,,Object,,1st Review, -RADIUS,avp_intQ_PROTO_RADIUS,avp_int,AvpInt,Avp Int,,,,,1st Review, -RADIUS,avp_int64Q_PROTO_RADIUS,avp_int64,AvpInt64,Avp Int 64,,,,,1st Review, -RADIUS,avp_interface_idQ_PROTO_RADIUS,avp_interface_id,AvpInterfaceID,Avp Interface ID,,,,,1st Review, -RADIUS,avp_ipv4Q_PROTO_RADIUS,avp_ipv4,AvpIPv4,Avp IPv v4,,,,,1st Review, -RADIUS,avp_vendor_idQ_PROTO_RADIUS,avp_vendor_id,AvpVendorID,Avp Vendor ID,,,,,1st Review, -RADIUS,callback_numberQ_PROTO_RADIUS,callback_number,CallbackNumber,Callback Number,,,,,1st Review, -RADIUS,called_station_idQ_PROTO_RADIUS,called_station_id,CalledStationID,Called Station ID,,,,,1st Review, -RADIUS,calling_station_idQ_PROTO_RADIUS,calling_station_id,CallingStationID,Calling Station ID,,,,,1st Review, -RADIUS,framed_ipQ_PROTO_RADIUS,framed_ip,FramedIP,Framed IP,,,,,1st Review, -RADIUS,framed_ipv6_poolQ_PROTO_RADIUS,framed_ipv6_pool,FramedIPV6Pool,Framed IPV6 Pool,,,,,1st Review, -RADIUS,framed_ipv6_routeQ_PROTO_RADIUS,framed_ipv6_route,FramedIPV6Route,Framed IPV6 Route,,,,,1st Review, -RADIUS,idle_timeoutQ_PROTO_RADIUS,idle_timeout,IdleTimeout,Idle Timeout,,,,,1st Review, -RADIUS,loginQ_PROTO_RADIUS,login,Login,Login,login,,Login,,1st Review, -RADIUS,nas_idQ_PROTO_RADIUS,nas_id,NASID,NAS ID,,,,,1st Review, -RADIUS,nas_ipQ_PROTO_RADIUS,nas_ip,NASIP,NAS IP,,,,,1st Review,This also came up when I searched NAS_IP https://www.youtube.com/watch?v=cNPDx-_3hqQ -RADIUS,nas_portQ_PROTO_RADIUS,nas_port,NASPort,NAS Port,,,,,1st Review, -RADIUS,nas_port_idQ_PROTO_RADIUS,nas_port_id,NASPortID,NAS Port ID,,,,,1st Review, -RADIUS,nas_port_typeQ_PROTO_RADIUS,nas_port_type,NASPortType,NAS Port Type,,,,,1st Review, -RADIUS,session_timeoutQ_PROTO_RADIUS,session_timeout,SessionTimeout,Session Timeout,,,,,1st Review, -RADIUS,start_timeQ_PROTO_RADIUS,start_time,StartTime,Start Time,,,,,1st Review, -RADIUS,stop_timeQ_PROTO_RADIUS,stop_time,StopTime,Stop Time,,,,,1st Review, -RADIUS,terminate_causeQ_PROTO_RADIUS,terminate_cause,TerminateCause,Terminate Cause,,,,,1st Review, -RAMBLER,domainQ_PROTO_RAMBLER,domain,Domain,Domain,domain,,Domain,,1st Review, -RAMBLER,loginQ_PROTO_RAMBLER,login,Login,Login,login,,Login,,1st Review, -RAMBLER,passwordQ_PROTO_RAMBLER,password,Passwd,Password,,,,,1st Review, -RAMBLER,query_rawQ_PROTO_RAMBLER,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -RAMBLER,query_textQ_PROTO_RAMBLER,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -RAMBLER,query_typeQ_PROTO_RAMBLER,query_type,QueryType,Query Type,,,,,1st Review, -RAMBLER_WEBMAIL,actionQ_PROTO_RAMBLER_WEBMAIL,action,Action,Action,object,,Object,,1st Review, -RAMBLER_WEBMAIL,attach_idQ_PROTO_RAMBLER_WEBMAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -RAMBLER_WEBMAIL,attach_sizeQ_PROTO_RAMBLER_WEBMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -RAMBLER_WEBMAIL,attach_typeQ_PROTO_RAMBLER_WEBMAIL,attach_type,AttachType,Attach Type,,,,,1st Review, -RAMBLER_WEBMAIL,contact_aliasQ_PROTO_RAMBLER_WEBMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -RAMBLER_WEBMAIL,contact_emailQ_PROTO_RAMBLER_WEBMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review, -RAMBLER_WEBMAIL,dateQ_PROTO_RAMBLER_WEBMAIL,date,Date,Date,,,,,1st Review, -RAMBLER_WEBMAIL,domainQ_PROTO_RAMBLER_WEBMAIL,domain,Domain,Domain,domain,,Domain,,1st Review, -RAMBLER_WEBMAIL,draftQ_PROTO_RAMBLER_WEBMAIL,draft,Draft,Draft,,,,,1st Review, -RAMBLER_WEBMAIL,attach_filenameQ_PROTO_RAMBLER_WEBMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -RAMBLER_WEBMAIL,folderQ_PROTO_RAMBLER_WEBMAIL,folder,Folder,Folder,,,,,1st Review, -RAMBLER_WEBMAIL,folderlist_item_nameQ_PROTO_RAMBLER_WEBMAIL,folderlist_item_name,FolderListItemName,Folder List Item Name,,,,,1st Review, -RAMBLER_WEBMAIL,loginQ_PROTO_RAMBLER_WEBMAIL,login,Login,Login,login,,Login,,1st Review, -RAMBLER_WEBMAIL,msg_idQ_PROTO_RAMBLER_WEBMAIL,msg_id,MsgID,Message ID,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_attachQ_PROTO_RAMBLER_WEBMAIL,msglist_attach,MsgListAttach,Message List Attach,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_dateQ_PROTO_RAMBLER_WEBMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_folderQ_PROTO_RAMBLER_WEBMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_importanceQ_PROTO_RAMBLER_WEBMAIL,msglist_importance,MsgListImportance,Message List Importance,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_msgidQ_PROTO_RAMBLER_WEBMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_receiverQ_PROTO_RAMBLER_WEBMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_receiver_aliasQ_PROTO_RAMBLER_WEBMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_receiver_emailQ_PROTO_RAMBLER_WEBMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_senderQ_PROTO_RAMBLER_WEBMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_sender_aliasQ_PROTO_RAMBLER_WEBMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_sender_emailQ_PROTO_RAMBLER_WEBMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_subjectQ_PROTO_RAMBLER_WEBMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -RAMBLER_WEBMAIL,msglist_unreadQ_PROTO_RAMBLER_WEBMAIL,msglist_unread,MsgListUnread,Message List Unread,,,,,1st Review, -RAMBLER_WEBMAIL,receiverQ_PROTO_RAMBLER_WEBMAIL,receiver,Receiver,Receiver,,,,,1st Review, -RAMBLER_WEBMAIL,receiver_aliasQ_PROTO_RAMBLER_WEBMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -RAMBLER_WEBMAIL,receiver_emailQ_PROTO_RAMBLER_WEBMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -RAMBLER_WEBMAIL,receiver_typeQ_PROTO_RAMBLER_WEBMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -RAMBLER_WEBMAIL,senderQ_PROTO_RAMBLER_WEBMAIL,sender,Sender,Sender,,,,,1st Review, -RAMBLER_WEBMAIL,sender_aliasQ_PROTO_RAMBLER_WEBMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -RAMBLER_WEBMAIL,sender_emailQ_PROTO_RAMBLER_WEBMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -RAMBLER_WEBMAIL,subjectQ_PROTO_RAMBLER_WEBMAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -RAPIDSHARE,actionQ_PROTO_RAPIDSHARE,action,Action,Action,object,,Object,,1st Review, -RAPIDSHARE,client_idQ_PROTO_RAPIDSHARE,client_id,ClientID,Client ID,,,,,1st Review, -RAPIDSHARE,download_urlQ_PROTO_RAPIDSHARE,download_url,DownloadURL,Download URL,url,,URL,,1st Review, -RAPIDSHARE,email_addressQ_PROTO_RAPIDSHARE,email_address,EmailAddr,Email Address,sender,,Sender,,1st Review, -RAPIDSHARE,filenameQ_PROTO_RAPIDSHARE,filename,Filename,Filename,objectname,,Object Name,,1st Review, -RAPIDSHARE,filesizeQ_PROTO_RAPIDSHARE,filesize,FileSize,File Size,size,,Size,,1st Review, -RAPIDSHARE,loginQ_PROTO_RAPIDSHARE,login,Login,Login,login,,Login,,1st Review, -RAPIDSHARE,methodQ_PROTO_RAPIDSHARE,method,Method,Method,command,,Command,,1st Review, -RAPIDSHARE,passwordQ_PROTO_RAPIDSHARE,password,Passwd,Password,,,,,1st Review, -RDP,channel_disabledQ_PROTO_RDP,channel_disabled,ChannelDisabled,Channel Disabled,,,,,1st Review, -RDP,channel_encrypt_wayQ_PROTO_RDP,channel_encrypt_way,ChannelEncryptWay,Channel Encrypt Way,,,,,1st Review, -RDP,channel_idQ_PROTO_RDP,channel_id,ChannelID,Channel ID,,,,,1st Review, -RDP,channel_nameQ_PROTO_RDP,channel_name,ChannelName,Channel Name,,,,,1st Review, -RDP,channel_priorityQ_PROTO_RDP,channel_priority,ChannelPriority,Channel Priority,,,,,1st Review, -RDP,client_buildQ_PROTO_RDP,client_build,ClientBuild,Client Build,,,,,1st Review, -RDP,default_usernameQ_PROTO_RDP,default_username,DefaultUsername,Default Username,,,,,1st Review, -RDP,desktop_heightQ_PROTO_RDP,desktop_height,DesktopHeight,Desktop Height,,,,,1st Review, -RDP,desktop_widthQ_PROTO_RDP,desktop_width,DesktopWidth,Desktop Width,,,,,1st Review, -RDP,domain_asciiQ_PROTO_RDP,domain_ascii,DomainASCII,Domain ASCII,domain,,Domain,,1st Review, -RDP,encryptedQ_PROTO_RDP,encrypted,Encrypted,Encrypted,,,,,1st Review, -RDP,hostname_asciiQ_PROTO_RDP,hostname_ascii,HostnameASCII,Hostname ASCII,,,,,1st Review, -RDP,io_channel_idQ_PROTO_RDP,io_channel_id,IOChannelID,IO Channel ID,,,,,1st Review, -RDP,username_asciiQ_PROTO_RDP,username_ascii,UsernameASCII,Username ASCII,login,,Login,,1st Review, -RDP,versionQ_PROTO_RDP,version,Version,Version,version,,Version,,1st Review, -REDHAT_UPDATE,kernel_archiQ_PROTO_REDHAT_UPDATE,kernel_archi,KernelArch,Kernel Architecture,,,,,1st Review, -REDHAT_UPDATE,kernel_distribQ_PROTO_REDHAT_UPDATE,kernel_distrib,KernelDistrib,Kernel Distribution,,,,,1st Review, -REDHAT_UPDATE,kernel_nameQ_PROTO_REDHAT_UPDATE,kernel_name,KernelName,Kernel Name,object,,Object,,1st Review, -REDHAT_UPDATE,kernel_versionQ_PROTO_REDHAT_UPDATE,kernel_version,KernelVersion,Kernel Version,version,,Version,,1st Review, -REDHAT_UPDATE,package_archiQ_PROTO_REDHAT_UPDATE,package_archi,PkgArch,Package Architecture,,,,,1st Review, -REDHAT_UPDATE,package_distribQ_PROTO_REDHAT_UPDATE,package_distrib,PkgDistrib,Package Distrib,,,,,1st Review, -REDHAT_UPDATE,package_nameQ_PROTO_REDHAT_UPDATE,package_name,PkgName,Package Name,,,,,1st Review, -REDHAT_UPDATE,package_versionQ_PROTO_REDHAT_UPDATE,package_version,PkgVersion,Package Version,,,,,1st Review, -RIP2,authenticationQ_PROTO_RIP2,authentication,Auth,Authentication,,,,,1st Review, -RIP2,ip_addrQ_PROTO_RIP2,ip_addr,IPAddr,IP Address,,,,,1st Review, -RIP2,metricQ_PROTO_RIP2,metric,Metric,Metric,,,,,1st Review, -RIP2,netmaskQ_PROTO_RIP2,netmask,Netmask,Netmask,,,,,1st Review, -RIP2,next_hopeQ_PROTO_RIP2,next_hope,NextHope,Next Hope,,,,,1st Review, -RLOGIN,client_loginQ_PROTO_RLOGIN,client_login,ClientLogin,Client Login,login,,Login,,1st Review, -RLOGIN,server_loginQ_PROTO_RLOGIN,server_login,ServerLogin,Server Login,,,,,1st Review, -RLOGIN,server_passwordQ_PROTO_RLOGIN,server_password,ServerPassword,Server Password,,,,,1st Review, -RLOGIN,speedQ_PROTO_RLOGIN,speed,Speed,Speed,,,,,1st Review, -RLOGIN,term_typeQ_PROTO_RLOGIN,term_type,TermType,Term Type,,,,,1st Review, -RPC,procedureQ_PROTO_RPC,procedure,Procedure,Procedure,,,,,1st Review, -RPC,programQ_PROTO_RPC,program,Program,Program,object,,Object,,1st Review, -RPC,program_versionQ_PROTO_RPC,program_version,ProgramVersion,Program Version,,,,,1st Review, -RPC,stateQ_PROTO_RPC,state,State,State,,,,,1st Review, -RPC,versionQ_PROTO_RPC,version,Version,Version,version,,Version,,1st Review, -RPC,xidQ_PROTO_RPC,xid,XID,X ID,,,,,1st Review, -RSH,loginQ_PROTO_RSH,login,Login,Login,login,,Login,,1st Review, -RSH,remote_loginQ_PROTO_RSH,remote_login,RemoteLogin,Remote Login,,,,,1st Review, -RSH,serverQ_PROTO_RSH,server,Server,Server,dname,,Group,,1st Review, -RSYNC,loginQ_PROTO_RSYNC,login,Login,Login,login,,Login,,1st Review, -RSYNC,moduleQ_PROTO_RSYNC,module,Module,Module,object,,Object,,1st Review, -RSYNC,passwordQ_PROTO_RSYNC,password,Passwd,Password,,,,,1st Review, -RTCP,cnameQ_PROTO_RTCP,cname,CNAME,CNAME,,,,,1st Review, -RTCP,emailQ_PROTO_RTCP,email,Email,Email,,,,,1st Review, -RTCP,locQ_PROTO_RTCP,loc,Loc,Loc,,,,,1st Review, -RTCP,nameQ_PROTO_RTCP,name,Name,Name,objectname,,Object Name,,1st Review, -RTCP,noteQ_PROTO_RTCP,note,Note,Note,,,,,1st Review, -RTCP,phoneQ_PROTO_RTCP,phone,Phone,Phone,,,,,1st Review, -RTCP,rr_cumlostQ_PROTO_RTCP,rr_cumlost,RrCumlost,Rr Cumlost,,,,,1st Review, -RTCP,rr_jitterQ_PROTO_RTCP,rr_jitter,RrJitter,Rr Jitter,,,,,1st Review, -RTCP,rr_ssrc_idQ_PROTO_RTCP,rr_ssrc_id,RrSsrcID,Rr Ssrc ID,,,,,1st Review, -RTCP,ssrcQ_PROTO_RTCP,ssrc,SSrc,S Source,,,,,1st Review, -RTCP,toolQ_PROTO_RTCP,tool,Tool,Tool,,,,,1st Review, -RTMP,app_nameQ_PROTO_RTMP,app_name,AppName,Application Name,objectname,,Object Name,,1st Review, -RTMP,page_urlQ_PROTO_RTMP,page_url,PageURL,Page URL,object,,Object,,1st Review, -RTMP,start_timeQ_PROTO_RTMP,start_time,StartTime,Start Time,,,,,1st Review, -RTMP,stop_timeQ_PROTO_RTMP,stop_time,StopTime,Stop Time,,,,,1st Review, -RTMP,stream_urlQ_PROTO_RTMP,stream_url,StreamURL,Stream URL,url,,URL,,1st Review, -RTP,codec_nameQ_PROTO_RTP,codec_name,CodecName,Codec Name,,,,,1st Review, -RTP,end_sessionQ_PROTO_RTP,end_session,EndSession,End Session,,,,,1st Review, -RTP,mosQ_PROTO_RTP,mos,Mos,Mos,,,,,1st Review, -RTP,mos_satelliteQ_PROTO_RTP,mos_satellite,MosSatellite,Mos Satellite,,,,,1st Review, -RTP,mos_sessionQ_PROTO_RTP,mos_session,MosSession,Mos Session,,,,,1st Review, -RTP,rfactorQ_PROTO_RTP,rfactor,Rfactor,Rfactor,,,,,1st Review, -RTP,ssrcQ_PROTO_RTP,ssrc,SSrc,S Source,,,,,1st Review, -RTP,timestampQ_PROTO_RTP,timestamp,Timestamp,Timestamp,,,,,1st Review, -RTP,unseqQ_PROTO_RTP,unseq,Unseq,Unseq,,,,,1st Review, -RTSP,codeQ_PROTO_RTSP,code,Code,Code,,,,,1st Review, -RTSP,cseqQ_PROTO_RTSP,cseq,Cseq,Cseq,,,,,1st Review, -RTSP,directoryQ_PROTO_RTSP,directory,Directory,Directory,object,,Object,,1st Review, -RTSP,filenameQ_PROTO_RTSP,filename,Filename,Filename,objectname,,Object Name,,1st Review, -RTSP,header_nameQ_PROTO_RTSP,header_name,HeaderName,Header Name,,,,,1st Review, -RTSP,header_statuslineQ_PROTO_RTSP,header_statusline,HeaderStatusline,Header Statusline,,,,,1st Review, -RTSP,header_valueQ_PROTO_RTSP,header_value,HeaderValue,Header Value,,,,,1st Review, -RTSP,media_attr_addrQ_PROTO_RTSP,media_attr_addr,MediaAttrAddr,Media Attribute Address,,,,,1st Review, -RTSP,media_attr_channelQ_PROTO_RTSP,media_attr_channel,MediaAttrChannel,Media Attribute Channel,,,,,1st Review, -RTSP,media_attr_encodingQ_PROTO_RTSP,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review, -RTSP,media_attr_labelQ_PROTO_RTSP,media_attr_label,MediaAttrLabel,Media Attribute Label,,,,,1st Review, -RTSP,media_attr_paramQ_PROTO_RTSP,media_attr_param,MediaAttrParam,Media Attribue Param,,,,,1st Review, -RTSP,media_attr_rateQ_PROTO_RTSP,media_attr_rate,MediaAttrRate,Media Attribute Rate,,,,,1st Review, -RTSP,media_attr_transportQ_PROTO_RTSP,media_attr_transport,MediaAttrTransport,Media Attribue Transport,,,,,1st Review, -RTSP,media_attr_typeQ_PROTO_RTSP,media_attr_type,MediaAttrType,Media Attribue Type,,,,,1st Review, -RTSP,media_attr_valueQ_PROTO_RTSP,media_attr_value,MediaAttrValue,Media Attribute Value,,,,,1st Review, -RTSP,media_formatQ_PROTO_RTSP,media_format,MediaFormat,Media Format,,,,,1st Review, -RTSP,media_protoQ_PROTO_RTSP,media_proto,MediaProto,Media Protocol,,,,,1st Review, -RTSP,media_typeQ_PROTO_RTSP,media_type,MediaType,Media Type,,,,,1st Review, -RTSP,methodQ_PROTO_RTSP,method,Method,Method,command,,Command,,1st Review, -RTSP,serverQ_PROTO_RTSP,server,Server,Server,dname,,Group,,1st Review, -RTSP,server_agentQ_PROTO_RTSP,server_agent,ServerAgent,Server Agent,,,,,1st Review, -RTSP,session_durationQ_PROTO_RTSP,session_duration,SessionDuration,Session Duration,,,,,1st Review, -RTSP,start_timeQ_PROTO_RTSP,start_time,StartTime,Start Time,,,,,1st Review, -RTSP,uriQ_PROTO_RTSP,uri,URI,URI,url,,URL,,1st Review, -RTSP,uri_fullQ_PROTO_RTSP,uri_full,URIFull,URI Full,,,,,1st Review, -RTSP,urilast64Q_PROTO_RTSP,urilast64,URILast64,URI Last 64,,,,,1st Review, -RTSP,urilenQ_PROTO_RTSP,urilen,URILen,URI Length,,,,,1st Review, -RTSP,user_agentQ_PROTO_RTSP,user_agent,UserAgent,User Agent,,,,,1st Review, -RTSP,versionQ_PROTO_RTSP,version,Version,Version,version,,Version,,1st Review, -S1AP,ep_enb_ue_idQ_PROTO_S1AP,ep_enb_ue_id,EPENBUEID,EP ENB UE ID,,,,,1st Review, -S1AP,ep_ieQ_PROTO_S1AP,ep_ie,EPIE,EP IE,,,,,1st Review, -S1AP,ep_ie_cgiQ_PROTO_S1AP,ep_ie_cgi,EPIECGI,EP IE CGI,,,,,1st Review, -S1AP,ep_ie_nameQ_PROTO_S1AP,ep_ie_name,EPIEName,EP IE Name,,,,,1st Review, -S1AP,ep_ie_rabQ_PROTO_S1AP,ep_ie_rab,EPIERAB,EP IE RAB,,,,,1st Review, -S1AP,ep_ie_rab_addrQ_PROTO_S1AP,ep_ie_rab_addr,EPIERABAddr,EP IE RAB Address,,,,,1st Review, -S1AP,ep_ie_rab_teidQ_PROTO_S1AP,ep_ie_rab_teid,EPIERABTEID,EP IE RAB TEID,,,,,1st Review, -S1AP,ep_ie_taiQ_PROTO_S1AP,ep_ie_tai,EPIETAE,EP IE TAI,,,,,1st Review, -S1AP,ep_mme_ue_idQ_PROTO_S1AP,ep_mme_ue_id,EPMMEUEID,EP MME UE ID,,,,,1st Review, -S1AP,ep_nameQ_PROTO_S1AP,ep_name,EPName,EP Name,object,,Object,,1st Review, -SAMSUNG_APPS,is_smartphoneQ_PROTO_SAMSUNG_APPS,is_smartphone,IsSmartphone,Is Smartphone,object,,Object,,1st Review, -SCCP,call_durationQ_PROTO_SCCP,call_duration,CallDuration,Call Duration,,,,,1st Review, -SCCP,calleeQ_PROTO_SCCP,callee,Callee,Callee,,,,,1st Review, -SCCP,calleenameQ_PROTO_SCCP,calleename,CalleeName,Callee Name,,,,,1st Review, -SCCP,callerQ_PROTO_SCCP,caller,Caller,Caller,,,,,1st Review, -SCCP,callernameQ_PROTO_SCCP,callername,CallerName,Caller Name,,,,,1st Review, -SCCP,call_idQ_PROTO_SCCP,call_id,CallID,Call ID,,,,,1st Review, -SCCP,callstateQ_PROTO_SCCP,callstate,Callstate,Callstate,,,,,1st Review, -SCCP,call_wayQ_PROTO_SCCP,call_way,CallWay,Call Way,,,,,1st Review, -SCCP,codecQ_PROTO_SCCP,codec,Codec,Codec,,,,,1st Review, -SCCP,device_nameQ_PROTO_SCCP,device_name,DeviceName,Device Name,,,,,1st Review, -SCCP,device_typeQ_PROTO_SCCP,device_type,DeviceType,Device Type,,,,,1st Review, -SCCP,keypadQ_PROTO_SCCP,keypad,Keypad,Keypad,,,,,1st Review, -SCCP,message_typeQ_PROTO_SCCP,message_type,MsgType,Message Type,object,,Object,,1st Review, -SCCP,nb_byt_rcvQ_PROTO_SCCP,nb_byt_rcv,NBBytRcv,NB Byte Rcv,,,,,1st Review, -SCCP,nb_byt_sentQ_PROTO_SCCP,nb_byt_sent,NBBytSent,NB Byte Sent,,,,,1st Review, -SCCP,nb_pkt_lostQ_PROTO_SCCP,nb_pkt_lost,NBPktLost,NB Packet Lost,,,,,1st Review, -SCCP,nb_pkt_rcvQ_PROTO_SCCP,nb_pkt_rcv,NBPktRcv,NB Packet Receive,,,,,1st Review, -SCCP,nb_pkt_sentQ_PROTO_SCCP,nb_pkt_sent,NBPktSent,NB Packet Sent,,,,,1st Review, -SCCP,softkeyeventQ_PROTO_SCCP,softkeyevent,Softkeyevent,Softkey Event,,,,,1st Review, -SCCP,start_timeQ_PROTO_SCCP,start_time,StartTime,Start Time,,,,,1st Review, -SCCP,stats_jitterQ_PROTO_SCCP,stats_jitter,StatsJitter,Stats Jitter,,,,,1st Review, -SCCP,stats_latencyQ_PROTO_SCCP,stats_latency,StatsLatency,Stats Latency,,,,,1st Review, -SCTP,chunk_data_protoQ_PROTO_SCTP,chunk_data_proto,ChunkDataProto,Chunk Data Protocol,,,,,1st Review, -SCTP,chunk_data_tsnQ_PROTO_SCTP,chunk_data_tsn,ChunkDataTSN,Chunk Data TSN,,,,,1st Review, -SECONDLIFE,chat_typeQ_PROTO_SECONDLIFE,chat_type,ChatType,Chat Type,,,,,1st Review, -SECONDLIFE,loginQ_PROTO_SECONDLIFE,login,Login,Login,login,,Login,,1st Review, -SECONDLIFE,messageQ_PROTO_SECONDLIFE,message,Msg,Message,object,,Object,,1st Review, -SECONDLIFE,message_typeQ_PROTO_SECONDLIFE,message_type,MsgType,Message Type,,,,,1st Review, -SECONDLIFE,source_nameQ_PROTO_SECONDLIFE,source_name,SourceName,Source Name,,,,,1st Review, -SECONDLIFE,source_typeQ_PROTO_SECONDLIFE,source_type,SourceType,Source Type,,,,,1st Review, -SIP,accept_languageQ_PROTO_SIP,accept_language,AcceptLanguage,Accept Language,,,,,1st Review, -SIP,alert_infoQ_PROTO_SIP,alert_info,AlertInfo,Alert Information,,,,,1st Review, -SIP,call_durationQ_PROTO_SIP,call_duration,CallDuration,Call Duration,,,,,1st Review, -SIP,calleeQ_PROTO_SIP,callee,Callee,Callee,,,,,1st Review, -SIP,callee_addrQ_PROTO_SIP,callee_addr,CalleeAddr,Callee Address,,,,,1st Review, -SIP,callee_domainQ_PROTO_SIP,callee_domain,CalleeDomain,Callee Domain,,,,,1st Review, -SIP,callee_e164Q_PROTO_SIP,callee_e164,CalleeE164,Callee E164,,,,,1st Review, -SIP,callee_nicknameQ_PROTO_SIP,callee_nickname,CalleeNickname,Callee Nickname,,,,,1st Review, -SIP,callee_server_agentQ_PROTO_SIP,callee_server_agent,CalleeServerAgent,Callee Server Agent,,,,,1st Review, -SIP,callee_user_agentQ_PROTO_SIP,callee_user_agent,CalleeUserAgent,Callee User Agent,,,,,1st Review, -SIP,callee_user_phoneQ_PROTO_SIP,callee_user_phone,CalleeUserPhone,Callee User Phone,,,,,1st Review, -SIP,callerQ_PROTO_SIP,caller,Caller,Caller,,,,,1st Review, -SIP,caller_addrQ_PROTO_SIP,caller_addr,CallerAddr,Caller Address,,,,,1st Review, -SIP,caller_domainQ_PROTO_SIP,caller_domain,CallerDomain,Caller Domain,,,,,1st Review, -SIP,caller_e164Q_PROTO_SIP,caller_e164,CallerE164,Caller E164,,,,,1st Review, -SIP,caller_nicknameQ_PROTO_SIP,caller_nickname,CallerNickname,Caller Nickname,,,,,1st Review, -SIP,caller_server_agentQ_PROTO_SIP,caller_server_agent,CallerServerAgent,Caller Server Agent,,,,,1st Review, -SIP,caller_user_agentQ_PROTO_SIP,caller_user_agent,CallerUserAgent,Caller User Agent,,,,,1st Review, -SIP,caller_user_phoneQ_PROTO_SIP,caller_user_phone,CallerUserPhone,Caller User Phone,,,,,1st Review, -SIP,call_idQ_PROTO_SIP,call_id,CallID,Call ID,,,,,1st Review, -SIP,call_infoQ_PROTO_SIP,call_info,CallInfo,Call Information,,,,,1st Review, -SIP,confcall_calleeQ_PROTO_SIP,confcall_callee,ConfCallCallee,Conference Call Callee,,,,,1st Review, -SIP,confcall_callerQ_PROTO_SIP,confcall_caller,ConfCallCaller,Conference Call Caller,,,,,1st Review, -SIP,connection_info_addrQ_PROTO_SIP,connection_info_addr,ConnectionInfoAddr,Connection Info Address,,,,,1st Review, -SIP,connection_info_addr_typeQ_PROTO_SIP,connection_info_addr_type,ConnectionInfoAddrType,Connection Info Address Type,,,,,1st Review, -SIP,connection_info_net_typeQ_PROTO_SIP,connection_info_net_type,ConnectionInfoNetType,Connection Info Net Type,,,,,1st Review, -SIP,contactQ_PROTO_SIP,contact,Contact,Contact,,,,,1st Review, -SIP,cseqQ_PROTO_SIP,cseq,Cseq,Cseq,,,,,1st Review, -SIP,dateQ_PROTO_SIP,date,Date,Date,,,,,1st Review, -SIP,end_statusQ_PROTO_SIP,end_status,EndStatus,End Status,,,,,1st Review, -SIP,expiresQ_PROTO_SIP,expires,Expires,Expires,,,,,1st Review, -SIP,fromQ_PROTO_SIP,from,From,From,,,,,1st Review, -SIP,media_attr_addrQ_PROTO_SIP,media_attr_addr,MediaAttrAddr,Media Attribute Address,,,,,1st Review, -SIP,media_attr_channelQ_PROTO_SIP,media_attr_channel,MediaAttrChannel,Media Attribute Channel,,,,,1st Review, -SIP,media_attr_encodingQ_PROTO_SIP,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review, -SIP,media_attr_labelQ_PROTO_SIP,media_attr_label,MediaAttrLabel,Media Attribute Label,,,,,1st Review, -SIP,media_attr_paramQ_PROTO_SIP,media_attr_param,MediaAttrParam,Media Attribue Param,,,,,1st Review, -SIP,media_attr_rateQ_PROTO_SIP,media_attr_rate,MediaAttrRate,Media Attribute Rate,,,,,1st Review, -SIP,media_attr_transportQ_PROTO_SIP,media_attr_transport,MediaAttrTransport,Media Attribue Transport,,,,,1st Review, -SIP,media_attr_typeQ_PROTO_SIP,media_attr_type,MediaAttrType,Media Attribue Type,,,,,1st Review, -SIP,media_attr_valueQ_PROTO_SIP,media_attr_value,MediaAttrValue,Media Attribute Value,,,,,1st Review, -SIP,media_formatQ_PROTO_SIP,media_format,MediaFormat,Media Format,,,,,1st Review, -SIP,media_protoQ_PROTO_SIP,media_proto,MediaProto,Media Protocol,,,,,1st Review, -SIP,media_typeQ_PROTO_SIP,media_type,MediaType,Media Type,,,,,1st Review, -SIP,methodQ_PROTO_SIP,method,Method,Method,command,,Command,,1st Review, -SIP,mime_typeQ_PROTO_SIP,mime_type,MIMEType,MIMEType,,,,,1st Review, -SIP,p_asserted_idQ_PROTO_SIP,p_asserted_id,PAssertedID,P Asserted ID,,,,,1st Review, -SIP,proxy_authorizationQ_PROTO_SIP,proxy_authorization,ProxyAuthorization,Proxy Authorization,,,,,1st Review, -SIP,reasonQ_PROTO_SIP,reason,Reason,Reason,,,,,1st Review, -SIP,record_routeQ_PROTO_SIP,record_route,RecordRoute,Record Route,,,,,1st Review, -SIP,remote_party_idQ_PROTO_SIP,remote_party_id,RemotePartyID,Remote Party ID,,,,,1st Review, -SIP,reply_codeQ_PROTO_SIP,reply_code,ReplyCode,Reply Code,,,,,1st Review, -SIP,request_call_idQ_PROTO_SIP,request_call_id,RequestCallID,Request Call ID,,,,,1st Review, -SIP,server_agentQ_PROTO_SIP,server_agent,ServerAgent,Server Agent,,,,,1st Review, -SIP,session_durationQ_PROTO_SIP,session_duration,SessionDuration,Session Duration,,,,,1st Review, -SIP,setup_delayQ_PROTO_SIP,setup_delay,SetupDelay,Setup Delay,,,,,1st Review, -SIP,start_timeQ_PROTO_SIP,start_time,StartTime,Start Time,,,,,1st Review, -SIP,subjectQ_PROTO_SIP,subject,Subject,Subject,subject,,Subject,,1st Review, -SIP,time_before_spkQ_PROTO_SIP,time_before_spk,TimeBeforeSpk,Time Before Spk,,,,,1st Review, -SIP,toQ_PROTO_SIP,to,To,To,,,,,1st Review, -SIP,uriQ_PROTO_SIP,uri,URI,URI,url,,URL,,1st Review, -SIP,user_agentQ_PROTO_SIP,user_agent,UserAgent,User Agent,,,,,1st Review, -SIP,user_idQ_PROTO_SIP,user_id,UserID,User ID,login,,Login,,1st Review, -SIP,viaQ_PROTO_SIP,via,Via,Via,,,,,1st Review, -SIP,www_authenticateQ_PROTO_SIP,www_authenticate,WWWAuthenticate,WWW Authenticate,,,,,1st Review, -SKYBLOG,loginQ_PROTO_SKYBLOG,login,Login,Login,login,,Login,,1st Review, -SKYBLOG,passwordQ_PROTO_SKYBLOG,password,Passwd,Password,,,,,1st Review, -SKYPE,nearest_serviceQ_PROTO_SKYPE,nearest_service,NearestService,Nearest Service,,,,,1st Review, -SKYPE,serviceQ_PROTO_SKYPE,service,Service,Service,object,,Object,,1st Review, -SKYPE,service_durationQ_PROTO_SKYPE,service_duration,ServiceDuration,Service Duration,,,,,1st Review, -SKYPE,service_idQ_PROTO_SKYPE,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review, -SKYPE,versionQ_PROTO_SKYPE,version,Version,Version,version,,Version,,1st Review, -SLSK,file_idQ_PROTO_SLSK,file_id,FileID,File ID,,,,,1st Review, -SLSK,filenameQ_PROTO_SLSK,filename,Filename,Filename,objectname,,Object Name,,1st Review, -SLSK,filesizeQ_PROTO_SLSK,filesize,FileSize,File Size,,,,,1st Review, -SLSK,loginQ_PROTO_SLSK,login,Login,Login,login,,Login,,1st Review, -SLSK,passwordQ_PROTO_SLSK,password,Passwd,Password,,,,,1st Review, -SLSK,queryQ_PROTO_SLSK,query,Query,Query,command,,Command,,1st Review, -SLSK,transfer_wayQ_PROTO_SLSK,transfer_way,TransferWay,Transfer Way,,,,,1st Review, -SLSK,versionQ_PROTO_SLSK,version,Version,Version,version,,Version,,1st Review, -SMB,attributesQ_PROTO_SMB,attributes,Attributes,Atributes,,,,,1st Review, -SMB,command_stringQ_PROTO_SMB,command_string,CommandString,Command String,command,,Command,,1st Review, -SMB,dialectQ_PROTO_SMB,dialect,Dialect,Dialect,,,,,1st Review, -SMB,directoryQ_PROTO_SMB,directory,Directory,Directory,object,,Object,,1st Review, -SMB,domainQ_PROTO_SMB,domain,Domain,Domain,domain,,Domain,,1st Review, -SMB,end_of_fileQ_PROTO_SMB,end_of_file,EndOfFile,End Of File,,,,,1st Review, -SMB,ext_attributesQ_PROTO_SMB,ext_attributes,ExtAttributes,External Attributes,,,,,1st Review, -SMB,file_attributesQ_PROTO_SMB,file_attributes,FileAttributes,File Attributes,,,,,1st Review, -SMB,file_chunk_data_offsetQ_PROTO_SMB,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -SMB,file_chunk_lenQ_PROTO_SMB,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -SMB,filenameQ_PROTO_SMB,filename,Filename,Filename,objectname,,Object Name,,1st Review, -SMB,filesizeQ_PROTO_SMB,filesize,FileSize,File Size,,,,,1st Review, -SMB,loadwayQ_PROTO_SMB,loadway,Loadway,Loadway,,,,,1st Review, -SMB,loginQ_PROTO_SMB,login,Login,Login,login,,Login,,1st Review, -SMB,native_lan_managerQ_PROTO_SMB,native_lan_manager,NativeLANManager,Native LAN Manager,,,,,1st Review, -SMB,native_osQ_PROTO_SMB,native_os,NativeOS,Native Operating System,,,,,1st Review, -SMB,nt_statusQ_PROTO_SMB,nt_status,NTStatus,NT Status,,,,,1st Review, -SMB,pathQ_PROTO_SMB,path,Path,Path,url,,URL,,1st Review, -SMB,process_idQ_PROTO_SMB,process_id,ProcessID,Process ID,,,,,1st Review, -SMB,query_idQ_PROTO_SMB,query_id,QueryID,Query ID,,,,,1st Review, -SMB,search_attributesQ_PROTO_SMB,search_attributes,SearchAttribs,Search Attributes,,,,,1st Review, -SMB,search_patternQ_PROTO_SMB,search_pattern,SearchPtrn,Search Pattern,,,,,1st Review, -SMB,search_storage_typeQ_PROTO_SMB,search_storage_type,SearchStorageType,Search Storage Type,,,,,1st Review, -SMB,security_blob_lenQ_PROTO_SMB,security_blob_len,SecurityBlobLen,Security Blob Length,,,,,1st Review, -SMB,serviceQ_PROTO_SMB,service,Service,Service,process,,Process,,1st Review, -SMB,user_idQ_PROTO_SMB,user_id,UserID,User ID,,,,,1st Review, -SMB,versionQ_PROTO_SMB,version,Version,Version,version,,Version,,1st Review, -SMPP,receiverQ_PROTO_SMPP,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -SMPP,senderQ_PROTO_SMPP,sender,Sender,Sender,sender,,Sender,,1st Review, -SMTP,attach_dispositionQ_PROTO_SMTP,attach_disposition,AttachDisposition,Attach Disposition,,,,,1st Review, -SMTP,attach_sizeQ_PROTO_SMTP,attach_size,AttachSize,Attach Size,,,,,1st Review, -SMTP,attach_transfer_encodingQ_PROTO_SMTP,attach_transfer_encoding,AttachTransferEncoding,Attach Transfer Encoding,,,,,1st Review, -SMTP,attach_typeQ_PROTO_SMTP,attach_type,AttachType,Attach Type,,,,,1st Review, -SMTP,dateQ_PROTO_SMTP,date,Date,Date,,,,,1st Review, -SMTP,email_indexQ_PROTO_SMTP,email_index,EmailIndex,Email Index,,,,,1st Review, -SMTP,attach_filenameQ_PROTO_SMTP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -SMTP,greeting_messageQ_PROTO_SMTP,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review, -SMTP,indexQ_PROTO_SMTP,index,Index,Index,,,,,1st Review, -SMTP,loginQ_PROTO_SMTP,login,Login,Login,login,,Login,,1st Review, -SMTP,methodQ_PROTO_SMTP,method,Method,Method,command,,Command,,1st Review, -SMTP,mime_typeQ_PROTO_SMTP,mime_type,MIMEType,MIMEType,,,,,1st Review, -SMTP,msg_idQ_PROTO_SMTP,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review, -SMTP,passwordQ_PROTO_SMTP,password,Passwd,Password,,,,,1st Review, -SMTP,received_by_ipQ_PROTO_SMTP,received_by_ip,RcvdByIP,Received By IP,,,,,1st Review, -SMTP,received_by_nameQ_PROTO_SMTP,received_by_name,RcvdByName,Received By Name,,,,,1st Review, -SMTP,received_dateQ_PROTO_SMTP,received_date,RcvdDate,Received Date,,,,,1st Review, -SMTP,received_from_ipQ_PROTO_SMTP,received_from_ip,RcvdFromIP,Received From IP,,,,,1st Review, -SMTP,received_from_nameQ_PROTO_SMTP,received_from_name,RcvdFromName,Received From Name,,,,,1st Review, -SMTP,received_server_agentQ_PROTO_SMTP,received_server_agent,RcvdServerAgent,Received Server Agent,,,,,1st Review, -SMTP,received_withQ_PROTO_SMTP,received_with,RcvdWith,Received With,,,,,1st Review, -SMTP,receiverQ_PROTO_SMTP,receiver,Receiver,Receiver,,,,,1st Review, -SMTP,receiver_aliasQ_PROTO_SMTP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -SMTP,receiver_domainQ_PROTO_SMTP,receiver_domain,ReceiverDomain,Receiver Domain,,,,,1st Review, -SMTP,receiver_emailQ_PROTO_SMTP,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -SMTP,receiver_rcpttoQ_PROTO_SMTP,receiver_rcptto,ReceiverRcptto,Receiver Receipt to,,,,,1st Review, -SMTP,receiver_typeQ_PROTO_SMTP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -SMTP,replytoQ_PROTO_SMTP,replyto,ReplyTo,Reply To,,,,,1st Review, -SMTP,response_codeQ_PROTO_SMTP,response_code,ResponseCode,Response Code,object,,Object,,1st Review, -SMTP,senderQ_PROTO_SMTP,sender,Sender,Sender,,,,,1st Review, -SMTP,sender_aliasQ_PROTO_SMTP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -SMTP,sender_domainQ_PROTO_SMTP,sender_domain,SenderDomain,Sender Domain,,,,,1st Review, -SMTP,sender_emailQ_PROTO_SMTP,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -SMTP,sender_mailfromQ_PROTO_SMTP,sender_mailfrom,SenderMailFrom,Sender Mail From,,,,,1st Review, -SMTP,serverQ_PROTO_SMTP,server,Server,Server,dname,,Group,,1st Review, -SMTP,server_agentQ_PROTO_SMTP,server_agent,ServerAgent,Server Agent,,,,,1st Review, -SMTP,server_responseQ_PROTO_SMTP,server_response,ServerResp,Server Response,,,,,1st Review, -SMTP,durationQ_PROTO_SMTP,duration,SessionDuration,Session Duration,,,,,1st Review, -SMTP,start_timeQ_PROTO_SMTP,start_time,StartTime,Start Time,,,,,1st Review, -SMTP,stop_timeQ_PROTO_SMTP,stop_time,StopTime,Stop Time,,,,,1st Review, -SMTP,subjectQ_PROTO_SMTP,subject,Subject,Subject,subject,,Subject,,1st Review, -SMTP,user_agentQ_PROTO_SMTP,user_agent,UserAgent,User Agent,,,,,1st Review, -SMTP,xmailerQ_PROTO_SMTP,xmailer,Xmailer,Xmailer,,,,,1st Review, -SNMP,communityQ_PROTO_SNMP,community,Community,Community,,,,,1st Review, -SNMP,methodQ_PROTO_SNMP,method,Method,Method,command,,Command,,1st Review, -SNMP,nameQ_PROTO_SNMP,name,Name,Name,subject,,Subject,,1st Review, -SNMP,oidQ_PROTO_SNMP,oid,OID,OID,object,,Object,,1st Review, -SNMP,request_idQ_PROTO_SNMP,request_id,RequestID,Request ID,processid,,Process ID,,1st Review, -SNMP,value_lenQ_PROTO_SNMP,value_len,ValueLen,Value Len,,,,,1st Review, -SNMP,value_typeQ_PROTO_SNMP,value_type,ValueType,Value Type,objectname,,Object Name,,1st Review, -SNPP,caller_idQ_PROTO_SNPP,caller_id,CallerID,Caller ID,,,,,1st Review, -SNPP,loginQ_PROTO_SNPP,login,Login,Login,login,,Login,,1st Review, -SNPP,methodQ_PROTO_SNPP,method,Method,Method,command,,Command,,1st Review, -SNPP,messageQ_PROTO_SNPP,message,Msg,Message,object,,Object,,1st Review, -SNPP,pager_idQ_PROTO_SNPP,pager_id,PagerID,Pager ID,,,,,1st Review, -SNPP,passwordQ_PROTO_SNPP,password,Passwd,Password,,,,,1st Review, -SOCKS4,remote_addrQ_PROTO_SOCKS4,remote_addr,RemoteAddr,Remote Address,,,,,1st Review, -SOCKS5,remote_addrQ_PROTO_SOCKS5,remote_addr,RemoteAddr,Remote Address,,,,,1st Review, -SOCKS5,remote_nameQ_PROTO_SOCKS5,remote_name,RemoteName,Remote Name,object,,Object,,1st Review, -SPDY,header_countQ_PROTO_SPDY,header_count,HeaderCount,Header Count,,,,,1st Review, -SPDY,header_nameQ_PROTO_SPDY,header_name,HeaderName,Header Name,object,,Object,,1st Review, -SPDY,header_valueQ_PROTO_SPDY,header_value,HeaderValue,Header Value,,,,,1st Review, -SPDY,lengthQ_PROTO_SPDY,length,Length,Length,size,,Size,,1st Review, -SPDY,status_codeQ_PROTO_SPDY,status_code,StatusCode,Status Code,,,,,1st Review, -SPDY,stream_idQ_PROTO_SPDY,stream_id,StreamID,Stream ID,processid,,Process ID,,1st Review, -SPID,divergenceQ_PROTO_SPID,divergence,Divergence,Divergence,,,,,1st Review, -SPID,found_protocolQ_PROTO_SPID,found_protocol,FoundProtocol,Found Protocol,,,,,1st Review, -SQUIRRELMAIL,actionQ_PROTO_SQUIRRELMAIL,action,Action,Action,object,,Object,,1st Review, -SQUIRRELMAIL,attach_idQ_PROTO_SQUIRRELMAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -SQUIRRELMAIL,attach_sizeQ_PROTO_SQUIRRELMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -SQUIRRELMAIL,attach_typeQ_PROTO_SQUIRRELMAIL,attach_type,AttachType,Attach Type,,,,,1st Review, -SQUIRRELMAIL,contact_aliasQ_PROTO_SQUIRRELMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -SQUIRRELMAIL,contact_emailQ_PROTO_SQUIRRELMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review, -SQUIRRELMAIL,dateQ_PROTO_SQUIRRELMAIL,date,Date,Date,,,,,1st Review, -SQUIRRELMAIL,draftQ_PROTO_SQUIRRELMAIL,draft,Draft,Draft,,,,,1st Review, -SQUIRRELMAIL,attach_filenameQ_PROTO_SQUIRRELMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -SQUIRRELMAIL,folderQ_PROTO_SQUIRRELMAIL,folder,Folder,Folder,,,,,1st Review, -SQUIRRELMAIL,loginQ_PROTO_SQUIRRELMAIL,login,Login,Login,login,,Login,,1st Review, -SQUIRRELMAIL,login_serverQ_PROTO_SQUIRRELMAIL,login_server,LoginServer,Login Server,,,,,1st Review, -SQUIRRELMAIL,msg_idQ_PROTO_SQUIRRELMAIL,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review, -SQUIRRELMAIL,msglist_dateQ_PROTO_SQUIRRELMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -SQUIRRELMAIL,msglist_folderQ_PROTO_SQUIRRELMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -SQUIRRELMAIL,msglist_msgidQ_PROTO_SQUIRRELMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -SQUIRRELMAIL,msglist_receiverQ_PROTO_SQUIRRELMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -SQUIRRELMAIL,msglist_receiver_aliasQ_PROTO_SQUIRRELMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -SQUIRRELMAIL,msglist_receiver_emailQ_PROTO_SQUIRRELMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -SQUIRRELMAIL,msglist_senderQ_PROTO_SQUIRRELMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -SQUIRRELMAIL,msglist_sender_aliasQ_PROTO_SQUIRRELMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -SQUIRRELMAIL,msglist_sender_emailQ_PROTO_SQUIRRELMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -SQUIRRELMAIL,msglist_subjectQ_PROTO_SQUIRRELMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -SQUIRRELMAIL,passwordQ_PROTO_SQUIRRELMAIL,password,Passwd,Password,,,,,1st Review, -SQUIRRELMAIL,receiverQ_PROTO_SQUIRRELMAIL,receiver,Receiver,Receiver,,,,,1st Review, -SQUIRRELMAIL,receiver_aliasQ_PROTO_SQUIRRELMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -SQUIRRELMAIL,receiver_emailQ_PROTO_SQUIRRELMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -SQUIRRELMAIL,receiver_typeQ_PROTO_SQUIRRELMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -SQUIRRELMAIL,senderQ_PROTO_SQUIRRELMAIL,sender,Sender,Sender,,,,,1st Review, -SQUIRRELMAIL,sender_aliasQ_PROTO_SQUIRRELMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -SQUIRRELMAIL,sender_emailQ_PROTO_SQUIRRELMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -SQUIRRELMAIL,subjectQ_PROTO_SQUIRRELMAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -SSH,rttQ_PROTO_SSH,rtt,RTT,RTT,subject,,Subject,,1st Review, -SSL,common_nameQ_PROTO_SSL,common_name,CommonName,Common Name,object,,Object,,1st Review, -SSL,issuerQ_PROTO_SSL,issuer,Issuer,Issuer,account,,Account,,1st Review, -SSL,server_nameQ_PROTO_SSL,server_name,ServerName,Server Name,dname,,Group,,1st Review, -SSL,subject_alt_nameQ_PROTO_SSL,subject_alt_name,SubjectAltName,Subject Alternate Name,subject,,Subject,,1st Review, -SSL,supported_next_protocolQ_PROTO_SSL,supported_next_protocol,SupportedNextProto,Supported Next Protocol,command,,Command,,1st Review, -SSL,validity_not_afterQ_PROTO_SSL,validity_not_after,ValidityNotAfter,Validity Not After,,,,,1st Review, -SSL,validity_not_beforeQ_PROTO_SSL,validity_not_before,ValidityNotBefore,Validity Not Before,,,,,1st Review, -STP,bridge_addrQ_PROTO_STP,bridge_addr,BridgeAddr,Bridge Address,,,,,1st Review, -STP,root_addrQ_PROTO_STP,root_addr,RootAddr,Root Address,,,,,1st Review, -STP,root_path_costQ_PROTO_STP,root_path_cost,RootPathCost,Root Path Cost,,,,,1st Review, -SYSLOG,codeQ_PROTO_SYSLOG,code,Code,Code,object,,Object,,1st Review, -T38,calleeQ_PROTO_T38,callee,Callee,Callee,,,,,1st Review, -T38,callerQ_PROTO_T38,caller,Caller,Caller,,,,,1st Review, -T38,fax_message_numberQ_PROTO_T38,fax_message_number,FaxMsgNum,Fax Message Number,,,,,1st Review, -TAGGED,loginQ_PROTO_TAGGED,login,Login,Login,login,,Login,,1st Review, -TAGGED,passwordQ_PROTO_TAGGED,password,Passwd,Password,,,,,1st Review, -TANGO,call_durationQ_PROTO_TANGO,call_duration,CallDuration,Call Duration,,,,,1st Review, -TANGO,calleeQ_PROTO_TANGO,callee,Callee,Callee,,,,,1st Review, -TANGO,callee_idQ_PROTO_TANGO,callee_id,CalleeID,Callee ID,,,,,1st Review, -TANGO,callerQ_PROTO_TANGO,caller,Caller,Caller,,,,,1st Review, -TANGO,caller_idQ_PROTO_TANGO,caller_id,CallerID,Caller ID,,,,,1st Review, -TANGO,call_idQ_PROTO_TANGO,call_id,CallID,Call ID,,,,,1st Review, -TANGO,device_idQ_PROTO_TANGO,device_id,DeviceID,Device ID,,,,,1st Review, -TANGO,loginQ_PROTO_TANGO,login,Login,Login,login,,Login,,1st Review, -TANGO,phone_numberQ_PROTO_TANGO,phone_number,PhoneNum,Phone Number,,,,,1st Review, -TANGO,serviceQ_PROTO_TANGO,service,Service,Service,process,,Process,,1st Review, -TANGO,user_emailQ_PROTO_TANGO,user_email,UserEmail,User Email,sender,,Sender,,1st Review, -TANGO,user_idQ_PROTO_TANGO,user_id,UserID,User ID,,,,,1st Review, -TCHATCHE,loginQ_PROTO_TCHATCHE,login,Login,Login,login,,Login,,1st Review, -TCHATCHE,passwordQ_PROTO_TCHATCHE,password,Passwd,Password,,,,,1st Review, -TCP,ack_numberQ_PROTO_TCP,ack_number,AckNumber,Acknowledge Number,,,,,1st Review, -TCP,cnx_durationQ_PROTO_TCP,cnx_duration,CnxDuration,Cnx Duration,,,,,1st Review, -TCP,loss_countQ_PROTO_TCP,loss_count,LossCount,Loss Count,,,,,1st Review, -TCP,previous_lostQ_PROTO_TCP,previous_lost,PreviousLost,Previous Lost,,,,,1st Review, -TCP,rttQ_PROTO_TCP,rtt,RTT,RTT,,,,,1st Review, -TCP,rtt_appQ_PROTO_TCP,rtt_app,RTTApp,RTTApp,,,,,1st Review, -TCP,seq_numberQ_PROTO_TCP,seq_number,SeqNum,Sequence Number,,,,,1st Review, -TCP,start_timeQ_PROTO_TCP,start_time,StartTime,Start Time,,,,,1st Review, -TCP,tsecrQ_PROTO_TCP,tsecr,Tsecr,Tsecr,,,,,1st Review, -TCP,tsvalQ_PROTO_TCP,tsval,Tsval,Tsval,,,,,1st Review, -TDS,applicationQ_PROTO_TDS,application,App,Application,,,,,1st Review, -TDS,database_nameQ_PROTO_TDS,database_name,DatabaseName,Database Name,object,,Object,,1st Review, -TDS,hostnameQ_PROTO_TDS,hostname,Hostname,Hostname,,,,,1st Review, -TDS,languageQ_PROTO_TDS,language,Language,Language,,,,,1st Review, -TDS,libraryQ_PROTO_TDS,library,Library,Library,,,,,1st Review, -TDS,loginQ_PROTO_TDS,login,Login,Login,login,,Login,,1st Review, -TDS,passwordQ_PROTO_TDS,password,Passwd,Password,,,,,1st Review, -TDS,queryQ_PROTO_TDS,query,Query,Query,command,,Command,,1st Review, -TDS,serverQ_PROTO_TDS,server,Server,Server,dname,,Group,,1st Review, -TEAMSPEAK,channelQ_PROTO_TEAMSPEAK,channel,Channel,Channel,,,,,1st Review, -TEAMSPEAK,channel_actionQ_PROTO_TEAMSPEAK,channel_action,ChannelAction,Channel Action,,,,,1st Review, -TEAMSPEAK,channel_descriptionQ_PROTO_TEAMSPEAK,channel_description,ChannelDescription,Channel Description,,,,,1st Review, -TEAMSPEAK,channel_idQ_PROTO_TEAMSPEAK,channel_id,ChannelID,Channel ID,,,,,1st Review, -TEAMSPEAK,channel_nameQ_PROTO_TEAMSPEAK,channel_name,ChannelName,Channel Name,,,,,1st Review, -TEAMSPEAK,channel_topicQ_PROTO_TEAMSPEAK,channel_topic,ChannelTopic,Channel Topic,,,,,1st Review, -TEAMSPEAK,channel_userQ_PROTO_TEAMSPEAK,channel_user,ChannelUser,Channel User,,,,,1st Review, -TEAMSPEAK,client_platformQ_PROTO_TEAMSPEAK,client_platform,ClientPlatform,Client Platform,,,,,1st Review, -TEAMSPEAK,client_softwareQ_PROTO_TEAMSPEAK,client_software,ClientSoftware,Client Software,,,,,1st Review, -TEAMSPEAK,client_uidQ_PROTO_TEAMSPEAK,client_uid,ClientUID,Client UID,,,,,1st Review, -TEAMSPEAK,client_versionQ_PROTO_TEAMSPEAK,client_version,ClientVersion,Client Version,,,,,1st Review, -TEAMSPEAK,contact_aliasQ_PROTO_TEAMSPEAK,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -TEAMSPEAK,contact_uidQ_PROTO_TEAMSPEAK,contact_uid,ContactUID,Contact UID,,,,,1st Review, -TEAMSPEAK,greeting_messageQ_PROTO_TEAMSPEAK,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review, -TEAMSPEAK,loginQ_PROTO_TEAMSPEAK,login,Login,Login,login,,Login,,1st Review, -TEAMSPEAK,messageQ_PROTO_TEAMSPEAK,message,Msg,Message,object,,Object,,1st Review, -TEAMSPEAK,message_scopeQ_PROTO_TEAMSPEAK,message_scope,MsgScope,Message Scope,,,,,1st Review, -TEAMSPEAK,nicknameQ_PROTO_TEAMSPEAK,nickname,Nickname,Nickname,,,,,1st Review, -TEAMSPEAK,passwordQ_PROTO_TEAMSPEAK,password,Passwd,Password,,,,,1st Review, -TEAMSPEAK,receiverQ_PROTO_TEAMSPEAK,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -TEAMSPEAK,receiver_uidQ_PROTO_TEAMSPEAK,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review, -TEAMSPEAK,senderQ_PROTO_TEAMSPEAK,sender,Sender,Sender,sender,,Sender,,1st Review, -TEAMSPEAK,sender_uidQ_PROTO_TEAMSPEAK,sender_uid,SenderUID,Sender UID,,,,,1st Review, -TEAMSPEAK,server_nameQ_PROTO_TEAMSPEAK,server_name,ServerName,Server Name,,,,,1st Review, -TEAMSPEAK,server_platformQ_PROTO_TEAMSPEAK,server_platform,ServerPlatform,Server Platform,,,,,1st Review, -TEAMSPEAK,server_versionQ_PROTO_TEAMSPEAK,server_version,ServerVersion,Server Version,version,,Version,,1st Review, -TEAMSPEAK,session_idQ_PROTO_TEAMSPEAK,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -TELNET,loginQ_PROTO_TELNET,login,Login,Login,login,,Login,,1st Review, -TELNET,passwordQ_PROTO_TELNET,password,Passwd,Password,,,,,1st Review, -TELNET,rttQ_PROTO_TELNET,rtt,RTT,RTT,,,,,1st Review, -TELNET,term_typeQ_PROTO_TELNET,term_type,TermType,Term Type,,,,,1st Review, -TEREDO,auth_valueQ_PROTO_TEREDO,auth_value,AuthValue,Authentication Value,object,,Object,,1st Review, -TEREDO,client_idQ_PROTO_TEREDO,client_id,ClientID,Client ID,,,,,1st Review, -TEREDO,client_ipQ_PROTO_TEREDO,client_ip,ClientIP,Client IP,,,,,1st Review, -TEREDO,origin_client_ipQ_PROTO_TEREDO,origin_client_ip,OriginClientIP,Origin Client IP,,,,,1st Review, -TEREDO,server_ipQ_PROTO_TEREDO,server_ip,ServerIP,Server IP,,,,,1st Review, -TFTP,filenameQ_PROTO_TFTP,filename,Filename,Filename,objectname,,Object Name,,1st Review, -TFTP,filesizeQ_PROTO_TFTP,filesize,FileSize,File Size,size,,Size,,1st Review, -TFTP,modeQ_PROTO_TFTP,mode,Mode,Mode,,,,,1st Review, -TFTP,queryQ_PROTO_TFTP,query,Query,Query,command,,Command,,1st Review, -TFTP,request_filenameQ_PROTO_TFTP,request_filename,RequestFilename,Request Filename,,,,,1st Review, -TNS,baseQ_PROTO_TNS,base,Base,Base,,,,,1st Review, -TNS,client_hostnameQ_PROTO_TNS,client_hostname,ClientHostname,Client Hostname,,,,,1st Review, -TNS,client_osQ_PROTO_TNS,client_os,ClientOS,Client Operating System,,,,,1st Review, -TNS,client_program_nameQ_PROTO_TNS,client_program_name,ClientProgramName,Client Program Name,,,,,1st Review, -TNS,client_program_pathQ_PROTO_TNS,client_program_path,ClientProgramPath,Client Program Path,,,,,1st Review, -TNS,loginQ_PROTO_TNS,login,Login,Login,login,,Login,,1st Review, -TNS,passwordQ_PROTO_TNS,password,Passwd,Password,,,,,1st Review, -TNS,queryQ_PROTO_TNS,query,Query,Query,command,,Command,,1st Review, -TNS,response_sizeQ_PROTO_TNS,response_size,ResponseSize,Response Size,,,,,1st Review, -TNS,response_timeQ_PROTO_TNS,response_time,ResponseTime,Response Time,,,,,1st Review, -TNS,server_hostnameQ_PROTO_TNS,server_hostname,ServerHostname,Server Hostname,,,,,1st Review, -TNS,server_osQ_PROTO_TNS,server_os,ServerOS,Server Operating System,object,,Object,,1st Review, -TWITTER,actionQ_PROTO_TWITTER,action,Action,Action,command,,Command,,1st Review, -TWITTER,dateQ_PROTO_TWITTER,date,Date,Date,,,,,1st Review, -TWITTER,loginQ_PROTO_TWITTER,login,Login,Login,login,,Login,,1st Review, -TWITTER,media_urlQ_PROTO_TWITTER,media_url,MediaURL,Media URL,url,,URL,,1st Review, -TWITTER,param_screen_nameQ_PROTO_TWITTER,param_screen_name,ParamScreenName,Parameter Screen Name,objectname,,Object Name,,1st Review, -TWITTER,param_textQ_PROTO_TWITTER,param_text,ParamText,Parameter Text,,,,,1st Review, -TWITTER,param_user_idQ_PROTO_TWITTER,param_user_id,ParamUserID,Parameter User ID,,,,,1st Review, -TWITTER,relationQ_PROTO_TWITTER,relation,Relation,Relation,,,,,1st Review, -TWITTER,screen_nameQ_PROTO_TWITTER,screen_name,ScreenName,Screen Name,,,,,1st Review, -TWITTER,session_idQ_PROTO_TWITTER,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -TWITTER,tweetQ_PROTO_TWITTER,tweet,Tweet,Tweet,subject,,Subject,,1st Review, -TWITTER,user_idQ_PROTO_TWITTER,user_id,UserID,User ID,account,,Account,,1st Review, -UDP,cnx_durationQ_PROTO_UDP,cnx_duration,CnxDuration,Cnx Duration,,,,,1st Review, -UDP,start_timeQ_PROTO_UDP,start_time,StartTime,Start Time,,,,,1st Review, -UNKNOWN,maybe_applicationQ_PROTO_UNKNOWN,maybe_application,MaybeApplication,Maybe Application,,,,,1st Review, -UNKNOWN,maybe_application_idQ_PROTO_UNKNOWN,maybe_application_id,MaybeApplicationID,Maybe Application ID,object,,Object,,1st Review, -UNKNOWN,maybe_familyQ_PROTO_UNKNOWN,maybe_family,MaybeFamily,Maybe Family,,,,,1st Review, -USTREAM,loginQ_PROTO_USTREAM,login,Login,Login,login,,Login,,1st Review, -USTREAM,passwordQ_PROTO_USTREAM,password,Passwd,Password,,,,,1st Review, -USTREAM,query_rawQ_PROTO_USTREAM,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -USTREAM,query_textQ_PROTO_USTREAM,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -VIADEO,contact_aliasQ_PROTO_VIADEO,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -VIADEO,contact_emailQ_PROTO_VIADEO,contact_email,ContactEmail,Contact Email,sender,,Sender,,1st Review, -VIADEO,groupeQ_PROTO_VIADEO,groupe,Groupe,Groupe,,,,,1st Review, -VIADEO,loginQ_PROTO_VIADEO,login,Login,Login,login,,Login,,1st Review, -VIADEO,passwordQ_PROTO_VIADEO,password,Passwd,Password,,,,,1st Review, -VIBER,filesizeQ_PROTO_VIBER,filesize,FileSize,File Size,size,,Size,,1st Review, -VIBER,serviceQ_PROTO_VIBER,service,Service,Service,process,,Process,,1st Review, -VIBER,service_durationQ_PROTO_VIBER,service_duration,ServiceDuration,Service Duration,,,,,1st Review, -VIBER,service_idQ_PROTO_VIBER,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review, -VKONTAKTE,account_uidQ_PROTO_VKONTAKTE,account_uid,AcctUID,Account UID,account,,Account,,1st Review, -VKONTAKTE,contact_aliasQ_PROTO_VKONTAKTE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -VKONTAKTE,contact_emailQ_PROTO_VKONTAKTE,contact_email,ContactEmail,Contact Email,,,,,1st Review, -VKONTAKTE,contact_uidQ_PROTO_VKONTAKTE,contact_uid,ContactUID,Contact UID,,,,,1st Review, -VKONTAKTE,group_nameQ_PROTO_VKONTAKTE,group_name,GroupName,Group Name,dname,,Group,,1st Review, -VKONTAKTE,loginQ_PROTO_VKONTAKTE,login,Login,Login,login,,Login,,1st Review, -VKONTAKTE,nameQ_PROTO_VKONTAKTE,name,Name,Name,,,,,1st Review, -VKONTAKTE,passwordQ_PROTO_VKONTAKTE,password,Passwd,Password,,,,,1st Review, -WECHAT,serviceQ_PROTO_WECHAT,service,Service,Service,process,,Process,,1st Review, -WECHAT,service_idQ_PROTO_WECHAT,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review, -WHATSAPP,phone_numberQ_PROTO_WHATSAPP,phone_number,PhoneNum,Phone Number,,,,,1st Review, -WHATSAPP,serviceQ_PROTO_WHATSAPP,service,Service,Service,process,,Process,,1st Review, -WHATSAPP,service_idQ_PROTO_WHATSAPP,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review, -WHATSAPP,versionQ_PROTO_WHATSAPP,version,Version,Version,version,,Version,,1st Review, -WIKIPEDIA,query_rawQ_PROTO_WIKIPEDIA,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -WIKIPEDIA,query_textQ_PROTO_WIKIPEDIA,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -WINDOWS_MARKETPLACE,application_nameQ_PROTO_WINDOWS_MARKETPLACE,application_name,AppName,Application Name,object,,Object,,1st Review, -WINDOWS_UPDATE,kbQ_PROTO_WINDOWS_UPDATE,kb,KB,KB,object,,Object,,1st Review, -WINDOWS_UPDATE,platformQ_PROTO_WINDOWS_UPDATE,platform,Platform,Platform,version,,Version,,1st Review, -WINMX,file_chunk_data_offsetQ_PROTO_WINMX,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review, -WINMX,file_chunk_lenQ_PROTO_WINMX,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review, -WINMX,filenameQ_PROTO_WINMX,filename,Filename,Filename,objectname,,Object Name,,1st Review, -WINMX,filesizeQ_PROTO_WINMX,filesize,FileSize,File Size,size,,Size,,1st Review, -WINMX,loadwayQ_PROTO_WINMX,loadway,Loadway,Loadway,,,,,1st Review, -WINMX,loginQ_PROTO_WINMX,login,Login,Login,login,,Login,,1st Review, -WINMX,queryQ_PROTO_WINMX,query,Query,Query,command,,Command,,1st Review, -WSP,connect_rttQ_PROTO_WSP,connect_rtt,ConnectRTT,Connect RTT,,,,,1st Review, -WSP,indexQ_PROTO_WSP,index,Index,Index,,,,,1st Review, -WSP,index_clientQ_PROTO_WSP,index_client,IndexClient,Index Client,,,,,1st Review, -WSP,index_serverQ_PROTO_WSP,index_server,IndexServer,Index Server,,,,,1st Review, -WSP,mime_typeQ_PROTO_WSP,mime_type,MIMEType,MIMEType,,,,,1st Review, -WSP,mime_type_mainQ_PROTO_WSP,mime_type_main,MIMETypeMain,MIMEType Main,,,,,1st Review, -WSP,mime_type_subQ_PROTO_WSP,mime_type_sub,MIMETypeSub,MIMEType Sub,,,,,1st Review, -WSP,pdu_typeQ_PROTO_WSP,pdu_type,PDUType,PDU Type,,,,,1st Review, -WSP,profileQ_PROTO_WSP,profile,Profile,Profile,,,,,1st Review, -WSP,query_rttQ_PROTO_WSP,query_rtt,QueryRTT,Query RTT,,,,,1st Review, -WSP,request_sizeQ_PROTO_WSP,request_size,RequestSize,Request Size,size,,Size,,1st Review, -WSP,serverQ_PROTO_WSP,server,Server,Server,dname,,Group,,1st Review, -WSP,uriQ_PROTO_WSP,uri,URI,URI,url,,URL,,1st Review, -WSP,user_agentQ_PROTO_WSP,user_agent,UserAgent,User Agent,object,,Object,,1st Review, -X25,called_addrQ_PROTO_X25,called_addr,CalledAddr,Called Address,,,,,1st Review, -X25,calling_addrQ_PROTO_X25,calling_addr,CallingAddr,Calling Address,,,,,1st Review, -X25,pkt_typeQ_PROTO_X25,pkt_type,PktType,Packet Type,,,,,1st Review, -XDMCP,client_ipQ_PROTO_XDMCP,client_ip,ClientIP,Client IP,,,,,1st Review, -XDMCP,server_ipQ_PROTO_XDMCP,server_ip,ServerIP,Server IP,,,,,1st Review, -XDMCP,server_statusQ_PROTO_XDMCP,server_status,ServerStatus,Server Status,object,,Object,,1st Review, -YAHOO_GROUPS,actionQ_PROTO_YAHOO_GROUPS,action,Action,Action,,,,,1st Review, -YAHOO_GROUPS,dateQ_PROTO_YAHOO_GROUPS,date,Date,Date,,,,,1st Review, -YAHOO_GROUPS,draftQ_PROTO_YAHOO_GROUPS,draft,Draft,Draft,,,,,1st Review, -YAHOO_GROUPS,group_detailed_descriptionQ_PROTO_YAHOO_GROUPS,group_detailed_description,GroupDetailedDesc,Group Detailed Description,,,,,1st Review, -YAHOO_GROUPS,group_join_requestQ_PROTO_YAHOO_GROUPS,group_join_request,GroupJoinRequest,Group Join Request,,,,,1st Review, -YAHOO_GROUPS,group_membershipQ_PROTO_YAHOO_GROUPS,group_membership,GroupMembership,Group Membership,,,,,1st Review, -YAHOO_GROUPS,group_nameQ_PROTO_YAHOO_GROUPS,group_name,GroupName,Group Name,,,,,1st Review, -YAHOO_GROUPS,group_short_descriptionQ_PROTO_YAHOO_GROUPS,group_short_description,GroupShortDesc,Group Short Description,,,,,1st Review, -YAHOO_GROUPS,loginQ_PROTO_YAHOO_GROUPS,login,Login,Login,login,,Login,,1st Review, -YAHOO_GROUPS,msg_numberQ_PROTO_YAHOO_GROUPS,msg_number,MsgNumber,Message Number,,,,,1st Review, -YAHOO_GROUPS,nameQ_PROTO_YAHOO_GROUPS,name,Name,Name,objectname,,Object Name,,1st Review, -YAHOO_GROUPS,query_rawQ_PROTO_YAHOO_GROUPS,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -YAHOO_GROUPS,query_textQ_PROTO_YAHOO_GROUPS,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -YAHOO_GROUPS,replytoQ_PROTO_YAHOO_GROUPS,replyto,ReplyTo,Reply To,,,,,1st Review, -YAHOO_GROUPS,senderQ_PROTO_YAHOO_GROUPS,sender,Sender,Sender,,,,,1st Review, -YAHOO_GROUPS,sender_aliasQ_PROTO_YAHOO_GROUPS,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -YAHOO_GROUPS,sender_emailQ_PROTO_YAHOO_GROUPS,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -YAHOO_GROUPS,sender_nicknameQ_PROTO_YAHOO_GROUPS,sender_nickname,SenderNickname,Sender Nickname,,,,,1st Review, -YAHOO_GROUPS,sender_uidQ_PROTO_YAHOO_GROUPS,sender_uid,SenderUID,Sender UID,,,,,1st Review, -YAHOO_GROUPS,subjectQ_PROTO_YAHOO_GROUPS,subject,Subject,Subject,subject,,Subject,,1st Review, -YAHOO_GROUPS,uidQ_PROTO_YAHOO_GROUPS,uid,UID,User ID,,,,,1st Review, -YAHOO_MAPS,cityQ_PROTO_YAHOO_MAPS,city,City,City,,,,,1st Review, -YAHOO_MAPS,countryQ_PROTO_YAHOO_MAPS,country,Country,Country,,,,,1st Review, -YAHOO_MAPS,latitudeQ_PROTO_YAHOO_MAPS,latitude,Latitude,Latitude,,,,,1st Review, -YAHOO_MAPS,longitudeQ_PROTO_YAHOO_MAPS,longitude,Longitude,Longitude,,,,,1st Review, -YAHOO_MAPS,query_textQ_PROTO_YAHOO_MAPS,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -YAHOO_MAPS,streetQ_PROTO_YAHOO_MAPS,street,Street,Street,,,,,1st Review, -YAHOO_SEARCH,encodingQ_PROTO_YAHOO_SEARCH,encoding,Encoding,Encoding,,,,,1st Review, -YAHOO_SEARCH,query_rawQ_PROTO_YAHOO_SEARCH,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -YAHOO_SEARCH,query_textQ_PROTO_YAHOO_SEARCH,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -YAHOO_SEARCH,query_typeQ_PROTO_YAHOO_SEARCH,query_type,QueryType,Query Type,,,,,1st Review, -YANDEX,loginQ_PROTO_YANDEX,login,Login,Login,login,,Login,,1st Review, -YANDEX,passwordQ_PROTO_YANDEX,password,Passwd,Password,,,,,1st Review, -YANDEX,query_rawQ_PROTO_YANDEX,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review, -YANDEX,query_textQ_PROTO_YANDEX,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -YANDEX,query_typeQ_PROTO_YANDEX,query_type,QueryType,Query Type,,,,,1st Review, -YANDEX_WEBMAIL,actionQ_PROTO_YANDEX_WEBMAIL,action,Action,Action,,,,,1st Review, -YANDEX_WEBMAIL,attach_idQ_PROTO_YANDEX_WEBMAIL,attach_id,AttachID,Attach ID,,,,,1st Review, -YANDEX_WEBMAIL,attach_sizeQ_PROTO_YANDEX_WEBMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -YANDEX_WEBMAIL,attach_typeQ_PROTO_YANDEX_WEBMAIL,attach_type,AttachType,Attach Type,,,,,1st Review, -YANDEX_WEBMAIL,contactQ_PROTO_YANDEX_WEBMAIL,contact,Contact,Contact,,,,,1st Review, -YANDEX_WEBMAIL,contact_aliasQ_PROTO_YANDEX_WEBMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -YANDEX_WEBMAIL,contact_emailQ_PROTO_YANDEX_WEBMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review, -YANDEX_WEBMAIL,dateQ_PROTO_YANDEX_WEBMAIL,date,Date,Date,,,,,1st Review, -YANDEX_WEBMAIL,draftQ_PROTO_YANDEX_WEBMAIL,draft,Draft,Draft,,,,,1st Review, -YANDEX_WEBMAIL,attach_filenameQ_PROTO_YANDEX_WEBMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -YANDEX_WEBMAIL,folderlist_item_idQ_PROTO_YANDEX_WEBMAIL,folderlist_item_id,FolderListItemID,Folder List Item ID,,,,,1st Review, -YANDEX_WEBMAIL,folderlist_item_nameQ_PROTO_YANDEX_WEBMAIL,folderlist_item_name,FolderListItemName,Folder List Item Name,,,,,1st Review, -YANDEX_WEBMAIL,importanceQ_PROTO_YANDEX_WEBMAIL,importance,Importance,Importance,,,,,1st Review, -YANDEX_WEBMAIL,loginQ_PROTO_YANDEX_WEBMAIL,login,Login,Login,login,,Login,,1st Review, -YANDEX_WEBMAIL,msg_idQ_PROTO_YANDEX_WEBMAIL,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review, -YANDEX_WEBMAIL,msglist_attachQ_PROTO_YANDEX_WEBMAIL,msglist_attach,MsgListAttach,Message List Attach,,,,,1st Review, -YANDEX_WEBMAIL,msglist_dateQ_PROTO_YANDEX_WEBMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -YANDEX_WEBMAIL,msglist_folderQ_PROTO_YANDEX_WEBMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -YANDEX_WEBMAIL,msglist_msgidQ_PROTO_YANDEX_WEBMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -YANDEX_WEBMAIL,msglist_receiverQ_PROTO_YANDEX_WEBMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -YANDEX_WEBMAIL,msglist_receiver_aliasQ_PROTO_YANDEX_WEBMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -YANDEX_WEBMAIL,msglist_receiver_emailQ_PROTO_YANDEX_WEBMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -YANDEX_WEBMAIL,msglist_senderQ_PROTO_YANDEX_WEBMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -YANDEX_WEBMAIL,msglist_sender_aliasQ_PROTO_YANDEX_WEBMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -YANDEX_WEBMAIL,msglist_sender_emailQ_PROTO_YANDEX_WEBMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -YANDEX_WEBMAIL,msglist_subjectQ_PROTO_YANDEX_WEBMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -YANDEX_WEBMAIL,msglist_unreadQ_PROTO_YANDEX_WEBMAIL,msglist_unread,MsgListUnread,Message List Unread,,,,,1st Review, -YANDEX_WEBMAIL,receiverQ_PROTO_YANDEX_WEBMAIL,receiver,Receiver,Receiver,,,,,1st Review, -YANDEX_WEBMAIL,receiver_aliasQ_PROTO_YANDEX_WEBMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -YANDEX_WEBMAIL,receiver_emailQ_PROTO_YANDEX_WEBMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -YANDEX_WEBMAIL,receiver_typeQ_PROTO_YANDEX_WEBMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -YANDEX_WEBMAIL,senderQ_PROTO_YANDEX_WEBMAIL,sender,Sender,Sender,,,,,1st Review, -YANDEX_WEBMAIL,sender_aliasQ_PROTO_YANDEX_WEBMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -YANDEX_WEBMAIL,sender_emailQ_PROTO_YANDEX_WEBMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -YANDEX_WEBMAIL,subjectQ_PROTO_YANDEX_WEBMAIL,subject,Subject,Subject,subject,,Subject,,1st Review, -YMAIL_CLASSIC,actionQ_PROTO_YMAIL_CLASSIC,action,Action,Action,,,,,1st Review, -YMAIL_CLASSIC,attach_fileidQ_PROTO_YMAIL_CLASSIC,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review, -YMAIL_CLASSIC,attach_idQ_PROTO_YMAIL_CLASSIC,attach_id,AttachID,Attach ID,,,,,1st Review, -YMAIL_CLASSIC,attach_sizeQ_PROTO_YMAIL_CLASSIC,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -YMAIL_CLASSIC,attach_typeQ_PROTO_YMAIL_CLASSIC,attach_type,AttachType,Attach Type,,,,,1st Review, -YMAIL_CLASSIC,contactQ_PROTO_YMAIL_CLASSIC,contact,Contact,Contact,,,,,1st Review, -YMAIL_CLASSIC,contact_aliasQ_PROTO_YMAIL_CLASSIC,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -YMAIL_CLASSIC,contact_emailQ_PROTO_YMAIL_CLASSIC,contact_email,ContactEmail,Contact Email,,,,,1st Review, -YMAIL_CLASSIC,contact_firstnameQ_PROTO_YMAIL_CLASSIC,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review, -YMAIL_CLASSIC,contact_lastnameQ_PROTO_YMAIL_CLASSIC,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review, -YMAIL_CLASSIC,contact_nameQ_PROTO_YMAIL_CLASSIC,contact_name,ContactName,Contact Name,,,,,1st Review, -YMAIL_CLASSIC,dateQ_PROTO_YMAIL_CLASSIC,date,Date,Date,,,,,1st Review, -YMAIL_CLASSIC,draftQ_PROTO_YMAIL_CLASSIC,draft,Draft,Draft,,,,,1st Review, -YMAIL_CLASSIC,encodingQ_PROTO_YMAIL_CLASSIC,encoding,Encoding,Encoding,,,,,1st Review, -YMAIL_CLASSIC,attach_filenameQ_PROTO_YMAIL_CLASSIC,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -YMAIL_CLASSIC,folderQ_PROTO_YMAIL_CLASSIC,folder,Folder,Folder,,,,,1st Review, -YMAIL_CLASSIC,loginQ_PROTO_YMAIL_CLASSIC,login,Login,Login,login,,Login,,1st Review, -YMAIL_CLASSIC,msg_idQ_PROTO_YMAIL_CLASSIC,msg_id,MsgID,Message ID,,,,,1st Review, -YMAIL_CLASSIC,msglist_dateQ_PROTO_YMAIL_CLASSIC,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -YMAIL_CLASSIC,msglist_folderQ_PROTO_YMAIL_CLASSIC,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -YMAIL_CLASSIC,msglist_msgidQ_PROTO_YMAIL_CLASSIC,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -YMAIL_CLASSIC,msglist_receiverQ_PROTO_YMAIL_CLASSIC,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -YMAIL_CLASSIC,msglist_receiver_aliasQ_PROTO_YMAIL_CLASSIC,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -YMAIL_CLASSIC,msglist_receiver_emailQ_PROTO_YMAIL_CLASSIC,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -YMAIL_CLASSIC,msglist_senderQ_PROTO_YMAIL_CLASSIC,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -YMAIL_CLASSIC,msglist_sender_aliasQ_PROTO_YMAIL_CLASSIC,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -YMAIL_CLASSIC,msglist_sender_emailQ_PROTO_YMAIL_CLASSIC,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -YMAIL_CLASSIC,msglist_sizeQ_PROTO_YMAIL_CLASSIC,msglist_size,MsgListSize,Message List Size,,,,,1st Review, -YMAIL_CLASSIC,msglist_subjectQ_PROTO_YMAIL_CLASSIC,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -YMAIL_CLASSIC,receiverQ_PROTO_YMAIL_CLASSIC,receiver,Receiver,Receiver,,,,,1st Review, -YMAIL_CLASSIC,receiver_aliasQ_PROTO_YMAIL_CLASSIC,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -YMAIL_CLASSIC,receiver_emailQ_PROTO_YMAIL_CLASSIC,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -YMAIL_CLASSIC,receiver_typeQ_PROTO_YMAIL_CLASSIC,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -YMAIL_CLASSIC,replytoQ_PROTO_YMAIL_CLASSIC,replyto,ReplyTo,Reply To,,,,,1st Review, -YMAIL_CLASSIC,senderQ_PROTO_YMAIL_CLASSIC,sender,Sender,Sender,,,,,1st Review, -YMAIL_CLASSIC,sender_aliasQ_PROTO_YMAIL_CLASSIC,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -YMAIL_CLASSIC,sender_emailQ_PROTO_YMAIL_CLASSIC,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -YMAIL_CLASSIC,session_idQ_PROTO_YMAIL_CLASSIC,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -YMAIL_CLASSIC,subjectQ_PROTO_YMAIL_CLASSIC,subject,Subject,Subject,subject,,Subject,,1st Review, -YMAIL_MOBILE,actionQ_PROTO_YMAIL_MOBILE,action,Action,Action,,,,,1st Review, -YMAIL_MOBILE,attach_idQ_PROTO_YMAIL_MOBILE,attach_id,AttachID,Attach ID,,,,,1st Review, -YMAIL_MOBILE,attach_typeQ_PROTO_YMAIL_MOBILE,attach_type,AttachType,Attach Type,,,,,1st Review, -YMAIL_MOBILE,contactQ_PROTO_YMAIL_MOBILE,contact,Contact,Contact,,,,,1st Review, -YMAIL_MOBILE,contact_aliasQ_PROTO_YMAIL_MOBILE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -YMAIL_MOBILE,contact_emailQ_PROTO_YMAIL_MOBILE,contact_email,ContactEmail,Contact Email,,,,,1st Review, -YMAIL_MOBILE,dateQ_PROTO_YMAIL_MOBILE,date,Date,Date,,,,,1st Review, -YMAIL_MOBILE,draftQ_PROTO_YMAIL_MOBILE,draft,Draft,Draft,,,,,1st Review, -YMAIL_MOBILE,attach_filenameQ_PROTO_YMAIL_MOBILE,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -YMAIL_MOBILE,folderQ_PROTO_YMAIL_MOBILE,folder,Folder,Folder,,,,,1st Review, -YMAIL_MOBILE,loginQ_PROTO_YMAIL_MOBILE,login,Login,Login,login,,Login,,1st Review, -YMAIL_MOBILE,msg_idQ_PROTO_YMAIL_MOBILE,msg_id,MsgID,Message ID,,,,,1st Review, -YMAIL_MOBILE,msglist_msgidQ_PROTO_YMAIL_MOBILE,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -YMAIL_MOBILE,msglist_receiverQ_PROTO_YMAIL_MOBILE,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -YMAIL_MOBILE,msglist_receiver_aliasQ_PROTO_YMAIL_MOBILE,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -YMAIL_MOBILE,msglist_senderQ_PROTO_YMAIL_MOBILE,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -YMAIL_MOBILE,msglist_sender_aliasQ_PROTO_YMAIL_MOBILE,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -YMAIL_MOBILE,msglist_subjectQ_PROTO_YMAIL_MOBILE,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -YMAIL_MOBILE,passwordQ_PROTO_YMAIL_MOBILE,password,Passwd,Password,,,,,1st Review, -YMAIL_MOBILE,receiverQ_PROTO_YMAIL_MOBILE,receiver,Receiver,Receiver,,,,,1st Review, -YMAIL_MOBILE,receiver_aliasQ_PROTO_YMAIL_MOBILE,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -YMAIL_MOBILE,receiver_emailQ_PROTO_YMAIL_MOBILE,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -YMAIL_MOBILE,receiver_typeQ_PROTO_YMAIL_MOBILE,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -YMAIL_MOBILE,senderQ_PROTO_YMAIL_MOBILE,sender,Sender,Sender,,,,,1st Review, -YMAIL_MOBILE,sender_aliasQ_PROTO_YMAIL_MOBILE,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -YMAIL_MOBILE,sender_emailQ_PROTO_YMAIL_MOBILE,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -YMAIL_MOBILE,session_idQ_PROTO_YMAIL_MOBILE,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -YMAIL_MOBILE,subjectQ_PROTO_YMAIL_MOBILE,subject,Subject,Subject,subject,,Subject,,1st Review, -YMAIL_MOBILE_NEW,actionQ_PROTO_YMAIL_MOBILE_NEW,action,Action,Action,,,,,1st Review, -YMAIL_MOBILE_NEW,attach_idQ_PROTO_YMAIL_MOBILE_NEW,attach_id,AttachID,Attach ID,,,,,1st Review, -YMAIL_MOBILE_NEW,attach_sizeQ_PROTO_YMAIL_MOBILE_NEW,attach_size,AttachSize,Attach Size,,,,,1st Review, -YMAIL_MOBILE_NEW,attach_typeQ_PROTO_YMAIL_MOBILE_NEW,attach_type,AttachType,Attach Type,,,,,1st Review, -YMAIL_MOBILE_NEW,contactQ_PROTO_YMAIL_MOBILE_NEW,contact,Contact,Contact,,,,,1st Review, -YMAIL_MOBILE_NEW,contact_aliasQ_PROTO_YMAIL_MOBILE_NEW,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -YMAIL_MOBILE_NEW,contact_emailQ_PROTO_YMAIL_MOBILE_NEW,contact_email,ContactEmail,Contact Email,,,,,1st Review, -YMAIL_MOBILE_NEW,dateQ_PROTO_YMAIL_MOBILE_NEW,date,Date,Date,,,,,1st Review, -YMAIL_MOBILE_NEW,draftQ_PROTO_YMAIL_MOBILE_NEW,draft,Draft,Draft,,,,,1st Review, -YMAIL_MOBILE_NEW,attach_filenameQ_PROTO_YMAIL_MOBILE_NEW,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -YMAIL_MOBILE_NEW,folderQ_PROTO_YMAIL_MOBILE_NEW,folder,Folder,Folder,,,,,1st Review, -YMAIL_MOBILE_NEW,loginQ_PROTO_YMAIL_MOBILE_NEW,login,Login,Login,login,,Login,,1st Review, -YMAIL_MOBILE_NEW,msg_idQ_PROTO_YMAIL_MOBILE_NEW,msg_id,MsgID,Message ID,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_contentQ_PROTO_YMAIL_MOBILE_NEW,msglist_content,MsgListContent,Message List Content,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_dateQ_PROTO_YMAIL_MOBILE_NEW,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_folderQ_PROTO_YMAIL_MOBILE_NEW,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_msgidQ_PROTO_YMAIL_MOBILE_NEW,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_receiverQ_PROTO_YMAIL_MOBILE_NEW,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_receiver_aliasQ_PROTO_YMAIL_MOBILE_NEW,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_senderQ_PROTO_YMAIL_MOBILE_NEW,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_sender_aliasQ_PROTO_YMAIL_MOBILE_NEW,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -YMAIL_MOBILE_NEW,msglist_subjectQ_PROTO_YMAIL_MOBILE_NEW,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -YMAIL_MOBILE_NEW,passwordQ_PROTO_YMAIL_MOBILE_NEW,password,Passwd,Password,,,,,1st Review, -YMAIL_MOBILE_NEW,receiverQ_PROTO_YMAIL_MOBILE_NEW,receiver,Receiver,Receiver,,,,,1st Review, -YMAIL_MOBILE_NEW,receiver_aliasQ_PROTO_YMAIL_MOBILE_NEW,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -YMAIL_MOBILE_NEW,receiver_emailQ_PROTO_YMAIL_MOBILE_NEW,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -YMAIL_MOBILE_NEW,receiver_typeQ_PROTO_YMAIL_MOBILE_NEW,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -YMAIL_MOBILE_NEW,senderQ_PROTO_YMAIL_MOBILE_NEW,sender,Sender,Sender,,,,,1st Review, -YMAIL_MOBILE_NEW,sender_aliasQ_PROTO_YMAIL_MOBILE_NEW,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -YMAIL_MOBILE_NEW,sender_emailQ_PROTO_YMAIL_MOBILE_NEW,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -YMAIL_MOBILE_NEW,session_idQ_PROTO_YMAIL_MOBILE_NEW,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -YMAIL_MOBILE_NEW,subjectQ_PROTO_YMAIL_MOBILE_NEW,subject,Subject,Subject,subject,,Subject,,1st Review, -YMAIL2,actionQ_PROTO_YMAIL2,action,Action,Action,object,,Object,,1st Review, -YMAIL2,attach_fileidQ_PROTO_YMAIL2,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review, -YMAIL2,attach_idQ_PROTO_YMAIL2,attach_id,AttachID,Attach ID,,,,,1st Review, -YMAIL2,attach_sizeQ_PROTO_YMAIL2,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -YMAIL2,attach_typeQ_PROTO_YMAIL2,attach_type,AttachType,Attach Type,,,,,1st Review, -YMAIL2,contact_emailQ_PROTO_YMAIL2,contact_email,ContactEmail,Contact Email,,,,,1st Review, -YMAIL2,contact_firstnameQ_PROTO_YMAIL2,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review, -YMAIL2,contact_lastnameQ_PROTO_YMAIL2,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review, -YMAIL2,dateQ_PROTO_YMAIL2,date,Date,Date,,,,,1st Review, -YMAIL2,draftQ_PROTO_YMAIL2,draft,Draft,Draft,,,,,1st Review, -YMAIL2,attach_filenameQ_PROTO_YMAIL2,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -YMAIL2,loginQ_PROTO_YMAIL2,login,Login,Login,login,,Login,,1st Review, -YMAIL2,msg_idQ_PROTO_YMAIL2,msg_id,MsgID,Message ID,,,,,1st Review, -YMAIL2,msglist_dateQ_PROTO_YMAIL2,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -YMAIL2,msglist_folderQ_PROTO_YMAIL2,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -YMAIL2,msglist_msgidQ_PROTO_YMAIL2,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review, -YMAIL2,msglist_receiver_emailQ_PROTO_YMAIL2,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -YMAIL2,msglist_senderQ_PROTO_YMAIL2,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -YMAIL2,msglist_sender_aliasQ_PROTO_YMAIL2,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -YMAIL2,msglist_sender_emailQ_PROTO_YMAIL2,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -YMAIL2,msglist_sizeQ_PROTO_YMAIL2,msglist_size,MsgListSize,Message List Size,,,,,1st Review, -YMAIL2,msglist_subjectQ_PROTO_YMAIL2,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -YMAIL2,nameQ_PROTO_YMAIL2,name,Name,Name,,,,,1st Review, -YMAIL2,receiverQ_PROTO_YMAIL2,receiver,Receiver,Receiver,,,,,1st Review, -YMAIL2,receiver_aliasQ_PROTO_YMAIL2,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -YMAIL2,receiver_emailQ_PROTO_YMAIL2,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -YMAIL2,receiver_typeQ_PROTO_YMAIL2,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -YMAIL2,replytoQ_PROTO_YMAIL2,replyto,ReplyTo,Reply To,,,,,1st Review, -YMAIL2,senderQ_PROTO_YMAIL2,sender,Sender,Sender,,,,,1st Review, -YMAIL2,sender_aliasQ_PROTO_YMAIL2,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -YMAIL2,sender_emailQ_PROTO_YMAIL2,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -YMAIL2,session_idQ_PROTO_YMAIL2,session_id,SessionID,Session ID,processid,,Process ID,,1st Review, -YMAIL2,subjectQ_PROTO_YMAIL2,subject,Subject,Subject,subject,,Subject,,1st Review, -YMSG,call_durationQ_PROTO_YMSG,call_duration,CallDuration,Call Duration,,,,,1st Review, -YMSG,calleeQ_PROTO_YMSG,callee,Callee,Callee,,,,,1st Review, -YMSG,callerQ_PROTO_YMSG,caller,Caller,Caller,,,,,1st Review, -YMSG,channelQ_PROTO_YMSG,channel,Channel,Channel,,,,,1st Review, -YMSG,channel_actionQ_PROTO_YMSG,channel_action,ChannelAction,Channel Action,,,,,1st Review, -YMSG,channel_nameQ_PROTO_YMSG,channel_name,ChannelName,Channel Name,,,,,1st Review, -YMSG,channel_userQ_PROTO_YMSG,channel_user,ChannelUser,Channel User,,,,,1st Review, -YMSG,chat_idQ_PROTO_YMSG,chat_id,ChatID,Chat ID,,,,,1st Review, -YMSG,client_countryQ_PROTO_YMSG,client_country,ClientCountry,Client Country,,,,,1st Review, -YMSG,client_firstnameQ_PROTO_YMSG,client_firstname,ClientFirstName,Client First Name,,,,,1st Review, -YMSG,client_ipQ_PROTO_YMSG,client_ip,ClientIP,Client IP,,,,,1st Review, -YMSG,client_lastnameQ_PROTO_YMSG,client_lastname,ClientLastName,Client Last Name,,,,,1st Review, -YMSG,client_local_ipQ_PROTO_YMSG,client_local_ip,ClientLocalIP,Client Local IP,,,,,1st Review, -YMSG,client_versionQ_PROTO_YMSG,client_version,ClientVersion,Client Version,,,,,1st Review, -YMSG,contact_loginQ_PROTO_YMSG,contact_login,ContactLogin,Contact Login,,,,,1st Review, -YMSG,encodingQ_PROTO_YMSG,encoding,Encoding,Encoding,,,,,1st Review, -YMSG,filehashQ_PROTO_YMSG,filehash,FileHash,File Hash,,,,,1st Review, -YMSG,filenameQ_PROTO_YMSG,filename,Filename,Filename,objectname,,Object Name,,1st Review, -YMSG,file_receiverQ_PROTO_YMSG,file_receiver,FileReceiver,File Receiver,,,,,1st Review, -YMSG,file_senderQ_PROTO_YMSG,file_sender,FileSender,File Sender,,,,,1st Review, -YMSG,filesizeQ_PROTO_YMSG,filesize,FileSize,File Size,size,,Size,,1st Review, -YMSG,file_urlQ_PROTO_YMSG,file_url,FileURL,File URL,url,,URL,,1st Review, -YMSG,loginQ_PROTO_YMSG,login,Login,Login,login,,Login,,1st Review, -YMSG,messageQ_PROTO_YMSG,message,Msg,Message,object,,Object,,1st Review, -YMSG,message_lenQ_PROTO_YMSG,message_len,MsgLen,Message Length,,,,,1st Review, -YMSG,receiverQ_PROTO_YMSG,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -YMSG,senderQ_PROTO_YMSG,sender,Sender,Sender,sender,,Sender,,1st Review, -YMSG,server_ipQ_PROTO_YMSG,server_ip,ServerIP,Server IP,,,,,1st Review, -YMSG,serviceQ_PROTO_YMSG,service,Service,Service,process,,Process,,1st Review, -YMSG,sessionidQ_PROTO_YMSG,sessionid,SessionID,Session ID,processid,,Process ID,,1st Review, -YMSG,timestampQ_PROTO_YMSG,timestamp,Timestamp,Timestamp,,,,,1st Review, -YMSG,transfer_idQ_PROTO_YMSG,transfer_id,TransferID,Transfer ID,,,,,1st Review, -YMSG,versionQ_PROTO_YMSG,version,Version,Version,version,,Version,,1st Review, -YMSG,webcam_brandQ_PROTO_YMSG,webcam_brand,WebcamBrand,Webcam Brand,,,,,1st Review, -YMSG_CONF,call_durationQ_PROTO_YMSG_CONF,call_duration,CallDuration,Call Duration,,,,,1st Review, -YMSG_CONF,callerQ_PROTO_YMSG_CONF,caller,Caller,Caller,,,,,1st Review, -YMSG_CONF,loginQ_PROTO_YMSG_CONF,login,Login,Login,login,,Login,,1st Review, -YMSG_TRANSFER,client_ipQ_PROTO_YMSG_TRANSFER,client_ip,ClientIP,Client IP,,,,,1st Review, -YMSG_TRANSFER,filehashQ_PROTO_YMSG_TRANSFER,filehash,FileHash,File Hash,,,,,1st Review, -YMSG_TRANSFER,file_identifierQ_PROTO_YMSG_TRANSFER,file_identifier,FileIdentifier,File Identifier,,,,,1st Review, -YMSG_TRANSFER,filenameQ_PROTO_YMSG_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review, -YMSG_TRANSFER,file_receiverQ_PROTO_YMSG_TRANSFER,file_receiver,FileReceiver,File Receiver,,,,,1st Review, -YMSG_TRANSFER,file_senderQ_PROTO_YMSG_TRANSFER,file_sender,FileSender,File Sender,,,,,1st Review, -YMSG_TRANSFER,filesizeQ_PROTO_YMSG_TRANSFER,filesize,FileSize,File Size,size,,Size,,1st Review, -YMSG_TRANSFER,file_urlQ_PROTO_YMSG_TRANSFER,file_url,FileURL,File URL,url,,URL,,1st Review, -YMSG_TRANSFER,loginQ_PROTO_YMSG_TRANSFER,login,Login,Login,login,,Login,,1st Review, -YMSG_TRANSFER,server_ipQ_PROTO_YMSG_TRANSFER,server_ip,ServerIP,Server IP,,,,,1st Review, -YMSG_VIDEO,loginQ_PROTO_YMSG_VIDEO,login,Login,Login,login,,Login,,1st Review, -YMSG_VIDEO,webcam_brandQ_PROTO_YMSG_VIDEO,webcam_brand,WebcamBrand,Webcam Brand,,,,,1st Review, -YMSG_WEBMESSENGER,contact_firstnameQ_PROTO_YMSG_WEBMESSENGER,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review, -YMSG_WEBMESSENGER,contact_lastnameQ_PROTO_YMSG_WEBMESSENGER,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review, -YMSG_WEBMESSENGER,contact_loginQ_PROTO_YMSG_WEBMESSENGER,contact_login,ContactLogin,Contact Login,,,,,1st Review, -YMSG_WEBMESSENGER,contact_nameQ_PROTO_YMSG_WEBMESSENGER,contact_name,ContactName,Contact Name,,,,,1st Review, -YMSG_WEBMESSENGER,loginQ_PROTO_YMSG_WEBMESSENGER,login,Login,Login,login,,Login,,1st Review, -YMSG_WEBMESSENGER,messageQ_PROTO_YMSG_WEBMESSENGER,message,Msg,Message,object,,Object,,1st Review, -YMSG_WEBMESSENGER,msg_codeQ_PROTO_YMSG_WEBMESSENGER,msg_code,MsgCode,Message Code,,,,,1st Review, -YMSG_WEBMESSENGER,receiverQ_PROTO_YMSG_WEBMESSENGER,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review, -YMSG_WEBMESSENGER,senderQ_PROTO_YMSG_WEBMESSENGER,sender,Sender,Sender,sender,,Sender,,1st Review, -YMSG_WEBMESSENGER,serviceQ_PROTO_YMSG_WEBMESSENGER,service,Service,Service,process,,Process,,1st Review, -YMSG_WEBMESSENGER,sessionidQ_PROTO_YMSG_WEBMESSENGER,sessionid,SessionID,Session ID,processid,,Process ID,,1st Review, -YMSG_WEBMESSENGER,versionQ_PROTO_YMSG_WEBMESSENGER,version,Version,Version,version,,Version,,1st Review, -YOUTUBE,audio_datarateQ_PROTO_YOUTUBE,audio_datarate,AuditDataRate,Audio Data Rate,,,,,1st Review, -YOUTUBE,dateQ_PROTO_YOUTUBE,date,Date,Date,,,,,1st Review, -YOUTUBE,descriptionQ_PROTO_YOUTUBE,description,Description,Description,,,,,1st Review, -YOUTUBE,loginQ_PROTO_YOUTUBE,login,Login,Login,login,,Login,,1st Review, -YOUTUBE,methodQ_PROTO_YOUTUBE,method,Method,Method,command,,Command,,1st Review, -YOUTUBE,nameQ_PROTO_YOUTUBE,name,Name,Name,objectname,,Object Name,,1st Review, -YOUTUBE,nameviewerQ_PROTO_YOUTUBE,nameviewer,NameViewer,Name Viewer,,,,,1st Review, -YOUTUBE,passwordQ_PROTO_YOUTUBE,password,Passwd,Password,,,,,1st Review, -YOUTUBE,query_rawQ_PROTO_YOUTUBE,query_raw,QueryRaw,Query Raw,,,,,1st Review, -YOUTUBE,query_textQ_PROTO_YOUTUBE,query_text,QueryText,Query Text,subject,,Subject,,1st Review, -YOUTUBE,start_timeQ_PROTO_YOUTUBE,start_time,StartTime,Start Time,,,,,1st Review, -YOUTUBE,tagsQ_PROTO_YOUTUBE,tags,Tags,Tags,,,,,1st Review, -YOUTUBE,titleQ_PROTO_YOUTUBE,title,Title,Title,,,,,1st Review, -YOUTUBE,total_datarateQ_PROTO_YOUTUBE,total_datarate,TotalDataRate,Total Data Rate,,,,,1st Review, -YOUTUBE,urlQ_PROTO_YOUTUBE,url,URL,URL,url,,URL,,1st Review, -YOUTUBE,video_datarateQ_PROTO_YOUTUBE,video_datarate,VidDataRate,Video Data Rate,,,,,1st Review, -YOUTUBE,video_durationQ_PROTO_YOUTUBE,video_duration,VidDuration,Video Duration,,,,,1st Review, -YOUTUBE,video_framerateQ_PROTO_YOUTUBE,video_framerate,VidFrameRate,Video Frame Rate,,,,,1st Review, -YOUTUBE,video_heightQ_PROTO_YOUTUBE,video_height,VidHeight,Video Height,,,,,1st Review, -YOUTUBE,videoidQ_PROTO_YOUTUBE,videoid,VidID,Video ID,object,,Object,,1st Review, -YOUTUBE,video_totaldurationQ_PROTO_YOUTUBE,video_totalduration,VidTotalDuration,Video Total Duration,,,,,1st Review, -YOUTUBE,video_widthQ_PROTO_YOUTUBE,video_width,VidWidth,Video Width,,,,,1st Review, -ZIMBRA,actionQ_PROTO_ZIMBRA,action,Action,Action,object,,Object,,1st Review, -ZIMBRA,attach_idQ_PROTO_ZIMBRA,attach_id,AttachID,Attach ID,,,,,1st Review, -ZIMBRA,attach_sizeQ_PROTO_ZIMBRA,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -ZIMBRA,attach_typeQ_PROTO_ZIMBRA,attach_type,AttachType,Attach Type,,,,,1st Review, -ZIMBRA,contact_aliasQ_PROTO_ZIMBRA,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -ZIMBRA,contact_emailQ_PROTO_ZIMBRA,contact_email,ContactEmail,Contact Email,,,,,1st Review, -ZIMBRA,dateQ_PROTO_ZIMBRA,date,Date,Date,,,,,1st Review, -ZIMBRA,draftQ_PROTO_ZIMBRA,draft,Draft,Draft,,,,,1st Review, -ZIMBRA,attach_filenameQ_PROTO_ZIMBRA,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -ZIMBRA,loginQ_PROTO_ZIMBRA,login,Login,Login,login,,Login,,1st Review, -ZIMBRA,msg_idQ_PROTO_ZIMBRA,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review, -ZIMBRA,msglist_dateQ_PROTO_ZIMBRA,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -ZIMBRA,msglist_folderQ_PROTO_ZIMBRA,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -ZIMBRA,msglist_receiverQ_PROTO_ZIMBRA,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review, -ZIMBRA,msglist_receiver_aliasQ_PROTO_ZIMBRA,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -ZIMBRA,msglist_receiver_emailQ_PROTO_ZIMBRA,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review, -ZIMBRA,msglist_senderQ_PROTO_ZIMBRA,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review, -ZIMBRA,msglist_sender_aliasQ_PROTO_ZIMBRA,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -ZIMBRA,msglist_sender_emailQ_PROTO_ZIMBRA,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review, -ZIMBRA,msglist_subjectQ_PROTO_ZIMBRA,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -ZIMBRA,passwordQ_PROTO_ZIMBRA,password,Passwd,Password,,,,,1st Review, -ZIMBRA,receiverQ_PROTO_ZIMBRA,receiver,Receiver,Receiver,,,,,1st Review, -ZIMBRA,receiver_aliasQ_PROTO_ZIMBRA,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -ZIMBRA,receiver_emailQ_PROTO_ZIMBRA,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -ZIMBRA,receiver_typeQ_PROTO_ZIMBRA,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -ZIMBRA,senderQ_PROTO_ZIMBRA,sender,Sender,Sender,,,,,1st Review, -ZIMBRA,sender_aliasQ_PROTO_ZIMBRA,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -ZIMBRA,sender_emailQ_PROTO_ZIMBRA,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -ZIMBRA,subjectQ_PROTO_ZIMBRA,subject,Subject,Subject,subject,,Subject,,1st Review, -ZIMBRA_STANDARD,actionQ_PROTO_ZIMBRA_STANDARD,action,Action,Action,object,,Object,,1st Review, -ZIMBRA_STANDARD,attach_idQ_PROTO_ZIMBRA_STANDARD,attach_id,AttachID,Attach ID,,,,,1st Review, -ZIMBRA_STANDARD,attach_sizeQ_PROTO_ZIMBRA_STANDARD,attach_size,AttachSize,Attach Size,size,,Size,,1st Review, -ZIMBRA_STANDARD,attach_typeQ_PROTO_ZIMBRA_STANDARD,attach_type,AttachType,Attach Type,,,,,1st Review, -ZIMBRA_STANDARD,contactQ_PROTO_ZIMBRA_STANDARD,contact,Contact,Contact,,,,,1st Review, -ZIMBRA_STANDARD,contact_aliasQ_PROTO_ZIMBRA_STANDARD,contact_alias,ContactAlias,Contact Alias,,,,,1st Review, -ZIMBRA_STANDARD,contact_emailQ_PROTO_ZIMBRA_STANDARD,contact_email,ContactEmail,Contact Email,,,,,1st Review, -ZIMBRA_STANDARD,dateQ_PROTO_ZIMBRA_STANDARD,date,Date,Date,,,,,1st Review, -ZIMBRA_STANDARD,draftQ_PROTO_ZIMBRA_STANDARD,draft,Draft,Draft,,,,,1st Review, -ZIMBRA_STANDARD,attach_filenameQ_PROTO_ZIMBRA_STANDARD,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review, -ZIMBRA_STANDARD,loginQ_PROTO_ZIMBRA_STANDARD,login,Login,Login,login,,Login,,1st Review, -ZIMBRA_STANDARD,msg_idQ_PROTO_ZIMBRA_STANDARD,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review, -ZIMBRA_STANDARD,msglist_dateQ_PROTO_ZIMBRA_STANDARD,msglist_date,MsgListDate,Message List Date,,,,,1st Review, -ZIMBRA_STANDARD,msglist_folderQ_PROTO_ZIMBRA_STANDARD,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review, -ZIMBRA_STANDARD,msglist_receiver_aliasQ_PROTO_ZIMBRA_STANDARD,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review, -ZIMBRA_STANDARD,msglist_sender_aliasQ_PROTO_ZIMBRA_STANDARD,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review, -ZIMBRA_STANDARD,msglist_subjectQ_PROTO_ZIMBRA_STANDARD,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review, -ZIMBRA_STANDARD,receiverQ_PROTO_ZIMBRA_STANDARD,receiver,Receiver,Receiver,,,,,1st Review, -ZIMBRA_STANDARD,receiver_aliasQ_PROTO_ZIMBRA_STANDARD,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review, -ZIMBRA_STANDARD,receiver_emailQ_PROTO_ZIMBRA_STANDARD,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review, -ZIMBRA_STANDARD,receiver_typeQ_PROTO_ZIMBRA_STANDARD,receiver_type,ReceiverType,Receiver Type,,,,,1st Review, -ZIMBRA_STANDARD,replytoQ_PROTO_ZIMBRA_STANDARD,replyto,ReplyTo,Reply To,,,,,1st Review, -ZIMBRA_STANDARD,senderQ_PROTO_ZIMBRA_STANDARD,sender,Sender,Sender,,,,,1st Review, -ZIMBRA_STANDARD,sender_aliasQ_PROTO_ZIMBRA_STANDARD,sender_alias,SenderAlias,Sender Alias,,,,,1st Review, -ZIMBRA_STANDARD,sender_emailQ_PROTO_ZIMBRA_STANDARD,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review, -ZIMBRA_STANDARD,subjectQ_PROTO_ZIMBRA_STANDARD,subject,Subject,Subject,subject,,Subject,,1st Review, +_n/a,�� optional string Application = 29;,,Application,Application,csv,,Process,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 ApplicationID = 36 [default = 0];,,ApplicationID,Application ID,csv,,Vendor Message ID,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional string ApplicationPath = 30;,,ApplicationPath,ApplicationPath,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional bool Captured = 25 [default = false];,,Captured,Captured,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional bool CaptureRemoved = 40;,,CaptureRemoved,Capture Removed,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 ChildFlowNumber = 26;,,ChildFlowNumber,Child Flow Number,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� repeated bytes CustomApplication = 23;,,CustomApplication,Custom Application,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional string DebugMessage = 35;,,DebugMessage,Debug Message,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional string Delay = 11;,,Delay,Delay,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 BytesDest = 16;,,DestBytes,Destination Bytes,csv,,Impacted Host KB Received,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 BytesDestDelta = 21;,,DestBytesDelta,Destination Bytes Delta,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 IPDest = 5;,,DestIP,Destination IP,csv,,Impacted IP,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 MACDest = 3;,,DestMAC,Destination MAC,csv,,Impacted MAC Address,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 PortDest = 9;,,DestPort,Destination Port,csv,,Impacted Port,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 Duration = 31;,,Duration,Duration,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 FieldCount = 34;,,FieldCount,Field Count,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional bool FlowCompleted = 10;,,FlowCompleted,Flow Completed,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 FlowSessionCount = 7;,,FlowSessionCount,Flow Session Count,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional FlowStateType FlowState = 24 [default = CLOSED_UNKNOWN];,,FlowState,Flow State,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional Type FlowType = 18;,,FlowType,Flow Type,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional bool LatestUpdate = 37 [default = true];,,LatestUpdate,Latest Update,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 MessageSize = 32;,,MessageSize,Message Size,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional string PktPath = 6;,,PacketPath,Packet Path,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 PacketsDelta = 19;,,PacketsDelta,Packets Delta,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 ProtoID = 12;,,Protocol,Protocol,csv,,Protocol ,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a, optional string SessionID = 1;,,Session,Session,csv,,Session,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 BytesSource = 17;,,SrcBytes,Source Bytes,csv,,Impacted Host KB Sent,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 BytesSourceDelta = 22;,,SrcBytesDelta,Source Bytes Delta,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 IPSource = 4;,,SrcIP,Source IP,csv,,Origin IP,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 MACSource = 2;,,SrcMAC,Source MAC,csv,,Origin MAC Address,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 PortSource = 8;,,SrcPort,Source Port,csv,,Origin Port,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 ThreadID = 33;,,ThreadID,Thread ID,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 TimeDelta = 20;,,TimeDelta,Time Delta,csv,,Duration,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 TimePrevious = 38;,,TimePrevious,Time Previous,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 TimeStart = 14;,,TimeStart,Time Start,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 TimeUpdated = 15;,,TimeUpdated,Time Updated,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 BytesTotal = 27;,,TotalBytes,Total Bytes,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint64 BytesTotalDelta = 28;,,TotalBytesDelta,Total Bytes Delta,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional uint32 PacketTotal = 13;,,TotalPackets,Total Packets,csv,,Impacted Host Packets In,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +_n/a,�� optional bool Written = 39;,,Written,Written,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,actionQ_PROTO_0ZZ0,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,download_urlQ_PROTO_0ZZ0,download_url,DownloadURL,Download URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,email_addressQ_PROTO_0ZZ0,email_address,EmailAddr,Email Address,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,email_invitedQ_PROTO_0ZZ0,email_invited,EmailInvited,Email Invited,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,filenameQ_PROTO_0ZZ0,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,filesizeQ_PROTO_0ZZ0,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,loginQ_PROTO_0ZZ0,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,nameQ_PROTO_0ZZ0,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,name_invitedQ_PROTO_0ZZ0,name_invited,NameInvited,Name Invited,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,passwordQ_PROTO_0ZZ0,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,sidQ_PROTO_0ZZ0,sid,SID,SID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,sidcQ_PROTO_0ZZ0,sidc,SIDC,SIDC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +0ZZ0,upload_descriptionQ_PROTO_0ZZ0,upload_description,UploadDescription,Upload Description,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,country_codeQ_PROTO_3GPP_LI,country_code,CountryCode,Country Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,ice_typeQ_PROTO_3GPP_LI,ice_type,IceType,Ice Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,liidQ_PROTO_3GPP_LI,liid,LIID,LIID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,sequence_numberQ_PROTO_3GPP_LI,sequence_number,SeqNum,Sequence Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,timestampQ_PROTO_3GPP_LI,timestamp,Timestamp,Timestamp,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,t_pdu_directionQ_PROTO_3GPP_LI,t_pdu_direction,TPDUDirection,T PDU Direction,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +3GPP_LI,versionQ_PROTO_3GPP_LI,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,client_versionQ_PROTO_ADC,client_version,ClientVersion,Client Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,command_codeQ_PROTO_ADC,command_code,CommandCode,Command Code,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,command_typeQ_PROTO_ADC,command_type,CommandType,Command Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,file_chunk_data_offsetQ_PROTO_ADC,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,file_chunk_lenQ_PROTO_ADC,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,file_hashQ_PROTO_ADC,file_hash,FileHash,File Hash,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,filenameQ_PROTO_ADC,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,filesizeQ_PROTO_ADC,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,peer_hashQ_PROTO_ADC,peer_hash,PeerHash,Peer Hash,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,peer_idQ_PROTO_ADC,peer_id,PeerID,Peer ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADC,queryQ_PROTO_ADC,query,Query,Query,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,actionQ_PROTO_ADOBE_UPDATE,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,component_list_descQ_PROTO_ADOBE_UPDATE,component_list_desc,ComponentListDesc,Component List Description,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,component_list_nameQ_PROTO_ADOBE_UPDATE,component_list_name,ComponentListName,Component List Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,component_list_urlQ_PROTO_ADOBE_UPDATE,component_list_url,ComponentListURL,Component List URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,component_list_versionQ_PROTO_ADOBE_UPDATE,component_list_version,ComponentListVersion,Component List Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,product_nameQ_PROTO_ADOBE_UPDATE,product_name,ProductName,Product Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ADOBE_UPDATE,update_managerQ_PROTO_ADOBE_UPDATE,update_manager,UpdateManager,Update Manager,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,channelQ_PROTO_AIM,channel,Channel,Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,client_statusQ_PROTO_AIM,client_status,ClientStatus,Client Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,contact_loginQ_PROTO_AIM,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,contact_statusQ_PROTO_AIM,contact_status,ContactStatus,Contact Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,external_ip_addressQ_PROTO_AIM,external_ip_address,ExtIPAddr,External IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,filenameQ_PROTO_AIM,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,filename_encodingQ_PROTO_AIM,filename_encoding,FilenameEncoding,Filename Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,file_receiverQ_PROTO_AIM,file_receiver,FileReceiver,File Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,file_senderQ_PROTO_AIM,file_sender,FileSender,File Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,filesizeQ_PROTO_AIM,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,icon_buddyQ_PROTO_AIM,icon_buddy,IconBuddy,Icon Buddy,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,internal_ip_addressQ_PROTO_AIM,internal_ip_address,InternalIPAddr,Internal IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,loginQ_PROTO_AIM,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,messageQ_PROTO_AIM,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,receiverQ_PROTO_AIM,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,senderQ_PROTO_AIM,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,serviceQ_PROTO_AIM,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,user_agentQ_PROTO_AIM,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,user_emailQ_PROTO_AIM,user_email,UserEmail,User Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM,versionQ_PROTO_AIM,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,chat_idQ_PROTO_AIM_EXPRESS,chat_id,ChatID,Chat ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,chat_typeQ_PROTO_AIM_EXPRESS,chat_type,ChatType,Chat Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,client_statusQ_PROTO_AIM_EXPRESS,client_status,ClientStatus,Client Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,contact_loginQ_PROTO_AIM_EXPRESS,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,contact_statusQ_PROTO_AIM_EXPRESS,contact_status,ContactStatus,Contact Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,loginQ_PROTO_AIM_EXPRESS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,messageQ_PROTO_AIM_EXPRESS,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,receiverQ_PROTO_AIM_EXPRESS,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,senderQ_PROTO_AIM_EXPRESS,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_EXPRESS,versionQ_PROTO_AIM_EXPRESS,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_TRANSFER,filenameQ_PROTO_AIM_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_TRANSFER,filename_encodingQ_PROTO_AIM_TRANSFER,filename_encoding,FilenameEncoding,Filename Encoding,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIM_TRANSFER,filesizeQ_PROTO_AIM_TRANSFER,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AIMS,loginQ_PROTO_AIMS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AMQP,major_versionQ_PROTO_AMQP,major_version,MajorVersion,Major Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AMQP,minor_versionQ_PROTO_AMQP,minor_version,MinorVersion,Minor Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +AMQP,response_timeQ_PROTO_AMQP,response_time,ResponseTime,Response Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +APPLE_UPDATE,pkg_nameQ_PROTO_APPLE_UPDATE,pkg_name,PkgName,Package Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Application,QProto Name,NetMon Old Name,Netmask,Netmask,Syslog Field,SIEM MPE Tag,SIEM Mapped Field (6.3 Name),SIEM Long Name 6.3,Status,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +APPSTORE,application_nameQ_PROTO_APPSTORE,application_name,AppName,Application Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +APPSTORE,connection_typeQ_PROTO_APPSTORE,connection_type,ConnectionType,Connection Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +APPSTORE,device_typeQ_PROTO_APPSTORE,device_type,DeviceType,Device Type,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,actionQ_PROTO_ARCHIVE,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,creatorQ_PROTO_ARCHIVE,creator,Creator,Creator,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,descriptionQ_PROTO_ARCHIVE,description,Description,Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,encodingQ_PROTO_ARCHIVE,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,filenameQ_PROTO_ARCHIVE,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,loginQ_PROTO_ARCHIVE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,passwordQ_PROTO_ARCHIVE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,query_indexQ_PROTO_ARCHIVE,query_index,QueryIndex,Query Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,query_rawQ_PROTO_ARCHIVE,query_raw,QueryRaw,Query Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,query_textQ_PROTO_ARCHIVE,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,query_typeQ_PROTO_ARCHIVE,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,subjectQ_PROTO_ARCHIVE,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARCHIVE,titleQ_PROTO_ARCHIVE,title,Title,Title,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARES,file_hashQ_PROTO_ARES,file_hash,FileHash,File Hash,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARES,nicknameQ_PROTO_ARES,nickname,Nickname,Nickname,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ARES,queryQ_PROTO_ARES,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADONGO,actionQ_PROTO_BADONGO,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADONGO,filenameQ_PROTO_BADONGO,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADONGO,filesizeQ_PROTO_BADONGO,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADONGO,loginQ_PROTO_BADONGO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADONGO,passwordQ_PROTO_BADONGO,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADONGO,upload_descriptionQ_PROTO_BADONGO,upload_description,UploadDescription,Upload Description,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,contact_loginQ_PROTO_BADOO,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,contact_uidQ_PROTO_BADOO,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,loginQ_PROTO_BADOO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,messageQ_PROTO_BADOO,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,nicknameQ_PROTO_BADOO,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,passwordQ_PROTO_BADOO,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,receiverQ_PROTO_BADOO,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,receiver_uidQ_PROTO_BADOO,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BADOO,senderQ_PROTO_BADOO,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BAIDU,encodingQ_PROTO_BAIDU,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BAIDU,query_indexQ_PROTO_BAIDU,query_index,QueryIndex,Query Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BAIDU,query_rawQ_PROTO_BAIDU,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BAIDU,query_textQ_PROTO_BAIDU,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BAIDU,query_typeQ_PROTO_BAIDU,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,applicationQ_PROTO_BASE,application,App,Application,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,application_endQ_PROTO_BASE,application_end,AppEnd,Application End,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,application_idQ_PROTO_BASE,application_id,AppID,Application ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,application_id_endQ_PROTO_BASE,application_id_end,AppIDEnd,Application ID End,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,declassifiedQ_PROTO_BASE,declassified,Declassified,Declassified,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,devQ_PROTO_BASE,dev,Dev,Dev,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,familyQ_PROTO_BASE,family,Family,Family,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,family_endQ_PROTO_BASE,family_end,FamilyEnd,Family End,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,flow_idQ_PROTO_BASE,flow_id,FlowID,Flow ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,multi_match_proto_idQ_PROTO_BASE,multi_match_proto_id,MultiMatchProtoID,Multi Match Protocol ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,path_lenQ_PROTO_BASE,path_len,PathLen,Path Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,packet_counterQ_PROTO_BASE,packet_counter,PktCounter,Packet Counter,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,session_packet_counterQ_PROTO_BASE,session_packet_counter,SessionPktCounter,Session Packet Counter,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BASE,timeQ_PROTO_BASE,time,Time,Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BEBO,is_mobile_serviceQ_PROTO_BEBO,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BEBO,loginQ_PROTO_BEBO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BEBO,passwordQ_PROTO_BEBO,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BGP,identifierQ_PROTO_BGP,identifier,Identifier,Identifier,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BGP,nlri_prefixQ_PROTO_BGP,nlri_prefix,NLRIPrefix,NLRI Prefix,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BGP,path_attr_value_as_numQ_PROTO_BGP,path_attr_value_as_num,PathAttrValueAsNum,Path Attribute Value As Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BGP,path_attr_value_local_prefQ_PROTO_BGP,path_attr_value_local_pref,PathAttrValueLocalPref,Path Attribute Value Local Preference,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BGP,path_attr_value_next_hop_ipQ_PROTO_BGP,path_attr_value_next_hop_ip,PathAttrValueNextHopIP,Path Attribute Value Next Hop IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BGP,withdrawn_prefixQ_PROTO_BGP,withdrawn_prefix,WithdrawnPrefix,Withdrawn Prefix,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BING,encodingQ_PROTO_BING,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BING,query_indexQ_PROTO_BING,query_index,QueryIndex,Query Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BING,query_rawQ_PROTO_BING,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BING,query_textQ_PROTO_BING,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BING,query_typeQ_PROTO_BING,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,canceled_chunk_data_offsetQ_PROTO_BITTORRENT,canceled_chunk_data_offset,CanceledChunkDataOffset,Canceled Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,canceled_chunk_lengthQ_PROTO_BITTORRENT,canceled_chunk_length,CanceledChunkLength,Canceled Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,canceled_chunk_numberQ_PROTO_BITTORRENT,canceled_chunk_number,CanceledChunkNumber,Canceled Chunk Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,classification_typeQ_PROTO_BITTORRENT,classification_type,ClassificationType,Classification Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,client_versionQ_PROTO_BITTORRENT,client_version,ClientVersion,Client Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_chunk_data_offsetQ_PROTO_BITTORRENT,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_chunk_lenQ_PROTO_BITTORRENT,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_chunk_numberQ_PROTO_BITTORRENT,file_chunk_number,FileChunkNum,File Chunk Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_completedQ_PROTO_BITTORRENT,file_completed,FileCompleted,File Completed,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_downloadedQ_PROTO_BITTORRENT,file_downloaded,FileDownloaded,File Downloaded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_incompleteQ_PROTO_BITTORRENT,file_incomplete,FileIncomplete,File Incomplete,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_leftQ_PROTO_BITTORRENT,file_left,FileLeft,File Left,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,filenameQ_PROTO_BITTORRENT,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,filesizeQ_PROTO_BITTORRENT,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,file_uploadedQ_PROTO_BITTORRENT,file_uploaded,FileUploaded,File Uploaded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,peer_portQ_PROTO_BITTORRENT,peer_port,PeerPort,Peer Port,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,peer_share_idQ_PROTO_BITTORRENT,peer_share_id,PeerShareID,Peer Share ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,peer_share_ipQ_PROTO_BITTORRENT,peer_share_ip,PeerShareIP,Peer Share IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,piece_lengthQ_PROTO_BITTORRENT,piece_length,PieceLength,Piece Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,torrent_filenameQ_PROTO_BITTORRENT,torrent_filename,TorrentFilename,Torrent Filename,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,trackerQ_PROTO_BITTORRENT,tracker,Tracker,Tracker,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BITTORRENT,user_agentQ_PROTO_BITTORRENT,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_avgdatarateQ_PROTO_BMFF,video_avgdatarate,VidAvgDataRate,Video Average Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_datarateQ_PROTO_BMFF,video_datarate,VidDataRate,Video Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_durationQ_PROTO_BMFF,video_duration,VidDuration,Video Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_brandQ_PROTO_BMFF,video_brand,VideBrand,Video Brand,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_heightQ_PROTO_BMFF,video_height,VidHeight,Video Height,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_typeQ_PROTO_BMFF,video_type,VidType,Video Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_uuidQ_PROTO_BMFF,video_uuid,VidUUID,Video UUID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BMFF,video_widthQ_PROTO_BMFF,video_width,VidWidth,Video Width,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,imei_receiverQ_PROTO_BSSAP,imei_receiver,IMEIReceiver,IMEI Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,imei_senderQ_PROTO_BSSAP,imei_sender,IMEISender,IMEI Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,imsi_receiverQ_PROTO_BSSAP,imsi_receiver,IMSIReceiver,IMSI Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,imsi_senderQ_PROTO_BSSAP,imsi_sender,IMSISender,IMSI Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,msisdn_receiverQ_PROTO_BSSAP,msisdn_receiver,MSISDNReceiver,MSISDN Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,msisdn_senderQ_PROTO_BSSAP,msisdn_sender,MSISDNSender,MSISDN Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,timestampQ_PROTO_BSSAP,timestamp,Timestamp,Timestamp,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BSSAP,validity_periodQ_PROTO_BSSAP,validity_period,ValidityPeriod,Validity Period,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +BXML,versionQ_PROTO_BXML,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CDP,addressQ_PROTO_CDP,address,Addr,Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CDP,device_idQ_PROTO_CDP,device_id,DeviceID,Device ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CDP,platformQ_PROTO_CDP,platform,Platform,Platform,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CDP,port_idQ_PROTO_CDP,port_id,PortID,Port ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CDP,software_versionQ_PROTO_CDP,software_version,SoftwareVersion,Software Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CDP,VTP_mgmt_domainQ_PROTO_CDP,VTP_mgmt_domain,VTPMgmtDomain,VTP Management Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHAP,challenge_nameQ_PROTO_CHAP,challenge_name,ChallengeName,Challenge Name,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHAP,message_typeQ_PROTO_CHAP,message_type,MsgType,Message Type,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHAP,response_nameQ_PROTO_CHAP,response_name,ResponseName,Response Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHROME_UPDATE,current_versionQ_PROTO_CHROME_UPDATE,current_version,CurrentVersion,Current Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHROME_UPDATE,new_versionQ_PROTO_CHROME_UPDATE,new_version,NewVersion,New Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHROME_UPDATE,plugin_current_versionQ_PROTO_CHROME_UPDATE,plugin_current_version,PluginCurrentVersion,Plugin Current Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHROME_UPDATE,plugin_idQ_PROTO_CHROME_UPDATE,plugin_id,PluginID,Plugin ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CHROME_UPDATE,plugin_new_versionQ_PROTO_CHROME_UPDATE,plugin_new_version,PluginNewVersion,Plugin New Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CUPS,informationQ_PROTO_CUPS,information,Information,Information,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CUPS,locationQ_PROTO_CUPS,location,Location,Location,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CUPS,modelQ_PROTO_CUPS,model,Model,Model,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +CUPS,printerQ_PROTO_CUPS,printer,Printer,Printer,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DAILYMOTION,emailQ_PROTO_DAILYMOTION,email,Email,Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DAILYMOTION,loginQ_PROTO_DAILYMOTION,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DAILYMOTION,passwordQ_PROTO_DAILYMOTION,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DAILYMOTION,query_rawQ_PROTO_DAILYMOTION,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DAILYMOTION,query_textQ_PROTO_DAILYMOTION,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DCERPC,interface_uuidQ_PROTO_DCERPC,interface_uuid,InterfaceUUID,Interface UUID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DCERPC,serviceQ_PROTO_DCERPC,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DEBIAN_UPDATE,package_nameQ_PROTO_DEBIAN_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DEBIAN_UPDATE,package_versionQ_PROTO_DEBIAN_UPDATE,package_version,PkgVersion,Package Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,bootfilenameQ_PROTO_DHCP,bootfilename,BootFilename,Boot Filename,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,chaddrQ_PROTO_DHCP,chaddr,CHAddr,CH Address,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,ciaddrQ_PROTO_DHCP,ciaddr,CIAddr,CI Address,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,circuit_idQ_PROTO_DHCP,circuit_id,CircuitID,Circuit ID,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,dns_serverQ_PROTO_DHCP,dns_server,DNSServer,DNS Server,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,end_statusQ_PROTO_DHCP,end_status,EndStatus,End Status,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,giaddrQ_PROTO_DHCP,giaddr,GIAddr,GI Address,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,ip_lease_timeQ_PROTO_DHCP,ip_lease_time,IPLeaseTime,IP Lease Time,amount,,Amount,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,remote_idQ_PROTO_DHCP,remote_id,RemoteID,Remote ID,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,remote_id_subtypeQ_PROTO_DHCP,remote_id_subtype,RemoteIDSubtype,Remote ID Subtype,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,remote_id_typeQ_PROTO_DHCP,remote_id_type,RemoteIDType,Remote ID Type,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,routerQ_PROTO_DHCP,router,Router,Router,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,siaddrQ_PROTO_DHCP,siaddr,SIAddr,SI Address,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,snameQ_PROTO_DHCP,sname,Sname,Surname,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,subnetmaskQ_PROTO_DHCP,subnetmask,Subnetmask,Subnetmask,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DHCP,yiaddrQ_PROTO_DHCP,yiaddr,Yiaddr,Yiaddr,,,,,1st Review,Relevant DHCP info already passed via host info.,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_input_octetsQ_PROTO_DIAMETER,acct_input_octets,AcctInputOctets,Account Input Octets,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_multi_session_idQ_PROTO_DIAMETER,acct_multi_session_id,AcctMultiSessionID,Account Multi Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_output_octetsQ_PROTO_DIAMETER,acct_output_octets,AcctOutputOctets,Account Output Octets,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_record_numberQ_PROTO_DIAMETER,acct_record_number,AcctRecordNum,Account Record Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_record_typeQ_PROTO_DIAMETER,acct_record_type,AcctRecordType,Account Record Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_session_idQ_PROTO_DIAMETER,acct_session_id,AcctSessionID,Account Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,acct_sub_session_idQ_PROTO_DIAMETER,acct_sub_session_id,AcctSubSessionID,Account SubSession ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,application_idQ_PROTO_DIAMETER,application_id,AppID,Application ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,auth_request_typeQ_PROTO_DIAMETER,auth_request_type,AuthReqType,Authentication Request Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,called_station_idQ_PROTO_DIAMETER,called_station_id,CalledStationID,Called Station ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,calling_station_idQ_PROTO_DIAMETER,calling_station_id,CallingStationID,Calling Station ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,command_codeQ_PROTO_DIAMETER,command_code,CommandCode,Command Code,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,destination_hostQ_PROTO_DIAMETER,destination_host,DestinationHost,Destination Host,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,end_to_end_idQ_PROTO_DIAMETER,end_to_end_id,EndToEndID,End To End ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,framed_ipQ_PROTO_DIAMETER,framed_ip,FramedIP,Framed IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,hop_by_hop_idQ_PROTO_DIAMETER,hop_by_hop_id,HopByHopID,Hop By Hop ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,loginQ_PROTO_DIAMETER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,nas_idQ_PROTO_DIAMETER,nas_id,NASID,NAS ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,nas_ipQ_PROTO_DIAMETER,nas_ip,NASIP,NAS IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,nas_portQ_PROTO_DIAMETER,nas_port,NASPort,NAS Port,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,nas_port_idQ_PROTO_DIAMETER,nas_port_id,NASPortID,NAS Port ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,nas_port_typeQ_PROTO_DIAMETER,nas_port_type,NASPortType,NAS Port Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,origin_hostQ_PROTO_DIAMETER,origin_host,OriginHost,Origin Host,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,result_codeQ_PROTO_DIAMETER,result_code,ResultCode,Result Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,session_idQ_PROTO_DIAMETER,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIAMETER,terminate_causeQ_PROTO_DIAMETER,terminate_cause,TerminateCause,Terminate Cause,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,actionQ_PROTO_DIMP,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,attach_idQ_PROTO_DIMP,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,attach_sizeQ_PROTO_DIMP,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,attach_typeQ_PROTO_DIMP,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,dateQ_PROTO_DIMP,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,draftQ_PROTO_DIMP,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,attach_filenameQ_PROTO_DIMP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,loginQ_PROTO_DIMP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msg_idQ_PROTO_DIMP,msg_id,MsgID,Message ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_dateQ_PROTO_DIMP,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_folderQ_PROTO_DIMP,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_receiver_aliasQ_PROTO_DIMP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_senderQ_PROTO_DIMP,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_sender_aliasQ_PROTO_DIMP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_sender_emailQ_PROTO_DIMP,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,msglist_subjectQ_PROTO_DIMP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,passwordQ_PROTO_DIMP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,receiverQ_PROTO_DIMP,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,receiver_aliasQ_PROTO_DIMP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,receiver_emailQ_PROTO_DIMP,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,receiver_typeQ_PROTO_DIMP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,senderQ_PROTO_DIMP,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,sender_aliasQ_PROTO_DIMP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,sender_emailQ_PROTO_DIMP,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIMP,subjectQ_PROTO_DIMP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,file_chunk_data_offsetQ_PROTO_DIRECTCONNECT,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,file_chunk_lenQ_PROTO_DIRECTCONNECT,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,file_compression_typeQ_PROTO_DIRECTCONNECT,file_compression_type,FileCompressionType,File Compression Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,file_hashQ_PROTO_DIRECTCONNECT,file_hash,FileHash,File Hash,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,file_is_compressedQ_PROTO_DIRECTCONNECT,file_is_compressed,FileIsCompressed,File Is Compressed,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,loginQ_PROTO_DIRECTCONNECT,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,queryQ_PROTO_DIRECTCONNECT,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,query_wayQ_PROTO_DIRECTCONNECT,query_way,QueryWay,Query Way,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,sr_filehashQ_PROTO_DIRECTCONNECT,sr_filehash,SrFileHash,Sr File Hash,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,sr_filenameQ_PROTO_DIRECTCONNECT,sr_filename,SrFilename,Sr Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DIRECTCONNECT,sr_filesizeQ_PROTO_DIRECTCONNECT,sr_filesize,SrFileSize,Sr File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,ancountQ_PROTO_DNS,ancount,ANCount,AN Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,arcountQ_PROTO_DNS,arcount,ARCount,AR Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,hostQ_PROTO_DNS,host,Host,Host,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,host_addrQ_PROTO_DNS,host_addr,HostAddr,Host Address,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,nameQ_PROTO_DNS,name,Name,Name,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,nscountQ_PROTO_DNS,nscount,NSCount,NS Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,qdcountQ_PROTO_DNS,qdcount,QDCount,QD Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,queryQ_PROTO_DNS,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,response_timeQ_PROTO_DNS,response_time,ResponseTime,Response Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,reverse_addrQ_PROTO_DNS,reverse_addr,ReverseAddr,Reverse Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,transaction_idQ_PROTO_DNS,transaction_id,TransactionID,Transaction ID,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +DNS,ttlQ_PROTO_DNS,ttl,TTL,Time To Live,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBAY,query_rawQ_PROTO_EBAY,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBAY,query_textQ_PROTO_EBAY,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,chat_imQ_PROTO_EBUDDY,chat_im,ChatIM,Chat IM,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,client_messageQ_PROTO_EBUDDY,client_message,ClientMessage,Client Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,client_statusQ_PROTO_EBUDDY,client_status,ClientStatus,Client Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,contact_blockedQ_PROTO_EBUDDY,contact_blocked,ContactBlocked,Contact Blocked,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,contact_imQ_PROTO_EBUDDY,contact_im,ContactIM,Contact IM,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,contact_loginQ_PROTO_EBUDDY,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,contact_messageQ_PROTO_EBUDDY,contact_message,ContactMessage,Contact Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,contact_nicknameQ_PROTO_EBUDDY,contact_nickname,ContactNickname,Contact Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,contact_statusQ_PROTO_EBUDDY,contact_status,ContactStatus,Contact Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,e_actionQ_PROTO_EBUDDY,e_action,EAction,E Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,im_networkQ_PROTO_EBUDDY,im_network,IMNetwork,IM Network,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,loginQ_PROTO_EBUDDY,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,messageQ_PROTO_EBUDDY,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,nicknameQ_PROTO_EBUDDY,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,passwordQ_PROTO_EBUDDY,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,receiverQ_PROTO_EBUDDY,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EBUDDY,senderQ_PROTO_EBUDDY,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,file_chunk_data_offsetQ_PROTO_EDONKEY,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,file_chunk_lenQ_PROTO_EDONKEY,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,file_compression_typeQ_PROTO_EDONKEY,file_compression_type,FileCompressionType,File Compression Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,file_is_compressedQ_PROTO_EDONKEY,file_is_compressed,FileIsCompressed,File Is Compressed,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,filenameQ_PROTO_EDONKEY,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,filesizeQ_PROTO_EDONKEY,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,loginQ_PROTO_EDONKEY,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,queryQ_PROTO_EDONKEY,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EDONKEY,query_typeQ_PROTO_EDONKEY,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +EIGRP,as_numberQ_PROTO_EIGRP,as_number,ASNum,AS Number,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETH,dst_netQ_PROTO_ETH,dst_net,DstNet,Destination Net,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETH,ignore_encapsulationsQ_PROTO_ETH,ignore_encapsulations,IgnoreEncapsulations,Ignore Encapsulations,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETH,src_netQ_PROTO_ETH,src_net,SrcNet,Source Network,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,authorization_country_codeQ_PROTO_ETSI_LI,authorization_country_code,AuthCountryCode,Authorization Country Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,communication_id_numberQ_PROTO_ETSI_LI,communication_id_number,CommunicationIDNumber,Communication IDNumber,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,delivery_country_codeQ_PROTO_ETSI_LI,delivery_country_code,DeliveryCountryCode,Delivery Country Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,etsi_671_neiQ_PROTO_ETSI_LI,etsi_671_nei,ETSI671NEI,ETSI 671 NEI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,liidQ_PROTO_ETSI_LI,liid,LIID,LIID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,microsecondQ_PROTO_ETSI_LI,microsecond,Microsecond,Microsecond,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,network_element_idQ_PROTO_ETSI_LI,network_element_id,NetworkElementID,Network Element ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,operator_idQ_PROTO_ETSI_LI,operator_id,OperatorID,Operator ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,secondQ_PROTO_ETSI_LI,second,Second,Second,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,sequence_numberQ_PROTO_ETSI_LI,sequence_number,SeqNum,Sequence Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ETSI_LI,time_stamp_qualifierQ_PROTO_ETSI_LI,time_stamp_qualifier,TimeStampQualifier,Time Stamp Qualifier,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,actionQ_PROTO_FACEBOOK,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,application_actionQ_PROTO_FACEBOOK,application_action,AppAction,Application Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,application_nameQ_PROTO_FACEBOOK,application_name,AppName,Application Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,client_timeQ_PROTO_FACEBOOK,client_time,ClientTime,Client Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,collegeQ_PROTO_FACEBOOK,college,College,College,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,commentQ_PROTO_FACEBOOK,comment,Comment,Comment,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,contact_nameQ_PROTO_FACEBOOK,contact_name,ContactName,Contact Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,contact_uidQ_PROTO_FACEBOOK,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,employerQ_PROTO_FACEBOOK,employer,Employer,Employer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,feed_likeQ_PROTO_FACEBOOK,feed_like,FeedLike,Feed Like,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,feed_textQ_PROTO_FACEBOOK,feed_text,FeedText,Feed Text,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,feed_typeQ_PROTO_FACEBOOK,feed_type,FeedType,Feed Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,firstnameQ_PROTO_FACEBOOK,firstname,FirstName,First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,highschoolQ_PROTO_FACEBOOK,highschool,Highschool,Highschool,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,is_mobile_serviceQ_PROTO_FACEBOOK,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,lastnameQ_PROTO_FACEBOOK,lastname,LastName,Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,locationQ_PROTO_FACEBOOK,location,Location,Location,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,loginQ_PROTO_FACEBOOK,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,messageQ_PROTO_FACEBOOK,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,message_idQ_PROTO_FACEBOOK,message_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,nameQ_PROTO_FACEBOOK,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,passwordQ_PROTO_FACEBOOK,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,profile_nameQ_PROTO_FACEBOOK,profile_name,ProfileName,Profile Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,profile_valueQ_PROTO_FACEBOOK,profile_value,ProfileValue,Profile Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,query_rawQ_PROTO_FACEBOOK,query_raw,QueryRaw,Query Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,query_textQ_PROTO_FACEBOOK,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,receiverQ_PROTO_FACEBOOK,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,receiver_sexQ_PROTO_FACEBOOK,receiver_sex,ReceiverSex,Receiver Sex,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,receiver_uidQ_PROTO_FACEBOOK,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,senderQ_PROTO_FACEBOOK,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,sender_emailQ_PROTO_FACEBOOK,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,sender_sexQ_PROTO_FACEBOOK,sender_sex,SenderSex,Sender Sex,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,sender_uidQ_PROTO_FACEBOOK,sender_uid,SenderUID,Sender UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,sexQ_PROTO_FACEBOOK,sex,Sex,Sex,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,share_textQ_PROTO_FACEBOOK,share_text,ShareText,Share Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,share_withQ_PROTO_FACEBOOK,share_with,ShareWith,Share With,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,status_updateQ_PROTO_FACEBOOK,status_update,StatusUpdate,Status Update,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK,uidQ_PROTO_FACEBOOK,uid,UID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_APPS,application_actionQ_PROTO_FACEBOOK_APPS,application_action,AppAction,Application Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_APPS,application_nameQ_PROTO_FACEBOOK_APPS,application_name,AppName,Application Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,actionQ_PROTO_FACEBOOK_MAIL,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,attach_idQ_PROTO_FACEBOOK_MAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,attach_sizeQ_PROTO_FACEBOOK_MAIL,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,attach_typeQ_PROTO_FACEBOOK_MAIL,attach_type,AttachType,Attach Type,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,contact_nameQ_PROTO_FACEBOOK_MAIL,contact_name,ContactName,Contact Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,contact_uidQ_PROTO_FACEBOOK_MAIL,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,dateQ_PROTO_FACEBOOK_MAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,attach_filenameQ_PROTO_FACEBOOK_MAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,loginQ_PROTO_FACEBOOK_MAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,msg_idQ_PROTO_FACEBOOK_MAIL,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,receiverQ_PROTO_FACEBOOK_MAIL,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,receiver_aliasQ_PROTO_FACEBOOK_MAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,receiver_emailQ_PROTO_FACEBOOK_MAIL,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,receiver_uidQ_PROTO_FACEBOOK_MAIL,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,senderQ_PROTO_FACEBOOK_MAIL,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,sender_aliasQ_PROTO_FACEBOOK_MAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,sender_emailQ_PROTO_FACEBOOK_MAIL,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,sender_uidQ_PROTO_FACEBOOK_MAIL,sender_uid,SenderUID,Sender UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,session_idQ_PROTO_FACEBOOK_MAIL,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,subjectQ_PROTO_FACEBOOK_MAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,thread_idQ_PROTO_FACEBOOK_MAIL,thread_id,ThreadNum,Thread Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACEBOOK_MAIL,uidQ_PROTO_FACEBOOK_MAIL,uid,UID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACETIME,serviceQ_PROTO_FACETIME,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACETIME,service_durationQ_PROTO_FACETIME,service_duration,ServiceDuration,Service Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACETIME,service_duration_tvQ_PROTO_FACETIME,service_duration_tv,ServiceDurationTV,Service Duration TV,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FACETIME,service_idQ_PROTO_FACETIME,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FIREFOX_UPDATE,current_versionQ_PROTO_FIREFOX_UPDATE,current_version,CurrentVersion,Current Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FIREFOX_UPDATE,new_versionQ_PROTO_FIREFOX_UPDATE,new_version,NewVersion,New Version,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FIREFOX_UPDATE,plugin_nameQ_PROTO_FIREFOX_UPDATE,plugin_name,PluginName,Plugin Name,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FIREFOX_UPDATE,plugin_new_versionQ_PROTO_FIREFOX_UPDATE,plugin_new_version,PluginNewVersion,Plugin New Version,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FLASHPLUGIN_UPDATE,current_versionQ_PROTO_FLASHPLUGIN_UPDATE,current_version,CurrentVersion,Current Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FLASHPLUGIN_UPDATE,new_versionQ_PROTO_FLASHPLUGIN_UPDATE,new_version,NewVersion,New Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FREEBSD_UPDATE,package_nameQ_PROTO_FREEBSD_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FRIENDSTER,loginQ_PROTO_FRIENDSTER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FRIENDSTER,nameQ_PROTO_FRIENDSTER,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FRIENDSTER,passwordQ_PROTO_FRIENDSTER,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,data_port_end_offsetQ_PROTO_FTP,data_port_end_offset,DataPortEndOffset,Data Port End Offset,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,data_port_start_offsetQ_PROTO_FTP,data_port_start_offset,DataPortStartOffset,Data Port Start Offset,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,filenameQ_PROTO_FTP,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,filesizeQ_PROTO_FTP,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,greeting_messageQ_PROTO_FTP,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,indexQ_PROTO_FTP,index,Index,Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,loadwayQ_PROTO_FTP,loadway,Loadway,Loadway,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,loginQ_PROTO_FTP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,methodQ_PROTO_FTP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,method_contentQ_PROTO_FTP,method_content,MethodContent,Method Content,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,offsetQ_PROTO_FTP,offset,Offset,Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,passwordQ_PROTO_FTP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,return_contentQ_PROTO_FTP,return_content,ReturnContent,Return Content,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +FTP,transfer_durationQ_PROTO_FTP,transfer_duration,TransferDuration,Transfer Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GIOP,ior_type_idQ_PROTO_GIOP,ior_type_id,IORTypeID,IOR Type ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GIOP,message_typeQ_PROTO_GIOP,message_type,MsgType,Message Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GIOP,request_idQ_PROTO_GIOP,request_id,RequestID,Request ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GIOP,request_operationQ_PROTO_GIOP,request_operation,RequestOperation,Request Operation,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GIOP,versionQ_PROTO_GIOP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,actionQ_PROTO_GMAIL,action,Action,Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,attach_idQ_PROTO_GMAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,attach_sizeQ_PROTO_GMAIL,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,attach_typeQ_PROTO_GMAIL,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,contact_aliasQ_PROTO_GMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,contact_emailQ_PROTO_GMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,current_ip_addressQ_PROTO_GMAIL,current_ip_address,CurrentIPAddr,Current IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,dateQ_PROTO_GMAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,draftQ_PROTO_GMAIL,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,encodingQ_PROTO_GMAIL,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,attach_filenameQ_PROTO_GMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,last_activityQ_PROTO_GMAIL,last_activity,LastActivity,Last Activity,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,last_activity_timestampQ_PROTO_GMAIL,last_activity_timestamp,LastActivityTimestamp,Last Activity Timestamp,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,loginQ_PROTO_GMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msg_idQ_PROTO_GMAIL,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_dateQ_PROTO_GMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_folderQ_PROTO_GMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_msgidQ_PROTO_GMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_receiverQ_PROTO_GMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_receiver_aliasQ_PROTO_GMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_receiver_emailQ_PROTO_GMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_senderQ_PROTO_GMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_sender_aliasQ_PROTO_GMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_sender_emailQ_PROTO_GMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,msglist_subjectQ_PROTO_GMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,nameQ_PROTO_GMAIL,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,next_attach_idQ_PROTO_GMAIL,next_attach_id,NextAttachID,Next Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,other_ip_addressQ_PROTO_GMAIL,other_ip_address,OtherIPAddr,Other IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,real_sender_domainQ_PROTO_GMAIL,real_sender_domain,RealSenderDomain,Real Sender Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,real_sender_msgidQ_PROTO_GMAIL,real_sender_msgid,RealSenderMsgID,Real Sender Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,receiverQ_PROTO_GMAIL,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,receiver_aliasQ_PROTO_GMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,receiver_emailQ_PROTO_GMAIL,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,receiver_typeQ_PROTO_GMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,replytoQ_PROTO_GMAIL,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,senderQ_PROTO_GMAIL,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,sender_aliasQ_PROTO_GMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,sender_emailQ_PROTO_GMAIL,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,session_idQ_PROTO_GMAIL,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,subjectQ_PROTO_GMAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,thumbnailQ_PROTO_GMAIL,thumbnail,Thumbnail,Thumbnail,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL,versionQ_PROTO_GMAIL,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,actionQ_PROTO_GMAIL_BASIC,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,attach_idQ_PROTO_GMAIL_BASIC,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,attach_sizeQ_PROTO_GMAIL_BASIC,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,attach_typeQ_PROTO_GMAIL_BASIC,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,contact_aliasQ_PROTO_GMAIL_BASIC,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,contact_emailQ_PROTO_GMAIL_BASIC,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,dateQ_PROTO_GMAIL_BASIC,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,draftQ_PROTO_GMAIL_BASIC,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,attach_filenameQ_PROTO_GMAIL_BASIC,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,loginQ_PROTO_GMAIL_BASIC,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msg_idQ_PROTO_GMAIL_BASIC,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msglist_dateQ_PROTO_GMAIL_BASIC,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msglist_folderQ_PROTO_GMAIL_BASIC,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msglist_msgidQ_PROTO_GMAIL_BASIC,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msglist_receiverQ_PROTO_GMAIL_BASIC,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msglist_senderQ_PROTO_GMAIL_BASIC,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,msglist_subjectQ_PROTO_GMAIL_BASIC,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,receiverQ_PROTO_GMAIL_BASIC,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,receiver_aliasQ_PROTO_GMAIL_BASIC,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,receiver_emailQ_PROTO_GMAIL_BASIC,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,receiver_typeQ_PROTO_GMAIL_BASIC,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,senderQ_PROTO_GMAIL_BASIC,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,sender_aliasQ_PROTO_GMAIL_BASIC,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,sender_emailQ_PROTO_GMAIL_BASIC,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,session_idQ_PROTO_GMAIL_BASIC,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_BASIC,subjectQ_PROTO_GMAIL_BASIC,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_CHAT,calleeQ_PROTO_GMAIL_CHAT,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_CHAT,callerQ_PROTO_GMAIL_CHAT,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_CHAT,loginQ_PROTO_GMAIL_CHAT,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_CHAT,messageQ_PROTO_GMAIL_CHAT,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_CHAT,receiverQ_PROTO_GMAIL_CHAT,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_CHAT,senderQ_PROTO_GMAIL_CHAT,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,actionQ_PROTO_GMAIL_MOBILE,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,attach_idQ_PROTO_GMAIL_MOBILE,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,contact_aliasQ_PROTO_GMAIL_MOBILE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,contact_emailQ_PROTO_GMAIL_MOBILE,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,contact_uidQ_PROTO_GMAIL_MOBILE,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,dateQ_PROTO_GMAIL_MOBILE,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,draftQ_PROTO_GMAIL_MOBILE,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,email_indexQ_PROTO_GMAIL_MOBILE,email_index,EmailIndex,Email Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,attach_filenameQ_PROTO_GMAIL_MOBILE,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,loginQ_PROTO_GMAIL_MOBILE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,msglist_folderQ_PROTO_GMAIL_MOBILE,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,msglist_msgidQ_PROTO_GMAIL_MOBILE,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,msglist_receiver_aliasQ_PROTO_GMAIL_MOBILE,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,msglist_sender_aliasQ_PROTO_GMAIL_MOBILE,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,msglist_subjectQ_PROTO_GMAIL_MOBILE,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,receiverQ_PROTO_GMAIL_MOBILE,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,receiver_aliasQ_PROTO_GMAIL_MOBILE,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,receiver_emailQ_PROTO_GMAIL_MOBILE,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,receiver_typeQ_PROTO_GMAIL_MOBILE,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,senderQ_PROTO_GMAIL_MOBILE,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,sender_aliasQ_PROTO_GMAIL_MOBILE,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,sender_emailQ_PROTO_GMAIL_MOBILE,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,session_idQ_PROTO_GMAIL_MOBILE,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMAIL_MOBILE,subjectQ_PROTO_GMAIL_MOBILE,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,attach_idQ_PROTO_GMX,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,attach_filenameQ_PROTO_GMX,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,loginQ_PROTO_GMX,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,msg_idQ_PROTO_GMX,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,receiverQ_PROTO_GMX,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,receiver_aliasQ_PROTO_GMX,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,receiver_emailQ_PROTO_GMX,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,receiver_typeQ_PROTO_GMX,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,senderQ_PROTO_GMX,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,sender_aliasQ_PROTO_GMX,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,sender_emailQ_PROTO_GMX,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,session_idQ_PROTO_GMX,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GMX,subjectQ_PROTO_GMX,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,file_chunk_data_offsetQ_PROTO_GNUTELLA,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,file_chunk_lenQ_PROTO_GNUTELLA,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,file_ed2kQ_PROTO_GNUTELLA,file_ed2k,FileED2K,File ED2K,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,file_md5Q_PROTO_GNUTELLA,file_md5,FileMD5,File MD5,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,filenameQ_PROTO_GNUTELLA,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,file_sha1Q_PROTO_GNUTELLA,file_sha1,FileSHA1,File SHA1,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,filesizeQ_PROTO_GNUTELLA,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,peer_addrQ_PROTO_GNUTELLA,peer_addr,PeerAddr,Peer Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,queryQ_PROTO_GNUTELLA,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,serverQ_PROTO_GNUTELLA,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GNUTELLA,user_agentQ_PROTO_GNUTELLA,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE,encodingQ_PROTO_GOOGLE,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE,loginQ_PROTO_GOOGLE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE,query_indexQ_PROTO_GOOGLE,query_index,QueryIndex,Query Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE,query_rawQ_PROTO_GOOGLE,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE,query_textQ_PROTO_GOOGLE,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE,query_typeQ_PROTO_GOOGLE,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_bid_typeQ_PROTO_GOOGLE_ADS,ad_bid_type,AdBidType,Ad Bid Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_channelQ_PROTO_GOOGLE_ADS,ad_channel,AdChannel,Ad Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_clientQ_PROTO_GOOGLE_ADS,ad_client,AdClient,Ad Client,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_pageQ_PROTO_GOOGLE_ADS,ad_page,AdPage,Ad Page,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_statusQ_PROTO_GOOGLE_ADS,ad_status,AdStatus,Ad Status,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_targeting_typeQ_PROTO_GOOGLE_ADS,ad_targeting_type,AdTargetingType,Ad Targeting Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_textQ_PROTO_GOOGLE_ADS,ad_text,AdText,Ad Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_titleQ_PROTO_GOOGLE_ADS,ad_title,AdTitle,Ad Title,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_typeQ_PROTO_GOOGLE_ADS,ad_type,AdType,Ad Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_urlQ_PROTO_GOOGLE_ADS,ad_url,AdURL,Ad URL,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_url_fullQ_PROTO_GOOGLE_ADS,ad_url_full,AdURLFull,Ad URL Full,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_ADS,ad_visible_urlQ_PROTO_GOOGLE_ADS,ad_visible_url,AdVisibleURL,Ad Visible URL,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,encodingQ_PROTO_GOOGLE_EARTH,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,end_addr_rawQ_PROTO_GOOGLE_EARTH,end_addr_raw,EndAddrRaw,End Address Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,end_addr_textQ_PROTO_GOOGLE_EARTH,end_addr_text,EndAddrText,End Address Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,near_rawQ_PROTO_GOOGLE_EARTH,near_raw,NearRaw,Near Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,near_textQ_PROTO_GOOGLE_EARTH,near_text,NearText,Near Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,query_rawQ_PROTO_GOOGLE_EARTH,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,query_textQ_PROTO_GOOGLE_EARTH,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,start_addr_rawQ_PROTO_GOOGLE_EARTH,start_addr_raw,StartAddrRaw,Start Address Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_EARTH,start_addr_textQ_PROTO_GOOGLE_EARTH,start_addr_text,StartAddrText,Start Address Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,actionQ_PROTO_GOOGLE_GROUPS,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,aliasQ_PROTO_GOOGLE_GROUPS,alias,Alias,Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,dateQ_PROTO_GOOGLE_GROUPS,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,group_detailed_descriptionQ_PROTO_GOOGLE_GROUPS,group_detailed_description,GroupDetailedDesc,Group Detailed Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,group_join_requestQ_PROTO_GOOGLE_GROUPS,group_join_request,GroupJoinRequest,Group Join Request,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,group_nameQ_PROTO_GOOGLE_GROUPS,group_name,GroupName,Group Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,loginQ_PROTO_GOOGLE_GROUPS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,member_aliasQ_PROTO_GOOGLE_GROUPS,member_alias,MemberAlias,Member Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,msglist_contentQ_PROTO_GOOGLE_GROUPS,msglist_content,MsgListContent,Message List Content,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,msglist_dateQ_PROTO_GOOGLE_GROUPS,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,msglist_senderQ_PROTO_GOOGLE_GROUPS,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,msglist_sender_aliasQ_PROTO_GOOGLE_GROUPS,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,msglist_sender_emailQ_PROTO_GOOGLE_GROUPS,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,msglist_subjectQ_PROTO_GOOGLE_GROUPS,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,query_rawQ_PROTO_GOOGLE_GROUPS,query_raw,QueryRaw,Query Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,query_textQ_PROTO_GOOGLE_GROUPS,query_text,QueryText,Query Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,receiverQ_PROTO_GOOGLE_GROUPS,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,receiver_aliasQ_PROTO_GOOGLE_GROUPS,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,receiver_emailQ_PROTO_GOOGLE_GROUPS,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,receiver_typeQ_PROTO_GOOGLE_GROUPS,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,senderQ_PROTO_GOOGLE_GROUPS,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,sender_aliasQ_PROTO_GOOGLE_GROUPS,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,sender_emailQ_PROTO_GOOGLE_GROUPS,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_GROUPS,subjectQ_PROTO_GOOGLE_GROUPS,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,eastQ_PROTO_GOOGLE_MAPS,east,East,East,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,encodingQ_PROTO_GOOGLE_MAPS,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,end_addrQ_PROTO_GOOGLE_MAPS,end_addr,EndAddr,End Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,end_addr_rawQ_PROTO_GOOGLE_MAPS,end_addr_raw,EndAddrRaw,End Address Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,northQ_PROTO_GOOGLE_MAPS,north,North,North,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,query_rawQ_PROTO_GOOGLE_MAPS,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,query_textQ_PROTO_GOOGLE_MAPS,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,southQ_PROTO_GOOGLE_MAPS,south,South,South,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,start_addrQ_PROTO_GOOGLE_MAPS,start_addr,StartAddr,Start Address,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,start_addr_rawQ_PROTO_GOOGLE_MAPS,start_addr_raw,StartAddrRaw,Start Address Raw,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,westQ_PROTO_GOOGLE_MAPS,west,West,West,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_MAPS,zoomQ_PROTO_GOOGLE_MAPS,zoom,Zoom,Zoom,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOOGLE_PLAY,application_nameQ_PROTO_GOOGLE_PLAY,application_name,AppName,Application Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOUGOU,query_rawQ_PROTO_GOUGOU,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GOUGOU,query_textQ_PROTO_GOUGOU,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GRE,protocolQ_PROTO_GRE,protocol,Proto,Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,access_pointQ_PROTO_GTP,access_point,AccessPoint,Access Point,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,create_ctxt_delayQ_PROTO_GTP,create_ctxt_delay,CreateCtxtDelay,Create Ctxt Delay,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,gsn_addressQ_PROTO_GTP,gsn_address,GSNAddr,GSN Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,gsn_address_controlQ_PROTO_GTP,gsn_address_control,GSNAddrControl,GSN Address Control,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,gsn_address_dataQ_PROTO_GTP,gsn_address_data,GSNAddrData,GSN Address Data,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,gsn_typeQ_PROTO_GTP,gsn_type,GSNType,GSN Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,imeiQ_PROTO_GTP,imei,IMEI,IMEI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,imei_svQ_PROTO_GTP,imei_sv,IMEISV,IMEI SV,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,imei_tacQ_PROTO_GTP,imei_tac,IMEITAC,IMEI TAC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,imsiQ_PROTO_GTP,imsi,IMSI,IMSI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,imsi_ccQ_PROTO_GTP,imsi_cc,IMSICC,IMSI CC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,imsi_ncQ_PROTO_GTP,imsi_nc,IMSINC,IMSI NC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,locationQ_PROTO_GTP,location,Location,Location,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_ciQ_PROTO_GTP,location_ci,LocationCI,Location CI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_lacQ_PROTO_GTP,location_lac,LocationLAC,Location LAC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_mccQ_PROTO_GTP,location_mcc,LocationMCC,Location MCC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_mncQ_PROTO_GTP,location_mnc,LocationMNC,Location MNC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_raiQ_PROTO_GTP,location_rai,LocationRAI,Location RAI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_sacQ_PROTO_GTP,location_sac,LocationSAC,Location SAC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,location_typeQ_PROTO_GTP,location_type,LocationType,Location Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,ms_addressQ_PROTO_GTP,ms_address,MsAddr,Ms Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,ms_address_peerQ_PROTO_GTP,ms_address_peer,MsAddrPeer,Ms Address Peer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,msisdnQ_PROTO_GTP,msisdn,MSISDN,MSISDN,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_alloc_ret_prioQ_PROTO_GTP,qos_alloc_ret_prio,QosAllocRetPrio,Qos Alloc Ret Prio,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_delayQ_PROTO_GTP,qos_delay,QosDelay,Qos Delay,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_max_downlinkQ_PROTO_GTP,qos_max_downlink,QosMaxDownlink,Qos Max Downlink,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_max_uplinkQ_PROTO_GTP,qos_max_uplink,QosMaxUplink,Qos Max Uplink,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_meanQ_PROTO_GTP,qos_mean,QosMean,Qos Mean,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_peakQ_PROTO_GTP,qos_peak,QosPeak,Qos Peak,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_precedenceQ_PROTO_GTP,qos_precedence,QosPrecedence,Qos Precedence,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,qos_reliabilityQ_PROTO_GTP,qos_reliability,QosReliability,Qos Reliability,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,raiQ_PROTO_GTP,rai,RAI,RAI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,reply_cause_codeQ_PROTO_GTP,reply_cause_code,ReplyCauseCode,Reply Cause Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,session_timeQ_PROTO_GTP,session_time,SessionTime,Session Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,start_timeQ_PROTO_GTP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,stop_timeQ_PROTO_GTP,stop_time,StopTime,Stop Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,teidQ_PROTO_GTP,teid,TEID,TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,teid_controlQ_PROTO_GTP,teid_control,TEIDControl,TEID Control,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTP,teid_dataQ_PROTO_GTP,teid_data,TEIDData,TEID Data,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,access_pointQ_PROTO_GTPV2,access_point,AccessPoint,Access Point,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,create_ctxt_delayQ_PROTO_GTPV2,create_ctxt_delay,CreateCtxtDelay,Create Ctxt Delay,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,imeiQ_PROTO_GTPV2,imei,IMEI,IMEI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,imei_svQ_PROTO_GTPV2,imei_sv,IMEISV,IMEI SV,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,imei_tacQ_PROTO_GTPV2,imei_tac,IMEITAC,IMEI TAC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,imsiQ_PROTO_GTPV2,imsi,IMSI,IMSI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,imsi_ccQ_PROTO_GTPV2,imsi_cc,IMSICC,IMSI CC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,imsi_ncQ_PROTO_GTPV2,imsi_nc,IMSINC,IMSI NC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,ms_addressQ_PROTO_GTPV2,ms_address,MsAddr,Ms Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,msisdnQ_PROTO_GTPV2,msisdn,MSISDN,MSISDN,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,reply_cause_codeQ_PROTO_GTPV2,reply_cause_code,ReplyCauseCode,Reply Cause Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s10_mme_gtpc_addressQ_PROTO_GTPV2,s10_mme_gtpc_address,S10MMEGTPCAddr,S10 Mme Gtpc Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s10_mme_gtpc_teidQ_PROTO_GTPV2,s10_mme_gtpc_teid,S10MMEGTPCTEID,S10 Mme Gtpc Gtpc TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s11_mme_gtpc_addressQ_PROTO_GTPV2,s11_mme_gtpc_address,S11MMEGTPCAddr,S11 Mme Gtpc Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s11_mme_gtpc_teidQ_PROTO_GTPV2,s11_mme_gtpc_teid,S11MMEGTPCTEID,S11 Mme Gtpc Gtpc TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s11_s4_sgw_gtpc_addressQ_PROTO_GTPV2,s11_s4_sgw_gtpc_address,S11S4SGWGTPCAddr,S11 S4 Sgw Gtpc Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s11_s4_sgw_gtpc_teidQ_PROTO_GTPV2,s11_s4_sgw_gtpc_teid,S11S4SGWGTPCTEID,S11 S4 SGW GTPC TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s12_rnc_gtpu_addressQ_PROTO_GTPV2,s12_rnc_gtpu_address,S12RNCGTPUAddr,S12 RNC GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s12_rnc_gtpu_teidQ_PROTO_GTPV2,s12_rnc_gtpu_teid,S12RNCGTPUTEID,S12 RNC GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s12_sgw_gtpu_addressQ_PROTO_GTPV2,s12_sgw_gtpu_address,S12SGWGTPUAddr,S12 SGW GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s12_sgw_gtpu_teidQ_PROTO_GTPV2,s12_sgw_gtpu_teid,S12SGWGTPUTEID,S12 SGW GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s1u_enodeb_gtpu_addressQ_PROTO_GTPV2,s1u_enodeb_gtpu_address,S1UEnodebGTPUAddr,S1U Enodeb GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s1u_enodeb_gtpu_teidQ_PROTO_GTPV2,s1u_enodeb_gtpu_teid,S1UenodebGTPUTEID,S1U Enodeb GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s1u_sgw_gtpu_addressQ_PROTO_GTPV2,s1u_sgw_gtpu_address,S1USGWGTPUAddr,S1 USGW GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s1u_sgw_gtpu_teidQ_PROTO_GTPV2,s1u_sgw_gtpu_teid,S1USGWGTPUTEID,S1 USGW GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s3_mme_gtpc_addressQ_PROTO_GTPV2,s3_mme_gtpc_address,S3MMEGTPCAddr,S3 MME GTPC Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s3_mme_gtpc_teidQ_PROTO_GTPV2,s3_mme_gtpc_teid,S3MMEGTPCTEID,S3 MME GTPC TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s3_sgsn_gtpc_addressQ_PROTO_GTPV2,s3_sgsn_gtpc_address,S3SGSNGTPCAddr,S3 SGSN GTPC Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s3_sgsn_gtpc_teidQ_PROTO_GTPV2,s3_sgsn_gtpc_teid,S3SGSNGTPCTEID,S3 SGSN GTPC TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s4_sgsn_gtpc_addressQ_PROTO_GTPV2,s4_sgsn_gtpc_address,S4SGSNGTPCAddr,S4 SGSN GTPC Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s4_sgsn_gtpc_teidQ_PROTO_GTPV2,s4_sgsn_gtpc_teid,S4SGSNGTPCTEID,S4 SGSN GTPC TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s4_sgsn_gtpu_addressQ_PROTO_GTPV2,s4_sgsn_gtpu_address,S4SGSNGTPUAddr,S4 SGSN GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s4_sgsn_gtpu_teidQ_PROTO_GTPV2,s4_sgsn_gtpu_teid,S4SGSNGTPUTEID,S4 SGSN GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s4_sgw_gtpu_addressQ_PROTO_GTPV2,s4_sgw_gtpu_address,S4SGWGTPUAddr,S4 SGW GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s4_sgw_gtpu_teidQ_PROTO_GTPV2,s4_sgw_gtpu_teid,S4SGWGTPUTEID,S4 SGW GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_pgw_gtpc_addressQ_PROTO_GTPV2,s5_s8_pgw_gtpc_address,S5S8PGWGTPCAddr,S5 S8 PGW GTPC Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_pgw_gtpc_teidQ_PROTO_GTPV2,s5_s8_pgw_gtpc_teid,S5S8PGWGTPCTEID,S5 S8 PGW GTPC TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_pgw_gtpu_addressQ_PROTO_GTPV2,s5_s8_pgw_gtpu_address,S5S8PGWGTPUAddr,S5 S8 PGW GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_pgw_gtpu_teidQ_PROTO_GTPV2,s5_s8_pgw_gtpu_teid,S5S8PGWGTPUTEID,S5 S8 PGW GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_sgw_gtpc_addressQ_PROTO_GTPV2,s5_s8_sgw_gtpc_address,S5S8SGWGTPCAddr,S5 S8 SGW GTPC Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_sgw_gtpc_teidQ_PROTO_GTPV2,s5_s8_sgw_gtpc_teid,S5S8SGWGTPCTEID,S5 S8 SGW GTPC TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_sgw_gtpu_addressQ_PROTO_GTPV2,s5_s8_sgw_gtpu_address,S5S8SGWGTPUAddr,S5 S8 SGW GTPU Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,s5_s8_sgw_gtpu_teidQ_PROTO_GTPV2,s5_s8_sgw_gtpu_teid,S5S8SGWGTPUTEID,S5 S8 SGW GTPU TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,seqQ_PROTO_GTPV2,seq,Seq,Sequence,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,session_durationQ_PROTO_GTPV2,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,start_timeQ_PROTO_GTPV2,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,stop_timeQ_PROTO_GTPV2,stop_time,StopTime,Stop Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +GTPV2,teidQ_PROTO_GTPV2,teid,TEID,TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,audio_dataQ_PROTO_H225,audio_data,AudioData,Audio Data,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,call_durationQ_PROTO_H225,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,calleeQ_PROTO_H225,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,callerQ_PROTO_H225,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,call_idQ_PROTO_H225,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,call_setupQ_PROTO_H225,call_setup,CallSetup,Call Setup,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,end_statusQ_PROTO_H225,end_status,EndStatus,End Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,h245_addrQ_PROTO_H225,h245_addr,H245Addr,H245 Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,h245_methodQ_PROTO_H225,h245_method,H245Method,H245 Method,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,languageQ_PROTO_H225,language,Language,Language,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,media_attr_encodingQ_PROTO_H225,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,media_channel_addrQ_PROTO_H225,media_channel_addr,MediaChannelAddr,Media Channel Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,media_control_channel_addrQ_PROTO_H225,media_control_channel_addr,MediaControlChannelAddr,Media Control Channel Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,methodQ_PROTO_H225,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,product_idQ_PROTO_H225,product_id,ProductID,Product ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,request_calleeQ_PROTO_H225,request_callee,RequestCallee,Request Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,request_callerQ_PROTO_H225,request_caller,RequestCaller,Request Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,request_call_idQ_PROTO_H225,request_call_id,RequestCallID,Request Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,session_durationQ_PROTO_H225,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,start_timeQ_PROTO_H225,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,time_before_spkQ_PROTO_H225,time_before_spk,TimeBeforeSpk,Time Before Spk,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H225,versionQ_PROTO_H225,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H245,media_attr_encodingQ_PROTO_H245,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H245,media_channel_addrQ_PROTO_H245,media_channel_addr,MediaChannelAddr,Media Channel Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H245,media_control_channel_addrQ_PROTO_H245,media_control_channel_addr,MediaControlChannelAddr,Media Control Channel Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H245,methodQ_PROTO_H245,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +H248_TEXT,context_idQ_PROTO_H248_TEXT,context_id,ContextID,Context ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HI5,is_mobile_serviceQ_PROTO_HI5,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HI5,loginQ_PROTO_HI5,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HI5,nicknameQ_PROTO_HI5,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HI5,passwordQ_PROTO_HI5,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HIGH_ENTROPY,entropyQ_PROTO_HIGH_ENTROPY,entropy,Entropy,Entropy,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HSRP,virtual_addrQ_PROTO_HSRP,virtual_addr,VirtualAddr,Virtual Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,accept_encodingQ_PROTO_HTTP,accept_encoding,AcceptEncoding,Accept Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,audio_datarateQ_PROTO_HTTP,audio_datarate,AuditDataRate,Audio Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,auth_passwordQ_PROTO_HTTP,auth_password,AuthPass,Authentication Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,auth_usernameQ_PROTO_HTTP,auth_username,AuthUsername,Authentication Username,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,charsetQ_PROTO_HTTP,charset,Charset,Charset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,codeQ_PROTO_HTTP,code,Code,Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,connection_headerQ_PROTO_HTTP,connection_header,ConnectionHeader,Connection Header,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,content_dispositionQ_PROTO_HTTP,content_disposition,ContentDisposition,Content Disposition,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,content_encodingQ_PROTO_HTTP,content_encoding,ContentEncoding,Content Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,content_lenQ_PROTO_HTTP,content_len,ContentLen,Content Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,content_rangeQ_PROTO_HTTP,content_range,ContentRange,Content Range,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,cookieQ_PROTO_HTTP,cookie,Cookie,Cookie,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,dechunk_sizeQ_PROTO_HTTP,dechunk_size,DechunkSize,Dechunk Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,decompress_sizeQ_PROTO_HTTP,decompress_size,DecompressSize,Decompress Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,directoryQ_PROTO_HTTP,directory,Directory,Directory,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,filenameQ_PROTO_HTTP,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,forward_addrQ_PROTO_HTTP,forward_addr,FwdAddr,Forward Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,forward_redlineQ_PROTO_HTTP,forward_redline,FwdRedline,Forward Redline,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,header_end_offsetQ_PROTO_HTTP,header_end_offset,HeaderEndOffset,Header End Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,header_nameQ_PROTO_HTTP,header_name,HeaderName,Header Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,header_rawQ_PROTO_HTTP,header_raw,HeaderRaw,Header Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,header_statuslineQ_PROTO_HTTP,header_statusline,HeaderStatusline,Header Statusline,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,header_valueQ_PROTO_HTTP,header_value,HeaderValue,Header Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,hostQ_PROTO_HTTP,host,Host,Host,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,host_start_offsetQ_PROTO_HTTP,host_start_offset,HostStartOffset,Host Start Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,image_heightQ_PROTO_HTTP,image_height,ImageHeight,Image Height,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,image_typeQ_PROTO_HTTP,image_type,ImageType,Image Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,image_widthQ_PROTO_HTTP,image_width,ImageWidth,Image Width,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,indexQ_PROTO_HTTP,index,Index,Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,last_modifiedQ_PROTO_HTTP,last_modified,LastModified,Last Modified,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,locationQ_PROTO_HTTP,location,Location,Location,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,methodQ_PROTO_HTTP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,mime_typeQ_PROTO_HTTP,mime_type,MIMEType,MIMEType,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,mime_type_mainQ_PROTO_HTTP,mime_type_main,MIMETypeMain,MIMEType Main,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,mime_type_subQ_PROTO_HTTP,mime_type_sub,MIMETypeSub,MIMEType Sub,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,ntlm_domainQ_PROTO_HTTP,ntlm_domain,NTLMDomain,NTLM Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,ntlm_userQ_PROTO_HTTP,ntlm_user,NTLMUser,NTLM User,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,ntlm_workstationQ_PROTO_HTTP,ntlm_workstation,NTLMWorkstation,NTLM Workstation,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,part_filenameQ_PROTO_HTTP,part_filename,PartFilename,Part Filename,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,part_header_nameQ_PROTO_HTTP,part_header_name,PartHeaderName,Part Header Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,part_header_valueQ_PROTO_HTTP,part_header_value,PartHeaderValue,Part Header Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,part_nameQ_PROTO_HTTP,part_name,PartName,Part Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,post_variable_decodedQ_PROTO_HTTP,post_variable_decoded,PostVariableDecoded,Post Variable Decoded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,proxy_authQ_PROTO_HTTP,proxy_auth,ProxyAuth,Proxy Authentication,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,proxy_loginQ_PROTO_HTTP,proxy_login,ProxyLogin,Proxy Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,proxy_realmQ_PROTO_HTTP,proxy_realm,ProxyRealm,Proxy Realm,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,refererQ_PROTO_HTTP,referer,Referer,Referer,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,referer_pathQ_PROTO_HTTP,referer_path,RefererPath,Referer Path,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,referer_serverQ_PROTO_HTTP,referer_server,RefererServer,Referer Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,request_sizeQ_PROTO_HTTP,request_size,RequestSize,Request Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,request_tsQ_PROTO_HTTP,request_ts,RequestTS,Request TS,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,response_tsQ_PROTO_HTTP,response_ts,ResponseTS,Response TS,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,rttQ_PROTO_HTTP,rtt,RTT,RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,serverQ_PROTO_HTTP,server,Server,Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,server_agentQ_PROTO_HTTP,server_agent,ServerAgent,Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,smb_clientQ_PROTO_HTTP,smb_client,SMBClient,SMB Client,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,start_timeQ_PROTO_HTTP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,total_datarateQ_PROTO_HTTP,total_datarate,TotalDataRate,Total Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,upgrade_headerQ_PROTO_HTTP,upgrade_header,UpgradeHeader,Upgrade Header,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uriQ_PROTO_HTTP,uri,URI,URI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_decodedQ_PROTO_HTTP,uri_decoded,URIDecoded,URI Decoded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_end_offsetQ_PROTO_HTTP,uri_end_offset,URIEndOffset,URI End Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_fullQ_PROTO_HTTP,uri_full,URIFull,URI Full,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_get_decodedQ_PROTO_HTTP,uri_get_decoded,URIGetDecoded,URI Get Decoded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_param_nameQ_PROTO_HTTP,uri_param_name,URIParamName,URI Parameter Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_param_valueQ_PROTO_HTTP,uri_param_value,URIParamValue,URI Parameter Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_pathQ_PROTO_HTTP,uri_path,URIPath,URI Path,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_path_decodedQ_PROTO_HTTP,uri_path_decoded,URIPathDecoded,URI Path Decoded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_post_decodedQ_PROTO_HTTP,uri_post_decoded,URIPostDecoded,URI Post Decoded,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,uri_start_offsetQ_PROTO_HTTP,uri_start_offset,URIStartOffset,URI Start Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,user_agentQ_PROTO_HTTP,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,user_agent_end_offsetQ_PROTO_HTTP,user_agent_end_offset,UserAgentEndOffset,User Agent End Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,user_agent_start_offsetQ_PROTO_HTTP,user_agent_start_offset,UserAgentStartOffset,User Agent Start Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,versionQ_PROTO_HTTP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_avgdatarateQ_PROTO_HTTP,video_avgdatarate,VidAvgDataRate,Video Average Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_datarateQ_PROTO_HTTP,video_datarate,VidDataRate,Video Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_durationQ_PROTO_HTTP,video_duration,VidDuration,Video Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_brandQ_PROTO_HTTP,video_brand,VideBrand,Video Brand,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_framerateQ_PROTO_HTTP,video_framerate,VidFrameRate,Video Frame Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_heightQ_PROTO_HTTP,video_height,VidHeight,Video Height,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_typeQ_PROTO_HTTP,video_type,VidType,Video Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,video_widthQ_PROTO_HTTP,video_width,VidWidth,Video Width,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,wap_profileQ_PROTO_HTTP,wap_profile,WAPProfile,WAP Profile,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +HTTP,x_content_urnQ_PROTO_HTTP,x_content_urn,XContentUrn,X Content Urn,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICA,applicationQ_PROTO_ICA,application,App,Application,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICA,login_infoQ_PROTO_ICA,login_info,LoginInfo,Login Info,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICA,serviceQ_PROTO_ICA,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,code_respmod_reqQ_PROTO_ICAP,code_respmod_req,CodeRespmodReq,Code Respmod Req,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,content_type_respmod_reqQ_PROTO_ICAP,content_type_respmod_req,ContentTypeRespmodReq,Content Type Respmod Req,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,host_respmod_reqQ_PROTO_ICAP,host_respmod_req,HostRespmodReq,Host Respmod Req,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,method_respmod_reqQ_PROTO_ICAP,method_respmod_req,MethodRespmodReq,Method Respmod Request,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,referer_respmod_reqQ_PROTO_ICAP,referer_respmod_req,RefererRespmodReq,Referer Respmod Request,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,uri_respmod_reqQ_PROTO_ICAP,uri_respmod_req,URIRespmodReq,URI Respmod Req,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,user_agent_respmod_reqQ_PROTO_ICAP,user_agent_respmod_req,UserAgentRespmodReq,User Agent Respmod Request,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICAP,x_client_ip_respmod_reqQ_PROTO_ICAP,x_client_ip_respmod_req,XClientIPRespmodReq,X Client IP Respmod Request,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICLOUD,serviceQ_PROTO_ICLOUD,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICMP,rttQ_PROTO_ICMP,rtt,RTT,RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICMP6,link_layer_addr_typeQ_PROTO_ICMP6,link_layer_addr_type,LinkLayerAddrType,Link Layer Address Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICMP6,link_layer_eui64_addrQ_PROTO_ICMP6,link_layer_eui64_addr,LinkLayerEui64Addr,Link Layer Eui64 Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICMP6,link_layer_mac_addrQ_PROTO_ICMP6,link_layer_mac_addr,LinkLayerMacAddr,Link Layer Mac Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ICMP6,rttQ_PROTO_ICMP6,rtt,RTT,RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IDENT,client_portQ_PROTO_IDENT,client_port,ClientPort,Client Port,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IDENT,server_portQ_PROTO_IDENT,server_port,ServerPort,Server Port,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IGMP,addressQ_PROTO_IGMP,address,Addr,Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IGMP,record_maddressQ_PROTO_IGMP,record_maddress,RecordMAddr,Record M Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IGMP,versionQ_PROTO_IGMP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,attach_mime_typeQ_PROTO_IMAP,attach_mime_type,AttachMIMEType,Attach MIME Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,attach_transfer_encodingQ_PROTO_IMAP,attach_transfer_encoding,AttachTransferEncoding,Attach Transfer Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,dateQ_PROTO_IMAP,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,email_indexQ_PROTO_IMAP,email_index,EmailIndex,Email Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,attach_filenameQ_PROTO_IMAP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,greeting_messageQ_PROTO_IMAP,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,indexQ_PROTO_IMAP,index,Index,Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,loginQ_PROTO_IMAP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,login_serverQ_PROTO_IMAP,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,methodQ_PROTO_IMAP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,mime_typeQ_PROTO_IMAP,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,message_idQ_PROTO_IMAP,message_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_attach_filenameQ_PROTO_IMAP,msglist_attach_filename,MsgListAttachFilename,Message List Attach Filename,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_attach_mime_typeQ_PROTO_IMAP,msglist_attach_mime_type,MsgListAttachMIMEType,Message List Attach MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_dateQ_PROTO_IMAP,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_mime_typeQ_PROTO_IMAP,msglist_mime_type,MsgListMIMEType,Message List MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_receiverQ_PROTO_IMAP,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_receiver_aliasQ_PROTO_IMAP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_receiver_emailQ_PROTO_IMAP,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_senderQ_PROTO_IMAP,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_sender_aliasQ_PROTO_IMAP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_sender_emailQ_PROTO_IMAP,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,msglist_subjectQ_PROTO_IMAP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,passwordQ_PROTO_IMAP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_by_ipQ_PROTO_IMAP,received_by_ip,RcvdByIP,Received By IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_by_nameQ_PROTO_IMAP,received_by_name,RcvdByName,Received By Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_dateQ_PROTO_IMAP,received_date,RcvdDate,Received Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_from_ipQ_PROTO_IMAP,received_from_ip,RcvdFromIP,Received From IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_from_nameQ_PROTO_IMAP,received_from_name,RcvdFromName,Received From Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_server_agentQ_PROTO_IMAP,received_server_agent,RcvdServerAgent,Received Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,received_withQ_PROTO_IMAP,received_with,RcvdWith,Received With,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,receiverQ_PROTO_IMAP,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,receiver_aliasQ_PROTO_IMAP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,receiver_emailQ_PROTO_IMAP,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,receiver_typeQ_PROTO_IMAP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,replytoQ_PROTO_IMAP,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,senderQ_PROTO_IMAP,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,sender_aliasQ_PROTO_IMAP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,sender_emailQ_PROTO_IMAP,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,server_responseQ_PROTO_IMAP,server_response,ServerResp,Server Response,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,subjectQ_PROTO_IMAP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,user_agentQ_PROTO_IMAP,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMAP,xmailerQ_PROTO_IMAP,xmailer,Xmailer,Xmailer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,actionQ_PROTO_IMP,action,Action,Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,attach_idQ_PROTO_IMP,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,attach_sizeQ_PROTO_IMP,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,attach_typeQ_PROTO_IMP,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,contactQ_PROTO_IMP,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,contact_aliasQ_PROTO_IMP,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,contact_emailQ_PROTO_IMP,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,dateQ_PROTO_IMP,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,attach_filenameQ_PROTO_IMP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,loginQ_PROTO_IMP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,login_serverQ_PROTO_IMP,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_dateQ_PROTO_IMP,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_folderQ_PROTO_IMP,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_msgidQ_PROTO_IMP,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_receiver_aliasQ_PROTO_IMP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_receiver_emailQ_PROTO_IMP,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_sender_aliasQ_PROTO_IMP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,msglist_subjectQ_PROTO_IMP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,passwordQ_PROTO_IMP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,receiverQ_PROTO_IMP,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,receiver_aliasQ_PROTO_IMP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,receiver_emailQ_PROTO_IMP,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,receiver_typeQ_PROTO_IMP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,senderQ_PROTO_IMP,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,sender_aliasQ_PROTO_IMP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,sender_emailQ_PROTO_IMP,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,session_idQ_PROTO_IMP,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,subjectQ_PROTO_IMP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IMP,versionQ_PROTO_IMP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,client_addrQ_PROTO_IP,client_addr,ClientAddr,Client Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,client_addr32Q_PROTO_IP,client_addr32,ClientAddr32,Client Address 32,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,client_netQ_PROTO_IP,client_net,ClientNet,Client Net,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,dst_netQ_PROTO_IP,dst_net,DstNet,Destination Net,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,fragment_lost_sizeQ_PROTO_IP,fragment_lost_size,FragmentLostSize,Fragment Lost Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,server_addrQ_PROTO_IP,server_addr,ServerAddr,Server Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,server_addr32Q_PROTO_IP,server_addr32,ServerAddr32,Server Address 32,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,server_netQ_PROTO_IP,server_net,ServerNet,Server Net,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP,src_netQ_PROTO_IP,src_net,SrcNet,Source Network,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IP6,labelQ_PROTO_IP6,label,Label,Label,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPCP,dns_ip_addrQ_PROTO_IPCP,dns_ip_addr,DNSIPAddr,DNS IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPCP,ip_addrQ_PROTO_IPCP,ip_addr,IPAddr,IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPCP,mobile_ip_addrQ_PROTO_IPCP,mobile_ip_addr,MobileIPAddr,Mobile IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPCP,second_dns_ip_addrQ_PROTO_IPCP,second_dns_ip_addr,SecondDNSIPAddr,Second DNS IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPCP,second_win_ip_addrQ_PROTO_IPCP,second_win_ip_addr,SecondWinIPAddr,Second Win IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPCP,win_ip_addrQ_PROTO_IPCP,win_ip_addr,WinIPAddr,Win IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPP,versionQ_PROTO_IPP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPX,dst_netQ_PROTO_IPX,dst_net,DstNet,Destination Net,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IPX,src_netQ_PROTO_IPX,src_net,SrcNet,Source Network,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,channelQ_PROTO_IRC,channel,Channel,Channel,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,file_identifierQ_PROTO_IRC,file_identifier,FileIdentifier,File Identifier,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,filenameQ_PROTO_IRC,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,loginQ_PROTO_IRC,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,login_serverQ_PROTO_IRC,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,mode_channelQ_PROTO_IRC,mode_channel,ModeChannel,Mode Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,mode_statusQ_PROTO_IRC,mode_status,ModeStatus,Mode Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,messageQ_PROTO_IRC,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,nicknameQ_PROTO_IRC,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,receiverQ_PROTO_IRC,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,senderQ_PROTO_IRC,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +IRC,serverQ_PROTO_IRC,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISAKMP,life_durationQ_PROTO_ISAKMP,life_duration,LifeDuration,Life Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISAKMP,versionQ_PROTO_ISAKMP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISL,dst_addrQ_PROTO_ISL,dst_addr,DstAddr,Destination Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISL,src_addrQ_PROTO_ISL,src_addr,SrcAddr,Source Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISL,typeQ_PROTO_ISL,type,Type,Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,call_durationQ_PROTO_ISUP,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,calleeQ_PROTO_ISUP,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,callerQ_PROTO_ISUP,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,call_idQ_PROTO_ISUP,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,call_setupQ_PROTO_ISUP,call_setup,CallSetup,Call Setup,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,dest_point_codeQ_PROTO_ISUP,dest_point_code,DestPointCode,Dest Point Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,message_nameQ_PROTO_ISUP,message_name,MsgName,Message Name,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,message_tsQ_PROTO_ISUP,message_ts,MsgTS,Message TS,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,message_wayQ_PROTO_ISUP,message_way,MsgWay,Message Way,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,orig_point_codeQ_PROTO_ISUP,orig_point_code,OrigPointCode,Orig Point Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,session_durationQ_PROTO_ISUP,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,start_timeQ_PROTO_ISUP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ISUP,time_before_spkQ_PROTO_ISUP,time_before_spk,TimeBeforeSpk,Time Before Spk,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,call_durationQ_PROTO_JABBER,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,calleeQ_PROTO_JABBER,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,callee_addrQ_PROTO_JABBER,callee_addr,CalleeAddr,Callee Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,callerQ_PROTO_JABBER,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,caller_addrQ_PROTO_JABBER,caller_addr,CallerAddr,Caller Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,call_idQ_PROTO_JABBER,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,contact_loginQ_PROTO_JABBER,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,contact_nameQ_PROTO_JABBER,contact_name,ContactName,Contact Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,contact_statusQ_PROTO_JABBER,contact_status,ContactStatus,Contact Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,encodingQ_PROTO_JABBER,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,end_statusQ_PROTO_JABBER,end_status,EndStatus,End Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,file_chunk_lenQ_PROTO_JABBER,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,file_chunk_numberQ_PROTO_JABBER,file_chunk_number,FileChunkNum,File Chunk Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,file_chunk_sidQ_PROTO_JABBER,file_chunk_sid,FileChunkSID,File Chunk SID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,filenameQ_PROTO_JABBER,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,file_receiverQ_PROTO_JABBER,file_receiver,FileReceiver,File Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,file_senderQ_PROTO_JABBER,file_sender,FileSender,File Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,file_sidQ_PROTO_JABBER,file_sid,FileSID,File SID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,filesizeQ_PROTO_JABBER,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,loginQ_PROTO_JABBER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,messageQ_PROTO_JABBER,message,Msg,Message,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,nicknameQ_PROTO_JABBER,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,osQ_PROTO_JABBER,os,OS,Operating System,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,receiverQ_PROTO_JABBER,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,senderQ_PROTO_JABBER,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,start_timeQ_PROTO_JABBER,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,user_agentQ_PROTO_JABBER,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JABBER,versionQ_PROTO_JABBER,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JAVA_UPDATE,new_versionQ_PROTO_JAVA_UPDATE,new_version,NewVersion,New Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +JAVA_UPDATE,typeQ_PROTO_JAVA_UPDATE,type,Type,Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KAKAOTALK,filenameQ_PROTO_KAKAOTALK,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KAKAOTALK,loginQ_PROTO_KAKAOTALK,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KAKAOTALK,mime_typeQ_PROTO_KAKAOTALK,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KASKUS,query_rawQ_PROTO_KASKUS,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KASKUS,query_textQ_PROTO_KASKUS,query_text,QueryText,Query Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KASKUS,titleQ_PROTO_KASKUS,title,Title,Title,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KAZAA,filenameQ_PROTO_KAZAA,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KAZAA,loginQ_PROTO_KAZAA,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KAZAA,mime_typeQ_PROTO_KAZAA,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,enc_data_typeQ_PROTO_KRB5,enc_data_type,EncDataType,Enc Data Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_cname_nameQ_PROTO_KRB5,err_cname_name,ErrCnameName,Error Cname Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_cname_typeQ_PROTO_KRB5,err_cname_type,ErrCnameType,Error Cname Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,error_codeQ_PROTO_KRB5,error_code,ErrCode,Error Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_crealmQ_PROTO_KRB5,err_crealm,ErrCrealm,Error Crealm,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_realmQ_PROTO_KRB5,err_realm,ErrRealm,Error Realm,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_sname_nameQ_PROTO_KRB5,err_sname_name,ErrSnameName,Error Surname Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_sname_typeQ_PROTO_KRB5,err_sname_type,ErrSnameType,Error Surname Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,err_textQ_PROTO_KRB5,err_text,ErrText,Error Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,loginQ_PROTO_KRB5,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,pa_data_typeQ_PROTO_KRB5,pa_data_type,PADataType,PA Data Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,realmQ_PROTO_KRB5,realm,Realm,Realm,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,serverQ_PROTO_KRB5,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,serviceQ_PROTO_KRB5,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,ticket_nameQ_PROTO_KRB5,ticket_name,TicketName,Ticket Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +KRB5,ticket_name_typeQ_PROTO_KRB5,ticket_name_type,TicketNameType,Ticket Name Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +L2TP,hostnameQ_PROTO_L2TP,hostname,Hostname,Hostname,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +L2TP,vendor_nameQ_PROTO_L2TP,vendor_name,VendorName,Vendor Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LAPOSTE_WEBMAIL,loginQ_PROTO_LAPOSTE_WEBMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LAPOSTE_WEBMAIL,session_idQ_PROTO_LAPOSTE_WEBMAIL,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,assertion_valueQ_PROTO_LDAP,assertion_value,AssertionValue,Assertion Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,attribute_descQ_PROTO_LDAP,attribute_desc,AttributeDesc,Attribute Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,contains_saslQ_PROTO_LDAP,contains_sasl,ContainsSASL,Contains SASL,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,hostnameQ_PROTO_LDAP,hostname,Hostname,Hostname,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,message_idQ_PROTO_LDAP,message_id,MsgID,Message ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,message_typeQ_PROTO_LDAP,message_type,MsgType,Message Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,nameQ_PROTO_LDAP,name,Name,Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,numberQ_PROTO_LDAP,number,Number,Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,payload_is_cryptedQ_PROTO_LDAP,payload_is_crypted,PayloadIsCrypted,Payload Is Crypted,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,seal_algoQ_PROTO_LDAP,seal_algo,SealAlgo,Seal Algo,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,typeQ_PROTO_LDAP,type,Type,Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LDAP,value_stringQ_PROTO_LDAP,value_string,ValueString,Value String,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,call_byte_countQ_PROTO_LINE,call_byte_count,CallByteCount,Call Byte Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,call_durationQ_PROTO_LINE,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,calleeQ_PROTO_LINE,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,callerQ_PROTO_LINE,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,caller_addrQ_PROTO_LINE,caller_addr,CallerAddr,Caller Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,call_idQ_PROTO_LINE,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,call_pkt_countQ_PROTO_LINE,call_pkt_count,CallPktCount,Call Packet Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,proto_versionQ_PROTO_LINE,proto_version,ProtoVersion,Proto Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,serviceQ_PROTO_LINE,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,service_duration_tvQ_PROTO_LINE,service_duration_tv,ServiceDurationTV,Service Duration TV,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,start_timeQ_PROTO_LINE,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINE,user_agentQ_PROTO_LINE,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,actionQ_PROTO_LINKEDIN,action,Action,Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,contact_aliasQ_PROTO_LINKEDIN,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,contact_emailQ_PROTO_LINKEDIN,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,contact_firstnameQ_PROTO_LINKEDIN,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,contact_lastnameQ_PROTO_LINKEDIN,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,dateQ_PROTO_LINKEDIN,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,folderQ_PROTO_LINKEDIN,folder,Folder,Folder,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,loginQ_PROTO_LINKEDIN,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msg_idQ_PROTO_LINKEDIN,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_dateQ_PROTO_LINKEDIN,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_folderQ_PROTO_LINKEDIN,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_msgidQ_PROTO_LINKEDIN,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_receiverQ_PROTO_LINKEDIN,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_receiver_aliasQ_PROTO_LINKEDIN,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_senderQ_PROTO_LINKEDIN,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_sender_aliasQ_PROTO_LINKEDIN,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,msglist_subjectQ_PROTO_LINKEDIN,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,query_textQ_PROTO_LINKEDIN,query_text,QueryText,Query Text,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,query_typeQ_PROTO_LINKEDIN,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,receiverQ_PROTO_LINKEDIN,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,receiver_aliasQ_PROTO_LINKEDIN,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,receiver_emailQ_PROTO_LINKEDIN,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,receiver_typeQ_PROTO_LINKEDIN,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,senderQ_PROTO_LINKEDIN,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,sender_aliasQ_PROTO_LINKEDIN,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,sender_emailQ_PROTO_LINKEDIN,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LINKEDIN,subjectQ_PROTO_LINKEDIN,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,actionQ_PROTO_LIVE_GROUPS,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,dateQ_PROTO_LIVE_GROUPS,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,group_idQ_PROTO_LIVE_GROUPS,group_id,GroupID,Group ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,group_nameQ_PROTO_LIVE_GROUPS,group_name,GroupName,Group Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,loginQ_PROTO_LIVE_GROUPS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,member_aliasQ_PROTO_LIVE_GROUPS,member_alias,MemberAlias,Member Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,member_emailQ_PROTO_LIVE_GROUPS,member_email,MemberEmail,Member Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,msglist_senderQ_PROTO_LIVE_GROUPS,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,msglist_sender_aliasQ_PROTO_LIVE_GROUPS,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,msglist_subjectQ_PROTO_LIVE_GROUPS,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,nameQ_PROTO_LIVE_GROUPS,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,senderQ_PROTO_LIVE_GROUPS,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,sender_aliasQ_PROTO_LIVE_GROUPS,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,sender_emailQ_PROTO_LIVE_GROUPS,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,session_idQ_PROTO_LIVE_GROUPS,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_GROUPS,subjectQ_PROTO_LIVE_GROUPS,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,actionQ_PROTO_LIVE_HOTMAIL,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,attach_fileidQ_PROTO_LIVE_HOTMAIL,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,attach_idQ_PROTO_LIVE_HOTMAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,attach_sizeQ_PROTO_LIVE_HOTMAIL,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,attach_typeQ_PROTO_LIVE_HOTMAIL,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,contactQ_PROTO_LIVE_HOTMAIL,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,contact_aliasQ_PROTO_LIVE_HOTMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,contact_emailQ_PROTO_LIVE_HOTMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,dateQ_PROTO_LIVE_HOTMAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,draftQ_PROTO_LIVE_HOTMAIL,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,attach_filenameQ_PROTO_LIVE_HOTMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,folderQ_PROTO_LIVE_HOTMAIL,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,loginQ_PROTO_LIVE_HOTMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msg_idQ_PROTO_LIVE_HOTMAIL,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_dateQ_PROTO_LIVE_HOTMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_folderQ_PROTO_LIVE_HOTMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_msgidQ_PROTO_LIVE_HOTMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_receiverQ_PROTO_LIVE_HOTMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_receiver_aliasQ_PROTO_LIVE_HOTMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_receiver_emailQ_PROTO_LIVE_HOTMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_senderQ_PROTO_LIVE_HOTMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_sender_aliasQ_PROTO_LIVE_HOTMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_sender_emailQ_PROTO_LIVE_HOTMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,msglist_subjectQ_PROTO_LIVE_HOTMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,nameQ_PROTO_LIVE_HOTMAIL,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,receiverQ_PROTO_LIVE_HOTMAIL,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,receiver_aliasQ_PROTO_LIVE_HOTMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,receiver_emailQ_PROTO_LIVE_HOTMAIL,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,receiver_typeQ_PROTO_LIVE_HOTMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,replytoQ_PROTO_LIVE_HOTMAIL,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,senderQ_PROTO_LIVE_HOTMAIL,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,sender_aliasQ_PROTO_LIVE_HOTMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,sender_emailQ_PROTO_LIVE_HOTMAIL,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,session_idQ_PROTO_LIVE_HOTMAIL,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVE_HOTMAIL,subjectQ_PROTO_LIVE_HOTMAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,actionQ_PROTO_LIVEMAIL_MOBILE,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,attach_fileidQ_PROTO_LIVEMAIL_MOBILE,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,attach_idQ_PROTO_LIVEMAIL_MOBILE,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,attach_sizeQ_PROTO_LIVEMAIL_MOBILE,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,contact_aliasQ_PROTO_LIVEMAIL_MOBILE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,contact_emailQ_PROTO_LIVEMAIL_MOBILE,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,dateQ_PROTO_LIVEMAIL_MOBILE,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,attach_filenameQ_PROTO_LIVEMAIL_MOBILE,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,loginQ_PROTO_LIVEMAIL_MOBILE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,msg_idQ_PROTO_LIVEMAIL_MOBILE,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,msglist_msgidQ_PROTO_LIVEMAIL_MOBILE,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,msglist_sender_aliasQ_PROTO_LIVEMAIL_MOBILE,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,msglist_sender_emailQ_PROTO_LIVEMAIL_MOBILE,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,msglist_subjectQ_PROTO_LIVEMAIL_MOBILE,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,receiverQ_PROTO_LIVEMAIL_MOBILE,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,receiver_aliasQ_PROTO_LIVEMAIL_MOBILE,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,receiver_emailQ_PROTO_LIVEMAIL_MOBILE,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,receiver_typeQ_PROTO_LIVEMAIL_MOBILE,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,senderQ_PROTO_LIVEMAIL_MOBILE,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,sender_aliasQ_PROTO_LIVEMAIL_MOBILE,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,sender_emailQ_PROTO_LIVEMAIL_MOBILE,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,session_idQ_PROTO_LIVEMAIL_MOBILE,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LIVEMAIL_MOBILE,subjectQ_PROTO_LIVEMAIL_MOBILE,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,attach_compressQ_PROTO_LOTUSNOTES,attach_compress,AttachCompress,Attach Compress,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,attach_content_seqQ_PROTO_LOTUSNOTES,attach_content_seq,AttachContentSeq,Attach Content Sequence,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,attach_content_sizeQ_PROTO_LOTUSNOTES,attach_content_size,AttachContentSize,Attach Content Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,attach_idQ_PROTO_LOTUSNOTES,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,attach_sizeQ_PROTO_LOTUSNOTES,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,attach_filenameQ_PROTO_LOTUSNOTES,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,header_nameQ_PROTO_LOTUSNOTES,header_name,HeaderName,Header Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,header_valueQ_PROTO_LOTUSNOTES,header_value,HeaderValue,Header Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,loginQ_PROTO_LOTUSNOTES,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,mime_versionQ_PROTO_LOTUSNOTES,mime_version,MIMEVersion,MIMEVersion,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,msg_idQ_PROTO_LOTUSNOTES,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,organizationQ_PROTO_LOTUSNOTES,organization,Organization,Organization,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,receiverQ_PROTO_LOTUSNOTES,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,receiver_aliasQ_PROTO_LOTUSNOTES,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,receiver_emailQ_PROTO_LOTUSNOTES,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,receiver_typeQ_PROTO_LOTUSNOTES,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,replytoQ_PROTO_LOTUSNOTES,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,senderQ_PROTO_LOTUSNOTES,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,sender_aliasQ_PROTO_LOTUSNOTES,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,sender_emailQ_PROTO_LOTUSNOTES,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,serviceQ_PROTO_LOTUSNOTES,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,subjectQ_PROTO_LOTUSNOTES,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LOTUSNOTES,versionQ_PROTO_LOTUSNOTES,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LPR,jobQ_PROTO_LPR,job,Job,Job,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LPR,loginQ_PROTO_LPR,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +LPR,serverQ_PROTO_LPR,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,actionQ_PROTO_MAILRU,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,attach_idQ_PROTO_MAILRU,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,attach_sizeQ_PROTO_MAILRU,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,attach_typeQ_PROTO_MAILRU,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,contactQ_PROTO_MAILRU,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,contact_aliasQ_PROTO_MAILRU,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,contact_emailQ_PROTO_MAILRU,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,dateQ_PROTO_MAILRU,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,draftQ_PROTO_MAILRU,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,attach_filenameQ_PROTO_MAILRU,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,folderQ_PROTO_MAILRU,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,folderlist_item_idQ_PROTO_MAILRU,folderlist_item_id,FolderListItemID,Folder List Item ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,folderlist_item_nameQ_PROTO_MAILRU,folderlist_item_name,FolderListItemName,Folder List Item Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,importanceQ_PROTO_MAILRU,importance,Importance,Importance,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,loginQ_PROTO_MAILRU,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msg_idQ_PROTO_MAILRU,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_attachQ_PROTO_MAILRU,msglist_attach,MsgListAttach,Message List Attach,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_dateQ_PROTO_MAILRU,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_folderQ_PROTO_MAILRU,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_importanceQ_PROTO_MAILRU,msglist_importance,MsgListImportance,Message List Importance,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_msgidQ_PROTO_MAILRU,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_receiverQ_PROTO_MAILRU,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_receiver_aliasQ_PROTO_MAILRU,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_receiver_emailQ_PROTO_MAILRU,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_senderQ_PROTO_MAILRU,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_sender_aliasQ_PROTO_MAILRU,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_sender_emailQ_PROTO_MAILRU,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_subjectQ_PROTO_MAILRU,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,msglist_unreadQ_PROTO_MAILRU,msglist_unread,MsgListUnread,Message List Unread,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,nameQ_PROTO_MAILRU,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,receiverQ_PROTO_MAILRU,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,receiver_aliasQ_PROTO_MAILRU,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,receiver_emailQ_PROTO_MAILRU,receiver_email,ReceiverEmail,Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,receiver_typeQ_PROTO_MAILRU,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,senderQ_PROTO_MAILRU,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,sender_aliasQ_PROTO_MAILRU,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,sender_emailQ_PROTO_MAILRU,sender_email,SenderEmail,Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAILRU,subjectQ_PROTO_MAILRU,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,actionQ_PROTO_MAKTOOB,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,attach_idQ_PROTO_MAKTOOB,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,attach_sizeQ_PROTO_MAKTOOB,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,attach_typeQ_PROTO_MAKTOOB,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,contactQ_PROTO_MAKTOOB,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,contact_aliasQ_PROTO_MAKTOOB,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,contact_emailQ_PROTO_MAKTOOB,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,dateQ_PROTO_MAKTOOB,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,draftQ_PROTO_MAKTOOB,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,encodingQ_PROTO_MAKTOOB,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,attach_filenameQ_PROTO_MAKTOOB,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,folderQ_PROTO_MAKTOOB,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,loginQ_PROTO_MAKTOOB,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msg_idQ_PROTO_MAKTOOB,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_dateQ_PROTO_MAKTOOB,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_folderQ_PROTO_MAKTOOB,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_receiverQ_PROTO_MAKTOOB,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_receiver_aliasQ_PROTO_MAKTOOB,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_senderQ_PROTO_MAKTOOB,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_sender_aliasQ_PROTO_MAKTOOB,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_sizeQ_PROTO_MAKTOOB,msglist_size,MsgListSize,Message List Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,msglist_subjectQ_PROTO_MAKTOOB,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,nameQ_PROTO_MAKTOOB,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,receiverQ_PROTO_MAKTOOB,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,receiver_aliasQ_PROTO_MAKTOOB,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,receiver_emailQ_PROTO_MAKTOOB,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,receiver_typeQ_PROTO_MAKTOOB,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,replytoQ_PROTO_MAKTOOB,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,senderQ_PROTO_MAKTOOB,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,sender_aliasQ_PROTO_MAKTOOB,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,sender_emailQ_PROTO_MAKTOOB,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,session_idQ_PROTO_MAKTOOB,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAKTOOB,subjectQ_PROTO_MAKTOOB,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MANDRIVA_UPDATE,package_archiQ_PROTO_MANDRIVA_UPDATE,package_archi,PkgArch,Package Architecture,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MANDRIVA_UPDATE,package_distribQ_PROTO_MANDRIVA_UPDATE,package_distrib,PkgDistrib,Package Distrib,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MANDRIVA_UPDATE,package_nameQ_PROTO_MANDRIVA_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MANDRIVA_UPDATE,package_versionQ_PROTO_MANDRIVA_UPDATE,package_version,PkgVersion,Package Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,actionQ_PROTO_MAPI,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,attach_idQ_PROTO_MAPI,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,attach_sizeQ_PROTO_MAPI,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,dateQ_PROTO_MAPI,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,domainQ_PROTO_MAPI,domain,Domain,Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,email_typeQ_PROTO_MAPI,email_type,EmailType,Email Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,flagsQ_PROTO_MAPI,flags,Flags,Flags,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,hostQ_PROTO_MAPI,host,Host,Host,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,importanceQ_PROTO_MAPI,importance,Importance,Importance,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,loginQ_PROTO_MAPI,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,login_serverQ_PROTO_MAPI,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_dateQ_PROTO_MAPI,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_flagsQ_PROTO_MAPI,msglist_flags,MsgListFlags,Message List Flags,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_importanceQ_PROTO_MAPI,msglist_importance,MsgListImportance,Message List Importance,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_msgidQ_PROTO_MAPI,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_receiver_typeQ_PROTO_MAPI,msglist_receiver_type,MsgListReceiverType,Message List Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_sensivityQ_PROTO_MAPI,msglist_sensivity,MsgListSensivity,Message List Sensivity,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,msglist_sizeQ_PROTO_MAPI,msglist_size,MsgListSize,Message List Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,receiver_typeQ_PROTO_MAPI,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,sensivityQ_PROTO_MAPI,sensivity,Sensivity,Sensivity,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MAPI,sizeQ_PROTO_MAPI,size,Size,Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MASHARE,actionQ_PROTO_MASHARE,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MASHARE,delete_urlQ_PROTO_MASHARE,delete_url,DeleteURL,Delete URL,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MASHARE,download_urlQ_PROTO_MASHARE,download_url,DownloadURL,Download URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MASHARE,fileidQ_PROTO_MASHARE,fileid,FileID,File ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MASHARE,filenameQ_PROTO_MASHARE,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MASHARE,filesizeQ_PROTO_MASHARE,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,call_durationQ_PROTO_MGCP,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,calleeQ_PROTO_MGCP,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,callerQ_PROTO_MGCP,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,call_idQ_PROTO_MGCP,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,call_wayQ_PROTO_MGCP,call_way,CallWay,Call Way,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,codeQ_PROTO_MGCP,code,Code,Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,connection_idQ_PROTO_MGCP,connection_id,ConnectionID,Connection ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,digitmapQ_PROTO_MGCP,digitmap,Digitmap,Digitmap,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,endpointQ_PROTO_MGCP,endpoint,Endpoint,Endpoint,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,eventQ_PROTO_MGCP,event,Event,Event,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,jitterQ_PROTO_MGCP,jitter,Jitter,Jitter,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,latencyQ_PROTO_MGCP,latency,Latency,Latency,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_addrQ_PROTO_MGCP,media_attr_addr,MediaAttrAddr,Media Attribute Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_channelQ_PROTO_MGCP,media_attr_channel,MediaAttrChannel,Media Attribute Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_encodingQ_PROTO_MGCP,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_labelQ_PROTO_MGCP,media_attr_label,MediaAttrLabel,Media Attribute Label,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_paramQ_PROTO_MGCP,media_attr_param,MediaAttrParam,Media Attribue Param,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_rateQ_PROTO_MGCP,media_attr_rate,MediaAttrRate,Media Attribute Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_transportQ_PROTO_MGCP,media_attr_transport,MediaAttrTransport,Media Attribue Transport,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_typeQ_PROTO_MGCP,media_attr_type,MediaAttrType,Media Attribue Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_attr_valueQ_PROTO_MGCP,media_attr_value,MediaAttrValue,Media Attribute Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_formatQ_PROTO_MGCP,media_format,MediaFormat,Media Format,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_protoQ_PROTO_MGCP,media_proto,MediaProto,Media Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,media_typeQ_PROTO_MGCP,media_type,MediaType,Media Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,methodQ_PROTO_MGCP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,modeQ_PROTO_MGCP,mode,Mode,Mode,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,message_typeQ_PROTO_MGCP,message_type,MsgType,Message Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,notifiedEntityQ_PROTO_MGCP,notifiedEntity,NotifiedEntity,Notified Entity,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,octets_receivedQ_PROTO_MGCP,octets_received,OctetsReceived,Octets Received,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,octets_sentQ_PROTO_MGCP,octets_sent,OctetsSent,Octets Sent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,phone_numberQ_PROTO_MGCP,phone_number,PhoneNum,Phone Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,packets_lostQ_PROTO_MGCP,packets_lost,PktsLost,Packets Lost,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,packets_receivedQ_PROTO_MGCP,packets_received,PktsRcvd,Packets Received,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,packets_sentQ_PROTO_MGCP,packets_sent,PktsSent,Packets Sent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,session_durationQ_PROTO_MGCP,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,signalQ_PROTO_MGCP,signal,Signal,Signal,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,start_timeQ_PROTO_MGCP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,tidQ_PROTO_MGCP,tid,TID,TID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MGCP,versionQ_PROTO_MGCP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,actionQ_PROTO_MIMP,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,attach_sizeQ_PROTO_MIMP,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,dateQ_PROTO_MIMP,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,attach_filenameQ_PROTO_MIMP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,loginQ_PROTO_MIMP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,msglist_folderQ_PROTO_MIMP,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,msglist_receiver_aliasQ_PROTO_MIMP,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,msglist_sender_aliasQ_PROTO_MIMP,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,msglist_subjectQ_PROTO_MIMP,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,passwordQ_PROTO_MIMP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,receiverQ_PROTO_MIMP,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,receiver_aliasQ_PROTO_MIMP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,receiver_emailQ_PROTO_MIMP,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,receiver_typeQ_PROTO_MIMP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,senderQ_PROTO_MIMP,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,sender_aliasQ_PROTO_MIMP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,sender_emailQ_PROTO_MIMP,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MIMP,subjectQ_PROTO_MIMP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMS,filenameQ_PROTO_MMS,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,content_locationQ_PROTO_MMSE,content_location,ContentLocation,Content Location,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,content_part_filenameQ_PROTO_MMSE,content_part_filename,ContentPartFilename,Content Part Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,content_part_idQ_PROTO_MMSE,content_part_id,ContentPartID,Content Part ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,content_part_typeQ_PROTO_MMSE,content_part_type,ContentPartType,Content Part Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,content_typeQ_PROTO_MMSE,content_type,ContentType,Content Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,message_idQ_PROTO_MMSE,message_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,message_szQ_PROTO_MMSE,message_sz,MsgSZ,Message SZ,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,nb_receiverQ_PROTO_MMSE,nb_receiver,NBReceiver,NB Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,receiverQ_PROTO_MMSE,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,response_status_codeQ_PROTO_MMSE,response_status_code,ResponseStatusCode,Response Status Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,response_status_textQ_PROTO_MMSE,response_status_text,ResponseStatusText,Response Status Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,senderQ_PROTO_MMSE,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,subjectQ_PROTO_MMSE,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,tidQ_PROTO_MMSE,tid,TID,TID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MMSE,versionQ_PROTO_MMSE,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MPEGTS,chunk_lenQ_PROTO_MPEGTS,chunk_len,ChunkLen,Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MPLS,labelQ_PROTO_MPLS,label,Label,Label,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MPLUS_MESSENGER,serviceQ_PROTO_MPLUS_MESSENGER,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MPLUS_MESSENGER,service_idQ_PROTO_MPLUS_MESSENGER,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,calleeQ_PROTO_MSN,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,callerQ_PROTO_MSN,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,call_idQ_PROTO_MSN,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,client_nicknameQ_PROTO_MSN,client_nickname,ClientNickname,Client Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,client_statusQ_PROTO_MSN,client_status,ClientStatus,Client Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,contactQ_PROTO_MSN,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,contact_idQ_PROTO_MSN,contact_id,ContactID,Contact ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,contact_loginQ_PROTO_MSN,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,contact_nicknameQ_PROTO_MSN,contact_nickname,ContactNickname,Contact Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,contact_statusQ_PROTO_MSN,contact_status,ContactStatus,Contact Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,encodingQ_PROTO_MSN,encoding,Encoding,Encoding,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_chunk_data_offsetQ_PROTO_MSN,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_chunk_identifierQ_PROTO_MSN,file_chunk_identifier,FileChunkIdentifier,File Chunk Identifier,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_chunk_lenQ_PROTO_MSN,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_chunk_typeQ_PROTO_MSN,file_chunk_type,FileChunkType,File Chunk Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_identifierQ_PROTO_MSN,file_identifier,FileIdentifier,File Identifier,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,filenameQ_PROTO_MSN,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_receiverQ_PROTO_MSN,file_receiver,FileReceiver,File Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,file_senderQ_PROTO_MSN,file_sender,FileSender,File Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,filesizeQ_PROTO_MSN,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,groupQ_PROTO_MSN,group,Group,Group,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,ip_localQ_PROTO_MSN,ip_local,IPLocal,IP Local,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,loginQ_PROTO_MSN,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,methodQ_PROTO_MSN,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,messageQ_PROTO_MSN,message,Msg,Message,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,message_lenQ_PROTO_MSN,message_len,MsgLen,Message Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,online_principalQ_PROTO_MSN,online_principal,OnlinePrincipal,Online Principal,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,profileQ_PROTO_MSN,profile,Profile,Profile,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,proto_versionQ_PROTO_MSN,proto_version,ProtoVersion,Proto Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,receiverQ_PROTO_MSN,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,senderQ_PROTO_MSN,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,serviceQ_PROTO_MSN,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN,uidQ_PROTO_MSN,uid,UID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_GROUPS,group_nameQ_PROTO_MSN_GROUPS,group_name,GroupName,Group Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_SEARCH,encodingQ_PROTO_MSN_SEARCH,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_SEARCH,query_rawQ_PROTO_MSN_SEARCH,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_SEARCH,query_textQ_PROTO_MSN_SEARCH,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_SEARCH,query_typeQ_PROTO_MSN_SEARCH,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_VIDEO,recipientidQ_PROTO_MSN_VIDEO,recipientid,RecipientID,Recipient ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSN_VIDEO,sessionidQ_PROTO_MSN_VIDEO,sessionid,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSRP,authorityQ_PROTO_MSRP,authority,Authority,Authority,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSRP,path_typeQ_PROTO_MSRP,path_type,PathType,Path Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSRP,session_idQ_PROTO_MSRP,session_id,SessionID,Session ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MSRP,uriQ_PROTO_MSRP,uri,URI,URI,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSPACE,loginQ_PROTO_MYSPACE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSPACE,nameQ_PROTO_MYSPACE,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSPACE,nicknameQ_PROTO_MYSPACE,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSPACE,passwordQ_PROTO_MYSPACE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSPACE,query_rawQ_PROTO_MYSPACE,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSPACE,query_textQ_PROTO_MYSPACE,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSQL,baseQ_PROTO_MYSQL,base,Base,Base,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSQL,loginQ_PROTO_MYSQL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +MYSQL,queryQ_PROTO_MYSQL,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NBNS,queryQ_PROTO_NBNS,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NBNS,serviceQ_PROTO_NBNS,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETBIOS,calleeQ_PROTO_NETBIOS,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETBIOS,callerQ_PROTO_NETBIOS,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETBSD_UPDATE,package_nameQ_PROTO_NETBSD_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETFLIX,dateQ_PROTO_NETFLIX,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETFLIX,descriptionQ_PROTO_NETFLIX,description,Description,Description,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETFLIX,loginQ_PROTO_NETFLIX,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETFLIX,titleQ_PROTO_NETFLIX,title,Title,Title,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETFLIX,video_durationQ_PROTO_NETFLIX,video_duration,VidDuration,Video Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETFLIX,videoidQ_PROTO_NETFLIX,videoid,VidID,Video ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETLOG,is_mobile_serviceQ_PROTO_NETLOG,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETLOG,loginQ_PROTO_NETLOG,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NETLOG,passwordQ_PROTO_NETLOG,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,filenameQ_PROTO_NFS,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,filesizeQ_PROTO_NFS,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,gidQ_PROTO_NFS,gid,GID,GID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,modeQ_PROTO_NFS,mode,Mode,Mode,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,offsetQ_PROTO_NFS,offset,Offset,Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,type_stringQ_PROTO_NFS,type_string,TypeString,Type String,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,uidQ_PROTO_NFS,uid,UID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NFS,versionQ_PROTO_NFS,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,dateQ_PROTO_NICONICO_DOUGA,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,descriptionQ_PROTO_NICONICO_DOUGA,description,Description,Description,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,loginQ_PROTO_NICONICO_DOUGA,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,nicknameQ_PROTO_NICONICO_DOUGA,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,query_rawQ_PROTO_NICONICO_DOUGA,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,query_textQ_PROTO_NICONICO_DOUGA,query_text,QueryText,Query Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,tagQ_PROTO_NICONICO_DOUGA,tag,Tag,Tag,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,titleQ_PROTO_NICONICO_DOUGA,title,Title,Title,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,video_durationQ_PROTO_NICONICO_DOUGA,video_duration,VidDuration,Video Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NICONICO_DOUGA,videoidQ_PROTO_NICONICO_DOUGA,videoid,VidID,Video ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NNTP,loginQ_PROTO_NNTP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NNTP,newsgroupQ_PROTO_NNTP,newsgroup,Newsgroup,Newsgroup,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NNTP,passwordQ_PROTO_NNTP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NNTP,senderQ_PROTO_NNTP,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NNTP,subjectQ_PROTO_NNTP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +NTP,reference_clockQ_PROTO_NTP,reference_clock,ReferenceClock,Reference Clock,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ODNOKLASSNIKI,contact_aliasQ_PROTO_ODNOKLASSNIKI,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ODNOKLASSNIKI,group_nameQ_PROTO_ODNOKLASSNIKI,group_name,GroupName,Group Name,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ODNOKLASSNIKI,loginQ_PROTO_ODNOKLASSNIKI,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ODNOKLASSNIKI,passwordQ_PROTO_ODNOKLASSNIKI,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OOVOO,loginQ_PROTO_OOVOO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OPENBSD_UPDATE,package_nameQ_PROTO_OPENBSD_UPDATE,package_name,PkgName,Package Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OPENVPN,seqQ_PROTO_OPENVPN,seq,Seq,Sequence,quantity,,Quantity,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OPERA_UPDATE,current_versionQ_PROTO_OPERA_UPDATE,current_version,CurrentVersion,Current Version,version,,version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OPERA_UPDATE,new_versionQ_PROTO_OPERA_UPDATE,new_version,NewVersion,New Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,actionQ_PROTO_ORANGEMAIL,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,attach_idQ_PROTO_ORANGEMAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,attach_sizeQ_PROTO_ORANGEMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,contact_aliasQ_PROTO_ORANGEMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,contact_emailQ_PROTO_ORANGEMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,contact_firstnameQ_PROTO_ORANGEMAIL,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,contact_lastnameQ_PROTO_ORANGEMAIL,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,dateQ_PROTO_ORANGEMAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,draftQ_PROTO_ORANGEMAIL,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,attach_filenameQ_PROTO_ORANGEMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,folderQ_PROTO_ORANGEMAIL,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,loginQ_PROTO_ORANGEMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msg_idQ_PROTO_ORANGEMAIL,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_dateQ_PROTO_ORANGEMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_folderQ_PROTO_ORANGEMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_msgidQ_PROTO_ORANGEMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_receiverQ_PROTO_ORANGEMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_receiver_aliasQ_PROTO_ORANGEMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_senderQ_PROTO_ORANGEMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_sender_aliasQ_PROTO_ORANGEMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,msglist_subjectQ_PROTO_ORANGEMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,receiverQ_PROTO_ORANGEMAIL,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,receiver_aliasQ_PROTO_ORANGEMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,receiver_emailQ_PROTO_ORANGEMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,receiver_typeQ_PROTO_ORANGEMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,senderQ_PROTO_ORANGEMAIL,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,sender_aliasQ_PROTO_ORANGEMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,sender_emailQ_PROTO_ORANGEMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ORANGEMAIL,subjectQ_PROTO_ORANGEMAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,area_idQ_PROTO_OSPF,area_id,AreaID,Area ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,backup_routerQ_PROTO_OSPF,backup_router,BackupRouter,Backup Routerer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,dd_seq_nbrQ_PROTO_OSPF,dd_seq_nbr,DDSeqNbr,DD Seq Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,dead_intervalQ_PROTO_OSPF,dead_interval,DeadInterval,Dead Interval,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,designed_routerQ_PROTO_OSPF,designed_router,DesignedRouter,Designed Router,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,external_fwd_addrQ_PROTO_OSPF,external_fwd_addr,ExtFwdAddr,External Forward Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,external_route_tagQ_PROTO_OSPF,external_route_tag,ExtRouteTag,External Route Tag,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,link_dataQ_PROTO_OSPF,link_data,LinkData,Link Data,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,link_idQ_PROTO_OSPF,link_id,LinkID,Link ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_adv_routerQ_PROTO_OSPF,ls_adv_router,LsAdvRouter,Ls Adv Router,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_attach_routerQ_PROTO_OSPF,ls_attach_router,LsAttachRouter,Ls Attach Router,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_idQ_PROTO_OSPF,ls_id,LsID,Ls ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_metricQ_PROTO_OSPF,ls_metric,LsMetric,Ls Metric,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_netmaskQ_PROTO_OSPF,ls_netmask,LsNetmask,Ls Netmask,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_seq_numberQ_PROTO_OSPF,ls_seq_number,LsSeqNumber,Ls Seq Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,ls_typeQ_PROTO_OSPF,ls_type,LsType,Ls Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,neighborQ_PROTO_OSPF,neighbor,Neighbor,Neighbor,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,netmaskQ_PROTO_OSPF,netmask,Netmask,Netmask,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OSPF,router_idQ_PROTO_OSPF,router_id,RouterID,Router ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,actionQ_PROTO_OWA,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,attach_idQ_PROTO_OWA,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,attach_sizeQ_PROTO_OWA,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,attach_typeQ_PROTO_OWA,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,contact_aliasQ_PROTO_OWA,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,contact_emailQ_PROTO_OWA,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,dateQ_PROTO_OWA,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,draftQ_PROTO_OWA,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,attach_filenameQ_PROTO_OWA,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,folderQ_PROTO_OWA,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,loginQ_PROTO_OWA,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,login_serverQ_PROTO_OWA,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msg_idQ_PROTO_OWA,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_dateQ_PROTO_OWA,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_folderQ_PROTO_OWA,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_msgidQ_PROTO_OWA,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_receiverQ_PROTO_OWA,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_receiver_aliasQ_PROTO_OWA,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_receiver_emailQ_PROTO_OWA,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_senderQ_PROTO_OWA,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_sender_aliasQ_PROTO_OWA,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_sender_emailQ_PROTO_OWA,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,msglist_subjectQ_PROTO_OWA,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,receiverQ_PROTO_OWA,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,receiver_aliasQ_PROTO_OWA,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,receiver_emailQ_PROTO_OWA,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,receiver_typeQ_PROTO_OWA,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,senderQ_PROTO_OWA,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,sender_aliasQ_PROTO_OWA,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,sender_emailQ_PROTO_OWA,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,session_idQ_PROTO_OWA,session_id,SessionID,Session ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +OWA,subjectQ_PROTO_OWA,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,call_durationQ_PROTO_PALTALK,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,calleeQ_PROTO_PALTALK,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,callee_addrQ_PROTO_PALTALK,callee_addr,CalleeAddr,Callee Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,callee_uidQ_PROTO_PALTALK,callee_uid,CalleeUID,Callee UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,callerQ_PROTO_PALTALK,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,caller_addrQ_PROTO_PALTALK,caller_addr,CallerAddr,Caller Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,caller_uidQ_PROTO_PALTALK,caller_uid,CallerUID,Caller UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,call_idQ_PROTO_PALTALK,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,channelQ_PROTO_PALTALK,channel,Channel,Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,chat_idQ_PROTO_PALTALK,chat_id,ChatID,Chat ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,contact_loginQ_PROTO_PALTALK,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,contact_uidQ_PROTO_PALTALK,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,encodingQ_PROTO_PALTALK,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,loginQ_PROTO_PALTALK,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,messageQ_PROTO_PALTALK,message,Msg,Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,receiverQ_PROTO_PALTALK,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,receiver_uidQ_PROTO_PALTALK,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,senderQ_PROTO_PALTALK,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,sender_uidQ_PROTO_PALTALK,sender_uid,SenderUID,Sender UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,start_timeQ_PROTO_PALTALK,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,uidQ_PROTO_PALTALK,uid,UID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK,user_emailQ_PROTO_PALTALK,user_email,UserEmail,User Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,filenameQ_PROTO_PALTALK_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,filesizeQ_PROTO_PALTALK_TRANSFER,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,loginQ_PROTO_PALTALK_TRANSFER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,receiverQ_PROTO_PALTALK_TRANSFER,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,receiver_uidQ_PROTO_PALTALK_TRANSFER,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,senderQ_PROTO_PALTALK_TRANSFER,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PALTALK_TRANSFER,sender_uidQ_PROTO_PALTALK_TRANSFER,sender_uid,SenderUID,Sender UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PAP,loginQ_PROTO_PAP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PAP,message_typeQ_PROTO_PAP,message_type,MsgType,Message Type,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PAP,passwordQ_PROTO_PAP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PERFORCE,parameter_nameQ_PROTO_PERFORCE,parameter_name,ParamName,Parameter Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PERFORCE,parameter_sizeQ_PROTO_PERFORCE,parameter_size,ParamSize,Parameter Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PERFORCE,parameter_valueQ_PROTO_PERFORCE,parameter_value,ParamValue,Parameter Value,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PERFSPOT,is_mobile_serviceQ_PROTO_PERFSPOT,is_mobile_service,IsMobileService,Is Mobile Service,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PERFSPOT,loginQ_PROTO_PERFSPOT,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PERFSPOT,passwordQ_PROTO_PERFSPOT,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,attach_dispositionQ_PROTO_POP3,attach_disposition,AttachDisposition,Attach Disposition,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,attach_transfer_encodingQ_PROTO_POP3,attach_transfer_encoding,AttachTransferEncoding,Attach Transfer Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,attach_typeQ_PROTO_POP3,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,dateQ_PROTO_POP3,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,email_indexQ_PROTO_POP3,email_index,EmailIndex,Email Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,attach_filenameQ_PROTO_POP3,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,greeting_messageQ_PROTO_POP3,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,indexQ_PROTO_POP3,index,Index,Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,loginQ_PROTO_POP3,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,login_serverQ_PROTO_POP3,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,methodQ_PROTO_POP3,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,mime_typeQ_PROTO_POP3,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,message_idQ_PROTO_POP3,message_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,passwordQ_PROTO_POP3,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_by_ipQ_PROTO_POP3,received_by_ip,RcvdByIP,Received By IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_by_nameQ_PROTO_POP3,received_by_name,RcvdByName,Received By Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_dateQ_PROTO_POP3,received_date,RcvdDate,Received Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_from_ipQ_PROTO_POP3,received_from_ip,RcvdFromIP,Received From IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_from_nameQ_PROTO_POP3,received_from_name,RcvdFromName,Received From Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_server_agentQ_PROTO_POP3,received_server_agent,RcvdServerAgent,Received Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,received_withQ_PROTO_POP3,received_with,RcvdWith,Received With,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,receiverQ_PROTO_POP3,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,receiver_aliasQ_PROTO_POP3,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,receiver_emailQ_PROTO_POP3,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,receiver_typeQ_PROTO_POP3,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,replytoQ_PROTO_POP3,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,senderQ_PROTO_POP3,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,sender_aliasQ_PROTO_POP3,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,sender_emailQ_PROTO_POP3,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,server_responseQ_PROTO_POP3,server_response,ServerResp,Server Response,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,subjectQ_PROTO_POP3,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,user_agentQ_PROTO_POP3,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POP3,xmailerQ_PROTO_POP3,xmailer,Xmailer,Xmailer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,authentification_typeQ_PROTO_POSTGRES,authentification_type,AuthType,Authentication Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,baseQ_PROTO_POSTGRES,base,Base,Base,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,errorQ_PROTO_POSTGRES,error,Err,Error,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,loginQ_PROTO_POSTGRES,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,passwordQ_PROTO_POSTGRES,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,proto_versionQ_PROTO_POSTGRES,proto_version,ProtoVersion,Proto Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,queryQ_PROTO_POSTGRES,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +POSTGRES,server_versionQ_PROTO_POSTGRES,server_version,ServerVersion,Server Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PPLIVE,methodQ_PROTO_PPLIVE,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PPP,protocolQ_PROTO_PPP,protocol,Proto,Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PPTP,vendorQ_PROTO_PPTP,vendor,Vendor,Vendor,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PPTP,versionQ_PROTO_PPTP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PRICERUNNER,query_rawQ_PROTO_PRICERUNNER,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +PRICERUNNER,query_textQ_PROTO_PRICERUNNER,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Q931,call_durationQ_PROTO_Q931,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Q931,calleeQ_PROTO_Q931,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Q931,callerQ_PROTO_Q931,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Q931,displayQ_PROTO_Q931,display,Display,Display,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Q931,session_durationQ_PROTO_Q931,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +Q931,setup_delayQ_PROTO_Q931,setup_delay,SetupDelay,Setup Delay,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,call_durationQ_PROTO_QQ,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,calleeQ_PROTO_QQ,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,callerQ_PROTO_QQ,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,contact_loginQ_PROTO_QQ,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,loginQ_PROTO_QQ,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,msg_codeQ_PROTO_QQ,msg_code,MsgCode,Message Code,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,msg_typeQ_PROTO_QQ,msg_type,MsgType,Message Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,serviceQ_PROTO_QQ,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ,version_codeQ_PROTO_QQ,version_code,VersionCode,Version Code,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ_TRANSFER,actionQ_PROTO_QQ_TRANSFER,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ_TRANSFER,filekeyQ_PROTO_QQ_TRANSFER,filekey,FileKey,File Key,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ_TRANSFER,filenameQ_PROTO_QQ_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ_TRANSFER,filesizeQ_PROTO_QQ_TRANSFER,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ_TRANSFER,loginQ_PROTO_QQ_TRANSFER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QQ_TRANSFER,serviceQ_PROTO_QQ_TRANSFER,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QUAKE,serverQ_PROTO_QUAKE,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +QVOD,peer_ipQ_PROTO_QVOD,peer_ip,PeerIP,Peer IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,_3gpp_imsiQ_PROTO_RADIUS,_3gpp_imsi,3GPPIMSI,3GPP IMSI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,_3gpp_sgsn_addressQ_PROTO_RADIUS,_3gpp_sgsn_address,3GPPSGSNAddr,3GPP SGSN Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,_3gpp_sgsn_mcc_mncQ_PROTO_RADIUS,_3gpp_sgsn_mcc_mnc,3GPPSGSNMCCMNC,3GPP SGSN MCC MNC,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,acct_input_octetsQ_PROTO_RADIUS,acct_input_octets,AcctInputOctets,Account Input Octets,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,acct_output_octetsQ_PROTO_RADIUS,acct_output_octets,AcctOutputOctets,Account Output Octets,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,acct_session_idQ_PROTO_RADIUS,acct_session_id,AcctSessionID,Account Session ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,avp_intQ_PROTO_RADIUS,avp_int,AvpInt,Avp Int,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,avp_int64Q_PROTO_RADIUS,avp_int64,AvpInt64,Avp Int 64,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,avp_interface_idQ_PROTO_RADIUS,avp_interface_id,AvpInterfaceID,Avp Interface ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,avp_ipv4Q_PROTO_RADIUS,avp_ipv4,AvpIPv4,Avp IPv v4,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,avp_vendor_idQ_PROTO_RADIUS,avp_vendor_id,AvpVendorID,Avp Vendor ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,callback_numberQ_PROTO_RADIUS,callback_number,CallbackNumber,Callback Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,called_station_idQ_PROTO_RADIUS,called_station_id,CalledStationID,Called Station ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,calling_station_idQ_PROTO_RADIUS,calling_station_id,CallingStationID,Calling Station ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,framed_ipQ_PROTO_RADIUS,framed_ip,FramedIP,Framed IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,framed_ipv6_poolQ_PROTO_RADIUS,framed_ipv6_pool,FramedIPV6Pool,Framed IPV6 Pool,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,framed_ipv6_routeQ_PROTO_RADIUS,framed_ipv6_route,FramedIPV6Route,Framed IPV6 Route,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,idle_timeoutQ_PROTO_RADIUS,idle_timeout,IdleTimeout,Idle Timeout,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,loginQ_PROTO_RADIUS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,nas_idQ_PROTO_RADIUS,nas_id,NASID,NAS ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,nas_ipQ_PROTO_RADIUS,nas_ip,NASIP,NAS IP,,,,,1st Review,This also came up when I searched NAS_IP https://www.youtube.com/watch?v=cNPDx-_3hqQ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,nas_portQ_PROTO_RADIUS,nas_port,NASPort,NAS Port,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,nas_port_idQ_PROTO_RADIUS,nas_port_id,NASPortID,NAS Port ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,nas_port_typeQ_PROTO_RADIUS,nas_port_type,NASPortType,NAS Port Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,session_timeoutQ_PROTO_RADIUS,session_timeout,SessionTimeout,Session Timeout,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,start_timeQ_PROTO_RADIUS,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,stop_timeQ_PROTO_RADIUS,stop_time,StopTime,Stop Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RADIUS,terminate_causeQ_PROTO_RADIUS,terminate_cause,TerminateCause,Terminate Cause,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER,domainQ_PROTO_RAMBLER,domain,Domain,Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER,loginQ_PROTO_RAMBLER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER,passwordQ_PROTO_RAMBLER,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER,query_rawQ_PROTO_RAMBLER,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER,query_textQ_PROTO_RAMBLER,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER,query_typeQ_PROTO_RAMBLER,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,actionQ_PROTO_RAMBLER_WEBMAIL,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,attach_idQ_PROTO_RAMBLER_WEBMAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,attach_sizeQ_PROTO_RAMBLER_WEBMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,attach_typeQ_PROTO_RAMBLER_WEBMAIL,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,contact_aliasQ_PROTO_RAMBLER_WEBMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,contact_emailQ_PROTO_RAMBLER_WEBMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,dateQ_PROTO_RAMBLER_WEBMAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,domainQ_PROTO_RAMBLER_WEBMAIL,domain,Domain,Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,draftQ_PROTO_RAMBLER_WEBMAIL,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,attach_filenameQ_PROTO_RAMBLER_WEBMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,folderQ_PROTO_RAMBLER_WEBMAIL,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,folderlist_item_nameQ_PROTO_RAMBLER_WEBMAIL,folderlist_item_name,FolderListItemName,Folder List Item Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,loginQ_PROTO_RAMBLER_WEBMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msg_idQ_PROTO_RAMBLER_WEBMAIL,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_attachQ_PROTO_RAMBLER_WEBMAIL,msglist_attach,MsgListAttach,Message List Attach,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_dateQ_PROTO_RAMBLER_WEBMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_folderQ_PROTO_RAMBLER_WEBMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_importanceQ_PROTO_RAMBLER_WEBMAIL,msglist_importance,MsgListImportance,Message List Importance,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_msgidQ_PROTO_RAMBLER_WEBMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_receiverQ_PROTO_RAMBLER_WEBMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_receiver_aliasQ_PROTO_RAMBLER_WEBMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_receiver_emailQ_PROTO_RAMBLER_WEBMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_senderQ_PROTO_RAMBLER_WEBMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_sender_aliasQ_PROTO_RAMBLER_WEBMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_sender_emailQ_PROTO_RAMBLER_WEBMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_subjectQ_PROTO_RAMBLER_WEBMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,msglist_unreadQ_PROTO_RAMBLER_WEBMAIL,msglist_unread,MsgListUnread,Message List Unread,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,receiverQ_PROTO_RAMBLER_WEBMAIL,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,receiver_aliasQ_PROTO_RAMBLER_WEBMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,receiver_emailQ_PROTO_RAMBLER_WEBMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,receiver_typeQ_PROTO_RAMBLER_WEBMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,senderQ_PROTO_RAMBLER_WEBMAIL,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,sender_aliasQ_PROTO_RAMBLER_WEBMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,sender_emailQ_PROTO_RAMBLER_WEBMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAMBLER_WEBMAIL,subjectQ_PROTO_RAMBLER_WEBMAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,actionQ_PROTO_RAPIDSHARE,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,client_idQ_PROTO_RAPIDSHARE,client_id,ClientID,Client ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,download_urlQ_PROTO_RAPIDSHARE,download_url,DownloadURL,Download URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,email_addressQ_PROTO_RAPIDSHARE,email_address,EmailAddr,Email Address,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,filenameQ_PROTO_RAPIDSHARE,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,filesizeQ_PROTO_RAPIDSHARE,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,loginQ_PROTO_RAPIDSHARE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,methodQ_PROTO_RAPIDSHARE,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RAPIDSHARE,passwordQ_PROTO_RAPIDSHARE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,channel_disabledQ_PROTO_RDP,channel_disabled,ChannelDisabled,Channel Disabled,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,channel_encrypt_wayQ_PROTO_RDP,channel_encrypt_way,ChannelEncryptWay,Channel Encrypt Way,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,channel_idQ_PROTO_RDP,channel_id,ChannelID,Channel ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,channel_nameQ_PROTO_RDP,channel_name,ChannelName,Channel Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,channel_priorityQ_PROTO_RDP,channel_priority,ChannelPriority,Channel Priority,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,client_buildQ_PROTO_RDP,client_build,ClientBuild,Client Build,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,default_usernameQ_PROTO_RDP,default_username,DefaultUsername,Default Username,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,desktop_heightQ_PROTO_RDP,desktop_height,DesktopHeight,Desktop Height,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,desktop_widthQ_PROTO_RDP,desktop_width,DesktopWidth,Desktop Width,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,domain_asciiQ_PROTO_RDP,domain_ascii,DomainASCII,Domain ASCII,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,encryptedQ_PROTO_RDP,encrypted,Encrypted,Encrypted,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,hostname_asciiQ_PROTO_RDP,hostname_ascii,HostnameASCII,Hostname ASCII,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,io_channel_idQ_PROTO_RDP,io_channel_id,IOChannelID,IO Channel ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,username_asciiQ_PROTO_RDP,username_ascii,UsernameASCII,Username ASCII,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RDP,versionQ_PROTO_RDP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,kernel_archiQ_PROTO_REDHAT_UPDATE,kernel_archi,KernelArch,Kernel Architecture,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,kernel_distribQ_PROTO_REDHAT_UPDATE,kernel_distrib,KernelDistrib,Kernel Distribution,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,kernel_nameQ_PROTO_REDHAT_UPDATE,kernel_name,KernelName,Kernel Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,kernel_versionQ_PROTO_REDHAT_UPDATE,kernel_version,KernelVersion,Kernel Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,package_archiQ_PROTO_REDHAT_UPDATE,package_archi,PkgArch,Package Architecture,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,package_distribQ_PROTO_REDHAT_UPDATE,package_distrib,PkgDistrib,Package Distrib,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,package_nameQ_PROTO_REDHAT_UPDATE,package_name,PkgName,Package Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +REDHAT_UPDATE,package_versionQ_PROTO_REDHAT_UPDATE,package_version,PkgVersion,Package Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RIP2,authenticationQ_PROTO_RIP2,authentication,Auth,Authentication,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RIP2,ip_addrQ_PROTO_RIP2,ip_addr,IPAddr,IP Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RIP2,metricQ_PROTO_RIP2,metric,Metric,Metric,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RIP2,netmaskQ_PROTO_RIP2,netmask,Netmask,Netmask,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RIP2,next_hopeQ_PROTO_RIP2,next_hope,NextHope,Next Hope,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RLOGIN,client_loginQ_PROTO_RLOGIN,client_login,ClientLogin,Client Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RLOGIN,server_loginQ_PROTO_RLOGIN,server_login,ServerLogin,Server Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RLOGIN,server_passwordQ_PROTO_RLOGIN,server_password,ServerPassword,Server Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RLOGIN,speedQ_PROTO_RLOGIN,speed,Speed,Speed,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RLOGIN,term_typeQ_PROTO_RLOGIN,term_type,TermType,Term Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RPC,procedureQ_PROTO_RPC,procedure,Procedure,Procedure,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RPC,programQ_PROTO_RPC,program,Program,Program,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RPC,program_versionQ_PROTO_RPC,program_version,ProgramVersion,Program Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RPC,stateQ_PROTO_RPC,state,State,State,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RPC,versionQ_PROTO_RPC,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RPC,xidQ_PROTO_RPC,xid,XID,X ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RSH,loginQ_PROTO_RSH,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RSH,remote_loginQ_PROTO_RSH,remote_login,RemoteLogin,Remote Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RSH,serverQ_PROTO_RSH,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RSYNC,loginQ_PROTO_RSYNC,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RSYNC,moduleQ_PROTO_RSYNC,module,Module,Module,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RSYNC,passwordQ_PROTO_RSYNC,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,cnameQ_PROTO_RTCP,cname,CNAME,CNAME,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,emailQ_PROTO_RTCP,email,Email,Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,locQ_PROTO_RTCP,loc,Loc,Loc,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,nameQ_PROTO_RTCP,name,Name,Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,noteQ_PROTO_RTCP,note,Note,Note,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,phoneQ_PROTO_RTCP,phone,Phone,Phone,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,rr_cumlostQ_PROTO_RTCP,rr_cumlost,RrCumlost,Rr Cumlost,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,rr_jitterQ_PROTO_RTCP,rr_jitter,RrJitter,Rr Jitter,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,rr_ssrc_idQ_PROTO_RTCP,rr_ssrc_id,RrSsrcID,Rr Ssrc ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,ssrcQ_PROTO_RTCP,ssrc,SSrc,S Source,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTCP,toolQ_PROTO_RTCP,tool,Tool,Tool,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTMP,app_nameQ_PROTO_RTMP,app_name,AppName,Application Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTMP,page_urlQ_PROTO_RTMP,page_url,PageURL,Page URL,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTMP,start_timeQ_PROTO_RTMP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTMP,stop_timeQ_PROTO_RTMP,stop_time,StopTime,Stop Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTMP,stream_urlQ_PROTO_RTMP,stream_url,StreamURL,Stream URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,codec_nameQ_PROTO_RTP,codec_name,CodecName,Codec Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,end_sessionQ_PROTO_RTP,end_session,EndSession,End Session,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,mosQ_PROTO_RTP,mos,Mos,Mos,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,mos_satelliteQ_PROTO_RTP,mos_satellite,MosSatellite,Mos Satellite,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,mos_sessionQ_PROTO_RTP,mos_session,MosSession,Mos Session,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,rfactorQ_PROTO_RTP,rfactor,Rfactor,Rfactor,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,ssrcQ_PROTO_RTP,ssrc,SSrc,S Source,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,timestampQ_PROTO_RTP,timestamp,Timestamp,Timestamp,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTP,unseqQ_PROTO_RTP,unseq,Unseq,Unseq,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,codeQ_PROTO_RTSP,code,Code,Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,cseqQ_PROTO_RTSP,cseq,Cseq,Cseq,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,directoryQ_PROTO_RTSP,directory,Directory,Directory,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,filenameQ_PROTO_RTSP,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,header_nameQ_PROTO_RTSP,header_name,HeaderName,Header Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,header_statuslineQ_PROTO_RTSP,header_statusline,HeaderStatusline,Header Statusline,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,header_valueQ_PROTO_RTSP,header_value,HeaderValue,Header Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_addrQ_PROTO_RTSP,media_attr_addr,MediaAttrAddr,Media Attribute Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_channelQ_PROTO_RTSP,media_attr_channel,MediaAttrChannel,Media Attribute Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_encodingQ_PROTO_RTSP,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_labelQ_PROTO_RTSP,media_attr_label,MediaAttrLabel,Media Attribute Label,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_paramQ_PROTO_RTSP,media_attr_param,MediaAttrParam,Media Attribue Param,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_rateQ_PROTO_RTSP,media_attr_rate,MediaAttrRate,Media Attribute Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_transportQ_PROTO_RTSP,media_attr_transport,MediaAttrTransport,Media Attribue Transport,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_typeQ_PROTO_RTSP,media_attr_type,MediaAttrType,Media Attribue Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_attr_valueQ_PROTO_RTSP,media_attr_value,MediaAttrValue,Media Attribute Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_formatQ_PROTO_RTSP,media_format,MediaFormat,Media Format,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_protoQ_PROTO_RTSP,media_proto,MediaProto,Media Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,media_typeQ_PROTO_RTSP,media_type,MediaType,Media Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,methodQ_PROTO_RTSP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,serverQ_PROTO_RTSP,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,server_agentQ_PROTO_RTSP,server_agent,ServerAgent,Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,session_durationQ_PROTO_RTSP,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,start_timeQ_PROTO_RTSP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,uriQ_PROTO_RTSP,uri,URI,URI,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,uri_fullQ_PROTO_RTSP,uri_full,URIFull,URI Full,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,urilast64Q_PROTO_RTSP,urilast64,URILast64,URI Last 64,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,urilenQ_PROTO_RTSP,urilen,URILen,URI Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,user_agentQ_PROTO_RTSP,user_agent,UserAgent,User Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +RTSP,versionQ_PROTO_RTSP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_enb_ue_idQ_PROTO_S1AP,ep_enb_ue_id,EPENBUEID,EP ENB UE ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ieQ_PROTO_S1AP,ep_ie,EPIE,EP IE,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ie_cgiQ_PROTO_S1AP,ep_ie_cgi,EPIECGI,EP IE CGI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ie_nameQ_PROTO_S1AP,ep_ie_name,EPIEName,EP IE Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ie_rabQ_PROTO_S1AP,ep_ie_rab,EPIERAB,EP IE RAB,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ie_rab_addrQ_PROTO_S1AP,ep_ie_rab_addr,EPIERABAddr,EP IE RAB Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ie_rab_teidQ_PROTO_S1AP,ep_ie_rab_teid,EPIERABTEID,EP IE RAB TEID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_ie_taiQ_PROTO_S1AP,ep_ie_tai,EPIETAE,EP IE TAI,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_mme_ue_idQ_PROTO_S1AP,ep_mme_ue_id,EPMMEUEID,EP MME UE ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +S1AP,ep_nameQ_PROTO_S1AP,ep_name,EPName,EP Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SAMSUNG_APPS,is_smartphoneQ_PROTO_SAMSUNG_APPS,is_smartphone,IsSmartphone,Is Smartphone,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,call_durationQ_PROTO_SCCP,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,calleeQ_PROTO_SCCP,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,calleenameQ_PROTO_SCCP,calleename,CalleeName,Callee Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,callerQ_PROTO_SCCP,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,callernameQ_PROTO_SCCP,callername,CallerName,Caller Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,call_idQ_PROTO_SCCP,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,callstateQ_PROTO_SCCP,callstate,Callstate,Callstate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,call_wayQ_PROTO_SCCP,call_way,CallWay,Call Way,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,codecQ_PROTO_SCCP,codec,Codec,Codec,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,device_nameQ_PROTO_SCCP,device_name,DeviceName,Device Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,device_typeQ_PROTO_SCCP,device_type,DeviceType,Device Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,keypadQ_PROTO_SCCP,keypad,Keypad,Keypad,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,message_typeQ_PROTO_SCCP,message_type,MsgType,Message Type,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,nb_byt_rcvQ_PROTO_SCCP,nb_byt_rcv,NBBytRcv,NB Byte Rcv,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,nb_byt_sentQ_PROTO_SCCP,nb_byt_sent,NBBytSent,NB Byte Sent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,nb_pkt_lostQ_PROTO_SCCP,nb_pkt_lost,NBPktLost,NB Packet Lost,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,nb_pkt_rcvQ_PROTO_SCCP,nb_pkt_rcv,NBPktRcv,NB Packet Receive,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,nb_pkt_sentQ_PROTO_SCCP,nb_pkt_sent,NBPktSent,NB Packet Sent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,softkeyeventQ_PROTO_SCCP,softkeyevent,Softkeyevent,Softkey Event,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,start_timeQ_PROTO_SCCP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,stats_jitterQ_PROTO_SCCP,stats_jitter,StatsJitter,Stats Jitter,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCCP,stats_latencyQ_PROTO_SCCP,stats_latency,StatsLatency,Stats Latency,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCTP,chunk_data_protoQ_PROTO_SCTP,chunk_data_proto,ChunkDataProto,Chunk Data Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SCTP,chunk_data_tsnQ_PROTO_SCTP,chunk_data_tsn,ChunkDataTSN,Chunk Data TSN,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SECONDLIFE,chat_typeQ_PROTO_SECONDLIFE,chat_type,ChatType,Chat Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SECONDLIFE,loginQ_PROTO_SECONDLIFE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SECONDLIFE,messageQ_PROTO_SECONDLIFE,message,Msg,Message,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SECONDLIFE,message_typeQ_PROTO_SECONDLIFE,message_type,MsgType,Message Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SECONDLIFE,source_nameQ_PROTO_SECONDLIFE,source_name,SourceName,Source Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SECONDLIFE,source_typeQ_PROTO_SECONDLIFE,source_type,SourceType,Source Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,accept_languageQ_PROTO_SIP,accept_language,AcceptLanguage,Accept Language,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,alert_infoQ_PROTO_SIP,alert_info,AlertInfo,Alert Information,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,call_durationQ_PROTO_SIP,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,calleeQ_PROTO_SIP,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_addrQ_PROTO_SIP,callee_addr,CalleeAddr,Callee Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_domainQ_PROTO_SIP,callee_domain,CalleeDomain,Callee Domain,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_e164Q_PROTO_SIP,callee_e164,CalleeE164,Callee E164,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_nicknameQ_PROTO_SIP,callee_nickname,CalleeNickname,Callee Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_server_agentQ_PROTO_SIP,callee_server_agent,CalleeServerAgent,Callee Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_user_agentQ_PROTO_SIP,callee_user_agent,CalleeUserAgent,Callee User Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callee_user_phoneQ_PROTO_SIP,callee_user_phone,CalleeUserPhone,Callee User Phone,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,callerQ_PROTO_SIP,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_addrQ_PROTO_SIP,caller_addr,CallerAddr,Caller Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_domainQ_PROTO_SIP,caller_domain,CallerDomain,Caller Domain,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_e164Q_PROTO_SIP,caller_e164,CallerE164,Caller E164,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_nicknameQ_PROTO_SIP,caller_nickname,CallerNickname,Caller Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_server_agentQ_PROTO_SIP,caller_server_agent,CallerServerAgent,Caller Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_user_agentQ_PROTO_SIP,caller_user_agent,CallerUserAgent,Caller User Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,caller_user_phoneQ_PROTO_SIP,caller_user_phone,CallerUserPhone,Caller User Phone,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,call_idQ_PROTO_SIP,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,call_infoQ_PROTO_SIP,call_info,CallInfo,Call Information,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,confcall_calleeQ_PROTO_SIP,confcall_callee,ConfCallCallee,Conference Call Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,confcall_callerQ_PROTO_SIP,confcall_caller,ConfCallCaller,Conference Call Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,connection_info_addrQ_PROTO_SIP,connection_info_addr,ConnectionInfoAddr,Connection Info Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,connection_info_addr_typeQ_PROTO_SIP,connection_info_addr_type,ConnectionInfoAddrType,Connection Info Address Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,connection_info_net_typeQ_PROTO_SIP,connection_info_net_type,ConnectionInfoNetType,Connection Info Net Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,contactQ_PROTO_SIP,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,cseqQ_PROTO_SIP,cseq,Cseq,Cseq,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,dateQ_PROTO_SIP,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,end_statusQ_PROTO_SIP,end_status,EndStatus,End Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,expiresQ_PROTO_SIP,expires,Expires,Expires,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,fromQ_PROTO_SIP,from,From,From,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_addrQ_PROTO_SIP,media_attr_addr,MediaAttrAddr,Media Attribute Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_addr_end_offsetQ_PROTO_SIP,media_attr_addr_end_offset,MediaAttrAddrEndOffset,Media Attribute Address End Offset,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_addr_start_offsetQ_PROTO_SIP,media_attr_addr_start_offset,MediaAttrAddrStartOffset,Media Attribute Address Start Offset,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_channelQ_PROTO_SIP,media_attr_channel,MediaAttrChannel,Media Attribute Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_encodingQ_PROTO_SIP,media_attr_encoding,MediaAttrEncoding,Media Attribute Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_labelQ_PROTO_SIP,media_attr_label,MediaAttrLabel,Media Attribute Label,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_paramQ_PROTO_SIP,media_attr_param,MediaAttrParam,Media Attribue Param,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_port_end_offsetQ_PROTO_SIP,media_attr_port_end_offset,MediaAttrPortEndOffset,Media Attribute Address End Offset,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_port_start_offsetQ_PROTO_SIP,media_attr_port_start_offset,MediaAttrPortStartOffset,Media Attribute Port Start Offset,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_rateQ_PROTO_SIP,media_attr_rate,MediaAttrRate,Media Attribute Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_transportQ_PROTO_SIP,media_attr_transport,MediaAttrTransport,Media Attribue Transport,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_typeQ_PROTO_SIP,media_attr_type,MediaAttrType,Media Attribue Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_attr_valueQ_PROTO_SIP,media_attr_value,MediaAttrValue,Media Attribute Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_formatQ_PROTO_SIP,media_format,MediaFormat,Media Format,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_protoQ_PROTO_SIP,media_proto,MediaProto,Media Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,media_typeQ_PROTO_SIP,media_type,MediaType,Media Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,methodQ_PROTO_SIP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,mime_typeQ_PROTO_SIP,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,p_asserted_idQ_PROTO_SIP,p_asserted_id,PAssertedID,P Asserted ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,proxy_authorizationQ_PROTO_SIP,proxy_authorization,ProxyAuthorization,Proxy Authorization,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,reasonQ_PROTO_SIP,reason,Reason,Reason,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,record_routeQ_PROTO_SIP,record_route,RecordRoute,Record Route,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,remote_party_idQ_PROTO_SIP,remote_party_id,RemotePartyID,Remote Party ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,reply_codeQ_PROTO_SIP,reply_code,ReplyCode,Reply Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,request_call_idQ_PROTO_SIP,request_call_id,RequestCallID,Request Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,server_agentQ_PROTO_SIP,server_agent,ServerAgent,Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,session_durationQ_PROTO_SIP,session_duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,setup_delayQ_PROTO_SIP,setup_delay,SetupDelay,Setup Delay,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,start_timeQ_PROTO_SIP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,subjectQ_PROTO_SIP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,time_before_spkQ_PROTO_SIP,time_before_spk,TimeBeforeSpk,Time Before Spk,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,toQ_PROTO_SIP,to,To,To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,uriQ_PROTO_SIP,uri,URI,URI,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,user_agentQ_PROTO_SIP,user_agent,UserAgent,User Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,user_idQ_PROTO_SIP,user_id,UserID,User ID,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,viaQ_PROTO_SIP,via,Via,Via,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SIP,www_authenticateQ_PROTO_SIP,www_authenticate,WWWAuthenticate,WWW Authenticate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYBLOG,loginQ_PROTO_SKYBLOG,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYBLOG,passwordQ_PROTO_SKYBLOG,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYPE,nearest_serviceQ_PROTO_SKYPE,nearest_service,NearestService,Nearest Service,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYPE,serviceQ_PROTO_SKYPE,service,Service,Service,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYPE,service_durationQ_PROTO_SKYPE,service_duration,ServiceDuration,Service Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYPE,service_duration_tvQ_PROTO_SKYPE,service_duration_tv,ServiceDurationTV,Service Duration TV,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYPE,service_idQ_PROTO_SKYPE,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SKYPE,versionQ_PROTO_SKYPE,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,file_idQ_PROTO_SLSK,file_id,FileID,File ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,filenameQ_PROTO_SLSK,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,filesizeQ_PROTO_SLSK,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,loginQ_PROTO_SLSK,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,passwordQ_PROTO_SLSK,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,queryQ_PROTO_SLSK,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,transfer_wayQ_PROTO_SLSK,transfer_way,TransferWay,Transfer Way,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SLSK,versionQ_PROTO_SLSK,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,attributesQ_PROTO_SMB,attributes,Attributes,Atributes,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,command_stringQ_PROTO_SMB,command_string,CommandString,Command String,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,dialectQ_PROTO_SMB,dialect,Dialect,Dialect,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,directoryQ_PROTO_SMB,directory,Directory,Directory,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,domainQ_PROTO_SMB,domain,Domain,Domain,domain,,Domain,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,end_of_fileQ_PROTO_SMB,end_of_file,EndOfFile,End Of File,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,ext_attributesQ_PROTO_SMB,ext_attributes,ExtAttributes,External Attributes,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,file_attributesQ_PROTO_SMB,file_attributes,FileAttributes,File Attributes,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,file_chunk_data_offsetQ_PROTO_SMB,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,file_chunk_lenQ_PROTO_SMB,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,filenameQ_PROTO_SMB,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,filesizeQ_PROTO_SMB,filesize,FileSize,File Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,loadwayQ_PROTO_SMB,loadway,Loadway,Loadway,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,loginQ_PROTO_SMB,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,native_lan_managerQ_PROTO_SMB,native_lan_manager,NativeLANManager,Native LAN Manager,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,native_osQ_PROTO_SMB,native_os,NativeOS,Native Operating System,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,nt_statusQ_PROTO_SMB,nt_status,NTStatus,NT Status,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,pathQ_PROTO_SMB,path,Path,Path,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,process_idQ_PROTO_SMB,process_id,ProcessID,Process ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,query_idQ_PROTO_SMB,query_id,QueryID,Query ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,search_attributesQ_PROTO_SMB,search_attributes,SearchAttribs,Search Attributes,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,search_patternQ_PROTO_SMB,search_pattern,SearchPtrn,Search Pattern,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,search_storage_typeQ_PROTO_SMB,search_storage_type,SearchStorageType,Search Storage Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,security_blob_lenQ_PROTO_SMB,security_blob_len,SecurityBlobLen,Security Blob Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,serviceQ_PROTO_SMB,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,user_idQ_PROTO_SMB,user_id,UserID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMB,versionQ_PROTO_SMB,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMPP,receiverQ_PROTO_SMPP,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMPP,senderQ_PROTO_SMPP,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,attach_dispositionQ_PROTO_SMTP,attach_disposition,AttachDisposition,Attach Disposition,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,attach_sizeQ_PROTO_SMTP,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,attach_transfer_encodingQ_PROTO_SMTP,attach_transfer_encoding,AttachTransferEncoding,Attach Transfer Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,attach_typeQ_PROTO_SMTP,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,dateQ_PROTO_SMTP,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,email_indexQ_PROTO_SMTP,email_index,EmailIndex,Email Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,attach_filenameQ_PROTO_SMTP,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,greeting_messageQ_PROTO_SMTP,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,indexQ_PROTO_SMTP,index,Index,Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,loginQ_PROTO_SMTP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,methodQ_PROTO_SMTP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,mime_typeQ_PROTO_SMTP,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,msg_idQ_PROTO_SMTP,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,passwordQ_PROTO_SMTP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_by_ipQ_PROTO_SMTP,received_by_ip,RcvdByIP,Received By IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_by_nameQ_PROTO_SMTP,received_by_name,RcvdByName,Received By Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_dateQ_PROTO_SMTP,received_date,RcvdDate,Received Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_from_ipQ_PROTO_SMTP,received_from_ip,RcvdFromIP,Received From IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_from_nameQ_PROTO_SMTP,received_from_name,RcvdFromName,Received From Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_server_agentQ_PROTO_SMTP,received_server_agent,RcvdServerAgent,Received Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,received_withQ_PROTO_SMTP,received_with,RcvdWith,Received With,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,receiverQ_PROTO_SMTP,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,receiver_aliasQ_PROTO_SMTP,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,receiver_domainQ_PROTO_SMTP,receiver_domain,ReceiverDomain,Receiver Domain,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,receiver_emailQ_PROTO_SMTP,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,receiver_rcpttoQ_PROTO_SMTP,receiver_rcptto,ReceiverRcptto,Receiver Receipt to,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,receiver_typeQ_PROTO_SMTP,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,replytoQ_PROTO_SMTP,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,response_codeQ_PROTO_SMTP,response_code,ResponseCode,Response Code,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,senderQ_PROTO_SMTP,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,sender_aliasQ_PROTO_SMTP,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,sender_domainQ_PROTO_SMTP,sender_domain,SenderDomain,Sender Domain,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,sender_emailQ_PROTO_SMTP,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,sender_mailfromQ_PROTO_SMTP,sender_mailfrom,SenderMailFrom,Sender Mail From,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,serverQ_PROTO_SMTP,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,server_agentQ_PROTO_SMTP,server_agent,ServerAgent,Server Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,server_responseQ_PROTO_SMTP,server_response,ServerResp,Server Response,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,durationQ_PROTO_SMTP,duration,SessionDuration,Session Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,start_timeQ_PROTO_SMTP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,stop_timeQ_PROTO_SMTP,stop_time,StopTime,Stop Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,subjectQ_PROTO_SMTP,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,user_agentQ_PROTO_SMTP,user_agent,UserAgent,User Agent,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SMTP,xmailerQ_PROTO_SMTP,xmailer,Xmailer,Xmailer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,communityQ_PROTO_SNMP,community,Community,Community,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,methodQ_PROTO_SNMP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,nameQ_PROTO_SNMP,name,Name,Name,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,oidQ_PROTO_SNMP,oid,OID,OID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,request_idQ_PROTO_SNMP,request_id,RequestID,Request ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,value_lenQ_PROTO_SNMP,value_len,ValueLen,Value Len,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNMP,value_typeQ_PROTO_SNMP,value_type,ValueType,Value Type,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNPP,caller_idQ_PROTO_SNPP,caller_id,CallerID,Caller ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNPP,loginQ_PROTO_SNPP,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNPP,methodQ_PROTO_SNPP,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNPP,messageQ_PROTO_SNPP,message,Msg,Message,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNPP,pager_idQ_PROTO_SNPP,pager_id,PagerID,Pager ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SNPP,passwordQ_PROTO_SNPP,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SOCKS4,remote_addrQ_PROTO_SOCKS4,remote_addr,RemoteAddr,Remote Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SOCKS5,remote_addrQ_PROTO_SOCKS5,remote_addr,RemoteAddr,Remote Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SOCKS5,remote_nameQ_PROTO_SOCKS5,remote_name,RemoteName,Remote Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPDY,header_countQ_PROTO_SPDY,header_count,HeaderCount,Header Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPDY,header_nameQ_PROTO_SPDY,header_name,HeaderName,Header Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPDY,header_valueQ_PROTO_SPDY,header_value,HeaderValue,Header Value,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPDY,lengthQ_PROTO_SPDY,length,Length,Length,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPDY,status_codeQ_PROTO_SPDY,status_code,StatusCode,Status Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPDY,stream_idQ_PROTO_SPDY,stream_id,StreamID,Stream ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPID,divergenceQ_PROTO_SPID,divergence,Divergence,Divergence,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SPID,found_protocolQ_PROTO_SPID,found_protocol,FoundProtocol,Found Protocol,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,actionQ_PROTO_SQUIRRELMAIL,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,attach_idQ_PROTO_SQUIRRELMAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,attach_sizeQ_PROTO_SQUIRRELMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,attach_typeQ_PROTO_SQUIRRELMAIL,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,contact_aliasQ_PROTO_SQUIRRELMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,contact_emailQ_PROTO_SQUIRRELMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,dateQ_PROTO_SQUIRRELMAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,draftQ_PROTO_SQUIRRELMAIL,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,attach_filenameQ_PROTO_SQUIRRELMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,folderQ_PROTO_SQUIRRELMAIL,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,loginQ_PROTO_SQUIRRELMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,login_serverQ_PROTO_SQUIRRELMAIL,login_server,LoginServer,Login Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msg_idQ_PROTO_SQUIRRELMAIL,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_dateQ_PROTO_SQUIRRELMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_folderQ_PROTO_SQUIRRELMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_msgidQ_PROTO_SQUIRRELMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_receiverQ_PROTO_SQUIRRELMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_receiver_aliasQ_PROTO_SQUIRRELMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_receiver_emailQ_PROTO_SQUIRRELMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_senderQ_PROTO_SQUIRRELMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_sender_aliasQ_PROTO_SQUIRRELMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_sender_emailQ_PROTO_SQUIRRELMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,msglist_subjectQ_PROTO_SQUIRRELMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,passwordQ_PROTO_SQUIRRELMAIL,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,receiverQ_PROTO_SQUIRRELMAIL,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,receiver_aliasQ_PROTO_SQUIRRELMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,receiver_emailQ_PROTO_SQUIRRELMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,receiver_typeQ_PROTO_SQUIRRELMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,senderQ_PROTO_SQUIRRELMAIL,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,sender_aliasQ_PROTO_SQUIRRELMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,sender_emailQ_PROTO_SQUIRRELMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SQUIRRELMAIL,subjectQ_PROTO_SQUIRRELMAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSH,rttQ_PROTO_SSH,rtt,RTT,RTT,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,common_nameQ_PROTO_SSL,common_name,CommonName,Common Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,issuerQ_PROTO_SSL,issuer,Issuer,Issuer,account,,Account,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,server_nameQ_PROTO_SSL,server_name,ServerName,Server Name,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,subject_alt_nameQ_PROTO_SSL,subject_alt_name,SubjectAltName,Subject Alternate Name,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,supported_next_protocolQ_PROTO_SSL,supported_next_protocol,SupportedNextProto,Supported Next Protocol,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,validity_not_afterQ_PROTO_SSL,validity_not_after,ValidityNotAfter,Validity Not After,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SSL,validity_not_beforeQ_PROTO_SSL,validity_not_before,ValidityNotBefore,Validity Not Before,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +STP,bridge_addrQ_PROTO_STP,bridge_addr,BridgeAddr,Bridge Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +STP,root_addrQ_PROTO_STP,root_addr,RootAddr,Root Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +STP,root_path_costQ_PROTO_STP,root_path_cost,RootPathCost,Root Path Cost,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +SYSLOG,codeQ_PROTO_SYSLOG,code,Code,Code,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +T38,calleeQ_PROTO_T38,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +T38,callerQ_PROTO_T38,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +T38,fax_message_numberQ_PROTO_T38,fax_message_number,FaxMsgNum,Fax Message Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TAGGED,loginQ_PROTO_TAGGED,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TAGGED,passwordQ_PROTO_TAGGED,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,call_durationQ_PROTO_TANGO,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,calleeQ_PROTO_TANGO,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,callee_idQ_PROTO_TANGO,callee_id,CalleeID,Callee ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,callerQ_PROTO_TANGO,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,caller_idQ_PROTO_TANGO,caller_id,CallerID,Caller ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,call_idQ_PROTO_TANGO,call_id,CallID,Call ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,device_idQ_PROTO_TANGO,device_id,DeviceID,Device ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,loginQ_PROTO_TANGO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,phone_numberQ_PROTO_TANGO,phone_number,PhoneNum,Phone Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,serviceQ_PROTO_TANGO,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,service_duration_tvQ_PROTO_TANGO,service_duration_tv,ServiceDurationTV,Service Duration TV,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,user_emailQ_PROTO_TANGO,user_email,UserEmail,User Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TANGO,user_idQ_PROTO_TANGO,user_id,UserID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCHATCHE,loginQ_PROTO_TCHATCHE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCHATCHE,passwordQ_PROTO_TCHATCHE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,ack_numberQ_PROTO_TCP,ack_number,AckNumber,Acknowledge Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,cnx_durationQ_PROTO_TCP,cnx_duration,CnxDuration,Cnx Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,loss_countQ_PROTO_TCP,loss_count,LossCount,Loss Count,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,previous_lostQ_PROTO_TCP,previous_lost,PreviousLost,Previous Lost,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,rttQ_PROTO_TCP,rtt,RTT,RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,rtt_appQ_PROTO_TCP,rtt_app,RTTApp,RTTApp,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,seq_numberQ_PROTO_TCP,seq_number,SeqNum,Sequence Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,start_timeQ_PROTO_TCP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,tsecrQ_PROTO_TCP,tsecr,Tsecr,Tsecr,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TCP,tsvalQ_PROTO_TCP,tsval,Tsval,Tsval,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,applicationQ_PROTO_TDS,application,App,Application,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,database_nameQ_PROTO_TDS,database_name,DatabaseName,Database Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,hostnameQ_PROTO_TDS,hostname,Hostname,Hostname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,languageQ_PROTO_TDS,language,Language,Language,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,libraryQ_PROTO_TDS,library,Library,Library,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,loginQ_PROTO_TDS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,passwordQ_PROTO_TDS,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,queryQ_PROTO_TDS,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TDS,serverQ_PROTO_TDS,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channelQ_PROTO_TEAMSPEAK,channel,Channel,Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channel_actionQ_PROTO_TEAMSPEAK,channel_action,ChannelAction,Channel Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channel_descriptionQ_PROTO_TEAMSPEAK,channel_description,ChannelDescription,Channel Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channel_idQ_PROTO_TEAMSPEAK,channel_id,ChannelID,Channel ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channel_nameQ_PROTO_TEAMSPEAK,channel_name,ChannelName,Channel Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channel_topicQ_PROTO_TEAMSPEAK,channel_topic,ChannelTopic,Channel Topic,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,channel_userQ_PROTO_TEAMSPEAK,channel_user,ChannelUser,Channel User,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,client_platformQ_PROTO_TEAMSPEAK,client_platform,ClientPlatform,Client Platform,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,client_softwareQ_PROTO_TEAMSPEAK,client_software,ClientSoftware,Client Software,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,client_uidQ_PROTO_TEAMSPEAK,client_uid,ClientUID,Client UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,client_versionQ_PROTO_TEAMSPEAK,client_version,ClientVersion,Client Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,contact_aliasQ_PROTO_TEAMSPEAK,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,contact_uidQ_PROTO_TEAMSPEAK,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,greeting_messageQ_PROTO_TEAMSPEAK,greeting_message,GreetingMsg,Greeting Message,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,loginQ_PROTO_TEAMSPEAK,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,messageQ_PROTO_TEAMSPEAK,message,Msg,Message,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,message_scopeQ_PROTO_TEAMSPEAK,message_scope,MsgScope,Message Scope,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,nicknameQ_PROTO_TEAMSPEAK,nickname,Nickname,Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,passwordQ_PROTO_TEAMSPEAK,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,receiverQ_PROTO_TEAMSPEAK,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,receiver_uidQ_PROTO_TEAMSPEAK,receiver_uid,ReceiverUID,Receiver UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,senderQ_PROTO_TEAMSPEAK,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,sender_uidQ_PROTO_TEAMSPEAK,sender_uid,SenderUID,Sender UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,server_nameQ_PROTO_TEAMSPEAK,server_name,ServerName,Server Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,server_platformQ_PROTO_TEAMSPEAK,server_platform,ServerPlatform,Server Platform,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,server_versionQ_PROTO_TEAMSPEAK,server_version,ServerVersion,Server Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEAMSPEAK,session_idQ_PROTO_TEAMSPEAK,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TELNET,loginQ_PROTO_TELNET,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TELNET,passwordQ_PROTO_TELNET,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TELNET,rttQ_PROTO_TELNET,rtt,RTT,RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TELNET,term_typeQ_PROTO_TELNET,term_type,TermType,Term Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEREDO,auth_valueQ_PROTO_TEREDO,auth_value,AuthValue,Authentication Value,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEREDO,client_idQ_PROTO_TEREDO,client_id,ClientID,Client ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEREDO,client_ipQ_PROTO_TEREDO,client_ip,ClientIP,Client IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEREDO,origin_client_ipQ_PROTO_TEREDO,origin_client_ip,OriginClientIP,Origin Client IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TEREDO,server_ipQ_PROTO_TEREDO,server_ip,ServerIP,Server IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TFTP,filenameQ_PROTO_TFTP,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TFTP,filesizeQ_PROTO_TFTP,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TFTP,modeQ_PROTO_TFTP,mode,Mode,Mode,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TFTP,queryQ_PROTO_TFTP,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TFTP,request_filenameQ_PROTO_TFTP,request_filename,RequestFilename,Request Filename,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,baseQ_PROTO_TNS,base,Base,Base,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,client_hostnameQ_PROTO_TNS,client_hostname,ClientHostname,Client Hostname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,client_osQ_PROTO_TNS,client_os,ClientOS,Client Operating System,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,client_program_nameQ_PROTO_TNS,client_program_name,ClientProgramName,Client Program Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,client_program_pathQ_PROTO_TNS,client_program_path,ClientProgramPath,Client Program Path,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,loginQ_PROTO_TNS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,passwordQ_PROTO_TNS,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,queryQ_PROTO_TNS,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,response_sizeQ_PROTO_TNS,response_size,ResponseSize,Response Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,response_timeQ_PROTO_TNS,response_time,ResponseTime,Response Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,server_hostnameQ_PROTO_TNS,server_hostname,ServerHostname,Server Hostname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TNS,server_osQ_PROTO_TNS,server_os,ServerOS,Server Operating System,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,actionQ_PROTO_TWITTER,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,dateQ_PROTO_TWITTER,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,loginQ_PROTO_TWITTER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,media_urlQ_PROTO_TWITTER,media_url,MediaURL,Media URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,param_screen_nameQ_PROTO_TWITTER,param_screen_name,ParamScreenName,Parameter Screen Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,param_textQ_PROTO_TWITTER,param_text,ParamText,Parameter Text,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,param_user_idQ_PROTO_TWITTER,param_user_id,ParamUserID,Parameter User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,relationQ_PROTO_TWITTER,relation,Relation,Relation,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,screen_nameQ_PROTO_TWITTER,screen_name,ScreenName,Screen Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,session_idQ_PROTO_TWITTER,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,tweetQ_PROTO_TWITTER,tweet,Tweet,Tweet,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +TWITTER,user_idQ_PROTO_TWITTER,user_id,UserID,User ID,account,,Account,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +UDP,cnx_durationQ_PROTO_UDP,cnx_duration,CnxDuration,Cnx Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +UDP,start_timeQ_PROTO_UDP,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +UNKNOWN,maybe_applicationQ_PROTO_UNKNOWN,maybe_application,MaybeApplication,Maybe Application,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +UNKNOWN,maybe_application_idQ_PROTO_UNKNOWN,maybe_application_id,MaybeApplicationID,Maybe Application ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +UNKNOWN,maybe_familyQ_PROTO_UNKNOWN,maybe_family,MaybeFamily,Maybe Family,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +USTREAM,loginQ_PROTO_USTREAM,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +USTREAM,passwordQ_PROTO_USTREAM,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +USTREAM,query_rawQ_PROTO_USTREAM,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +USTREAM,query_textQ_PROTO_USTREAM,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIADEO,contact_aliasQ_PROTO_VIADEO,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIADEO,contact_emailQ_PROTO_VIADEO,contact_email,ContactEmail,Contact Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIADEO,groupeQ_PROTO_VIADEO,groupe,Groupe,Groupe,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIADEO,loginQ_PROTO_VIADEO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIADEO,passwordQ_PROTO_VIADEO,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIBER,filesizeQ_PROTO_VIBER,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIBER,serviceQ_PROTO_VIBER,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIBER,service_durationQ_PROTO_VIBER,service_duration,ServiceDuration,Service Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIBER,service_duration_tvQ_PROTO_VIBER,service_duration_tv,ServiceDurationTV,Service Duration TV,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VIBER,service_idQ_PROTO_VIBER,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,account_uidQ_PROTO_VKONTAKTE,account_uid,AcctUID,Account UID,account,,Account,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,contact_aliasQ_PROTO_VKONTAKTE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,contact_emailQ_PROTO_VKONTAKTE,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,contact_uidQ_PROTO_VKONTAKTE,contact_uid,ContactUID,Contact UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,group_nameQ_PROTO_VKONTAKTE,group_name,GroupName,Group Name,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,loginQ_PROTO_VKONTAKTE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,nameQ_PROTO_VKONTAKTE,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +VKONTAKTE,passwordQ_PROTO_VKONTAKTE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WECHAT,serviceQ_PROTO_WECHAT,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WECHAT,service_idQ_PROTO_WECHAT,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WHATSAPP,phone_numberQ_PROTO_WHATSAPP,phone_number,PhoneNum,Phone Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WHATSAPP,serviceQ_PROTO_WHATSAPP,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WHATSAPP,service_idQ_PROTO_WHATSAPP,service_id,ServiceID,Service ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WHATSAPP,versionQ_PROTO_WHATSAPP,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WIKIPEDIA,query_rawQ_PROTO_WIKIPEDIA,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WIKIPEDIA,query_textQ_PROTO_WIKIPEDIA,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINDOWS_MARKETPLACE,application_nameQ_PROTO_WINDOWS_MARKETPLACE,application_name,AppName,Application Name,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINDOWS_UPDATE,kbQ_PROTO_WINDOWS_UPDATE,kb,KB,KB,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINDOWS_UPDATE,platformQ_PROTO_WINDOWS_UPDATE,platform,Platform,Platform,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,file_chunk_data_offsetQ_PROTO_WINMX,file_chunk_data_offset,FileChunkDataOffset,File Chunk Data Offset,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,file_chunk_lenQ_PROTO_WINMX,file_chunk_len,FileChunkLen,File Chunk Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,filenameQ_PROTO_WINMX,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,filesizeQ_PROTO_WINMX,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,loadwayQ_PROTO_WINMX,loadway,Loadway,Loadway,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,loginQ_PROTO_WINMX,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WINMX,queryQ_PROTO_WINMX,query,Query,Query,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,connect_rttQ_PROTO_WSP,connect_rtt,ConnectRTT,Connect RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,indexQ_PROTO_WSP,index,Index,Index,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,index_clientQ_PROTO_WSP,index_client,IndexClient,Index Client,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,index_serverQ_PROTO_WSP,index_server,IndexServer,Index Server,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,mime_typeQ_PROTO_WSP,mime_type,MIMEType,MIMEType,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,mime_type_mainQ_PROTO_WSP,mime_type_main,MIMETypeMain,MIMEType Main,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,mime_type_subQ_PROTO_WSP,mime_type_sub,MIMETypeSub,MIMEType Sub,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,pdu_typeQ_PROTO_WSP,pdu_type,PDUType,PDU Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,profileQ_PROTO_WSP,profile,Profile,Profile,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,query_rttQ_PROTO_WSP,query_rtt,QueryRTT,Query RTT,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,request_sizeQ_PROTO_WSP,request_size,RequestSize,Request Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,serverQ_PROTO_WSP,server,Server,Server,dname,,Group,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,uriQ_PROTO_WSP,uri,URI,URI,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +WSP,user_agentQ_PROTO_WSP,user_agent,UserAgent,User Agent,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +X25,called_addrQ_PROTO_X25,called_addr,CalledAddr,Called Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +X25,calling_addrQ_PROTO_X25,calling_addr,CallingAddr,Calling Address,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +X25,pkt_typeQ_PROTO_X25,pkt_type,PktType,Packet Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +XDMCP,client_ipQ_PROTO_XDMCP,client_ip,ClientIP,Client IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +XDMCP,server_ipQ_PROTO_XDMCP,server_ip,ServerIP,Server IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +XDMCP,server_statusQ_PROTO_XDMCP,server_status,ServerStatus,Server Status,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,actionQ_PROTO_YAHOO_GROUPS,action,Action,Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,dateQ_PROTO_YAHOO_GROUPS,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,draftQ_PROTO_YAHOO_GROUPS,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,group_detailed_descriptionQ_PROTO_YAHOO_GROUPS,group_detailed_description,GroupDetailedDesc,Group Detailed Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,group_join_requestQ_PROTO_YAHOO_GROUPS,group_join_request,GroupJoinRequest,Group Join Request,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,group_membershipQ_PROTO_YAHOO_GROUPS,group_membership,GroupMembership,Group Membership,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,group_nameQ_PROTO_YAHOO_GROUPS,group_name,GroupName,Group Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,group_short_descriptionQ_PROTO_YAHOO_GROUPS,group_short_description,GroupShortDesc,Group Short Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,loginQ_PROTO_YAHOO_GROUPS,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,msg_numberQ_PROTO_YAHOO_GROUPS,msg_number,MsgNumber,Message Number,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,nameQ_PROTO_YAHOO_GROUPS,name,Name,Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,query_rawQ_PROTO_YAHOO_GROUPS,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,query_textQ_PROTO_YAHOO_GROUPS,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,replytoQ_PROTO_YAHOO_GROUPS,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,senderQ_PROTO_YAHOO_GROUPS,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,sender_aliasQ_PROTO_YAHOO_GROUPS,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,sender_emailQ_PROTO_YAHOO_GROUPS,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,sender_nicknameQ_PROTO_YAHOO_GROUPS,sender_nickname,SenderNickname,Sender Nickname,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,sender_uidQ_PROTO_YAHOO_GROUPS,sender_uid,SenderUID,Sender UID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,subjectQ_PROTO_YAHOO_GROUPS,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_GROUPS,uidQ_PROTO_YAHOO_GROUPS,uid,UID,User ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_MAPS,cityQ_PROTO_YAHOO_MAPS,city,City,City,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_MAPS,countryQ_PROTO_YAHOO_MAPS,country,Country,Country,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_MAPS,latitudeQ_PROTO_YAHOO_MAPS,latitude,Latitude,Latitude,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_MAPS,longitudeQ_PROTO_YAHOO_MAPS,longitude,Longitude,Longitude,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_MAPS,query_textQ_PROTO_YAHOO_MAPS,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_MAPS,streetQ_PROTO_YAHOO_MAPS,street,Street,Street,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_SEARCH,encodingQ_PROTO_YAHOO_SEARCH,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_SEARCH,query_rawQ_PROTO_YAHOO_SEARCH,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_SEARCH,query_textQ_PROTO_YAHOO_SEARCH,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YAHOO_SEARCH,query_typeQ_PROTO_YAHOO_SEARCH,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX,loginQ_PROTO_YANDEX,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX,passwordQ_PROTO_YANDEX,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX,query_rawQ_PROTO_YANDEX,query_raw,QueryRaw,Query Raw,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX,query_textQ_PROTO_YANDEX,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX,query_typeQ_PROTO_YANDEX,query_type,QueryType,Query Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,actionQ_PROTO_YANDEX_WEBMAIL,action,Action,Action,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,attach_idQ_PROTO_YANDEX_WEBMAIL,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,attach_sizeQ_PROTO_YANDEX_WEBMAIL,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,attach_typeQ_PROTO_YANDEX_WEBMAIL,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,contactQ_PROTO_YANDEX_WEBMAIL,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,contact_aliasQ_PROTO_YANDEX_WEBMAIL,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,contact_emailQ_PROTO_YANDEX_WEBMAIL,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,dateQ_PROTO_YANDEX_WEBMAIL,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,draftQ_PROTO_YANDEX_WEBMAIL,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,attach_filenameQ_PROTO_YANDEX_WEBMAIL,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,folderlist_item_idQ_PROTO_YANDEX_WEBMAIL,folderlist_item_id,FolderListItemID,Folder List Item ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,folderlist_item_nameQ_PROTO_YANDEX_WEBMAIL,folderlist_item_name,FolderListItemName,Folder List Item Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,importanceQ_PROTO_YANDEX_WEBMAIL,importance,Importance,Importance,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,loginQ_PROTO_YANDEX_WEBMAIL,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msg_idQ_PROTO_YANDEX_WEBMAIL,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_attachQ_PROTO_YANDEX_WEBMAIL,msglist_attach,MsgListAttach,Message List Attach,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_dateQ_PROTO_YANDEX_WEBMAIL,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_folderQ_PROTO_YANDEX_WEBMAIL,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_msgidQ_PROTO_YANDEX_WEBMAIL,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_receiverQ_PROTO_YANDEX_WEBMAIL,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_receiver_aliasQ_PROTO_YANDEX_WEBMAIL,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_receiver_emailQ_PROTO_YANDEX_WEBMAIL,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_senderQ_PROTO_YANDEX_WEBMAIL,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_sender_aliasQ_PROTO_YANDEX_WEBMAIL,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_sender_emailQ_PROTO_YANDEX_WEBMAIL,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_subjectQ_PROTO_YANDEX_WEBMAIL,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,msglist_unreadQ_PROTO_YANDEX_WEBMAIL,msglist_unread,MsgListUnread,Message List Unread,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,receiverQ_PROTO_YANDEX_WEBMAIL,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,receiver_aliasQ_PROTO_YANDEX_WEBMAIL,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,receiver_emailQ_PROTO_YANDEX_WEBMAIL,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,receiver_typeQ_PROTO_YANDEX_WEBMAIL,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,senderQ_PROTO_YANDEX_WEBMAIL,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,sender_aliasQ_PROTO_YANDEX_WEBMAIL,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,sender_emailQ_PROTO_YANDEX_WEBMAIL,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YANDEX_WEBMAIL,subjectQ_PROTO_YANDEX_WEBMAIL,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,actionQ_PROTO_YMAIL_CLASSIC,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,attach_fileidQ_PROTO_YMAIL_CLASSIC,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,attach_idQ_PROTO_YMAIL_CLASSIC,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,attach_sizeQ_PROTO_YMAIL_CLASSIC,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,attach_typeQ_PROTO_YMAIL_CLASSIC,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,contactQ_PROTO_YMAIL_CLASSIC,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,contact_aliasQ_PROTO_YMAIL_CLASSIC,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,contact_emailQ_PROTO_YMAIL_CLASSIC,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,contact_firstnameQ_PROTO_YMAIL_CLASSIC,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,contact_lastnameQ_PROTO_YMAIL_CLASSIC,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,contact_nameQ_PROTO_YMAIL_CLASSIC,contact_name,ContactName,Contact Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,dateQ_PROTO_YMAIL_CLASSIC,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,draftQ_PROTO_YMAIL_CLASSIC,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,encodingQ_PROTO_YMAIL_CLASSIC,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,attach_filenameQ_PROTO_YMAIL_CLASSIC,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,folderQ_PROTO_YMAIL_CLASSIC,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,loginQ_PROTO_YMAIL_CLASSIC,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msg_idQ_PROTO_YMAIL_CLASSIC,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_dateQ_PROTO_YMAIL_CLASSIC,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_folderQ_PROTO_YMAIL_CLASSIC,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_msgidQ_PROTO_YMAIL_CLASSIC,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_receiverQ_PROTO_YMAIL_CLASSIC,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_receiver_aliasQ_PROTO_YMAIL_CLASSIC,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_receiver_emailQ_PROTO_YMAIL_CLASSIC,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_senderQ_PROTO_YMAIL_CLASSIC,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_sender_aliasQ_PROTO_YMAIL_CLASSIC,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_sender_emailQ_PROTO_YMAIL_CLASSIC,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_sizeQ_PROTO_YMAIL_CLASSIC,msglist_size,MsgListSize,Message List Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,msglist_subjectQ_PROTO_YMAIL_CLASSIC,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,receiverQ_PROTO_YMAIL_CLASSIC,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,receiver_aliasQ_PROTO_YMAIL_CLASSIC,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,receiver_emailQ_PROTO_YMAIL_CLASSIC,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,receiver_typeQ_PROTO_YMAIL_CLASSIC,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,replytoQ_PROTO_YMAIL_CLASSIC,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,senderQ_PROTO_YMAIL_CLASSIC,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,sender_aliasQ_PROTO_YMAIL_CLASSIC,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,sender_emailQ_PROTO_YMAIL_CLASSIC,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,session_idQ_PROTO_YMAIL_CLASSIC,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_CLASSIC,subjectQ_PROTO_YMAIL_CLASSIC,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,actionQ_PROTO_YMAIL_MOBILE,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,attach_idQ_PROTO_YMAIL_MOBILE,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,attach_typeQ_PROTO_YMAIL_MOBILE,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,contactQ_PROTO_YMAIL_MOBILE,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,contact_aliasQ_PROTO_YMAIL_MOBILE,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,contact_emailQ_PROTO_YMAIL_MOBILE,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,dateQ_PROTO_YMAIL_MOBILE,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,draftQ_PROTO_YMAIL_MOBILE,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,attach_filenameQ_PROTO_YMAIL_MOBILE,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,folderQ_PROTO_YMAIL_MOBILE,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,loginQ_PROTO_YMAIL_MOBILE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msg_idQ_PROTO_YMAIL_MOBILE,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msglist_msgidQ_PROTO_YMAIL_MOBILE,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msglist_receiverQ_PROTO_YMAIL_MOBILE,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msglist_receiver_aliasQ_PROTO_YMAIL_MOBILE,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msglist_senderQ_PROTO_YMAIL_MOBILE,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msglist_sender_aliasQ_PROTO_YMAIL_MOBILE,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,msglist_subjectQ_PROTO_YMAIL_MOBILE,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,passwordQ_PROTO_YMAIL_MOBILE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,receiverQ_PROTO_YMAIL_MOBILE,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,receiver_aliasQ_PROTO_YMAIL_MOBILE,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,receiver_emailQ_PROTO_YMAIL_MOBILE,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,receiver_typeQ_PROTO_YMAIL_MOBILE,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,senderQ_PROTO_YMAIL_MOBILE,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,sender_aliasQ_PROTO_YMAIL_MOBILE,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,sender_emailQ_PROTO_YMAIL_MOBILE,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,session_idQ_PROTO_YMAIL_MOBILE,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE,subjectQ_PROTO_YMAIL_MOBILE,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,actionQ_PROTO_YMAIL_MOBILE_NEW,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,attach_idQ_PROTO_YMAIL_MOBILE_NEW,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,attach_sizeQ_PROTO_YMAIL_MOBILE_NEW,attach_size,AttachSize,Attach Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,attach_typeQ_PROTO_YMAIL_MOBILE_NEW,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,contactQ_PROTO_YMAIL_MOBILE_NEW,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,contact_aliasQ_PROTO_YMAIL_MOBILE_NEW,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,contact_emailQ_PROTO_YMAIL_MOBILE_NEW,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,dateQ_PROTO_YMAIL_MOBILE_NEW,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,draftQ_PROTO_YMAIL_MOBILE_NEW,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,attach_filenameQ_PROTO_YMAIL_MOBILE_NEW,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,folderQ_PROTO_YMAIL_MOBILE_NEW,folder,Folder,Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,loginQ_PROTO_YMAIL_MOBILE_NEW,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msg_idQ_PROTO_YMAIL_MOBILE_NEW,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_contentQ_PROTO_YMAIL_MOBILE_NEW,msglist_content,MsgListContent,Message List Content,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_dateQ_PROTO_YMAIL_MOBILE_NEW,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_folderQ_PROTO_YMAIL_MOBILE_NEW,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_msgidQ_PROTO_YMAIL_MOBILE_NEW,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_receiverQ_PROTO_YMAIL_MOBILE_NEW,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_receiver_aliasQ_PROTO_YMAIL_MOBILE_NEW,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_senderQ_PROTO_YMAIL_MOBILE_NEW,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_sender_aliasQ_PROTO_YMAIL_MOBILE_NEW,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,msglist_subjectQ_PROTO_YMAIL_MOBILE_NEW,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,passwordQ_PROTO_YMAIL_MOBILE_NEW,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,receiverQ_PROTO_YMAIL_MOBILE_NEW,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,receiver_aliasQ_PROTO_YMAIL_MOBILE_NEW,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,receiver_emailQ_PROTO_YMAIL_MOBILE_NEW,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,receiver_typeQ_PROTO_YMAIL_MOBILE_NEW,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,senderQ_PROTO_YMAIL_MOBILE_NEW,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,sender_aliasQ_PROTO_YMAIL_MOBILE_NEW,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,sender_emailQ_PROTO_YMAIL_MOBILE_NEW,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,session_idQ_PROTO_YMAIL_MOBILE_NEW,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL_MOBILE_NEW,subjectQ_PROTO_YMAIL_MOBILE_NEW,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,actionQ_PROTO_YMAIL2,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,attach_fileidQ_PROTO_YMAIL2,attach_fileid,AttachFileID,Attach File ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,attach_idQ_PROTO_YMAIL2,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,attach_sizeQ_PROTO_YMAIL2,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,attach_typeQ_PROTO_YMAIL2,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,contact_emailQ_PROTO_YMAIL2,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,contact_firstnameQ_PROTO_YMAIL2,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,contact_lastnameQ_PROTO_YMAIL2,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,dateQ_PROTO_YMAIL2,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,draftQ_PROTO_YMAIL2,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,attach_filenameQ_PROTO_YMAIL2,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,loginQ_PROTO_YMAIL2,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msg_idQ_PROTO_YMAIL2,msg_id,MsgID,Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_dateQ_PROTO_YMAIL2,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_folderQ_PROTO_YMAIL2,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_msgidQ_PROTO_YMAIL2,msglist_msgid,MsgListMsgID,Message List Message ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_receiver_emailQ_PROTO_YMAIL2,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_senderQ_PROTO_YMAIL2,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_sender_aliasQ_PROTO_YMAIL2,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_sender_emailQ_PROTO_YMAIL2,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_sizeQ_PROTO_YMAIL2,msglist_size,MsgListSize,Message List Size,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,msglist_subjectQ_PROTO_YMAIL2,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,nameQ_PROTO_YMAIL2,name,Name,Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,receiverQ_PROTO_YMAIL2,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,receiver_aliasQ_PROTO_YMAIL2,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,receiver_emailQ_PROTO_YMAIL2,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,receiver_typeQ_PROTO_YMAIL2,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,replytoQ_PROTO_YMAIL2,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,senderQ_PROTO_YMAIL2,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,sender_aliasQ_PROTO_YMAIL2,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,sender_emailQ_PROTO_YMAIL2,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,session_idQ_PROTO_YMAIL2,session_id,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMAIL2,subjectQ_PROTO_YMAIL2,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,call_durationQ_PROTO_YMSG,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,calleeQ_PROTO_YMSG,callee,Callee,Callee,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,callerQ_PROTO_YMSG,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,channelQ_PROTO_YMSG,channel,Channel,Channel,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,channel_actionQ_PROTO_YMSG,channel_action,ChannelAction,Channel Action,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,channel_nameQ_PROTO_YMSG,channel_name,ChannelName,Channel Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,channel_userQ_PROTO_YMSG,channel_user,ChannelUser,Channel User,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,chat_idQ_PROTO_YMSG,chat_id,ChatID,Chat ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,client_countryQ_PROTO_YMSG,client_country,ClientCountry,Client Country,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,client_firstnameQ_PROTO_YMSG,client_firstname,ClientFirstName,Client First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,client_ipQ_PROTO_YMSG,client_ip,ClientIP,Client IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,client_lastnameQ_PROTO_YMSG,client_lastname,ClientLastName,Client Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,client_local_ipQ_PROTO_YMSG,client_local_ip,ClientLocalIP,Client Local IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,client_versionQ_PROTO_YMSG,client_version,ClientVersion,Client Version,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,contact_loginQ_PROTO_YMSG,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,encodingQ_PROTO_YMSG,encoding,Encoding,Encoding,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,filehashQ_PROTO_YMSG,filehash,FileHash,File Hash,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,filenameQ_PROTO_YMSG,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,file_receiverQ_PROTO_YMSG,file_receiver,FileReceiver,File Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,file_senderQ_PROTO_YMSG,file_sender,FileSender,File Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,filesizeQ_PROTO_YMSG,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,file_urlQ_PROTO_YMSG,file_url,FileURL,File URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,loginQ_PROTO_YMSG,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,messageQ_PROTO_YMSG,message,Msg,Message,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,message_lenQ_PROTO_YMSG,message_len,MsgLen,Message Length,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,receiverQ_PROTO_YMSG,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,senderQ_PROTO_YMSG,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,server_ipQ_PROTO_YMSG,server_ip,ServerIP,Server IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,serviceQ_PROTO_YMSG,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,sessionidQ_PROTO_YMSG,sessionid,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,timestampQ_PROTO_YMSG,timestamp,Timestamp,Timestamp,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,transfer_idQ_PROTO_YMSG,transfer_id,TransferID,Transfer ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,versionQ_PROTO_YMSG,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG,webcam_brandQ_PROTO_YMSG,webcam_brand,WebcamBrand,Webcam Brand,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_CONF,call_durationQ_PROTO_YMSG_CONF,call_duration,CallDuration,Call Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_CONF,callerQ_PROTO_YMSG_CONF,caller,Caller,Caller,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_CONF,loginQ_PROTO_YMSG_CONF,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,client_ipQ_PROTO_YMSG_TRANSFER,client_ip,ClientIP,Client IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,filehashQ_PROTO_YMSG_TRANSFER,filehash,FileHash,File Hash,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,file_identifierQ_PROTO_YMSG_TRANSFER,file_identifier,FileIdentifier,File Identifier,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,filenameQ_PROTO_YMSG_TRANSFER,filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,file_receiverQ_PROTO_YMSG_TRANSFER,file_receiver,FileReceiver,File Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,file_senderQ_PROTO_YMSG_TRANSFER,file_sender,FileSender,File Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,filesizeQ_PROTO_YMSG_TRANSFER,filesize,FileSize,File Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,file_urlQ_PROTO_YMSG_TRANSFER,file_url,FileURL,File URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,loginQ_PROTO_YMSG_TRANSFER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_TRANSFER,server_ipQ_PROTO_YMSG_TRANSFER,server_ip,ServerIP,Server IP,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_VIDEO,loginQ_PROTO_YMSG_VIDEO,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_VIDEO,webcam_brandQ_PROTO_YMSG_VIDEO,webcam_brand,WebcamBrand,Webcam Brand,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,contact_firstnameQ_PROTO_YMSG_WEBMESSENGER,contact_firstname,ContactFirstName,Contact First Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,contact_lastnameQ_PROTO_YMSG_WEBMESSENGER,contact_lastname,ContactLastName,Contact Last Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,contact_loginQ_PROTO_YMSG_WEBMESSENGER,contact_login,ContactLogin,Contact Login,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,contact_nameQ_PROTO_YMSG_WEBMESSENGER,contact_name,ContactName,Contact Name,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,loginQ_PROTO_YMSG_WEBMESSENGER,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,messageQ_PROTO_YMSG_WEBMESSENGER,message,Msg,Message,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,msg_codeQ_PROTO_YMSG_WEBMESSENGER,msg_code,MsgCode,Message Code,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,receiverQ_PROTO_YMSG_WEBMESSENGER,receiver,Receiver,Receiver,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,senderQ_PROTO_YMSG_WEBMESSENGER,sender,Sender,Sender,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,serviceQ_PROTO_YMSG_WEBMESSENGER,service,Service,Service,process,,Process,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,sessionidQ_PROTO_YMSG_WEBMESSENGER,sessionid,SessionID,Session ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YMSG_WEBMESSENGER,versionQ_PROTO_YMSG_WEBMESSENGER,version,Version,Version,version,,Version,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,audio_datarateQ_PROTO_YOUTUBE,audio_datarate,AuditDataRate,Audio Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,dateQ_PROTO_YOUTUBE,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,descriptionQ_PROTO_YOUTUBE,description,Description,Description,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,loginQ_PROTO_YOUTUBE,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,methodQ_PROTO_YOUTUBE,method,Method,Method,command,,Command,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,nameQ_PROTO_YOUTUBE,name,Name,Name,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,nameviewerQ_PROTO_YOUTUBE,nameviewer,NameViewer,Name Viewer,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,passwordQ_PROTO_YOUTUBE,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,query_rawQ_PROTO_YOUTUBE,query_raw,QueryRaw,Query Raw,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,query_textQ_PROTO_YOUTUBE,query_text,QueryText,Query Text,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,start_timeQ_PROTO_YOUTUBE,start_time,StartTime,Start Time,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,tagsQ_PROTO_YOUTUBE,tags,Tags,Tags,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,titleQ_PROTO_YOUTUBE,title,Title,Title,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,total_datarateQ_PROTO_YOUTUBE,total_datarate,TotalDataRate,Total Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,urlQ_PROTO_YOUTUBE,url,URL,URL,url,,URL,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,video_datarateQ_PROTO_YOUTUBE,video_datarate,VidDataRate,Video Data Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,video_durationQ_PROTO_YOUTUBE,video_duration,VidDuration,Video Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,video_framerateQ_PROTO_YOUTUBE,video_framerate,VidFrameRate,Video Frame Rate,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,video_heightQ_PROTO_YOUTUBE,video_height,VidHeight,Video Height,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,videoidQ_PROTO_YOUTUBE,videoid,VidID,Video ID,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,video_totaldurationQ_PROTO_YOUTUBE,video_totalduration,VidTotalDuration,Video Total Duration,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +YOUTUBE,video_widthQ_PROTO_YOUTUBE,video_width,VidWidth,Video Width,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,actionQ_PROTO_ZIMBRA,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,attach_idQ_PROTO_ZIMBRA,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,attach_sizeQ_PROTO_ZIMBRA,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,attach_typeQ_PROTO_ZIMBRA,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,contact_aliasQ_PROTO_ZIMBRA,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,contact_emailQ_PROTO_ZIMBRA,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,dateQ_PROTO_ZIMBRA,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,draftQ_PROTO_ZIMBRA,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,attach_filenameQ_PROTO_ZIMBRA,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,loginQ_PROTO_ZIMBRA,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msg_idQ_PROTO_ZIMBRA,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_dateQ_PROTO_ZIMBRA,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_folderQ_PROTO_ZIMBRA,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_receiverQ_PROTO_ZIMBRA,msglist_receiver,MsgListReceiver,Message List Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_receiver_aliasQ_PROTO_ZIMBRA,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_receiver_emailQ_PROTO_ZIMBRA,msglist_receiver_email,MsgListReceiverEmail,Message List Receiver Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_senderQ_PROTO_ZIMBRA,msglist_sender,MsgListSender,Message List Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_sender_aliasQ_PROTO_ZIMBRA,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_sender_emailQ_PROTO_ZIMBRA,msglist_sender_email,MsgListSenderEmail,Message List Sender Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,msglist_subjectQ_PROTO_ZIMBRA,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,passwordQ_PROTO_ZIMBRA,password,Passwd,Password,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,receiverQ_PROTO_ZIMBRA,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,receiver_aliasQ_PROTO_ZIMBRA,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,receiver_emailQ_PROTO_ZIMBRA,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,receiver_typeQ_PROTO_ZIMBRA,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,senderQ_PROTO_ZIMBRA,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,sender_aliasQ_PROTO_ZIMBRA,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,sender_emailQ_PROTO_ZIMBRA,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA,subjectQ_PROTO_ZIMBRA,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,actionQ_PROTO_ZIMBRA_STANDARD,action,Action,Action,object,,Object,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,attach_idQ_PROTO_ZIMBRA_STANDARD,attach_id,AttachID,Attach ID,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,attach_sizeQ_PROTO_ZIMBRA_STANDARD,attach_size,AttachSize,Attach Size,size,,Size,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,attach_typeQ_PROTO_ZIMBRA_STANDARD,attach_type,AttachType,Attach Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,contactQ_PROTO_ZIMBRA_STANDARD,contact,Contact,Contact,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,contact_aliasQ_PROTO_ZIMBRA_STANDARD,contact_alias,ContactAlias,Contact Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,contact_emailQ_PROTO_ZIMBRA_STANDARD,contact_email,ContactEmail,Contact Email,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,dateQ_PROTO_ZIMBRA_STANDARD,date,Date,Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,draftQ_PROTO_ZIMBRA_STANDARD,draft,Draft,Draft,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,attach_filenameQ_PROTO_ZIMBRA_STANDARD,attach_filename,Filename,Filename,objectname,,Object Name,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,loginQ_PROTO_ZIMBRA_STANDARD,login,Login,Login,login,,Login,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,msg_idQ_PROTO_ZIMBRA_STANDARD,msg_id,MsgID,Message ID,processid,,Process ID,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,msglist_dateQ_PROTO_ZIMBRA_STANDARD,msglist_date,MsgListDate,Message List Date,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,msglist_folderQ_PROTO_ZIMBRA_STANDARD,msglist_folder,MsgListFolder,Message List Folder,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,msglist_receiver_aliasQ_PROTO_ZIMBRA_STANDARD,msglist_receiver_alias,MsgListReceiverAlias,Message List Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,msglist_sender_aliasQ_PROTO_ZIMBRA_STANDARD,msglist_sender_alias,MsgListSenderAlias,Message List Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,msglist_subjectQ_PROTO_ZIMBRA_STANDARD,msglist_subject,MsgListSubject,Message List Subject,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,receiverQ_PROTO_ZIMBRA_STANDARD,receiver,Receiver,Receiver,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,receiver_aliasQ_PROTO_ZIMBRA_STANDARD,receiver_alias,ReceiverAlias,Receiver Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,receiver_emailQ_PROTO_ZIMBRA_STANDARD,receiver_email,ReceiverEmail,Receiver Email,recipient,,Recipient,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,receiver_typeQ_PROTO_ZIMBRA_STANDARD,receiver_type,ReceiverType,Receiver Type,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,replytoQ_PROTO_ZIMBRA_STANDARD,replyto,ReplyTo,Reply To,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,senderQ_PROTO_ZIMBRA_STANDARD,sender,Sender,Sender,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,sender_aliasQ_PROTO_ZIMBRA_STANDARD,sender_alias,SenderAlias,Sender Alias,,,,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,sender_emailQ_PROTO_ZIMBRA_STANDARD,sender_email,SenderEmail,Sender Email,sender,,Sender,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +ZIMBRA_STANDARD,subjectQ_PROTO_ZIMBRA_STANDARD,subject,Subject,Subject,subject,,Subject,,1st Review,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, diff --git a/resources/ProtocolDescriptions.csv b/resources/ProtocolDescriptions.csv index ef24bbb3066ff..ce878e810aaf5 100644 --- a/resources/ProtocolDescriptions.csv +++ b/resources/ProtocolDescriptions.csv @@ -6,35 +6,35 @@ base,base,#parent_user_handle,User data associated to one parent session. base,base,#data,"Contains packet data base,base,#classification_match,This attribute compares the classification states of both half-sessions. base,base,#statemachine_anomaly,We check if we are in a final node when we cleanup the statemachine. -3gpp_li,3gpp_li,#hi3_domain_id,3gpp_li HI3 Domain -3gpp_li,3gpp_li,#correlation_number,GPRS correlation number -3gpp_li,3gpp_li,#national_params,National parameters (other than country) in ASN.1 format -adc,adc,#file_chunk_content,Content of the transferred data. -aim,AOL Instant Messenger (OSCAR protocol),#inherit_key,"Candidate inheritance key -aim,AOL Instant Messenger (OSCAR protocol),#inherit_parent,"Parent inheritance key -aim,AOL Instant Messenger (OSCAR protocol),#icon_data,Binary data containing a contact's icon. -aim_transfer,AIM Transfer Protocol,#inherit_key,"Candidate inheritance key -aim_transfer,AIM Transfer Protocol,#content,File content -arp,Adress Resolution Protocol,#src_hard,Source MAC address. -arp,Adress Resolution Protocol,#src_proto,Source IP address. -arp,Adress Resolution Protocol,#dst_hard,Destination MAC address. -arp,Adress Resolution Protocol,#dst_proto,Destination IP address. -badongo,Badongo,#content,Message content. -base,TD virtual protocol,#packet,Packet data. -base,TD virtual protocol,#packet_ip,Packet data from first IP layer. -base,TD virtual protocol,#sys_pkt_header,A binary buffer container data inserted in the head of the real packet -base,TD virtual protocol,#sys_pkt_footer,A binary buffer container data inserted in the tail of the real packet +3gpp_li,3GPP LI,#hi3_domain_id,3gpp_li HI3 Domain +3gpp_li,3GPP LI,#correlation_number,GPRS correlation number +3gpp_li,3GPP LI,#national_params,National parameters (other than country) in ASN.1 format +adc,Advanced Direct Connect,#file_chunk_content,Content of the transferred data. +aim,AOL Instant Messenger (formerly OSCAR),#inherit_key,"Candidate inheritance key +aim,AOL Instant Messenger (formerly OSCAR),#inherit_parent,"Parent inheritance key +aim,AOL Instant Messenger (formerly OSCAR),#icon_data,Binary data containing a contact's icon. +aim_transfer,AIM Transfer,#inherit_key,"Candidate inheritance key +aim_transfer,AIM Transfer,#content,File content +arp,Address Resolution Protocol,#src_hard,Source MAC address. +arp,Address Resolution Protocol,#src_proto,Source IP address. +arp,Address Resolution Protocol,#dst_hard,Destination MAC address. +arp,Address Resolution Protocol,#dst_proto,Destination IP address. +badongo,Badongo.com,#content,Message content. +base,Base virtual protocol,#packet,Packet data. +base,Base virtual protocol,#packet_ip,Packet data from first IP layer. +base,Base virtual protocol,#sys_pkt_header,A binary buffer container data inserted in the head of the real packet +base,Base virtual protocol,#sys_pkt_footer,A binary buffer container data inserted in the tail of the real packet bgp,Border Gateway Protocol,#error_notification_data,Raw error data notification. bgp,Border Gateway Protocol,#path_attr_value,Content of the attribute bgp,Border Gateway Protocol,#auth_message,The content of the authentication -bittorrent,Bittorrent Protocol,#file_hash,Hash of the transferred file. -bittorrent,Bittorrent Protocol,#file_hash_raw,Content whose SHA1 hash is the file_hash ('info' section of the torrent file). -bittorrent,Bittorrent Protocol,#peer_id,Unique ID containing information about the software and the version used. -bittorrent,Bittorrent Protocol,#file_chunk_content,Content of the transferred data. +bittorrent,BitTorrent,#file_hash,Hash of the transferred file. +bittorrent,BitTorrent,#file_hash_raw,Content whose SHA1 hash is the file_hash ('info' section of the torrent file). +bittorrent,BitTorrent,#peer_id,Unique ID containing information about the software and the version used. +bittorrent,BitTorrent,#file_chunk_content,Content of the transferred data. cdp,Cisco Discovery Protocol,#native_vlan,The assumed VLAN for untagged packets on the interface which sent the CDP packet. cdp,Cisco Discovery Protocol,#duplex,Duplex configuration of the interface which sent the CDP message. -chap,PPP Challenge Handshake Authentication Protocol,#challenge,Challenge sent by the peer initiating the authentication process. -chap,PPP Challenge Handshake Authentication Protocol,#response,Response to the challenge. +chap,Challenge Handshake Authentication Protocol,#challenge,Challenge sent by the peer initiating the authentication process. +chap,Challenge Handshake Authentication Protocol,#response,Response to the challenge. dhcp,Dynamic Host Configuration Protocol,#inherit_parent,"Parent inheritance key dhcp,Dynamic Host Configuration Protocol,#option_value,Content or value of the option dimp,Dynamic Internet Messaging Program,#attach_content,Attached files' content. @@ -46,12 +46,12 @@ facebook_mail,facebook mail,#attach_content,Attached files' content. ftp,File Transfer Protocol,#inherit_parent,"Parent inheritance key ftp_data,File Transfer Protocol Data,#inherit_key,"Candidate inheritance key ftp_data,File Transfer Protocol Data,#content,File content -giop,General Inter-ORB Protocol (Corba),#object_key,Identifies the object should receive the message. +giop,General Inter-ORB Protocol,#object_key,Identifies the object should receive the message. gmail,Google Mail,#attach_content,Attached files' content. gmail_basic,Gmail basic,#attach_content,Attached files' content. gmail_chat,Google Chat,#inherit_parent,"Parent inheritance key -gmail_mobile,Gmail mobile version,#attach_content,Attached files' content. -gmx,gmx,#attach_content,Attached files' content. +gmail_mobile,Gmail Mobile,#attach_content,Attached files' content. +gmx,GMX webmail,#attach_content,Attached files' content. gnutella,gnutella,#file_chunk_content,Content of the transferred data. gtp,GPRS Tunneling Protocol,#inherit_key,"Candidate inheritance key gtp,GPRS Tunneling Protocol,#inherit_parent,"Parent inheritance key @@ -64,7 +64,7 @@ gtpv2,GPRS Tunneling Protocol version 2,#guti,Globally Unique Temporary UE Ident h225,H225,#inherit_parent,"Parent inheritance key h245,H245,#inherit_key,"Candidate inheritance key h245,H245,#inherit_parent,"Parent inheritance key -hi5,Hi5,#uid,Generic user ID. +hi5,Hi5.com,#uid,Generic user ID. http,HyperText Transfer Protocol,#content,Message content. http,HyperText Transfer Protocol,#content_raw,uncompressed HTTP content. http,HyperText Transfer Protocol,#part_content,Uploaded data. @@ -123,10 +123,10 @@ mapi,MS Exchange Message API,#msglist_receiver_email,Email address of the email mapi,MS Exchange Message API,#appointment_location,Appointment location. mapi,MS Exchange Message API,#contact_email,Email address of a contact (UTF-16). mapi,MS Exchange Message API,#contact_alias,Alias of a contact (UTF-16). -mashare,mashare,#content,Message content. +mashare,Ma-Share.com,#content,Message content. mgcp,Media Gateway Control Protocol,#inherit_parent,"Parent inheritance key -mmse,MMS Encapsulation,#content,The message content (headers are not included). -mmse,MMS Encapsulation,#content_part_data,Message sub-part data. +mmse,MultiMedia Messages Encapsulation,#content,The message content (headers are not included). +mmse,MultiMedia Messages Encapsulation,#content_part_data,Message sub-part data. msn,MSN Messenger,#inherit_key,"Candidate inheritance key msn,MSN Messenger,#inherit_parent,"Parent inheritance key msn,MSN Messenger,#filename_utf16,UTF-16 encoded filename. @@ -136,18 +136,18 @@ nfs,Network File System,#file_handle,Unique identifier for a file. nfs,Network File System,#content,File content orangemail,Orange webmail,#attach_content,Attached files' content. ospf,Open Shortest Path First,#auth_data,Authentication data. -owa,Outlook Web Access,#attach_content,Attached files' content. -paltalk,PalTalk Protocol,#inherit_parent,"Parent inheritance key -paltalk,PalTalk Protocol,#inherit_key,"Candidate inheritance key +owa,Outlook Web App,#attach_content,Attached files' content. +paltalk,PalTalk,#inherit_parent,"Parent inheritance key +paltalk,PalTalk,#inherit_key,"Candidate inheritance key paltalk_audio,Paltalk audio chat,#inherit_key,"Candidate inheritance key paltalk_transfer,PalTalk Transfer Protocol,#inherit_key,"Candidate inheritance key paltalk_transfer,PalTalk Transfer Protocol,#content,File content paltalk_video,Paltalk video,#inherit_key,"Candidate inheritance key -pop3,Post Office Protocol,#content_entry,"Parent entry -pop3,Post Office Protocol,#attach_content,Attached files' content. -pop3,Post Office Protocol,#attach_content_decoded,Decoded attached files' content. +pop3,Post Office Protocol (Version 3),#content_entry,"Parent entry +pop3,Post Office Protocol (Version 3),#attach_content,Attached files' content. +pop3,Post Office Protocol (Version 3),#attach_content_decoded,Decoded attached files' content. qq,QQ,#call_data,QQ payload containing the data of the call (audio/video) -qq_transfer,QQ transfer Protocol,#content,File content +qq_transfer,QQ File Transfer,#content,File content radius,Remote Authentication Dial-In User Service,#inherit_parent,"Parent inheritance key radius,Remote Authentication Dial-In User Service,#avp_prefix,Ipv6 prefix is a sequence of 0 to 16 bytes. (CLEP_DATA_BUFFER) rambler_webmail,Rambler webmail,#attach_content,Attached files' content. @@ -162,18 +162,19 @@ rtp,Real Time Protocol,#payload_data,A binary buffer containing the RTP data (wi rtsp,Real Time Streaming Protocol,#inherit_parent,"Parent inheritance key rtsp,Real Time Streaming Protocol,#urimd5,md5 of the uri. rtsp,Real Time Streaming Protocol,#content,Contains the data in a HTTP response. -s1ap,S1 Application Protocol (S1AP),#ep_value_raw,Elementary Procedure raw value. -s1ap,S1 Application Protocol (S1AP),#ep_ie_value_raw,Information Element raw value. +s1ap,S1 Application Protocol,#ep_value_raw,Elementary Procedure raw value. +s1ap,S1 Application Protocol,#ep_ie_value_raw,Information Element raw value. sccp,Skinny Client Control Protocol,#inherit_parent,"Parent inheritance key -secondlife,Second Life,#login_id,Id of virtual character. -secondlife,Second Life,#sender,Sender Id. -secondlife,Second Life,#source_id,Source Id. -secondlife,Second Life,#session_id,Uniquely identifies the current user session. +secondlife,SecondLife.com,#login_id,Id of virtual character. +secondlife,SecondLife.com,#sender,Sender Id. +secondlife,SecondLife.com,#source_id,Source Id. +secondlife,SecondLife.com,#session_id,Uniquely identifies the current user session. sip,Session Initiation Protocol,#inherit_key,"Candidate inheritance key sip,Session Initiation Protocol,#inherit_parent,"Parent inheritance key sip,Session Initiation Protocol,#from_tag,A globally unique id of the caller. sip,Session Initiation Protocol,#to_tag,A globally unique id of the callee. slsk,SoulSeek,#file_chunk_content,Content of the transferred data. +smb,Server Message Block (Windows File Server),#service_data,Data associated with the resource that the client intends to access. smb,Server Message Block (Windows File Server),#content,File content smb,Server Message Block (Windows File Server),#security_blob,Data contained in the security blob. smpp,Short message peer-to-peer protocol,#content,Content of the Short Message. @@ -187,10 +188,10 @@ ssl,Secure Socket Layer,#session_id,Uniquely identifies the current user session ssl,Secure Socket Layer,#certificate_raw,Raw text content of the ssl certificate. ssl,Secure Socket Layer,#certif_md5,md5 of the certificate. ssl,Secure Socket Layer,#serial_number,Serial number of certificate. -t38,Group 3 facsimile communication over IP,#inherit_key,"Candidate inheritance key -t38,Group 3 facsimile communication over IP,#ifp_data,IFP packet buffer -t38,Group 3 facsimile communication over IP,#field_data,Fax data carried in the IFP packets -t38,Group 3 facsimile communication over IP,#fax_message_data,Fax signaling messages carried in the (reassembled) IFP packets +t38,T.38,#inherit_key,"Candidate inheritance key +t38,T.38,#ifp_data,IFP packet buffer +t38,T.38,#field_data,Fax data carried in the IFP packets +t38,T.38,#fax_message_data,Fax signaling messages carried in the (reassembled) IFP packets tcp,Transmission Control Protocol,#stream,Private attribute of the classification engine. tds,Tabular Data Stream,#rpc_proc_name,RPC TDS packet distant procedure name. tds,Tabular Data Stream,#rpc_parameter_name,RPC parameter name. @@ -198,22 +199,21 @@ tds,Tabular Data Stream,#rpc_parameter_type,RPC parameter type. tds,Tabular Data Stream,#rpc_parameter_value,RPC parameter value. tftp,Trivial File Transfer Protocol,#content,File content udp,User Datagram Protocol,#stream,Private attribute of the classification engine. -unknown,Unknown,#session_buffer,Payload received from the beginning of the session. -websocket,The WebSocket Protocol,#raw,WebSocket frame content. -websocket,The WebSocket Protocol,#msg,"Payload"" field of the WebSocket frame.""" +unknown,Unknown virtual protocol,#session_buffer,Payload received from the beginning of the session. +websocket,WebSocket,#raw,WebSocket frame content. +websocket,WebSocket,#msg,"Payload"" field of the WebSocket frame.""" winmx,Winmx,#file_chunk_content,Content of the transferred data. yandex_webmail,Yandex webmail,#attach_content,Attached files' content. yandex_webmail,Yandex webmail,#content,Message content. -ymail2,Yahoo Mail v2.0,#attach_content,Attached files' content. +ymail2,Yahoo Mail v.2.0,#attach_content,Attached files' content. ymail_classic,Yahoo Mail classic,#attach_content,Attached files' content. -ymail_mobile,Yahoo webmail for mobile,#attach_content,Attached files' content. -ymail_mobile_new,Yahoo webmail (new version) for mobile,#attach_content,Attached files' content. +ymail_mobile_new,Yahoo webmail for mobile,#attach_content,Attached files' content. ymsg,Yahoo Messenger,#inherit_key,"Candidate inheritance key ymsg,Yahoo Messenger,#inherit_parent,"Parent inheritance key ymsg_conf,Yahoo Messenger conference service,#inherit_key,"Candidate inheritance key ymsg_conf,Yahoo Messenger conference service,#inherit_parent,"Parent inheritance key -ymsg_transfer,Ymsg Transfer Protocol,#inherit_key,"Candidate inheritance key -ymsg_transfer,Ymsg Transfer Protocol,#content,File content -ymsg_video,YMSG Video,#inherit_key,"Candidate inheritance key -zimbra,zimbra,#attach_content,Attached files' content. +ymsg_transfer,Yahoo Messenger Transfer Protocol,#inherit_key,"Candidate inheritance key +ymsg_transfer,Yahoo Messenger Transfer Protocol,#content,File content +ymsg_video,Yahoo Messenger Video,#inherit_key,"Candidate inheritance key +zimbra,Zimbra.com,#attach_content,Attached files' content. zimbra_standard,Zimbra Webmail Standard Version,#attach_content,Attached files' content. diff --git a/resources/Qosmos_Protobook.csv b/resources/Qosmos_Protobook.csv index 2456d29f68b95..784f9b18ab9bd 100755 --- a/resources/Qosmos_Protobook.csv +++ b/resources/Qosmos_Protobook.csv @@ -12,321 +12,321 @@ protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_ .,,,,,-11,Q_GEN_LAYER_FAMILY,layer_family,,string,Family of this protocol.,0,pkt,0 .,,,,,-14,Q_GEN_FRAME,frame,,ptr,"Contains packet data, starting from the defined protocol layer.",0,pkt,0 .,,,,,-12,Q_GEN_PARENT_USER_HANDLE,parent_user_handle,,ptr,User data associated to one parent session.,0,pkt,0 -.,,,,,-13,Q_GEN_GEN_PARENT_LAYER,gen_parent_layer,,uint32,"This is not an event, it is used only to indicate the parent of this protocol is needed.",0,session,0 -.,,,,,-15,Q_GEN_DATA,data,,buffer,"Contains packet data, starting from the defined protocol layer, excluding the header.",0,session,1 -.,,,,,-17,Q_GEN_GEN_INHERIT_SUCCESS,gen_inherit_success,,uint32,Id of parent protocol when inheritance is successful.,0,session,0 -.,,,,,-18,Q_GEN_CLASSIFICATION_MATCH,classification_match,,,This attribute compares the classification states of both half-sessions.,0,session,0 -.,,,,,-19,Q_GEN_STATEMACHINE_ANOMALY,statemachine_anomaly,,,We check if we are in a final node when we cleanup the statemachine.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,643,Q_MPA_REQUEST,request,,parent,Contains information which is in http request.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,4,Q_0ZZ0_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,1,Q_0ZZ0_SIDC,sidc,,string,Session identifier used to find information about file which has been uploaded.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,2,Q_0ZZ0_SID,sid,,string,Session identifier used to find user information.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,5,Q_0ZZ0_EMAIL_ADDRESS,email_address,,string,User's email address.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,6,Q_0ZZ0_EMAIL_INVITED,email_invited,,string,Email to whom the invitation has been sent.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,577,Q_MPA_NAME,name,,string,Name the user.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,7,Q_0ZZ0_NAME_INVITED,name_invited,,string,Name of the user to whom the invitation has been sent.,0,session,0 -584,Q_PROTO_0ZZ0,Web,0zz0,0zz0,8,Q_0ZZ0_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,1,Q_3GPP_LI_HI3_DOMAIN_ID,hi3_domain_id,,binary,3gpp_li HI3 Domain,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,2,Q_3GPP_LI_VERSION,version,,uint32,Version,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,3,Q_3GPP_LI_LIID,liid,,string,Lawful Interception Identifier,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,4,Q_3GPP_LI_CORRELATION_NUMBER,correlation_number,,binary,GPRS correlation number,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,5,Q_3GPP_LI_TIMESTAMP,timestamp,,string,Timestamp,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,6,Q_3GPP_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,7,Q_3GPP_LI_T_PDU_DIRECTION,t_pdu_direction,,uint32,T-PDU direction,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,8,Q_3GPP_LI_COUNTRY_CODE,country_code,,string,Country code according to ISO 3166-1,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,9,Q_3GPP_LI_ICE_TYPE,ice_type,,uint32,Intercepting Control Element type,0,session,0 -1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3gpp_li,10,Q_3GPP_LI_NATIONAL_PARAMS,national_params,,binary,National parameters (other than country) in ASN.1 format,0,session,0 -7,Q_PROTO_8021Q,Network Service,8021q,Ethernet VLAN,1,Q_8021Q_PRIORITY,priority,,uint8,Packet priority.,0,session,0 -7,Q_PROTO_8021Q,Network Service,8021q,Ethernet VLAN,2,Q_8021Q_CFI,cfi,,uint8,Flag used for compatibility reason between Ethernet type network and Token Ring type network. Canonical Format Indicator is always set to zero for Ethernet switches.,0,session,0 -7,Q_PROTO_8021Q,Network Service,8021q,Ethernet VLAN,3,Q_8021Q_VLAN_ID,vlan_id,,uint16,VLAN Identifier of the frame.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint8,Tells whether a file is compressed.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,6,Q_ADC_CLIENT_VERSION,client_version,,string,Name and version of the client used by the peer.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,5,Q_ADC_PEER_HASH,peer_hash,,string,"Hash of the user ID, used to communicate with the hub and the other clients.",0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,4,Q_ADC_PEER_ID,peer_id,,string,User id assigned by the hub to the client and notified through a SID command.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,3,Q_ADC_COMMAND_CODE,command_code,,string,"Message action, as extracted from the three letters following the message type.",0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,2,Q_ADC_COMMAND_TYPE,command_type,,string,Command type extracted from the first character of the message.,0,session,0 -1438,Q_PROTO_ADC,Peer to Peer,adc,adc,1,Q_ADC_COMMAND,command,,parent,Parent attribute denoting the start of a message of the protocol.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,6,Q_ADOBE_UPDATE_COMPONENT_LIST_ENTRY,component_list_entry,,parent,Update server's answer entry.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,7,Q_ADOBE_UPDATE_COMPONENT_LIST_NAME,component_list_name,,string,Name of a piece of Adobe software we have a new version for.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,8,Q_ADOBE_UPDATE_COMPONENT_LIST_DESC,component_list_desc,,string,"Short component update description, including version number.",0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,9,Q_ADOBE_UPDATE_COMPONENT_LIST_VERSION,component_list_version,,string,"Last component version available.""",0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,10,Q_ADOBE_UPDATE_COMPONENT_LIST_URL,component_list_url,,string,"Component update download link.""",0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,5,Q_ADOBE_UPDATE_UPDATE_REQUEST,update_request,,parent,Client's component update request to the update server.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,4,Q_ADOBE_UPDATE_UPDATE_MANAGER,update_manager,,string,Adobe Update Manager version and identifier.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,11,Q_ADOBE_UPDATE_PRODUCT_NAME,product_name,,string,User's request for a product update.,0,session,0 -549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),537,Q_MPA_ENCODING,encoding,,string_index,Message encoding.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),638,Q_MPA_USER_EMAIL,user_email,,string,Email Address of an AIN user.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),608,Q_MPA_VERSION,version,,string,AIM software version.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),1,Q_AIM_ICON_DATA,icon_data,,buffer,Binary data containing a contact's icon.,0,session,1 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),2,Q_AIM_ICON_BUDDY,icon_buddy,,string,The contact whose icon was downloaded.,0,session,1 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),3,Q_AIM_INTERNAL_IP_ADDRESS,internal_ip_address,,ip_addr,Internal IP address of the contact.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),4,Q_AIM_EXTERNAL_IP_ADDRESS,external_ip_address,,ip_addr,External IP address of the contact.,0,session,0 -8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (OSCAR protocol),5,Q_AIM_EXTERNAL_LISTENING_PORT,external_listening_port,,uint16,External listening TCP port address of the contact.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,1,Q_AIM_EXPRESS_CHAT_TYPE,chat_type,,string,Message type.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,608,Q_MPA_VERSION,version,,string,Client version.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session,0 -275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session,0 -245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -281,Q_PROTO_AIMS,Instant Messaging,aims,Secure AIM,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,1,Q_AMQP_MAJOR_VERSION,major_version,,uint32,Major version of the protocol.,0,session,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,2,Q_AMQP_MINOR_VERSION,minor_version,,uint32,Minor version of the protocol.,0,session,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,3,Q_AMQP_METHOD,method,,string_index,Command launched.,0,session,0 -9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,4,Q_AMQP_RESPONSE_TIME,response_time,,timeval,Server response time.,0,session,0 -563,Q_PROTO_APPLE_UPDATE,Web,apple_update,Apple Update,1,Q_APPLE_UPDATE_PKG_NAME,pkg_name,,string,pkg_name (package name) is the name of the software being updated.,0,session,0 -1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,3,Q_APPSTORE_DEVICE_TYPE,device_type,,string,"Target device (iPhone, iPod,...).",0,session,0 -1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,2,Q_APPSTORE_CONNECTION_TYPE,connection_type,,string,Type of the connection.,0,session,0 -1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,1,Q_APPSTORE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,537,Q_MPA_ENCODING,encoding,,string,Server encoding.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,2,Q_ARCHIVE_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,3,Q_ARCHIVE_TITLE,title,,string,File title.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,4,Q_ARCHIVE_DESCRIPTION,description,,string,File description.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,5,Q_ARCHIVE_SUBJECT,subject,,string,File subject.,0,session,0 -564,Q_PROTO_ARCHIVE,Web,archive,archive,6,Q_ARCHIVE_CREATOR,creator,,string,File creator.,0,session,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares Protocol,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares Protocol,704,Q_MPA_NICKNAME,nickname,,string,Contains the user identity of the Ares connection.,0,session,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares Protocol,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -272,Q_PROTO_ARES,Peer to Peer,ares,Ares Protocol,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,1,Q_ARP_HARDWARE,hardware,,uint16,Specify the hardware type for which the request is sent. A value of 1 indicates an Ethernet address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,2,Q_ARP_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,3,Q_ARP_HARDSIZE,hardsize,,uint8,MAC address length.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,4,Q_ARP_PROTOSIZE,protosize,,uint8,Size in bytes of the logical address requested. Example: 4 for IP.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,5,Q_ARP_OPCODE,opcode,,uint16,"Operation Code: Request = 1, Response = 2.",0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,6,Q_ARP_SRC_HARD,src_hard,,binary,Source MAC address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,7,Q_ARP_SRC_PROTO,src_proto,,binary,Source IP address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,8,Q_ARP_DST_HARD,dst_hard,,binary,Destination MAC address.,0,pkt,0 -11,Q_PROTO_ARP,Network Service,arp,Adress Resolution Protocol,9,Q_ARP_DST_PROTO,dst_proto,,binary,Destination IP address.,0,pkt,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session,0 -586,Q_PROTO_BADONGO,Web,badongo,Badongo,4,Q_BADONGO_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,704,Q_MPA_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Unique contact ID for a receiver.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -365,Q_PROTO_BADOO,Instant Messaging,badoo,badoo,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -548,Q_PROTO_BAIDU,Web,baidu,baidu,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,1,Q_BASE_CNX_TYPE,cnx_type,,uint8,Packet transfer direction in a client/server flow.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,2,Q_BASE_PATH,path,,path,Protocol stack of a packet.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,3,Q_BASE_APPLICATION,application,,string,Name of the application to which the packet belongs.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,4,Q_BASE_TIME,time,,uint32,"Elapsed time since 1st January 1970, displayed in seconds/ minutes/ hours/ days according to the value of the given parameter.",0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,5,Q_BASE_DAYTIME,daytime,,uint16,Current time characteristics according to the given parameter: second (s)/ minute (m)/ hour (h)/ day (D)/ month (M)/ year (Y).,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,6,Q_BASE_UTIME,utime,,timeval,"Elapsed time since 1st January 1970, displayed in microseconds.",0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,7,Q_BASE_FLOW_ID,flow_id,,uint64,Unique connection ID.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,8,Q_BASE_CLASSIFIED,classified,,uint8,"Attribute showing whether the classification process (AFC) has been completed or not for the given packet. A value of 1 indicates a complete classification, a value of 0 indicates that the classification process is still running.",0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,9,Q_BASE_DELAY,delay,,timeval,Elapsed time between consecutive packets processing.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,10,Q_BASE_JITTER,jitter,,timeval,Variation of delay compared to the last processed packet (calculated per half-session).,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,11,Q_BASE_FAMILY,family,,string,Family to which the uppermost protocol of the protocol stack belongs to.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,14,Q_BASE_APPLICATION_ID,application_id,,uint32,Unique ID of application to which the packet belongs.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,32,Q_BASE_PATH_LEN,path_len,,uint32,Contains the number of protocols in the packet protocol stack (path).,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,33,Q_BASE_PACKET_COUNTER,packet_counter,,uint32,Number of packets received.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,36,Q_BASE_SESSION_PACKET_COUNTER,session_packet_counter,,uint32,Number of packets received. This attribute data cannot be retreived in externalized versions.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,37,Q_BASE_USER_HANDLE,user_handle,,ptr,User data associated to this session. This attribute data cannot be retreived in externalized versions.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,38,Q_BASE_PEER_USER_HANDLE,peer_user_handle,,ptr,User data associated to the peer half-session. This attribute data cannot be retreived in externalized versions.,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,39,Q_BASE_DEV,dev,,string,Name of the device used to establish the connection for an interface. This attribute data cannot be retreived in externalized versions.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,40,Q_BASE_WAY,way,,uint8,Way of half connection.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,41,Q_BASE_PROTOCOL,protocol,,parent,"Empty parent attribute for path, application_id, application and family.",0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,42,Q_BASE_PACKET,packet,,buffer,Packet data.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,62,Q_BASE_PACKET_IP,packet_ip,,buffer,Packet data from first IP layer.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,43,Q_BASE_UPACKET,upacket,,ptr,Address where there is the packet data.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,44,Q_BASE_FILTER_STATE_CHANGE,filter_state_change,,filter_state,"When a filter's state changes, id and state of that filter.",0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,45,Q_BASE_FILTER_RULE_MATCHES,filter_rule_matches,,filter_state,When a filter is matched.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,35,Q_BASE_SESSION_END,session_end,,uint8,Triggered when the session is finished.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,46,Q_BASE_DECLASSIFIED,declassified,,uint32,"Attribute showing whether a declassification is happened in a packet, the raised value is the protocol id.",0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,47,Q_BASE_USER_HANDLE_PKT,user_handle_pkt,,ptr,User data associated to this session containing ctb_ppacket user_handle.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,48,Q_BASE_SYS_PKT_HEADER,sys_pkt_header,,binary,A binary buffer container data inserted in the head of the real packet,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,49,Q_BASE_SYS_PKT_FOOTER,sys_pkt_footer,,binary,A binary buffer container data inserted in the tail of the real packet,0,pkt,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,59,Q_BASE_PROTOCOL_END,protocol_end,,parent,"Empty parent attribute for path_end, application_end_id, application_end and family_end.",0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,55,Q_BASE_PATH_END,path_end,,path,Contains the latest value for the attribute path,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,58,Q_BASE_APPLICATION_END,application_end,,string,Contains the latest value for the attribute application,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,56,Q_BASE_FAMILY_END,family_end,,string,Contains the latest value for the attribute family,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,57,Q_BASE_APPLICATION_ID_END,application_id_end,,uint32,Contains the latest value for the attribute application_id,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,63,Q_BASE_SESSION_LEN,session_len,,uint64,Contains the total length exchanged over this session. This attribute data cannot be retreived in externalized versions.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,64,Q_BASE_SPLIT,split,,ptr,"When a flow is split, address of the uapp_cnx that was associated to the current one",0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,66,Q_BASE_SESSION_UNIDIR,session_unidir,,uint8,Extracted when unidirectional traffic is detected.,0,session,0 -3,Q_PROTO_BASE,Standard,base,TD virtual protocol,67,Q_BASE_MULTI_MATCH_PROTO_ID,multi_match_proto_id,,uint32,"When multiple pdata rules do match the same packet, the highest priority rule is classified. The protocol ids of the lesser priority rules are shown in deacreasing priority order through this protocol.",0,session,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -268,Q_PROTO_BEBO,Web,bebo,Bebo,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,1,Q_BGP_MESSAGE_ENTRY,message_entry,,parent,Parent entry for the attributes of a BGP message,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,2,Q_BGP_AS,as,,uint16,Autonomous System Identifier,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,3,Q_BGP_IDENTIFIER,identifier,,ip_addr,BGP Identifier of the sender,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,4,Q_BGP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,5,Q_BGP_HOLD_TIME,hold_time,,uint16,The number of seconds proposed by the sender for the value of the Hold Timer,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,6,Q_BGP_ERROR_CODE,error_code,,uint8,This attribute indicates the type of NOTIFICATION,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,7,Q_BGP_ERROR_SUBCODE,error_subcode,,uint8,This attribute provides more specific information about the nature of the reported error,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,36,Q_BGP_ERROR_NOTIFICATION_DATA,error_notification_data,,binary,Raw error data notification.,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,8,Q_BGP_PATH_ATTR_ENTRY,path_attr_entry,,parent,Parent entry for path attributes,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,9,Q_BGP_PATH_ATTR_TYPE,path_attr_type,,string_index,The code of the attribute type,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,24,Q_BGP_PATH_ATTR_VALUE_ENTRY,path_attr_value_entry,,parent,Parent entry for path_attr_value_... attributes,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,10,Q_BGP_PATH_ATTR_VALUE,path_attr_value,,binary,Content of the attribute,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,32,Q_BGP_PATH_ATTR_VALUE_LOCAL_PREF,path_attr_value_local_pref,,uint32,Local preference value,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,28,Q_BGP_PATH_ATTR_VALUE_AS_NUM,path_attr_value_as_num,,uint32,As number,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,29,Q_BGP_PATH_ATTR_VALUE_NEXT_HOP_IP,path_attr_value_next_hop_ip,,ip_addr,IP address of the next hop,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,11,Q_BGP_WITHDRAWN,withdrawn,,parent,Parent entry for the attributes withdrawn_prefix and withdrawn_prefix_len,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,12,Q_BGP_WITHDRAWN_PREFIX_LEN,withdrawn_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,13,Q_BGP_WITHDRAWN_PREFIX,withdrawn_prefix,,ip_addr,Contains Ip addresses Prefixes,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,14,Q_BGP_NLRI,nlri,,parent,Parent entry for the attributes nlri_prefix and nlri_prefix_len,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,15,Q_BGP_NLRI_PREFIX_LEN,nlri_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,16,Q_BGP_NLRI_PREFIX,nlri_prefix,,ip_addr,Contains IP addresses prefix,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,17,Q_BGP_AUTH_ENTRY,auth_entry,,parent,Parent entry for the attributes of the authentication,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,18,Q_BGP_AUTH_CODE,auth_code,,uint8,A code that indicates the type of authentication,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,19,Q_BGP_AUTH_MESSAGE,auth_message,,binary,The content of the authentication,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,20,Q_BGP_AFI,afi,,uint16,In a route refresh packet this field is an address family identifier.,0,session,0 -13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,21,Q_BGP_SAFI,safi,,uint8,In a route refresh packet this field is a subsequent address family identifier.,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -547,Q_PROTO_BING,Web,bing,Bing,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,1,Q_BITTORRENT_TRACKER,tracker,,string,BitTorrent tracker URL.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,3,Q_BITTORRENT_FILE_HASH_RAW,file_hash_raw,,buffer,Content whose SHA1 hash is the file_hash ('info' section of the torrent file).,1,session,1 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,4,Q_BITTORRENT_PEER_ID,peer_id,,binary,Unique ID containing information about the software and the version used.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,6,Q_BITTORRENT_CLIENT_VERSION,client_version,,string,Version of the software.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,8,Q_BITTORRENT_CANCELED_CHUNK,canceled_chunk,,parent,A piece of a canceled file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,9,Q_BITTORRENT_CANCELED_CHUNK_NUMBER,canceled_chunk_number,,uint32,Number of the canceled piece.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,10,Q_BITTORRENT_CANCELED_CHUNK_LENGTH,canceled_chunk_length,,uint32,Size of the canceled piece.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,11,Q_BITTORRENT_CANCELED_CHUNK_DATA_OFFSET,canceled_chunk_data_offset,,uint32,Offset of the canceled data.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,16,Q_BITTORRENT_TORRENT_FILENAME,torrent_filename,,string,Name of the torrent file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,17,Q_BITTORRENT_PIECE_LENGTH,piece_length,,uint32,"Chunk size, for the specified file.",0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,24,Q_BITTORRENT_PEER_SHARE_IP,peer_share_ip,,ip_addr,IP address used by a peer to share his files.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,29,Q_BITTORRENT_PEER_SHARE_IP6,peer_share_ip6,,ip6_addr,IPv6 address used by a peer to share his files.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,25,Q_BITTORRENT_PEER_SHARE_PORT,peer_share_port,,uint16,Port used by a peer to share his files.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,26,Q_BITTORRENT_PEER_SHARE_ID,peer_share_id,,string,ID used by a peer to share his files.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,23,Q_BITTORRENT_PEER_PORT,peer_port,x,string,Port used by a peer to share his files.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,20,Q_BITTORRENT_FILE_COMPLETED,file_completed,,string,Completed file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,19,Q_BITTORRENT_FILE_DOWNLOADED,file_downloaded,,string,Downloaded file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,21,Q_BITTORRENT_FILE_INCOMPLETE,file_incomplete,,string,Incomplete file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,22,Q_BITTORRENT_FILE_LEFT,file_left,,string,Left file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,18,Q_BITTORRENT_FILE_UPLOADED,file_uploaded,,string,Uploaded file.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,27,Q_BITTORRENT_FLOW_TYPE,flow_type,,string_index,Information about the flow encryption level.,0,session,0 -15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,Bittorrent Protocol,28,Q_BITTORRENT_CLASSIFICATION_TYPE,classification_type,,string,"How the protocol has been classified. Always returns Deterministic"" if the port list has not been set.""",0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,783,Q_MPA_VIDEO_UUID,video_uuid,,string,Universally unique identifier.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session,0 -1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each BSSAP message,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,530,Q_MPA_CONTENT,content,,string,Message content,0,session,1 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,1,Q_BSSAP_TIMESTAMP,timestamp,,timeval,Message timestamp,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,3,Q_BSSAP_VALIDITY_PERIOD,validity_period,,string,Validity period for the message,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,Message receiver,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,4,Q_BSSAP_IMSI_RECEIVER,imsi_receiver,,string,International Mobile Subscriber Identity of the receiver,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,5,Q_BSSAP_IMEI_RECEIVER,imei_receiver,,string,International Mobile Equipment Identity of the receiver,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,6,Q_BSSAP_MSISDN_RECEIVER,msisdn_receiver,,string,Mobile Subscriber Integrated Services Digital Network Number of the receiver,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,Message sender,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,7,Q_BSSAP_IMSI_SENDER,imsi_sender,,string,International Mobile Subscriber Identity of the sender,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,8,Q_BSSAP_IMEI_SENDER,imei_sender,,string,International Mobile Equipment Identity of the sender,0,session,0 -741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,9,Q_BSSAP_MSISDN_SENDER,msisdn_sender,,string,Mobile Subscriber Integrated Services Digital Network Number of the sender,0,session,0 +.,,,,,-13,Q_GEN_GEN_PARENT_LAYER,gen_parent_layer,,uint32,"This is not an event, it is used only to indicate the parent of this protocol is needed.",0,session_mod,0 +.,,,,,-15,Q_GEN_DATA,data,,buffer,"Contains packet data, starting from the defined protocol layer, excluding the header.",0,session_mod,1 +.,,,,,-17,Q_GEN_GEN_INHERIT_SUCCESS,gen_inherit_success,,uint32,Id of parent protocol when inheritance is successful.,0,session_mod,0 +.,,,,,-18,Q_GEN_CLASSIFICATION_MATCH,classification_match,,,This attribute compares the classification states of both half-sessions.,0,session_mod,0 +.,,,,,-19,Q_GEN_STATEMACHINE_ANOMALY,statemachine_anomaly,,,We check if we are in a final node when we cleanup the statemachine.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,643,Q_MPA_REQUEST,request,,parent,Contains information which is in http request.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,4,Q_0ZZ0_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,1,Q_0ZZ0_SIDC,sidc,,string,Session identifier used to find information about file which has been uploaded.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,2,Q_0ZZ0_SID,sid,,string,Session identifier used to find user information.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,5,Q_0ZZ0_EMAIL_ADDRESS,email_address,,string,User's email address.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,6,Q_0ZZ0_EMAIL_INVITED,email_invited,,string,Email to whom the invitation has been sent.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,7,Q_0ZZ0_NAME_INVITED,name_invited,,string,Name of the user to whom the invitation has been sent.,0,session_mod,0 +584,Q_PROTO_0ZZ0,Web,0zz0,0zz0.com,8,Q_0ZZ0_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,1,Q_3GPP_LI_HI3_DOMAIN_ID,hi3_domain_id,,binary,3gpp_li HI3 Domain,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,2,Q_3GPP_LI_VERSION,version,,uint32,Version,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,3,Q_3GPP_LI_LIID,liid,,string,Lawful Interception Identifier,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,4,Q_3GPP_LI_CORRELATION_NUMBER,correlation_number,,binary,GPRS correlation number,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,5,Q_3GPP_LI_TIMESTAMP,timestamp,,string,Timestamp,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,6,Q_3GPP_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,7,Q_3GPP_LI_T_PDU_DIRECTION,t_pdu_direction,,uint32,T-PDU direction,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,8,Q_3GPP_LI_COUNTRY_CODE,country_code,,string,Country code according to ISO 3166-1,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,9,Q_3GPP_LI_ICE_TYPE,ice_type,,uint32,Intercepting Control Element type,0,session_mod,0 +1437,Q_PROTO_3GPP_LI,Tunneling,3gpp_li,3GPP LI,10,Q_3GPP_LI_NATIONAL_PARAMS,national_params,,binary,National parameters (other than country) in ASN.1 format,0,session_mod,0 +7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,1,Q_8021Q_PRIORITY,priority,,uint8,Packet priority.,0,session_fix,0 +7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,2,Q_8021Q_CFI,cfi,,uint8,Flag used for compatibility reason between Ethernet type network and Token Ring type network. Canonical Format Indicator is always set to zero for Ethernet switches.,0,session_fix,0 +7,Q_PROTO_8021Q,Network Service,8021q,802.1Q Ethernet VLAN,3,Q_8021Q_VLAN_ID,vlan_id,,uint16,VLAN Identifier of the frame.,0,session_fix,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint8,Tells whether a file is compressed.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,6,Q_ADC_CLIENT_VERSION,client_version,,string,Name and version of the client used by the peer.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,5,Q_ADC_PEER_HASH,peer_hash,,string,"Hash of the user ID, used to communicate with the hub and the other clients.",0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,4,Q_ADC_PEER_ID,peer_id,,string,User id assigned by the hub to the client and notified through a SID command.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,3,Q_ADC_COMMAND_CODE,command_code,,string,"Message action, as extracted from the three letters following the message type.",0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,2,Q_ADC_COMMAND_TYPE,command_type,,string,Command type extracted from the first character of the message.,0,session_mod,0 +1438,Q_PROTO_ADC,Peer to Peer,adc,Advanced Direct Connect,1,Q_ADC_COMMAND,command,,parent,Parent attribute denoting the start of a message of the protocol.,0,session_mod,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,6,Q_ADOBE_UPDATE_COMPONENT_LIST_ENTRY,component_list_entry,,parent,Update server's answer entry.,0,session_fix,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,7,Q_ADOBE_UPDATE_COMPONENT_LIST_NAME,component_list_name,,string,Name of a piece of Adobe software we have a new version for.,0,session_prt,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,8,Q_ADOBE_UPDATE_COMPONENT_LIST_DESC,component_list_desc,,string,"Short component update description, including version number.",0,session_prt,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,9,Q_ADOBE_UPDATE_COMPONENT_LIST_VERSION,component_list_version,,string,"Last component version available.""",0,session_prt,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,10,Q_ADOBE_UPDATE_COMPONENT_LIST_URL,component_list_url,,string,"Component update download link.""",0,session_prt,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,5,Q_ADOBE_UPDATE_UPDATE_REQUEST,update_request,,parent,Client's component update request to the update server.,0,session_fix,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,4,Q_ADOBE_UPDATE_UPDATE_MANAGER,update_manager,,string,Adobe Update Manager version and identifier.,0,session_prt,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,11,Q_ADOBE_UPDATE_PRODUCT_NAME,product_name,,string,User's request for a product update.,0,session_prt,0 +549,Q_PROTO_ADOBE_UPDATE,Web,adobe_update,Adobe Update Manager,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),537,Q_MPA_ENCODING,encoding,,string_index,Message encoding.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),638,Q_MPA_USER_EMAIL,user_email,,string,Email Address of an AIN user.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_fix,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),608,Q_MPA_VERSION,version,,string,AIM software version.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),1,Q_AIM_ICON_DATA,icon_data,,buffer,Binary data containing a contact's icon.,0,session_mod,1 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),2,Q_AIM_ICON_BUDDY,icon_buddy,,string,The contact whose icon was downloaded.,0,session_mod,1 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),3,Q_AIM_INTERNAL_IP_ADDRESS,internal_ip_address,,ip_addr,Internal IP address of the contact.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),4,Q_AIM_EXTERNAL_IP_ADDRESS,external_ip_address,,ip_addr,External IP address of the contact.,0,session_prt,0 +8,Q_PROTO_AIM,Instant Messaging,aim,AOL Instant Messenger (formerly OSCAR),5,Q_AIM_EXTERNAL_LISTENING_PORT,external_listening_port,,uint16,External listening TCP port address of the contact.,0,session_prt,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,1,Q_AIM_EXPRESS_CHAT_TYPE,chat_type,,string,Message type.,0,session_prt,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,608,Q_MPA_VERSION,version,,string,Client version.,0,session_fix,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_prt,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_prt,0 +275,Q_PROTO_AIM_EXPRESS,Instant Messaging,aim_express,AIM express,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,747,Q_MPA_FILENAME_ENCODING,filename_encoding,,string,Encoding of the transferred file name.,0,session_prt,0 +245,Q_PROTO_AIM_TRANSFER,File Transfer,aim_transfer,AIM Transfer,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +281,Q_PROTO_AIMS,Instant Messaging,aims,Secure AIM,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,1,Q_AMQP_MAJOR_VERSION,major_version,,uint32,Major version of the protocol.,0,session_fix,0 +9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,2,Q_AMQP_MINOR_VERSION,minor_version,,uint32,Minor version of the protocol.,0,session_fix,0 +9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,3,Q_AMQP_METHOD,method,,string_index,Command launched.,0,session_mod,0 +9,Q_PROTO_AMQP,Middleware,amqp,Advance Message Queuing Protocol,4,Q_AMQP_RESPONSE_TIME,response_time,,timeval,Server response time.,0,session_mod,0 +563,Q_PROTO_APPLE_UPDATE,Web,apple_update,Apple Update,1,Q_APPLE_UPDATE_PKG_NAME,pkg_name,,string,pkg_name (package name) is the name of the software being updated.,0,session_fix,0 +1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,3,Q_APPSTORE_DEVICE_TYPE,device_type,,string,"Target device (iPhone, iPod,...).",0,session_mod,0 +1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,2,Q_APPSTORE_CONNECTION_TYPE,connection_type,,string,Type of the connection.,0,session_mod,0 +1106,Q_PROTO_APPSTORE,Application Service,appstore,Apple App Store,1,Q_APPSTORE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,537,Q_MPA_ENCODING,encoding,,string,Server encoding.,0,session_mod,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,2,Q_ARCHIVE_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,3,Q_ARCHIVE_TITLE,title,,string,File title.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,4,Q_ARCHIVE_DESCRIPTION,description,,string,File description.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,5,Q_ARCHIVE_SUBJECT,subject,,string,File subject.,0,session_prt,0 +564,Q_PROTO_ARCHIVE,Web,archive,Archive.org,6,Q_ARCHIVE_CREATOR,creator,,string,File creator.,0,session_prt,0 +272,Q_PROTO_ARES,Peer to Peer,ares,Ares,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 +272,Q_PROTO_ARES,Peer to Peer,ares,Ares,704,Q_MPA_NICKNAME,nickname,,string,Contains the user identity of the Ares connection.,0,session_fix,0 +272,Q_PROTO_ARES,Peer to Peer,ares,Ares,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +272,Q_PROTO_ARES,Peer to Peer,ares,Ares,623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_mod,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,1,Q_ARP_HARDWARE,hardware,,uint16,Specify the hardware type for which the request is sent. A value of 1 indicates an Ethernet address.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,2,Q_ARP_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,3,Q_ARP_HARDSIZE,hardsize,,uint8,MAC address length.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,4,Q_ARP_PROTOSIZE,protosize,,uint8,Size in bytes of the logical address requested. Example: 4 for IP.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,5,Q_ARP_OPCODE,opcode,,uint16,"Operation Code: Request = 1, Response = 2.",0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,6,Q_ARP_SRC_HARD,src_hard,,binary,Source MAC address.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,7,Q_ARP_SRC_PROTO,src_proto,,binary,Source IP address.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,8,Q_ARP_DST_HARD,dst_hard,,binary,Destination MAC address.,0,pkt,0 +11,Q_PROTO_ARP,Network Service,arp,Address Resolution Protocol,9,Q_ARP_DST_PROTO,dst_proto,,binary,Destination IP address.,0,pkt,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0 +586,Q_PROTO_BADONGO,Web,badongo,Badongo.com,4,Q_BADONGO_UPLOAD_DESCRIPTION,upload_description,,string,Description of the uploaded file.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,704,Q_MPA_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Unique contact ID for a receiver.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +365,Q_PROTO_BADOO,Instant Messaging,badoo,Badoo.com,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +548,Q_PROTO_BAIDU,Web,baidu,Baidu.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,1,Q_BASE_CNX_TYPE,cnx_type,,uint8,Packet transfer direction in a client/server flow.,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,2,Q_BASE_PATH,path,,path,Protocol stack of a packet.,0,session_prt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,3,Q_BASE_APPLICATION,application,,string,Name of the application to which the packet belongs.,0,session_prt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,4,Q_BASE_TIME,time,,uint32,"Elapsed time since 1st January 1970, displayed in seconds/ minutes/ hours/ days according to the value of the given parameter.",0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,5,Q_BASE_DAYTIME,daytime,,uint16,Current time characteristics according to the given parameter: second (s)/ minute (m)/ hour (h)/ day (D)/ month (M)/ year (Y).,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,6,Q_BASE_UTIME,utime,,timeval,"Elapsed time since 1st January 1970, displayed in microseconds.",0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,7,Q_BASE_FLOW_ID,flow_id,,uint64,Unique connection ID.,0,session_fix,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,8,Q_BASE_CLASSIFIED,classified,,uint8,"Attribute showing whether the classification process (AFC) has been completed or not for the given packet. A value of 1 indicates a complete classification, a value of 0 indicates that the classification process is still running.",0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,9,Q_BASE_DELAY,delay,,timeval,Elapsed time between consecutive packets processing.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,10,Q_BASE_JITTER,jitter,,timeval,Variation of delay compared to the last processed packet (calculated per half-session).,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,11,Q_BASE_FAMILY,family,,string,Family to which the uppermost protocol of the protocol stack belongs to.,0,session_prt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,14,Q_BASE_APPLICATION_ID,application_id,,uint32,Unique ID of application to which the packet belongs.,0,session_prt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,32,Q_BASE_PATH_LEN,path_len,,uint32,Contains the number of protocols in the packet protocol stack (path).,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,33,Q_BASE_PACKET_COUNTER,packet_counter,,uint32,Number of packets received.,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,36,Q_BASE_SESSION_PACKET_COUNTER,session_packet_counter,,uint32,Number of packets received. This attribute data cannot be retreived in externalized versions.,0,session_fix,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,37,Q_BASE_USER_HANDLE,user_handle,,ptr,User data associated to this session. This attribute data cannot be retreived in externalized versions.,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,38,Q_BASE_PEER_USER_HANDLE,peer_user_handle,,ptr,User data associated to the peer half-session. This attribute data cannot be retreived in externalized versions.,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,39,Q_BASE_DEV,dev,,string,Name of the device used to establish the connection for an interface. This attribute data cannot be retreived in externalized versions.,0,session_fix,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,40,Q_BASE_WAY,way,,uint8,Way of half connection.,0,session_fix,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,41,Q_BASE_PROTOCOL,protocol,,parent,"Empty parent attribute for path, application_id, application and family.",0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,42,Q_BASE_PACKET,packet,,buffer,Packet data.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,62,Q_BASE_PACKET_IP,packet_ip,,buffer,Packet data from first IP layer.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,43,Q_BASE_UPACKET,upacket,,ptr,Address where there is the packet data.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,44,Q_BASE_FILTER_STATE_CHANGE,filter_state_change,,filter_state,"When a filter's state changes, id and state of that filter.",0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,45,Q_BASE_FILTER_RULE_MATCHES,filter_rule_matches,,filter_state,When a filter is matched.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,35,Q_BASE_SESSION_END,session_end,,uint8,Triggered when the session is finished.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,46,Q_BASE_DECLASSIFIED,declassified,,uint32,"Attribute showing whether a declassification is happened in a packet, the raised value is the protocol id.",0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,47,Q_BASE_USER_HANDLE_PKT,user_handle_pkt,,ptr,User data associated to this session containing ctb_ppacket user_handle.,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,48,Q_BASE_SYS_PKT_HEADER,sys_pkt_header,,binary,A binary buffer container data inserted in the head of the real packet,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,49,Q_BASE_SYS_PKT_FOOTER,sys_pkt_footer,,binary,A binary buffer container data inserted in the tail of the real packet,0,pkt,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,59,Q_BASE_PROTOCOL_END,protocol_end,,parent,"Empty parent attribute for path_end, application_end_id, application_end and family_end.",0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,55,Q_BASE_PATH_END,path_end,,path,Contains the latest value for the attribute path,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,58,Q_BASE_APPLICATION_END,application_end,,string,Contains the latest value for the attribute application,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,56,Q_BASE_FAMILY_END,family_end,,string,Contains the latest value for the attribute family,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,57,Q_BASE_APPLICATION_ID_END,application_id_end,,uint32,Contains the latest value for the attribute application_id,0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,63,Q_BASE_SESSION_LEN,session_len,,uint64,Contains the total length exchanged over this session. This attribute data cannot be retreived in externalized versions.,0,session_fix,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,64,Q_BASE_SPLIT,split,,ptr,"When a flow is split, address of the uapp_cnx that was associated to the current one",0,session_mod,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,66,Q_BASE_SESSION_UNIDIR,session_unidir,,uint8,Extracted when unidirectional traffic is detected.,0,session_fix,0 +3,Q_PROTO_BASE,Standard,base,Base virtual protocol,67,Q_BASE_MULTI_MATCH_PROTO_ID,multi_match_proto_id,,uint32,"When multiple pdata rules do match the same packet, the highest priority rule is classified. The protocol ids of the lesser priority rules are shown in deacreasing priority order through this protocol.",0,session_mod,0 +268,Q_PROTO_BEBO,Web,bebo,Bebo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +268,Q_PROTO_BEBO,Web,bebo,Bebo.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0 +268,Q_PROTO_BEBO,Web,bebo,Bebo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +268,Q_PROTO_BEBO,Web,bebo,Bebo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +268,Q_PROTO_BEBO,Web,bebo,Bebo.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,1,Q_BGP_MESSAGE_ENTRY,message_entry,,parent,Parent entry for the attributes of a BGP message,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,2,Q_BGP_AS,as,,uint16,Autonomous System Identifier,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,3,Q_BGP_IDENTIFIER,identifier,,ip_addr,BGP Identifier of the sender,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,4,Q_BGP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,5,Q_BGP_HOLD_TIME,hold_time,,uint16,The number of seconds proposed by the sender for the value of the Hold Timer,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,6,Q_BGP_ERROR_CODE,error_code,,uint8,This attribute indicates the type of NOTIFICATION,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,7,Q_BGP_ERROR_SUBCODE,error_subcode,,uint8,This attribute provides more specific information about the nature of the reported error,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,36,Q_BGP_ERROR_NOTIFICATION_DATA,error_notification_data,,binary,Raw error data notification.,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,8,Q_BGP_PATH_ATTR_ENTRY,path_attr_entry,,parent,Parent entry for path attributes,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,9,Q_BGP_PATH_ATTR_TYPE,path_attr_type,,string_index,The code of the attribute type,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,24,Q_BGP_PATH_ATTR_VALUE_ENTRY,path_attr_value_entry,,parent,Parent entry for path_attr_value_... attributes,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,10,Q_BGP_PATH_ATTR_VALUE,path_attr_value,,binary,Content of the attribute,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,32,Q_BGP_PATH_ATTR_VALUE_LOCAL_PREF,path_attr_value_local_pref,,uint32,Local preference value,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,28,Q_BGP_PATH_ATTR_VALUE_AS_NUM,path_attr_value_as_num,,uint32,As number,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,29,Q_BGP_PATH_ATTR_VALUE_NEXT_HOP_IP,path_attr_value_next_hop_ip,,ip_addr,IP address of the next hop,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,11,Q_BGP_WITHDRAWN,withdrawn,,parent,Parent entry for the attributes withdrawn_prefix and withdrawn_prefix_len,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,12,Q_BGP_WITHDRAWN_PREFIX_LEN,withdrawn_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,13,Q_BGP_WITHDRAWN_PREFIX,withdrawn_prefix,,ip_addr,Contains Ip addresses Prefixes,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,14,Q_BGP_NLRI,nlri,,parent,Parent entry for the attributes nlri_prefix and nlri_prefix_len,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,15,Q_BGP_NLRI_PREFIX_LEN,nlri_prefix_len,,uint8,This field indicates the length in bits of the IP address prefix,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,16,Q_BGP_NLRI_PREFIX,nlri_prefix,,ip_addr,Contains IP addresses prefix,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,17,Q_BGP_AUTH_ENTRY,auth_entry,,parent,Parent entry for the attributes of the authentication,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,18,Q_BGP_AUTH_CODE,auth_code,,uint8,A code that indicates the type of authentication,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,19,Q_BGP_AUTH_MESSAGE,auth_message,,binary,The content of the authentication,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,20,Q_BGP_AFI,afi,,uint16,In a route refresh packet this field is an address family identifier.,0,session_mod,0 +13,Q_PROTO_BGP,Routing,bgp,Border Gateway Protocol,21,Q_BGP_SAFI,safi,,uint8,In a route refresh packet this field is a subsequent address family identifier.,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +547,Q_PROTO_BING,Web,bing,Bing.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,1,Q_BITTORRENT_TRACKER,tracker,,string,BitTorrent tracker URL.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,3,Q_BITTORRENT_FILE_HASH_RAW,file_hash_raw,,buffer,Content whose SHA1 hash is the file_hash ('info' section of the torrent file).,1,session_mod,1 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,4,Q_BITTORRENT_PEER_ID,peer_id,,binary,Unique ID containing information about the software and the version used.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,6,Q_BITTORRENT_CLIENT_VERSION,client_version,,string,Version of the software.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,8,Q_BITTORRENT_CANCELED_CHUNK,canceled_chunk,,parent,A piece of a canceled file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,9,Q_BITTORRENT_CANCELED_CHUNK_NUMBER,canceled_chunk_number,,uint32,Number of the canceled piece.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,10,Q_BITTORRENT_CANCELED_CHUNK_LENGTH,canceled_chunk_length,,uint32,Size of the canceled piece.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,11,Q_BITTORRENT_CANCELED_CHUNK_DATA_OFFSET,canceled_chunk_data_offset,,uint32,Offset of the canceled data.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,16,Q_BITTORRENT_TORRENT_FILENAME,torrent_filename,,string,Name of the torrent file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,17,Q_BITTORRENT_PIECE_LENGTH,piece_length,,uint32,"Chunk size, for the specified file.",0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,24,Q_BITTORRENT_PEER_SHARE_IP,peer_share_ip,,ip_addr,IP address used by a peer to share his files.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,29,Q_BITTORRENT_PEER_SHARE_IP6,peer_share_ip6,,ip6_addr,IPv6 address used by a peer to share his files.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,25,Q_BITTORRENT_PEER_SHARE_PORT,peer_share_port,,uint16,Port used by a peer to share his files.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,26,Q_BITTORRENT_PEER_SHARE_ID,peer_share_id,,string,ID used by a peer to share his files.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,23,Q_BITTORRENT_PEER_PORT,peer_port,x,string,Port used by a peer to share his files.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,20,Q_BITTORRENT_FILE_COMPLETED,file_completed,,string,Completed file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,19,Q_BITTORRENT_FILE_DOWNLOADED,file_downloaded,,string,Downloaded file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,21,Q_BITTORRENT_FILE_INCOMPLETE,file_incomplete,,string,Incomplete file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,22,Q_BITTORRENT_FILE_LEFT,file_left,,string,Left file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,18,Q_BITTORRENT_FILE_UPLOADED,file_uploaded,,string,Uploaded file.,0,session_mod,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,27,Q_BITTORRENT_FLOW_TYPE,flow_type,,string_index,Information about the flow encryption level.,0,session_fix,0 +15,Q_PROTO_BITTORRENT,Peer to Peer,bittorrent,BitTorrent,28,Q_BITTORRENT_CLASSIFICATION_TYPE,classification_type,,string,"How the protocol has been classified. Always returns Deterministic"" if the port list has not been set.""",0,session_fix,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,783,Q_MPA_VIDEO_UUID,video_uuid,,string,Universally unique identifier.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0 +1293,Q_PROTO_BMFF,Audio/Video,bmff,ISO Base Media File Format,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_prt,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each BSSAP message,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,530,Q_MPA_CONTENT,content,,string,Message content,0,session_mod,1 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,1,Q_BSSAP_TIMESTAMP,timestamp,,timeval,Message timestamp,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,3,Q_BSSAP_VALIDITY_PERIOD,validity_period,,string,Validity period for the message,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,Message receiver,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,4,Q_BSSAP_IMSI_RECEIVER,imsi_receiver,,string,International Mobile Subscriber Identity of the receiver,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,5,Q_BSSAP_IMEI_RECEIVER,imei_receiver,,string,International Mobile Equipment Identity of the receiver,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,6,Q_BSSAP_MSISDN_RECEIVER,msisdn_receiver,,string,Mobile Subscriber Integrated Services Digital Network Number of the receiver,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,Message sender,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,7,Q_BSSAP_IMSI_SENDER,imsi_sender,,string,International Mobile Subscriber Identity of the sender,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,8,Q_BSSAP_IMEI_SENDER,imei_sender,,string,International Mobile Equipment Identity of the sender,0,session_mod,0 +741,Q_PROTO_BSSAP,Telephony,bssap,BSS Application Part,9,Q_BSSAP_MSISDN_SENDER,msisdn_sender,,string,Mobile Subscriber Integrated Services Digital Network Number of the sender,0,session_mod,0 16,Q_PROTO_BXML,Wap,bxml,WAP Binary XML,1,Q_BXML_VERSION,version,,string,Protocol version.,0,pkt,0 16,Q_PROTO_BXML,Wap,bxml,WAP Binary XML,2,Q_BXML_PUBLIC_ID,public_id,,uint8,Public ID of the connection.,0,pkt,0 18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0 @@ -340,1120 +340,1125 @@ protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_ 18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,8,Q_CDP_VTP_MGMT_DOMAIN,VTP_mgmt_domain,,string,VTP management domain name-string to which the sending device belongs.,0,pkt,0 18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,9,Q_CDP_NATIVE_VLAN,native_vlan,,binary,The assumed VLAN for untagged packets on the interface which sent the CDP packet.,0,pkt,0 18,Q_PROTO_CDP,Network Management,cdp,Cisco Discovery Protocol,10,Q_CDP_DUPLEX,duplex,,binary,Duplex configuration of the interface which sent the CDP message.,0,pkt,0 -20,Q_PROTO_CHAP,Authentication,chap,PPP Challenge Handshake Authentication Protocol,1,Q_CHAP_CHALLENGE,challenge,,binary,Challenge sent by the peer initiating the authentication process.,0,session,0 -20,Q_PROTO_CHAP,Authentication,chap,PPP Challenge Handshake Authentication Protocol,2,Q_CHAP_CHALLENGE_NAME,challenge_name,,string,Hostname of the peer initiating the authentication process.,0,session,0 -20,Q_PROTO_CHAP,Authentication,chap,PPP Challenge Handshake Authentication Protocol,3,Q_CHAP_RESPONSE,response,,binary,Response to the challenge.,0,session,0 -20,Q_PROTO_CHAP,Authentication,chap,PPP Challenge Handshake Authentication Protocol,4,Q_CHAP_RESPONSE_NAME,response_name,,string,Hostname of the peer responding to challenge.,0,session,0 -20,Q_PROTO_CHAP,Authentication,chap,PPP Challenge Handshake Authentication Protocol,5,Q_CHAP_MESSAGE_TYPE,message_type,,string,Type of message sent.,0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current version installed on the host.,0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,1,Q_CHROME_UPDATE_PLUGIN,plugin,,parent,"Parent attribute which contains the attributes plugin_id, plugin_new_version and plugin_current_version.",0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,2,Q_CHROME_UPDATE_PLUGIN_ID,plugin_id,,string,Plugin Id for the updated plugin.,0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,3,Q_CHROME_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,New version number returned by the server for the plugin.,0,session,0 -567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,4,Q_CHROME_UPDATE_PLUGIN_CURRENT_VERSION,plugin_current_version,,string,Plugin version number currently installed.,0,session,0 -22,Q_PROTO_COTP,Network Service,cotp,Connection Oriented Transfer Protocol (ISO),1,Q_COTP_TPDU_CODE,tpdu_code,,uint8,TPDU (Transport Protocol Data Unit) code as defined by the ITU in the X.224 recommendations.,0,session,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,1,Q_CUPS_PRINTER,printer,,string,URI addressing the CUPS printer.,0,session,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,2,Q_CUPS_LOCATION,location,,string,Location of the Printer.,0,session,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,3,Q_CUPS_INFORMATION,information,,string,Information on Printer.,0,session,0 -24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,4,Q_CUPS_MODEL,model,,string,Printer model.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,535,Q_MPA_EMAIL,email,,string,"Parent entry, for fields belonging to the same email.",0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -25,Q_PROTO_DAILYMOTION,Web,dailymotion,dailymotion,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment Remote Procedure Call,1,Q_DCERPC_SERVICE,service,,string,Service used.,0,session,0 -26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment Remote Procedure Call,2,Q_DCERPC_INTERFACE_UUID,interface_uuid,,string,ID of the interface.,0,session,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Repository packet version.,0,session,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Debian packet name.,0,session,0 -574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,718,Q_MPA_PACKAGE,package,,parent,Debian packet.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,23,Q_DHCP_REQUEST,request,,parent,An empty parent for the other attributes. a request per dhcp packet.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,1,Q_DHCP_CIADDR,ciaddr,,ip_addr,Current client ip address.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,2,Q_DHCP_YIADDR,yiaddr,,ip_addr,New ip address attributed to the client.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,3,Q_DHCP_SIADDR,siaddr,,ip_addr,Ip address of next server (used when booting via a server).,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,4,Q_DHCP_GIADDR,giaddr,,ip_addr,Relay agent ip address (used when booting via a relay agent).,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,5,Q_DHCP_CHADDR,chaddr,,mac_addr,Client hardware address.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,6,Q_DHCP_SNAME,sname,,string,Server host name (optional).,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,7,Q_DHCP_MESSAGE_TYPE,message_type,,string_index,Type of the dhcp message.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,8,Q_DHCP_SUBNETMASK,subnetmask,,ip_addr,Subnet mask assigned to the client.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,9,Q_DHCP_ROUTER,router,,ip_addr,List of gateway's ip addresses.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,10,Q_DHCP_DNS_SERVER,dns_server,,ip_addr,List of dns server's ip addresses.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,11,Q_DHCP_BOOTFILENAME,bootfilename,,string,File name used when initializing,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,12,Q_DHCP_OPTION,option,,parent,An empty parent attribute,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,13,Q_DHCP_OPTION_TYPE,option_type,,uint8,Option type,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,14,Q_DHCP_OPTION_VALUE,option_value,,binary,Content or value of the option,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,15,Q_DHCP_AGENT,agent,,parent,A parent attribute for agent information,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,16,Q_DHCP_CIRCUIT_ID,circuit_id,,string,A suboption that contains the circuit identifier,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,20,Q_DHCP_REMOTE_ID,remote_id,,string,The remote agent,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,17,Q_DHCP_REMOTE_ID_TYPE,remote_id_type,,string,An suboption that contains the remote agent identifier.,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,18,Q_DHCP_REMOTE_ID_SUBTYPE,remote_id_subtype,,string,Subtype for the remote agent,0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,19,Q_DHCP_IP_LEASE_TIME,ip_lease_time,,uint32,"In a server reply (dhcpoffer), a dhcp server uses this option to specify the lease time it is willing to offer. the time is in seconds",0,session,0 -29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,22,Q_DHCP_END_STATUS,end_status,,uint32,An event sent when dhcp session expires. it's equal to 1 when a release message was observed and 0 if not,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,25,Q_DIAMETER_ACCT_RECORD_NUMBER,acct_record_number,,uint32,Unique identifier for one record within a session,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,24,Q_DIAMETER_ACCT_RECORD_TYPE,acct_record_type,,uint32,Record type,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,23,Q_DIAMETER_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint64,Indicates how many octets have been sent to the port in the course of delivering this service,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,22,Q_DIAMETER_ACCT_INPUT_OCTETS,acct_input_octets,,uint64,Indicates how many octets have been received from the port over the course of this service being provided,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,21,Q_DIAMETER_ACCT_SUB_SESSION_ID,acct_sub_session_id,,uint64,Sub-session identifier,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,20,Q_DIAMETER_ACCT_MULTI_SESSION_ID,acct_multi_session_id,,string,Link between multiple accounting sessions,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,19,Q_DIAMETER_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,7,Q_DIAMETER_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,15,Q_DIAMETER_DESTINATION_HOST,destination_host,,string,Destination Diameter host for the current message,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,18,Q_DIAMETER_AUTH_REQUEST_TYPE,auth_request_type,,uint32,Requested authentication type,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,17,Q_DIAMETER_RESULT_CODE,result_code,,uint32,Indicates whether a particular Diameter request was completed successfully not,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,14,Q_DIAMETER_ORIGIN_HOST,origin_host,,string,Source Diameter host for the current message,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,6,Q_DIAMETER_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,11,Q_DIAMETER_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,10,Q_DIAMETER_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,5,Q_DIAMETER_FRAMED_IP,framed_ip,,string,IP address.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,13,Q_DIAMETER_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,16,Q_DIAMETER_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of the physical port of the NAS that is authenticating the user.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,9,Q_DIAMETER_NAS_PORT_ID,nas_port_id,,string,Indicates the physical port number of the NAS that is authenticating the user.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,8,Q_DIAMETER_NAS_IP,nas_ip,,string,IP address of the NAS originating the Access-Request,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,12,Q_DIAMETER_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,4,Q_DIAMETER_END_TO_END_ID,end_to_end_id,,uint32,Used to detect duplicate messages,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,3,Q_DIAMETER_HOP_BY_HOP_ID,hop_by_hop_id,,uint32,Used to match Diameter request and reply messages,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,2,Q_DIAMETER_APPLICATION_ID,application_id,,uint32,Identify which application the message is applicable for,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,1,Q_DIAMETER_COMMAND_CODE,command_code,,uint32,Command associated with the Diameter request,0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,26,Q_DIAMETER_COMMAND_FLAGS,command_flags,,uint8,"Bitfield which defines some attributes of a command on one byte as follows: [RPE.....] ('R'equest/answer, 'P'roxiable, 'E'rror).",0,session,0 -602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,643,Q_MPA_REQUEST,request,,parent,A Diameter request.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,x,uint32,This attribute is deprecated,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,x,parent,This attribute is deprecated,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,x,string,This attribute is deprecated,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),1,Q_DIRECTCONNECT_QUERY_WAY,query_way,,string,Way of the query.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),2,Q_DIRECTCONNECT_SEARCH_RESULT,search_result,,parent,The result of a query.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),3,Q_DIRECTCONNECT_SR_FILENAME,sr_filename,,string,The name of a file returned by a search query.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),4,Q_DIRECTCONNECT_SR_FILESIZE,sr_filesize,,string,The size of a file returned by a search query.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),5,Q_DIRECTCONNECT_SR_FILEHASH,sr_filehash,,string,The hash of a file returned by a search query.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,1,Q_DNS_DNS_ENTRY,dns_entry,,parent,"DNS entry, in a reply.",0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,18,Q_DNS_DNS_QUERY,dns_query,,parent,DNS query.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,581,Q_MPA_QUERY,query,,string,DNS Query sent.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,DNS Query type.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,2,Q_DNS_QDCOUNT,qdcount,,uint32,Number of queries.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,3,Q_DNS_ANCOUNT,ancount,,uint32,Number of answers.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,4,Q_DNS_NSCOUNT,nscount,,uint32,Number of answers in the 'authority' section.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,5,Q_DNS_ARCOUNT,arcount,,uint32,Number of additional answers.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,6,Q_DNS_TRANSACTION_ID,transaction_id,,uint32,DNS unique transaction ID.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,7,Q_DNS_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,8,Q_DNS_NAME,name,,string,Name of the request,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,9,Q_DNS_HOST,host,,string,Host name,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,10,Q_DNS_HOST_ADDR,host_addr,,ip_addr,IPV4 Host address,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,11,Q_DNS_HOST_ADDR6,host_addr6,,ip6_addr,IPV6 Host address,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,12,Q_DNS_REVERSE_ADDR,reverse_addr,,ip_addr,IP address returned to the PTR request.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,13,Q_DNS_REVERSE_ADDR6,reverse_addr6,,ip6_addr,IPv6 address returned to the PTR request.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,14,Q_DNS_HOST_TYPE,host_type,,string_index,DNS response type,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,15,Q_DNS_REPLY_CODE,reply_code,,string_index,Return Message,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,16,Q_DNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session,0 -32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,17,Q_DNS_TTL,ttl,,uint32,Time (in seconds) a DNS information returned by the server will be kept in cache.,0,session,0 -34,Q_PROTO_EBAY,Web,ebay,ebay,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -34,Q_PROTO_EBAY,Web,ebay,ebay,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -34,Q_PROTO_EBAY,Web,ebay,ebay,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -34,Q_PROTO_EBAY,Web,ebay,ebay,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,9,Q_EBUDDY_CONTACT_IM,contact_im,,string,Instant Messaging network associated to the contact,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,8,Q_EBUDDY_CONTACT_MESSAGE,contact_message,,string,User's contact IM personal message.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,7,Q_EBUDDY_CONTACT_BLOCKED,contact_blocked,,string,Specifies if the user has blocked this contact.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,6,Q_EBUDDY_CONTACT_NICKNAME,contact_nickname,,string,Contact's nickname.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,4,Q_EBUDDY_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,10,Q_EBUDDY_CHAT_IM,chat_im,,string,Instant Messaging network the message is being exchanged on.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,3,Q_EBUDDY_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,5,Q_EBUDDY_CLIENT_MESSAGE,client_message,,string,User's IM personal message.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,2,Q_EBUDDY_E_ACTION,e_action,,string,Action of the user.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,1,Q_EBUDDY_IM_NETWORK,im_network,,string,Name of the current instant messaging network used by the client.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,ebuddy,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session,0 -35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 +20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,1,Q_CHAP_CHALLENGE,challenge,,binary,Challenge sent by the peer initiating the authentication process.,0,session_mod,0 +20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,2,Q_CHAP_CHALLENGE_NAME,challenge_name,,string,Hostname of the peer initiating the authentication process.,0,session_mod,0 +20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,3,Q_CHAP_RESPONSE,response,,binary,Response to the challenge.,0,session_mod,0 +20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,4,Q_CHAP_RESPONSE_NAME,response_name,,string,Hostname of the peer responding to challenge.,0,session_mod,0 +20,Q_PROTO_CHAP,Authentication,chap,Challenge Handshake Authentication Protocol,5,Q_CHAP_MESSAGE_TYPE,message_type,,string,Type of message sent.,0,session_mod,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session_fix,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current version installed on the host.,0,session_fix,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,1,Q_CHROME_UPDATE_PLUGIN,plugin,,parent,"Parent attribute which contains the attributes plugin_id, plugin_new_version and plugin_current_version.",0,session_fix,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,2,Q_CHROME_UPDATE_PLUGIN_ID,plugin_id,,string,Plugin Id for the updated plugin.,0,session_prt,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,3,Q_CHROME_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,New version number returned by the server for the plugin.,0,session_prt,0 +567,Q_PROTO_CHROME_UPDATE,Web,chrome_update,Chrome Update,4,Q_CHROME_UPDATE_PLUGIN_CURRENT_VERSION,plugin_current_version,,string,Plugin version number currently installed.,0,session_prt,0 +22,Q_PROTO_COTP,Network Service,cotp,Connection Oriented Transfer Protocol,1,Q_COTP_TPDU_CODE,tpdu_code,,uint8,TPDU (Transport Protocol Data Unit) code as defined by the ITU in the X.224 recommendations.,0,session_mod,0 +24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,1,Q_CUPS_PRINTER,printer,,string,URI addressing the CUPS printer.,0,session_mod,0 +24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,2,Q_CUPS_LOCATION,location,,string,Location of the Printer.,0,session_mod,0 +24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,3,Q_CUPS_INFORMATION,information,,string,Information on Printer.,0,session_mod,0 +24,Q_PROTO_CUPS,Printer,cups,Common Unix Printer System,4,Q_CUPS_MODEL,model,,string,Printer model.,0,session_mod,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,535,Q_MPA_EMAIL,email,,string,"Parent entry, for fields belonging to the same email.",0,session_prt,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +25,Q_PROTO_DAILYMOTION,Web,dailymotion,Dailymotion.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment - Remote Procedure Call,1,Q_DCERPC_SERVICE,service,,string,Service used.,0,session_mod,0 +26,Q_PROTO_DCERPC,Middleware,dcerpc,Distributed Computing Environment - Remote Procedure Call,2,Q_DCERPC_INTERFACE_UUID,interface_uuid,,string,ID of the interface.,0,session_mod,0 +574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Repository packet version.,0,session_mod,0 +574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Debian packet name.,0,session_mod,0 +574,Q_PROTO_DEBIAN_UPDATE,Web,debian_update,Debian/Ubuntu Update,718,Q_MPA_PACKAGE,package,,parent,Debian packet.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,23,Q_DHCP_REQUEST,request,,parent,An empty parent for the other attributes. a request per dhcp packet.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,1,Q_DHCP_CIADDR,ciaddr,,ip_addr,Current client ip address.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,2,Q_DHCP_YIADDR,yiaddr,,ip_addr,New ip address attributed to the client.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,3,Q_DHCP_SIADDR,siaddr,,ip_addr,Ip address of next server (used when booting via a server).,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,4,Q_DHCP_GIADDR,giaddr,,ip_addr,Relay agent ip address (used when booting via a relay agent).,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,5,Q_DHCP_CHADDR,chaddr,,mac_addr,Client hardware address.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,6,Q_DHCP_SNAME,sname,,string,Server host name (optional).,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,7,Q_DHCP_MESSAGE_TYPE,message_type,,string_index,Type of the dhcp message.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,8,Q_DHCP_SUBNETMASK,subnetmask,,ip_addr,Subnet mask assigned to the client.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,9,Q_DHCP_ROUTER,router,,ip_addr,List of gateway's ip addresses.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,10,Q_DHCP_DNS_SERVER,dns_server,,ip_addr,List of dns server's ip addresses.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,11,Q_DHCP_BOOTFILENAME,bootfilename,,string,File name used when initializing,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,12,Q_DHCP_OPTION,option,,parent,An empty parent attribute,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,13,Q_DHCP_OPTION_TYPE,option_type,,uint8,Option type,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,14,Q_DHCP_OPTION_VALUE,option_value,,binary,Content or value of the option,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,15,Q_DHCP_AGENT,agent,,parent,A parent attribute for agent information,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,16,Q_DHCP_CIRCUIT_ID,circuit_id,,string,A suboption that contains the circuit identifier,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,20,Q_DHCP_REMOTE_ID,remote_id,,string,The remote agent,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,17,Q_DHCP_REMOTE_ID_TYPE,remote_id_type,,string,An suboption that contains the remote agent identifier.,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,18,Q_DHCP_REMOTE_ID_SUBTYPE,remote_id_subtype,,string,Subtype for the remote agent,0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,19,Q_DHCP_IP_LEASE_TIME,ip_lease_time,,uint32,"In a server reply (dhcpoffer), a dhcp server uses this option to specify the lease time it is willing to offer. the time is in seconds",0,session_mod,0 +29,Q_PROTO_DHCP,Network Service,dhcp,Dynamic Host Configuration Protocol,22,Q_DHCP_END_STATUS,end_status,,uint32,An event sent when dhcp session expires. it's equal to 1 when a release message was observed and 0 if not,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,25,Q_DIAMETER_ACCT_RECORD_NUMBER,acct_record_number,,uint32,Unique identifier for one record within a session,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,24,Q_DIAMETER_ACCT_RECORD_TYPE,acct_record_type,,uint32,Record type,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,23,Q_DIAMETER_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint64,Indicates how many octets have been sent to the port in the course of delivering this service,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,22,Q_DIAMETER_ACCT_INPUT_OCTETS,acct_input_octets,,uint64,Indicates how many octets have been received from the port over the course of this service being provided,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,21,Q_DIAMETER_ACCT_SUB_SESSION_ID,acct_sub_session_id,,uint64,Sub-session identifier,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,20,Q_DIAMETER_ACCT_MULTI_SESSION_ID,acct_multi_session_id,,string,Link between multiple accounting sessions,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,19,Q_DIAMETER_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,7,Q_DIAMETER_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,15,Q_DIAMETER_DESTINATION_HOST,destination_host,,string,Destination Diameter host for the current message,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,18,Q_DIAMETER_AUTH_REQUEST_TYPE,auth_request_type,,uint32,Requested authentication type,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,17,Q_DIAMETER_RESULT_CODE,result_code,,uint32,Indicates whether a particular Diameter request was completed successfully not,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,14,Q_DIAMETER_ORIGIN_HOST,origin_host,,string,Source Diameter host for the current message,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,6,Q_DIAMETER_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,11,Q_DIAMETER_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,10,Q_DIAMETER_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,5,Q_DIAMETER_FRAMED_IP,framed_ip,,string,IP address.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,13,Q_DIAMETER_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,16,Q_DIAMETER_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of the physical port of the NAS that is authenticating the user.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,9,Q_DIAMETER_NAS_PORT_ID,nas_port_id,,string,Indicates the physical port number of the NAS that is authenticating the user.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,8,Q_DIAMETER_NAS_IP,nas_ip,,string,IP address of the NAS originating the Access-Request,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,12,Q_DIAMETER_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,4,Q_DIAMETER_END_TO_END_ID,end_to_end_id,,uint32,Used to detect duplicate messages,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,3,Q_DIAMETER_HOP_BY_HOP_ID,hop_by_hop_id,,uint32,Used to match Diameter request and reply messages,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,2,Q_DIAMETER_APPLICATION_ID,application_id,,uint32,Identify which application the message is applicable for,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,1,Q_DIAMETER_COMMAND_CODE,command_code,,uint32,Command associated with the Diameter request,0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,26,Q_DIAMETER_COMMAND_FLAGS,command_flags,,uint8,"Bitfield which defines some attributes of a command on one byte as follows: [RPE.....] ('R'equest/answer, 'P'roxiable, 'E'rror).",0,session_mod,0 +602,Q_PROTO_DIAMETER,Authentication,diameter,Diameter,643,Q_MPA_REQUEST,request,,parent,A Diameter request.,0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,x,uint32,This attribute is deprecated,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,x,parent,This attribute is deprecated,0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,x,string,This attribute is deprecated,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +329,Q_PROTO_DIMP,Webmail,dimp,Dynamic Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),1,Q_DIRECTCONNECT_QUERY_WAY,query_way,,string,Way of the query.,0,session_mod,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),2,Q_DIRECTCONNECT_SEARCH_RESULT,search_result,,parent,The result of a query.,0,session_mod,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),3,Q_DIRECTCONNECT_SR_FILENAME,sr_filename,,string,The name of a file returned by a search query.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),4,Q_DIRECTCONNECT_SR_FILESIZE,sr_filesize,,string,The size of a file returned by a search query.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),5,Q_DIRECTCONNECT_SR_FILEHASH,sr_filehash,,string,The hash of a file returned by a search query.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),623,Q_MPA_FILE_HASH,file_hash,,string,Hash of the transferred file.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 +31,Q_PROTO_DIRECTCONNECT,Peer to Peer,directconnect,DirectConnect (NMDC),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,1,Q_DNS_DNS_ENTRY,dns_entry,,parent,"DNS entry, in a reply.",0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,18,Q_DNS_DNS_QUERY,dns_query,,parent,DNS query.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,581,Q_MPA_QUERY,query,,string,DNS Query sent.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,DNS Query type.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,2,Q_DNS_QDCOUNT,qdcount,,uint32,Number of queries.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,3,Q_DNS_ANCOUNT,ancount,,uint32,Number of answers.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,4,Q_DNS_NSCOUNT,nscount,,uint32,Number of answers in the 'authority' section.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,5,Q_DNS_ARCOUNT,arcount,,uint32,Number of additional answers.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,6,Q_DNS_TRANSACTION_ID,transaction_id,,uint32,DNS unique transaction ID.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,7,Q_DNS_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,8,Q_DNS_NAME,name,,string,Name of the request,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,9,Q_DNS_HOST,host,,string,Host name,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,10,Q_DNS_HOST_ADDR,host_addr,,ip_addr,IPV4 Host address,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,11,Q_DNS_HOST_ADDR6,host_addr6,,ip6_addr,IPV6 Host address,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,12,Q_DNS_REVERSE_ADDR,reverse_addr,,ip_addr,IP address returned to the PTR request.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,13,Q_DNS_REVERSE_ADDR6,reverse_addr6,,ip6_addr,IPv6 address returned to the PTR request.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,14,Q_DNS_HOST_TYPE,host_type,,string_index,DNS response type,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,15,Q_DNS_REPLY_CODE,reply_code,,string_index,Return Message,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,16,Q_DNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session_mod,0 +32,Q_PROTO_DNS,Network Service,dns,Domain Name Service,17,Q_DNS_TTL,ttl,,uint32,Time (in seconds) a DNS information returned by the server will be kept in cache.,0,session_mod,0 +34,Q_PROTO_EBAY,Web,ebay,eBay.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +34,Q_PROTO_EBAY,Web,ebay,eBay.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +34,Q_PROTO_EBAY,Web,ebay,eBay.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +34,Q_PROTO_EBAY,Web,ebay,eBay.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,9,Q_EBUDDY_CONTACT_IM,contact_im,,string,Instant Messaging network associated to the contact,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,8,Q_EBUDDY_CONTACT_MESSAGE,contact_message,,string,User's contact IM personal message.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,7,Q_EBUDDY_CONTACT_BLOCKED,contact_blocked,,string,Specifies if the user has blocked this contact.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,6,Q_EBUDDY_CONTACT_NICKNAME,contact_nickname,,string,Contact's nickname.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,4,Q_EBUDDY_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,10,Q_EBUDDY_CHAT_IM,chat_im,,string,Instant Messaging network the message is being exchanged on.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,3,Q_EBUDDY_NICKNAME,nickname,,string,"User's nickname, as seen in the ebuddy chat windows.",0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,5,Q_EBUDDY_CLIENT_MESSAGE,client_message,,string,User's IM personal message.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,2,Q_EBUDDY_E_ACTION,e_action,,string,Action of the user.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,1,Q_EBUDDY_IM_NETWORK,im_network,,string,Name of the current instant messaging network used by the client.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +269,Q_PROTO_EBUDDY,Instant Messaging,ebuddy,eBuddy.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,623,Q_MPA_FILE_HASH,file_hash,,binary,Hash of the transferred file.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,624,Q_MPA_FILE_COMPRESSION_TYPE,file_compression_type,,string,Tells the compression type.,0,session_prt,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,625,Q_MPA_FILE_IS_COMPRESSED,file_is_compressed,,uint32,Tells whether a file is compressed.,0,session_prt,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 +35,Q_PROTO_EDONKEY,Peer to Peer,edonkey,Edonkey,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0 36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,1,Q_EIGRP_OPCODE,opcode,,string_index,Operation code (as string).,0,pkt,0 36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,2,Q_EIGRP_OPCODEID,opcodeid,,uint8,Operation code.,0,pkt,0 36,Q_PROTO_EIGRP,Routing,eigrp,Enhanced Interior Gateway Routing Protocol,3,Q_EIGRP_AS_NUMBER,as_number,,uint32,The Autonomous System identifier.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,1,Q_ETH_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,session,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,2,Q_ETH_DST,dst,,mac_addr,Destination MAC address. Extracted only on the first packet of the session.,0,session,0 +43,Q_PROTO_ETH,Network Service,eth,Ethernet,1,Q_ETH_PROTOCOL,protocol,,uint16,Protocol number encapsulated in the Ethernet frame.,0,session_fix,0 +43,Q_PROTO_ETH,Network Service,eth,Ethernet,2,Q_ETH_DST,dst,,mac_addr,Destination MAC address. Extracted only on the first packet of the session.,0,session_fix,0 43,Q_PROTO_ETH,Network Service,eth,Ethernet,11,Q_ETH_DST_NET,dst_net,,mac_addr,Destination MAC address.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,3,Q_ETH_SRC,src,,mac_addr,Source MAC address. Extracted only on the first packet of the session.,0,session,0 +43,Q_PROTO_ETH,Network Service,eth,Ethernet,3,Q_ETH_SRC,src,,mac_addr,Source MAC address. Extracted only on the first packet of the session.,0,session_fix,0 43,Q_PROTO_ETH,Network Service,eth,Ethernet,12,Q_ETH_SRC_NET,src_net,,mac_addr,Source MAC address.,0,pkt,0 43,Q_PROTO_ETH,Network Service,eth,Ethernet,4,Q_ETH_XCAST,xcast,,string_index,"Communication type (broadcast, multicast, unicast).",0,pkt,0 43,Q_PROTO_ETH,Network Service,eth,Ethernet,5,Q_ETH_TRAILER,trailer,,binary,Data added to complete the Ethernet frame if required (padding bits).,0,pkt,0 43,Q_PROTO_ETH,Network Service,eth,Ethernet,6,Q_ETH_ADDRESS,address,,uint8,Matches a source or destination Ethernet address. To be used in a filter.,0,pkt,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,7,Q_ETH_MANUF_SOURCE,manuf_source,,string_index,"Manufacturer of the network card, on the source side.",0,session,0 -43,Q_PROTO_ETH,Network Service,eth,Ethernet,8,Q_ETH_MANUF_DEST,manuf_dest,,string_index,"Manufacturer of the network card, on the destination side.",0,session,0 +43,Q_PROTO_ETH,Network Service,eth,Ethernet,7,Q_ETH_MANUF_SOURCE,manuf_source,,string_index,"Manufacturer of the network card, on the source side.",0,session_fix,0 +43,Q_PROTO_ETH,Network Service,eth,Ethernet,8,Q_ETH_MANUF_DEST,manuf_dest,,string_index,"Manufacturer of the network card, on the destination side.",0,session_fix,0 43,Q_PROTO_ETH,Network Service,eth,Ethernet,10,Q_ETH_IGNORE_ENCAPSULATIONS,ignore_encapsulations,,string,"Ignoring a MPLS, 8021Q or GRE tunnel.",0,pkt,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,2,Q_ETSI_LI_LIID,liid,,string,Lawful Interception Identifier,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,3,Q_ETSI_LI_AUTHORIZATION_COUNTRY_CODE,authorization_country_code,,string,Country code which has the authorization,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,4,Q_ETSI_LI_COMMUNICATION_ID,communication_id,,parent,"Parent attribute which contains network_id, communication_id_number and delivery_country_code.",0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,5,Q_ETSI_LI_NETWORK_ID,network_id,,parent,Network Identifier.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,6,Q_ETSI_LI_OPERATOR_ID,operator_id,,string,Operator Identifier.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,7,Q_ETSI_LI_NETWORK_ELEMENT_ID,network_element_id,,string,Network element identifier.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,8,Q_ETSI_LI_ETSI_671_NEI,etsi_671_nei,,string,Network element identifier.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,9,Q_ETSI_LI_COMMUNICATION_ID_NUMBER,communication_id_number,,uint32,Communication Identifier Number.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,10,Q_ETSI_LI_DELIVERY_COUNTRY_CODE,delivery_country_code,,string,Delivery Country Code.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,11,Q_ETSI_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,12,Q_ETSI_LI_TIME_STAMP,time_stamp,,string,Timestamp.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,17,Q_ETSI_LI_MICROSECOND_TIME_STAMP_TEMP,microsecond_time_stamp_temp,,parent,The microSecondTimeStampTemp field may be used to contain timestamp in second and microsecond.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,18,Q_ETSI_LI_SECOND,second,,uint64,The field contains the timestamp in seconds.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,19,Q_ETSI_LI_MICROSECOND,microsecond,,uint32,The field contains the timestamp in microseconds.,0,session,0 -537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,16,Q_ETSI_LI_TIME_STAMP_QUALIFIER,time_stamp_qualifier,,string,The timeStampQualifier field may be used to indicate what time the timestamp represents.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,552,Q_MPA_MESSAGE,message,,string,Instant message content.,0,session,1 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,string,Whether or not the access was made through a mobile device.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,32,Q_FACEBOOK_APPLICATION_ACTION,application_action,x,string,(Deprecated) Indicates the action executed by the user.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,31,Q_FACEBOOK_APPLICATION_NAME,application_name,x,string,(Deprecated) Name of the application,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,30,Q_FACEBOOK_APPLICATION,application,x,parent,(Deprecated) Parent for all attributes related to facebook applications.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,28,Q_FACEBOOK_FEED_TEXT,feed_text,,string,feed text.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,27,Q_FACEBOOK_FEED_LIKE,feed_like,,uint32,Number of time the feed has been liked.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,26,Q_FACEBOOK_FEED_TYPE,feed_type,,string,Type of the feed.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,25,Q_FACEBOOK_FEED,feed,,parent,"Parent for all attributes related to facebook feeds. Currently, only wall-to-wall feeds are extracted.",0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,23,Q_FACEBOOK_SHARE_TEXT,share_text,,string,Text of the share message,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,24,Q_FACEBOOK_SHARE_WITH,share_with,,string,Who the share message is sent to.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,22,Q_FACEBOOK_SHARE,share,,parent,Parent for all attributes related to sharing.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,Parent for all attributes related tu user contacts.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,19,Q_FACEBOOK_COMMENT,comment,,string,Text of the comment.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,18,Q_FACEBOOK_STATUS_UPDATE,status_update,,string,Status update text.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,29,Q_FACEBOOK_LOCATION,location,,string,Location shared,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,17,Q_FACEBOOK_PROFILE_VALUE,profile_value,,string,Value of a profile entry,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,16,Q_FACEBOOK_PROFILE_NAME,profile_name,,string,Name of a profile entry,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,15,Q_FACEBOOK_PROFILE_ENTRY,profile_entry,,parent,Parent for all attributes related to facebook profile.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,14,Q_FACEBOOK_RECEIVER_SEX,receiver_sex,,string,Instant message recipient gender.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,5,Q_FACEBOOK_RECEIVER_UID,receiver_uid,,string,Instant message recipient ID.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,585,Q_MPA_RECEIVER,receiver,,string,Instant message recipient name.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,13,Q_FACEBOOK_SENDER_SEX,sender_sex,,string,Instant message sender gender.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the message sender.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,4,Q_FACEBOOK_SENDER_UID,sender_uid,,string,Instant message sender ID.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,553,Q_MPA_MESSAGE_ID,message_id,,string,Instant message ID.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,661,Q_MPA_CLIENT_TIME,client_time,,string,Instant message client timestamp.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,525,Q_MPA_CHAT,chat,,parent,Parent for all attributes related to instant messages.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,12,Q_FACEBOOK_HIGHSCHOOL,highschool,x,string,"(deprecated, see profile_entry) Name of highschool.",0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,11,Q_FACEBOOK_COLLEGE,college,x,string,"(deprecated, see profile_entry) Name of college.",0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,10,Q_FACEBOOK_EMPLOYER,employer,x,string,"(deprecated, see profile_entry) Name of employer.",0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,662,Q_MPA_SEX,sex,,string,User gender.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,7,Q_FACEBOOK_UID,uid,,string,Generic user ID.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,9,Q_FACEBOOK_LASTNAME,lastname,,string,User family name,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,8,Q_FACEBOOK_FIRSTNAME,firstname,,string,User name,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,577,Q_MPA_NAME,name,,string,Name the user.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -244,Q_PROTO_FACEBOOK,Web,facebook,Facebook,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,3,Q_FACEBOOK_APPS_APPLICATION_ACTION,application_action,,string,Indicates the action executed by the user.,0,session,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,2,Q_FACEBOOK_APPS_APPLICATION_NAME,application_name,,string,Name of the application.,0,session,0 -1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,1,Q_FACEBOOK_APPS_APPLICATION,application,,parent,Parent for all attributes related to facebook applications.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,677,Q_MPA_CONTACT_UID,contact_uid,,string,The facebook id of a contact.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Receiver ID.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,741,Q_MPA_THREAD_ID,thread_id,,string,Identifies messages belonging to a series of replies back and forth pertaining to a certain message.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session,0 -1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,3,Q_FIREFOX_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,Plugin version after update.,0,session,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,2,Q_FIREFOX_UPDATE_PLUGIN_NAME,plugin_name,,string,Name of the plugin.,0,session,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,1,Q_FIREFOX_UPDATE_PLUGIN,plugin,,parent,Parent for all attributes related to plugins.,0,session,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,703,Q_MPA_NEW_VERSION,new_version,,string,Browser version after update.,0,session,0 -556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Browser version before update.,0,session,0 -550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash-Plugin Update,703,Q_MPA_NEW_VERSION,new_version,,string,"New version number, as returned by Adobe Web Server.",0,session,0 -550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash-Plugin Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current flash-plugin version number installed on the client.,0,session,0 -568,Q_PROTO_FREEBSD_UPDATE,Web,freebsd_update,FreeBSD Updates,1,Q_FREEBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster,577,Q_MPA_NAME,name,,string,Name the user.,0,session,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,8,Q_FTP_COMMAND,command,,parent,Parent attribute grouping meta data extracted from FTP protocol.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,A FTP request.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,555,Q_MPA_METHOD,method,,string,Contains the FTP command sent.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,10,Q_FTP_METHOD_CONTENT,method_content,,string,Method parameter,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,1,Q_FTP_DATA_PORT,data_port,,uint16,Data connection TCP port.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,2,Q_FTP_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,3,Q_FTP_OFFSET,offset,,uint32,Indicates the start offset of the file transfer.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,531,Q_MPA_CONTENT_TYPE,content_type,,string,Indicates the content type of transferred file.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,First line of the server banner.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,4,Q_FTP_RETURN_MSG,return_msg,,parent,"Parent attribute, containing response from server",0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,5,Q_FTP_RETURN_CODE,return_code,,uint16,Code of server's response.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,6,Q_FTP_RETURN_CONTENT,return_content,,string,Message of server's response.,0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,7,Q_FTP_TRANSFER_DURATION,transfer_duration,,timeval,Elapsed time (in seconds) between the begining of a transfer (ftp code 150) and the first packet signaling the end with succes of the transfer (ftp code 226),0,session,0 -45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,9,Q_FTP_INDEX,index,,uint32,Identifier of the request and response in a FTP flow.,0,session,0 -46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,2,Q_ETSI_LI_LIID,liid,,string,Lawful Interception Identifier,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,3,Q_ETSI_LI_AUTHORIZATION_COUNTRY_CODE,authorization_country_code,,string,Country code which has the authorization,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,4,Q_ETSI_LI_COMMUNICATION_ID,communication_id,,parent,"Parent attribute which contains network_id, communication_id_number and delivery_country_code.",0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,5,Q_ETSI_LI_NETWORK_ID,network_id,,parent,Network Identifier.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,6,Q_ETSI_LI_OPERATOR_ID,operator_id,,string,Operator Identifier.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,7,Q_ETSI_LI_NETWORK_ELEMENT_ID,network_element_id,,string,Network element identifier.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,8,Q_ETSI_LI_ETSI_671_NEI,etsi_671_nei,,string,Network element identifier.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,9,Q_ETSI_LI_COMMUNICATION_ID_NUMBER,communication_id_number,,uint32,Communication Identifier Number.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,10,Q_ETSI_LI_DELIVERY_COUNTRY_CODE,delivery_country_code,,string,Delivery Country Code.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,11,Q_ETSI_LI_SEQUENCE_NUMBER,sequence_number,,uint32,Sequence number.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,12,Q_ETSI_LI_TIME_STAMP,time_stamp,,string,Timestamp.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,17,Q_ETSI_LI_MICROSECOND_TIME_STAMP_TEMP,microsecond_time_stamp_temp,,parent,The microSecondTimeStampTemp field may be used to contain timestamp in second and microsecond.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,18,Q_ETSI_LI_SECOND,second,,uint64,The field contains the timestamp in seconds.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,19,Q_ETSI_LI_MICROSECOND,microsecond,,uint32,The field contains the timestamp in microseconds.,0,session_mod,0 +537,Q_PROTO_ETSI_LI,Tunneling,etsi_li,ETSI Lawful Interception TS 10 232-1 V2.1.1,16,Q_ETSI_LI_TIME_STAMP_QUALIFIER,time_stamp_qualifier,,string,The timeStampQualifier field may be used to indicate what time the timestamp represents.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,552,Q_MPA_MESSAGE,message,,string,Instant message content.,0,session_prt,1 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,string,Whether or not the access was made through a mobile device.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,32,Q_FACEBOOK_APPLICATION_ACTION,application_action,x,string,(Deprecated) Indicates the action executed by the user.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,31,Q_FACEBOOK_APPLICATION_NAME,application_name,x,string,(Deprecated) Name of the application,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,30,Q_FACEBOOK_APPLICATION,application,x,parent,(Deprecated) Parent for all attributes related to facebook applications.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,28,Q_FACEBOOK_FEED_TEXT,feed_text,,string,feed text.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,27,Q_FACEBOOK_FEED_LIKE,feed_like,,uint32,Number of time the feed has been liked.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,26,Q_FACEBOOK_FEED_TYPE,feed_type,,string,Type of the feed.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,25,Q_FACEBOOK_FEED,feed,,parent,"Parent for all attributes related to facebook feeds. Currently, only wall-to-wall feeds are extracted.",0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,23,Q_FACEBOOK_SHARE_TEXT,share_text,,string,Text of the share message,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,24,Q_FACEBOOK_SHARE_WITH,share_with,,string,Who the share message is sent to.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,22,Q_FACEBOOK_SHARE,share,,parent,Parent for all attributes related to sharing.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,Parent for all attributes related tu user contacts.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,19,Q_FACEBOOK_COMMENT,comment,,string,Text of the comment.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,18,Q_FACEBOOK_STATUS_UPDATE,status_update,,string,Status update text.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,29,Q_FACEBOOK_LOCATION,location,,string,Location shared,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,17,Q_FACEBOOK_PROFILE_VALUE,profile_value,,string,Value of a profile entry,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,16,Q_FACEBOOK_PROFILE_NAME,profile_name,,string,Name of a profile entry,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,15,Q_FACEBOOK_PROFILE_ENTRY,profile_entry,,parent,Parent for all attributes related to facebook profile.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,14,Q_FACEBOOK_RECEIVER_SEX,receiver_sex,,string,Instant message recipient gender.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,5,Q_FACEBOOK_RECEIVER_UID,receiver_uid,,string,Instant message recipient ID.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,585,Q_MPA_RECEIVER,receiver,,string,Instant message recipient name.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,13,Q_FACEBOOK_SENDER_SEX,sender_sex,,string,Instant message sender gender.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the message sender.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,4,Q_FACEBOOK_SENDER_UID,sender_uid,,string,Instant message sender ID.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,553,Q_MPA_MESSAGE_ID,message_id,,string,Instant message ID.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,661,Q_MPA_CLIENT_TIME,client_time,,string,Instant message client timestamp.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,525,Q_MPA_CHAT,chat,,parent,Parent for all attributes related to instant messages.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,12,Q_FACEBOOK_HIGHSCHOOL,highschool,x,string,"(deprecated, see profile_entry) Name of highschool.",0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,11,Q_FACEBOOK_COLLEGE,college,x,string,"(deprecated, see profile_entry) Name of college.",0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,10,Q_FACEBOOK_EMPLOYER,employer,x,string,"(deprecated, see profile_entry) Name of employer.",0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,662,Q_MPA_SEX,sex,,string,User gender.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,7,Q_FACEBOOK_UID,uid,,string,Generic user ID.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,9,Q_FACEBOOK_LASTNAME,lastname,,string,User family name,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,8,Q_FACEBOOK_FIRSTNAME,firstname,,string,User name,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 +244,Q_PROTO_FACEBOOK,Web,facebook,Facebook.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,3,Q_FACEBOOK_APPS_APPLICATION_ACTION,application_action,,string,Indicates the action executed by the user.,0,session_mod,0 +1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,2,Q_FACEBOOK_APPS_APPLICATION_NAME,application_name,,string,Name of the application.,0,session_mod,0 +1280,Q_PROTO_FACEBOOK_APPS,Web,facebook_apps,Facebook Apps,1,Q_FACEBOOK_APPS_APPLICATION,application,,parent,Parent for all attributes related to facebook applications.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,677,Q_MPA_CONTACT_UID,contact_uid,,string,The facebook id of a contact.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,674,Q_MPA_RECEIVER_UID,receiver_uid,,string,Receiver ID.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,741,Q_MPA_THREAD_ID,thread_id,,string,Identifies messages belonging to a series of replies back and forth pertaining to a certain message.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +524,Q_PROTO_FACEBOOK_MAIL,Webmail,facebook_mail,facebook mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_mod,0 +1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_mod,0 +1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_mod,0 +1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session_mod,0 +1117,Q_PROTO_FACETIME,Audio/Video,facetime,Apple FaceTime,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 +556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,3,Q_FIREFOX_UPDATE_PLUGIN_NEW_VERSION,plugin_new_version,,string,Plugin version after update.,0,session_mod,0 +556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,2,Q_FIREFOX_UPDATE_PLUGIN_NAME,plugin_name,,string,Name of the plugin.,0,session_mod,0 +556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,1,Q_FIREFOX_UPDATE_PLUGIN,plugin,,parent,Parent for all attributes related to plugins.,0,session_mod,0 +556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,703,Q_MPA_NEW_VERSION,new_version,,string,Browser version after update.,0,session_mod,0 +556,Q_PROTO_FIREFOX_UPDATE,Web,firefox_update,Firefox Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Browser version before update.,0,session_mod,0 +550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash Plugin Update,703,Q_MPA_NEW_VERSION,new_version,,string,"New version number, as returned by Adobe Web Server.",0,session_mod,0 +550,Q_PROTO_FLASHPLUGIN_UPDATE,Web,flashplugin_update,Adobe Flash Plugin Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Current flash-plugin version number installed on the client.,0,session_mod,0 +568,Q_PROTO_FREEBSD_UPDATE,Web,freebsd_update,FreeBSD Updates,1,Q_FREEBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0 +320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 +320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +320,Q_PROTO_FRIENDSTER,Web,friendster,Friendster.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,8,Q_FTP_COMMAND,command,,parent,Parent attribute grouping meta data extracted from FTP protocol.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,A FTP request.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,555,Q_MPA_METHOD,method,,string,Contains the FTP command sent.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,10,Q_FTP_METHOD_CONTENT,method_content,,string,Method parameter,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,1,Q_FTP_DATA_PORT,data_port,,uint16,Data connection TCP port.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,11,Q_FTP_DATA_PORT_START_OFFSET,data_port_start_offset,,uint32,Offset to the first FTP port byte given in the PORT command.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,12,Q_FTP_DATA_PORT_END_OFFSET,data_port_end_offset,,uint32,"Offset to the first byte which is not part of the TCP port value, given in the PORT command.",0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,2,Q_FTP_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,3,Q_FTP_OFFSET,offset,,uint32,Indicates the start offset of the file transfer.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,531,Q_MPA_CONTENT_TYPE,content_type,,string,Indicates the content type of transferred file.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,First line of the server banner.,0,session_fix,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,4,Q_FTP_RETURN_MSG,return_msg,,parent,"Parent attribute, containing response from server",0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,5,Q_FTP_RETURN_CODE,return_code,,uint16,Code of server's response.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,6,Q_FTP_RETURN_CONTENT,return_content,,string,Message of server's response.,0,session_mod,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,7,Q_FTP_TRANSFER_DURATION,transfer_duration,,timeval,Elapsed time (in seconds) between the begining of a transfer (ftp code 150) and the first packet signaling the end with succes of the transfer (ftp code 226),0,session_fix,0 +45,Q_PROTO_FTP,File Server,ftp,File Transfer Protocol,9,Q_FTP_INDEX,index,,uint32,Identifier of the request and response in a FTP flow.,0,session_fix,0 +46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +46,Q_PROTO_FTP_DATA,File Server,ftp_data,File Transfer Protocol Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 48,Q_PROTO_GARP,Application Service,garp,Generic Attribute Registration Protocol,1,Q_GARP_PROTOCOL,protocol,,string_index,Application used (GVRP or GMRP).,0,pkt,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),552,Q_MPA_MESSAGE,message,,parent,GIOP message parent structure.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),608,Q_MPA_VERSION,version,,string,Current GIOP version.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),1,Q_GIOP_IOR_TYPE_ID,ior_type_id,,string,IOR object's repository id.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),3,Q_GIOP_MESSAGE_TYPE,message_type,,string,GIOP message type.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),2,Q_GIOP_REQUEST_OPERATION,request_operation,,string,Name of the request sent to the server.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),4,Q_GIOP_REQUEST_ID,request_id,,uint32,ID used to associate a reply message with a request message.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),5,Q_GIOP_OBJECT_KEY,object_key,,buffer,Identifies the object should receive the message.,0,session,0 -49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol (Corba),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,7,Q_GMAIL_REAL_SENDER_DOMAIN,real_sender_domain,,string,Domain of the email sender.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,8,Q_GMAIL_REAL_SENDER_MSGID,real_sender_msgid,,string,Email identifier.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,11,Q_GMAIL_NEXT_ATTACH_ID,next_attach_id,,string,New value for the attach_id of an attachment.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,10,Q_GMAIL_THUMBNAIL,thumbnail,,uint32,Indicates whether this attachment is an image thumbnail.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,1,Q_GMAIL_VERSION,version,,string,Gmail version used.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,2,Q_GMAIL_ACCESS_INFO,access_info,,parent,Contains Gmail access data.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,5,Q_GMAIL_LAST_ACTIVITY,last_activity,,string,Time elapsed since last account activity.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,6,Q_GMAIL_LAST_ACTIVITY_TIMESTAMP,last_activity_timestamp,,timeval,Last account activity timestamp.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,3,Q_GMAIL_CURRENT_IP_ADDRESS,current_ip_address,,ip_addr,IP address of the logged user.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,4,Q_GMAIL_OTHER_IP_ADDRESS,other_ip_address,,ip_addr,IP address of the other logged user.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,9,Q_GMAIL_SAVED,saved,,string_index,Indicates whether the draft have been saved automatically(1) or manually(2).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,677,Q_MPA_CONTACT_UID,contact_uid,,string,The GMAIL unique identifier for a contact.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail mobile version,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session,1 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -1116,Q_PROTO_GMX,Webmail,gmx,gmx,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,2,Q_GNUTELLA_SERVER,server,,string,Name of the server from which the file is downloaded.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,4,Q_GNUTELLA_FILE_ED2K,file_ed2k,,string,Hash ed2k of the downloaded file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,5,Q_GNUTELLA_FILE_SHA1,file_sha1,,string,Hash sha1 of the downloaded file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,6,Q_GNUTELLA_FILE_MD5,file_md5,,string,Hash md5 of the downloaded file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,10,Q_GNUTELLA_FILE_CHUNK_DATA,file_chunk_data,,parent,Information about downloaded data.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint16,Number of the transferred piece.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,21,Q_GNUTELLA_PEER,peer,,parent,Parent attribute containing some Gnutella Peer connection metadata. This metadata can be used to classify Gnutella connections targetted to this machine.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,19,Q_GNUTELLA_PEER_ADDR,peer_addr,,ip_addr,Gnutella peer's IPv4 address.,0,session,0 -52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,20,Q_GNUTELLA_PEER_PORT,peer_port,,,Gnutella peer's listenning port number.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -54,Q_PROTO_GOOGLE,Web,google,Google,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,1,Q_GOOGLE_ADS_GOOGLE_AD,google_ad,,parent,Parent attribute grouping ad information.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,2,Q_GOOGLE_ADS_AD_CHANNEL,ad_channel,,string,'channel' ad attribute.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,3,Q_GOOGLE_ADS_AD_URL,ad_url,,string,'url' ad attribute.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,4,Q_GOOGLE_ADS_AD_URL_FULL,ad_url_full,,string,Complete ad URL.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,5,Q_GOOGLE_ADS_AD_VISIBLE_URL,ad_visible_url,,string,'url' visible ad attribute.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,12,Q_GOOGLE_ADS_AD_PAGE,ad_page,,string,Page on which the ad is displayed.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,6,Q_GOOGLE_ADS_AD_CLIENT,ad_client,,string,Buyer of the ad.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,7,Q_GOOGLE_ADS_AD_TEXT,ad_text,,string,Ad text description.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,8,Q_GOOGLE_ADS_AD_TYPE,ad_type,,string,Ad type.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,11,Q_GOOGLE_ADS_AD_TITLE,ad_title,,string,Ad title.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,9,Q_GOOGLE_ADS_AD_BID_TYPE,ad_bid_type,,string,'bid_type' ad attribute.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,13,Q_GOOGLE_ADS_AD_STATUS,ad_status,,string,Indicates whether the ad has been displayed or clicked.,0,session,0 -247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,10,Q_GOOGLE_ADS_AD_TARGETING_TYPE,ad_targeting_type,,string,'targeting_type' ad attribute.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,1,Q_GOOGLE_EARTH_SEARCH,search,,parent,Place researched.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,2,Q_GOOGLE_EARTH_NEAR,near,,parent,Location being near place researched.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,9,Q_GOOGLE_EARTH_NEAR_TEXT,near_text,,string,Location being near place researched.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,3,Q_GOOGLE_EARTH_NEAR_RAW,near_raw,,string,Location being near place researched as indicated in the URL.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,4,Q_GOOGLE_EARTH_ITINERARY,itinerary,,parent,Itinerary researched.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,5,Q_GOOGLE_EARTH_START_ADDR,start_addr,,parent,Departure point .,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,6,Q_GOOGLE_EARTH_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,11,Q_GOOGLE_EARTH_START_ADDR_TEXT,start_addr_text,,string,Encoded departure point .,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,7,Q_GOOGLE_EARTH_END_ADDR,end_addr,,parent,Arrival point.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,8,Q_GOOGLE_EARTH_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,10,Q_GOOGLE_EARTH_END_ADDR_TEXT,end_addr_text,,string,Encoded arrival point.,0,session,0 -55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,3,Q_GOOGLE_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,1,Q_GOOGLE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,5,Q_GOOGLE_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,6,Q_GOOGLE_GROUPS_ALIAS,alias,,string,Name of the email sender.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,4,Q_GOOGLE_GROUPS_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session,1 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,1,Q_GOOGLE_MAPS_ITINERARY,itinerary,,parent,Itinerary researched.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,2,Q_GOOGLE_MAPS_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,3,Q_GOOGLE_MAPS_START_ADDR,start_addr,,string,Encoded departure point .,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,4,Q_GOOGLE_MAPS_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,5,Q_GOOGLE_MAPS_END_ADDR,end_addr,,string,Encoded arrival point.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,6,Q_GOOGLE_MAPS_SPACE,space,,parent,Parent attribut containing the geographic coordinates of the zone currently displayed by the user.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,7,Q_GOOGLE_MAPS_ZOOM,zoom,,string,Zoom level of the map.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,8,Q_GOOGLE_MAPS_SOUTH,south,,string,Latitude coordinate of South edge of the first tile that was loaded by the webpage.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,9,Q_GOOGLE_MAPS_EAST,east,,string,Longitude coordinate of East edge of the first tile that was loaded by the webpage.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,10,Q_GOOGLE_MAPS_WEST,west,,string,Longitude coordinate of West edge of the first tile that was loaded by the webpage.,0,session,0 -57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,11,Q_GOOGLE_MAPS_NORTH,north,,string,Latitude coordinate of North edge of the first tile that was loaded by the webpage.,0,session,0 -1122,Q_PROTO_GOOGLE_PLAY,Application Service,google_play,Google Play,1,Q_GOOGLE_PLAY_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou Search Engine,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou Search Engine,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou Search Engine,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -338,Q_PROTO_GOUGOU,Web,gougou,Gougou Search Engine,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,552,Q_MPA_MESSAGE,message,,parent,GIOP message parent structure.,0,session_mod,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,608,Q_MPA_VERSION,version,,string,Current GIOP version.,0,session_prt,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,1,Q_GIOP_IOR_TYPE_ID,ior_type_id,,string,IOR object's repository id.,0,session_prt,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,3,Q_GIOP_MESSAGE_TYPE,message_type,,string,GIOP message type.,0,session_prt,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,2,Q_GIOP_REQUEST_OPERATION,request_operation,,string,Name of the request sent to the server.,0,session_prt,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,4,Q_GIOP_REQUEST_ID,request_id,,uint32,ID used to associate a reply message with a request message.,0,session_prt,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,5,Q_GIOP_OBJECT_KEY,object_key,,buffer,Identifies the object should receive the message.,0,session_prt,0 +49,Q_PROTO_GIOP,Middleware,giop,General Inter-ORB Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,7,Q_GMAIL_REAL_SENDER_DOMAIN,real_sender_domain,,string,Domain of the email sender.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,8,Q_GMAIL_REAL_SENDER_MSGID,real_sender_msgid,,string,Email identifier.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,11,Q_GMAIL_NEXT_ATTACH_ID,next_attach_id,,string,New value for the attach_id of an attachment.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,10,Q_GMAIL_THUMBNAIL,thumbnail,,uint32,Indicates whether this attachment is an image thumbnail.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,1,Q_GMAIL_VERSION,version,,string,Gmail version used.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,2,Q_GMAIL_ACCESS_INFO,access_info,,parent,Contains Gmail access data.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,5,Q_GMAIL_LAST_ACTIVITY,last_activity,,string,Time elapsed since last account activity.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,6,Q_GMAIL_LAST_ACTIVITY_TIMESTAMP,last_activity_timestamp,,timeval,Last account activity timestamp.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,3,Q_GMAIL_CURRENT_IP_ADDRESS,current_ip_address,,ip_addr,IP address of the logged user.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,4,Q_GMAIL_OTHER_IP_ADDRESS,other_ip_address,,ip_addr,IP address of the other logged user.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +51,Q_PROTO_GMAIL,Webmail,gmail,Google Mail,9,Q_GMAIL_SAVED,saved,,string_index,Indicates whether the draft have been saved automatically(1) or manually(2).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +263,Q_PROTO_GMAIL_BASIC,Webmail,gmail_basic,Gmail basic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 +273,Q_PROTO_GMAIL_CHAT,Instant Messaging,gmail_chat,Google Chat,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,677,Q_MPA_CONTACT_UID,contact_uid,,string,The GMAIL unique identifier for a contact.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +280,Q_PROTO_GMAIL_MOBILE,Webmail,gmail_mobile,Gmail Mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +1116,Q_PROTO_GMX,Webmail,gmx,GMX webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_fix,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,2,Q_GNUTELLA_SERVER,server,,string,Name of the server from which the file is downloaded.,0,session_fix,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,4,Q_GNUTELLA_FILE_ED2K,file_ed2k,,string,Hash ed2k of the downloaded file.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,5,Q_GNUTELLA_FILE_SHA1,file_sha1,,string,Hash sha1 of the downloaded file.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,6,Q_GNUTELLA_FILE_MD5,file_md5,,string,Hash md5 of the downloaded file.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,10,Q_GNUTELLA_FILE_CHUNK_DATA,file_chunk_data,,parent,Information about downloaded data.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint16,Number of the transferred piece.,0,session_prt,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,21,Q_GNUTELLA_PEER,peer,,parent,Parent attribute containing some Gnutella Peer connection metadata. This metadata can be used to classify Gnutella connections targetted to this machine.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,19,Q_GNUTELLA_PEER_ADDR,peer_addr,,ip_addr,Gnutella peer's IPv4 address.,0,session_mod,0 +52,Q_PROTO_GNUTELLA,Peer to Peer,gnutella,gnutella,20,Q_GNUTELLA_PEER_PORT,peer_port,,,Gnutella peer's listenning port number.,0,session_mod,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_prt,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +54,Q_PROTO_GOOGLE,Web,google,Google.com,711,Q_MPA_QUERY_INDEX,query_index,,uint32,A number containing the index of the showed results,0,session_prt,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,1,Q_GOOGLE_ADS_GOOGLE_AD,google_ad,,parent,Parent attribute grouping ad information.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,2,Q_GOOGLE_ADS_AD_CHANNEL,ad_channel,,string,'channel' ad attribute.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,3,Q_GOOGLE_ADS_AD_URL,ad_url,,string,'url' ad attribute.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,4,Q_GOOGLE_ADS_AD_URL_FULL,ad_url_full,,string,Complete ad URL.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,5,Q_GOOGLE_ADS_AD_VISIBLE_URL,ad_visible_url,,string,'url' visible ad attribute.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,12,Q_GOOGLE_ADS_AD_PAGE,ad_page,,string,Page on which the ad is displayed.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,6,Q_GOOGLE_ADS_AD_CLIENT,ad_client,,string,Buyer of the ad.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,7,Q_GOOGLE_ADS_AD_TEXT,ad_text,,string,Ad text description.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,8,Q_GOOGLE_ADS_AD_TYPE,ad_type,,string,Ad type.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,11,Q_GOOGLE_ADS_AD_TITLE,ad_title,,string,Ad title.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,9,Q_GOOGLE_ADS_AD_BID_TYPE,ad_bid_type,,string,'bid_type' ad attribute.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,13,Q_GOOGLE_ADS_AD_STATUS,ad_status,,string,Indicates whether the ad has been displayed or clicked.,0,session_mod,0 +247,Q_PROTO_GOOGLE_ADS,Web,google_ads,Google ads,10,Q_GOOGLE_ADS_AD_TARGETING_TYPE,ad_targeting_type,,string,'targeting_type' ad attribute.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,1,Q_GOOGLE_EARTH_SEARCH,search,,parent,Place researched.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,2,Q_GOOGLE_EARTH_NEAR,near,,parent,Location being near place researched.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,9,Q_GOOGLE_EARTH_NEAR_TEXT,near_text,,string,Location being near place researched.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,3,Q_GOOGLE_EARTH_NEAR_RAW,near_raw,,string,Location being near place researched as indicated in the URL.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,4,Q_GOOGLE_EARTH_ITINERARY,itinerary,,parent,Itinerary researched.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,5,Q_GOOGLE_EARTH_START_ADDR,start_addr,,parent,Departure point .,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,6,Q_GOOGLE_EARTH_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,11,Q_GOOGLE_EARTH_START_ADDR_TEXT,start_addr_text,,string,Encoded departure point .,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,7,Q_GOOGLE_EARTH_END_ADDR,end_addr,,parent,Arrival point.,0,session_mod,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,8,Q_GOOGLE_EARTH_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,10,Q_GOOGLE_EARTH_END_ADDR_TEXT,end_addr_text,,string,Encoded arrival point.,0,session_prt,0 +55,Q_PROTO_GOOGLE_EARTH,Web,google_earth,Google Earth,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,3,Q_GOOGLE_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,1,Q_GOOGLE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,5,Q_GOOGLE_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,6,Q_GOOGLE_GROUPS_ALIAS,alias,,string,Name of the email sender.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,4,Q_GOOGLE_GROUPS_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session_mod,1 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +56,Q_PROTO_GOOGLE_GROUPS,Forum,google_groups,Google groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,1,Q_GOOGLE_MAPS_ITINERARY,itinerary,,parent,Itinerary researched.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,2,Q_GOOGLE_MAPS_START_ADDR_RAW,start_addr_raw,,string,Departure point as indicated in the URL as indicated in the URL.,0,session_prt,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,3,Q_GOOGLE_MAPS_START_ADDR,start_addr,,string,Encoded departure point .,0,session_prt,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,4,Q_GOOGLE_MAPS_END_ADDR_RAW,end_addr_raw,,string,Arrival point as indicated in the URL as indicated in the URL.,0,session_prt,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,5,Q_GOOGLE_MAPS_END_ADDR,end_addr,,string,Encoded arrival point.,0,session_prt,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,6,Q_GOOGLE_MAPS_SPACE,space,,parent,Parent attribut containing the geographic coordinates of the zone currently displayed by the user.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,7,Q_GOOGLE_MAPS_ZOOM,zoom,,string,Zoom level of the map.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,8,Q_GOOGLE_MAPS_SOUTH,south,,string,Latitude coordinate of South edge of the first tile that was loaded by the webpage.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,9,Q_GOOGLE_MAPS_EAST,east,,string,Longitude coordinate of East edge of the first tile that was loaded by the webpage.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,10,Q_GOOGLE_MAPS_WEST,west,,string,Longitude coordinate of West edge of the first tile that was loaded by the webpage.,0,session_mod,0 +57,Q_PROTO_GOOGLE_MAPS,Web,google_maps,Google Maps,11,Q_GOOGLE_MAPS_NORTH,north,,string,Latitude coordinate of North edge of the first tile that was loaded by the webpage.,0,session_mod,0 +1122,Q_PROTO_GOOGLE_PLAY,Application Service,google_play,Google Play,1,Q_GOOGLE_PLAY_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0 +338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +338,Q_PROTO_GOUGOU,Web,gougou,Gougou.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,1,Q_GRE_PROTOCOL,protocol,,string,Identifier (string) of the upper layer protocol.,0,pkt,0 -58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,2,Q_GRE_WRONG_CRC,wrong_crc,,uint16,It is a flag raised when the CRC field checksum is changed from the computed one.,0,session,0 -58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,3,Q_GRE_PROTOCOL_ID,protocol_id,,uint16,Id of the upper layer protocol.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,1,Q_GTP_VERSION,version,,uint8,Protocol Version (0 or 1).,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,2,Q_GTP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session,0 +58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,2,Q_GRE_WRONG_CRC,wrong_crc,,uint16,It is a flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 +58,Q_PROTO_GRE,Tunneling,gre,Generic Routing Encapsulation,3,Q_GRE_PROTOCOL_ID,protocol_id,,uint16,Id of the upper layer protocol.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,1,Q_GTP_VERSION,version,,uint8,Protocol Version (0 or 1).,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,2,Q_GTP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_prt,0 59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,3,Q_GTP_MESSAGE_CODE,message_code,,uint8,Message type,0,pkt,0 59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,4,Q_GTP_FLOW_LABEL,flow_label,,uint16,"Unique ID of a GTP flow, available in version 0.",0,pkt,0 59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,5,Q_GTP_SEQ,seq,,uint16,Packet sequence number.,0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,6,Q_GTP_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,6,Q_GTP_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session_mod,0 59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,7,Q_GTP_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,8,Q_GTP_MS_ADDRESS,ms_address,,ip_addr,IP address assigned to the mobile station.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,43,Q_GTP_MS_ADDRESS_PEER,ms_address_peer,,ip_addr,IP address assigned to the mobile station on the peer half-session.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,65,Q_GTP_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,66,Q_GTP_MS_ADDRESS_V6_PEER,ms_address_v6_peer,,ip6_addr,IPv6 address assigned to the mobile station on the peer half-session.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,39,Q_GTP_GSN,gsn,,parent,"GSN IP address, with a type and an address.",0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,9,Q_GTP_GSN_ADDRESS,gsn_address,,ip_addr,GSN IP address.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,45,Q_GTP_GSN_ADDRESS_CONTROL,gsn_address_control,,ip_addr,GSN Control IP address.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,46,Q_GTP_GSN_ADDRESS_DATA,gsn_address_data,,ip_addr,GSN Data IP address.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,67,Q_GTP_GSN_ADDRESS_V6,gsn_address_v6,,ip6_addr,GSN IPv6 address.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,68,Q_GTP_GSN_ADDRESS_V6_CONTROL,gsn_address_v6_control,,ip6_addr,GSN Control IPv6 address.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,69,Q_GTP_GSN_ADDRESS_V6_DATA,gsn_address_v6_data,,ip6_addr,GSN DataIPv6 address.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,38,Q_GTP_GSN_TYPE,gsn_type,,string,GSN address type.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,10,Q_GTP_ACCESS_POINT,access_point,,string,Access point name.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,11,Q_GTP_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,12,Q_GTP_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,13,Q_GTP_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,14,Q_GTP_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,15,Q_GTP_SESSION_TIME,session_time,,timeval,GTP session duration (time between create context and delete context),0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,16,Q_GTP_RAI,rai,,string,Represents the Routing Area Identity,0,session,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,8,Q_GTP_MS_ADDRESS,ms_address,,ip_addr,IP address assigned to the mobile station.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,43,Q_GTP_MS_ADDRESS_PEER,ms_address_peer,,ip_addr,IP address assigned to the mobile station on the peer half-session.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,65,Q_GTP_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,66,Q_GTP_MS_ADDRESS_V6_PEER,ms_address_v6_peer,,ip6_addr,IPv6 address assigned to the mobile station on the peer half-session.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,39,Q_GTP_GSN,gsn,,parent,"GSN IP address, with a type and an address.",0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,9,Q_GTP_GSN_ADDRESS,gsn_address,,ip_addr,GSN IP address.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,45,Q_GTP_GSN_ADDRESS_CONTROL,gsn_address_control,,ip_addr,GSN Control IP address.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,46,Q_GTP_GSN_ADDRESS_DATA,gsn_address_data,,ip_addr,GSN Data IP address.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,67,Q_GTP_GSN_ADDRESS_V6,gsn_address_v6,,ip6_addr,GSN IPv6 address.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,68,Q_GTP_GSN_ADDRESS_V6_CONTROL,gsn_address_v6_control,,ip6_addr,GSN Control IPv6 address.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,69,Q_GTP_GSN_ADDRESS_V6_DATA,gsn_address_v6_data,,ip6_addr,GSN DataIPv6 address.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,38,Q_GTP_GSN_TYPE,gsn_type,,string,GSN address type.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,10,Q_GTP_ACCESS_POINT,access_point,,string,Access point name.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,11,Q_GTP_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,12,Q_GTP_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,13,Q_GTP_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,14,Q_GTP_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,15,Q_GTP_SESSION_TIME,session_time,,timeval,GTP session duration (time between create context and delete context),0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,16,Q_GTP_RAI,rai,,string,Represents the Routing Area Identity,0,session_mod,0 59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,17,Q_GTP_NSAPI,nsapi,,uint8,Network Service Access Point Identifier is used to identify a PDP context belonging to a specific MM context IP,0,pkt,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,18,Q_GTP_MS_ADDR_TYPE,ms_addr_type,x,string_index,Type of the IP address assigned to the mobile station. This attribute is deprecated.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,19,Q_GTP_MS_ADDR_ORG,ms_addr_org,x,string_index,Organization owning the IP address assigned to the mobile station. This attribute is deprecated.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,20,Q_GTP_START_TIME,start_time,,timeval,Start date of the call,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,21,Q_GTP_STOP_TIME,stop_time,,timeval,End date of the call,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,22,Q_GTP_TEID_DATA,teid_data,,uint32,TEID data (Tunnel Endpoint Identifier),0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,23,Q_GTP_TEID_CONTROL,teid_control,,uint32,TEID control plane (Tunnel Endpoint Identifier),0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,24,Q_GTP_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,37,Q_GTP_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,36,Q_GTP_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,44,Q_GTP_QOS_RAW,qos_raw,,binary,This field contains quality of service data.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,26,Q_GTP_QOS_DELAY,qos_delay,,uint32,Specifies the quality of service delay class.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,27,Q_GTP_QOS_RELIABILITY,qos_reliability,,uint32,Specifies the quality of service reliability class.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,28,Q_GTP_QOS_PEAK,qos_peak,,uint32,Specifies the quality of service peak throughput.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,29,Q_GTP_QOS_PRECEDENCE,qos_precedence,,uint32,Specifies the quality of service precedence class.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,30,Q_GTP_QOS_MEAN,qos_mean,,uint32,Specifies the quality of service mean throughput.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,31,Q_GTP_QOS_ALLOC_RET_PRIO,qos_alloc_ret_prio,,uint32,Specifies the Allocation/Retention priority.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,40,Q_GTP_QOS_MAX_UPLINK,qos_max_uplink,,uint32,Specifies the maximum uplink throughput.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,41,Q_GTP_QOS_MAX_DOWNLINK,qos_max_downlink,,uint32,Specifies the maximum downlink throughput.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,32,Q_GTP_LOCATION_TYPE,location_type,,uint32,Terminal Location Type,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,33,Q_GTP_LOCATION,location,,string,Terminal Location,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,42,Q_GTP_LOCATION_RAW,location_raw,,binary,Terminal location in raw binary representation.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,55,Q_GTP_LOCATION_MCC,location_mcc,,string,Mobile Country Code (MCC) is part of the IMSI number with uniquely identifies a particular subscriber.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,56,Q_GTP_LOCATION_MNC,location_mnc,,string,A Mobile Network Code (MNC) is used in combination with a Mobile Country Code to uniquely identify a mobile phone.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,57,Q_GTP_LOCATION_LAC,location_lac,,string,A Location Area Code (LAC) is a unique number given to a set of base stations that are grouped together.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,58,Q_GTP_LOCATION_CI,location_ci,,string,A Cell Identity (CI) is used to uniquely identify a cell inside a location area.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,59,Q_GTP_LOCATION_SAC,location_sac,,string,A Service Area Code (SAC) is used to uniquely identify an area consisting of one or more cells belonging to the same location area.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,60,Q_GTP_LOCATION_RAI,location_rai,,string,A Routing Area Identification (RAI) is used to uniquely identify a routing area.,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,34,Q_GTP_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session,0 -59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,35,Q_GTP_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,1,Q_GTPV2_VERSION,version,,uint8,Protocol Version (2).,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,2,Q_GTPV2_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,3,Q_GTPV2_MESSAGE_CODE,message_code,,uint8,Message type.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,552,Q_MPA_MESSAGE,message,,buffer,Binary content of the message.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,4,Q_GTPV2_SEQ,seq,,uint32,Packet sequence number.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,5,Q_GTPV2_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,52,Q_GTPV2_EPS_BEARER_ID,eps_bearer_id,,uint8,Uniquely identifies traffic flow that receives a common QoS treatment.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,6,Q_GTPV2_ACCESS_POINT,access_point,,string,Access point name.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,7,Q_GTPV2_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,8,Q_GTPV2_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,9,Q_GTPV2_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,10,Q_GTPV2_GUTI,guti,,binary,Globally Unique Temporary UE Identity,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,11,Q_GTPV2_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,12,Q_GTPV2_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,13,Q_GTPV2_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,14,Q_GTPV2_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,15,Q_GTPV2_MS_ADDRESS,ms_address,,ip_addr,IPv4 address assigned to the mobile station.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,55,Q_GTPV2_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,16,Q_GTPV2_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,17,Q_GTPV2_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,18,Q_GTPV2_START_TIME,start_time,,timeval,Start date of the call,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,53,Q_GTPV2_STOP_TIME,stop_time,,timeval,End date of the call,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,54,Q_GTPV2_SESSION_DURATION,session_duration,,timeval,Call duration - not extracted,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,19,Q_GTPV2_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,20,Q_GTPV2_S1U_ENODEB_GTPU_TEID,s1u_enodeb_gtpu_teid,,uint32,S1-U eNodeB GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,21,Q_GTPV2_S1U_SGW_GTPU_TEID,s1u_sgw_gtpu_teid,,uint32,S1-U SGW GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,22,Q_GTPV2_S5_S8_SGW_GTPU_TEID,s5_s8_sgw_gtpu_teid,,uint32,S5/S8 SGW GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,23,Q_GTPV2_S5_S8_PGW_GTPU_TEID,s5_s8_pgw_gtpu_teid,,uint32,S5/S8 PGW GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,24,Q_GTPV2_S5_S8_SGW_GTPC_TEID,s5_s8_sgw_gtpc_teid,,uint32,S5/S8 SGW GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,25,Q_GTPV2_S5_S8_PGW_GTPC_TEID,s5_s8_pgw_gtpc_teid,,uint32,S5/S8 PGW GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,26,Q_GTPV2_S11_MME_GTPC_TEID,s11_mme_gtpc_teid,,uint32,S11 MME GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,27,Q_GTPV2_S11_S4_SGW_GTPC_TEID,s11_s4_sgw_gtpc_teid,,uint32,S11/S4 SGW GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,28,Q_GTPV2_S10_MME_GTPC_TEID,s10_mme_gtpc_teid,,uint32,S10 MME GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,29,Q_GTPV2_S3_MME_GTPC_TEID,s3_mme_gtpc_teid,,uint32,S3 MME GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,30,Q_GTPV2_S3_SGSN_GTPC_TEID,s3_sgsn_gtpc_teid,,uint32,S3 SGSN GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,31,Q_GTPV2_S4_SGW_GTPU_TEID,s4_sgw_gtpu_teid,,uint32,S4 SGW GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,32,Q_GTPV2_S4_SGSN_GTPU_TEID,s4_sgsn_gtpu_teid,,uint32,S4 SGSN GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,33,Q_GTPV2_S4_SGSN_GTPC_TEID,s4_sgsn_gtpc_teid,,uint32,S4 SGSN GTP-C interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,34,Q_GTPV2_S12_RNC_GTPU_TEID,s12_rnc_gtpu_teid,,uint32,S12 RNC GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,35,Q_GTPV2_S12_SGW_GTPU_TEID,s12_sgw_gtpu_teid,,uint32,SGW RNC GTP-U interface TEID,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,36,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS,s1u_enodeb_gtpu_address,,ip_addr,S1-U eNodeB GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,37,Q_GTPV2_S1U_SGW_GTPU_ADDRESS,s1u_sgw_gtpu_address,,ip_addr,S1-U SGW GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,38,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS,s5_s8_sgw_gtpu_address,,ip_addr,S5/S8 SGW GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,39,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS,s5_s8_pgw_gtpu_address,,ip_addr,S5/S8 PGW GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,40,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS,s5_s8_sgw_gtpc_address,,ip_addr,S5/S8 SGW GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,41,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS,s5_s8_pgw_gtpc_address,,ip_addr,S5/S8 PGW GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,42,Q_GTPV2_S11_MME_GTPC_ADDRESS,s11_mme_gtpc_address,,ip_addr,S11 MME GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,43,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS,s11_s4_sgw_gtpc_address,,ip_addr,S11/S4 SGW GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,44,Q_GTPV2_S10_MME_GTPC_ADDRESS,s10_mme_gtpc_address,,ip_addr,S10 MME GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,45,Q_GTPV2_S3_MME_GTPC_ADDRESS,s3_mme_gtpc_address,,ip_addr,S3 MME GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,46,Q_GTPV2_S3_SGSN_GTPC_ADDRESS,s3_sgsn_gtpc_address,,ip_addr,S3 SGSN GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,47,Q_GTPV2_S4_SGW_GTPU_ADDRESS,s4_sgw_gtpu_address,,ip_addr,S4 SGW GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,48,Q_GTPV2_S4_SGSN_GTPU_ADDRESS,s4_sgsn_gtpu_address,,ip_addr,S4 SGSN GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,49,Q_GTPV2_S4_SGSN_GTPC_ADDRESS,s4_sgsn_gtpc_address,,ip_addr,S4 SGSN GTP-C interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,50,Q_GTPV2_S12_RNC_GTPU_ADDRESS,s12_rnc_gtpu_address,,ip_addr,S12 RNC GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,51,Q_GTPV2_S12_SGW_GTPU_ADDRESS,s12_sgw_gtpu_address,,ip_addr,SGW RNC GTP-U interface IP address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,56,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS_V6,s1u_enodeb_gtpu_address_v6,,ip6_addr,S1-U eNodeB GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,57,Q_GTPV2_S1U_SGW_GTPU_ADDRESS_V6,s1u_sgw_gtpu_address_v6,,ip6_addr,S1-U SGW GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,58,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS_V6,s5_s8_sgw_gtpu_address_v6,,ip6_addr,S5/S8 SGW GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,59,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS_V6,s5_s8_pgw_gtpu_address_v6,,ip6_addr,S5/S8 PGW GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,60,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS_V6,s5_s8_sgw_gtpc_address_v6,,ip6_addr,S5/S8 SGW GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,61,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS_V6,s5_s8_pgw_gtpc_address_v6,,ip6_addr,S5/S8 PGW GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,62,Q_GTPV2_S11_MME_GTPC_ADDRESS_V6,s11_mme_gtpc_address_v6,,ip6_addr,S11 MME GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,63,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS_V6,s11_s4_sgw_gtpc_address_v6,,ip6_addr,S11/S4 SGW GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,64,Q_GTPV2_S10_MME_GTPC_ADDRESS_V6,s10_mme_gtpc_address_v6,,ip6_addr,S10 MME GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,65,Q_GTPV2_S3_MME_GTPC_ADDRESS_V6,s3_mme_gtpc_address_v6,,ip6_addr,S3 MME GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,66,Q_GTPV2_S3_SGSN_GTPC_ADDRESS_V6,s3_sgsn_gtpc_address_v6,,ip6_addr,S3 SGSN GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,67,Q_GTPV2_S4_SGW_GTPU_ADDRESS_V6,s4_sgw_gtpu_address_v6,,ip6_addr,S4 SGW GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,68,Q_GTPV2_S4_SGSN_GTPU_ADDRESS_V6,s4_sgsn_gtpu_address_v6,,ip6_addr,S4 SGSN GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,69,Q_GTPV2_S4_SGSN_GTPC_ADDRESS_V6,s4_sgsn_gtpc_address_v6,,ip6_addr,S4 SGSN GTP-C interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,70,Q_GTPV2_S12_RNC_GTPU_ADDRESS_V6,s12_rnc_gtpu_address_v6,,ip6_addr,S12 RNC GTP-U interface IPv6 address,0,session,0 -735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,71,Q_GTPV2_S12_SGW_GTPU_ADDRESS_V6,s12_sgw_gtpu_address_v6,,ip6_addr,SGW RNC GTP-U interface IPv6 address,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,1,Q_H225_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,3,Q_H225_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,5,Q_H225_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,6,Q_H225_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the codec that can be used for audio transmission,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,555,Q_MPA_METHOD,method,,string,The command,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,7,Q_H225_H245_ADDR,h245_addr,,ip_addr,Address used by h245 session.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,14,Q_H225_H245_ADDR_V6,h245_addr_v6,,ip6_addr,IP address for the H245 request embedded in H225 (this attribute is not extracted).,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,8,Q_H225_H245_PORT,h245_port,,uint16,Port used by h245 session.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,9,Q_H225_REQUEST_CALL_ID,request_call_id,,string,Call's id in the message.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,10,Q_H225_REQUEST_CALLER,request_caller,,string,Contains the identity (or the phone number) of the initiator in the message,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,11,Q_H225_REQUEST_CALLEE,request_callee,,string,Contains the identity (or the phone number) of the called party in the message.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,12,Q_H225_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,13,Q_H225_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,730,Q_MPA_AUDIO_DATA,audio_data,,string,Encoding can be used in audio flow.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,,ip6_addr,IPv6 address used for a rtcp channel (this attribute is not extracted).,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,745,Q_MPA_MEDIA_CHANNEL_ADDR_V6,media_channel_addr_v6,,ip6_addr,IPv6 address used for a rtp channel (this attribute is not extracted).,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,15,Q_H225_H245_CONTROL,h245_control,,parent,Parent attribute containing an H245 item.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,16,Q_H225_H245_REQUEST,h245_request,,parent,Contains message information for H245.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,17,Q_H225_H245_METHOD,h245_method,,string,The command for a H245 message.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,18,Q_H225_LANGUAGE,language,,string,Used language.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,19,Q_H225_PRODUCT_ID,product_id,,string,H225 product component identifier.,0,session,0 -60,Q_PROTO_H225,Audio/Video,h225,H225,608,Q_MPA_VERSION,version,,string,Version of the H225 VoIP client software.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivaluated attribute that contains the codec that can be used for audio transmission,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,555,Q_MPA_METHOD,method,,string,The command,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,x,ip6_addr,IPv6 address used for a rtcp channel (this attribute is no longer extracted).,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session,0 -61,Q_PROTO_H245,Audio/Video,h245,H245,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session,0 -1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,1,Q_H248_BINARY_CONTEXT_ID,context_id,,uint32,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session,0 -1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,1,Q_H248_TEXT_CONTEXT_ID,context_id,,string,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,748,Q_MPA_UID,uid,,buffer,Generic user ID.,0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -301,Q_PROTO_HI5,Web,hi5,Hi5,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session,0 -1561,Q_PROTO_HIGH_ENTROPY,Standard,high_entropy,High Entropy,1,Q_HIGH_ENTROPY_ENTROPY,entropy,,uint32,Computed entropy value.,0,session,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,18,Q_GTP_MS_ADDR_TYPE,ms_addr_type,x,string_index,Type of the IP address assigned to the mobile station. This attribute is deprecated.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,19,Q_GTP_MS_ADDR_ORG,ms_addr_org,x,string_index,Organization owning the IP address assigned to the mobile station. This attribute is deprecated.,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,20,Q_GTP_START_TIME,start_time,,timeval,Start date of the call,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,21,Q_GTP_STOP_TIME,stop_time,,timeval,End date of the call,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,22,Q_GTP_TEID_DATA,teid_data,,uint32,TEID data (Tunnel Endpoint Identifier),0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,23,Q_GTP_TEID_CONTROL,teid_control,,uint32,TEID control plane (Tunnel Endpoint Identifier),0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,24,Q_GTP_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,37,Q_GTP_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,36,Q_GTP_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,44,Q_GTP_QOS_RAW,qos_raw,,binary,This field contains quality of service data.,0,session_prt,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,26,Q_GTP_QOS_DELAY,qos_delay,,uint32,Specifies the quality of service delay class.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,27,Q_GTP_QOS_RELIABILITY,qos_reliability,,uint32,Specifies the quality of service reliability class.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,28,Q_GTP_QOS_PEAK,qos_peak,,uint32,Specifies the quality of service peak throughput.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,29,Q_GTP_QOS_PRECEDENCE,qos_precedence,,uint32,Specifies the quality of service precedence class.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,30,Q_GTP_QOS_MEAN,qos_mean,,uint32,Specifies the quality of service mean throughput.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,31,Q_GTP_QOS_ALLOC_RET_PRIO,qos_alloc_ret_prio,,uint32,Specifies the Allocation/Retention priority.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,40,Q_GTP_QOS_MAX_UPLINK,qos_max_uplink,,uint32,Specifies the maximum uplink throughput.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,41,Q_GTP_QOS_MAX_DOWNLINK,qos_max_downlink,,uint32,Specifies the maximum downlink throughput.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,32,Q_GTP_LOCATION_TYPE,location_type,,uint32,Terminal Location Type,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,33,Q_GTP_LOCATION,location,,string,Terminal Location,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,42,Q_GTP_LOCATION_RAW,location_raw,,binary,Terminal location in raw binary representation.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,55,Q_GTP_LOCATION_MCC,location_mcc,,string,Mobile Country Code (MCC) is part of the IMSI number with uniquely identifies a particular subscriber.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,56,Q_GTP_LOCATION_MNC,location_mnc,,string,A Mobile Network Code (MNC) is used in combination with a Mobile Country Code to uniquely identify a mobile phone.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,57,Q_GTP_LOCATION_LAC,location_lac,,string,A Location Area Code (LAC) is a unique number given to a set of base stations that are grouped together.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,58,Q_GTP_LOCATION_CI,location_ci,,string,A Cell Identity (CI) is used to uniquely identify a cell inside a location area.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,59,Q_GTP_LOCATION_SAC,location_sac,,string,A Service Area Code (SAC) is used to uniquely identify an area consisting of one or more cells belonging to the same location area.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,60,Q_GTP_LOCATION_RAI,location_rai,,string,A Routing Area Identification (RAI) is used to uniquely identify a routing area.,0,session_fix,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,34,Q_GTP_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session_mod,0 +59,Q_PROTO_GTP,Tunneling,gtp,GPRS Tunneling Protocol,35,Q_GTP_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,643,Q_MPA_REQUEST,request,,parent,A GTP message.,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,1,Q_GTPV2_VERSION,version,,uint8,Protocol Version (2).,0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,2,Q_GTPV2_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,3,Q_GTPV2_MESSAGE_CODE,message_code,,uint8,Message type.,0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,552,Q_MPA_MESSAGE,message,,buffer,Binary content of the message.,0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,4,Q_GTPV2_SEQ,seq,,uint32,Packet sequence number.,0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,5,Q_GTPV2_TEID,teid,,uint32,"Transaction ID, available in version 1.",0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,52,Q_GTPV2_EPS_BEARER_ID,eps_bearer_id,,uint8,Uniquely identifies traffic flow that receives a common QoS treatment.,0,session_prt,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,6,Q_GTPV2_ACCESS_POINT,access_point,,string,Access point name.,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,7,Q_GTPV2_IMEI,imei,,string,Unique ID of a mobile station equipment w/o SV (IMEI only).,0,session_fix,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,8,Q_GTPV2_IMEI_SV,imei_sv,,string,Unique ID of a mobile station equipment (IMEI+SV).,0,session_fix,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,9,Q_GTPV2_IMEI_TAC,imei_tac,,string,Unique ID of a mobile station equipment (TAC code only).,0,session_fix,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,10,Q_GTPV2_GUTI,guti,,binary,Globally Unique Temporary UE Identity,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,11,Q_GTPV2_IMSI,imsi,,string,Unique ID of a mobile station SIM card (International Mobile Subscriber Identity).,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,12,Q_GTPV2_IMSI_CC,imsi_cc,,uint32,Mobile Country Code,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,13,Q_GTPV2_IMSI_NC,imsi_nc,,uint32,Mobile National Code,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,14,Q_GTPV2_MSISDN,msisdn,,string,Unique mobile phone number identifying a given mobile station (Mobile Station International ISDN Number).,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,15,Q_GTPV2_MS_ADDRESS,ms_address,,ip_addr,IPv4 address assigned to the mobile station.,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,55,Q_GTPV2_MS_ADDRESS_V6,ms_address_v6,,ip6_addr,IPv6 address assigned to the mobile station.,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,16,Q_GTPV2_REPLY_CAUSE_TXT,reply_cause_txt,,string_index,Return message following a create context request,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,17,Q_GTPV2_REPLY_CAUSE_CODE,reply_cause_code,,uint32,Return code following a create context request,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,18,Q_GTPV2_START_TIME,start_time,,timeval,Start date of the call,0,session_fix,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,53,Q_GTPV2_STOP_TIME,stop_time,,timeval,End date of the call,0,session_fix,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,54,Q_GTPV2_SESSION_DURATION,session_duration,,timeval,Call duration - not extracted,0,session_fix,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,19,Q_GTPV2_CREATE_CTXT_DELAY,create_ctxt_delay,,timeval,Time for PDP context creation,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,20,Q_GTPV2_S1U_ENODEB_GTPU_TEID,s1u_enodeb_gtpu_teid,,uint32,S1-U eNodeB GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,21,Q_GTPV2_S1U_SGW_GTPU_TEID,s1u_sgw_gtpu_teid,,uint32,S1-U SGW GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,22,Q_GTPV2_S5_S8_SGW_GTPU_TEID,s5_s8_sgw_gtpu_teid,,uint32,S5/S8 SGW GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,23,Q_GTPV2_S5_S8_PGW_GTPU_TEID,s5_s8_pgw_gtpu_teid,,uint32,S5/S8 PGW GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,24,Q_GTPV2_S5_S8_SGW_GTPC_TEID,s5_s8_sgw_gtpc_teid,,uint32,S5/S8 SGW GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,25,Q_GTPV2_S5_S8_PGW_GTPC_TEID,s5_s8_pgw_gtpc_teid,,uint32,S5/S8 PGW GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,26,Q_GTPV2_S11_MME_GTPC_TEID,s11_mme_gtpc_teid,,uint32,S11 MME GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,27,Q_GTPV2_S11_S4_SGW_GTPC_TEID,s11_s4_sgw_gtpc_teid,,uint32,S11/S4 SGW GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,28,Q_GTPV2_S10_MME_GTPC_TEID,s10_mme_gtpc_teid,,uint32,S10 MME GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,29,Q_GTPV2_S3_MME_GTPC_TEID,s3_mme_gtpc_teid,,uint32,S3 MME GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,30,Q_GTPV2_S3_SGSN_GTPC_TEID,s3_sgsn_gtpc_teid,,uint32,S3 SGSN GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,31,Q_GTPV2_S4_SGW_GTPU_TEID,s4_sgw_gtpu_teid,,uint32,S4 SGW GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,32,Q_GTPV2_S4_SGSN_GTPU_TEID,s4_sgsn_gtpu_teid,,uint32,S4 SGSN GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,33,Q_GTPV2_S4_SGSN_GTPC_TEID,s4_sgsn_gtpc_teid,,uint32,S4 SGSN GTP-C interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,34,Q_GTPV2_S12_RNC_GTPU_TEID,s12_rnc_gtpu_teid,,uint32,S12 RNC GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,35,Q_GTPV2_S12_SGW_GTPU_TEID,s12_sgw_gtpu_teid,,uint32,SGW RNC GTP-U interface TEID,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,36,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS,s1u_enodeb_gtpu_address,,ip_addr,S1-U eNodeB GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,37,Q_GTPV2_S1U_SGW_GTPU_ADDRESS,s1u_sgw_gtpu_address,,ip_addr,S1-U SGW GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,38,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS,s5_s8_sgw_gtpu_address,,ip_addr,S5/S8 SGW GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,39,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS,s5_s8_pgw_gtpu_address,,ip_addr,S5/S8 PGW GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,40,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS,s5_s8_sgw_gtpc_address,,ip_addr,S5/S8 SGW GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,41,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS,s5_s8_pgw_gtpc_address,,ip_addr,S5/S8 PGW GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,42,Q_GTPV2_S11_MME_GTPC_ADDRESS,s11_mme_gtpc_address,,ip_addr,S11 MME GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,43,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS,s11_s4_sgw_gtpc_address,,ip_addr,S11/S4 SGW GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,44,Q_GTPV2_S10_MME_GTPC_ADDRESS,s10_mme_gtpc_address,,ip_addr,S10 MME GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,45,Q_GTPV2_S3_MME_GTPC_ADDRESS,s3_mme_gtpc_address,,ip_addr,S3 MME GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,46,Q_GTPV2_S3_SGSN_GTPC_ADDRESS,s3_sgsn_gtpc_address,,ip_addr,S3 SGSN GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,47,Q_GTPV2_S4_SGW_GTPU_ADDRESS,s4_sgw_gtpu_address,,ip_addr,S4 SGW GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,48,Q_GTPV2_S4_SGSN_GTPU_ADDRESS,s4_sgsn_gtpu_address,,ip_addr,S4 SGSN GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,49,Q_GTPV2_S4_SGSN_GTPC_ADDRESS,s4_sgsn_gtpc_address,,ip_addr,S4 SGSN GTP-C interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,50,Q_GTPV2_S12_RNC_GTPU_ADDRESS,s12_rnc_gtpu_address,,ip_addr,S12 RNC GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,51,Q_GTPV2_S12_SGW_GTPU_ADDRESS,s12_sgw_gtpu_address,,ip_addr,SGW RNC GTP-U interface IP address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,56,Q_GTPV2_S1U_ENODEB_GTPU_ADDRESS_V6,s1u_enodeb_gtpu_address_v6,,ip6_addr,S1-U eNodeB GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,57,Q_GTPV2_S1U_SGW_GTPU_ADDRESS_V6,s1u_sgw_gtpu_address_v6,,ip6_addr,S1-U SGW GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,58,Q_GTPV2_S5_S8_SGW_GTPU_ADDRESS_V6,s5_s8_sgw_gtpu_address_v6,,ip6_addr,S5/S8 SGW GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,59,Q_GTPV2_S5_S8_PGW_GTPU_ADDRESS_V6,s5_s8_pgw_gtpu_address_v6,,ip6_addr,S5/S8 PGW GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,60,Q_GTPV2_S5_S8_SGW_GTPC_ADDRESS_V6,s5_s8_sgw_gtpc_address_v6,,ip6_addr,S5/S8 SGW GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,61,Q_GTPV2_S5_S8_PGW_GTPC_ADDRESS_V6,s5_s8_pgw_gtpc_address_v6,,ip6_addr,S5/S8 PGW GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,62,Q_GTPV2_S11_MME_GTPC_ADDRESS_V6,s11_mme_gtpc_address_v6,,ip6_addr,S11 MME GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,63,Q_GTPV2_S11_S4_SGW_GTPC_ADDRESS_V6,s11_s4_sgw_gtpc_address_v6,,ip6_addr,S11/S4 SGW GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,64,Q_GTPV2_S10_MME_GTPC_ADDRESS_V6,s10_mme_gtpc_address_v6,,ip6_addr,S10 MME GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,65,Q_GTPV2_S3_MME_GTPC_ADDRESS_V6,s3_mme_gtpc_address_v6,,ip6_addr,S3 MME GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,66,Q_GTPV2_S3_SGSN_GTPC_ADDRESS_V6,s3_sgsn_gtpc_address_v6,,ip6_addr,S3 SGSN GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,67,Q_GTPV2_S4_SGW_GTPU_ADDRESS_V6,s4_sgw_gtpu_address_v6,,ip6_addr,S4 SGW GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,68,Q_GTPV2_S4_SGSN_GTPU_ADDRESS_V6,s4_sgsn_gtpu_address_v6,,ip6_addr,S4 SGSN GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,69,Q_GTPV2_S4_SGSN_GTPC_ADDRESS_V6,s4_sgsn_gtpc_address_v6,,ip6_addr,S4 SGSN GTP-C interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,70,Q_GTPV2_S12_RNC_GTPU_ADDRESS_V6,s12_rnc_gtpu_address_v6,,ip6_addr,S12 RNC GTP-U interface IPv6 address,0,session_mod,0 +735,Q_PROTO_GTPV2,Tunneling,gtpv2,GPRS Tunneling Protocol version 2,71,Q_GTPV2_S12_SGW_GTPU_ADDRESS_V6,s12_sgw_gtpu_address_v6,,ip6_addr,SGW RNC GTP-U interface IPv6 address,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,1,Q_H225_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,3,Q_H225_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,5,Q_H225_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,6,Q_H225_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the codec that can be used for audio transmission,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,555,Q_MPA_METHOD,method,,string,The command,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,7,Q_H225_H245_ADDR,h245_addr,,ip_addr,Address used by h245 session.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,14,Q_H225_H245_ADDR_V6,h245_addr_v6,,ip6_addr,IP address for the H245 request embedded in H225 (this attribute is not extracted).,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,8,Q_H225_H245_PORT,h245_port,,uint16,Port used by h245 session.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,9,Q_H225_REQUEST_CALL_ID,request_call_id,,string,Call's id in the message.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,10,Q_H225_REQUEST_CALLER,request_caller,,string,Contains the identity (or the phone number) of the initiator in the message,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,11,Q_H225_REQUEST_CALLEE,request_callee,,string,Contains the identity (or the phone number) of the called party in the message.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,12,Q_H225_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,13,Q_H225_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,730,Q_MPA_AUDIO_DATA,audio_data,,string,Encoding can be used in audio flow.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,,ip6_addr,IPv6 address used for a rtcp channel (this attribute is not extracted).,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,745,Q_MPA_MEDIA_CHANNEL_ADDR_V6,media_channel_addr_v6,,ip6_addr,IPv6 address used for a rtp channel (this attribute is not extracted).,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session_prt,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,15,Q_H225_H245_CONTROL,h245_control,,parent,Parent attribute containing an H245 item.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,16,Q_H225_H245_REQUEST,h245_request,,parent,Contains message information for H245.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,17,Q_H225_H245_METHOD,h245_method,,string,The command for a H245 message.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,18,Q_H225_LANGUAGE,language,,string,Used language.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,19,Q_H225_PRODUCT_ID,product_id,,string,H225 product component identifier.,0,session_mod,0 +60,Q_PROTO_H225,Audio/Video,h225,H225,608,Q_MPA_VERSION,version,,string,Version of the H225 VoIP client software.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivaluated attribute that contains the codec that can be used for audio transmission,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,643,Q_MPA_REQUEST,request,,parent,Contains message information.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,555,Q_MPA_METHOD,method,,string,The command,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,734,Q_MPA_OLC,olc,,parent,Contains information about open logical canal.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,729,Q_MPA_LOGICAL_CHANNEL_NUMBER,logical_channel_number,,uint16,Number identifying a logical channel.,0,session_prt,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,731,Q_MPA_MEDIA_CONTROL_CHANNEL,media_control_channel,,parent,Contains information for a rtcp channel.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,732,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR,media_control_channel_addr,,ip_addr,Address used for a rtcp channel.,0,session_prt,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,746,Q_MPA_MEDIA_CONTROL_CHANNEL_ADDR_V6,media_control_channel_addr_v6,x,ip6_addr,IPv6 address used for a rtcp channel (this attribute is no longer extracted).,0,session_prt,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,733,Q_MPA_MEDIA_CONTROL_CHANNEL_PORT,media_control_channel_port,,uint16,Port used for a rtcp channel.,0,session_prt,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,726,Q_MPA_MEDIA_CHANNEL,media_channel,,parent,Contains information for a rtp channel.,0,session_mod,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,727,Q_MPA_MEDIA_CHANNEL_ADDR,media_channel_addr,,ip_addr,Address used for a rtp channel.,0,session_prt,0 +61,Q_PROTO_H245,Audio/Video,h245,H245,728,Q_MPA_MEDIA_CHANNEL_PORT,media_channel_port,,uint16,Port used for a rtp channel.,0,session_prt,0 +1187,Q_PROTO_H248_BINARY,Audio/Video,h248_binary,h248 Protocol (Megaco) in binary mode,1,Q_H248_BINARY_CONTEXT_ID,context_id,,uint32,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session_mod,0 +1188,Q_PROTO_H248_TEXT,Audio/Video,h248_text,h248 Protocol (Megaco) in text mode,1,Q_H248_TEXT_CONTEXT_ID,context_id,,string,"The context ID identifies the context. It is assigned by the Media Gateway. It can be an integer, -"" (null context), ""*"" (all) or ""$"" (choose).""",0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,748,Q_MPA_UID,uid,,buffer,Generic user ID.,0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +301,Q_PROTO_HI5,Web,hi5,Hi5.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0 +1561,Q_PROTO_HIGH_ENTROPY,Standard,high_entropy,High Entropy,1,Q_HIGH_ENTROPY_ENTROPY,entropy,,uint32,Computed entropy value.,0,session_mod,0 65,Q_PROTO_HPELLC,Network Service,hpellc,HP Extended Local-Link Control,1,Q_HPELLC_DST_XSAP,dst_xsap,,uint16,SAP destination address.,0,pkt,0 65,Q_PROTO_HPELLC,Network Service,hpellc,HP Extended Local-Link Control,2,Q_HPELLC_SRC_XSAP,src_xsap,,uint16,SAP source address.,0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Cisco Hot Standby Router Protocol(HSRP),1,Q_HSRP_VIRTUAL_ADDR,virtual_addr,,ip_addr,Virtual IP address used by the group.,0,session,0 -66,Q_PROTO_HSRP,Routing,hsrp,Cisco Hot Standby Router Protocol(HSRP),2,Q_HSRP_OPCODE,opcode,,string_index,"The operation code (HELLO, COUP, ...).",0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Cisco Hot Standby Router Protocol(HSRP),3,Q_HSRP_STATE,state,,string_index,Describes the current state of the router sending the message.,0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Cisco Hot Standby Router Protocol(HSRP),4,Q_HSRP_PRIORITY,priority,,uint8,"This field is used to elect the active and standby routers. When comparing priorities of two different routers, the router with the numerically higher priority wins.",0,pkt,0 -66,Q_PROTO_HSRP,Routing,hsrp,Cisco Hot Standby Router Protocol(HSRP),5,Q_HSRP_GROUP,group,,uint8,This field identifies the standby group.,0,pkt,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,794,Q_MPA_NOCACHING_OVERRIDE,nocaching_override,,uint8,Attribute used to specify if it's unsafe to cache the final classification path of the current session. This value overrides the proto_feature flag defined in the layer raising this event.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,1,Q_HTTP_REQUEST,request,,parent,An HTTP request.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,2,Q_HTTP_SERVER,server,,string,"Normalized web server name, including lowercase transformation and suffix cleaning.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,66,Q_HTTP_HOST,host,,string,Host name value extracted from the Host header.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,90,Q_HTTP_HOST_START_OFFSET,host_start_offset,,uint32,Offset to the first Host HTTP header value byte in the TCP stream. The Host start is located in the current packet (the offset value is positive).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,91,Q_HTTP_HOST_END_OFFSET,host_end_offset,,int32,"Offset to the first byte which is not part of the Host HTTP header value, in the TCP stream. This value might be less or equal to zero if the Host actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,3,Q_HTTP_LOCATION,location,,string,Destination address where the client is redirected.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,4,Q_HTTP_REFERER,referer,,string,Source address from which the client obtained the requested URI.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,51,Q_HTTP_REFERER_PATH,referer_path,,string,Source address from which the client obtained the requested URI without query parameters.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,52,Q_HTTP_REFERER_SERVER,referer_server,,string,Contains the host or the website name of the referer.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,5,Q_HTTP_URI,uri,,string,"Normalized URL form (path + filename + parameters) of a web resource, with UNRESERVED percent-encoded characters decoding (RFC3986).",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,50,Q_HTTP_URI_PATH,uri_path,,string,"Normalized URL path (path + filename) of a web resource, without query parameters. The path is normalized by decoding the UNRESERVED percent-encoded characters found in the URL (RFC3986).",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,6,Q_HTTP_URI_FULL,uri_full,,string,Complete raw and encoded URL form (hostname part + path + filename + parameters) of a web resource.,1,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,72,Q_HTTP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the TCP stream. The URI start is located in the current packet (the offset value is positive).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,73,Q_HTTP_URI_END_OFFSET,uri_end_offset,,int32,"Offset to the first byte which is not part of the URI, in the TCP stream. This value might be less or equal to zero when the URI actually ends on a previous packet, in which the Request-line did not terminate (HTTP/1.x\r\n"").""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Software used by the client to access the web page.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,74,Q_HTTP_USER_AGENT_START_OFFSET,user_agent_start_offset,,uint32,Offset to the first User-agent byte in the TCP stream. The User-agent start is located in the current packet (the offset value is positive).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,75,Q_HTTP_USER_AGENT_END_OFFSET,user_agent_end_offset,,int32,"Offset to the first byte which is not part of the User-agent, in the TCP stream. This value might be less or equal to zero if the User-agent actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,11,Q_HTTP_MIME_TYPE,mime_type,,string,Content type of the request or the web page.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,12,Q_HTTP_CONTENT_DISPOSITION,content_disposition,,string,Information related to the disposition of the content present on the web page.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,13,Q_HTTP_FORWARD_ADDR,forward_addr,,ip_addr,DNS address to which the client is redirected.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,57,Q_HTTP_FORWARD_REDLINE,forward_redline,,ip_addr,"Value of the http header x-forward-redline"", used for forwarding.""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,555,Q_MPA_METHOD,method,,string,HTTP command sent by the client.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,14,Q_HTTP_PROXY_AUTH,proxy_auth,,string,Authentication type on the proxy.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,15,Q_HTTP_PROXY_LOGIN,proxy_login,,string,Login used for proxy authentication.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,16,Q_HTTP_PROXY_REALM,proxy_realm,,string,Parameter used for proxy authentication.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,17,Q_HTTP_SMB_CLIENT,smb_client,,string,Name of the computer during NTLM authentication (Windows environment).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,18,Q_HTTP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,19,Q_HTTP_RTT,rtt,,timeval,"Server response time, calculated between the HTTP Request, and the client acknowledgement of the first non-empty HTTP Response packet.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,20,Q_HTTP_DIRECTORY,directory,,string,Directory of the accessed web page.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,21,Q_HTTP_COOKIE,cookie,,string,HTTP connection cookies.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,22,Q_HTTP_CODE,code,,uint32,Return code sent by the server.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,27,Q_HTTP_CONTENT_LEN,content_len,,uint64,Contains the content length of the HTTP request/response.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,28,Q_HTTP_X_CONTENT_URN,x_content_urn,,string,Contains the different hashes of downloaded file (used by Gnutella).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,29,Q_HTTP_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session,1 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,632,Q_MPA_CONTENT_RAW,content_raw,,buffer,uncompressed HTTP content.,1,session,1 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,30,Q_HTTP_CONTENT_RANGE,content_range,,string,Contains information about the size and offset of downloaded file (used by Gnutella).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,31,Q_HTTP_CHARSET,charset,,string,Contains the name of the used charset.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,32,Q_HTTP_WAP_PROFILE,wap_profile,,string,url link that contains the specification of the used handset.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,71,Q_HTTP_HEADER_RAW,header_raw,,string,One HTTP header line (field and value).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,33,Q_HTTP_HEADER,header,,parent,One HTTP header line.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,34,Q_HTTP_HEADER_NAME,header_name,,string,One HTTP header line (field).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,35,Q_HTTP_HEADER_VALUE,header_value,,string,One HTTP header line (value).,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,76,Q_HTTP_HEADER_END_OFFSET,header_end_offset,,uint32,Offset to the first byte after the last HTTP Header-line (\r\n included). This is an offset to the '\r' character of the second carriage return.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,36,Q_HTTP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,549,Q_MPA_IS_WEBDAV,is_webdav,,uint8,Indicates that the protocol is WebDAV.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,78,Q_HTTP_AUTH_USERNAME,auth_username,,string,Login used in the HTTP Authorization request extension for authentication. The supported authentication methods are Basic and Digest.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,79,Q_HTTP_AUTH_PASSWORD,auth_password,,string,Password used in the HTTP request Authorization extension. The only supported authentication method for password extraction is Basic.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,80,Q_HTTP_FILE_COMPLETED,file_completed,,uint8,Indicates that the request or response is completed.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,37,Q_HTTP_PART,part,,parent,Contains the whole uploaded data for POSTs.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,41,Q_HTTP_PART_HEADER,part_header,,parent,Groups part_header_name and part_header_value.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,42,Q_HTTP_PART_HEADER_NAME,part_header_name,,string,Name of a header line.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,43,Q_HTTP_PART_HEADER_VALUE,part_header_value,,string,Value of a header line.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,39,Q_HTTP_PART_CONTENT,part_content,,buffer,Uploaded data.,1,session,1 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,38,Q_HTTP_PART_NAME,part_name,,string,Name of uploaded data or field.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,40,Q_HTTP_PART_FILENAME,part_filename,,string,Name of uploaded file.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,7,Q_HTTP_URI_PARAM,uri_param,,parent,URL parameter.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,8,Q_HTTP_URI_PARAM_NAME,uri_param_name,,string,URL parameter name.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,9,Q_HTTP_URI_PARAM_VALUE,uri_param_value,,string,URL parameter value.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,47,Q_HTTP_INDEX,index,,uint32,Identifier of the request and response in a HTTP flow.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,54,Q_HTTP_RESPONSE_TS,response_ts,,timeval,Timestamp of the first packet of a HTTP response.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,53,Q_HTTP_REQUEST_TS,request_ts,,timeval,Timestamp of the first packet of a HTTP query.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,58,Q_HTTP_CONNECTION_HEADER,connection_header,,string,"Options in the content of Connection:"" general header desired by the sender for that particular connection.""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,81,Q_HTTP_UPGRADE_HEADER,upgrade_header,,string,"Protocoles in the content of Upgrade:"" general header.""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,59,Q_HTTP_HEADER_END,header_end,,no_type,Token marking end of the HTTP header.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,60,Q_HTTP_REQUEST_SIZE,request_size,,uint64,Contains the total length in bytes of the request or the response (including HTTP headers). This attribute is computed at the end of the request or response.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,61,Q_HTTP_DECHUNK_SIZE,dechunk_size,,uint32,Contains length of dechunked data.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,62,Q_HTTP_DECOMPRESS_SIZE,decompress_size,,uint32,Contains length of decompressed data.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,69,Q_HTTP_CONTENT_ENCODING,content_encoding,,string,Contains content encoding format.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,70,Q_HTTP_ACCEPT_ENCODING,accept_encoding,,string,Contains the accepted encodings.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,773,Q_MPA_IMAGE,image,,parent,"Parent entry, empty, for image metadata related attributes.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,774,Q_MPA_IMAGE_TYPE,image_type,,string,File format.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,776,Q_MPA_IMAGE_WIDTH,image_width,,uint32,Width of the video in pixels.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,777,Q_MPA_IMAGE_HEIGHT,image_height,,uint32,Height of the video in pixels.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,779,Q_MPA_IMAGE_INDEX_COLOR,image_index_color,,uint8,Use indexed colors.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,780,Q_MPA_IMAGE_ALPHA_CHANNEL,image_alpha_channel,,uint8,Use an alpha channel.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,785,Q_MPA_VIDEO_URL,video_url,,string,URL of the binary video file referenced by the current metadata.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,786,Q_MPA_NTLM_DOMAIN,ntlm_domain,,string,"Domain"" attribute of the NTLM protocol.""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,787,Q_MPA_NTLM_USER,ntlm_user,,string,"User"" attribute of the NTLM protocol.""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,788,Q_MPA_NTLM_WORKSTATION,ntlm_workstation,,string,"Workstation"" attribute of the NTLM protocol.""",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,82,Q_HTTP_URI_DECODED,uri_decoded,,string,"Normalized and decoded URL form (path + filename + parameters) of a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,83,Q_HTTP_URI_GET_DECODED,uri_get_decoded,,string,"Normalized and decoded URL form (path + filename + parameters) of an HTTP GET request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,84,Q_HTTP_URI_POST_DECODED,uri_post_decoded,,string,"Normalized and decoded URL form (path + filename + parameters) of an HTTP POST request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,85,Q_HTTP_URI_PATH_DECODED,uri_path_decoded,,string,"Normalized and decoded URL path (path + filename) of a web resource, without query parameters. The result includes ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,86,Q_HTTP_POST_VARIABLE_DECODED,post_variable_decoded,,string,"Extracts the 'name/value' metadata from each web-form CGI parameter found in a POST HTTP Request. The name and value strings are normalized including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass). The parameters are extracted from the URL of the request, and/or from the 'x-www-form-urlencoded' POST data.",0,session,0 -67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,88,Q_HTTP_LAST_MODIFIED,last_modified,,string,Contains the date and time at which the origin server believes the variant was last modified.,0,session,0 -750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),1,Q_ICA_APPLICATION,application,,string,Application name used by the client.,0,session,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),5,Q_ICA_APPLICATION_UTF16,application_utf16,,buffer,Application name used by the client in UTF-16 format.,0,session,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),2,Q_ICA_LOGIN_INFO,login_info,,string,"Login information for the given connection (host, username, network domain).",0,session,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),6,Q_ICA_LOGIN_INFO_UTF16,login_info_utf16,,buffer,"Login information for the given connection (host, username, network domain), in UTF-16 format.",0,session,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),3,Q_ICA_PRIORITY,priority,,uint8,Priority of the service.,0,session,0 -69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),4,Q_ICA_SERVICE,service,,string,Service used by the client.,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,1,Q_ICAP_X_CLIENT_IP_RESPMOD_REQ,x_client_ip_respmod_req,,string,"The IP source address of the encapsulated HTTP request, when using the X-Client-IP ICAP header extension (draft-stecher-icap-subid-00).",0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,6,Q_ICAP_REFERER_RESPMOD_REQ,referer_respmod_req,,string,The HTTP referer embedded in the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,9,Q_ICAP_CONTENT_TYPE_RESPMOD_REQ,content_type_respmod_req,,string,The HTTP content_type embedded in the http response part of the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,7,Q_ICAP_USER_AGENT_RESPMOD_REQ,user_agent_respmod_req,,string,The HTTP user_agent embedded in the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,5,Q_ICAP_HOST_RESPMOD_REQ,host_respmod_req,,string,The HTTP host embedded in the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,4,Q_ICAP_URI_RESPMOD_REQ,uri_respmod_req,,string,The HTTP uri embedded in the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,3,Q_ICAP_METHOD_RESPMOD_REQ,method_respmod_req,,string,The HTTP method embedded in the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,8,Q_ICAP_CODE_RESPMOD_REQ,code_respmod_req,,uint32,The HTTP code embedded in the ICAP RESPMOD request (see http).,0,session,0 -1103,Q_PROTO_ICAP,Web,icap,ICAP,2,Q_ICAP_REQUEST_RESPMOD_REQ,request_respmod_req,,parent,An ICAP RESPMOD request,0,session,0 -1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud,604,Q_MPA_SERVICE,service,,string,Current iCloud service..,0,session,0 -1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud,643,Q_MPA_REQUEST,request,,parent,Parent structure containing iCloud service metadata.,0,session,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,1,Q_ICMP_TYPE,type,,string_index,ICMP message type (as string).,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,2,Q_ICMP_TYPEVAL,typeval,,uint8,ICMP message type (as integer).,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,3,Q_ICMP_CODE,code,,uint8,Message code.,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,4,Q_ICMP_MESSAGE,message,,string_index,The ICMP message.,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,5,Q_ICMP_SEQ,seq,,uint16,Sequence number of the echo packet.,0,pkt,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,6,Q_ICMP_RTT,rtt,,timeval,Response time of a ping command.,0,session,0 -70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message,7,Q_ICMP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 +66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,1,Q_HSRP_VIRTUAL_ADDR,virtual_addr,,ip_addr,Virtual IP address used by the group.,0,session_fix,0 +66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,2,Q_HSRP_OPCODE,opcode,,string_index,"The operation code (HELLO, COUP, ...).",0,pkt,0 +66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,3,Q_HSRP_STATE,state,,string_index,Describes the current state of the router sending the message.,0,pkt,0 +66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,4,Q_HSRP_PRIORITY,priority,,uint8,"This field is used to elect the active and standby routers. When comparing priorities of two different routers, the router with the numerically higher priority wins.",0,pkt,0 +66,Q_PROTO_HSRP,Routing,hsrp,Hot Standby Router Protocol,5,Q_HSRP_GROUP,group,,uint8,This field identifies the standby group.,0,pkt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,794,Q_MPA_NOCACHING_OVERRIDE,nocaching_override,,uint8,Attribute used to specify if it's unsafe to cache the final classification path of the current session. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,1,Q_HTTP_REQUEST,request,,parent,An HTTP request.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,2,Q_HTTP_SERVER,server,,string,"Normalized web server name, including lowercase transformation and suffix cleaning.",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,66,Q_HTTP_HOST,host,,string,Host name value extracted from the Host header.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,90,Q_HTTP_HOST_START_OFFSET,host_start_offset,,uint32,Offset to the first Host HTTP header value byte in the TCP stream. The Host start is located in the current packet (the offset value is positive).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,91,Q_HTTP_HOST_END_OFFSET,host_end_offset,,int32,"Offset to the first byte which is not part of the Host HTTP header value, in the TCP stream. This value might be less or equal to zero if the Host actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,3,Q_HTTP_LOCATION,location,,string,Destination address where the client is redirected.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,4,Q_HTTP_REFERER,referer,,string,Source address from which the client obtained the requested URI.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,51,Q_HTTP_REFERER_PATH,referer_path,,string,Source address from which the client obtained the requested URI without query parameters.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,52,Q_HTTP_REFERER_SERVER,referer_server,,string,Contains the host or the website name of the referer.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,5,Q_HTTP_URI,uri,,string,"Normalized URL form (path + filename + parameters) of a web resource, with UNRESERVED percent-encoded characters decoding (RFC3986).",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,50,Q_HTTP_URI_PATH,uri_path,,string,"Normalized URL path (path + filename) of a web resource, without query parameters. The path is normalized by decoding the UNRESERVED percent-encoded characters found in the URL (RFC3986).",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,6,Q_HTTP_URI_FULL,uri_full,,string,Complete raw and encoded URL form (hostname part + path + filename + parameters) of a web resource.,1,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,72,Q_HTTP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the TCP stream. The URI start is located in the current packet (the offset value is positive).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,73,Q_HTTP_URI_END_OFFSET,uri_end_offset,,int32,"Offset to the first byte which is not part of the URI, in the TCP stream. This value might be less or equal to zero when the URI actually ends on a previous packet, in which the Request-line did not terminate (HTTP/1.x\r\n"").""",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Software used by the client to access the web page.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,74,Q_HTTP_USER_AGENT_START_OFFSET,user_agent_start_offset,,uint32,Offset to the first User-agent byte in the TCP stream. The User-agent start is located in the current packet (the offset value is positive).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,75,Q_HTTP_USER_AGENT_END_OFFSET,user_agent_end_offset,,int32,"Offset to the first byte which is not part of the User-agent, in the TCP stream. This value might be less or equal to zero if the User-agent actually ends on a previous packet, in which the Header-line did not terminate (\r\n"").""",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,11,Q_HTTP_MIME_TYPE,mime_type,,string,Content type of the request or the web page.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,12,Q_HTTP_CONTENT_DISPOSITION,content_disposition,,string,Information related to the disposition of the content present on the web page.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,13,Q_HTTP_FORWARD_ADDR,forward_addr,,ip_addr,DNS address to which the client is redirected.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,57,Q_HTTP_FORWARD_REDLINE,forward_redline,,ip_addr,"Value of the http header x-forward-redline"", used for forwarding.""",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,555,Q_MPA_METHOD,method,,string,HTTP command sent by the client.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,14,Q_HTTP_PROXY_AUTH,proxy_auth,,string,Authentication type on the proxy.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,15,Q_HTTP_PROXY_LOGIN,proxy_login,,string,Login used for proxy authentication.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,16,Q_HTTP_PROXY_REALM,proxy_realm,,string,Parameter used for proxy authentication.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,17,Q_HTTP_SMB_CLIENT,smb_client,,string,Name of the computer during NTLM authentication (Windows environment).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,18,Q_HTTP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,19,Q_HTTP_RTT,rtt,,timeval,"Server response time, calculated between the HTTP Request, and the client acknowledgement of the first non-empty HTTP Response packet.",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,20,Q_HTTP_DIRECTORY,directory,,string,Directory of the accessed web page.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,21,Q_HTTP_COOKIE,cookie,,string,HTTP connection cookies.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,22,Q_HTTP_CODE,code,,uint32,Return code sent by the server.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,27,Q_HTTP_CONTENT_LEN,content_len,,uint64,Contains the content length of the HTTP request/response.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,28,Q_HTTP_X_CONTENT_URN,x_content_urn,,string,Contains the different hashes of downloaded file (used by Gnutella).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,29,Q_HTTP_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,632,Q_MPA_CONTENT_RAW,content_raw,,buffer,uncompressed HTTP content.,1,session_mod,1 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,30,Q_HTTP_CONTENT_RANGE,content_range,,string,Contains information about the size and offset of downloaded file (used by Gnutella).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,31,Q_HTTP_CHARSET,charset,,string,Contains the name of the used charset.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,32,Q_HTTP_WAP_PROFILE,wap_profile,,string,url link that contains the specification of the used handset.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,71,Q_HTTP_HEADER_RAW,header_raw,,string,One HTTP header line (field and value).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,33,Q_HTTP_HEADER,header,,parent,One HTTP header line.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,34,Q_HTTP_HEADER_NAME,header_name,,string,One HTTP header line (field).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,35,Q_HTTP_HEADER_VALUE,header_value,,string,One HTTP header line (value).,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,76,Q_HTTP_HEADER_END_OFFSET,header_end_offset,,uint32,Offset to the first byte after the last HTTP Header-line (\r\n included). This is an offset to the '\r' character of the second carriage return.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,36,Q_HTTP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,549,Q_MPA_IS_WEBDAV,is_webdav,,uint8,Indicates that the protocol is WebDAV.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,78,Q_HTTP_AUTH_USERNAME,auth_username,,string,Login used in the HTTP Authorization request extension for authentication. The supported authentication methods are Basic and Digest.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,79,Q_HTTP_AUTH_PASSWORD,auth_password,,string,Password used in the HTTP request Authorization extension. The only supported authentication method for password extraction is Basic.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,80,Q_HTTP_FILE_COMPLETED,file_completed,,uint8,Indicates that the request or response is completed.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,37,Q_HTTP_PART,part,,parent,Contains the whole uploaded data for POSTs.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,41,Q_HTTP_PART_HEADER,part_header,,parent,Groups part_header_name and part_header_value.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,42,Q_HTTP_PART_HEADER_NAME,part_header_name,,string,Name of a header line.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,43,Q_HTTP_PART_HEADER_VALUE,part_header_value,,string,Value of a header line.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,39,Q_HTTP_PART_CONTENT,part_content,,buffer,Uploaded data.,1,session_mod,1 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,38,Q_HTTP_PART_NAME,part_name,,string,Name of uploaded data or field.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,40,Q_HTTP_PART_FILENAME,part_filename,,string,Name of uploaded file.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,7,Q_HTTP_URI_PARAM,uri_param,,parent,URL parameter.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,8,Q_HTTP_URI_PARAM_NAME,uri_param_name,,string,URL parameter name.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,9,Q_HTTP_URI_PARAM_VALUE,uri_param_value,,string,URL parameter value.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,47,Q_HTTP_INDEX,index,,uint32,Identifier of the request and response in a HTTP flow.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,54,Q_HTTP_RESPONSE_TS,response_ts,,timeval,Timestamp of the first packet of a HTTP response.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,53,Q_HTTP_REQUEST_TS,request_ts,,timeval,Timestamp of the first packet of a HTTP query.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,58,Q_HTTP_CONNECTION_HEADER,connection_header,,string,"Options in the content of Connection:"" general header desired by the sender for that particular connection.""",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,81,Q_HTTP_UPGRADE_HEADER,upgrade_header,,string,"Protocoles in the content of Upgrade:"" general header.""",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,59,Q_HTTP_HEADER_END,header_end,,no_type,Token marking end of the HTTP header.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,60,Q_HTTP_REQUEST_SIZE,request_size,,uint64,Contains the total length in bytes of the request or the response (including HTTP headers). This attribute is computed at the end of the request or response.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,61,Q_HTTP_DECHUNK_SIZE,dechunk_size,,uint32,Contains length of dechunked data.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,62,Q_HTTP_DECOMPRESS_SIZE,decompress_size,,uint32,Contains length of decompressed data.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,69,Q_HTTP_CONTENT_ENCODING,content_encoding,,string,Contains content encoding format.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,70,Q_HTTP_ACCEPT_ENCODING,accept_encoding,,string,Contains the accepted encodings.,0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,773,Q_MPA_IMAGE,image,,parent,"Parent entry, empty, for image metadata related attributes.",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,774,Q_MPA_IMAGE_TYPE,image_type,,string,File format.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,776,Q_MPA_IMAGE_WIDTH,image_width,,uint32,Width of the video in pixels.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,777,Q_MPA_IMAGE_HEIGHT,image_height,,uint32,Height of the video in pixels.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,779,Q_MPA_IMAGE_INDEX_COLOR,image_index_color,,uint8,Use indexed colors.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,780,Q_MPA_IMAGE_ALPHA_CHANNEL,image_alpha_channel,,uint8,Use an alpha channel.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,781,Q_MPA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,784,Q_MPA_VIDEO_TYPE,video_type,,string,File format.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,782,Q_MPA_VIDEO_BRAND,video_brand,,string,Normalized video format specification identifier.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,772,Q_MPA_VIDEO_AVGDATARATE,video_avgdatarate,,uint32,Average video bitrate in kilobits per second.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,799,Q_MPA_VIDEO_MANGLED,video_mangled,,uint8,The video stream is mangled (probably encrypted).,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,785,Q_MPA_VIDEO_URL,video_url,,string,URL of the binary video file referenced by the current metadata.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,786,Q_MPA_NTLM_DOMAIN,ntlm_domain,,string,"Domain"" attribute of the NTLM protocol.""",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,787,Q_MPA_NTLM_USER,ntlm_user,,string,"User"" attribute of the NTLM protocol.""",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,788,Q_MPA_NTLM_WORKSTATION,ntlm_workstation,,string,"Workstation"" attribute of the NTLM protocol.""",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,82,Q_HTTP_URI_DECODED,uri_decoded,,string,"Normalized and decoded URL form (path + filename + parameters) of a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,83,Q_HTTP_URI_GET_DECODED,uri_get_decoded,,string,"Normalized and decoded URL form (path + filename + parameters) of an HTTP GET request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,84,Q_HTTP_URI_POST_DECODED,uri_post_decoded,,string,"Normalized and decoded URL form (path + filename + parameters) of an HTTP POST request to a web resource, including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,85,Q_HTTP_URI_PATH_DECODED,uri_path_decoded,,string,"Normalized and decoded URL path (path + filename) of a web resource, without query parameters. The result includes ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass).",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,86,Q_HTTP_POST_VARIABLE_DECODED,post_variable_decoded,,string,"Extracts the 'name/value' metadata from each web-form CGI parameter found in a POST HTTP Request. The name and value strings are normalized including ALL percent-encoded characters full decoding (double pass process) and '+' characters decoding (single pass). The parameters are extracted from the URL of the request, and/or from the 'x-www-form-urlencoded' POST data.",0,session_prt,0 +67,Q_PROTO_HTTP,Web,http,HyperText Transfer Protocol,88,Q_HTTP_LAST_MODIFIED,last_modified,,string,Contains the date and time at which the origin server believes the variant was last modified.,0,session_prt,0 +750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +750,Q_PROTO_HTTP_TUNNEL,Tunneling,http_tunnel,HTTP Tunnel,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),1,Q_ICA_APPLICATION,application,,string,Application name used by the client.,0,session_mod,0 +69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),5,Q_ICA_APPLICATION_UTF16,application_utf16,,buffer,Application name used by the client in UTF-16 format.,0,session_mod,0 +69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),2,Q_ICA_LOGIN_INFO,login_info,,string,"Login information for the given connection (host, username, network domain).",0,session_fix,0 +69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),6,Q_ICA_LOGIN_INFO_UTF16,login_info_utf16,,buffer,"Login information for the given connection (host, username, network domain), in UTF-16 format.",0,session_fix,0 +69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),3,Q_ICA_PRIORITY,priority,,uint8,Priority of the service.,0,session_mod,0 +69,Q_PROTO_ICA,Thin Client,ica,Independant Computing Architecture (Citrix),4,Q_ICA_SERVICE,service,,string,Service used by the client.,0,session_mod,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,1,Q_ICAP_X_CLIENT_IP_RESPMOD_REQ,x_client_ip_respmod_req,,string,"The IP source address of the encapsulated HTTP request, when using the X-Client-IP ICAP header extension (draft-stecher-icap-subid-00).",0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,6,Q_ICAP_REFERER_RESPMOD_REQ,referer_respmod_req,,string,The HTTP referer embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,9,Q_ICAP_CONTENT_TYPE_RESPMOD_REQ,content_type_respmod_req,,string,The HTTP content_type embedded in the http response part of the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,7,Q_ICAP_USER_AGENT_RESPMOD_REQ,user_agent_respmod_req,,string,The HTTP user_agent embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,5,Q_ICAP_HOST_RESPMOD_REQ,host_respmod_req,,string,The HTTP host embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,4,Q_ICAP_URI_RESPMOD_REQ,uri_respmod_req,,string,The HTTP uri embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,3,Q_ICAP_METHOD_RESPMOD_REQ,method_respmod_req,,string,The HTTP method embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,8,Q_ICAP_CODE_RESPMOD_REQ,code_respmod_req,,uint32,The HTTP code embedded in the ICAP RESPMOD request (see http).,0,session_prt,0 +1103,Q_PROTO_ICAP,Web,icap,Internet Content Adaptation Protocol,2,Q_ICAP_REQUEST_RESPMOD_REQ,request_respmod_req,,parent,An ICAP RESPMOD request,0,session_mod,0 +1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),604,Q_MPA_SERVICE,service,,string,Current iCloud service..,0,session_mod,0 +1126,Q_PROTO_ICLOUD,Application Service,icloud,iCloud (Apple),643,Q_MPA_REQUEST,request,,parent,Parent structure containing iCloud service metadata.,0,session_mod,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,1,Q_ICMP_TYPE,type,,string_index,ICMP message type (as string).,0,pkt,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,2,Q_ICMP_TYPEVAL,typeval,,uint8,ICMP message type (as integer).,0,pkt,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,3,Q_ICMP_CODE,code,,uint8,Message code.,0,pkt,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,4,Q_ICMP_MESSAGE,message,,string_index,The ICMP message.,0,pkt,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,5,Q_ICMP_SEQ,seq,,uint16,Sequence number of the echo packet.,0,pkt,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,6,Q_ICMP_RTT,rtt,,timeval,Response time of a ping command.,0,session_mod,0 +70,Q_PROTO_ICMP,Network Service,icmp,Internet Control Message Protocol,7,Q_ICMP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,1,Q_ICMP6_TYPE,type,,uint8,ICMP message type.,0,pkt,0 71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,2,Q_ICMP6_CODE,code,,uint8,Message code.,0,pkt,0 71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,552,Q_MPA_MESSAGE,message,,string_index,ICMP message type (in string representation).,0,pkt,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,3,Q_ICMP6_RTT,rtt,,timeval,Response time of a ping command.,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,13,Q_ICMP6_TARGET_ADDRESS,target_address,,ip6_addr,The IP address of the target of the solicitation.,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,8,Q_ICMP6_LINK_LAYER_ADDR,link_layer_addr,,parent,"The source or target link-layer address, depending on type.",0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,9,Q_ICMP6_LINK_LAYER_ADDR_TYPE,link_layer_addr_type,,uint32,Type of link-layer address (source or target).,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,10,Q_ICMP6_LINK_LAYER_RAW_ADDR,link_layer_raw_addr,,buffer,Link-layer address in binary format.,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,11,Q_ICMP6_LINK_LAYER_MAC_ADDR,link_layer_mac_addr,,mac_addr,Link-layer address in MAC format (if applicable).,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,12,Q_ICMP6_LINK_LAYER_EUI64_ADDR,link_layer_eui64_addr,,uint64,Link-layer address in EUI64 format (if applicable).,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,5,Q_ICMP6_NDP_PREFIX,ndp_prefix,,parent,Prefix information for address autoconfiguration.,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,6,Q_ICMP6_PREFIX,prefix,,ip6_addr,An IP address or a prefix of an IP address.,0,session,0 -71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,7,Q_ICMP6_PREFIX_LEN,prefix_len,,uint8,The number of leading bits in the Prefix that are valid.,0,session,0 -73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,1,Q_IDENT_SERVER_PORT,server_port,,uint32,TCP server's port,0,session,0 -73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,2,Q_IDENT_CLIENT_PORT,client_port,,uint32,TCP client's port,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,1,Q_IGMP_TYPE,type,,string_index,Message type.,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,2,Q_IGMP_ADDRESS,address,,ip_addr,Multicast address.,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,3,Q_IGMP_CHANNEL,channel,,string_index,Flow name (relative to multicast address).,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,4,Q_IGMP_RECORD,record,,parent,A parent attribute,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,5,Q_IGMP_RECORD_TYPE,record_type,,string_index,"the record type. the Change to include mode"" value corresponds to a LEAVE and ""Change to exclude mode"" corresponds to a JOIN""",0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,6,Q_IGMP_RECORD_NSOURCES,record_nsources,,uint16,Number of the sources in this record,0,session,0 -74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,7,Q_IGMP_RECORD_MADDRESS,record_maddress,,ip_addr,The multicast address in this record,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,1,Q_IMAP_MSGLIST_ATTACH,msglist_attach,,parent,Parent entry for attached file in a list of emails.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,2,Q_IMAP_MSGLIST_MIME_TYPE,msglist_mime_type,,string,Content type of the email.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,3,Q_IMAP_MSGLIST_ATTACH_MIME_TYPE,msglist_attach_mime_type,,string,Content type of the attachment (in a list).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,4,Q_IMAP_MSGLIST_ATTACH_FILENAME,msglist_attach_filename,,string,Name of file attached to message (in a list).,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of attached file.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,518,Q_MPA_ATTACH_MIME_TYPE,attach_mime_type,,string,Content type of the attachment.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session,1 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session,0 -75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,3,Q_IMP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,2,Q_IMP_VERSION,version,,string,IMP version deployed.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,1,Q_IP_SRC_ADDR,src_addr,,ip_addr,Source IP address.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,2,Q_IP_DST_ADDR,dst_addr,,ip_addr,Destination IP address.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,3,Q_IP_PROTOCOL,protocol,,string_index,Contains the name the upper layer protocol.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,4,Q_IP_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,3,Q_ICMP6_RTT,rtt,,timeval,Response time of a ping command.,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,13,Q_ICMP6_TARGET_ADDRESS,target_address,,ip6_addr,The IP address of the target of the solicitation.,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,8,Q_ICMP6_LINK_LAYER_ADDR,link_layer_addr,,parent,"The source or target link-layer address, depending on type.",0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,9,Q_ICMP6_LINK_LAYER_ADDR_TYPE,link_layer_addr_type,,uint32,Type of link-layer address (source or target).,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,10,Q_ICMP6_LINK_LAYER_RAW_ADDR,link_layer_raw_addr,,buffer,Link-layer address in binary format.,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,11,Q_ICMP6_LINK_LAYER_MAC_ADDR,link_layer_mac_addr,,mac_addr,Link-layer address in MAC format (if applicable).,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,12,Q_ICMP6_LINK_LAYER_EUI64_ADDR,link_layer_eui64_addr,,uint64,Link-layer address in EUI64 format (if applicable).,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,5,Q_ICMP6_NDP_PREFIX,ndp_prefix,,parent,Prefix information for address autoconfiguration.,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,6,Q_ICMP6_PREFIX,prefix,,ip6_addr,An IP address or a prefix of an IP address.,0,session_mod,0 +71,Q_PROTO_ICMP6,Network Service,icmp6,Internet Control Message Protocol for IP6,7,Q_ICMP6_PREFIX_LEN,prefix_len,,uint8,The number of leading bits in the Prefix that are valid.,0,session_mod,0 +73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,1,Q_IDENT_SERVER_PORT,server_port,,uint32,TCP server's port,0,session_fix,0 +73,Q_PROTO_IDENT,Authentication,ident,Identification Protocol,2,Q_IDENT_CLIENT_PORT,client_port,,uint32,TCP client's port,0,session_fix,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,1,Q_IGMP_TYPE,type,,string_index,Message type.,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,2,Q_IGMP_ADDRESS,address,,ip_addr,Multicast address.,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,3,Q_IGMP_CHANNEL,channel,,string_index,Flow name (relative to multicast address).,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,4,Q_IGMP_RECORD,record,,parent,A parent attribute,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,5,Q_IGMP_RECORD_TYPE,record_type,,string_index,"the record type. the Change to include mode"" value corresponds to a LEAVE and ""Change to exclude mode"" corresponds to a JOIN""",0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,6,Q_IGMP_RECORD_NSOURCES,record_nsources,,uint16,Number of the sources in this record,0,session_mod,0 +74,Q_PROTO_IGMP,Network Service,igmp,Internet Group Management Protocol,7,Q_IGMP_RECORD_MADDRESS,record_maddress,,ip_addr,The multicast address in this record,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,1,Q_IMAP_MSGLIST_ATTACH,msglist_attach,,parent,Parent entry for attached file in a list of emails.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,2,Q_IMAP_MSGLIST_MIME_TYPE,msglist_mime_type,,string,Content type of the email.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,3,Q_IMAP_MSGLIST_ATTACH_MIME_TYPE,msglist_attach_mime_type,,string,Content type of the attachment (in a list).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,4,Q_IMAP_MSGLIST_ATTACH_FILENAME,msglist_attach_filename,,string,Name of file attached to message (in a list).,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of attached file.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established.,0,session_fix,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,518,Q_MPA_ATTACH_MIME_TYPE,attach_mime_type,,string,Content type of the attachment.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0 +75,Q_PROTO_IMAP,Mail,imap,Internet Message Access Protocol version 4,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,3,Q_IMP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 +77,Q_PROTO_IMP,Webmail,imp,Internet Messaging Program,2,Q_IMP_VERSION,version,,string,IMP version deployed.,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,1,Q_IP_SRC_ADDR,src_addr,,ip_addr,Source IP address.,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,2,Q_IP_DST_ADDR,dst_addr,,ip_addr,Destination IP address.,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,3,Q_IP_PROTOCOL,protocol,,string_index,Contains the name the upper layer protocol.,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,4,Q_IP_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session_fix,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,5,Q_IP_TOS,tos,,uint8,Type of service of the packet.,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,6,Q_IP_DSCP,dscp,,uint8,Differentiated Services Field Codepoints.,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,7,Q_IP_SRC_NET,src_net,,ip_addr,"Source network address, given a specific mask.",0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,8,Q_IP_DST_NET,dst_net,,ip_addr,"Destination network address, given a specific mask.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,9,Q_IP_SRC_CLASS,src_class,,char,Class of the source IP address.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,10,Q_IP_DST_CLASS,dst_class,,char,Class of the destination IP address.,0,session,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,9,Q_IP_SRC_CLASS,src_class,,char,Class of the source IP address.,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,10,Q_IP_DST_CLASS,dst_class,,char,Class of the destination IP address.,0,session_fix,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,11,Q_IP_DEFRAG_LEN,defrag_len,,uint16,Total length of the data contained in a defragmented packet without its IP header.,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,12,Q_IP_TTL,ttl,,uint8,Remaining number of router(s) this packet can pass through before being dropped.,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,13,Q_IP_CLIENT_NET,client_net,,ip_addr,"Client subnet address, given a specific mask.",0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,14,Q_IP_SERVER_NET,server_net,,ip_addr,"Server subnet address, given a specific mask.",0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,15,Q_IP_CLIENT_ADDR,client_addr,,ip_addr,Client IP address.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,16,Q_IP_SERVER_ADDR,server_addr,,ip_addr,Server IP address.,0,session,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,15,Q_IP_CLIENT_ADDR,client_addr,,ip_addr,Client IP address.,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,16,Q_IP_SERVER_ADDR,server_addr,,ip_addr,Server IP address.,0,session_fix,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,17,Q_IP_FRAG_ID,frag_id,,uint16,Fragment identifier.,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,18,Q_IP_SRC_ADDR32,src_addr32,,uint32,IP source address (32 bits).,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,19,Q_IP_DST_ADDR32,dst_addr32,,uint32,Destination IP address (32 bits).,0,pkt,0 @@ -1462,1283 +1467,1284 @@ protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_ 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,22,Q_IP_PKT_LEN,pkt_len,,uint16,"Total packet length, IP header included.",0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,23,Q_IP_ADDRESS,address,,uint8,Attribute matching a source or destination IP address. To be used in a filter.,0,pkt,0 81,Q_PROTO_IP,Network Service,ip,Internet Protocol,24,Q_IP_NETADDR,netaddr,,uint8,Attribute matching a source or destination IP subnet. Can be used in a filter.,0,pkt,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,25,Q_IP_SRC_ADDR_MD5,src_addr_md5,,binary,A MD5 sum on IP Source address,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,26,Q_IP_DST_ADDR_MD5,dst_addr_md5,,binary,A MD5 sum on IP destination address,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,27,Q_IP_SRC_DST_ADDR,src_dst_addr,,binary,A binary buffer containing a concatenation of IP source address and destination address,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,28,Q_IP_SRC_DST_SPORT_PROTO,src_dst_sport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address and the protocol",0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,29,Q_IP_SRC_DST_DPORT_PROTO,src_dst_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the destination port and the protocol",0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,30,Q_IP_SRC_DST_SPORT_DPORT_PROTO,src_dst_sport_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the source port, the destination port and the protocol",0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,33,Q_IP_FIRST_FRAGMENT,first_fragment,,uint8,A flag which is set when the current packet is fragmented and it is a first fragment,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,34,Q_IP_FRAGMENT_LOST,fragment_lost,,uint8,A flag indicating the lost of the previous fragment.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,35,Q_IP_FRAGMENT_LOST_SIZE,fragment_lost_size,,uint32,Length of the last lost fragment.,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,36,Q_IP_FRAGMENT_BUFFERED_COUNT,fragment_buffered_count,,uint32,Number of segments that have been buffered for defragmentation,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,37,Q_IP_FRAGMENT_BUFFERED_SIZE,fragment_buffered_size,,uint32,Sizes sum of segments that have been buffered for defragmentation,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,38,Q_IP_TTL_TOO_LOW,ttl_too_low,,uint8,A flag set when the packet ttl field is too low,0,session,0 -81,Q_PROTO_IP,Network Service,ip,Internet Protocol,39,Q_IP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,25,Q_IP_SRC_ADDR_MD5,src_addr_md5,,binary,A MD5 sum on IP Source address,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,26,Q_IP_DST_ADDR_MD5,dst_addr_md5,,binary,A MD5 sum on IP destination address,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,27,Q_IP_SRC_DST_ADDR,src_dst_addr,,binary,A binary buffer containing a concatenation of IP source address and destination address,0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,28,Q_IP_SRC_DST_SPORT_PROTO,src_dst_sport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address and the protocol",0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,29,Q_IP_SRC_DST_DPORT_PROTO,src_dst_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the destination port and the protocol",0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,30,Q_IP_SRC_DST_SPORT_DPORT_PROTO,src_dst_sport_dport_proto,,binary,"A binary buffer containing a concatenation of IP source address, IP destination address, the source port, the destination port and the protocol",0,session_fix,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,33,Q_IP_FIRST_FRAGMENT,first_fragment,,uint8,A flag which is set when the current packet is fragmented and it is a first fragment,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,34,Q_IP_FRAGMENT_LOST,fragment_lost,,uint8,A flag indicating the lost of the previous fragment.,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,35,Q_IP_FRAGMENT_LOST_SIZE,fragment_lost_size,,uint32,Length of the last lost fragment.,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,36,Q_IP_FRAGMENT_BUFFERED_COUNT,fragment_buffered_count,,uint32,Number of segments that have been buffered for defragmentation,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,37,Q_IP_FRAGMENT_BUFFERED_SIZE,fragment_buffered_size,,uint32,Sizes sum of segments that have been buffered for defragmentation,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,38,Q_IP_TTL_TOO_LOW,ttl_too_low,,uint8,A flag set when the packet ttl field is too low,0,session_mod,0 +81,Q_PROTO_IP,Network Service,ip,Internet Protocol,39,Q_IP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,608,Q_MPA_VERSION,version,,uint8,Version of the protocol.,0,pkt,0 82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,1,Q_IP6_CLASS,class,,uint8,Internet traffic priority delivery value.,0,pkt,0 82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,2,Q_IP6_LABEL,label,,uint32,Used for specifying special router handling from source to destination(s) for a sequence of packets.,0,pkt,0 82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,3,Q_IP6_PAYLOAD,payload,,uint16,The payload length.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,4,Q_IP6_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session,0 +82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,4,Q_IP6_PROTOID,protoid,,uint8,Identifier of the upper layer protocol.,0,session_fix,0 82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,5,Q_IP6_HOP_LIMIT,hop_limit,,uint8,Remaining number of router(s) this packet can pass through before being dropped.,0,pkt,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,6,Q_IP6_SRC_ADDR,src_addr,,ip6_addr,Source IP address.,0,session,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,7,Q_IP6_DST_ADDR,dst_addr,,ip6_addr,Destination IP address.,0,session,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,9,Q_IP6_CLIENT_ADDR,client_addr,,ip6_addr,Client IP address.,0,session,0 -82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,8,Q_IP6_SERVER_ADDR,server_addr,,ip6_addr,Server IP address.,0,session,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,1,Q_IPCP_CODE,code,,uint8,Packet type.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,2,Q_IPCP_IDENTIFIER,identifier,,uint8,Decimal value allowing to match requests and replies.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,3,Q_IPCP_IP_ADDR,ip_addr,,ip_addr,IP address attributed.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,4,Q_IPCP_MOBILE_IP_ADDR,mobile_ip_addr,,ip_addr,"Mobile IP"" address attributed.""",0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,5,Q_IPCP_DNS_IP_ADDR,dns_ip_addr,,ip_addr,IP address of the primary DNS server.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,6,Q_IPCP_WIN_IP_ADDR,win_ip_addr,,ip_addr,IP address of the primary WINS server.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,7,Q_IPCP_SECOND_DNS_IP_ADDR,second_dns_ip_addr,,ip_addr,IP Address of the secondary DNS server.,0,pkt,0 -83,Q_PROTO_IPCP,Network Service,ipcp,IP Control Protocol,8,Q_IPCP_SECOND_WIN_IP_ADDR,second_win_ip_addr,,ip_addr,IP address of the secondary WINS server.,0,pkt,0 -84,Q_PROTO_IPP,Printer,ipp,Internet Printing Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session,0 +82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,6,Q_IP6_SRC_ADDR,src_addr,,ip6_addr,Source IP address.,0,session_fix,0 +82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,7,Q_IP6_DST_ADDR,dst_addr,,ip6_addr,Destination IP address.,0,session_fix,0 +82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,9,Q_IP6_CLIENT_ADDR,client_addr,,ip6_addr,Client IP address.,0,session_fix,0 +82,Q_PROTO_IP6,Network Service,ip6,Internet Protocol V6,8,Q_IP6_SERVER_ADDR,server_addr,,ip6_addr,Server IP address.,0,session_fix,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,1,Q_IPCP_CODE,code,,uint8,Packet type.,0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,2,Q_IPCP_IDENTIFIER,identifier,,uint8,Decimal value allowing to match requests and replies.,0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,3,Q_IPCP_IP_ADDR,ip_addr,,ip_addr,IP address attributed.,0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,4,Q_IPCP_MOBILE_IP_ADDR,mobile_ip_addr,,ip_addr,"Mobile IP"" address attributed.""",0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,5,Q_IPCP_DNS_IP_ADDR,dns_ip_addr,,ip_addr,IP address of the primary DNS server.,0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,6,Q_IPCP_WIN_IP_ADDR,win_ip_addr,,ip_addr,IP address of the primary WINS server.,0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,7,Q_IPCP_SECOND_DNS_IP_ADDR,second_dns_ip_addr,,ip_addr,IP Address of the secondary DNS server.,0,pkt,0 +83,Q_PROTO_IPCP,Network Service,ipcp,Internet Protocol Control Protocol,8,Q_IPCP_SECOND_WIN_IP_ADDR,second_win_ip_addr,,ip_addr,IP address of the secondary WINS server.,0,pkt,0 +84,Q_PROTO_IPP,Printer,ipp,Internet Printing Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0 85,Q_PROTO_IPSEC,Encrypted,ipsec,IP secure,1,Q_IPSEC_PROTOCOL,protocol,,string_index,Protocol used for encryption (AH or ESP).,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,1,Q_IPX_CHECKSUM,checksum,,uint16,Value of the transmission control checksum.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,2,Q_IPX_PKT_SIZE,pkt_size,,uint16,Datagram's length.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,3,Q_IPX_TCTRL,tctrl,,uint8,Indicates the number of routers through which the packet has passed.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,4,Q_IPX_TYPE,type,,uint8,Identifier of the upper layer protocol.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,5,Q_IPX_DST_NET,dst_net,,uint32,Destination network address.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,6,Q_IPX_SRC_NET,src_net,,uint32,Source network address.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,7,Q_IPX_DST_SOCKET,dst_socket,,uint16,Destination application identifier.,0,pkt,0 -87,Q_PROTO_IPX,Network Service,ipx,Novell IPX,8,Q_IPX_SRC_SOCKET,src_socket,,uint16,Source application identifier.,0,pkt,0 -89,Q_PROTO_IPXSAP,Network Service,ipxsap,Service Advertisement Protocol,1,Q_IPXSAP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0 -89,Q_PROTO_IPXSAP,Network Service,ipxsap,Service Advertisement Protocol,2,Q_IPXSAP_SERVER,server,,string_index,Server type.,0,pkt,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,1,Q_IRC_NICKNAME,nickname,,string,User's alias.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,2,Q_IRC_SERVER,server,,string,Server name to which the user is connected.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,3,Q_IRC_MODE,mode,,parent,Data structure containing irc channel mode information.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,4,Q_IRC_MODE_CHANNEL,mode_channel,,string,Name of the irc channel.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,5,Q_IRC_MODE_STATUS,mode_status,,string,Status of the irc channel.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,6,Q_IRC_FILE_IDENTIFIER,file_identifier,,string,File correlation key.,0,session,0 -1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,1,Q_ISAKMP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,2,Q_ISAKMP_HASH_ALGORITHM,hash_algorithm,,string_index,Algorithm used for the hash.,0,session,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,3,Q_ISAKMP_ENCRYPTION_ALGORITHM,encryption_algorithm,,string_index,algorithm used for the encryption.,0,session,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,4,Q_ISAKMP_AUTHENTIFICATION_METHOD,authentification_method,,string_index,Method used for authentication.,0,session,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,5,Q_ISAKMP_LIFE_DURATION,life_duration,,uint32,Life time of connection parameters.,0,session,0 -92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,6,Q_ISAKMP_TIME_UNIT,time_unit,,string_index,Temporal unit of the attribute life_duration.,0,session,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link Frame Format,1,Q_ISL_DST_ADDR,dst_addr,,mac_addr,Destination MAC Address.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link Frame Format,2,Q_ISL_SRC_ADDR,src_addr,,mac_addr,Source MAC Address.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link Frame Format,3,Q_ISL_TYPE,type,,string,Type of the encapsulated frame.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link Frame Format,4,Q_ISL_USER,user,,string_index,Priority field.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link Frame Format,5,Q_ISL_VLAN,vlan,,uint16,VLAN ID of the frame.,0,pkt,0 -93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link Frame Format,6,Q_ISL_INDEX,index,,uint16,Port index of the switch on which the packet has been sent.,0,pkt,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each ISUP message,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,18,Q_ISUP_MESSAGE_TS,message_ts,,timeval,Timestamp of ISUP message,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,553,Q_MPA_MESSAGE_ID,message_id,x,uint8,Id of the ISUP message. This attribute is deprecated.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,12,Q_ISUP_MESSAGE_NAME,message_name,x,string,Abbreviated name of ISUP message. This attribute is deprecated.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,19,Q_ISUP_MESSAGE_WAY,message_way,,string,Way of message,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,1,Q_ISUP_CALLER_NAT,caller_nat,,uint8,Calling party nature,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,524,Q_MPA_CALLER,caller,,string,Calling party number,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,2,Q_ISUP_CALLEE_NAT,callee_nat,,uint8,Called party nature,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,523,Q_MPA_CALLEE,callee,,string,Called party number,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,20,Q_ISUP_TMR,tmr,,string_index,Transmission medium requirement,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,4,Q_ISUP_CIC,cic,,uint16,Circuit Identification Code,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,17,Q_ISUP_CAUSE,cause,,uint8,ISUP Cause of release,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,5,Q_ISUP_ORIG_POINT_CODE,orig_point_code,,uint32,Originating Point Code,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,6,Q_ISUP_DEST_POINT_CODE,dest_point_code,,uint32,Destination Point Code,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,7,Q_ISUP_START_TIME,start_time,,timeval,Start date of the call,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,8,Q_ISUP_SESSION_DURATION,session_duration,,timeval,Call session duration (elapsed time between the sending of SETUP command and the end of the communication),0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,10,Q_ISUP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,9,Q_ISUP_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,11,Q_ISUP_CALL_ID,call_id,,uint64,Internal unique call identifier,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,13,Q_ISUP_IE_NODE,ie_node,x,parent,A parent for each ISUP information element (parameter). This attribute is deprecated.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,16,Q_ISUP_IE_RAW,ie_raw,x,buffer,Raw value of the i.e.. This attribute is deprecated.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,14,Q_ISUP_IE_ID,ie_id,x,uint8,i.e. type. This attribute is deprecated.,0,session,0 -344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,15,Q_ISUP_IE_LEN,ie_len,x,uint8,i.e. length. This attribute is deprecated.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),1,Q_JABBER_NICKNAME,nickname,,string,contains the used username.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),608,Q_MPA_VERSION,version,,string,JABBER software version.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),3,Q_JABBER_OS,os,,string,Client operating system.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),740,Q_MPA_FILE_SID,file_sid,,string,Transferred file identifier.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),710,Q_MPA_END_STATUS,end_status,,string,Session end reason.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port on which the caller could start the call.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port on which the callee could receive a call.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session,0 -94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),4,Q_JABBER_FILE_CHUNK_SID,file_chunk_sid,,string,Transferred file identifier.,0,session,0 -260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,1,Q_JAVA_UPDATE_TYPE,type,,string,Version type of updated Java.,0,session,0 -561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,618,Q_MPA_FILE_CHUNK,file_chunk,,buffer,A piece of a transferred file.,0,session,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,556,Q_MPA_MIME_TYPE,mime_type,,string,Mime type of the file beeing transferred.,0,session,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,643,Q_MPA_REQUEST,request,,parent,File transfer parent attribute.,0,session,0 -1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,550,Q_MPA_LOGIN,login,,uint64,User's login string.,0,session,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus,1,Q_KASKUS_TITLE,title,,string,Title of the current page.,0,session,0 -96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),1,Q_KAZAA_MIME_TYPE,mime_type,,string,Type of the downloaded file.,0,session,0 -96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,7,Q_KRB5_MESSAGE,message,,parent,Parent attribute containing the metadata related to a Kerberos message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,1,Q_KRB5_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,2,Q_KRB5_SERVICE,service,,string,Service requiring the use of the protocol Kerberos.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,3,Q_KRB5_SERVER,server,,string,Name of the server requiring Kerberos authentication.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,4,Q_KRB5_ENC_DATA,enc_data,,binary,Encrypted data (hash) sent in the AS-RQ message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,5,Q_KRB5_ENC_DATA_TYPE,enc_data_type,,uint32,Indicate type of Encrypted data (hash) sent in the AS-RQ message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,8,Q_KRB5_PA_DATA,pa_data,,parent,"Parent attribute, containing PA-DATA type and value.",0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,9,Q_KRB5_PA_DATA_TYPE,pa_data_type,,uint32,PA-DATA type.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,10,Q_KRB5_PA_DATA_VALUE,pa_data_value,,binary,PA-DATA value.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,11,Q_KRB5_TICKET,ticket,,parent,"Parent attribute, containing name-type, name and enc_part of a ticket.",0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,13,Q_KRB5_TICKET_NAME_TYPE,ticket_name_type,,uint32,Ticket name-type.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,12,Q_KRB5_TICKET_NAME,ticket_name,,string,Ticket name component.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,14,Q_KRB5_TICKET_ENC_PART,ticket_enc_part,,buffer,Ticket encrypted part.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,30,Q_KRB5_KDCOPTIONS,kdcoptions,,buffer,KDC options as a bitstring.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,15,Q_KRB5_ERROR_CODE,error_code,,int32,Error code in KRB-ERROR message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,6,Q_KRB5_REALM,realm,,string,Realm in KRB-ERROR message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,16,Q_KRB5_ERR_CREALM,err_crealm,,string,Realm in KRB-ERROR message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,17,Q_KRB5_ERR_CNAME,err_cname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message.",0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,29,Q_KRB5_ERR_REALM,err_realm,,string,Correct realm in KRB-ERROR message.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,18,Q_KRB5_ERR_CNAME_TYPE,err_cname_type,,uint32,KRB-ERROR cname type.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,19,Q_KRB5_ERR_CNAME_NAME,err_cname_name,,string,KRB-ERROR message cname component.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,25,Q_KRB5_ERR_SNAME,err_sname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message server.",0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,26,Q_KRB5_ERR_SNAME_TYPE,err_sname_type,,uint32,KRB-ERROR message server sname type.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,27,Q_KRB5_ERR_SNAME_NAME,err_sname_name,,string,KRB-ERROR message server sname component.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,23,Q_KRB5_ERR_TEXT,err_text,,string,KRB-ERROR message error description.,0,session,0 -97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,24,Q_KRB5_ERR_DATA,err_data,,binary,Error-related data.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,1,Q_L2TP_TUNNEL_ID,tunnel_id,,uint16,Identifier for the control connection.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,2,Q_L2TP_CALL_ID,call_id,,uint16,Identifier for a session within a tunnel.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,3,Q_L2TP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,4,Q_L2TP_ASS_TUNNEL_ID,ass_tunnel_id,,uint16,Assigned L2TP tunnel ID.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,5,Q_L2TP_HOSTNAME,hostname,,string,Name of the issuing LAC or LNS.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,6,Q_L2TP_VENDOR_NAME,vendor_name,,string,Vendor specific string describing the type of LAC or LNS being used.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,7,Q_L2TP_CHALLENGE,challenge,,binary,CHAP style challenge used by a peer in order to authenticate the tunnel endpoint.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,8,Q_L2TP_RESP_CHALLENGE,resp_challenge,,binary,Challenge response.,0,session,0 -98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,9,Q_L2TP_ASS_CALL_ID,ass_call_id,,uint16,Connection ID in the L2TP tunnel.,0,session,0 -270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,1,Q_IPX_CHECKSUM,checksum,,uint16,Value of the transmission control checksum.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,2,Q_IPX_PKT_SIZE,pkt_size,,uint16,Datagram's length.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,3,Q_IPX_TCTRL,tctrl,,uint8,Indicates the number of routers through which the packet has passed.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,4,Q_IPX_TYPE,type,,uint8,Identifier of the upper layer protocol.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,5,Q_IPX_DST_NET,dst_net,,uint32,Destination network address.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,6,Q_IPX_SRC_NET,src_net,,uint32,Source network address.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,7,Q_IPX_DST_SOCKET,dst_socket,,uint16,Destination application identifier.,0,pkt,0 +87,Q_PROTO_IPX,Network Service,ipx,Internet Protocol eXchange,8,Q_IPX_SRC_SOCKET,src_socket,,uint16,Source application identifier.,0,pkt,0 +89,Q_PROTO_IPXSAP,Network Service,ipxsap,IPX Service Advertisement Protocol,1,Q_IPXSAP_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0 +89,Q_PROTO_IPXSAP,Network Service,ipxsap,IPX Service Advertisement Protocol,2,Q_IPXSAP_SERVER,server,,string_index,Server type.,0,pkt,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,1,Q_IRC_NICKNAME,nickname,,string,User's alias.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,2,Q_IRC_SERVER,server,,string,Server name to which the user is connected.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,1,session_prt,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_prt,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_prt,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,3,Q_IRC_MODE,mode,,parent,Data structure containing irc channel mode information.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,4,Q_IRC_MODE_CHANNEL,mode_channel,,string,Name of the irc channel.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,5,Q_IRC_MODE_STATUS,mode_status,,string,Status of the irc channel.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +90,Q_PROTO_IRC,Instant Messaging,irc,Internet Relay Chat,6,Q_IRC_FILE_IDENTIFIER,file_identifier,,string,File correlation key.,0,session_prt,0 +1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +1113,Q_PROTO_IRC_TRANSFER,File Transfer,irc_transfer,IRC File Transfer Data,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,1,Q_ISAKMP_MESSAGE_TYPE,message_type,,string_index,Type of message sent.,0,session_fix,0 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,2,Q_ISAKMP_HASH_ALGORITHM,hash_algorithm,,string_index,Algorithm used for the hash.,0,session_fix,0 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,3,Q_ISAKMP_ENCRYPTION_ALGORITHM,encryption_algorithm,,string_index,algorithm used for the encryption.,0,session_fix,0 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,4,Q_ISAKMP_AUTHENTIFICATION_METHOD,authentification_method,,string_index,Method used for authentication.,0,session_fix,0 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,5,Q_ISAKMP_LIFE_DURATION,life_duration,,uint32,Life time of connection parameters.,0,session_fix,0 +92,Q_PROTO_ISAKMP,Encrypted,isakmp,Internet Security Association and Key Management Protocol,6,Q_ISAKMP_TIME_UNIT,time_unit,,string_index,Temporal unit of the attribute life_duration.,0,session_fix,0 +93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,1,Q_ISL_DST_ADDR,dst_addr,,mac_addr,Destination MAC Address.,0,pkt,0 +93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,2,Q_ISL_SRC_ADDR,src_addr,,mac_addr,Source MAC Address.,0,pkt,0 +93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,3,Q_ISL_TYPE,type,,string,Type of the encapsulated frame.,0,pkt,0 +93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,4,Q_ISL_USER,user,,string_index,Priority field.,0,pkt,0 +93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,5,Q_ISL_VLAN,vlan,,uint16,VLAN ID of the frame.,0,pkt,0 +93,Q_PROTO_ISL,Network Service,isl,InterSwitch Link,6,Q_ISL_INDEX,index,,uint16,Port index of the switch on which the packet has been sent.,0,pkt,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,552,Q_MPA_MESSAGE,message,,parent,A parent attribute for each ISUP message,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,18,Q_ISUP_MESSAGE_TS,message_ts,,timeval,Timestamp of ISUP message,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,553,Q_MPA_MESSAGE_ID,message_id,x,uint8,Id of the ISUP message. This attribute is deprecated.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,12,Q_ISUP_MESSAGE_NAME,message_name,x,string,Abbreviated name of ISUP message. This attribute is deprecated.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,19,Q_ISUP_MESSAGE_WAY,message_way,,string,Way of message,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,1,Q_ISUP_CALLER_NAT,caller_nat,,uint8,Calling party nature,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,524,Q_MPA_CALLER,caller,,string,Calling party number,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,2,Q_ISUP_CALLEE_NAT,callee_nat,,uint8,Called party nature,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,523,Q_MPA_CALLEE,callee,,string,Called party number,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,20,Q_ISUP_TMR,tmr,,string_index,Transmission medium requirement,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,4,Q_ISUP_CIC,cic,,uint16,Circuit Identification Code,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,17,Q_ISUP_CAUSE,cause,,uint8,ISUP Cause of release,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,5,Q_ISUP_ORIG_POINT_CODE,orig_point_code,,uint32,Originating Point Code,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,6,Q_ISUP_DEST_POINT_CODE,dest_point_code,,uint32,Destination Point Code,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,7,Q_ISUP_START_TIME,start_time,,timeval,Start date of the call,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,8,Q_ISUP_SESSION_DURATION,session_duration,,timeval,Call session duration (elapsed time between the sending of SETUP command and the end of the communication),0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,10,Q_ISUP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,9,Q_ISUP_CALL_SETUP,call_setup,,timeval,Call setup delay.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,11,Q_ISUP_CALL_ID,call_id,,uint64,Internal unique call identifier,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,13,Q_ISUP_IE_NODE,ie_node,x,parent,A parent for each ISUP information element (parameter). This attribute is deprecated.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,16,Q_ISUP_IE_RAW,ie_raw,x,buffer,Raw value of the i.e.. This attribute is deprecated.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,14,Q_ISUP_IE_ID,ie_id,x,uint8,i.e. type. This attribute is deprecated.,0,session_mod,0 +344,Q_PROTO_ISUP,Telephony,isup,ISDN User Part,15,Q_ISUP_IE_LEN,ie_len,x,uint8,i.e. length. This attribute is deprecated.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),1,Q_JABBER_NICKNAME,nickname,,string,contains the used username.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),608,Q_MPA_VERSION,version,,string,JABBER software version.,0,session_fix,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_fix,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),3,Q_JABBER_OS,os,,string,Client operating system.,0,session_fix,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,1 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),740,Q_MPA_FILE_SID,file_sid,,string,Transferred file identifier.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),710,Q_MPA_END_STATUS,end_status,,string,Session end reason.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port on which the caller could start the call.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port on which the callee could receive a call.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),620,Q_MPA_FILE_CHUNK_NUMBER,file_chunk_number,,uint32,Number of the transferred piece.,0,session_prt,0 +94,Q_PROTO_JABBER,Instant Messaging,jabber,XMPP Protocol (Jabber),4,Q_JABBER_FILE_CHUNK_SID,file_chunk_sid,,string,Transferred file identifier.,0,session_prt,0 +260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +260,Q_PROTO_JABBER_TRANSFER,File Transfer,jabber_transfer,Jabber File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,1,Q_JAVA_UPDATE_TYPE,type,,string,Version type of updated Java.,0,session_mod,0 +561,Q_PROTO_JAVA_UPDATE,Web,java_update,Java Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version number returned by the server.,0,session_mod,0 +1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,618,Q_MPA_FILE_CHUNK,file_chunk,,buffer,A piece of a transferred file.,0,session_mod,0 +1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,556,Q_MPA_MIME_TYPE,mime_type,,string,Mime type of the file beeing transferred.,0,session_mod,0 +1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,643,Q_MPA_REQUEST,request,,parent,File transfer parent attribute.,0,session_mod,0 +1186,Q_PROTO_KAKAOTALK,Instant Messaging,kakaotalk,KakaoTalk,550,Q_MPA_LOGIN,login,,uint64,User's login string.,0,session_mod,0 +1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +1127,Q_PROTO_KASKUS,Forum,kaskus,Kaskus.co.id,1,Q_KASKUS_TITLE,title,,string,Title of the current page.,0,session_mod,0 +96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),1,Q_KAZAA_MIME_TYPE,mime_type,,string,Type of the downloaded file.,0,session_mod,0 +96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +96,Q_PROTO_KAZAA,Peer to Peer,kazaa,Kazaa (FastTrack protocol),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,7,Q_KRB5_MESSAGE,message,,parent,Parent attribute containing the metadata related to a Kerberos message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,1,Q_KRB5_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,2,Q_KRB5_SERVICE,service,,string,Service requiring the use of the protocol Kerberos.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,3,Q_KRB5_SERVER,server,,string,Name of the server requiring Kerberos authentication.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,4,Q_KRB5_ENC_DATA,enc_data,,binary,Encrypted data (hash) sent in the AS-RQ message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,5,Q_KRB5_ENC_DATA_TYPE,enc_data_type,,uint32,Indicate type of Encrypted data (hash) sent in the AS-RQ message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,8,Q_KRB5_PA_DATA,pa_data,,parent,"Parent attribute, containing PA-DATA type and value.",0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,9,Q_KRB5_PA_DATA_TYPE,pa_data_type,,uint32,PA-DATA type.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,10,Q_KRB5_PA_DATA_VALUE,pa_data_value,,binary,PA-DATA value.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,11,Q_KRB5_TICKET,ticket,,parent,"Parent attribute, containing name-type, name and enc_part of a ticket.",0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,13,Q_KRB5_TICKET_NAME_TYPE,ticket_name_type,,uint32,Ticket name-type.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,12,Q_KRB5_TICKET_NAME,ticket_name,,string,Ticket name component.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,14,Q_KRB5_TICKET_ENC_PART,ticket_enc_part,,buffer,Ticket encrypted part.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,30,Q_KRB5_KDCOPTIONS,kdcoptions,,buffer,KDC options as a bitstring.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,15,Q_KRB5_ERROR_CODE,error_code,,int32,Error code in KRB-ERROR message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,6,Q_KRB5_REALM,realm,,string,Realm in KRB-ERROR message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,16,Q_KRB5_ERR_CREALM,err_crealm,,string,Realm in KRB-ERROR message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,17,Q_KRB5_ERR_CNAME,err_cname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message.",0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,29,Q_KRB5_ERR_REALM,err_realm,,string,Correct realm in KRB-ERROR message.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,18,Q_KRB5_ERR_CNAME_TYPE,err_cname_type,,uint32,KRB-ERROR cname type.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,19,Q_KRB5_ERR_CNAME_NAME,err_cname_name,,string,KRB-ERROR message cname component.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,25,Q_KRB5_ERR_SNAME,err_sname,,parent,"Parent attribute, containing name-type and name of a KRB-ERROR message server.",0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,26,Q_KRB5_ERR_SNAME_TYPE,err_sname_type,,uint32,KRB-ERROR message server sname type.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,27,Q_KRB5_ERR_SNAME_NAME,err_sname_name,,string,KRB-ERROR message server sname component.,0,session_prt,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,23,Q_KRB5_ERR_TEXT,err_text,,string,KRB-ERROR message error description.,0,session_mod,0 +97,Q_PROTO_KRB5,Authentication,krb5,Kerberos,24,Q_KRB5_ERR_DATA,err_data,,binary,Error-related data.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,1,Q_L2TP_TUNNEL_ID,tunnel_id,,uint16,Identifier for the control connection.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,2,Q_L2TP_CALL_ID,call_id,,uint16,Identifier for a session within a tunnel.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,3,Q_L2TP_MESSAGE_TYPE,message_type,,string_index,Message type (L2TPv2 only).,0,pkt,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,4,Q_L2TP_ASS_TUNNEL_ID,ass_tunnel_id,,uint16,Assigned L2TP tunnel ID.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,5,Q_L2TP_HOSTNAME,hostname,,string,Name of the issuing LAC or LNS.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,6,Q_L2TP_VENDOR_NAME,vendor_name,,string,Vendor specific string describing the type of LAC or LNS being used.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,7,Q_L2TP_CHALLENGE,challenge,,binary,CHAP style challenge used by a peer in order to authenticate the tunnel endpoint.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,8,Q_L2TP_RESP_CHALLENGE,resp_challenge,,binary,Challenge response.,0,session_mod,0 +98,Q_PROTO_L2TP,Tunneling,l2tp,Layer 2 Tunneling Protocol,9,Q_L2TP_ASS_CALL_ID,ass_call_id,,uint16,Connection ID in the L2TP tunnel.,0,session_mod,0 +270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +270,Q_PROTO_LAPOSTE_WEBMAIL,Webmail,laposte_webmail,La Poste Webmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 99,Q_PROTO_LCP,Network Management,lcp,Line Control Protocol,1,Q_LCP_CODE,code,,uint8,Called function.,0,pkt,0 99,Q_PROTO_LCP,Network Management,lcp,Line Control Protocol,2,Q_LCP_IDENTIFIER,identifier,,uint8,Message identifier.,0,pkt,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,1,Q_LDAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,2,Q_LDAP_MESSAGE_ID,message_id,,uint32,Message identification.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,3,Q_LDAP_PAYLOAD_IS_CRYPTED,payload_is_crypted,,uint32,Indicates whether the LDAP payload is encrypted.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,4,Q_LDAP_SEAL_ALGO,seal_algo,,string,Algorithm used to encrypt the Kerberos content.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,5,Q_LDAP_CONTAINS_SASL,contains_sasl,,uint32,Indicates whether the authentication is done using SASL mechanism.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,6,Q_LDAP_ELEMENT,element,,parent,LDAP element in the LDAP tree.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,7,Q_LDAP_VALUE_STRING,value_string,,string,String value of the LDAP element.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,8,Q_LDAP_VALUE_RAW,value_raw,,buffer,Raw value of the LDAP element.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,9,Q_LDAP_TYPE,type,,string,"Type of the LDAP element, in the LDAP tree.",0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,577,Q_MPA_NAME,name,,string,"Name of the LDAP element, in the LDAP tree (RFC2251).",0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,10,Q_LDAP_NUMBER,number,,uint32,Item number of the LDAP element.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,11,Q_LDAP_HOSTNAME,hostname,,string,Hostname extracted from a logon response to a CLDAP searchRequest.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,12,Q_LDAP_FILTER_EXPRESSION,filter_expression,,parent,Filter sub expression extracted from a CLDAP searchRequest.,0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,13,Q_LDAP_ATTRIBUTE_DESC,attribute_desc,,string,"Filter expression first operand, which is an attribute description.",0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,14,Q_LDAP_ASSERTION_VALUE,assertion_value,,string,"Filter expression second operand, which is an assertion value.",0,session,0 -100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,15,Q_LDAP_ASSERTION_VALUE_RAW,assertion_value_raw,,buffer,Raw value of filter expression second operand.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version currently used by the client.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,797,Q_MPA_SERVICE_DURATION,service_duration,,int32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,789,Q_MPA_SERVICE_ID,service_id,,int32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition.",0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,604,Q_MPA_SERVICE,service,,string,Current service identification string. This attribute is extracted only when the service changes.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,2,Q_LINE_CALL_BYTE_COUNT,call_byte_count,,uint32,The count of bytes that were exchanged during the call.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,1,Q_LINE_CALL_PKT_COUNT,call_pkt_count,,uint32,The count of data packets that were exchanged during the call.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,521,Q_MPA_CALL_DURATION,call_duration,,uint32,Call duration.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,709,Q_MPA_START_TIME,start_time,,string,Start date of the call.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -1124,Q_PROTO_LINE,Instant Messaging,line,Line,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,584,Q_MPA_QUERY_TYPE,query_type,,string,Query domain.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,1,Q_LIVE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,2,Q_LIVE_GROUPS_GROUP_ID,group_id,,string,Unique identifier of the group.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,647,Q_MPA_MEMBER_EMAIL,member_email,x,string,This attribute is deprecated.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,634,Q_MPA_CONTACT,contact,,string,Complete contact (this attribute is now encrypted and no longer extracted).,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,1,Q_LIVE_HOTMAIL_ATTACH_FILEID,attach_fileid,,string,File identifier used for attachments correlation.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,1,Q_LIVEMAIL_MOBILE_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,1,Q_LDAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,2,Q_LDAP_MESSAGE_ID,message_id,,uint32,Message identification.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,3,Q_LDAP_PAYLOAD_IS_CRYPTED,payload_is_crypted,,uint32,Indicates whether the LDAP payload is encrypted.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,4,Q_LDAP_SEAL_ALGO,seal_algo,,string,Algorithm used to encrypt the Kerberos content.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,5,Q_LDAP_CONTAINS_SASL,contains_sasl,,uint32,Indicates whether the authentication is done using SASL mechanism.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,6,Q_LDAP_ELEMENT,element,,parent,LDAP element in the LDAP tree.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,7,Q_LDAP_VALUE_STRING,value_string,,string,String value of the LDAP element.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,8,Q_LDAP_VALUE_RAW,value_raw,,buffer,Raw value of the LDAP element.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,9,Q_LDAP_TYPE,type,,string,"Type of the LDAP element, in the LDAP tree.",0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,577,Q_MPA_NAME,name,,string,"Name of the LDAP element, in the LDAP tree (RFC2251).",0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,10,Q_LDAP_NUMBER,number,,uint32,Item number of the LDAP element.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,11,Q_LDAP_HOSTNAME,hostname,,string,Hostname extracted from a logon response to a CLDAP searchRequest.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,12,Q_LDAP_FILTER_EXPRESSION,filter_expression,,parent,Filter sub expression extracted from a CLDAP searchRequest.,0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,13,Q_LDAP_ATTRIBUTE_DESC,attribute_desc,,string,"Filter expression first operand, which is an attribute description.",0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,14,Q_LDAP_ASSERTION_VALUE,assertion_value,,string,"Filter expression second operand, which is an assertion value.",0,session_mod,0 +100,Q_PROTO_LDAP,Application Service,ldap,Lighweight Directory Access Protocol,15,Q_LDAP_ASSERTION_VALUE_RAW,assertion_value_raw,,buffer,Raw value of filter expression second operand.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version currently used by the client.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in seconds and microseconds.",0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds.",0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition.",0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,604,Q_MPA_SERVICE,service,,string,Current service identification string. This attribute is extracted only when the service changes.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,2,Q_LINE_CALL_BYTE_COUNT,call_byte_count,,uint32,The count of bytes that were exchanged during the call.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,1,Q_LINE_CALL_PKT_COUNT,call_pkt_count,,uint32,The count of data packets that were exchanged during the call.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,521,Q_MPA_CALL_DURATION,call_duration,,uint32,Call duration.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,709,Q_MPA_START_TIME,start_time,,string,Start date of the call.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +1124,Q_PROTO_LINE,Instant Messaging,line,Line,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,584,Q_MPA_QUERY_TYPE,query_type,,string,Query domain.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +305,Q_PROTO_LINKEDIN,Forum,linkedin,LinkedIn.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,1,Q_LIVE_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,2,Q_LIVE_GROUPS_GROUP_ID,group_id,,string,Unique identifier of the group.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,645,Q_MPA_MEMBER_ENTRY,member_entry,,parent,"Parent entry, for different elements belonging to group membership.",0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,646,Q_MPA_MEMBER_ALIAS,member_alias,,string,Member name.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,647,Q_MPA_MEMBER_EMAIL,member_email,x,string,This attribute is deprecated.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 +335,Q_PROTO_LIVE_GROUPS,Forum,live_groups,Windows Live Groups,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,634,Q_MPA_CONTACT,contact,,string,Complete contact (this attribute is now encrypted and no longer extracted).,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +262,Q_PROTO_LIVE_HOTMAIL,Webmail,live_hotmail,Windows Live Hotmail,1,Q_LIVE_HOTMAIL_ATTACH_FILEID,attach_fileid,,string,File identifier used for attachments correlation.,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,1,Q_LIVEMAIL_MOBILE_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 +327,Q_PROTO_LIVEMAIL_MOBILE,Webmail,livemail_mobile,Live hotmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,1,Q_LLC_DST_SAP,dst_sap,,uint8,Destination SAP address.,0,pkt,0 104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,2,Q_LLC_SRC_SAP,src_sap,,uint8,Source SAP address.,0,pkt,0 104,Q_PROTO_LLC,Network Service,llc,Logical Link Control,3,Q_LLC_CONTROL,control,,uint8,Control field of the connection.,0,pkt,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,1,Q_LOTUSNOTES_ORGANIZATION,organization,,string,Organization.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,608,Q_MPA_VERSION,version,,string,Client version.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session,1 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,4,Q_LOTUSNOTES_MIME_VERSION,mime_version,,string,MIME version.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,598,Q_MPA_REPLYTO,replyto,x,string,This attribute is deprecated,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,5,Q_LOTUSNOTES_HEADER,header,,parent,Lotusnotes header (used for the Email service).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,6,Q_LOTUSNOTES_HEADER_NAME,header_name,,string,Lotusnotes header name (used for the Email service).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,7,Q_LOTUSNOTES_HEADER_VALUE,header_value,,string,Lotusnotes header value (used for the Email service).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,8,Q_LOTUSNOTES_ATTACH_COMPRESS,attach_compress,,string,The compression method used for the attached file download.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,2,Q_LOTUSNOTES_ATTACH_CONTENT_SEQ,attach_content_seq,,uint32,Sequence number of a attach file part.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,3,Q_LOTUSNOTES_ATTACH_CONTENT_SIZE,attach_content_size,,uint32,Size of a attach file part.,0,session,0 -107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -108,Q_PROTO_LPR,Printer,lpr,Line Printer Daemon,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -108,Q_PROTO_LPR,Printer,lpr,Line Printer Daemon,1,Q_LPR_SERVER,server,,string,Name of the machine that sent a file to print.,0,session,0 -108,Q_PROTO_LPR,Printer,lpr,Line Printer Daemon,2,Q_LPR_JOB,job,,string,Name of the printed file.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,762,Q_MPA_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,718,Q_MPA_PACKAGE,package,,parent,Information list about the debian archive,0,session,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Version of the currently upgraded-distribution,0,session,0 -583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,1,Q_MAPI_HOST,host,,string,Client's hostname.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,2,Q_MAPI_DOMAIN,domain,,string,Network domain of the client.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,3,Q_MAPI_AUTH_TYPE,auth_type,,string_index,The type of used authentication.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,607,Q_MPA_SUBJECT,subject,,buffer,Message subject (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,8,Q_MAPI_SENSIVITY,sensivity,,uint32,Message sensibility.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,532,Q_MPA_DATE,date,,uint64,"Message date: number of 100-nanosecond intervals since January 1, 1601.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,7,Q_MAPI_SIZE,size,,uint32,Message size.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,6,Q_MAPI_FLAGS,flags,,uint32,Message flags.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,11,Q_MAPI_EMAIL_TYPE,email_type,,string,E-mail type (enumeration).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,600,Q_MPA_SENDER,sender,,buffer,Contains the identity of the sender of a chat session or a file transfer (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,601,Q_MPA_SENDER_ALIAS,sender_alias,,buffer,Name of the email sender (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,602,Q_MPA_SENDER_EMAIL,sender_email,,buffer,Email address of the message sender (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,585,Q_MPA_RECEIVER,receiver,,buffer,Contains the identity of the receiver for a chat message or a file transfer (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,buffer,Name of email receiver (included cc and bcc receivers) (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,buffer,Email address of message receiver (included cc and bcc receivers) (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,517,Q_MPA_ATTACH_ID,attach_id,,uint32,Attachment identifier.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,516,Q_MPA_ATTACH_FILENAME,attach_filename,,buffer,Attachment name (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,buffer,Full address of email sender (alias and email address) (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,buffer,Message subject in a message list (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,565,Q_MPA_MSGLIST_DATE,msglist_date,,uint64,"Message date in a message list: number of 100-nanosecond intervals since January 1, 1601.",0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,uint64,Message identifier.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,575,Q_MPA_MSGLIST_SIZE,msglist_size,,uint32,Message size in a message list.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,4,Q_MAPI_MSGLIST_SENSIVITY,msglist_sensivity,,uint32,Message sensibility in a message list.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,5,Q_MAPI_MSGLIST_FLAGS,msglist_flags,,uint32,Message flags in a message list.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,buffer,Full address of email receiver in a message list.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,9,Q_MAPI_MSGLIST_RECEIVER_TYPE,msglist_receiver_type,,string,Type of the email receiver,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,buffer,Email address of the email receiver.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,10,Q_MAPI_APPOINTMENT_LOCATION,appointment_location,,buffer,Appointment location.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,616,Q_MPA_CONTACT_EMAIL,contact_email,,buffer,Email address of a contact (UTF-16).,0,session,0 -110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,615,Q_MPA_CONTACT_ALIAS,contact_alias,,buffer,Alias of a contact (UTF-16).,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,8,Q_MASHARE_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,11,Q_MASHARE_DELETE_URL,delete_url,,string,Link to use in order to delete the file.,0,session,0 -587,Q_PROTO_MASHARE,Web,mashare,mashare,10,Q_MASHARE_FILEID,fileid,,string,Unique identifier of the file.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,25,Q_MGCP_INFO,info,,parent,Data corresponding to a message transfer,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,1,Q_MGCP_ENDPOINT,endpoint,,string,Handset identifier,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,608,Q_MPA_VERSION,version,,string,Protocol version,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,2,Q_MGCP_TID,tid,,uint32,Transaction identifier,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,3,Q_MGCP_CODE,code,,uint32,Return code of a query,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,24,Q_MGCP_STATS,stats,,parent,Regroups RTP statistics,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,4,Q_MGCP_PACKETS_SENT,packets_sent,,uint32,Number of RTP packets sent,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,5,Q_MGCP_OCTETS_SENT,octets_sent,,uint32,Number of RTP octets sent,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,6,Q_MGCP_PACKETS_RECEIVED,packets_received,,uint32,Number of RTP packets received,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,7,Q_MGCP_OCTETS_RECEIVED,octets_received,,uint32,Number of RTP octets received,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,8,Q_MGCP_PACKETS_LOST,packets_lost,,uint32,Number of lost RTP packets,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,9,Q_MGCP_JITTER,jitter,,uint32,Observed Jitter for RTP packets,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,10,Q_MGCP_LATENCY,latency,,uint32,Observed latency for RTP packets,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,12,Q_MGCP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,579,Q_MPA_PHONE_NUMBER,phone_number,,string,The phone number.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,13,Q_MGCP_EVENT,event,,string,Observed events,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,14,Q_MGCP_MESSAGE_TYPE,message_type,,string,The message type,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,15,Q_MGCP_CALL_WAY,call_way,,string,"The call Way (In, Out)",0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,17,Q_MGCP_MODE,mode,,string,"Contains the connection mode (sendrcv, recvonly, ...)",0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,18,Q_MGCP_NOTIFIEDENTITY,notifiedEntity,,string,Contains the identity of the notified identity,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,20,Q_MGCP_SIGNAL,signal,,string,Contains the received/sent signal,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,21,Q_MGCP_DIGITMAP,digitmap,,string,Contains the digitmap,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,23,Q_MGCP_CONNECTION_ID,connection_id,,string,Connection identifier,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session,0 -113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -115,Q_PROTO_MMS,Audio/Video,mms,Microsoft Multimedia Streaming,541,Q_MPA_FILENAME,filename,,string,Name of the file currently broadcasted.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,1,Q_MMSE_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,2,Q_MMSE_MESSAGE_CODE,message_code,,uint8,Message type (in integer).,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,3,Q_MMSE_RECEIVER,receiver,,string,MMS receiver.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,4,Q_MMSE_NB_RECEIVER,nb_receiver,,uint32,Number of receiver for the same MMS.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,5,Q_MMSE_VERSION,version,,string,Protocol version.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,6,Q_MMSE_TID,tid,,string,Transaction identifier.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,7,Q_MMSE_SENDER,sender,,string,MMS sender.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,8,Q_MMSE_SUBJECT,subject,,string,MMS subject.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,9,Q_MMSE_CONTENT_TYPE,content_type,,string,The content type of the message.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,10,Q_MMSE_MESSAGE_CLASS,message_class,,string_index,Specifies the class of message.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,11,Q_MMSE_MESSAGE_ID,message_id,,string,A unique reference assigned to the message. The ID enables a client to match delivery reports with previously sent messages.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,12,Q_MMSE_CONTENT_LOCATION,content_location,,string,Specifies a reference to the stored version of the MM that can be retrieved or can be used to obtain information about the MM using the WSP/HTTP GET or M-Mbox-View-req.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,13,Q_MMSE_DELIVERY_REPORT,delivery_report,,string_index,Specifies whether the user wants a delivery report from each recipient.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,14,Q_MMSE_PRIORITY,priority,,string_index,Priority of the message for the recipient.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,15,Q_MMSE_READ_REPORT,read_report,,string_index,Specifies whether the user wants a read report from each recipient as a new message.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,16,Q_MMSE_REPORT_ALLOWED,report_allowed,,string_index,Sending of delivery report allowed to the user or not.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,17,Q_MMSE_RESPONSE_STATUS_CODE,response_status_code,,uint32,"It is used by the originating MMS Proxy-Relay to inform the MMS Client, which has performed a submission or a forward the result of that particular operation.",0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,18,Q_MMSE_RESPONSE_STATUS_TEXT,response_status_text,,string,Description which qualifies the response_status_code. The description may be based on the on the status code names contained in RFC1893.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,19,Q_MMSE_MESSAGE_SZ,message_sz,,uint32,Full size of message in octets.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,20,Q_MMSE_STATUS,status,,string_index,It is used to inform the originating MMS Client of the status of an MM that a delivery report was requested for.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,21,Q_MMSE_RETRIEVE_STATUS,retrieve_status,,string_index,"It is used by the recipient MMS Proxy-Relay to inform the recipient MMS Client about errors, if any that occurred during the preceding retrieval operation.",0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,22,Q_MMSE_READ_STATUS,read_status,,string_index,"Conveys information from the recipient MMS Client to the originating MMS Client whether an MM, for which a read report was requested, was read or not.",0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,530,Q_MPA_CONTENT,content,,buffer,The message content (headers are not included).,0,session,1 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,23,Q_MMSE_CONTENT_PART,content_part,,parent,Message sub-part.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,24,Q_MMSE_CONTENT_PART_TYPE,content_part_type,,string,Message sub-part type.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,25,Q_MMSE_CONTENT_PART_ID,content_part_id,,string,Message sub-part ID.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,26,Q_MMSE_CONTENT_PART_FILENAME,content_part_filename,,string,Name of the file containing the current message sub-part data.,0,session,0 -116,Q_PROTO_MMSE,Wap,mmse,MMS Encapsulation,27,Q_MMSE_CONTENT_PART_DATA,content_part_data,,buffer,Message sub-part data.,0,session,0 -251,Q_PROTO_MPEGTS,Audio/Video,mpegts,MPEG-TS,1,Q_MPEGTS_CHUNK_LEN,chunk_len,,uint32,Data length.,0,session,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,1,Q_LOTUSNOTES_ORGANIZATION,organization,,string,Organization.,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,608,Q_MPA_VERSION,version,,string,Client version.,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,4,Q_LOTUSNOTES_MIME_VERSION,mime_version,,string,MIME version.,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,598,Q_MPA_REPLYTO,replyto,x,string,This attribute is deprecated,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,5,Q_LOTUSNOTES_HEADER,header,,parent,Lotusnotes header (used for the Email service).,0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,6,Q_LOTUSNOTES_HEADER_NAME,header_name,,string,Lotusnotes header name (used for the Email service).,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,7,Q_LOTUSNOTES_HEADER_VALUE,header_value,,string,Lotusnotes header value (used for the Email service).,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,8,Q_LOTUSNOTES_ATTACH_COMPRESS,attach_compress,,string,The compression method used for the attached file download.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,2,Q_LOTUSNOTES_ATTACH_CONTENT_SEQ,attach_content_seq,,uint32,Sequence number of a attach file part.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,3,Q_LOTUSNOTES_ATTACH_CONTENT_SIZE,attach_content_size,,uint32,Size of a attach file part.,0,session_prt,0 +107,Q_PROTO_LOTUSNOTES,Mail,lotusnotes,Lotus Notes,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,1,Q_LPR_SERVER,server,,string,Name of the machine that sent a file to print.,0,session_fix,0 +108,Q_PROTO_LPR,Printer,lpr,Line Printer Remote,2,Q_LPR_JOB,job,,string,Name of the printed file.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,762,Q_MPA_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +334,Q_PROTO_MAILRU,Webmail,mailru,Mail.ru Webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,577,Q_MPA_NAME,name,,string,User's full name.,0,session_fix,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 +246,Q_PROTO_MAKTOOB,Webmail,maktoob,Maktoob mail,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 +583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,718,Q_MPA_PACKAGE,package,,parent,Information list about the debian archive,0,session_mod,0 +583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session_mod,0 +583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session_mod,0 +583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session_mod,0 +583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Version of the currently upgraded-distribution,0,session_mod,0 +583,Q_PROTO_MANDRIVA_UPDATE,Web,mandriva_update,Mandriva Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_fix,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,1,Q_MAPI_HOST,host,,string,Client's hostname.,0,session_fix,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,2,Q_MAPI_DOMAIN,domain,,string,Network domain of the client.,0,session_fix,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,3,Q_MAPI_AUTH_TYPE,auth_type,,string_index,The type of used authentication.,0,session_fix,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,607,Q_MPA_SUBJECT,subject,,buffer,Message subject (UTF-16).,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,8,Q_MAPI_SENSIVITY,sensivity,,uint32,Message sensibility.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,532,Q_MPA_DATE,date,,uint64,"Message date: number of 100-nanosecond intervals since January 1, 1601.",0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,7,Q_MAPI_SIZE,size,,uint32,Message size.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,6,Q_MAPI_FLAGS,flags,,uint32,Message flags.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,11,Q_MAPI_EMAIL_TYPE,email_type,,string,E-mail type (enumeration).,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,600,Q_MPA_SENDER,sender,,buffer,Contains the identity of the sender of a chat session or a file transfer (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,601,Q_MPA_SENDER_ALIAS,sender_alias,,buffer,Name of the email sender (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,602,Q_MPA_SENDER_EMAIL,sender_email,,buffer,Email address of the message sender (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,585,Q_MPA_RECEIVER,receiver,,buffer,Contains the identity of the receiver for a chat message or a file transfer (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,buffer,Name of email receiver (included cc and bcc receivers) (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,buffer,Email address of message receiver (included cc and bcc receivers) (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,517,Q_MPA_ATTACH_ID,attach_id,,uint32,Attachment identifier.,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,516,Q_MPA_ATTACH_FILENAME,attach_filename,,buffer,Attachment name (UTF-16).,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,519,Q_MPA_ATTACH_SIZE,attach_size,,int32,Attached file MIME size.,0,session_prt,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,buffer,Full address of email sender (alias and email address) (UTF-16).,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,buffer,Message subject in a message list (UTF-16).,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,565,Q_MPA_MSGLIST_DATE,msglist_date,,uint64,"Message date in a message list: number of 100-nanosecond intervals since January 1, 1601.",0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,uint64,Message identifier.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,575,Q_MPA_MSGLIST_SIZE,msglist_size,,uint32,Message size in a message list.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,4,Q_MAPI_MSGLIST_SENSIVITY,msglist_sensivity,,uint32,Message sensibility in a message list.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,5,Q_MAPI_MSGLIST_FLAGS,msglist_flags,,uint32,Message flags in a message list.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,buffer,Full address of email receiver in a message list.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,9,Q_MAPI_MSGLIST_RECEIVER_TYPE,msglist_receiver_type,,string,Type of the email receiver,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,buffer,Email address of the email receiver.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,10,Q_MAPI_APPOINTMENT_LOCATION,appointment_location,,buffer,Appointment location.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,616,Q_MPA_CONTACT_EMAIL,contact_email,,buffer,Email address of a contact (UTF-16).,0,session_mod,0 +110,Q_PROTO_MAPI,Mail,mapi,MS Exchange Message API,615,Q_MPA_CONTACT_ALIAS,contact_alias,,buffer,Alias of a contact (UTF-16).,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,538,Q_MPA_FILE,file,,parent,Parent attribute containing metadata related to the file.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,530,Q_MPA_CONTENT,content,,buffer,Message content.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,8,Q_MASHARE_DOWNLOAD_URL,download_url,,string,Link of the downloaded file.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,11,Q_MASHARE_DELETE_URL,delete_url,,string,Link to use in order to delete the file.,0,session_mod,0 +587,Q_PROTO_MASHARE,Web,mashare,Ma-Share.com,10,Q_MASHARE_FILEID,fileid,,string,Unique identifier of the file.,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,25,Q_MGCP_INFO,info,,parent,Data corresponding to a message transfer,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,1,Q_MGCP_ENDPOINT,endpoint,,string,Handset identifier,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,608,Q_MPA_VERSION,version,,string,Protocol version,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,2,Q_MGCP_TID,tid,,uint32,Transaction identifier,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,3,Q_MGCP_CODE,code,,uint32,Return code of a query,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,24,Q_MGCP_STATS,stats,,parent,Regroups RTP statistics,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,4,Q_MGCP_PACKETS_SENT,packets_sent,,uint32,Number of RTP packets sent,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,5,Q_MGCP_OCTETS_SENT,octets_sent,,uint32,Number of RTP octets sent,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,6,Q_MGCP_PACKETS_RECEIVED,packets_received,,uint32,Number of RTP packets received,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,7,Q_MGCP_OCTETS_RECEIVED,octets_received,,uint32,Number of RTP octets received,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,8,Q_MGCP_PACKETS_LOST,packets_lost,,uint32,Number of lost RTP packets,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,9,Q_MGCP_JITTER,jitter,,uint32,Observed Jitter for RTP packets,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,10,Q_MGCP_LATENCY,latency,,uint32,Observed latency for RTP packets,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,12,Q_MGCP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,579,Q_MPA_PHONE_NUMBER,phone_number,,string,The phone number.,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,13,Q_MGCP_EVENT,event,,string,Observed events,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,14,Q_MGCP_MESSAGE_TYPE,message_type,,string,The message type,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,15,Q_MGCP_CALL_WAY,call_way,,string,"The call Way (In, Out)",0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,17,Q_MGCP_MODE,mode,,string,"Contains the connection mode (sendrcv, recvonly, ...)",0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,18,Q_MGCP_NOTIFIEDENTITY,notifiedEntity,,string,Contains the identity of the notified identity,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,20,Q_MGCP_SIGNAL,signal,,string,Contains the received/sent signal,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,21,Q_MGCP_DIGITMAP,digitmap,,string,Contains the digitmap,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,23,Q_MGCP_CONNECTION_ID,connection_id,,string,Connection identifier,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_mod,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_prt,0 +113,Q_PROTO_MGCP,Audio/Video,mgcp,Media Gateway Control Protocol,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +326,Q_PROTO_MIMP,Webmail,mimp,IMP mobile version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +115,Q_PROTO_MMS,Audio/Video,mms,Microsoft Multimedia Streaming,541,Q_MPA_FILENAME,filename,,string,Name of the file currently broadcasted.,0,session_fix,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,1,Q_MMSE_MESSAGE_TYPE,message_type,,string_index,Message type.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,2,Q_MMSE_MESSAGE_CODE,message_code,,uint8,Message type (in integer).,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,3,Q_MMSE_RECEIVER,receiver,,string,MMS receiver.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,4,Q_MMSE_NB_RECEIVER,nb_receiver,,uint32,Number of receiver for the same MMS.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,5,Q_MMSE_VERSION,version,,string,Protocol version.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,6,Q_MMSE_TID,tid,,string,Transaction identifier.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,7,Q_MMSE_SENDER,sender,,string,MMS sender.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,8,Q_MMSE_SUBJECT,subject,,string,MMS subject.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,9,Q_MMSE_CONTENT_TYPE,content_type,,string,The content type of the message.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,10,Q_MMSE_MESSAGE_CLASS,message_class,,string_index,Specifies the class of message.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,11,Q_MMSE_MESSAGE_ID,message_id,,string,A unique reference assigned to the message. The ID enables a client to match delivery reports with previously sent messages.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,12,Q_MMSE_CONTENT_LOCATION,content_location,,string,Specifies a reference to the stored version of the MM that can be retrieved or can be used to obtain information about the MM using the WSP/HTTP GET or M-Mbox-View-req.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,13,Q_MMSE_DELIVERY_REPORT,delivery_report,,string_index,Specifies whether the user wants a delivery report from each recipient.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,14,Q_MMSE_PRIORITY,priority,,string_index,Priority of the message for the recipient.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,15,Q_MMSE_READ_REPORT,read_report,,string_index,Specifies whether the user wants a read report from each recipient as a new message.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,16,Q_MMSE_REPORT_ALLOWED,report_allowed,,string_index,Sending of delivery report allowed to the user or not.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,17,Q_MMSE_RESPONSE_STATUS_CODE,response_status_code,,uint32,"It is used by the originating MMS Proxy-Relay to inform the MMS Client, which has performed a submission or a forward the result of that particular operation.",0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,18,Q_MMSE_RESPONSE_STATUS_TEXT,response_status_text,,string,Description which qualifies the response_status_code. The description may be based on the on the status code names contained in RFC1893.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,19,Q_MMSE_MESSAGE_SZ,message_sz,,uint32,Full size of message in octets.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,20,Q_MMSE_STATUS,status,,string_index,It is used to inform the originating MMS Client of the status of an MM that a delivery report was requested for.,0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,21,Q_MMSE_RETRIEVE_STATUS,retrieve_status,,string_index,"It is used by the recipient MMS Proxy-Relay to inform the recipient MMS Client about errors, if any that occurred during the preceding retrieval operation.",0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,22,Q_MMSE_READ_STATUS,read_status,,string_index,"Conveys information from the recipient MMS Client to the originating MMS Client whether an MM, for which a read report was requested, was read or not.",0,session_mod,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,530,Q_MPA_CONTENT,content,,buffer,The message content (headers are not included).,0,session_mod,1 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,23,Q_MMSE_CONTENT_PART,content_part,,parent,Message sub-part.,0,session_fix,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,24,Q_MMSE_CONTENT_PART_TYPE,content_part_type,,string,Message sub-part type.,0,session_prt,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,25,Q_MMSE_CONTENT_PART_ID,content_part_id,,string,Message sub-part ID.,0,session_prt,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,26,Q_MMSE_CONTENT_PART_FILENAME,content_part_filename,,string,Name of the file containing the current message sub-part data.,0,session_prt,0 +116,Q_PROTO_MMSE,Wap,mmse,MultiMedia Messages Encapsulation,27,Q_MMSE_CONTENT_PART_DATA,content_part_data,,buffer,Message sub-part data.,0,session_prt,0 +251,Q_PROTO_MPEGTS,Audio/Video,mpegts,MPEG-Transport Stream,1,Q_MPEGTS_CHUNK_LEN,chunk_len,,uint32,Data length.,0,session_fix,0 119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,1,Q_MPLS_LABEL,label,,uint32,Label allowing the routing process of the packet through the various LSPs (Label-Switched Paths) crossed along the delivery path.,0,pkt,0 119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,2,Q_MPLS_EXP,exp,,uint8,Packet queuing priority (QoS).,0,pkt,0 119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,3,Q_MPLS_BOS,bos,,uint8,"Bottom Of Stack: equals to 1 if the last level of MPLS is reached, and 0 if another level of MPLS exists.",0,pkt,0 119,Q_PROTO_MPLS,Routing,mpls,Multiprotocol Packet Label Switching,4,Q_MPLS_TTL,ttl,,uint8,Lifetime of the MPLS message.,0,pkt,0 -1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used in M+ Messenger. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session,0 -1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,604,Q_MPA_SERVICE,service,,string,"M+ current service identification string. The service is computed every 5 secondes, this attribute is extracted only when the service changes.",0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,15,Q_MSN_REQUEST,request,,parent,Parent attribute including a MSN method and its service.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,555,Q_MPA_METHOD,method,,string,Contains the MSN command.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,14,Q_MSN_FILE_IDENTIFIER,file_identifier,,uint32,File identifier.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,758,Q_MPA_FILENAME_UTF16,filename_utf16,,buffer,UTF-16 encoded filename.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,637,Q_MPA_IP_LOCAL,ip_local,,string,Local IP address.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,1,Q_MSN_PROFILE,profile,,string,Information about the user.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,2,Q_MSN_GROUP,group,,string,Information about group.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,3,Q_MSN_CONTACT,contact,,string,Information about a member of the contact list.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,4,Q_MSN_CLIENT_NICKNAME,client_nickname,,string,Nickname used by the user.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,5,Q_MSN_CONTACT_NICKNAME,contact_nickname,,string,Nickname used by a member of the contact list.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,6,Q_MSN_CONTACT_ID,contact_id,,string,Identification number of member changing status.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,7,Q_MSN_UID,uid,,string,The client ID number is the sum of several values specifying client's options.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,8,Q_MSN_ONLINE_PRINCIPAL,online_principal,,string,Message signaling change of status of member of contact list.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,648,Q_MPA_FILE_CHUNK_TYPE,file_chunk_type,,string,Transfer type.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,17,Q_MSN_FILE_CHUNK_IDENTIFIER,file_chunk_identifier,,uint32,File identifier related to the current chunk.,0,session,0 -120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol versions used.,0,session,0 -121,Q_PROTO_MSN_GROUPS,Forum,msn_groups,MSN groups,1,Q_MSN_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,1,Q_MSN_VIDEO_RECIPIENTID,recipientid,,uint32,Identification number of recipient.,0,session,0 -123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,2,Q_MSN_VIDEO_SESSIONID,sessionid,,uint32,Identification number of session.,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),8,Q_MSRP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),7,Q_MSRP_AUTHORITY,authority,,string,Authority part of an MSRP uri,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),6,Q_MSRP_URI,uri,,string,MSRP uri,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),5,Q_MSRP_URI_ENTRY,uri_entry,,parent,Parent attribute raised for each MSRP uri.,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),4,Q_MSRP_PATH_TYPE,path_type,,string,path_entry attribute type.,0,session,0 -919,Q_PROTO_MSRP,Audio/Video,msrp,The Message Session Relay Protocol (MSRP),3,Q_MSRP_PATH_ENTRY,path_entry,,parent,Parent attribute raised in order to describe a From_path or To_path field.,0,session,0 -124,Q_PROTO_MUTE,Peer to Peer,mute,Mute Protocol,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,577,Q_MPA_NAME,name,,string,Name the user.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -125,Q_PROTO_MYSPACE,Web,myspace,My Space,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,1,Q_MYSQL_BASE,base,,string,Database name.,0,session,0 -126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,581,Q_MPA_QUERY,query,,string,SQL query.,0,session,0 -128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,1,Q_NBNS_SERVICE,service,,string,Service Name.,0,session,0 -128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,581,Q_MPA_QUERY,query,,string,Query sent.,0,session,0 -128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,Query type.,0,session,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,524,Q_MPA_CALLER,caller,,string,Name of the caller.,0,session,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,523,Q_MPA_CALLEE,callee,,string,Name of the called member.,0,session,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,1,Q_NETBIOS_MESSAGE_TYPE,message_type,,string_index,Connection type.,0,session,0 -129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,2,Q_NETBIOS_COMMAND,command,,string_index,Message command value.,0,session,0 -569,Q_PROTO_NETBSD_UPDATE,Web,netbsd_update,NetBSD Updates,1,Q_NETBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,6,Q_NETFLIX_LOGIN,login,,string,User's login string.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,2,Q_NETFLIX_VIDEOID,videoid,,string,Netflix video identifier.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,4,Q_NETFLIX_TITLE,title,,string,Title of the movie.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,5,Q_NETFLIX_DESCRIPTION,description,,string,Synopsis of the movie.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,3,Q_NETFLIX_DATE,date,,string,Release date of the movie.,0,session,0 -734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix,1,Q_NETFLIX_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session,0 -130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow Protocol,608,Q_MPA_VERSION,version,,uint16,Protocol version.,0,session,0 -130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow Protocol,1,Q_NETFLOW_COUNT,count,,uint16,Number of items in the packet.,0,pkt,0 -322,Q_PROTO_NETLOG,Web,netlog,netlog,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -322,Q_PROTO_NETLOG,Web,netlog,netlog,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -322,Q_PROTO_NETLOG,Web,netlog,netlog,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -322,Q_PROTO_NETLOG,Web,netlog,netlog,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -322,Q_PROTO_NETLOG,Web,netlog,netlog,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,11,Q_NFS_COMMAND,command,,parent,"Parent entry, for NFS command fields.",0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,12,Q_NFS_FILE,file,,parent,"Parent entry, for file-related fields. Multiple file entries can occur for specific commands, in particular: READDIR, READDIRPLUS - first entry is read directory, others are listed files; LINK - first entry is target, second entry is link; LOOKUP - first entry is found object, second entry is its parent directory.",0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,608,Q_MPA_VERSION,version,,string,Used version,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,2,Q_NFS_STATUS,status,,string_index,Response status for a request,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,1,Q_NFS_PROCEDURE,procedure,,string_index,Procedure or command sent,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,541,Q_MPA_FILENAME,filename,,string,"Accessed, written or read file name.",0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,3,Q_NFS_FILE_HANDLE,file_handle,,binary,Unique identifier for a file.,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,5,Q_NFS_OFFSET,offset,,uint64,Offset of the written/read file. Extracted on READ and WRITE procedure replies.,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,4,Q_NFS_FILESIZE,filesize,,uint64,Size of the file.,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,6,Q_NFS_UID,uid,,uint32,Generic user ID.,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,7,Q_NFS_GID,gid,,uint32,Identifier of the file owner's group (see page 21 of RFC 1813).,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,10,Q_NFS_MODE,mode,,uint32,Protection mode bits (see page 22 of RFC 1813).,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,9,Q_NFS_TYPE_STRING,type_string,,string,File type (see page 19 of RFC 1813).,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,8,Q_NFS_TYPE,type,,string_index,File type (see page 19 of RFC 1813).,0,session,0 -131,Q_PROTO_NFS,File Server,nfs,Network File System,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,583,Q_MPA_QUERY_TEXT,query_text,,string,Decoded query text.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,582,Q_MPA_QUERY_RAW,query_raw,,string,Query in raw HTML,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,581,Q_MPA_QUERY,query,,parent,Parent attribute gathering the attributes relative to a query.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,2,Q_NICONICO_DOUGA_VIDEOID,videoid,,string,Nico nico video identifier.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,3,Q_NICONICO_DOUGA_TAG,tag,,string,Video tag.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,4,Q_NICONICO_DOUGA_TITLE,title,,string,Title of the video.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,5,Q_NICONICO_DOUGA_DESCRIPTION,description,,string,Synopsis of the video.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,532,Q_MPA_DATE,date,,string,Release date of the video.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,1,Q_NICONICO_DOUGA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,704,Q_MPA_NICKNAME,nickname,,string,User nickname.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,NicoNico Douga,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,1,Q_NNTP_NEWSGROUP,newsgroup,,string,Newsgroup name.,0,session,0 -134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,2,Q_NNTP_SUBJECT,subject,,string,Message subject.,0,session,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,session,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,2,Q_NTP_SOURCE,source,,string_index,Reference of the primary source.,0,session,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,3,Q_NTP_REFERENCE_CLOCK,reference_clock,,ip_addr,Reference clock IP address.,0,session,0 -137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,4,Q_NTP_POLL_INTERVAL,poll_interval,,uint16,Polling interval (in seconds).,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,1,Q_ODNOKLASSNIKI_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,odnoklassniki,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -553,Q_PROTO_OOVOO,Instant Messaging,oovoo,Oovoo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -570,Q_PROTO_OPENBSD_UPDATE,Web,openbsd_update,OpenBSD Updates,1,Q_OPENBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session,0 -336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,1,Q_OPENVPN_OPCODE,opcode,,uint8,Operation code or message type,0,session,0 -336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,2,Q_OPENVPN_SEQ,seq,,uint32,Sequence number,0,session,0 -578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version of Opera which will be installed.,0,session,0 -578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Opera version currently installed.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 +1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used in M+ Messenger. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_mod,0 +1455,Q_PROTO_MPLUS_MESSENGER,Instant Messaging,mplus_messenger,M+ Messenger,604,Q_MPA_SERVICE,service,,string,"M+ current service identification string. The service is computed every 5 secondes, this attribute is extracted only when the service changes.",0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_fix,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_fix,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,15,Q_MSN_REQUEST,request,,parent,Parent attribute including a MSN method and its service.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,555,Q_MPA_METHOD,method,,string,Contains the MSN command.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,14,Q_MSN_FILE_IDENTIFIER,file_identifier,,uint32,File identifier.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,758,Q_MPA_FILENAME_UTF16,filename_utf16,,buffer,UTF-16 encoded filename.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,637,Q_MPA_IP_LOCAL,ip_local,,string,Local IP address.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,1,Q_MSN_PROFILE,profile,,string,Information about the user.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,2,Q_MSN_GROUP,group,,string,Information about group.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,3,Q_MSN_CONTACT,contact,,string,Information about a member of the contact list.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,4,Q_MSN_CLIENT_NICKNAME,client_nickname,,string,Nickname used by the user.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,5,Q_MSN_CONTACT_NICKNAME,contact_nickname,,string,Nickname used by a member of the contact list.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,6,Q_MSN_CONTACT_ID,contact_id,,string,Identification number of member changing status.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string,Contact status.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,7,Q_MSN_UID,uid,,string,The client ID number is the sum of several values specifying client's options.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string,Status of connected user.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,8,Q_MSN_ONLINE_PRINCIPAL,online_principal,,string,Message signaling change of status of member of contact list.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,648,Q_MPA_FILE_CHUNK_TYPE,file_chunk_type,,string,Transfer type.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,17,Q_MSN_FILE_CHUNK_IDENTIFIER,file_chunk_identifier,,uint32,File identifier related to the current chunk.,0,session_prt,0 +120,Q_PROTO_MSN,Instant Messaging,msn,MSN Messenger,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol versions used.,0,session_fix,0 +121,Q_PROTO_MSN_GROUPS,Forum,msn_groups,MSN groups,1,Q_MSN_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_fix,0 +122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 +122,Q_PROTO_MSN_SEARCH,Web,msn_search,MSN Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,1,Q_MSN_VIDEO_RECIPIENTID,recipientid,,uint32,Identification number of recipient.,0,session_fix,0 +123,Q_PROTO_MSN_VIDEO,Audio/Video,msn_video,MSN Video,2,Q_MSN_VIDEO_SESSIONID,sessionid,,uint32,Identification number of session.,0,session_fix,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,8,Q_MSRP_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,7,Q_MSRP_AUTHORITY,authority,,string,Authority part of an MSRP uri,0,session_mod,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,6,Q_MSRP_URI,uri,,string,MSRP uri,0,session_mod,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,5,Q_MSRP_URI_ENTRY,uri_entry,,parent,Parent attribute raised for each MSRP uri.,0,session_mod,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,4,Q_MSRP_PATH_TYPE,path_type,,string,path_entry attribute type.,0,session_mod,0 +919,Q_PROTO_MSRP,Audio/Video,msrp,Message Session Relay Protocol,3,Q_MSRP_PATH_ENTRY,path_entry,,parent,Parent attribute raised in order to describe a From_path or To_path field.,0,session_mod,0 +124,Q_PROTO_MUTE,Peer to Peer,mute,Mute,795,Q_MPA_PEER_INFO,peer_info,,,"Structure containing a network peer classification prediction. The clep_peer_t structure (ixE 4.18.x) provides the IP v4 or v6 address (ul3l4_addr_t), the transport protocol ID (TCP/UDP/etc.), the listening port, and the list of protocols to by classified in case of prediction success.",0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,704,Q_MPA_NICKNAME,nickname,,string,User's profile displayed name.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +125,Q_PROTO_MYSPACE,Web,myspace,MySpace.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,1,Q_MYSQL_BASE,base,,string,Database name.,0,session_fix,0 +126,Q_PROTO_MYSQL,Database,mysql,MySQL Protocol,581,Q_MPA_QUERY,query,,string,SQL query.,0,session_mod,0 +128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,1,Q_NBNS_SERVICE,service,,string,Service Name.,0,session_mod,0 +128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,581,Q_MPA_QUERY,query,,string,Query sent.,0,session_mod,0 +128,Q_PROTO_NBNS,Network Service,nbns,Netbios Name Service,584,Q_MPA_QUERY_TYPE,query_type,,string_index,Query type.,0,session_mod,0 +129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,524,Q_MPA_CALLER,caller,,string,Name of the caller.,0,session_mod,0 +129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,523,Q_MPA_CALLEE,callee,,string,Name of the called member.,0,session_mod,0 +129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,1,Q_NETBIOS_MESSAGE_TYPE,message_type,,string_index,Connection type.,0,session_mod,0 +129,Q_PROTO_NETBIOS,File Server,netbios,Netbios,2,Q_NETBIOS_COMMAND,command,,string_index,Message command value.,0,session_mod,0 +569,Q_PROTO_NETBSD_UPDATE,Web,netbsd_update,NetBSD Updates,1,Q_NETBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,6,Q_NETFLIX_LOGIN,login,,string,User's login string.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,2,Q_NETFLIX_VIDEOID,videoid,,string,Netflix video identifier.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,4,Q_NETFLIX_TITLE,title,,string,Title of the movie.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,5,Q_NETFLIX_DESCRIPTION,description,,string,Synopsis of the movie.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,3,Q_NETFLIX_DATE,date,,string,Release date of the movie.,0,session_mod,0 +734,Q_PROTO_NETFLIX,Audio/Video,netflix,Netflix.com,1,Q_NETFLIX_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 +130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow,608,Q_MPA_VERSION,version,,uint16,Protocol version.,0,session_fix,0 +130,Q_PROTO_NETFLOW,Network Management,netflow,Cisco Netflow,1,Q_NETFLOW_COUNT,count,,uint16,Number of items in the packet.,0,pkt,0 +322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 +322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 +322,Q_PROTO_NETLOG,Web,netlog,Netlog.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_fix,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,11,Q_NFS_COMMAND,command,,parent,"Parent entry, for NFS command fields.",0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,12,Q_NFS_FILE,file,,parent,"Parent entry, for file-related fields. Multiple file entries can occur for specific commands, in particular: READDIR, READDIRPLUS - first entry is read directory, others are listed files; LINK - first entry is target, second entry is link; LOOKUP - first entry is found object, second entry is its parent directory.",0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,608,Q_MPA_VERSION,version,,string,Used version,0,session_fix,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,2,Q_NFS_STATUS,status,,string_index,Response status for a request,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,1,Q_NFS_PROCEDURE,procedure,,string_index,Procedure or command sent,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,541,Q_MPA_FILENAME,filename,,string,"Accessed, written or read file name.",0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,3,Q_NFS_FILE_HANDLE,file_handle,,binary,Unique identifier for a file.,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,5,Q_NFS_OFFSET,offset,,uint64,Offset of the written/read file. Extracted on READ and WRITE procedure replies.,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,4,Q_NFS_FILESIZE,filesize,,uint64,Size of the file.,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,6,Q_NFS_UID,uid,,uint32,Generic user ID.,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,7,Q_NFS_GID,gid,,uint32,Identifier of the file owner's group (see page 21 of RFC 1813).,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,10,Q_NFS_MODE,mode,,uint32,Protection mode bits (see page 22 of RFC 1813).,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,9,Q_NFS_TYPE_STRING,type_string,,string,File type (see page 19 of RFC 1813).,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,8,Q_NFS_TYPE,type,,string_index,File type (see page 19 of RFC 1813).,0,session_mod,0 +131,Q_PROTO_NFS,File Server,nfs,Network File System,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),583,Q_MPA_QUERY_TEXT,query_text,,string,Decoded query text.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),582,Q_MPA_QUERY_RAW,query_raw,,string,Query in raw HTML,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),581,Q_MPA_QUERY,query,,parent,Parent attribute gathering the attributes relative to a query.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),763,Q_MPA_VIDEO_DURATION,video_duration,,string,Duration of the video in seconds.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),2,Q_NICONICO_DOUGA_VIDEOID,videoid,,string,Nico nico video identifier.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),3,Q_NICONICO_DOUGA_TAG,tag,,string,Video tag.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),4,Q_NICONICO_DOUGA_TITLE,title,,string,Title of the video.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),5,Q_NICONICO_DOUGA_DESCRIPTION,description,,string,Synopsis of the video.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),532,Q_MPA_DATE,date,,string,Release date of the video.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),1,Q_NICONICO_DOUGA_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),704,Q_MPA_NICKNAME,nickname,,string,User nickname.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +832,Q_PROTO_NICONICO_DOUGA,Audio/Video,niconico_douga,Nicovideo.jp (aka Nico Nico Douga),630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,1,Q_NNTP_NEWSGROUP,newsgroup,,string,Newsgroup name.,0,session_mod,0 +134,Q_PROTO_NNTP,Forum,nntp,Network News Transport Protocol,2,Q_NNTP_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,session_fix,0 +137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,2,Q_NTP_SOURCE,source,,string_index,Reference of the primary source.,0,session_mod,0 +137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,3,Q_NTP_REFERENCE_CLOCK,reference_clock,,ip_addr,Reference clock IP address.,0,session_mod,0 +137,Q_PROTO_NTP,Network Service,ntp,Network Time Protocol,4,Q_NTP_POLL_INTERVAL,poll_interval,,uint16,Polling interval (in seconds).,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,1,Q_ODNOKLASSNIKI_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +462,Q_PROTO_ODNOKLASSNIKI,Forum,odnoklassniki,Odnoklassniki.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +553,Q_PROTO_OOVOO,Instant Messaging,oovoo,Oovoo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +570,Q_PROTO_OPENBSD_UPDATE,Web,openbsd_update,OpenBSD Updates,1,Q_OPENBSD_UPDATE_PACKAGE_NAME,package_name,,string,Software package name.,0,session_mod,0 +336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,1,Q_OPENVPN_OPCODE,opcode,,uint8,Operation code or message type,0,session_mod,0 +336,Q_PROTO_OPENVPN,Tunneling,openvpn,openvpn,2,Q_OPENVPN_SEQ,seq,,uint32,Sequence number,0,session_mod,0 +578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,703,Q_MPA_NEW_VERSION,new_version,,string,New version of Opera which will be installed.,0,session_fix,0 +578,Q_PROTO_OPERA_UPDATE,Web,opera_update,Opera Update,702,Q_MPA_CURRENT_VERSION,current_version,,string,Opera version currently installed.,0,session_fix,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +265,Q_PROTO_ORANGEMAIL,Webmail,orangemail,Orange webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,608,Q_MPA_VERSION,version,,uint8,Protocol version.,0,pkt,0 140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,1,Q_OSPF_MESSAGE_TYPE,message_type,,string_index,Message type.,0,pkt,0 140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,2,Q_OSPF_ROUTER_ID,router_id,,ip_addr,Router Id.,0,pkt,0 140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,3,Q_OSPF_AREA_ID,area_id,,ip_addr,The Area ID of the area to which the attached network belongs.,0,pkt,0 140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,4,Q_OSPF_AUTH_TYPE,auth_type,,string_index,Type of authentication used.,0,pkt,0 140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,38,Q_OSPF_AUTH_DATA,auth_data,,binary,Authentication data.,0,pkt,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,5,Q_OSPF_HELLO_INTERVAL,hello_interval,,uint16,The number of seconds between this router's Hello packets.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,6,Q_OSPF_NETMASK,netmask,,ip_addr,The network mask associated with this interface.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,7,Q_OSPF_PRIO,prio,,uint8,This router's Router Priority. Used in (Backup) Designated Router election.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,8,Q_OSPF_DEAD_INTERVAL,dead_interval,,uint32,The number of seconds before declaring a silent router down.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,9,Q_OSPF_DESIGNED_ROUTER,designed_router,,ip_addr,"The identity of the Designated Router for this network, in the view of the sending router>.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,10,Q_OSPF_BACKUP_ROUTER,backup_router,,ip_addr,"The identity of the Backup Designated Router for this network, in the view of the sending router.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,11,Q_OSPF_NEIGHBOR,neighbor,,ip_addr,The Router IDs of each router from whom valid Hello packets have been seen recently on the network.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,12,Q_OSPF_LS_ENTRY,ls_entry,,parent,A parent entry for ls attributes.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,13,Q_OSPF_LS_AGE,ls_age,,uint16,The time in seconds since the LSA was originated.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,14,Q_OSPF_LS_TYPE,ls_type,,uint32,The type of the LSA.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,15,Q_OSPF_LS_ID,ls_id,,ip_addr,This field identifies the portion of the internet environment that is being described by the LSA.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,16,Q_OSPF_LS_ADV_ROUTER,ls_adv_router,,ip_addr,The Router ID of the router that originated the LSA.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,17,Q_OSPF_LS_SEQ_NUMBER,ls_seq_number,,uint32,Detects old or duplicate LSAs.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,18,Q_OSPF_LS_NETMASK,ls_netmask,,ip_addr,The IP address mask for the network.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,19,Q_OSPF_LS_METRIC,ls_metric,,uint32,The cost of this route.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,20,Q_OSPF_LS_ATTACH_ROUTER,ls_attach_router,,ip_addr,The Router IDs of each of the routers attached to the network.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,21,Q_OSPF_LS_FLAGS_V,ls_flags_v,,uint8,"When set, the router is an endpoint of one or more fully adjacent virtual links having the described area as Transit area.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,22,Q_OSPF_LS_FLAGS_E,ls_flags_e,,uint8,"When set, the router is an AS boundary router.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,23,Q_OSPF_LS_FLAGS_B,ls_flags_b,,uint8,"When set, the router is an area border router.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,24,Q_OSPF_LS_OPTIONS,ls_options,,uint8,Content of the options field present in the LS description.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,25,Q_OSPF_LINK_ENTRY,link_entry,,parent,Parent entry for link attributes.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,26,Q_OSPF_LINK_ID,link_id,,ip_addr,Identifies the object that this router link connects to.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,27,Q_OSPF_LINK_DATA,link_data,,ip_addr,"For connections to stub networks, Link Data specifies the network's IP address mask. For unnumbered point-to-point connections, it specifies the interface's MIB-II [Ref8] ifIndex value. For the other link types it specifies the router interface's IP address.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,28,Q_OSPF_LINK_TYPE,link_type,,uint8,A quick description of the router link.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,29,Q_OSPF_INTERFACE_MTU,interface_mtu,,uint16,The MTU for this interface.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,30,Q_OSPF_OPTIONS,options,,uint8,The optional capabilities supported by the router.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,31,Q_OSPF_FLAGS_I,flags_i,,uint8,"The Init bit. When set to 1, this packet is the first in the sequence of Database Description Packets.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,32,Q_OSPF_FLAGS_M,flags_m,,uint8,"The More bit. When set to 1, it indicates that more Database Description Packets are to follow.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,33,Q_OSPF_FLAGS_MS,flags_ms,,uint8,"The Master/Slave bit. When set to 1, it indicates that the router is the master during the Database Exchange process. Otherwise, the router is the slave.",0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,34,Q_OSPF_DD_SEQ_NBR,dd_seq_nbr,,uint32,Used to sequence the collection of Database Description Packets.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,35,Q_OSPF_EXTERNAL_ENTRY,external_entry,,parent,Parent entry for external_fwd_addr and external_route_tag.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,36,Q_OSPF_EXTERNAL_FWD_ADDR,external_fwd_addr,,ip_addr,Data traffic for the advertised destination will be forwarded to this address.,0,session,0 -140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,37,Q_OSPF_EXTERNAL_ROUTE_TAG,external_route_tag,,uint32,A 32-bit field attached to each external route.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -141,Q_PROTO_OWA,Webmail,owa,Outlook Web Access,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,1,Q_PALTALK_UID,uid,,uint32,Generic user ID.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,2,Q_PALTALK_USER_EMAIL,user_email,,string,User's email address.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,580,Q_MPA_PROTO_VERSION,proto_version,,uint16,Protocol version used,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,3,Q_PALTALK_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,6,Q_PALTALK_CHANNEL,channel,,string,Chat room name.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,4,Q_PALTALK_SENDER_UID,sender_uid,,uint32,Message sender's unique identifier.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,5,Q_PALTALK_RECEIVER_UID,receiver_uid,,uint32,Message receiver's unique identifier.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,7,Q_PALTALK_CALLER_UID,caller_uid,,uint32,Caller's unique identifier.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,8,Q_PALTALK_CALLEE_UID,callee_uid,,uint32,Callee's unique identifier.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session,0 -142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk Protocol,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session,0 -143,Q_PROTO_PALTALK_AUDIO,Audio/Video,paltalk_audio,Paltalk audio chat,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,600,Q_MPA_SENDER,sender,,string,File sender (this attribute is no longer extracted),0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a file transfer.,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,1,Q_PALTALK_TRANSFER_SENDER_UID,sender_uid,,uint32,File sender's UID,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,2,Q_PALTALK_TRANSFER_RECEIVER_UID,receiver_uid,,uint32,File receiver's UID,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -599,Q_PROTO_PALTALK_VIDEO,Audio/Video,paltalk_video,Paltalk video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -144,Q_PROTO_PAP,Authentication,pap,PPP Password Authentication Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -144,Q_PROTO_PAP,Authentication,pap,PPP Password Authentication Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -144,Q_PROTO_PAP,Authentication,pap,PPP Password Authentication Protocol,1,Q_PAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,1,Q_PERFORCE_PARAMETER,parameter,,parent,Parent attribute containing the metadata related to a perforce parameter.,0,session,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,2,Q_PERFORCE_PARAMETER_NAME,parameter_name,,string,Name of the perforce parameter.,0,session,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,4,Q_PERFORCE_PARAMETER_VALUE,parameter_value,,string,Value of the perforce parameter.,0,session,0 -1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,3,Q_PERFORCE_PARAMETER_SIZE,parameter_size,,uint32,Size in bytes of the parameter value.,0,session,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of the attached file.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session,1 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server banner line.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session,0 -147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,4,Q_POSTGRES_AUTHENTIFICATION_TYPE,authentification_type,,string,Authentication method requested by the server.,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,1,Q_POSTGRES_BASE,base,,string,Database name.,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,2,Q_POSTGRES_SERVER_VERSION,server_version,,string,Server version,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version used,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,581,Q_MPA_QUERY,query,,string,Query sent,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,3,Q_POSTGRES_ERROR,error,,string,Error message,0,session,0 -150,Q_PROTO_POSTGRES,Database,postgres,Postgres,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session,0 -331,Q_PROTO_PPLIVE,Audio/Video,pplive,pplive,555,Q_MPA_METHOD,method,,string,Contains the method used for a PPLive Live Streaming command,0,session,0 -151,Q_PROTO_PPP,Tunneling,ppp,Point to Point Protocol,1,Q_PPP_PROTOCOL,protocol,,string,Higher level protocol code or name.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,PPP Over Ethernet,1,Q_PPPOE_VERSION,version,,uint8,Version of the protocol.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,PPP Over Ethernet,2,Q_PPPOE_TYPE,type,,uint8,Type field. Its unique valid value is 1.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,PPP Over Ethernet,3,Q_PPPOE_CODE,code,,uint8,Attribute showing the current stage of the session.,0,pkt,0 -152,Q_PROTO_PPPOE,Tunneling,pppoe,PPP Over Ethernet,4,Q_PPPOE_SESSION_ID,session_id,,uint16,Uniquely identifies the current user session.,0,pkt,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,1,Q_PPTP_CONTROL_TYPE,control_type,,string_index,Message type.,0,session,0 -153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,2,Q_PPTP_VENDOR,vendor,,string,"The type of PAC being used, or the type of PNS software being used",0,session,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,5,Q_OSPF_HELLO_INTERVAL,hello_interval,,uint16,The number of seconds between this router's Hello packets.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,6,Q_OSPF_NETMASK,netmask,,ip_addr,The network mask associated with this interface.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,7,Q_OSPF_PRIO,prio,,uint8,This router's Router Priority. Used in (Backup) Designated Router election.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,8,Q_OSPF_DEAD_INTERVAL,dead_interval,,uint32,The number of seconds before declaring a silent router down.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,9,Q_OSPF_DESIGNED_ROUTER,designed_router,,ip_addr,"The identity of the Designated Router for this network, in the view of the sending router>.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,10,Q_OSPF_BACKUP_ROUTER,backup_router,,ip_addr,"The identity of the Backup Designated Router for this network, in the view of the sending router.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,11,Q_OSPF_NEIGHBOR,neighbor,,ip_addr,The Router IDs of each router from whom valid Hello packets have been seen recently on the network.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,12,Q_OSPF_LS_ENTRY,ls_entry,,parent,A parent entry for ls attributes.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,13,Q_OSPF_LS_AGE,ls_age,,uint16,The time in seconds since the LSA was originated.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,14,Q_OSPF_LS_TYPE,ls_type,,uint32,The type of the LSA.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,15,Q_OSPF_LS_ID,ls_id,,ip_addr,This field identifies the portion of the internet environment that is being described by the LSA.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,16,Q_OSPF_LS_ADV_ROUTER,ls_adv_router,,ip_addr,The Router ID of the router that originated the LSA.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,17,Q_OSPF_LS_SEQ_NUMBER,ls_seq_number,,uint32,Detects old or duplicate LSAs.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,18,Q_OSPF_LS_NETMASK,ls_netmask,,ip_addr,The IP address mask for the network.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,19,Q_OSPF_LS_METRIC,ls_metric,,uint32,The cost of this route.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,20,Q_OSPF_LS_ATTACH_ROUTER,ls_attach_router,,ip_addr,The Router IDs of each of the routers attached to the network.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,21,Q_OSPF_LS_FLAGS_V,ls_flags_v,,uint8,"When set, the router is an endpoint of one or more fully adjacent virtual links having the described area as Transit area.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,22,Q_OSPF_LS_FLAGS_E,ls_flags_e,,uint8,"When set, the router is an AS boundary router.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,23,Q_OSPF_LS_FLAGS_B,ls_flags_b,,uint8,"When set, the router is an area border router.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,24,Q_OSPF_LS_OPTIONS,ls_options,,uint8,Content of the options field present in the LS description.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,25,Q_OSPF_LINK_ENTRY,link_entry,,parent,Parent entry for link attributes.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,26,Q_OSPF_LINK_ID,link_id,,ip_addr,Identifies the object that this router link connects to.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,27,Q_OSPF_LINK_DATA,link_data,,ip_addr,"For connections to stub networks, Link Data specifies the network's IP address mask. For unnumbered point-to-point connections, it specifies the interface's MIB-II [Ref8] ifIndex value. For the other link types it specifies the router interface's IP address.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,28,Q_OSPF_LINK_TYPE,link_type,,uint8,A quick description of the router link.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,29,Q_OSPF_INTERFACE_MTU,interface_mtu,,uint16,The MTU for this interface.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,30,Q_OSPF_OPTIONS,options,,uint8,The optional capabilities supported by the router.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,31,Q_OSPF_FLAGS_I,flags_i,,uint8,"The Init bit. When set to 1, this packet is the first in the sequence of Database Description Packets.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,32,Q_OSPF_FLAGS_M,flags_m,,uint8,"The More bit. When set to 1, it indicates that more Database Description Packets are to follow.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,33,Q_OSPF_FLAGS_MS,flags_ms,,uint8,"The Master/Slave bit. When set to 1, it indicates that the router is the master during the Database Exchange process. Otherwise, the router is the slave.",0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,34,Q_OSPF_DD_SEQ_NBR,dd_seq_nbr,,uint32,Used to sequence the collection of Database Description Packets.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,35,Q_OSPF_EXTERNAL_ENTRY,external_entry,,parent,Parent entry for external_fwd_addr and external_route_tag.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,36,Q_OSPF_EXTERNAL_FWD_ADDR,external_fwd_addr,,ip_addr,Data traffic for the advertised destination will be forwarded to this address.,0,session_mod,0 +140,Q_PROTO_OSPF,Routing,ospf,Open Shortest Path First,37,Q_OSPF_EXTERNAL_ROUTE_TAG,external_route_tag,,uint32,A 32-bit field attached to each external route.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +141,Q_PROTO_OWA,Webmail,owa,Outlook Web App,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,1,Q_PALTALK_UID,uid,,uint32,Generic user ID.,0,session_fix,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,2,Q_PALTALK_USER_EMAIL,user_email,,string,User's email address.,0,session_fix,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,580,Q_MPA_PROTO_VERSION,proto_version,,uint16,Protocol version used,0,session_fix,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,3,Q_PALTALK_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,6,Q_PALTALK_CHANNEL,channel,,string,Chat room name.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,4,Q_PALTALK_SENDER_UID,sender_uid,,uint32,Message sender's unique identifier.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,5,Q_PALTALK_RECEIVER_UID,receiver_uid,,uint32,Message receiver's unique identifier.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,7,Q_PALTALK_CALLER_UID,caller_uid,,uint32,Caller's unique identifier.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,8,Q_PALTALK_CALLEE_UID,callee_uid,,uint32,Callee's unique identifier.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 +142,Q_PROTO_PALTALK,Instant Messaging,paltalk,PalTalk,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0 +143,Q_PROTO_PALTALK_AUDIO,Audio/Video,paltalk_audio,Paltalk audio chat,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,600,Q_MPA_SENDER,sender,,string,File sender (this attribute is no longer extracted),0,session_fix,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_fix,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,1,Q_PALTALK_TRANSFER_SENDER_UID,sender_uid,,uint32,File sender's UID,0,session_fix,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,2,Q_PALTALK_TRANSFER_RECEIVER_UID,receiver_uid,,uint32,File receiver's UID,0,session_fix,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +252,Q_PROTO_PALTALK_TRANSFER,File Transfer,paltalk_transfer,PalTalk Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +599,Q_PROTO_PALTALK_VIDEO,Audio/Video,paltalk_video,Paltalk video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +144,Q_PROTO_PAP,Authentication,pap,Password Authentication Protocol,1,Q_PAP_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0 +1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,1,Q_PERFORCE_PARAMETER,parameter,,parent,Parent attribute containing the metadata related to a perforce parameter.,0,session_mod,0 +1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,2,Q_PERFORCE_PARAMETER_NAME,parameter_name,,string,Name of the perforce parameter.,0,session_prt,0 +1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,4,Q_PERFORCE_PARAMETER_VALUE,parameter_value,,string,Value of the perforce parameter.,0,session_prt,0 +1091,Q_PROTO_PERFORCE,Application Service,perforce,Perforce Protocol,3,Q_PERFORCE_PARAMETER_SIZE,parameter_size,,uint32,Size in bytes of the parameter value.,0,session_prt,0 +319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,633,Q_MPA_IS_MOBILE_SERVICE,is_mobile_service,,uint32,Whether or not the access was made through a mobile device.,0,session_mod,0 +319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +319,Q_PROTO_PERFSPOT,Web,perfspot,Perfspot.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),556,Q_MPA_MIME_TYPE,mime_type,,string,Content type of the attached file.,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server banner line.,0,session_fix,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_fix,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),553,Q_MPA_MESSAGE_ID,message_id,,string,A unique identifier of the message.,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0 +147,Q_PROTO_POP3,Mail,pop3,Post Office Protocol (Version 3),749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,4,Q_POSTGRES_AUTHENTIFICATION_TYPE,authentification_type,,string,Authentication method requested by the server.,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,1,Q_POSTGRES_BASE,base,,string,Database name.,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,2,Q_POSTGRES_SERVER_VERSION,server_version,,string,Server version,0,session_fix,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,580,Q_MPA_PROTO_VERSION,proto_version,,string,Protocol version used,0,session_fix,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,581,Q_MPA_QUERY,query,,string,Query sent,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,3,Q_POSTGRES_ERROR,error,,string,Error message,0,session_mod,0 +150,Q_PROTO_POSTGRES,Database,postgres,PostgreSQL,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0 +331,Q_PROTO_PPLIVE,Audio/Video,pplive,pplive,555,Q_MPA_METHOD,method,,string,Contains the method used for a PPLive Live Streaming command,0,session_mod,0 +151,Q_PROTO_PPP,Tunneling,ppp,Point-to-Point Protocol,1,Q_PPP_PROTOCOL,protocol,,string,Higher level protocol code or name.,0,pkt,0 +152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,1,Q_PPPOE_VERSION,version,,uint8,Version of the protocol.,0,pkt,0 +152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,2,Q_PPPOE_TYPE,type,,uint8,Type field. Its unique valid value is 1.,0,pkt,0 +152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,3,Q_PPPOE_CODE,code,,uint8,Attribute showing the current stage of the session.,0,pkt,0 +152,Q_PROTO_PPPOE,Tunneling,pppoe,Point-to-Point Protocol Over Ethernet,4,Q_PPPOE_SESSION_ID,session_id,,uint16,Uniquely identifies the current user session.,0,pkt,0 +153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_fix,0 +153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,1,Q_PPTP_CONTROL_TYPE,control_type,,string_index,Message type.,0,session_mod,0 +153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,2,Q_PPTP_VENDOR,vendor,,string,"The type of PAC being used, or the type of PNS software being used",0,session_mod,0 153,Q_PROTO_PPTP,Tunneling,pptp,Point-to-Point Tunneling Protocol,3,Q_PPTP_RESULT_CODE,result_code,,string_index,Return message.,0,pkt,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,1,Q_Q931_DISPLAY,display,,string,Display name.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,2,Q_Q931_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,3,Q_Q931_SETUP_DELAY,setup_delay,,timeval,Call setup delay,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,4,Q_Q931_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,5,Q_Q931_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,6,Q_Q931_CAUSE,cause,,string_index,Disconnect cause.,0,session,0 -154,Q_PROTO_Q931,Audio/Video,q931,Q931,7,Q_Q931_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,1,Q_QQ_VERSION_CODE,version_code,,string,The protocol version number used by the client.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,2,Q_QQ_MSG_TYPE,msg_type,,uint32,QQ command name.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,4,Q_QQ_CALL_DATA,call_data,,buffer,QQ payload containing the data of the call (audio/video),0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,528,Q_MPA_CONTACT_LOGIN,contact_login,x,string,(deprecated) Contact Login,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,3,Q_QQ_MSG_CODE,msg_code,x,uint32,(deprecated) QQ command number.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,608,Q_MPA_VERSION,version,x,string_index,(deprecated) The protocol version name used by the client.,0,session,0 -156,Q_PROTO_QQ,Instant Messaging,qq,QQ,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,512,Q_MPA_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,1,Q_QQ_TRANSFER_FILEKEY,filekey,,string,MD5Sum computed on file data (extracted from data flow),0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ transfer Protocol,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -157,Q_PROTO_QUAKE,Game,quake,Quake,1,Q_QUAKE_SERVER,server,,string,Server name.,0,session,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,3,Q_QVOD_PEER_PORT,peer_port,,uint16,Listening TCP port of the QVOD peer.,0,session,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,2,Q_QVOD_PEER_IP,peer_ip,,ip_addr,IPv4 address of the QVOD peer.,0,session,0 -749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,1,Q_QVOD_PEER,peer,,parent,Parent attribute containing metadata related to a QVOD peer.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,15,Q_RADIUS_REQUEST,request,,parent,Contains information in a radius message.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,1,Q_RADIUS_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,2,Q_RADIUS_FRAMED_IP,framed_ip,,ip_addr,IP address.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,3,Q_RADIUS_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,4,Q_RADIUS_STATUS,status,,string_index,Status.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,5,Q_RADIUS_CODE,code,,uint8,Radius message code.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,6,Q_RADIUS_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,7,Q_RADIUS_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,8,Q_RADIUS_NAS_IP,nas_ip,,ip_addr,IP address of the NAS originating the Access-Request,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,9,Q_RADIUS_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,18,Q_RADIUS_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of physical port the network access server (NAS) is using to authenticate the user.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,19,Q_RADIUS_NAS_PORT_ID,nas_port_id,,string,Identifies the NAS.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,10,Q_RADIUS_CALLBACK_NUMBER,callback_number,,string,Contains the dialing string to be used for callback,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,11,Q_RADIUS_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,12,Q_RADIUS_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint32,Indicates how many octets have been sent to the port in the course of delivering this service,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,13,Q_RADIUS_ACCT_INPUT_OCTETS,acct_input_octets,,uint32,Indicates how many octets have been received from the port over the course of this service being provided,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,14,Q_RADIUS_ID,id,,uint8,Indicates the packet identifier. It must be less than 255,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,20,Q_RADIUS_SESSION_TIMEOUT,session_timeout,,uint32,The maximum number of seconds of service to be provided to the user before termination of the session or prompt.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,21,Q_RADIUS_IDLE_TIMEOUT,idle_timeout,,uint32,The maximum number of consecutive seconds of idle connection allowed to the user before termination of the session or prompt.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,16,Q_RADIUS_START_TIME,start_time,,timeval,Indicates the beginning of the user service.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,17,Q_RADIUS_STOP_TIME,stop_time,,timeval,Indicates the end of the user service.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,23,Q_RADIUS_NAS_IPV6,nas_ipv6,,ip6_addr,IPv6 address of the NAS originating the Access-Request.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,26,Q_RADIUS_LOGIN_IPV6_HOST,login_ipv6_host,,ip6_addr,Indicates the system with which to connect the user.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,27,Q_RADIUS_FRAMED_IPV6_ROUTE,framed_ipv6_route,,string,Provides the routing information to be configured for the user on the NAS,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,28,Q_RADIUS_FRAMED_IPV6_POOL,framed_ipv6_pool,,string,Contains the name of an assigned pool that SHOULD be used to assign an IPv6 prefix for the user.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,29,Q_RADIUS_AVP,avp,,parent,An attribute-value pair. One or several avp_ attributes (e.g. avp_str) are created according to the avp_type.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,30,Q_RADIUS_AVP_TYPE,avp_type,,uint8,Attribute type.,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,31,Q_RADIUS_AVP_TAG,avp_tag,,uint8,The tag value depends on the tunnel used. (CLEP_DATA_UINT8),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,32,Q_RADIUS_AVP_TEXT,avp_text,,buffer,An utf8 character string. (CLEP_DATA_BUFFER),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,33,Q_RADIUS_AVP_STR,avp_str,,buffer,An ascii character string that may contain null bytes. (CLEP_DATA_BUFFER),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,34,Q_RADIUS_AVP_IPV4,avp_ipv4,,ip_addr,An IPv4 address. (CLEP_DATA_IP_ADDR),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,35,Q_RADIUS_AVP_IPV6,avp_ipv6,,ip6_addr,An IPv6 address. (CLEP_DATA_IP6_ADDR),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,36,Q_RADIUS_AVP_INT,avp_int,,uint32,"An 8, 24 or 32 bits integer value. (CLEP_DATA_UINT32)",0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,37,Q_RADIUS_AVP_INT64,avp_int64,,uint64,A 64 bits integer value. (CLEP_DATA_UINT64),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,38,Q_RADIUS_AVP_CHAP_ID,avp_chap_id,,uint8,CHAP identifier. (CLEP_DATA_UINT8),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,39,Q_RADIUS_AVP_VENDOR_ID,avp_vendor_id,,uint32,SMI Network Management Private Enterprise Code. (CLEP_DATA_UINT32),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,40,Q_RADIUS_AVP_INTERFACE_ID,avp_interface_id,,uint64,IPv6 interface identifier. (CLEP_DATA_UINT64),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,41,Q_RADIUS_AVP_PREFIX,avp_prefix,,buffer,Ipv6 prefix is a sequence of 0 to 16 bytes. (CLEP_DATA_BUFFER),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,42,Q_RADIUS_AVP_SALT,avp_salt,,uint16,The salt ensures the uniqueness of the encryption key. (CLEP_DATA_UINT16),0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,45,Q_RADIUS_3GPP_IMSI,3gpp_imsi,,string,IMSI for the user,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,43,Q_RADIUS_3GPP_SGSN_ADDRESS,3gpp_sgsn_address,,ip_addr,IP address of the SGSN,0,session,0 -158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,44,Q_RADIUS_3GPP_SGSN_MCC_MNC,3gpp_sgsn_mcc_mnc,,uint32,MCC and MNC of the SGSN,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,1,Q_RAMBLER_DOMAIN,domain,,string,Domain name used for the login of the user.,0,session,0 -318,Q_PROTO_RAMBLER,Web,rambler,rambler,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,1,Q_RAMBLER_WEBMAIL_DOMAIN,domain,,string,Domain name used for the email address of the user.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,643,Q_MPA_REQUEST,request,,parent,Container regrouping information about rapidshare for a certain action.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,550,Q_MPA_LOGIN,login,x,string,This attribute is deprecated.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,578,Q_MPA_PASSWORD,password,x,string,This attribute is deprecated.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,1,Q_RAPIDSHARE_METHOD,method,,string,HTTP method used for this action.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,2,Q_RAPIDSHARE_EMAIL_ADDRESS,email_address,,string,User email address.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,3,Q_RAPIDSHARE_CLIENT_ID,client_id,,string,User account number.,0,session,0 -313,Q_PROTO_RAPIDSHARE,Web,rapidshare,rapidshare,4,Q_RAPIDSHARE_DOWNLOAD_URL,download_url,,string,Downloaded file URL.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),608,Q_MPA_VERSION,version,,string,RDP Version used.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),1,Q_RDP_CLIENT_BUILD,client_build,,uint32,RDP client build.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),2,Q_RDP_DESKTOP_WIDTH,desktop_width,,uint32,desktop width.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),3,Q_RDP_DESKTOP_HEIGHT,desktop_height,,uint32,desktop height.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),4,Q_RDP_HOSTNAME_ASCII,hostname_ascii,,string,"Client hostname, in ASCII.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),5,Q_RDP_HOSTNAME_RAW,hostname_raw,,binary,"Client hostname, in unicode.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),18,Q_RDP_DOMAIN_ASCII,domain_ascii,,string,"Client domain, in ASCII.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),19,Q_RDP_DOMAIN_RAW,domain_raw,,binary,"Client domain, in unicode.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),20,Q_RDP_USERNAME_ASCII,username_ascii,,string,"Client login, in ASCII.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),21,Q_RDP_USERNAME_RAW,username_raw,,binary,"Client login, in unicode.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),23,Q_RDP_DEFAULT_USERNAME,default_username,,string,"User's default login, provided at RDP's client runtime.",0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),6,Q_RDP_SECURITY_PROTOCOL,security_protocol,,string_index,Encryption protocol used.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),7,Q_RDP_SUPPORTED_ENCRYPTION_METHOD,supported_encryption_method,,string_index,Encryption method supported by the client.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),8,Q_RDP_ENCRYPTION_METHOD,encryption_method,,string_index,Encryption method used.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),9,Q_RDP_ENCRYPTION_LEVEL,encryption_level,,string_index,Encryption level used.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),22,Q_RDP_ENCRYPTED,encrypted,,uint32,Indicates if the traffic is encrypted with TLS or CresDDP.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),10,Q_RDP_IO_CHANNEL_ID,io_channel_id,,uint32,IO channel ID.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),11,Q_RDP_CHANNEL_ID,channel_id,,uint32,Communication channel ID.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),12,Q_RDP_CHANNEL,channel,,parent,Communication channel.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),13,Q_RDP_CHANNEL_NAME,channel_name,,string,Communication channel name (An 8-byte array containing a unique 7-character ANSI channel name and a null terminator).,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),14,Q_RDP_CHANNEL_FLAG,channel_flag,,string_index,Communication channel option.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),15,Q_RDP_CHANNEL_DISABLED,channel_disabled,,uint32,Tells whether the channel is disabled.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),16,Q_RDP_CHANNEL_ENCRYPT_WAY,channel_encrypt_way,,string,Tells whether the channel is encrypted.,0,session,0 -159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),17,Q_RDP_CHANNEL_PRIORITY,channel_priority,,string,Channel priority.,0,session,0 -160,Q_PROTO_RDT,Audio/Video,rdt,Real Data Transport,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,713,Q_MPA_KERNEL,kernel,,parent,"Parent attribute of kernel_name, kernel_version and kernel_archi.",0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,714,Q_MPA_KERNEL_NAME,kernel_name,,string,Kernel package or package linked to the kernel.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,715,Q_MPA_KERNEL_VERSION,kernel_version,,string,Version number of the kernel package.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,716,Q_MPA_KERNEL_ARCHI,kernel_archi,,string,Archi of package kernel.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,717,Q_MPA_KERNEL_DISTRIB,kernel_distrib,,string,Distrib linked to this kernel package.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,718,Q_MPA_PACKAGE,package,,parent,"Parent attribute of package_name, package_version and package_archi.",0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Distrib linked to this package.,0,session,0 -571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,1,Q_RIP2_MESSAGE_TYPE,message_type,,string_index,Type of the sent message (request or response).,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,2,Q_RIP2_IP_ENTRY,ip_entry,,parent,A parent attribute.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,3,Q_RIP2_ADDR_FAMILY,addr_family,,uint16,The family of the address which is present in the packet.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,4,Q_RIP2_ROUTE_TAG,route_tag,,uint16,"The Route Tag provides a method of separating internal"" RIP routes (routes for networks within the RIP routing domain) from ""external"" RIP routes.""",0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,5,Q_RIP2_IP_ADDR,ip_addr,,ip_addr,IP address of a router.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,6,Q_RIP2_NEXT_HOPE,next_hope,,ip_addr,The immediate next hop IP address to which packets to the destination specified by this route entry should be forwarded.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,7,Q_RIP2_NETMASK,netmask,,ip_addr,The Subnet Mask field contains the subnet mask which is applied to the IP address to yield the non-host portion of the address.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,8,Q_RIP2_METRIC,metric,,uint32,Total distance to a router.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,9,Q_RIP2_AUTH_TYPE,auth_type,,uint16,Type of the used authentication.,0,session,0 -163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,10,Q_RIP2_AUTHENTICATION,authentication,,string,Authentication content (password for example).,0,session,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,1,Q_RLOGIN_CLIENT_LOGIN,client_login,,string,Name of the client host.,0,session,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,2,Q_RLOGIN_SERVER_LOGIN,server_login,,string,User login.,0,session,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,5,Q_RLOGIN_SERVER_PASSWORD,server_password,,string,User password.,0,session,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,3,Q_RLOGIN_TERM_TYPE,term_type,,string,Terminal type used to establish the remote session.,0,session,0 -165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,4,Q_RLOGIN_SPEED,speed,,uint32,Connection speed.,0,session,0 +529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +529,Q_PROTO_PRICERUNNER,Web,pricerunner,PriceRunner,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,1,Q_Q931_DISPLAY,display,,string,Display name.,0,session_fix,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,2,Q_Q931_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,3,Q_Q931_SETUP_DELAY,setup_delay,,timeval,Call setup delay,0,session_prt,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,4,Q_Q931_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_prt,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_fix,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,5,Q_Q931_CAUSE_CODE,cause_code,,uint8,Disconnect cause Codes.,0,session_mod,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,6,Q_Q931_CAUSE,cause,,string_index,Disconnect cause.,0,session_mod,0 +154,Q_PROTO_Q931,Audio/Video,q931,Q.931,7,Q_Q931_REF_FLAG,ref_flag,,uint8,The call reference flag is used to identify which end of the layer two-logical link originated a call reference.,0,session_mod,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,1,Q_QQ_VERSION_CODE,version_code,,string,The protocol version number used by the client.,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,2,Q_QQ_MSG_TYPE,msg_type,,uint32,QQ command name.,0,session_mod,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,4,Q_QQ_CALL_DATA,call_data,,buffer,QQ payload containing the data of the call (audio/video),0,session_mod,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,528,Q_MPA_CONTACT_LOGIN,contact_login,x,string,(deprecated) Contact Login,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,3,Q_QQ_MSG_CODE,msg_code,x,uint32,(deprecated) QQ command number.,0,session_mod,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,608,Q_MPA_VERSION,version,x,string_index,(deprecated) The protocol version name used by the client.,0,session_fix,0 +156,Q_PROTO_QQ,Instant Messaging,qq,QQ,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_fix,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,512,Q_MPA_ACTION,action,,string,Indicates whether the file is uploaded or downloaded.,0,session_mod,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,1,Q_QQ_TRANSFER_FILEKEY,filekey,,string,MD5Sum computed on file data (extracted from data flow),0,session_mod,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +753,Q_PROTO_QQ_TRANSFER,File Transfer,qq_transfer,QQ File Transfer,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_fix,0 +157,Q_PROTO_QUAKE,Game,quake,Quake,1,Q_QUAKE_SERVER,server,,string,Server name.,0,session_fix,0 +749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,3,Q_QVOD_PEER_PORT,peer_port,,uint16,Listening TCP port of the QVOD peer.,0,session_mod,0 +749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,2,Q_QVOD_PEER_IP,peer_ip,,ip_addr,IPv4 address of the QVOD peer.,0,session_mod,0 +749,Q_PROTO_QVOD,Audio/Video,qvod,QVOD Player,1,Q_QVOD_PEER,peer,,parent,Parent attribute containing metadata related to a QVOD peer.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,15,Q_RADIUS_REQUEST,request,,parent,Contains information in a radius message.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,1,Q_RADIUS_CALLING_STATION_ID,calling_station_id,,string,Client id.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,2,Q_RADIUS_FRAMED_IP,framed_ip,,ip_addr,IP address.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,3,Q_RADIUS_ACCT_SESSION_ID,acct_session_id,,string,Accounting session ID.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,4,Q_RADIUS_STATUS,status,,string_index,Status.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,5,Q_RADIUS_CODE,code,,uint8,Radius message code.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,6,Q_RADIUS_CALLED_STATION_ID,called_station_id,,string,"The phone number that the user called, using Dialed Number Identification (DNIS) or similar technology.",0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,7,Q_RADIUS_NAS_ID,nas_id,,string,Unique identifier of the NAS originating the Access-Request,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,8,Q_RADIUS_NAS_IP,nas_ip,,ip_addr,IP address of the NAS originating the Access-Request,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,9,Q_RADIUS_NAS_PORT,nas_port,,uint32,Physical port number of the user on the NAS,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,18,Q_RADIUS_NAS_PORT_TYPE,nas_port_type,,uint32,Indicates the type of physical port the network access server (NAS) is using to authenticate the user.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,19,Q_RADIUS_NAS_PORT_ID,nas_port_id,,string,Identifies the NAS.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,10,Q_RADIUS_CALLBACK_NUMBER,callback_number,,string,Contains the dialing string to be used for callback,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,11,Q_RADIUS_TERMINATE_CAUSE,terminate_cause,,uint32,This attribute indicates how the session was terminated,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,12,Q_RADIUS_ACCT_OUTPUT_OCTETS,acct_output_octets,,uint32,Indicates how many octets have been sent to the port in the course of delivering this service,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,13,Q_RADIUS_ACCT_INPUT_OCTETS,acct_input_octets,,uint32,Indicates how many octets have been received from the port over the course of this service being provided,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,14,Q_RADIUS_ID,id,,uint8,Indicates the packet identifier. It must be less than 255,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,20,Q_RADIUS_SESSION_TIMEOUT,session_timeout,,uint32,The maximum number of seconds of service to be provided to the user before termination of the session or prompt.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,21,Q_RADIUS_IDLE_TIMEOUT,idle_timeout,,uint32,The maximum number of consecutive seconds of idle connection allowed to the user before termination of the session or prompt.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,16,Q_RADIUS_START_TIME,start_time,,timeval,Indicates the beginning of the user service.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,17,Q_RADIUS_STOP_TIME,stop_time,,timeval,Indicates the end of the user service.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,23,Q_RADIUS_NAS_IPV6,nas_ipv6,,ip6_addr,IPv6 address of the NAS originating the Access-Request.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,26,Q_RADIUS_LOGIN_IPV6_HOST,login_ipv6_host,,ip6_addr,Indicates the system with which to connect the user.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,27,Q_RADIUS_FRAMED_IPV6_ROUTE,framed_ipv6_route,,string,Provides the routing information to be configured for the user on the NAS,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,28,Q_RADIUS_FRAMED_IPV6_POOL,framed_ipv6_pool,,string,Contains the name of an assigned pool that SHOULD be used to assign an IPv6 prefix for the user.,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,29,Q_RADIUS_AVP,avp,,parent,An attribute-value pair. One or several avp_ attributes (e.g. avp_str) are created according to the avp_type.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,30,Q_RADIUS_AVP_TYPE,avp_type,,uint8,Attribute type.,0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,31,Q_RADIUS_AVP_TAG,avp_tag,,uint8,The tag value depends on the tunnel used. (CLEP_DATA_UINT8),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,32,Q_RADIUS_AVP_TEXT,avp_text,,buffer,An utf8 character string. (CLEP_DATA_BUFFER),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,33,Q_RADIUS_AVP_STR,avp_str,,buffer,An ascii character string that may contain null bytes. (CLEP_DATA_BUFFER),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,34,Q_RADIUS_AVP_IPV4,avp_ipv4,,ip_addr,An IPv4 address. (CLEP_DATA_IP_ADDR),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,35,Q_RADIUS_AVP_IPV6,avp_ipv6,,ip6_addr,An IPv6 address. (CLEP_DATA_IP6_ADDR),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,36,Q_RADIUS_AVP_INT,avp_int,,uint32,"An 8, 24 or 32 bits integer value. (CLEP_DATA_UINT32)",0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,37,Q_RADIUS_AVP_INT64,avp_int64,,uint64,A 64 bits integer value. (CLEP_DATA_UINT64),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,38,Q_RADIUS_AVP_CHAP_ID,avp_chap_id,,uint8,CHAP identifier. (CLEP_DATA_UINT8),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,39,Q_RADIUS_AVP_VENDOR_ID,avp_vendor_id,,uint32,SMI Network Management Private Enterprise Code. (CLEP_DATA_UINT32),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,40,Q_RADIUS_AVP_INTERFACE_ID,avp_interface_id,,uint64,IPv6 interface identifier. (CLEP_DATA_UINT64),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,41,Q_RADIUS_AVP_PREFIX,avp_prefix,,buffer,Ipv6 prefix is a sequence of 0 to 16 bytes. (CLEP_DATA_BUFFER),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,42,Q_RADIUS_AVP_SALT,avp_salt,,uint16,The salt ensures the uniqueness of the encryption key. (CLEP_DATA_UINT16),0,session_mod,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,45,Q_RADIUS_3GPP_IMSI,3gpp_imsi,,string,IMSI for the user,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,43,Q_RADIUS_3GPP_SGSN_ADDRESS,3gpp_sgsn_address,,ip_addr,IP address of the SGSN,0,session_prt,0 +158,Q_PROTO_RADIUS,Authentication,radius,Remote Authentication Dial-In User Service,44,Q_RADIUS_3GPP_SGSN_MCC_MNC,3gpp_sgsn_mcc_mnc,,uint32,MCC and MNC of the SGSN,0,session_prt,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,1,Q_RAMBLER_DOMAIN,domain,,string,Domain name used for the login of the user.,0,session_mod,0 +318,Q_PROTO_RAMBLER,Web,rambler,Rambler.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,682,Q_MPA_MSGLIST_IMPORTANCE,msglist_importance,,uint32,Indicates if the message has been marked by the user.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,761,Q_MPA_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,760,Q_MPA_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,759,Q_MPA_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,1,Q_RAMBLER_WEBMAIL_DOMAIN,domain,,string,Domain name used for the email address of the user.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +527,Q_PROTO_RAMBLER_WEBMAIL,Webmail,rambler_webmail,Rambler webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,643,Q_MPA_REQUEST,request,,parent,Container regrouping information about rapidshare for a certain action.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,550,Q_MPA_LOGIN,login,x,string,This attribute is deprecated.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,578,Q_MPA_PASSWORD,password,x,string,This attribute is deprecated.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,1,Q_RAPIDSHARE_METHOD,method,,string,HTTP method used for this action.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,2,Q_RAPIDSHARE_EMAIL_ADDRESS,email_address,,string,User email address.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,3,Q_RAPIDSHARE_CLIENT_ID,client_id,,string,User account number.,0,session_mod,0 +313,Q_PROTO_RAPIDSHARE,Web,rapidshare,RapidShare.com,4,Q_RAPIDSHARE_DOWNLOAD_URL,download_url,,string,Downloaded file URL.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),608,Q_MPA_VERSION,version,,string,RDP Version used.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),1,Q_RDP_CLIENT_BUILD,client_build,,uint32,RDP client build.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),2,Q_RDP_DESKTOP_WIDTH,desktop_width,,uint32,desktop width.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),3,Q_RDP_DESKTOP_HEIGHT,desktop_height,,uint32,desktop height.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),4,Q_RDP_HOSTNAME_ASCII,hostname_ascii,,string,"Client hostname, in ASCII.",0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),5,Q_RDP_HOSTNAME_RAW,hostname_raw,,binary,"Client hostname, in unicode.",0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),18,Q_RDP_DOMAIN_ASCII,domain_ascii,,string,"Client domain, in ASCII.",0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),19,Q_RDP_DOMAIN_RAW,domain_raw,,binary,"Client domain, in unicode.",0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),20,Q_RDP_USERNAME_ASCII,username_ascii,,string,"Client login, in ASCII.",0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),21,Q_RDP_USERNAME_RAW,username_raw,,binary,"Client login, in unicode.",0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),23,Q_RDP_DEFAULT_USERNAME,default_username,,string,"User's default login, provided at RDP's client runtime.",0,session_fix,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),6,Q_RDP_SECURITY_PROTOCOL,security_protocol,,string_index,Encryption protocol used.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),7,Q_RDP_SUPPORTED_ENCRYPTION_METHOD,supported_encryption_method,,string_index,Encryption method supported by the client.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),8,Q_RDP_ENCRYPTION_METHOD,encryption_method,,string_index,Encryption method used.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),9,Q_RDP_ENCRYPTION_LEVEL,encryption_level,,string_index,Encryption level used.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),22,Q_RDP_ENCRYPTED,encrypted,,uint32,Indicates if the traffic is encrypted with TLS or CresDDP.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),10,Q_RDP_IO_CHANNEL_ID,io_channel_id,,uint32,IO channel ID.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),11,Q_RDP_CHANNEL_ID,channel_id,,uint32,Communication channel ID.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),12,Q_RDP_CHANNEL,channel,,parent,Communication channel.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),13,Q_RDP_CHANNEL_NAME,channel_name,,string,Communication channel name (An 8-byte array containing a unique 7-character ANSI channel name and a null terminator).,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),14,Q_RDP_CHANNEL_FLAG,channel_flag,,string_index,Communication channel option.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),15,Q_RDP_CHANNEL_DISABLED,channel_disabled,,uint32,Tells whether the channel is disabled.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),16,Q_RDP_CHANNEL_ENCRYPT_WAY,channel_encrypt_way,,string,Tells whether the channel is encrypted.,0,session_mod,0 +159,Q_PROTO_RDP,Thin Client,rdp,Remote Desktop Protocol (Windows Terminal Server),17,Q_RDP_CHANNEL_PRIORITY,channel_priority,,string,Channel priority.,0,session_mod,0 +160,Q_PROTO_RDT,Audio/Video,rdt,Real Data Transport,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,713,Q_MPA_KERNEL,kernel,,parent,"Parent attribute of kernel_name, kernel_version and kernel_archi.",0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,714,Q_MPA_KERNEL_NAME,kernel_name,,string,Kernel package or package linked to the kernel.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,715,Q_MPA_KERNEL_VERSION,kernel_version,,string,Version number of the kernel package.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,716,Q_MPA_KERNEL_ARCHI,kernel_archi,,string,Archi of package kernel.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,717,Q_MPA_KERNEL_DISTRIB,kernel_distrib,,string,Distrib linked to this kernel package.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,718,Q_MPA_PACKAGE,package,,parent,"Parent attribute of package_name, package_version and package_archi.",0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,719,Q_MPA_PACKAGE_NAME,package_name,,string,Name of the downloaded package.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,720,Q_MPA_PACKAGE_VERSION,package_version,,string,Version number of the downloaded package.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,721,Q_MPA_PACKAGE_ARCHI,package_archi,,string,Archi of package.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,722,Q_MPA_PACKAGE_DISTRIB,package_distrib,,string,Distrib linked to this package.,0,session_mod,0 +571,Q_PROTO_REDHAT_UPDATE,Web,redhat_update,RedHat Update,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,1,Q_RIP2_MESSAGE_TYPE,message_type,,string_index,Type of the sent message (request or response).,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,2,Q_RIP2_IP_ENTRY,ip_entry,,parent,A parent attribute.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,3,Q_RIP2_ADDR_FAMILY,addr_family,,uint16,The family of the address which is present in the packet.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,4,Q_RIP2_ROUTE_TAG,route_tag,,uint16,"The Route Tag provides a method of separating internal"" RIP routes (routes for networks within the RIP routing domain) from ""external"" RIP routes.""",0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,5,Q_RIP2_IP_ADDR,ip_addr,,ip_addr,IP address of a router.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,6,Q_RIP2_NEXT_HOPE,next_hope,,ip_addr,The immediate next hop IP address to which packets to the destination specified by this route entry should be forwarded.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,7,Q_RIP2_NETMASK,netmask,,ip_addr,The Subnet Mask field contains the subnet mask which is applied to the IP address to yield the non-host portion of the address.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,8,Q_RIP2_METRIC,metric,,uint32,Total distance to a router.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,9,Q_RIP2_AUTH_TYPE,auth_type,,uint16,Type of the used authentication.,0,session_mod,0 +163,Q_PROTO_RIP2,Routing,rip2,Routing Information Protocol V2,10,Q_RIP2_AUTHENTICATION,authentication,,string,Authentication content (password for example).,0,session_mod,0 +165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,1,Q_RLOGIN_CLIENT_LOGIN,client_login,,string,Name of the client host.,0,session_fix,0 +165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,2,Q_RLOGIN_SERVER_LOGIN,server_login,,string,User login.,0,session_fix,0 +165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,5,Q_RLOGIN_SERVER_PASSWORD,server_password,,string,User password.,0,session_fix,0 +165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,3,Q_RLOGIN_TERM_TYPE,term_type,,string,Terminal type used to establish the remote session.,0,session_fix,0 +165,Q_PROTO_RLOGIN,Terminal,rlogin,Remote Login,4,Q_RLOGIN_SPEED,speed,,uint32,Connection speed.,0,session_fix,0 167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,1,Q_RPC_PROGRAM,program,,uint32,Program Identifier.,0,pkt,0 167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,608,Q_MPA_VERSION,version,,uint32,Version of the RPC protocol.,0,pkt,0 167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,2,Q_RPC_PROGRAM_VERSION,program_version,,uint32,Version of the used program over RPC.,0,pkt,0 @@ -2746,481 +2752,491 @@ protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_ 167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,4,Q_RPC_STATE,state,,uint32,Status of the command response.,0,pkt,0 167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,5,Q_RPC_XID,xid,,uint32,Identifier of the request or the reply.,0,pkt,0 167,Q_PROTO_RPC,Middleware,rpc,Remote Procedure Call,6,Q_RPC_MESSAGE_TYPE,message_type,,string_index,Message type (Call or Reply).,0,pkt,0 -170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,1,Q_RSH_REMOTE_LOGIN,remote_login,x,string,(Deprecated) User login on the remote server.,0,session,0 -170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,2,Q_RSH_SERVER,server,,string,Remote server.,0,session,0 -173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),1,Q_RSYNC_MODULE,module,,string,Name of the group in which files are gathered.,0,session,0 -173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,1,Q_RTCP_CNAME,cname,,string,User name.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,577,Q_MPA_NAME,name,,string,Complete user name.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,2,Q_RTCP_EMAIL,email,,string,User's email address.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,3,Q_RTCP_PHONE,phone,,string,User's phone number.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,4,Q_RTCP_LOC,loc,,string,User's location.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,5,Q_RTCP_TOOL,tool,,string,Client's software.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,6,Q_RTCP_NOTE,note,,string,User's comments.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,7,Q_RTCP_MESSAGE_TYPE,message_type,,string_index,Contains the RTCP message type.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,8,Q_RTCP_RR_JITTER,rr_jitter,,uint32,Jitter value (in receiver report).,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,9,Q_RTCP_RR_CUMLOST,rr_cumlost,,uint32,Contains the cumulative number of lost packets (in receiver reports).,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,10,Q_RTCP_RR_SSRC_ID,rr_ssrc_id,,uint32,Identity of the source that sent the receiver report.,0,session,0 -174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,11,Q_RTCP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,7,Q_RTMP_STREAM,stream,,parent,Parent attribute containing the metadata related to a particular audio/video stream.,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,1,Q_RTMP_PAGE_URL,page_url,,string,URL of the webpage where the audio/video content is streamed.,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,2,Q_RTMP_STREAM_URL,stream_url,,string,URL of the streamed audio/video.,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,3,Q_RTMP_APP_NAME,app_name,,string,Name of the application accessing the streamed content.,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,5,Q_RTMP_START_TIME,start_time,,uint32,The timestamp of the beginning of the streamed audio/video (in ms).,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,6,Q_RTMP_STOP_TIME,stop_time,,uint32,The timestamp of the end of the streamed audio/video (in ms).,0,session,0 -337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,4,Q_RTMP_LIVE_STREAM_INDICATOR,live_stream_indicator,,uint8,Indication reported by the server that the playout is live content,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,13,Q_RTP_END_SESSION,end_session,,string,The end_session attribute is raised at the end of the RTP session,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,1,Q_RTP_CODEC,codec,,parent,Contains information about the codec used.,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,11,Q_RTP_CODEC_NAME,codec_name,,string,Name of the codec.,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,14,Q_RTP_CODEC_INDEX,codec_index,,uint8,Number identifying the codec.,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,2,Q_RTP_LOST,lost,,uint8,Counter of lost packets (use with sum).,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,3,Q_RTP_UNSEQ,unseq,,uint32,Contains the number of miss ordered packets (use sum).,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,4,Q_RTP_MOS,mos,x,uint32,Standard voice quality indicator (Mean Opinion Score). This attribute is deprecated.,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,5,Q_RTP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,6,Q_RTP_TIMESTAMP,timestamp,,uint32,RTP packet timestamp.,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,10,Q_RTP_SNUMBER,snumber,,uint16,Sequence number of RTP packet,0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,12,Q_RTP_PAYLOAD_DATA,payload_data,,buffer,A binary buffer containing the RTP data (without header),1,session,1 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,8,Q_RTP_MOS_SESSION,mos_session,,uint32,"Standard voice quality indicator, multiplied by 1000.",0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,9,Q_RTP_RFACTOR,rfactor,,uint32,"Rfactor value, following the ITU G.107 calculation method, multiplied by 1000.",0,session,0 -175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,7,Q_RTP_MOS_SATELLITE,mos_satellite,x,uint32,Standard voice quality indicator for satellite (Mean Opinion Score). This attribute is deprecated.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,21,Q_RTSP_REQUEST,request,,parent,RTSP request.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,1,Q_RTSP_RTP_CLIENT_PORT,rtp_client_port,,uint16,RTP's client port.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,2,Q_RTSP_RTCP_CLIENT_PORT,rtcp_client_port,,uint16,RTCP's client port.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,3,Q_RTSP_RTP_SERVER_PORT,rtp_server_port,,uint16,RTP's server port.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,4,Q_RTSP_RTCP_SERVER_PORT,rtcp_server_port,,uint16,RTCP's server port.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,15,Q_RTSP_RDT_SERVER_PORT,rdt_server_port,,uint16,UDP's server port.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,16,Q_RTSP_RDT_CLIENT_PORT,rdt_client_port,,uint16,UDP's client port.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the streamed file.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,555,Q_MPA_METHOD,method,,string,RTSP command sent by the client.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,17,Q_RTSP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,8,Q_RTSP_SERVER,server,,string,Name of the streaming server.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,29,Q_RTSP_DIRECTORY,directory,,string,File directory.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,9,Q_RTSP_CODE,code,,uint32,Server return code.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,32,Q_RTSP_RETURNMSG,returnmsg,,string_index,Contains the text explaining the return codes.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,24,Q_RTSP_URI,uri,,string,Complete name (path + filename) of a web resource (truncated at 1503 characters).,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,25,Q_RTSP_URILAST64,urilast64,,string,uri last 64 characters of the uri.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,26,Q_RTSP_URILEN,urilen,,uint32,uri length.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,27,Q_RTSP_URIMD5,urimd5,,binary,md5 of the uri.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,28,Q_RTSP_URI_FULL,uri_full,,string,Complete name (path + filename) of a web resource (not truncated).,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,18,Q_RTSP_HEADER,header,,parent,One HTTP header line.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,19,Q_RTSP_HEADER_NAME,header_name,,string,One HTTP header line (field).,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,20,Q_RTSP_HEADER_VALUE,header_value,,string,One HTTP header line (field).,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,30,Q_RTSP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,14,Q_RTSP_CSEQ,cseq,,string,Sequence number.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,530,Q_MPA_CONTENT,content,,buffer,Contains the data in a HTTP response.,1,session,1 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,22,Q_RTSP_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,23,Q_RTSP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the different codecs values that can be used for audio/video transmission,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,698,Q_MPA_DATA_PORT,data_port,x,uint16,This attribute is deprecated,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session,0 -176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),1,Q_S1AP_EP,ep,,parent,Contains Elementary Procedure attributes.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),2,Q_S1AP_EP_CODE,ep_code,,uint8,Elementary Procedure identifier.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),3,Q_S1AP_EP_NAME,ep_name,,string,Elementary Procedure name.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),4,Q_S1AP_EP_VALUE_RAW,ep_value_raw,,buffer,Elementary Procedure raw value.,1,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),5,Q_S1AP_EP_MME_UE_ID,ep_mme_ue_id,,uint32,Mobility Management Entity Identifier (MME UE S1AP ID).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),6,Q_S1AP_EP_ENB_UE_ID,ep_enb_ue_id,,uint32,E-UTRAN NodeB Identifier (eNB UE S1AP ID).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),7,Q_S1AP_EP_IE,ep_ie,,string,Contains Information Element attributes.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),8,Q_S1AP_EP_IE_CODE,ep_ie_code,,uint8,Information Element identifier.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),9,Q_S1AP_EP_IE_NAME,ep_ie_name,,string,Information Element name.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),10,Q_S1AP_EP_IE_VALUE_RAW,ep_ie_value_raw,,buffer,Information Element raw value.,1,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),11,Q_S1AP_EP_IE_RAB,ep_ie_rab,,string,Contains E-RAB attributes.,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),12,Q_S1AP_EP_IE_RAB_ID,ep_ie_rab_id,,uint8,E-UTRAN Radio Access Bearer (E-RAB ID).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),13,Q_S1AP_EP_IE_RAB_ADDR,ep_ie_rab_addr,,ip_addr,Transport Layer Address (IPv4).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),14,Q_S1AP_EP_IE_RAB_ADDR6,ep_ie_rab_addr6,,ip6_addr,Transport Layer Address (IPv6).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),15,Q_S1AP_EP_IE_RAB_TEID,ep_ie_rab_teid,,string,GTP Tunnel Endpoint Identifier (GTP-TEID).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),16,Q_S1AP_EP_IE_TAI,ep_ie_tai,,string,Tracking Area Identifier (TAI).,0,session,0 -1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol (S1AP),17,Q_S1AP_EP_IE_CGI,ep_ie_cgi,,string,E-UTRAN Cell Global Identifier (E-UTRAN CGI).,0,session,0 -1121,Q_PROTO_SAMSUNG_APPS,Application Service,samsung_apps,Samsung Apps,1,Q_SAMSUNG_APPS_IS_SMARTPHONE,is_smartphone,,uint32,Boolean attribute indicating whether the client is a smartphone(1) or not(0).,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,1,Q_SCCP_MESSAGE_TYPE,message_type,,uint32,The type of the message.,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,660,Q_MPA_CALL_ID,call_id,,uint32,"Call id, extracted for each call.",0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,3,Q_SCCP_CALLERNAME,callername,,string,Calling party identity,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,4,Q_SCCP_CALLEENAME,calleename,,string,Called party identity,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,20,Q_SCCP_DEVICE_TYPE,device_type,,uint32,Device type,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,21,Q_SCCP_DEVICE_NAME,device_name,,string,Device name,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,5,Q_SCCP_CALL_WAY,call_way,,uint32,"The call Way (In, Out)",0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,8,Q_SCCP_CALLSTATE,callstate,,uint32,Status of the current call,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,19,Q_SCCP_STATS,stats,,parent,Regroups connection statistics,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,9,Q_SCCP_NB_PKT_SENT,nb_pkt_sent,,uint32,Number of RTP packets sent,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,10,Q_SCCP_NB_PKT_RCV,nb_pkt_rcv,,uint32,Number of RTP packets received,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,11,Q_SCCP_NB_BYT_SENT,nb_byt_sent,,uint32,Number of RTP octets sent,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,12,Q_SCCP_NB_BYT_RCV,nb_byt_rcv,,uint32,Number of RTP octets received,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,13,Q_SCCP_NB_PKT_LOST,nb_pkt_lost,,uint32,Number of RTP packets lost,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,14,Q_SCCP_STATS_JITTER,stats_jitter,,uint32,Observed Jitter for RTP packets,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,15,Q_SCCP_STATS_LATENCY,stats_latency,,uint32,Observed latency for RTP packets,0,session,0 +170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,1,Q_RSH_REMOTE_LOGIN,remote_login,x,string,(Deprecated) User login on the remote server.,0,session_fix,0 +170,Q_PROTO_RSH,Terminal,rsh,Remote Shell,2,Q_RSH_SERVER,server,,string,Remote server.,0,session_fix,0 +173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),1,Q_RSYNC_MODULE,module,,string,Name of the group in which files are gathered.,0,session_mod,0 +173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +173,Q_PROTO_RSYNC,File Server,rsync,Remote synchronous (file transfer),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,1,Q_RTCP_CNAME,cname,,string,User name.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,577,Q_MPA_NAME,name,,string,Complete user name.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,2,Q_RTCP_EMAIL,email,,string,User's email address.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,3,Q_RTCP_PHONE,phone,,string,User's phone number.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,4,Q_RTCP_LOC,loc,,string,User's location.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,5,Q_RTCP_TOOL,tool,,string,Client's software.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,6,Q_RTCP_NOTE,note,,string,User's comments.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,7,Q_RTCP_MESSAGE_TYPE,message_type,,string_index,Contains the RTCP message type.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,8,Q_RTCP_RR_JITTER,rr_jitter,,uint32,Jitter value (in receiver report).,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,9,Q_RTCP_RR_CUMLOST,rr_cumlost,,uint32,Contains the cumulative number of lost packets (in receiver reports).,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,10,Q_RTCP_RR_SSRC_ID,rr_ssrc_id,,uint32,Identity of the source that sent the receiver report.,0,session_mod,0 +174,Q_PROTO_RTCP,Audio/Video,rtcp,Real Time Control Protocol,11,Q_RTCP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session_mod,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,7,Q_RTMP_STREAM,stream,,parent,Parent attribute containing the metadata related to a particular audio/video stream.,0,session_mod,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,1,Q_RTMP_PAGE_URL,page_url,,string,URL of the webpage where the audio/video content is streamed.,0,session_prt,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,2,Q_RTMP_STREAM_URL,stream_url,,string,URL of the streamed audio/video.,0,session_prt,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,3,Q_RTMP_APP_NAME,app_name,,string,Name of the application accessing the streamed content.,0,session_prt,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,5,Q_RTMP_START_TIME,start_time,,uint32,The timestamp of the beginning of the streamed audio/video (in ms).,0,session_prt,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,6,Q_RTMP_STOP_TIME,stop_time,,uint32,The timestamp of the end of the streamed audio/video (in ms).,0,session_prt,0 +337,Q_PROTO_RTMP,Network Service,rtmp,Real Time Messaging Protocol,4,Q_RTMP_LIVE_STREAM_INDICATOR,live_stream_indicator,,uint8,Indication reported by the server that the playout is live content,0,session_prt,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,13,Q_RTP_END_SESSION,end_session,,string,The end_session attribute is raised at the end of the RTP session,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,1,Q_RTP_CODEC,codec,,parent,Contains information about the codec used.,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,11,Q_RTP_CODEC_NAME,codec_name,,string,Name of the codec.,0,session_prt,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,14,Q_RTP_CODEC_INDEX,codec_index,,uint8,Number identifying the codec.,0,session_prt,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,2,Q_RTP_LOST,lost,,uint8,Counter of lost packets (use with sum).,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,3,Q_RTP_UNSEQ,unseq,,uint32,Contains the number of miss ordered packets (use sum).,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,4,Q_RTP_MOS,mos,x,uint32,Standard voice quality indicator (Mean Opinion Score). This attribute is deprecated.,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,5,Q_RTP_SSRC,ssrc,,uint32,Identity of the Synchronization source,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,6,Q_RTP_TIMESTAMP,timestamp,,uint32,RTP packet timestamp.,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,10,Q_RTP_SNUMBER,snumber,,uint16,Sequence number of RTP packet,0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,12,Q_RTP_PAYLOAD_DATA,payload_data,,buffer,A binary buffer containing the RTP data (without header),1,session_mod,1 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,8,Q_RTP_MOS_SESSION,mos_session,,uint32,"Standard voice quality indicator, multiplied by 1000.",0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,9,Q_RTP_RFACTOR,rfactor,,uint32,"Rfactor value, following the ITU G.107 calculation method, multiplied by 1000.",0,session_mod,0 +175,Q_PROTO_RTP,Audio/Video,rtp,Real Time Protocol,7,Q_RTP_MOS_SATELLITE,mos_satellite,x,uint32,Standard voice quality indicator for satellite (Mean Opinion Score). This attribute is deprecated.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,21,Q_RTSP_REQUEST,request,,parent,RTSP request.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,1,Q_RTSP_RTP_CLIENT_PORT,rtp_client_port,,uint16,RTP's client port.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,2,Q_RTSP_RTCP_CLIENT_PORT,rtcp_client_port,,uint16,RTCP's client port.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,3,Q_RTSP_RTP_SERVER_PORT,rtp_server_port,,uint16,RTP's server port.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,4,Q_RTSP_RTCP_SERVER_PORT,rtcp_server_port,,uint16,RTCP's server port.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,15,Q_RTSP_RDT_SERVER_PORT,rdt_server_port,,uint16,UDP's server port.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,16,Q_RTSP_RDT_CLIENT_PORT,rdt_client_port,,uint16,UDP's client port.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the streamed file.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,555,Q_MPA_METHOD,method,,string,RTSP command sent by the client.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,17,Q_RTSP_SERVER_AGENT,server_agent,,string,Name of the server software.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,8,Q_RTSP_SERVER,server,,string,Name of the streaming server.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,29,Q_RTSP_DIRECTORY,directory,,string,File directory.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,9,Q_RTSP_CODE,code,,uint32,Server return code.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,32,Q_RTSP_RETURNMSG,returnmsg,,string_index,Contains the text explaining the return codes.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,24,Q_RTSP_URI,uri,,string,Complete name (path + filename) of a web resource (truncated at 1503 characters).,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,33,Q_RTSP_URI_START_OFFSET,uri_start_offset,,uint32,Offset to the first URI byte in the stream.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,34,Q_RTSP_URI_END_OFFSET,uri_end_offset,,uint32,Offset to the first byte which is not part of the URI in the stream.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,25,Q_RTSP_URILAST64,urilast64,,string,uri last 64 characters of the uri.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,26,Q_RTSP_URILEN,urilen,,uint32,uri length.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,27,Q_RTSP_URIMD5,urimd5,,binary,md5 of the uri.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,28,Q_RTSP_URI_FULL,uri_full,,string,Complete name (path + filename) of a web resource (not truncated).,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,18,Q_RTSP_HEADER,header,,parent,One HTTP header line.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,19,Q_RTSP_HEADER_NAME,header_name,,string,One HTTP header line (field).,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,20,Q_RTSP_HEADER_VALUE,header_value,,string,One HTTP header line (field).,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,30,Q_RTSP_HEADER_STATUSLINE,header_statusline,,string,"The status line, just before the header lines.",0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,608,Q_MPA_VERSION,version,,string,Protocol version.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,14,Q_RTSP_CSEQ,cseq,,string,Sequence number.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,530,Q_MPA_CONTENT,content,,buffer,Contains the data in a HTTP response.,1,session_mod,1 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,22,Q_RTSP_START_TIME,start_time,,timeval,Start date of the call.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,23,Q_RTSP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,A multivalued attribute that contains the different codecs values that can be used for audio/video transmission,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,698,Q_MPA_DATA_PORT,data_port,x,uint16,This attribute is deprecated,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_mod,0 +176,Q_PROTO_RTSP,Audio/Video,rtsp,Real Time Streaming Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,1,Q_S1AP_EP,ep,,parent,Contains Elementary Procedure attributes.,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,2,Q_S1AP_EP_CODE,ep_code,,uint8,Elementary Procedure identifier.,0,session_prt,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,3,Q_S1AP_EP_NAME,ep_name,,string,Elementary Procedure name.,0,session_prt,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,4,Q_S1AP_EP_VALUE_RAW,ep_value_raw,,buffer,Elementary Procedure raw value.,1,session_prt,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,5,Q_S1AP_EP_MME_UE_ID,ep_mme_ue_id,,uint32,Mobility Management Entity Identifier (MME UE S1AP ID).,0,session_prt,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,6,Q_S1AP_EP_ENB_UE_ID,ep_enb_ue_id,,uint32,E-UTRAN NodeB Identifier (eNB UE S1AP ID).,0,session_prt,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,7,Q_S1AP_EP_IE,ep_ie,,string,Contains Information Element attributes.,0,session_prt,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,8,Q_S1AP_EP_IE_CODE,ep_ie_code,,uint8,Information Element identifier.,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,9,Q_S1AP_EP_IE_NAME,ep_ie_name,,string,Information Element name.,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,10,Q_S1AP_EP_IE_VALUE_RAW,ep_ie_value_raw,,buffer,Information Element raw value.,1,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,11,Q_S1AP_EP_IE_RAB,ep_ie_rab,,string,Contains E-RAB attributes.,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,12,Q_S1AP_EP_IE_RAB_ID,ep_ie_rab_id,,uint8,E-UTRAN Radio Access Bearer (E-RAB ID).,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,13,Q_S1AP_EP_IE_RAB_ADDR,ep_ie_rab_addr,,ip_addr,Transport Layer Address (IPv4).,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,14,Q_S1AP_EP_IE_RAB_ADDR6,ep_ie_rab_addr6,,ip6_addr,Transport Layer Address (IPv6).,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,15,Q_S1AP_EP_IE_RAB_TEID,ep_ie_rab_teid,,string,GTP Tunnel Endpoint Identifier (GTP-TEID).,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,16,Q_S1AP_EP_IE_TAI,ep_ie_tai,,string,Tracking Area Identifier (TAI).,0,session_mod,0 +1306,Q_PROTO_S1AP,Network Service,s1ap,S1 Application Protocol,17,Q_S1AP_EP_IE_CGI,ep_ie_cgi,,string,E-UTRAN Cell Global Identifier (E-UTRAN CGI).,0,session_mod,0 +1121,Q_PROTO_SAMSUNG_APPS,Application Service,samsung_apps,Samsung Apps,1,Q_SAMSUNG_APPS_IS_SMARTPHONE,is_smartphone,,uint32,Boolean attribute indicating whether the client is a smartphone(1) or not(0).,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,1,Q_SCCP_MESSAGE_TYPE,message_type,,uint32,The type of the message.,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,660,Q_MPA_CALL_ID,call_id,,uint32,"Call id, extracted for each call.",0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,3,Q_SCCP_CALLERNAME,callername,,string,Calling party identity,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,4,Q_SCCP_CALLEENAME,calleename,,string,Called party identity,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,20,Q_SCCP_DEVICE_TYPE,device_type,,uint32,Device type,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,21,Q_SCCP_DEVICE_NAME,device_name,,string,Device name,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,5,Q_SCCP_CALL_WAY,call_way,,uint32,"The call Way (In, Out)",0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,8,Q_SCCP_CALLSTATE,callstate,,uint32,Status of the current call,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,19,Q_SCCP_STATS,stats,,parent,Regroups connection statistics,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,9,Q_SCCP_NB_PKT_SENT,nb_pkt_sent,,uint32,Number of RTP packets sent,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,10,Q_SCCP_NB_PKT_RCV,nb_pkt_rcv,,uint32,Number of RTP packets received,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,11,Q_SCCP_NB_BYT_SENT,nb_byt_sent,,uint32,Number of RTP octets sent,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,12,Q_SCCP_NB_BYT_RCV,nb_byt_rcv,,uint32,Number of RTP octets received,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,13,Q_SCCP_NB_PKT_LOST,nb_pkt_lost,,uint32,Number of RTP packets lost,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,14,Q_SCCP_STATS_JITTER,stats_jitter,,uint32,Observed Jitter for RTP packets,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,15,Q_SCCP_STATS_LATENCY,stats_latency,,uint32,Observed latency for RTP packets,0,session_mod,0 179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,16,Q_SCCP_KEYPAD,keypad,,uint32,Contains the key pressed on the handset,0,pkt,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,17,Q_SCCP_CODEC,codec,,uint32,The codec used in the RTP session,0,session,0 -179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,18,Q_SCCP_SOFTKEYEVENT,softkeyevent,,uint32,Contains the soft key event,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,1,Q_SCTP_CHUNK,chunk,,parent,A parent attribute representing a chunk entity.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,2,Q_SCTP_CHUNK_TYPE,chunk_type,,uint8,Containing the type of the chunk.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,3,Q_SCTP_CHUNK_DATA,chunk_data,,parent,Parent containing attributes relative to chunk data.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,4,Q_SCTP_CHUNK_DATA_TSN,chunk_data_tsn,,uint32,The Transmission Sequence Number is a global sequence number of chunks.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,5,Q_SCTP_CHUNK_DATA_STREAM_ID,chunk_data_stream_id,,uint16,An identifier indicating the stream to which the chunk belongs.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,6,Q_SCTP_CHUNK_DATA_STREAM_SEQ,chunk_data_stream_seq,,uint16,An identifier indicating the sequence number of the chunk data.,0,session,0 -180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,7,Q_SCTP_CHUNK_DATA_PROTO,chunk_data_proto,,uint32,Indicating the data type (or protocol) containing in the chunk.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,525,Q_MPA_CHAT,chat,,parent,Chat message information.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,550,Q_MPA_LOGIN,login,,string,Name of virtual character.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,1,Q_SECONDLIFE_LOGIN_ID,login_id,,binary,Id of virtual character.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,552,Q_MPA_MESSAGE,message,,string,Content of chat message.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,2,Q_SECONDLIFE_MESSAGE_TYPE,message_type,,string,Message type.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,3,Q_SECONDLIFE_SOURCE,source,,parent,Information about the source of chat message.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,600,Q_MPA_SENDER,sender,,binary,Sender Id.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,5,Q_SECONDLIFE_SOURCE_NAME,source_name,,string,Source name.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,6,Q_SECONDLIFE_SOURCE_TYPE,source_type,,string,Source type.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,7,Q_SECONDLIFE_SOURCE_ID,source_id,,binary,Source Id.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,8,Q_SECONDLIFE_SESSION_ID,session_id,,binary,Uniquely identifies the current user session.,0,session,0 -250,Q_PROTO_SECONDLIFE,Web,secondlife,Second Life,9,Q_SECONDLIFE_CHAT_TYPE,chat_type,,string,Chat message type.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,24,Q_SIP_REQUEST,request,,parent,SIP request.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,20,Q_SIP_URI,uri,,string,Contains the URI (similar to To: field),0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,65,Q_SIP_EXPIRES,expires,,uint32,Time in seconds after which the message expires.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,7,Q_SIP_REPLY_CODE,reply_code,,string,Return status code.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,4,Q_SIP_MIME_TYPE,mime_type,,string,Data type.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,50,Q_SIP_REQUEST_CALL_ID,request_call_id,,string,Call's id extracted for each sip request.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,47,Q_SIP_SERVER_AGENT,server_agent,,string,Server's software.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,16,Q_SIP_CSEQ,cseq,,string,Sequence number,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,18,Q_SIP_VIA,via,,string,The Via header field indicates the transport used for the transaction and identifies the location where the response is to be sent,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,19,Q_SIP_CONTACT,contact,,string,The Contact header field provides a SIP or SIPS URI that can be used to contact that specific instance of the UA for subsequent requests,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,21,Q_SIP_RECORD_ROUTE,record_route,,string,The Record-Route header field is inserted by proxies in a request to force future requests in the dialog to be routed through the proxy,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,22,Q_SIP_P_ASSERTED_ID,p_asserted_id,,string,Indicates the identity of the trusted SIP server,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,23,Q_SIP_REMOTE_PARTY_ID,remote_party_id,,string,The IP address of the remote party.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,15,Q_SIP_REASON,reason,,string,The reason a Session Initiation Protocol request was issued.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,48,Q_SIP_FROM,from,,string,The initiator of the request.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,49,Q_SIP_TO,to,,string,The recipient of the request.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,607,Q_MPA_SUBJECT,subject,,string,the subject header present in the SIP packet,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,38,Q_SIP_CALLER_DOMAIN,caller_domain,,string,Caller's domain,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,40,Q_SIP_CALLEE_DOMAIN,callee_domain,,string,Callee's domain,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,56,Q_SIP_CALLER_USER_PHONE,caller_user_phone,,int32,Caller's phone presence flag,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,57,Q_SIP_CALLEE_USER_PHONE,callee_user_phone,,int32,Callee's phone presence flag,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,58,Q_SIP_DATE,date,,string,Contains the date and time.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,59,Q_SIP_PROXY_AUTHORIZATION,proxy_authorization,,string,allows the client to identify itself (or its user) to a proxy that requires authentication,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,60,Q_SIP_WWW_AUTHENTICATE,www_authenticate,,string,Contains an authentication challenge.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,61,Q_SIP_ALERT_INFO,alert_info,,string,Specifies an alternative ring tone.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,62,Q_SIP_CALL_INFO,call_info,,string,Provides additional information about the caller or callee.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,63,Q_SIP_ACCEPT_LANGUAGE,accept_language,,string,Indicates the preferred languages.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,8,Q_SIP_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,17,Q_SIP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,9,Q_SIP_SESSION_DURATION,session_duration,,timeval,Call setup duration.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,14,Q_SIP_SETUP_DELAY,setup_delay,,timeval,Call setup delay.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,51,Q_SIP_CALLER_E164,caller_e164,,string,Format of the caller's telephone numbers,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,52,Q_SIP_CALLEE_E164,callee_e164,,string,Format of the callee's telephone numbers,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,29,Q_SIP_CALLER_NICKNAME,caller_nickname,,string,the caller nickname,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,30,Q_SIP_CALLEE_NICKNAME,callee_nickname,,string,the callee nickname,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,54,Q_SIP_FROM_TAG,from_tag,,buffer,A globally unique id of the caller.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,55,Q_SIP_TO_TAG,to_tag,,buffer,A globally unique id of the callee.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,1,Q_SIP_CONFCALL_CALLER,confcall_caller,,string,"Caller's name, in a confcall.",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,2,Q_SIP_CONFCALL_CALLEE,confcall_callee,,string,"Callee's name, in a confcall.",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,43,Q_SIP_CALLER_USER_AGENT,caller_user_agent,,string,Client's software in the caller way.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,44,Q_SIP_CALLEE_USER_AGENT,callee_user_agent,,string,Client's software used by the callee.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,45,Q_SIP_CALLER_SERVER_AGENT,caller_server_agent,,string,Server's software in the caller way.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,46,Q_SIP_CALLEE_SERVER_AGENT,callee_server_agent,,string,Server's software in the callee way.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,743,Q_MPA_CALLER_ADDR_V6,caller_addr_v6,,ip6_addr,IPv6 address which could be used by the initiator of the call.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,744,Q_MPA_CALLEE_ADDR_V6,callee_addr_v6,,ip6_addr,IPv6 address which could be used by the called party.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port which could be used by the caller.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port which could be used by the callee.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,31,Q_SIP_CONNECTION_INFO,connection_info,,parent,Contains connection information.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,32,Q_SIP_CONNECTION_INFO_ADDR,connection_info_addr,,ip_addr,Connection IPv4 address.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,53,Q_SIP_CONNECTION_INFO_ADDR_V6,connection_info_addr_v6,,ip6_addr,Connection IPv6 address.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,33,Q_SIP_CONNECTION_INFO_ADDR_TYPE,connection_info_addr_type,,string,Connection address type.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,34,Q_SIP_CONNECTION_INFO_NET_TYPE,connection_info_net_type,,string,Network type for the connection.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session,0 -182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,36,Q_SIP_USER_ID,user_id,,string,Client identifier used for his registering with a SIP server.,0,session,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,608,Q_MPA_VERSION,version,,string,Skype client version.,0,session,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,1,Q_SKYPE_SERVICE,service,,string,Current service identification string. The service is computed every 5 secondes (can be tuned); This attribute is extracted only when the service changes.,0,session,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer and Audio Skype Out.",0,session,0 -183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,608,Q_MPA_VERSION,version,,uint32,Current version of the Soulseek client.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,2,Q_SLSK_FILE_ID,file_id,,uint64,"Unique identifier of a file, based on IP of peer and the unique token for this combination file/peer.",0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,1,Q_SLSK_TRANSFER_WAY,transfer_way,,string,Indicates whether the file is uploaded or downloaded.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),643,Q_MPA_REQUEST,request,,parent,Parent attribute containing the metadata related to a given request/answer.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),1,Q_SMB_SERVICE,service,,string,The type of resource that the client intends to access.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),8,Q_SMB_FILE_ID,file_id,,string,Identifier of the file affected by the command (v1:4 char; usmb_v2:32 char).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),27,Q_SMB_END_OF_FILE,end_of_file,,uint64,The end of file offset value.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),7,Q_SMB_FILE_ATTRIBUTES,file_attributes,,uint32,File attributes (bit field).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),9,Q_SMB_USER_ID,user_id,,uint32,User identifier (SMB usmb_v1 only).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),10,Q_SMB_PROCESS_ID,process_id,,uint32,Identifier of the process being affected by the following command.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),11,Q_SMB_NT_STATUS,nt_status,,uint32,NT error code.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),2,Q_SMB_DIRECTORY,directory,x,string,(deprecated) Name of the shared directory on the server host.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),20,Q_SMB_PATH,path,,string,The server/share name of the resource to which the client attempts to connect.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),3,Q_SMB_DOMAIN,domain,,string,Domain name.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),4,Q_SMB_NATIVE_OS,native_os,,string,Client's operating system.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),16,Q_SMB_NATIVE_LAN_MANAGER,native_lan_manager,,string,The native LAN manager type.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),5,Q_SMB_COMMAND,command,,uint16,Command number use.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),15,Q_SMB_COMMAND_STRING,command_string,,string,Command name.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),6,Q_SMB_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),584,Q_MPA_QUERY_TYPE,query_type,,uint8,Indicates if the message is a request (1) or a response (2).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),14,Q_SMB_QUERY_ID,query_id,,uint64,Indexes and correlates requests and responses.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),12,Q_SMB_SECURITY_BLOB_LEN,security_blob_len,,uint32,Security blob data length.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),13,Q_SMB_SECURITY_BLOB,security_blob,,buffer,Data contained in the security blob.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),17,Q_SMB_SEARCH_ATTRIBUTES,search_attributes,,uint32,An attribute mask used to specify the standard attributes a file MUST have in order to match the search.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),19,Q_SMB_SEARCH_STORAGE_TYPE,search_storage_type,,uint32,Specify the search type (directory or file).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),18,Q_SMB_SEARCH_PATTERN,search_pattern,,string,The file pattern to search for.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),21,Q_SMB_INFORMATION_LEVEL,information_level,,uint16,"This field contains an information level code, which determines the information contained in the response.",0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),24,Q_SMB_DIALECT,dialect,,string,The version of the SMB Protocol.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),25,Q_SMB_DIALECT_INDEX,dialect_index,,uint16,Index of the selected SMB Protocol version.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),26,Q_SMB_DIALECT_NAME,dialect_name,,uint16,The version name of the SMB Protocol.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),23,Q_SMB_ATTRIBUTES,attributes,,uint32,File attributes/folder (bit field).,0,session,0 -185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),22,Q_SMB_EXT_ATTRIBUTES,ext_attributes,x,uint32,(deprecated) Extended File attributes/folder (bit field).,0,session,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,552,Q_MPA_MESSAGE,message,,parent,Parent attribute containing SMS information.,0,session,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,600,Q_MPA_SENDER,sender,,string,Sender's address.,0,session,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,585,Q_MPA_RECEIVER,receiver,,string,Receiver's address.,0,session,0 -738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,530,Q_MPA_CONTENT,content,,buffer,Content of the Short Message.,0,session,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,1,Q_SMTP_MAILFROM,mailfrom,,parent,Contains the domain and the sender's email,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,2,Q_SMTP_SENDER_MAILFROM,sender_mailfrom,,string,Sender's email address (used by MAIL FROM method).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,3,Q_SMTP_SENDER_DOMAIN,sender_domain,,string,Domain of the sender's email address.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,4,Q_SMTP_RCPTTO,rcptto,,parent,Domain and recipient's email address (used by RCPT TO method).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,5,Q_SMTP_RECEIVER_RCPTTO,receiver_rcptto,,string,Recipient's email address (used by RCPT TO method).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,6,Q_SMTP_RECEIVER_DOMAIN,receiver_domain,,string,Domain of the recipient's email address.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,11,Q_SMTP_RESPONSE_CODE,response_code,,uint32,Return code,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,556,Q_MPA_MIME_TYPE,mime_type,,string,Mail's content type.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,8,Q_SMTP_START_TIME,start_time,,timeval,Starting time of SMTP session,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,9,Q_SMTP_STOP_TIME,stop_time,,timeval,Ending time of SMTP session,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,10,Q_SMTP_DURATION,duration,,timeval,Duration of the SMTP session,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session,1 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,12,Q_SMTP_SERVER,server,,string,Contains the name of the used smtp server,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,13,Q_SMTP_SERVER_AGENT,server_agent,,string,The software name used by the email server,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session,0 -186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,17,Q_SCCP_CODEC,codec,,uint32,The codec used in the RTP session,0,session_mod,0 +179,Q_PROTO_SCCP,Audio/Video,sccp,Skinny Client Control Protocol,18,Q_SCCP_SOFTKEYEVENT,softkeyevent,,uint32,Contains the soft key event,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_fix,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_fix,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,1,Q_SCTP_CHUNK,chunk,,parent,A parent attribute representing a chunk entity.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,2,Q_SCTP_CHUNK_TYPE,chunk_type,,uint8,Containing the type of the chunk.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,3,Q_SCTP_CHUNK_DATA,chunk_data,,parent,Parent containing attributes relative to chunk data.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,4,Q_SCTP_CHUNK_DATA_TSN,chunk_data_tsn,,uint32,The Transmission Sequence Number is a global sequence number of chunks.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,5,Q_SCTP_CHUNK_DATA_STREAM_ID,chunk_data_stream_id,,uint16,An identifier indicating the stream to which the chunk belongs.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,6,Q_SCTP_CHUNK_DATA_STREAM_SEQ,chunk_data_stream_seq,,uint16,An identifier indicating the sequence number of the chunk data.,0,session_mod,0 +180,Q_PROTO_SCTP,Network Service,sctp,Stream Control Transmission Protocol,7,Q_SCTP_CHUNK_DATA_PROTO,chunk_data_proto,,uint32,Indicating the data type (or protocol) containing in the chunk.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,525,Q_MPA_CHAT,chat,,parent,Chat message information.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,550,Q_MPA_LOGIN,login,,string,Name of virtual character.,0,session_fix,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,1,Q_SECONDLIFE_LOGIN_ID,login_id,,binary,Id of virtual character.,0,session_fix,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,552,Q_MPA_MESSAGE,message,,string,Content of chat message.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,2,Q_SECONDLIFE_MESSAGE_TYPE,message_type,,string,Message type.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,3,Q_SECONDLIFE_SOURCE,source,,parent,Information about the source of chat message.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,600,Q_MPA_SENDER,sender,,binary,Sender Id.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,5,Q_SECONDLIFE_SOURCE_NAME,source_name,,string,Source name.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,6,Q_SECONDLIFE_SOURCE_TYPE,source_type,,string,Source type.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,7,Q_SECONDLIFE_SOURCE_ID,source_id,,binary,Source Id.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,8,Q_SECONDLIFE_SESSION_ID,session_id,,binary,Uniquely identifies the current user session.,0,session_mod,0 +250,Q_PROTO_SECONDLIFE,Web,secondlife,SecondLife.com,9,Q_SECONDLIFE_CHAT_TYPE,chat_type,,string,Chat message type.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,24,Q_SIP_REQUEST,request,,parent,SIP request.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,555,Q_MPA_METHOD,method,,string,The command,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,20,Q_SIP_URI,uri,,string,Contains the URI (similar to To: field),0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,65,Q_SIP_EXPIRES,expires,,uint32,Time in seconds after which the message expires.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,7,Q_SIP_REPLY_CODE,reply_code,,string,Return status code.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,4,Q_SIP_MIME_TYPE,mime_type,,string,Data type.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client's software.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,50,Q_SIP_REQUEST_CALL_ID,request_call_id,,string,Call's id extracted for each sip request.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,47,Q_SIP_SERVER_AGENT,server_agent,,string,Server's software.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,16,Q_SIP_CSEQ,cseq,,string,Sequence number,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,18,Q_SIP_VIA,via,,string,The Via header field indicates the transport used for the transaction and identifies the location where the response is to be sent,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,19,Q_SIP_CONTACT,contact,,string,The Contact header field provides a SIP or SIPS URI that can be used to contact that specific instance of the UA for subsequent requests,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,21,Q_SIP_RECORD_ROUTE,record_route,,string,The Record-Route header field is inserted by proxies in a request to force future requests in the dialog to be routed through the proxy,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,22,Q_SIP_P_ASSERTED_ID,p_asserted_id,,string,Indicates the identity of the trusted SIP server,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,23,Q_SIP_REMOTE_PARTY_ID,remote_party_id,,string,The IP address of the remote party.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,15,Q_SIP_REASON,reason,,string,The reason a Session Initiation Protocol request was issued.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,48,Q_SIP_FROM,from,,string,The initiator of the request.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,49,Q_SIP_TO,to,,string,The recipient of the request.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,607,Q_MPA_SUBJECT,subject,,string,the subject header present in the SIP packet,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,38,Q_SIP_CALLER_DOMAIN,caller_domain,,string,Caller's domain,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,40,Q_SIP_CALLEE_DOMAIN,callee_domain,,string,Callee's domain,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,56,Q_SIP_CALLER_USER_PHONE,caller_user_phone,,int32,Caller's phone presence flag,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,57,Q_SIP_CALLEE_USER_PHONE,callee_user_phone,,int32,Callee's phone presence flag,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,58,Q_SIP_DATE,date,,string,Contains the date and time.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,59,Q_SIP_PROXY_AUTHORIZATION,proxy_authorization,,string,allows the client to identify itself (or its user) to a proxy that requires authentication,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,60,Q_SIP_WWW_AUTHENTICATE,www_authenticate,,string,Contains an authentication challenge.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,61,Q_SIP_ALERT_INFO,alert_info,,string,Specifies an alternative ring tone.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,62,Q_SIP_CALL_INFO,call_info,,string,Provides additional information about the caller or callee.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,63,Q_SIP_ACCEPT_LANGUAGE,accept_language,,string,Indicates the preferred languages.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,8,Q_SIP_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,709,Q_MPA_START_TIME,start_time,,timeval,Start date of the call.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,17,Q_SIP_TIME_BEFORE_SPK,time_before_spk,,timeval,Waiting delay before speak,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,9,Q_SIP_SESSION_DURATION,session_duration,,timeval,"Duration of the session, between INVITE and BYE.",0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,14,Q_SIP_SETUP_DELAY,setup_delay,,timeval,Call setup delay.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,51,Q_SIP_CALLER_E164,caller_e164,,string,Format of the caller's telephone numbers,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,52,Q_SIP_CALLEE_E164,callee_e164,,string,Format of the callee's telephone numbers,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,29,Q_SIP_CALLER_NICKNAME,caller_nickname,,string,the caller nickname,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,30,Q_SIP_CALLEE_NICKNAME,callee_nickname,,string,the callee nickname,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,54,Q_SIP_FROM_TAG,from_tag,,buffer,A globally unique id of the caller.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,55,Q_SIP_TO_TAG,to_tag,,buffer,A globally unique id of the callee.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,1,Q_SIP_CONFCALL_CALLER,confcall_caller,,string,"Caller's name, in a confcall.",0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,2,Q_SIP_CONFCALL_CALLEE,confcall_callee,,string,"Callee's name, in a confcall.",0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,43,Q_SIP_CALLER_USER_AGENT,caller_user_agent,,string,Client's software in the caller way.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,44,Q_SIP_CALLEE_USER_AGENT,callee_user_agent,,string,Client's software used by the callee.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,45,Q_SIP_CALLER_SERVER_AGENT,caller_server_agent,,string,Server's software in the caller way.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,46,Q_SIP_CALLEE_SERVER_AGENT,callee_server_agent,,string,Server's software in the callee way.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,710,Q_MPA_END_STATUS,end_status,,string,Status of the call end,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,705,Q_MPA_CALLER_ADDR,caller_addr,,ip_addr,Address which could be used by the initiator of the call.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,743,Q_MPA_CALLER_ADDR_V6,caller_addr_v6,,ip6_addr,IPv6 address which could be used by the initiator of the call.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,706,Q_MPA_CALLEE_ADDR,callee_addr,,ip_addr,Address which could be used by the called party.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,744,Q_MPA_CALLEE_ADDR_V6,callee_addr_v6,,ip6_addr,IPv6 address which could be used by the called party.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,707,Q_MPA_CALLER_PORT,caller_port,,uint16,Port which could be used by the caller.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,708,Q_MPA_CALLEE_PORT,callee_port,,uint16,Port which could be used by the callee.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,31,Q_SIP_CONNECTION_INFO,connection_info,,parent,Contains connection information.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,32,Q_SIP_CONNECTION_INFO_ADDR,connection_info_addr,,ip_addr,Connection IPv4 address.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,53,Q_SIP_CONNECTION_INFO_ADDR_V6,connection_info_addr_v6,,ip6_addr,Connection IPv6 address.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,33,Q_SIP_CONNECTION_INFO_ADDR_TYPE,connection_info_addr_type,,string,Connection address type.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,34,Q_SIP_CONNECTION_INFO_NET_TYPE,connection_info_net_type,,string,Network type for the connection.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,696,Q_MPA_MEDIA_DESC,media_desc,,parent,"Parent entry, empty, for attributes media_*/data_port",0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,697,Q_MPA_MEDIA_TYPE,media_type,,string,Contains the media type.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,698,Q_MPA_DATA_PORT,data_port,,uint16,Data port for client's protocol.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,699,Q_MPA_MEDIA_PROTO,media_proto,,string,Protocol used in client stream.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,700,Q_MPA_MEDIA_FORMAT,media_format,,uint32,Client's protocol formats available.,0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,551,Q_MPA_MEDIA_ATTR,media_attr,,parent,"Parent entry, empty, for attributes media_attr_....",0,session_mod,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,663,Q_MPA_MEDIA_ATTR_TYPE,media_attr_type,,uint32,Contains the media type (audio or video).,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,664,Q_MPA_MEDIA_ATTR_ENCODING,media_attr_encoding,,string,The encoding of media data.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,665,Q_MPA_MEDIA_ATTR_RATE,media_attr_rate,,string,The encoding rate.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,666,Q_MPA_MEDIA_ATTR_PARAM,media_attr_param,,string,Session attribute value.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,667,Q_MPA_MEDIA_ATTR_LABEL,media_attr_label,,string,Name of the described session attribute.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,668,Q_MPA_MEDIA_ATTR_ADDR,media_attr_addr,,ip_addr,The mentioned IPv4 address to be used.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,801,Q_MPA_MEDIA_ATTR_ADDR_START_OFFSET,media_attr_addr_start_offset,,uint32,Offset to the first IP address field byte given in the media attribute.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,802,Q_MPA_MEDIA_ATTR_ADDR_END_OFFSET,media_attr_addr_end_offset,,uint32,Offset to the first byte which is not part of the IP address field given in the media attribute.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,742,Q_MPA_MEDIA_ATTR_ADDR_V6,media_attr_addr_v6,,ip6_addr,The mentioned IPv6 address to be used.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,669,Q_MPA_MEDIA_ATTR_PORT,media_attr_port,,uint16,The transport port to be used.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,803,Q_MPA_MEDIA_ATTR_PORT_START_OFFSET,media_attr_port_start_offset,,uint32,Offset to the first PORT field byte given in the media attribute.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,804,Q_MPA_MEDIA_ATTR_PORT_END_OFFSET,media_attr_port_end_offset,,uint32,Offset to the first byte which is not part of the PORT field given in the media attribute.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,670,Q_MPA_MEDIA_ATTR_CHANNEL,media_attr_channel,,string,The channel value.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,672,Q_MPA_MEDIA_ATTR_TRANSPORT,media_attr_transport,,string,The transport protocol (TCP or UDP).,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,671,Q_MPA_MEDIA_ATTR_VALUE,media_attr_value,,string,Line value of the media attribute.,0,session_prt,0 +182,Q_PROTO_SIP,Audio/Video,sip,Session Initiation Protocol,36,Q_SIP_USER_ID,user_id,,string,Client identifier used for his registering with a SIP server.,0,session_mod,0 +323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +323,Q_PROTO_SKYBLOG,Web,skyblog,skyblog,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,608,Q_MPA_VERSION,version,,string,Skype client version.,0,session_mod,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,1,Q_SKYPE_SERVICE,service,,string,Current service identification string. The service is computed every 5 secondes (can be tuned); This attribute is extracted only when the service changes.,0,session_prt,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer and Audio Skype Out.",0,session_prt,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_prt,0 +183,Q_PROTO_SKYPE,Instant Messaging,skype,skype,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,608,Q_MPA_VERSION,version,,uint32,Current version of the Soulseek client.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,2,Q_SLSK_FILE_ID,file_id,,uint64,"Unique identifier of a file, based on IP of peer and the unique token for this combination file/peer.",0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,1,Q_SLSK_TRANSFER_WAY,transfer_way,,string,Indicates whether the file is uploaded or downloaded.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +184,Q_PROTO_SLSK,Peer to Peer,slsk,SoulSeek,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),643,Q_MPA_REQUEST,request,,parent,Parent attribute containing the metadata related to a given request/answer.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),1,Q_SMB_SERVICE,service,,string,The type of resource that the client intends to access.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),30,Q_SMB_SERVICE_DATA,service_data,,buffer,Data associated with the resource that the client intends to access.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint64,Offset of the transferred data.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),8,Q_SMB_FILE_ID,file_id,,string,Identifier of the file affected by the command (v1:4 char; usmb_v2:32 char).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),27,Q_SMB_END_OF_FILE,end_of_file,,uint64,The end of file offset value.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),7,Q_SMB_FILE_ATTRIBUTES,file_attributes,,uint32,File attributes (bit field).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),9,Q_SMB_USER_ID,user_id,,uint32,User identifier (SMB usmb_v1 only).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),10,Q_SMB_PROCESS_ID,process_id,,uint32,Identifier of the process being affected by the following command.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),11,Q_SMB_NT_STATUS,nt_status,,uint32,NT error code.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),2,Q_SMB_DIRECTORY,directory,x,string,(deprecated) Name of the shared directory on the server host.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),20,Q_SMB_PATH,path,,string,The server/share name of the resource to which the client attempts to connect.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),3,Q_SMB_DOMAIN,domain,,string,Domain name.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),4,Q_SMB_NATIVE_OS,native_os,,string,Client's operating system.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),16,Q_SMB_NATIVE_LAN_MANAGER,native_lan_manager,,string,The native LAN manager type.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),5,Q_SMB_COMMAND,command,,uint16,Command number use.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),15,Q_SMB_COMMAND_STRING,command_string,,string,Command name.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),6,Q_SMB_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),608,Q_MPA_VERSION,version,,uint32,Protocol version.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),584,Q_MPA_QUERY_TYPE,query_type,,uint8,Indicates if the message is a request (1) or a response (2).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),14,Q_SMB_QUERY_ID,query_id,,uint64,Indexes and correlates requests and responses.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),12,Q_SMB_SECURITY_BLOB_LEN,security_blob_len,,uint32,Security blob data length.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),13,Q_SMB_SECURITY_BLOB,security_blob,,buffer,Data contained in the security blob.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),17,Q_SMB_SEARCH_ATTRIBUTES,search_attributes,,uint32,An attribute mask used to specify the standard attributes a file MUST have in order to match the search.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),19,Q_SMB_SEARCH_STORAGE_TYPE,search_storage_type,,uint32,Specify the search type (directory or file).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),18,Q_SMB_SEARCH_PATTERN,search_pattern,,string,The file pattern to search for.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),21,Q_SMB_INFORMATION_LEVEL,information_level,,uint16,"This field contains an information level code, which determines the information contained in the response.",0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),24,Q_SMB_DIALECT,dialect,,string,The version of the SMB Protocol.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),25,Q_SMB_DIALECT_INDEX,dialect_index,,uint16,Index of the selected SMB Protocol version.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),26,Q_SMB_DIALECT_NAME,dialect_name,,uint16,The version name of the SMB Protocol.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),23,Q_SMB_ATTRIBUTES,attributes,,uint32,File attributes/folder (bit field).,0,session_mod,0 +185,Q_PROTO_SMB,File Server,smb,Server Message Block (Windows File Server),22,Q_SMB_EXT_ATTRIBUTES,ext_attributes,x,uint32,(deprecated) Extended File attributes/folder (bit field).,0,session_mod,0 +738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,552,Q_MPA_MESSAGE,message,,parent,Parent attribute containing SMS information.,0,session_mod,0 +738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,600,Q_MPA_SENDER,sender,,string,Sender's address.,0,session_prt,0 +738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,585,Q_MPA_RECEIVER,receiver,,string,Receiver's address.,0,session_prt,0 +738,Q_PROTO_SMPP,Wap,smpp,Short message peer-to-peer protocol,530,Q_MPA_CONTENT,content,,buffer,Content of the Short Message.,0,session_prt,1 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,1,Q_SMTP_MAILFROM,mailfrom,,parent,Contains the domain and the sender's email,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,2,Q_SMTP_SENDER_MAILFROM,sender_mailfrom,,string,Sender's email address (used by MAIL FROM method).,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,3,Q_SMTP_SENDER_DOMAIN,sender_domain,,string,Domain of the sender's email address.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,4,Q_SMTP_RCPTTO,rcptto,,parent,Domain and recipient's email address (used by RCPT TO method).,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,5,Q_SMTP_RECEIVER_RCPTTO,receiver_rcptto,,string,Recipient's email address (used by RCPT TO method).,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,6,Q_SMTP_RECEIVER_DOMAIN,receiver_domain,,string,Domain of the recipient's email address.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,"Parent entry, empty, for client request and server response.",0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,695,Q_MPA_INDEX,index,,string,Identifier of the request and response in a flow.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,701,Q_MPA_EMAIL_INDEX,email_index,,string,Index of the request which the email is attached to.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,555,Q_MPA_METHOD,method,,string,Command sent by the client,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,11,Q_SMTP_RESPONSE_CODE,response_code,,uint32,Return code,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,694,Q_MPA_SERVER_RESPONSE,server_response,,string,The return code of the server,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,556,Q_MPA_MIME_TYPE,mime_type,,string,Mail's content type.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Name of the software used.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,8,Q_SMTP_START_TIME,start_time,,timeval,Starting time of SMTP session,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,9,Q_SMTP_STOP_TIME,stop_time,,timeval,Ending time of SMTP session,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,10,Q_SMTP_DURATION,duration,,timeval,Duration of the SMTP session,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,515,Q_MPA_ATTACH_DISPOSITION,attach_disposition,,string,Attached file disposition,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,693,Q_MPA_ATTACH_CONTENT_DECODED,attach_content_decoded,,buffer,Decoded attached files' content.,1,session_mod,1 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,659,Q_MPA_ATTACH_TRANSFER_ENCODING,attach_transfer_encoding,,string,Contains the encoding of the attached content,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,678,Q_MPA_CONTENT_ENTRY,content_entry,,parent,"Parent entry, information about email content.",0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,679,Q_MPA_CONTENT_HEADER,content_header,,string,Data containing headers.,1,session_mod,1 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,680,Q_MPA_CONTENT_BODY,content_body,,string,Data containing body.,1,session_mod,1 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,12,Q_SMTP_SERVER,server,,string,Contains the name of the used smtp server,0,session_fix,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,13,Q_SMTP_SERVER_AGENT,server_agent,,string,The software name used by the email server,0,session_fix,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Contains the greeting message of the server when connection is established,0,session_fix,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,649,Q_MPA_CONTENT_TRANSFER_ENCODING,content_transfer_encoding,,string,Contains the encoding of the content,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,650,Q_MPA_RECEIVED,received,,parent,"Parent entry, for fields added by each relay",0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,651,Q_MPA_RECEIVED_FROM_NAME,received_from_name,,string,Contains the sending host name,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,652,Q_MPA_RECEIVED_FROM_IP,received_from_ip,,ip_addr,Contains the IP address of the sending host name,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,654,Q_MPA_RECEIVED_BY_NAME,received_by_name,,string,Contains the receiving host name,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,655,Q_MPA_RECEIVED_BY_IP,received_by_ip,,ip_addr,Contains the IP address of the receiving host name,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,656,Q_MPA_RECEIVED_WITH,received_with,,string,Contains the software used to send the email,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,657,Q_MPA_RECEIVED_DATE,received_date,,string,Date when the transport service relayed the message,0,session_prt,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,749,Q_MPA_RECEIVED_SERVER_AGENT,received_server_agent,,string,Contains the name of the sever agent,0,session_mod,0 +186,Q_PROTO_SMTP,Mail,smtp,Simple Mail Transfer Protocol,658,Q_MPA_XMAILER,xmailer,,string,Contains the user_agent of the used mailer,0,session_mod,0 189,Q_PROTO_SNAP,Network Service,snap,Sub-Network Access Protocol,1,Q_SNAP_SNAP_TYPE,snap_type,,uint16,Identifier of the encapsulated protocol.,0,pkt,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,608,Q_MPA_VERSION,version,,string_index,SNMP version.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,1,Q_SNMP_COMMUNITY,community,,string,Community name.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,643,Q_MPA_REQUEST,request,,parent,Contains the requests attributes,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,555,Q_MPA_METHOD,method,,string,SNMP request type.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,3,Q_SNMP_REQUEST_ID,request_id,,uint32,Request Identifier.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,4,Q_SNMP_VARIABLE,variable,,parent,OID Parent.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,2,Q_SNMP_OID,oid,,string,Object Identifier.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,5,Q_SNMP_VALUE_RAW,value_raw,,buffer,OID raw Value,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,7,Q_SNMP_VALUE_TYPE,value_type,x,string,Object type.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,6,Q_SNMP_VALUE_LEN,value_len,,uint32,Size of value_raw in bytes.,0,session,0 -190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,577,Q_MPA_NAME,name,,string,Name the user.,0,session,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,555,Q_MPA_METHOD,method,,string,Contains the SNPP command.,0,session,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,1,Q_SNPP_CALLER_ID,caller_id,,string,Login of person who send the message.,0,session,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,552,Q_MPA_MESSAGE,message,,string,Contains the message sent to the pager.,0,session,0 -264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,2,Q_SNPP_PAGER_ID,pager_id,,string,Contains pager number.,0,session,0 -192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKSv4,1,Q_SOCKS4_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session,0 -192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKSv4,2,Q_SOCKS4_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKSv5,1,Q_SOCKS5_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKSv5,3,Q_SOCKS5_REMOTE_NAME,remote_name,,string,Remote FQDN.,0,session,0 -193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKSv5,2,Q_SOCKS5_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,1,Q_SPDY_FRAME_TYPE,frame_type,,uint8,Frame type.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,2,Q_SPDY_STREAM_ID,stream_id,,uint32,Stream identifier.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,3,Q_SPDY_FLAGS,flags,,uint8,Flags,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,4,Q_SPDY_LENGTH,length,,uint32,Length of the message starting at the offset of this field.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,5,Q_SPDY_CONTROL_FRAME,control_frame,,parent,Parent attribute for control frame elements.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,6,Q_SPDY_VERSION,version,,uint16,Version number.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,7,Q_SPDY_CONTROL_TYPE,control_type,,uint16,Control frame type.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,8,Q_SPDY_SYN_STREAM,syn_stream,,parent,Parent attribute for elements of stream synchronization frames.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,9,Q_SPDY_ASSOCIATED_STREAM_ID,associated_stream_id,,uint16,Identifier for a stream which this stream is associated to.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,10,Q_SPDY_PRIORITY,priority,,uint8,A stream priority is represented as an integer. 0 represents the highest priority and 7 represents the lowest priority.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,11,Q_SPDY_SLOT,slot,,uint8,An 8 bit unsigned integer specifying the index in the server's CREDENTIAL vector of the client certificate to be used for this request.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,13,Q_SPDY_RST_STREAM,rst_stream,,parent,Parent attribute for elements of stream reset frames.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,14,Q_SPDY_STATUS_CODE,status_code,,uint32,An indicator for why the stream is being terminated.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,15,Q_SPDY_HEADER_COUNT,header_count,,uint32,The number of repeating name/value pairs following this field,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,16,Q_SPDY_HEADER,header,,parent,Parent attribute for a name/value pair.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,21,Q_SPDY_HEADER_NAME,header_name,,string,"Header name, prefixed by a ':' if it's a mandatory SPDY header.",0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,22,Q_SPDY_HEADER_VALUE,header_value,,string,Header value.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,19,Q_SPDY_DATA_FRAME,data_frame,,parent,Parent attribute for elements of a data frame.,0,session,0 -1469,Q_PROTO_SPDY,Web,spdy,SPDY,20,Q_SPDY_CONTENT,content,,buffer,Message content.,0,session,1 -1446,Q_PROTO_SPID,Standard,spid,SPID : Statistical Protocol IDentification,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1446,Q_PROTO_SPID,Standard,spid,SPID : Statistical Protocol IDentification,1,Q_SPID_RESULT,result,,parent,Parent attribute containing SPID classification results.,0,session,0 -1446,Q_PROTO_SPID,Standard,spid,SPID : Statistical Protocol IDentification,2,Q_SPID_FOUND_PROTOCOL,found_protocol,,string,Protocol name that has been discovered by SPID.,0,session,0 -1446,Q_PROTO_SPID,Standard,spid,SPID : Statistical Protocol IDentification,3,Q_SPID_DIVERGENCE,divergence,,uint32,"Divergence giving the distance"" between the flow content and the selected SPID model. The smaller the divergence, the better the classification.""",0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -198,Q_PROTO_SSH,Encrypted,ssh,Secure Shell,1,Q_SSH_RTT,rtt,,timeval,Server response time.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,608,Q_MPA_VERSION,version,,string_index,Protocol version.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,739,Q_MPA_SESSION_ID,session_id,,buffer,Uniquely identifies the current user session.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,3,Q_SSL_CERTIFICATE,certificate,,parent,Parent attribute for the common_name and the MD5 hash of the certificate,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,13,Q_SSL_CERTIFICATE_RAW,certificate_raw,,buffer,Raw text content of the ssl certificate.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,1,Q_SSL_CERTIF_MD5,certif_md5,,binary,md5 of the certificate.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,2,Q_SSL_COMMON_NAME,common_name,,string,Domain name mentioned in the certificate.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,5,Q_SSL_SERVER_NAME,server_name,,string,Domain name mentioned in Client Hello message.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,12,Q_SSL_SUPPORTED_NEXT_PROTOCOL,supported_next_protocol,,string,Supported protocol on top of SSL specified by the server in the Next Protocol Negotiation TLS extension.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,4,Q_SSL_ISSUER,issuer,,string,Certificate Authority.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,6,Q_SSL_VALIDITY_NOT_BEFORE,validity_not_before,,string,Certificate's validity start date.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,7,Q_SSL_VALIDITY_NOT_AFTER,validity_not_after,,string,Certificate's validity end date.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,8,Q_SSL_SERIAL_NUMBER,serial_number,,buffer,Serial number of certificate.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,9,Q_SSL_SUBJECT_ALT_NAME,subject_alt_name,,string,Identifies a list of host names which belong to the same certificate.,0,session,0 -199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,11,Q_SSL_HANDSHAKE_TYPE,handshake_type,,uint8,Handshake type.,0,session,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,608,Q_MPA_VERSION,version,,string_index,SNMP version.,0,session_fix,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,1,Q_SNMP_COMMUNITY,community,,string,Community name.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,643,Q_MPA_REQUEST,request,,parent,Contains the requests attributes,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,555,Q_MPA_METHOD,method,,string,SNMP request type.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,3,Q_SNMP_REQUEST_ID,request_id,,uint32,Request Identifier.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,4,Q_SNMP_VARIABLE,variable,,parent,OID Parent.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,2,Q_SNMP_OID,oid,,string,Object Identifier.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,5,Q_SNMP_VALUE_RAW,value_raw,,buffer,OID raw Value,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,7,Q_SNMP_VALUE_TYPE,value_type,x,string,Object type.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,6,Q_SNMP_VALUE_LEN,value_len,,uint32,Size of value_raw in bytes.,0,session_mod,0 +190,Q_PROTO_SNMP,Network Management,snmp,Simple Network Management Protocol,577,Q_MPA_NAME,name,,string,Name the user.,0,session_mod,0 +264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,555,Q_MPA_METHOD,method,,string,Contains the SNPP command.,0,session_mod,0 +264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,1,Q_SNPP_CALLER_ID,caller_id,,string,Login of person who send the message.,0,session_mod,0 +264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,552,Q_MPA_MESSAGE,message,,string,Contains the message sent to the pager.,0,session_mod,0 +264,Q_PROTO_SNPP,Network Service,snpp,Simple Network Paging Protocol,2,Q_SNPP_PAGER_ID,pager_id,,string,Contains pager number.,0,session_mod,0 +192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKet Secure v4,1,Q_SOCKS4_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session_fix,0 +192,Q_PROTO_SOCKS4,Tunneling,socks4,SOCKet Secure v4,2,Q_SOCKS4_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session_fix,0 +193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,1,Q_SOCKS5_REMOTE_ADDR,remote_addr,,ip_addr,Remote IP address.,0,session_fix,0 +193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,3,Q_SOCKS5_REMOTE_NAME,remote_name,,string,Fully qualified remote domain name.,0,session_fix,0 +193,Q_PROTO_SOCKS5,Tunneling,socks5,SOCKet Secure v5,2,Q_SOCKS5_REMOTE_PORT,remote_port,,uint16,Remote TCP port.,0,session_fix,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,1,Q_SPDY_FRAME_TYPE,frame_type,,uint8,Frame type.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,2,Q_SPDY_STREAM_ID,stream_id,,uint32,Stream identifier.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,3,Q_SPDY_FLAGS,flags,,uint8,Flags,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,4,Q_SPDY_LENGTH,length,,uint32,Length of the message starting at the offset of this field.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,5,Q_SPDY_CONTROL_FRAME,control_frame,,parent,Parent attribute for control frame elements.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,6,Q_SPDY_VERSION,version,,uint16,Version number.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,7,Q_SPDY_CONTROL_TYPE,control_type,,uint16,Control frame type.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,8,Q_SPDY_SYN_STREAM,syn_stream,,parent,Parent attribute for elements of stream synchronization frames.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,9,Q_SPDY_ASSOCIATED_STREAM_ID,associated_stream_id,,uint16,Identifier for a stream which this stream is associated to.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,10,Q_SPDY_PRIORITY,priority,,uint8,A stream priority is represented as an integer. 0 represents the highest priority and 7 represents the lowest priority.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,11,Q_SPDY_SLOT,slot,,uint8,An 8 bit unsigned integer specifying the index in the server's CREDENTIAL vector of the client certificate to be used for this request.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,13,Q_SPDY_RST_STREAM,rst_stream,,parent,Parent attribute for elements of stream reset frames.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,14,Q_SPDY_STATUS_CODE,status_code,,uint32,An indicator for why the stream is being terminated.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,15,Q_SPDY_HEADER_COUNT,header_count,,uint32,The number of repeating name/value pairs following this field,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,16,Q_SPDY_HEADER,header,,parent,Parent attribute for a name/value pair.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,21,Q_SPDY_HEADER_NAME,header_name,,string,"Header name, prefixed by a ':' if it's a mandatory SPDY header.",0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,22,Q_SPDY_HEADER_VALUE,header_value,,string,Header value.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,19,Q_SPDY_DATA_FRAME,data_frame,,parent,Parent attribute for elements of a data frame.,0,session_prt,0 +1469,Q_PROTO_SPDY,Web,spdy,SPDY,20,Q_SPDY_CONTENT,content,,buffer,Message content.,0,session_prt,1 +1446,Q_PROTO_SPID,Standard,spid,Statistical Protocol IDentification,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1446,Q_PROTO_SPID,Standard,spid,Statistical Protocol IDentification,1,Q_SPID_RESULT,result,,parent,Parent attribute containing SPID classification results.,0,session_mod,0 +1446,Q_PROTO_SPID,Standard,spid,Statistical Protocol IDentification,2,Q_SPID_FOUND_PROTOCOL,found_protocol,,string,Protocol name that has been discovered by SPID.,0,session_mod,0 +1446,Q_PROTO_SPID,Standard,spid,Statistical Protocol IDentification,3,Q_SPID_DIVERGENCE,divergence,,uint32,"Divergence giving the distance"" between the flow content and the selected SPID model. The smaller the divergence, the better the classification.""",0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,641,Q_MPA_LOGIN_SERVER,login_server,,string,Concatenated login and server: @.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +195,Q_PROTO_SQUIRRELMAIL,Webmail,squirrelmail,SquirrelMail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 +198,Q_PROTO_SSH,Encrypted,ssh,Secure Shell,1,Q_SSH_RTT,rtt,,timeval,Server response time.,0,session_mod,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,790,Q_MPA_DECLASSIFY_OVERRIDE,declassify_override,,uint8,Attribute used to specify whether the current session path maybe be declassified or not. This value overrides the proto_feature flag defined in the layer raising this event.,0,session_mod,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,608,Q_MPA_VERSION,version,,string_index,Protocol version.,0,session_fix,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,739,Q_MPA_SESSION_ID,session_id,,buffer,Uniquely identifies the current user session.,0,session_fix,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,3,Q_SSL_CERTIFICATE,certificate,,parent,Parent attribute for the common_name and the MD5 hash of the certificate,0,session_mod,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,13,Q_SSL_CERTIFICATE_RAW,certificate_raw,,buffer,Raw text content of the ssl certificate.,0,session_mod,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,1,Q_SSL_CERTIF_MD5,certif_md5,,binary,md5 of the certificate.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,2,Q_SSL_COMMON_NAME,common_name,,string,Domain name mentioned in the certificate.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,5,Q_SSL_SERVER_NAME,server_name,,string,Domain name mentioned in Client Hello message.,0,session_fix,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,12,Q_SSL_SUPPORTED_NEXT_PROTOCOL,supported_next_protocol,,string,Supported protocol on top of SSL specified by the server in the Next Protocol Negotiation TLS extension.,0,session_fix,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,4,Q_SSL_ISSUER,issuer,,string,Certificate Authority.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,6,Q_SSL_VALIDITY_NOT_BEFORE,validity_not_before,,string,Certificate's validity start date.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,7,Q_SSL_VALIDITY_NOT_AFTER,validity_not_after,,string,Certificate's validity end date.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,8,Q_SSL_SERIAL_NUMBER,serial_number,,buffer,Serial number of certificate.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,9,Q_SSL_SUBJECT_ALT_NAME,subject_alt_name,,string,Identifies a list of host names which belong to the same certificate.,0,session_prt,0 +199,Q_PROTO_SSL,Encrypted,ssl,Secure Socket Layer,11,Q_SSL_HANDSHAKE_TYPE,handshake_type,,uint8,Handshake type.,0,session_mod,0 200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,1,Q_STP_PROTO_ID,proto_id,,uint16,Protocol Identifier. Must be equal to 0x00.,0,pkt,0 200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,2,Q_STP_VERSION,version,,uint8,Protocol version.,0,pkt,0 200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,3,Q_STP_BPDU_TYPE,bpdu_type,,uint8,Message type.,0,pkt,0 @@ -3235,208 +3251,211 @@ protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_ 200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,12,Q_STP_MAX_AGE,max_age,,uint16,Period of validity for a message.,0,pkt,0 200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,13,Q_STP_HELLO_TIME,hello_time,,uint16,Time interval between messages.,0,pkt,0 200,Q_PROTO_STP,Routing,stp,Spanning Tree Protocol,14,Q_STP_FORWARD_DELAY,forward_delay,,uint16,Timeout value for port states transfers.,0,pkt,0 -204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,3,Q_SYSLOG_SYSLOG_MESSAGE,syslog_message,,string,Message.,0,session,0 -204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,1,Q_SYSLOG_CODE,code,,string,Message type.,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,1,Q_T38_MESSAGE,message,,parent,Parent attribute including T.38 message elements,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,2,Q_T38_UDPTL_SEQUENCE_NUMBER,udptl_sequence_number,,uint16,UDPTL sequence number,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,3,Q_T38_TPKT,tpkt,,parent,Parent attribute including TPKT protocol elements,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,4,Q_T38_TPKT_VRSN,tpkt_vrsn,,uint8,Version of the TPKT protocol,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,5,Q_T38_TPKT_PACKET_LENGTH,tpkt_packet_length,,uint16,Total length of TPKT packet,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,11,Q_T38_IFP,ifp,,parent,Parent attribute including IFP packet elements,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,12,Q_T38_IFP_DATA,ifp_data,,buffer,IFP packet buffer,1,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,13,Q_T38_TYPE_OF_MESSAGE,type_of_message,,string_index,Indicates if the IFP packet is of indicator or data type,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,14,Q_T38_INDICATOR,indicator,,string_index,Describes the function of the indicator IFP packet,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,15,Q_T38_DATA_TYPE,data_type,,string_index,"Describes the type of data contained in the data IFP packet, and the modulation used to carry them",0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,16,Q_T38_DATA_FIELD,data_field,,parent,Parent attribute including data field type and content,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,17,Q_T38_FIELD_TYPE,field_type,,string_index,Describes the content of the data field,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,18,Q_T38_FIELD_DATA,field_data,,buffer,Fax data carried in the IFP packets,1,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,19,Q_T38_FAX,fax,,parent,Parent attribute including calling and called subscriber,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,524,Q_MPA_CALLER,caller,,string,Calling subscriber identification,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,523,Q_MPA_CALLEE,callee,,string,Called subscriber identification,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,22,Q_T38_FAX_MESSAGE,fax_message,,parent,Parent attribute including fax signaling message elements,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,23,Q_T38_FAX_MESSAGE_DATA,fax_message_data,,buffer,Fax signaling messages carried in the (reassembled) IFP packets,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,24,Q_T38_FAX_MESSAGE_TYPE,fax_message_type,,string_index,Describes the fax signaling messages type,0,session,0 -525,Q_PROTO_T38,Network Service,t38,Group 3 facsimile communication over IP,25,Q_T38_FAX_MESSAGE_NUMBER,fax_message_number,,string,"Identification associated to the following FAX messages: CSI the called subscriber identification (which is equal to the callee), CIG the calling subscriber identification (which is the caller), PWD the password, SEP the selective polling, PSA the polled subaddress, TSI the transmitting subscriber identification, SUB the subaddress and SID the sender identification.",0,session,0 -285,Q_PROTO_TAGGED,Web,tagged,tagged,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -285,Q_PROTO_TAGGED,Web,tagged,tagged,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -285,Q_PROTO_TAGGED,Web,tagged,tagged,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -285,Q_PROTO_TAGGED,Web,tagged,tagged,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,797,Q_MPA_SERVICE_DURATION,service_duration,,int32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,789,Q_MPA_SERVICE_ID,service_id,,int32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,521,Q_MPA_CALL_DURATION,call_duration,,int32,Call duration.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,2,Q_TANGO_CALLEE_ID,callee_id,,string,Called part identifier.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,1,Q_TANGO_CALLER_ID,caller_id,,string,Calling part identifier.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,579,Q_MPA_PHONE_NUMBER,phone_number,,string,User's phone number.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,638,Q_MPA_USER_EMAIL,user_email,,string,User's email address.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,3,Q_TANGO_USER_ID,user_id,,string,Unique user identifier.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,4,Q_TANGO_DEVICE_ID,device_id,,string,User's device identifier.,0,session,0 -598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 +204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,3,Q_SYSLOG_SYSLOG_MESSAGE,syslog_message,,string,Message.,0,session_mod,0 +204,Q_PROTO_SYSLOG,Application Service,syslog,Syslog,1,Q_SYSLOG_CODE,code,,string,Message type.,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,1,Q_T38_MESSAGE,message,,parent,Parent attribute including T.38 message elements,0,session_fix,0 +525,Q_PROTO_T38,Network Service,t38,T.38,2,Q_T38_UDPTL_SEQUENCE_NUMBER,udptl_sequence_number,,uint16,UDPTL sequence number,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,3,Q_T38_TPKT,tpkt,,parent,Parent attribute including TPKT protocol elements,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,4,Q_T38_TPKT_VRSN,tpkt_vrsn,,uint8,Version of the TPKT protocol,0,session_prt,0 +525,Q_PROTO_T38,Network Service,t38,T.38,5,Q_T38_TPKT_PACKET_LENGTH,tpkt_packet_length,,uint16,Total length of TPKT packet,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,11,Q_T38_IFP,ifp,,parent,Parent attribute including IFP packet elements,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,12,Q_T38_IFP_DATA,ifp_data,,buffer,IFP packet buffer,1,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,13,Q_T38_TYPE_OF_MESSAGE,type_of_message,,string_index,Indicates if the IFP packet is of indicator or data type,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,14,Q_T38_INDICATOR,indicator,,string_index,Describes the function of the indicator IFP packet,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,15,Q_T38_DATA_TYPE,data_type,,string_index,"Describes the type of data contained in the data IFP packet, and the modulation used to carry them",0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,16,Q_T38_DATA_FIELD,data_field,,parent,Parent attribute including data field type and content,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,17,Q_T38_FIELD_TYPE,field_type,,string_index,Describes the content of the data field,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,18,Q_T38_FIELD_DATA,field_data,,buffer,Fax data carried in the IFP packets,1,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,19,Q_T38_FAX,fax,,parent,Parent attribute including calling and called subscriber,0,session_fix,0 +525,Q_PROTO_T38,Network Service,t38,T.38,524,Q_MPA_CALLER,caller,,string,Calling subscriber identification,0,session_prt,0 +525,Q_PROTO_T38,Network Service,t38,T.38,523,Q_MPA_CALLEE,callee,,string,Called subscriber identification,0,session_prt,0 +525,Q_PROTO_T38,Network Service,t38,T.38,22,Q_T38_FAX_MESSAGE,fax_message,,parent,Parent attribute including fax signaling message elements,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,23,Q_T38_FAX_MESSAGE_DATA,fax_message_data,,buffer,Fax signaling messages carried in the (reassembled) IFP packets,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,24,Q_T38_FAX_MESSAGE_TYPE,fax_message_type,,string_index,Describes the fax signaling messages type,0,session_mod,0 +525,Q_PROTO_T38,Network Service,t38,T.38,25,Q_T38_FAX_MESSAGE_NUMBER,fax_message_number,,string,"Identification associated to the following FAX messages: CSI the called subscriber identification (which is equal to the callee), CIG the calling subscriber identification (which is the caller), PWD the password, SEP the selective polling, PSA the polled subaddress, TSI the transmitting subscriber identification, SUB the subaddress and SID the sender identification.",0,session_mod,0 +285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 +285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +285,Q_PROTO_TAGGED,Web,tagged,Tagged.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Transferred file name.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,513,Q_MPA_ATTACH,attach,,parent,Parent attribute containing metadata related to an attached file exchanged between two users.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds.",0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,521,Q_MPA_CALL_DURATION,call_duration,,int32,Call duration.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,2,Q_TANGO_CALLEE_ID,callee_id,,string,Called part identifier.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,1,Q_TANGO_CALLER_ID,caller_id,,string,Calling part identifier.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,660,Q_MPA_CALL_ID,call_id,,string,"Call id, extracted for each call.",0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,522,Q_MPA_CALL,call,,parent,"Parent entry, empty, for fields belonging to the call (caller, callee, etc.).",0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,579,Q_MPA_PHONE_NUMBER,phone_number,,string,User's phone number.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,638,Q_MPA_USER_EMAIL,user_email,,string,User's email address.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,3,Q_TANGO_USER_ID,user_id,,string,Unique user identifier.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,4,Q_TANGO_DEVICE_ID,device_id,,string,User's device identifier.,0,session_mod,0 +598,Q_PROTO_TANGO,Audio/Video,tango,Tango Video Calls,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 +321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +321,Q_PROTO_TCHATCHE,Web,tchatche,tchatche,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,796,Q_MPA_STREAM,stream,,buffer,Private attribute of the classification engine.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_fix,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_fix,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session_fix,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session_fix,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,1,Q_TCP_SRC_PORT_RANGE,src_port_range,,uint8,"Range of source port number, defined by a minimum and a maximum.",0,pkt,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,2,Q_TCP_DST_PORT_RANGE,dst_port_range,,uint8,"Range of destination port number, defined by a minimum and a maximum.",0,pkt,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,3,Q_TCP_CLIENT_PORT_RANGE,client_port_range,,uint8,"Range of client port number, defined by a minimum and a maximum.",0,pkt,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,4,Q_TCP_SERVER_PORT_RANGE,server_port_range,,uint8,"Range of server port number, defined by a minimum and a maximum.",0,pkt,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,5,Q_TCP_PORT,port,,uint8,Validates a source or destination port. To be used in a filter.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,6,Q_TCP_UNSEQ,unseq,,uint8,Set to 1 if the packet is in a bad order.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,7,Q_TCP_LOSS_COUNT,loss_count,,uint32,Number of lost bytes.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,8,Q_TCP_PREVIOUS_LOST,previous_lost,,uint32,This packet follows one or more missing packets.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,9,Q_TCP_RTT,rtt,,timeval,Network response time (syn-synack-ack process).,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,10,Q_TCP_RTT_APP,rtt_app,,timeval,"Application response time of the server, calculated between a non-empty client packet, and the acknowledgement of a non-empty server packet.",0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,12,Q_TCP_MSS,mss,,uint16,Maximum Segment Size.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,13,Q_TCP_WINDOW,window,,uint16,Congestion window size.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,14,Q_TCP_SACK,sack,,uint8,"Equal to 1 if the Selective Ack"" technique is used.""",0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,15,Q_TCP_TSTAMP,tstamp,,uint8,Equal to 1 if timestamps are used.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,16,Q_TCP_CNX_DURATION,cnx_duration,,timeval,Elapsed time (in seconds) between the SYN packet and the first FIN or RST packet.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,17,Q_TCP_UNSEQ_AMONT,unseq_amont,,uint8,Indicates if unsequencing of the packet took place before passing through the probe.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,18,Q_TCP_UNSEQ_AVAL,unseq_aval,,uint8,Indicates if unsequencing of the packet took place after passing through the probe.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,19,Q_TCP_FLAG_FIN,flag_fin,,uint8,"Indicates if FIN flag is present in this packet, meaning the end of this TCP session.",0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,20,Q_TCP_FLAG_RESET,flag_reset,,uint8,"Indicates if RESET flag is present in this packet, meaning the end of this TCP session.",0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,22,Q_TCP_FLAG_SYN,flag_syn,,uint8,"Indicates if SYN flag is present in this packet, meaning a request TCP connection initiation.",0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,23,Q_TCP_FLAG_SYNACK,flag_synack,,uint8,"Indicates if SYN and ACK flags are present in this packet, meaning a request TCP connection initiation.",0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,21,Q_TCP_START_TIME,start_time,,timeval,Start time of this TCP session.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,24,Q_TCP_SEQ_NUMBER,seq_number,,uint32,The sequence number of the TCP packet.,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,25,Q_TCP_ACK_NUMBER,ack_number,,uint32,The acknowledgement number.,0,session,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,6,Q_TCP_UNSEQ,unseq,,uint8,Set to 1 if the packet is in a bad order.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,7,Q_TCP_LOSS_COUNT,loss_count,,uint32,Number of lost bytes.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,8,Q_TCP_PREVIOUS_LOST,previous_lost,,uint32,This packet follows one or more missing packets.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,9,Q_TCP_RTT,rtt,,timeval,Network response time (syn-synack-ack process).,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,10,Q_TCP_RTT_APP,rtt_app,,timeval,"Application response time of the server, calculated between a non-empty client packet, and the acknowledgement of a non-empty server packet.",0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,12,Q_TCP_MSS,mss,,uint16,Maximum Segment Size.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,13,Q_TCP_WINDOW,window,,uint16,Congestion window size.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,14,Q_TCP_SACK,sack,,uint8,"Equal to 1 if the Selective Ack"" technique is used.""",0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,15,Q_TCP_TSTAMP,tstamp,,uint8,Equal to 1 if timestamps are used.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,16,Q_TCP_CNX_DURATION,cnx_duration,,timeval,Elapsed time (in seconds) between the SYN packet and the first FIN or RST packet.,0,session_fix,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,17,Q_TCP_UNSEQ_AMONT,unseq_amont,,uint8,Indicates if unsequencing of the packet took place before passing through the probe.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,18,Q_TCP_UNSEQ_AVAL,unseq_aval,,uint8,Indicates if unsequencing of the packet took place after passing through the probe.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,19,Q_TCP_FLAG_FIN,flag_fin,,uint8,"Indicates if FIN flag is present in this packet, meaning the end of this TCP session.",0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,20,Q_TCP_FLAG_RESET,flag_reset,,uint8,"Indicates if RESET flag is present in this packet, meaning the end of this TCP session.",0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,22,Q_TCP_FLAG_SYN,flag_syn,,uint8,"Indicates if SYN flag is present in this packet, meaning a request TCP connection initiation.",0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,23,Q_TCP_FLAG_SYNACK,flag_synack,,uint8,"Indicates if SYN and ACK flags are present in this packet, meaning a request TCP connection initiation.",0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,21,Q_TCP_START_TIME,start_time,,timeval,Start time of this TCP session.,0,session_fix,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,24,Q_TCP_SEQ_NUMBER,seq_number,,uint32,The sequence number of the TCP packet.,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,25,Q_TCP_ACK_NUMBER,ack_number,,uint32,The acknowledgement number.,0,session_mod,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,26,Q_TCP_TSVAL,tsval,,uint32,Timestamp value.,0,pkt,0 205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,27,Q_TCP_TSECR,tsecr,,uint32,Timestamp echo reply value.,0,pkt,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,28,Q_TCP_SEG_BUFFERED_COUNT,seg_buffered_count,,uint32,Number of segments that have been buffered for reassembly,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,29,Q_TCP_SEG_BUFFERED_SIZE,seg_buffered_size,,uint32,Sizes sum of segments that have been buffered for reassembly,0,session,0 -205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,30,Q_TCP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,1,Q_TDS_HOSTNAME,hostname,,string,Name of workstation communicating with the SQL server.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,2,Q_TDS_APPLICATION,application,,string,Name of application used to connect to the database.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,3,Q_TDS_SERVER,server,,string,Name of server hosting the SQL Server.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,4,Q_TDS_LIBRARY,library,,string,Name of network dynamic-link library used.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,5,Q_TDS_DATABASE_NAME,database_name,,string,Name of the used database.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,6,Q_TDS_LANGUAGE,language,,string,User locale.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,581,Q_MPA_QUERY,query,,string,SQL query sent by the user.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,7,Q_TDS_RPC_PROC_NAME,rpc_proc_name,,buffer,RPC TDS packet distant procedure name.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,8,Q_TDS_RPC_PARAMETER_ENTRY,rpc_parameter_entry,,parent,Structure containing the data related to a RPC call parameter.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,9,Q_TDS_RPC_PARAMETER_NAME,rpc_parameter_name,,buffer,RPC parameter name.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,10,Q_TDS_RPC_PARAMETER_TYPE,rpc_parameter_type,,buffer,RPC parameter type.,0,session,0 -208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,11,Q_TDS_RPC_PARAMETER_VALUE,rpc_parameter_value,,buffer,RPC parameter value.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,690,Q_MPA_CHANNEL_DESCRIPTION,channel_description,,string,Channel description (long),0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,689,Q_MPA_CHANNEL_TOPIC,channel_topic,,string,Channel topic (short),0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,688,Q_MPA_CHANNEL_NAME,channel_name,,string,Channel name,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,687,Q_MPA_CHANNEL_ID,channel_id,,uint32,Channel ID,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,677,Q_MPA_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact alias.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,110,Q_TEAMSPEAK_MESSAGE_SCOPE,message_scope,,uint32,Message scope,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,674,Q_MPA_RECEIVER_UID,receiver_uid,,uint32,Receiver ID for this message,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,673,Q_MPA_SENDER_UID,sender_uid,,uint32,Sender ID for this message,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server greeting message,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,109,Q_TEAMSPEAK_SERVER_VERSION,server_version,,string,Server software version,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,108,Q_TEAMSPEAK_SERVER_NAME,server_name,,string,Server name,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,107,Q_TEAMSPEAK_SERVER_PLATFORM,server_platform,,string,Server architecture,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,102,Q_TEAMSPEAK_SERVER,server,,parent,Parent attribute,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,105,Q_TEAMSPEAK_CLIENT_VERSION,client_version,,string,Client software version,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,104,Q_TEAMSPEAK_CLIENT_SOFTWARE,client_software,,string,Client software name,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,103,Q_TEAMSPEAK_CLIENT_PLATFORM,client_platform,,string,Client architecture,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,101,Q_TEAMSPEAK_CLIENT,client,,parent,Parent attribute,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,106,Q_TEAMSPEAK_CLIENT_UID,client_uid,,uint32,Client session ID,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,112,Q_TEAMSPEAK_SESSION_ID,session_id,,uint32,Uniquely identifies the current user session.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,111,Q_TEAMSPEAK_SESSION,session,,parent,Parent attribute,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,100,Q_TEAMSPEAK_NICKNAME,nickname,,string,User nickname,0,session,0 -526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,1,Q_TELNET_TERM_TYPE,term_type,,string,Terminal type.,0,session,0 -209,Q_PROTO_TELNET,Terminal,telnet,Telnet,2,Q_TELNET_RTT,rtt,,timeval,Server response time.,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,1,Q_TEREDO_SERVER_IP,server_ip,,ip_addr,"The IPv4 network address of the Teredo server involved in the exchange, read from the encapsulated IPv6 packet header",0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,3,Q_TEREDO_CLIENT_IP,client_ip,,ip_addr,Client's mapped IPv4 net address.,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,4,Q_TEREDO_PORT,port,,uint16,Mapped UDP port used by Teredo,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,8,Q_TEREDO_ORIGIN_INDICATION,origin_indication,,parent,Identification data from a client attempting to set up a Teredo connection,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,9,Q_TEREDO_ORIGIN_CLIENT_IP,origin_client_ip,,ip_addr,IPv4 client address as visible in the Origin Indication,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,10,Q_TEREDO_ORIGIN_PORT,origin_port,,uint16,UDP port used by Teredo as visible in the Origin Indication,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,11,Q_TEREDO_AUTHENTICATION,authentication,,parent,Authentication data exchanged between client and server,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,5,Q_TEREDO_CLIENT_ID,client_id,,string,"Client identifier, set up during its configuration",0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,6,Q_TEREDO_AUTH_VALUE,auth_value,,string,Client Authentication string,0,session,0 -555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo,7,Q_TEREDO_NONCE_VALUE,nonce_value,,binary,Identification string chosen by the client,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a packet.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,6,Q_TFTP_REQUEST_FILENAME,request_filename,,string,Name of the requested file.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,1,Q_TFTP_MODE,mode,,string,File transfer mode (Netascii/ Binary/ Mail).,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,2,Q_TFTP_QUERY,query,,string,Command type.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,3,Q_TFTP_BLOCK_NUMBER,block_number,,uint16,Contains the block number of the data packet.,0,session,0 -211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),1,Q_TNS_BASE,base,,string,Name of accessed database.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),2,Q_TNS_VERSION,version,,uint16,Version number of Oracle server.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),3,Q_TNS_SERVER_HOSTNAME,server_hostname,,string,Database server hostname.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),5,Q_TNS_SERVER_PORT,server_port,,uint16,Database server listening port.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),4,Q_TNS_SERVER_OS,server_os,,string,Database server operating system.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),6,Q_TNS_CLIENT_OS,client_os,,string,Client machine operating system.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),7,Q_TNS_CLIENT_HOSTNAME,client_hostname,,string,Client machine hostname.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),8,Q_TNS_CLIENT_PROGRAM_PATH,client_program_path,,string,Client program absolute path.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),9,Q_TNS_CLIENT_PROGRAM_NAME,client_program_name,,string,Client program name.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),581,Q_MPA_QUERY,query,,string,Database query.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),10,Q_TNS_RESPONSE,response,,parent,Parent attribute containing metadata related to the server response.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),12,Q_TNS_RESPONSE_SIZE,response_size,,uint32,Unitary size in bytes of one the PDUs returned by the server.,0,session,0 -213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),11,Q_TNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,5,Q_TWITTER_RELATION,relation,,string,"Relation between two users, following/followed_by, or sender/recicipent for direct messages.",0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,17,Q_TWITTER_MEDIA_URL,media_url,,string,URL of the image which is shared inside a tweet (legacy Twitter API).,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,3,Q_TWITTER_TWEET,tweet,,string,Text of a tweet or a direct message.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,8,Q_TWITTER_SCREEN_NAME,screen_name,,string,User name appearing in the result of a request.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,7,Q_TWITTER_USER_ID,user_id,,string,User id appearing in the result of a request.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,15,Q_TWITTER_RESULT,result,,parent,Parent of attributes appearing in the result of a query.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,16,Q_TWITTER_PARAM_TEXT,param_text,,string,Generic text used as request parameter.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,14,Q_TWITTER_PARAM_SCREEN_NAME,param_screen_name,,string,User screen name used as request parameter.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,13,Q_TWITTER_PARAM_USER_ID,param_user_id,,string,User id used as request parameter.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,12,Q_TWITTER_PARAM,param,,parent,Parent attribute containing request parameters.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,643,Q_MPA_REQUEST,request,,parent,Parent attribute containing all the metadata related to a request.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -503,Q_PROTO_TWITTER,Web,twitter,Twitter,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,28,Q_TCP_SEG_BUFFERED_COUNT,seg_buffered_count,,uint32,Number of segments that have been buffered for reassembly,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,29,Q_TCP_SEG_BUFFERED_SIZE,seg_buffered_size,,uint32,Sizes sum of segments that have been buffered for reassembly,0,session_mod,0 +205,Q_PROTO_TCP,Network Service,tcp,Transmission Control Protocol,30,Q_TCP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,1,Q_TDS_HOSTNAME,hostname,,string,Name of workstation communicating with the SQL server.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,2,Q_TDS_APPLICATION,application,,string,Name of application used to connect to the database.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,3,Q_TDS_SERVER,server,,string,Name of server hosting the SQL Server.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,4,Q_TDS_LIBRARY,library,,string,Name of network dynamic-link library used.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,5,Q_TDS_DATABASE_NAME,database_name,,string,Name of the used database.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,6,Q_TDS_LANGUAGE,language,,string,User locale.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,581,Q_MPA_QUERY,query,,string,SQL query sent by the user.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,7,Q_TDS_RPC_PROC_NAME,rpc_proc_name,,buffer,RPC TDS packet distant procedure name.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,8,Q_TDS_RPC_PARAMETER_ENTRY,rpc_parameter_entry,,parent,Structure containing the data related to a RPC call parameter.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,9,Q_TDS_RPC_PARAMETER_NAME,rpc_parameter_name,,buffer,RPC parameter name.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,10,Q_TDS_RPC_PARAMETER_TYPE,rpc_parameter_type,,buffer,RPC parameter type.,0,session_mod,0 +208,Q_PROTO_TDS,Database,tds,Tabular Data Stream,11,Q_TDS_RPC_PARAMETER_VALUE,rpc_parameter_value,,buffer,RPC parameter value.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,690,Q_MPA_CHANNEL_DESCRIPTION,channel_description,,string,Channel description (long),0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,689,Q_MPA_CHANNEL_TOPIC,channel_topic,,string,Channel topic (short),0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,688,Q_MPA_CHANNEL_NAME,channel_name,,string,Channel name,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,687,Q_MPA_CHANNEL_ID,channel_id,,uint32,Channel ID,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,677,Q_MPA_CONTACT_UID,contact_uid,,uint32,Contact ID.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact alias.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,110,Q_TEAMSPEAK_MESSAGE_SCOPE,message_scope,,uint32,Message scope,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,674,Q_MPA_RECEIVER_UID,receiver_uid,,uint32,Receiver ID for this message,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,673,Q_MPA_SENDER_UID,sender_uid,,uint32,Sender ID for this message,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,639,Q_MPA_CHANNEL,channel,,string,Chat room name.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,631,Q_MPA_GREETING_MESSAGE,greeting_message,,string,Server greeting message,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,109,Q_TEAMSPEAK_SERVER_VERSION,server_version,,string,Server software version,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,108,Q_TEAMSPEAK_SERVER_NAME,server_name,,string,Server name,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,107,Q_TEAMSPEAK_SERVER_PLATFORM,server_platform,,string,Server architecture,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,102,Q_TEAMSPEAK_SERVER,server,,parent,Parent attribute,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,105,Q_TEAMSPEAK_CLIENT_VERSION,client_version,,string,Client software version,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,104,Q_TEAMSPEAK_CLIENT_SOFTWARE,client_software,,string,Client software name,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,103,Q_TEAMSPEAK_CLIENT_PLATFORM,client_platform,,string,Client architecture,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,101,Q_TEAMSPEAK_CLIENT,client,,parent,Parent attribute,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,106,Q_TEAMSPEAK_CLIENT_UID,client_uid,,uint32,Client session ID,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,112,Q_TEAMSPEAK_SESSION_ID,session_id,,uint32,Uniquely identifies the current user session.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,111,Q_TEAMSPEAK_SESSION,session,,parent,Parent attribute,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,100,Q_TEAMSPEAK_NICKNAME,nickname,,string,User nickname,0,session_mod,0 +526,Q_PROTO_TEAMSPEAK,Instant Messaging,teamspeak,Teamspeak v2,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +209,Q_PROTO_TELNET,Terminal,telnet,Telnet,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +209,Q_PROTO_TELNET,Terminal,telnet,Telnet,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +209,Q_PROTO_TELNET,Terminal,telnet,Telnet,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +209,Q_PROTO_TELNET,Terminal,telnet,Telnet,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 +209,Q_PROTO_TELNET,Terminal,telnet,Telnet,1,Q_TELNET_TERM_TYPE,term_type,,string,Terminal type.,0,session_mod,0 +209,Q_PROTO_TELNET,Terminal,telnet,Telnet,2,Q_TELNET_RTT,rtt,,timeval,Server response time.,0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,1,Q_TEREDO_SERVER_IP,server_ip,,ip_addr,"The IPv4 network address of the Teredo server involved in the exchange, read from the encapsulated IPv6 packet header",0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,3,Q_TEREDO_CLIENT_IP,client_ip,,ip_addr,Client's mapped IPv4 net address.,0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,4,Q_TEREDO_PORT,port,,uint16,Mapped UDP port used by Teredo,0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,8,Q_TEREDO_ORIGIN_INDICATION,origin_indication,,parent,Identification data from a client attempting to set up a Teredo connection,0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,9,Q_TEREDO_ORIGIN_CLIENT_IP,origin_client_ip,,ip_addr,IPv4 client address as visible in the Origin Indication,0,session_prt,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,10,Q_TEREDO_ORIGIN_PORT,origin_port,,uint16,UDP port used by Teredo as visible in the Origin Indication,0,session_prt,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,11,Q_TEREDO_AUTHENTICATION,authentication,,parent,Authentication data exchanged between client and server,0,session_mod,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,5,Q_TEREDO_CLIENT_ID,client_id,,string,"Client identifier, set up during its configuration",0,session_prt,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,6,Q_TEREDO_AUTH_VALUE,auth_value,,string,Client Authentication string,0,session_prt,0 +555,Q_PROTO_TEREDO,Tunneling,teredo,Teredo protocol,7,Q_TEREDO_NONCE_VALUE,nonce_value,,binary,Identification string chosen by the client,0,session_prt,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a packet.,0,session_mod,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_fix,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,6,Q_TFTP_REQUEST_FILENAME,request_filename,,string,Name of the requested file.,0,session_prt,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_fix,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,1,Q_TFTP_MODE,mode,,string,File transfer mode (Netascii/ Binary/ Mail).,0,session_prt,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,2,Q_TFTP_QUERY,query,,string,Command type.,0,session_prt,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,3,Q_TFTP_BLOCK_NUMBER,block_number,,uint16,Contains the block number of the data packet.,0,session_prt,0 +211,Q_PROTO_TFTP,File Server,tftp,Trivial File Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),1,Q_TNS_BASE,base,,string,Name of accessed database.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),2,Q_TNS_VERSION,version,,uint16,Version number of Oracle server.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),3,Q_TNS_SERVER_HOSTNAME,server_hostname,,string,Database server hostname.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),5,Q_TNS_SERVER_PORT,server_port,,uint16,Database server listening port.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),4,Q_TNS_SERVER_OS,server_os,,string,Database server operating system.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),6,Q_TNS_CLIENT_OS,client_os,,string,Client machine operating system.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),7,Q_TNS_CLIENT_HOSTNAME,client_hostname,,string,Client machine hostname.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),8,Q_TNS_CLIENT_PROGRAM_PATH,client_program_path,,string,Client program absolute path.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),9,Q_TNS_CLIENT_PROGRAM_NAME,client_program_name,,string,Client program name.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),643,Q_MPA_REQUEST,request,,parent,Structured attribute regarding to a query.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),581,Q_MPA_QUERY,query,,string,Database query.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),10,Q_TNS_RESPONSE,response,,parent,Parent attribute containing metadata related to the server response.,0,session_mod,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),12,Q_TNS_RESPONSE_SIZE,response_size,,uint32,Unitary size in bytes of one the PDUs returned by the server.,0,session_prt,0 +213,Q_PROTO_TNS,Database,tns,Transparent Network Service (Oracle),11,Q_TNS_RESPONSE_TIME,response_time,,timeval,Elapsed time between sending of the dns request and reception of its response.,0,session_prt,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,5,Q_TWITTER_RELATION,relation,,string,"Relation between two users, following/followed_by, or sender/recicipent for direct messages.",0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,17,Q_TWITTER_MEDIA_URL,media_url,,string,URL of the image which is shared inside a tweet (legacy Twitter API).,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,3,Q_TWITTER_TWEET,tweet,,string,Text of a tweet or a direct message.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,8,Q_TWITTER_SCREEN_NAME,screen_name,,string,User name appearing in the result of a request.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,7,Q_TWITTER_USER_ID,user_id,,string,User id appearing in the result of a request.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,15,Q_TWITTER_RESULT,result,,parent,Parent of attributes appearing in the result of a query.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,16,Q_TWITTER_PARAM_TEXT,param_text,,string,Generic text used as request parameter.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,14,Q_TWITTER_PARAM_SCREEN_NAME,param_screen_name,,string,User screen name used as request parameter.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,13,Q_TWITTER_PARAM_USER_ID,param_user_id,,string,User id used as request parameter.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,12,Q_TWITTER_PARAM,param,,parent,Parent attribute containing request parameters.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,512,Q_MPA_ACTION,action,,string,Indicates the action executed by the user.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,643,Q_MPA_REQUEST,request,,parent,Parent attribute containing all the metadata related to a request.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +503,Q_PROTO_TWITTER,Web,twitter,Twitter.com,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 215,Q_PROTO_UCP,Wap,ucp,Universal Computer Protocol,1,Q_UCP_TYPE,type,,string_index,Message type.,0,pkt,0 215,Q_PROTO_UCP,Wap,ucp,Universal Computer Protocol,2,Q_UCP_OPERATION,operation,,string_index,Operation name.,0,pkt,0 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,796,Q_MPA_STREAM,stream,,buffer,Private attribute of the classification engine.,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,605,Q_MPA_SRC_PORT,src_port,,uint16,Source port.,0,session_mod,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,534,Q_MPA_DST_PORT,dst_port,,uint16,Destination port.,0,session_mod,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,603,Q_MPA_SERVER_PORT,server_port,,uint16,Server port.,0,session_fix,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,526,Q_MPA_CLIENT_PORT,client_port,,uint16,Client port.,0,session_fix,0 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,1,Q_UDP_SRC_PORT_RANGE,src_port_range,,uint8,"Range of source port, defined by a minimum and a maximum.",0,pkt,0 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,2,Q_UDP_DST_PORT_RANGE,dst_port_range,,uint8,"Range of destination port, defined by a minimum and a maximum.",0,pkt,0 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,3,Q_UDP_CLIENT_PORT_RANGE,client_port_range,,uint8,"Range of client port, defined by a minimum and a maximum.",0,pkt,0 @@ -3444,573 +3463,535 @@ protocol id,proto_idname,proto_family,proto_name,proto_longname,attr_id,attr_id_ 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,5,Q_UDP_SRC_PORT16,src_port16,,uint16,Source port (16 bits).,0,pkt,0 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,6,Q_UDP_DST_PORT16,dst_port16,,uint16,Destination Port (16 bits).,0,pkt,0 216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,7,Q_UDP_PORT,port,,uint8,Validates a source port or destination port. To be used in a filter.,0,pkt,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,8,Q_UDP_CNX_DURATION,cnx_duration,,timeval,Connection duration.,0,session,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,9,Q_UDP_START_TIME,start_time,,timeval,Timestamp of the connection start time.,0,session,0 -216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,10,Q_UDP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown,1,Q_UNKNOWN_SESSION_BUFFER,session_buffer,,buffer,Payload received from the beginning of the session.,1,session,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown,2,Q_UNKNOWN_MAYBE_PROTOCOL,maybe_protocol,,parent,Parent attribute.,0,session,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown,4,Q_UNKNOWN_MAYBE_APPLICATION_ID,maybe_application_id,,uint32,Possible application's ID for this flow.,0,session,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown,3,Q_UNKNOWN_MAYBE_APPLICATION,maybe_application,,string,Possible application's name for this flow.,0,session,0 -4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown,5,Q_UNKNOWN_MAYBE_FAMILY,maybe_family,,string,Protocol family of a possible application for this flow.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -866,Q_PROTO_USTREAM,Web,ustream,UStream,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,"Parent attribute of : contact_email, contact_alias.",0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Contact's mail address.,0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact's alias.,0,session,0 -304,Q_PROTO_VIADEO,Web,viadeo,viadeo,1,Q_VIADEO_GROUPE,groupe,,string,Contact's alias.,0,session,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,789,Q_MPA_SERVICE_ID,service_id,,uint32,Gives the service definition as an integer.,0,session,0 -597,Q_PROTO_VIBER,Audio/Video,viber,viber,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,1,Q_VKONTAKTE_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,2,Q_VKONTAKTE_ACCOUNT_UID,account_uid,,string,User ID.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -504,Q_PROTO_VKONTAKTE,Forum,vkontakte,VKontakte,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,The WebSocket Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,The WebSocket Protocol,1,Q_WEBSOCKET_WSFRAME,wsframe,,parent,"Parent attribute, containing the WebSocket frame.",0,session,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,The WebSocket Protocol,2,Q_WEBSOCKET_RAW,raw,,buffer,WebSocket frame content.,1,session,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,The WebSocket Protocol,3,Q_WEBSOCKET_OPCODE,opcode,,uint8,"Opcode"" field of WebSocket frame.""",0,session,0 -1504,Q_PROTO_WEBSOCKET,Network Service,websocket,The WebSocket Protocol,4,Q_WEBSOCKET_MSG,msg,,buffer,"Payload"" field of the WebSocket frame.""",1,session,0 -1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,789,Q_MPA_SERVICE_ID,service_id,,uint32,Gives the generic service definition as an integer.,0,session,0 -1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 500 millisecondes. This attribute is extracted only when the service changes.,0,session,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,579,Q_MPA_PHONE_NUMBER,phone_number,,string,Caller phone number.,0,session,0 -1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,608,Q_MPA_VERSION,version,,string,Program version.,0,session,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -1111,Q_PROTO_WINDOWS_MARKETPLACE,Application Service,windows_marketplace,Windows Marketplace,1,Q_WINDOWS_MARKETPLACE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session,0 -562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,1,Q_WINDOWS_UPDATE_PLATFORM,platform,,string,Indicating the Windows version using this update,0,session,0 -562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,2,Q_WINDOWS_UPDATE_KB,kb,,string,kb (Knowledge base) is a unique internal Microsoft number to identify different software and updates.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session,0 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session,1 -223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,6,Q_WINMX_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,12,Q_WSP_REQUEST,request,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,1,Q_WSP_TID,tid,,uint8,Packet Identifier. (WSP over UDP).,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,2,Q_WSP_PDU_TYPE,pdu_type,,string,Message type.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,3,Q_WSP_PDU_CODE,pdu_code,,uint8,Message code.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,4,Q_WSP_URI,uri,,string,Complete name (path + filename) of a web resource.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,5,Q_WSP_CONNECT_RTT,connect_rtt,,timeval,Connection establishment time.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,6,Q_WSP_QUERY_RTT,query_rtt,,timeval,Elapsed time between a request and its response.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,7,Q_WSP_SERVER,server,,string,Server name.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client mobile name.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,9,Q_WSP_MIME_TYPE,mime_type,,string,Data type.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,17,Q_WSP_REQUEST_SIZE,request_size,,uint32,Contains the total length of the request or the response (including headers).,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,10,Q_WSP_REPLY_STATUS_CODE,reply_status_code,,uint8,Reply status code.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,11,Q_WSP_REPLY_STATUS_MSG,reply_status_msg,,string_index,Reply status code message.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,13,Q_WSP_PROFILE,profile,,string,A link for a full description of the used user_agent.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,14,Q_WSP_INDEX,index,,uint32,Identifier of the request and response in a WSP flow.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,15,Q_WSP_INDEX_CLIENT,index_client,,uint32,Identifier of the request in a WSP flow.,0,session,0 -224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,16,Q_WSP_INDEX_SERVER,index_server,,uint32,Identifier of the response in a WSP flow.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,7,Q_WTP_PDU,pdu,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,1,Q_WTP_PDU_TYPE,pdu_type,,string_index,Message type.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,2,Q_WTP_PDU_CODE,pdu_code,,uint8,Message code.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,3,Q_WTP_TID,tid,,uint16,Packet Identifier.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,4,Q_WTP_ABORT_TYPE,abort_type,,string_index,Connection abort type.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,5,Q_WTP_ABORT_REASON,abort_reason,,string_index,Connection abort reason.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,6,Q_WTP_RETRANSMISSION,retransmission,,uint8,Indicates if the packet is being retransmitted.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,8,Q_WTP_SEQ_NUMBER,seq_number,,uint8,A sequence number used in segmentation and reassembly.,0,session,0 -226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,9,Q_WTP_MISSING_PKTS,missing_pkts,,uint8,Indicate the missing packets.,0,session,0 -228,Q_PROTO_X25,Audio/Video,x25,X25,1,Q_X25_CALLING_ADDR,calling_addr,,string,Calling station address.,0,session,0 -228,Q_PROTO_X25,Audio/Video,x25,X25,2,Q_X25_CALLED_ADDR,called_addr,,string,Called station address.,0,session,0 -228,Q_PROTO_X25,Audio/Video,x25,X25,3,Q_X25_PKT_TYPE,pkt_type,,string,Packet type.,0,session,0 -592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,1,Q_XDMCP_CLIENT_IP,client_ip,,ip_addr,Client IPv4 address.,0,session,0 -592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,2,Q_XDMCP_SERVER_IP,server_ip,,ip_addr,Server IPv4 address.,0,session,0 -592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,3,Q_XDMCP_SERVER_STATUS,server_status,,string,X11 server availability.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,1,Q_YAHOO_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,2,Q_YAHOO_GROUPS_GROUP_SHORT_DESCRIPTION,group_short_description,,string,Short group description.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,3,Q_YAHOO_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,1,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,4,Q_YAHOO_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,5,Q_YAHOO_GROUPS_GROUP_MEMBERSHIP,group_membership,,string,Group to which the user has subscribed.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,6,Q_YAHOO_GROUPS_SENDER_NICKNAME,sender_nickname,,string,"Message author's nickname, when reading a message.",0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,7,Q_YAHOO_GROUPS_MSG_NUMBER,msg_number,,uint32,Number of the posted message.,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,598,Q_MPA_REPLYTO,replyto,,string,"When posting, indicates is the recipient was only the author or the whole list.",0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,4,Q_YAHOO_MAPS_COUNTRY,country,,string,Location country value.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,3,Q_YAHOO_MAPS_CITY,city,,string,Location city value.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,2,Q_YAHOO_MAPS_STREET,street,,string,Location longitude value.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,6,Q_YAHOO_MAPS_LONGITUDE,longitude,,string,Location longitude value.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,5,Q_YAHOO_MAPS_LATITUDE,latitude,,string,Location latitude value.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,1,Q_YAHOO_MAPS_LOCATION,location,,parent,Parent attribute containing information about location researched.,0,session,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -523,Q_PROTO_YANDEX,Web,yandex,Yandex search engine,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,4,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,5,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,3,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,2,Q_YANDEX_WEBMAIL_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,1,Q_YANDEX_WEBMAIL_THUMBNAIL,thumbnail,,uint8,Indicates whether this attachment is an image thumbnail(1) or not(0).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session,1 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,577,Q_MPA_NAME,name,,string,User's full name.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,2,Q_YMAIL2_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachement.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v2.0,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,1,Q_YMAIL_CLASSIC_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -328,Q_PROTO_YMAIL_MOBILE,Webmail,ymail_mobile,Yahoo webmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session,0 -332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail (new version) for mobile,1,Q_YMAIL_MOBILE_NEW_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session,1 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,608,Q_MPA_VERSION,version,,string,The protocol version number used by the method.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,7,Q_YMSG_CLIENT_VERSION,client_version,,string,Client version.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,1 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,14,Q_YMSG_TIMESTAMP,timestamp,,timeval,Packet timestamp.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,643,Q_MPA_REQUEST,request,,parent,Parent attribute including a YMSG method and its service.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,555,Q_MPA_METHOD,method,,string_index,Name of the command sent.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,1,Q_YMSG_MSG_CODE,msg_code,,uint16,Contains the number of YMSG command.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,2,Q_YMSG_SESSIONID,sessionid,,uint32,Identification number of session.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,4,Q_YMSG_CLIENT_FIRSTNAME,client_firstname,,string,First name of the user.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,5,Q_YMSG_CLIENT_LASTNAME,client_lastname,,string,Last name of the user.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,6,Q_YMSG_CLIENT_COUNTRY,client_country,,string,Country of the user.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,3,Q_YMSG_CHANNEL,channel,,string,Chat room name.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,9,Q_YMSG_FILE_URL,file_url,,string,URL of the tranfered file.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,642,Q_MPA_FILEHASH,filehash,,string,Hash of transferred file.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,8,Q_YMSG_CLIENT_LOCAL_IP,client_local_ip,,ip_addr,Client local ip.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,11,Q_YMSG_CHANNEL_NAME,channel_name,,string,Channel name,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,12,Q_YMSG_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,13,Q_YMSG_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,15,Q_YMSG_TRANSFER_ID,transfer_id,,string,Transfer identifier.,0,session,0 -237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,16,Q_YMSG_WEBCAM_BRAND,webcam_brand,,string,Webcam brand.,0,session,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session,0 -238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,642,Q_MPA_FILEHASH,filehash,x,string,File hash. This attribute is deprecated.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,1,Q_YMSG_TRANSFER_FILE_URL,file_url,,string,URL of the transferred file.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,5,Q_YMSG_TRANSFER_FILE_IDENTIFIER,file_identifier,x,string,File identifier. This attribute is deprecated.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session,1 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,3,Q_YMSG_TRANSFER_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session,0 -255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Ymsg Transfer Protocol,4,Q_YMSG_TRANSFER_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session,0 -239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,YMSG Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session,0 -239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,YMSG Video,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,YMSG Video,1,Q_YMSG_VIDEO_WEBCAM_BRAND,webcam_brand,,string,Brand of webcam.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,2,Q_YMSG_WEBMESSENGER_SESSIONID,sessionid,,string,Identification number of session.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,608,Q_MPA_VERSION,version,,string,Version number.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,555,Q_MPA_METHOD,method,,string_index,Contains the description of YMSG command.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,1,Q_YMSG_WEBMESSENGER_MSG_CODE,msg_code,,string,Contains the number of YMSG command.,0,session,0 -276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo messenger on web,643,Q_MPA_REQUEST,request,,parent,Contains the YMSG command.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,7,Q_YOUTUBE_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,1,Q_YOUTUBE_URL,url,,string,Contains the url for embedded players,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,577,Q_MPA_NAME,name,,string,Name the user.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,2,Q_YOUTUBE_DESCRIPTION,description,,string,Contains video description,1,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,3,Q_YOUTUBE_TAGS,tags,,string,Contains the tag list linked to the video,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,4,Q_YOUTUBE_VIDEOID,videoid,,string,Contains the unique identifier of the uploaded video,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,5,Q_YOUTUBE_TITLE,title,,string,Contains the video title,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,6,Q_YOUTUBE_NAMEVIEWER,nameviewer,,string,Contains the name of the user watching the video,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,555,Q_MPA_METHOD,method,,string,Contains the method used,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,769,Q_MPA_VIDEO_TOTALDURATION,video_totalduration,,uint32,Total duration of the video in seconds (not extracted).,0,session,0 -240,Q_PROTO_YOUTUBE,Web,youtube,youtube,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -311,Q_PROTO_ZIMBRA,Webmail,zimbra,zimbra,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session,1 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session,1 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,532,Q_MPA_DATE,date,,string,Message date.,0,session,0 -325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,8,Q_UDP_CNX_DURATION,cnx_duration,,timeval,Connection duration.,0,session_fix,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,9,Q_UDP_START_TIME,start_time,,timeval,Timestamp of the connection start time.,0,session_fix,0 +216,Q_PROTO_UDP,Network Service,udp,User Datagram Protocol,10,Q_UDP_WRONG_CRC,wrong_crc,,uint16,A flag raised when the CRC field checksum is changed from the computed one.,0,session_mod,0 +4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,1,Q_UNKNOWN_SESSION_BUFFER,session_buffer,,buffer,Payload received from the beginning of the session.,1,session_mod,0 +4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,2,Q_UNKNOWN_MAYBE_PROTOCOL,maybe_protocol,,parent,Parent attribute.,0,session_mod,0 +4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,4,Q_UNKNOWN_MAYBE_APPLICATION_ID,maybe_application_id,,uint32,Possible application's ID for this flow.,0,session_mod,0 +4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,3,Q_UNKNOWN_MAYBE_APPLICATION,maybe_application,,string,Possible application's name for this flow.,0,session_mod,0 +4,Q_PROTO_UNKNOWN,Standard,unknown,Unknown virtual protocol,5,Q_UNKNOWN_MAYBE_FAMILY,maybe_family,,string,Protocol family of a possible application for this flow.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +866,Q_PROTO_USTREAM,Web,ustream,UStream,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,"Parent attribute of : contact_email, contact_alias.",0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Contact's mail address.,0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Contact's alias.,0,session_mod,0 +304,Q_PROTO_VIADEO,Web,viadeo,Viadeo.com,1,Q_VIADEO_GROUPE,groupe,,string,Contact's alias.,0,session_mod,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,542,Q_MPA_FILESIZE,filesize,,uint64,Size (byte) of the transferred file.,0,session_mod,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,798,Q_MPA_SERVICE_INFO,service_info,,parent,Parent attribute for service information.,0,session_mod,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session_prt,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,789,Q_MPA_SERVICE_ID,service_id,,uint32,Gives the service definition as an integer.,0,session_prt,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,797,Q_MPA_SERVICE_DURATION,service_duration,,uint32,"4 bytes integer value indicating, when the service is ended, the length of it in seconds",0,session_prt,0 +597,Q_PROTO_VIBER,Audio/Video,viber,viber,800,Q_MPA_SERVICE_DURATION_TV,service_duration_tv,,timeval,"Timeval structure indicating, when the service is ended, the length of it in second and microseconds.",0,session_prt,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),1,Q_VKONTAKTE_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),677,Q_MPA_CONTACT_UID,contact_uid,,string,Contact ID.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),2,Q_VKONTAKTE_ACCOUNT_UID,account_uid,,string,User ID.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +504,Q_PROTO_VKONTAKTE,Forum,vkontakte,Vk.com (Vkontakte),630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,1,Q_WEBSOCKET_WSFRAME,wsframe,,parent,"Parent attribute, containing the WebSocket frame.",0,session_mod,0 +1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,2,Q_WEBSOCKET_RAW,raw,,buffer,WebSocket frame content.,1,session_prt,0 +1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,3,Q_WEBSOCKET_OPCODE,opcode,,uint8,"Opcode"" field of WebSocket frame.""",0,session_prt,0 +1504,Q_PROTO_WEBSOCKET,Network Service,websocket,WebSocket,4,Q_WEBSOCKET_MSG,msg,,buffer,"Payload"" field of the WebSocket frame.""",1,session_prt,0 +1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,789,Q_MPA_SERVICE_ID,service_id,,uint32,Gives the generic service definition as an integer.,0,session_mod,0 +1296,Q_PROTO_WECHAT,Instant Messaging,wechat,WeChat,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 5 seconds. This attribute is extracted only when the service changes.,0,session_mod,0 +1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,789,Q_MPA_SERVICE_ID,service_id,,uint32,"Composite 32-bit integer value defining the service currently used. The first byte (LSB) gives the generic service definition, the second byte gives an advanced service definition for File Transfer.",0,session_mod,0 +1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,604,Q_MPA_SERVICE,service,,string,Current service identification string. The service is computed every 500 millisecondes. This attribute is extracted only when the service changes.,0,session_mod,0 +1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,579,Q_MPA_PHONE_NUMBER,phone_number,,string,Caller phone number.,0,session_mod,0 +1093,Q_PROTO_WHATSAPP,Instant Messaging,whatsapp,WhatsApp Messenger,608,Q_MPA_VERSION,version,,string,Program version.,0,session_mod,0 +222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +222,Q_PROTO_WIKIPEDIA,Web,wikipedia,Wikipedia.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +1111,Q_PROTO_WINDOWS_MARKETPLACE,Application Service,windows_marketplace,Windows Marketplace,1,Q_WINDOWS_MARKETPLACE_APPLICATION_NAME,application_name,,string,Name of the downloaded app.,0,session_mod,0 +562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,1,Q_WINDOWS_UPDATE_PLATFORM,platform,,string,Indicating the Windows version using this update,0,session_fix,0 +562,Q_PROTO_WINDOWS_UPDATE,Web,windows_update,Windows Update,2,Q_WINDOWS_UPDATE_KB,kb,,string,kb (Knowledge base) is a unique internal Microsoft number to identify different software and updates.,0,session_fix,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,581,Q_MPA_QUERY,query,,string,Query sent to find a file.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,618,Q_MPA_FILE_CHUNK,file_chunk,,parent,A piece of a transferred file.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,619,Q_MPA_FILE_CHUNK_LEN,file_chunk_len,,uint32,Size of the transferred piece.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,621,Q_MPA_FILE_CHUNK_DATA_OFFSET,file_chunk_data_offset,,uint32,Offset of the transferred data.,0,session_mod,0 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,622,Q_MPA_FILE_CHUNK_CONTENT,file_chunk_content,,buffer,Content of the transferred data.,1,session_mod,1 +223,Q_PROTO_WINMX,Peer to Peer,winmx,Winmx,6,Q_WINMX_LOADWAY,loadway,,string,Contains the file transfer way (Upload vs Download).,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,12,Q_WSP_REQUEST,request,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,1,Q_WSP_TID,tid,,uint8,Packet Identifier. (WSP over UDP).,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,2,Q_WSP_PDU_TYPE,pdu_type,,string,Message type.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,3,Q_WSP_PDU_CODE,pdu_code,,uint8,Message code.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,4,Q_WSP_URI,uri,,string,Complete name (path + filename) of a web resource.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,5,Q_WSP_CONNECT_RTT,connect_rtt,,timeval,Connection establishment time.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,6,Q_WSP_QUERY_RTT,query_rtt,,timeval,Elapsed time between a request and its response.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,7,Q_WSP_SERVER,server,,string,Server name.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,626,Q_MPA_USER_AGENT,user_agent,,string,Client mobile name.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,9,Q_WSP_MIME_TYPE,mime_type,,string,Data type.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,627,Q_MPA_MIME,mime,,parent,"Parent attribute, containing mime_type_main and mime_typ_sub.",0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,17,Q_WSP_REQUEST_SIZE,request_size,,uint32,Contains the total length of the request or the response (including headers).,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,628,Q_MPA_MIME_TYPE_MAIN,mime_type_main,,string,Primary part of the MIME type.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,629,Q_MPA_MIME_TYPE_SUB,mime_type_sub,,string,Second part of the MIME type.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,10,Q_WSP_REPLY_STATUS_CODE,reply_status_code,,uint8,Reply status code.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,11,Q_WSP_REPLY_STATUS_MSG,reply_status_msg,,string_index,Reply status code message.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,13,Q_WSP_PROFILE,profile,,string,A link for a full description of the used user_agent.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,14,Q_WSP_INDEX,index,,uint32,Identifier of the request and response in a WSP flow.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,15,Q_WSP_INDEX_CLIENT,index_client,,uint32,Identifier of the request in a WSP flow.,0,session_mod,0 +224,Q_PROTO_WSP,Wap,wsp,Wireless Session Protocol,16,Q_WSP_INDEX_SERVER,index_server,,uint32,Identifier of the response in a WSP flow.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,7,Q_WTP_PDU,pdu,,parent,"Empty parent attribute, for all the other attributes of this protocol.",0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,1,Q_WTP_PDU_TYPE,pdu_type,,string_index,Message type.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,2,Q_WTP_PDU_CODE,pdu_code,,uint8,Message code.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,3,Q_WTP_TID,tid,,uint16,Packet Identifier.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,4,Q_WTP_ABORT_TYPE,abort_type,,string_index,Connection abort type.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,5,Q_WTP_ABORT_REASON,abort_reason,,string_index,Connection abort reason.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,6,Q_WTP_RETRANSMISSION,retransmission,,uint8,Indicates if the packet is being retransmitted.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,8,Q_WTP_SEQ_NUMBER,seq_number,,uint8,A sequence number used in segmentation and reassembly.,0,session_mod,0 +226,Q_PROTO_WTP,Wap,wtp,Wireless Transaction Protocol,9,Q_WTP_MISSING_PKTS,missing_pkts,,uint8,Indicate the missing packets.,0,session_mod,0 +228,Q_PROTO_X25,Audio/Video,x25,X.25,1,Q_X25_CALLING_ADDR,calling_addr,,string,Calling station address.,0,session_mod,0 +228,Q_PROTO_X25,Audio/Video,x25,X.25,2,Q_X25_CALLED_ADDR,called_addr,,string,Called station address.,0,session_mod,0 +228,Q_PROTO_X25,Audio/Video,x25,X.25,3,Q_X25_PKT_TYPE,pkt_type,,string,Packet type.,0,session_mod,0 +592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,1,Q_XDMCP_CLIENT_IP,client_ip,,ip_addr,Client IPv4 address.,0,session_mod,0 +592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,2,Q_XDMCP_SERVER_IP,server_ip,,ip_addr,Server IPv4 address.,0,session_mod,0 +592,Q_PROTO_XDMCP,Thin Client,xdmcp,X Display Manager Control Protocol,3,Q_XDMCP_SERVER_STATUS,server_status,,string,X11 server availability.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,748,Q_MPA_UID,uid,,string,Generic user ID.,0,session_fix,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,1,Q_YAHOO_GROUPS_GROUP_NAME,group_name,,string,Name of the group the user has subscribed to.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,2,Q_YAHOO_GROUPS_GROUP_SHORT_DESCRIPTION,group_short_description,,string,Short group description.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,3,Q_YAHOO_GROUPS_GROUP_DETAILED_DESCRIPTION,group_detailed_description,,string,Detailed group description.,1,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,4,Q_YAHOO_GROUPS_GROUP_JOIN_REQUEST,group_join_request,,string,Group to which the user want to subscribe.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,5,Q_YAHOO_GROUPS_GROUP_MEMBERSHIP,group_membership,,string,Group to which the user has subscribed.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,673,Q_MPA_SENDER_UID,sender_uid,,string,Sender ID.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,6,Q_YAHOO_GROUPS_SENDER_NICKNAME,sender_nickname,,string,"Message author's nickname, when reading a message.",0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,7,Q_YAHOO_GROUPS_MSG_NUMBER,msg_number,,uint32,Number of the posted message.,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_mod,0 +233,Q_PROTO_YAHOO_GROUPS,Forum,yahoo_groups,Yahoo groups,598,Q_MPA_REPLYTO,replyto,,string,"When posting, indicates is the recipient was only the author or the whole list.",0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,4,Q_YAHOO_MAPS_COUNTRY,country,,string,Location country value.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,3,Q_YAHOO_MAPS_CITY,city,,string,Location city value.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,2,Q_YAHOO_MAPS_STREET,street,,string,Location longitude value.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,6,Q_YAHOO_MAPS_LONGITUDE,longitude,,string,Location longitude value.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,5,Q_YAHOO_MAPS_LATITUDE,latitude,,string,Location latitude value.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +290,Q_PROTO_YAHOO_MAPS,Web,yahoo_maps,Yahoo Maps,1,Q_YAHOO_MAPS_LOCATION,location,,parent,Parent attribute containing information about location researched.,0,session_mod,0 +234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,537,Q_MPA_ENCODING,encoding,,string,Query encoding.,0,session_mod,0 +234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 +234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +234,Q_PROTO_YAHOO_SEARCH,Web,yahoo_search,Yahoo Search,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,584,Q_MPA_QUERY_TYPE,query_type,,string,Sort of query sent to the search engine.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_mod,0 +523,Q_PROTO_YANDEX,Web,yandex,Yandex.ru,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,4,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_NAME,folderlist_item_name,,string,Message folder name.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,5,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM_ID,folderlist_item_id,,string,Message folder unique identifier.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,3,Q_YANDEX_WEBMAIL_FOLDERLIST_ITEM,folderlist_item,,parent,Contains the metadata related to one message folder list item.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,2,Q_YANDEX_WEBMAIL_FOLDERLIST,folderlist,,parent,Contains the message folder list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,1,Q_YANDEX_WEBMAIL_THUMBNAIL,thumbnail,,uint8,Indicates whether this attachment is an image thumbnail(1) or not(0).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,530,Q_MPA_CONTENT,content,,buffer,Message content.,1,session_mod,1 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,681,Q_MPA_IMPORTANCE,importance,,uint32,Indicates if the email has been marked by the user.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,684,Q_MPA_MSGLIST_ATTACH,msglist_attach,,uint32,Indicates if the message contains an attachment.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,683,Q_MPA_MSGLIST_UNREAD,msglist_unread,,uint32,Indicates if the message has been read.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0 +528,Q_PROTO_YANDEX_WEBMAIL,Webmail,yandex_webmail,Yandex webmail,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,577,Q_MPA_NAME,name,,string,User's full name.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,2,Q_YMAIL2_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachement.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,532,Q_MPA_DATE,date,,string,Message date.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_mod,0 +236,Q_PROTO_YMAIL2,Webmail,ymail2,Yahoo Mail v.2.0,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_fix,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,537,Q_MPA_ENCODING,encoding,,string,Page encoding,0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,575,Q_MPA_MSGLIST_SIZE,msglist_size,,string,Message size in a message list.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_prt,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +259,Q_PROTO_YMAIL_CLASSIC,Webmail,ymail_classic,Yahoo Mail classic,1,Q_YMAIL_CLASSIC_ATTACH_FILEID,attach_fileid,,string,Automatically generated filename for file attachment.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,543,Q_MPA_FOLDER,folder,,string,Indicates the directory from where messages are read.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,568,Q_MPA_MSGLIST_MSGID,msglist_msgid,,string,Message identifier.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,739,Q_MPA_SESSION_ID,session_id,,string,Uniquely identifies the current user session.,0,session_mod,0 +332,Q_PROTO_YMAIL_MOBILE_NEW,Webmail,ymail_mobile_new,Yahoo webmail for mobile,1,Q_YMAIL_MOBILE_NEW_MSGLIST_CONTENT,msglist_content,,string,Message content in a message list.,1,session_mod,1 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,523,Q_MPA_CALLEE,callee,,string,Contains the identity (or the phone number) of the called party for a call.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,608,Q_MPA_VERSION,version,,string,The protocol version number used by the method.,0,session_fix,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,7,Q_YMSG_CLIENT_VERSION,client_version,,string,Client version.,0,session_fix,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_prt,1 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,554,Q_MPA_MESSAGE_LEN,message_len,,uint32,Contains the length of the chat message.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,537,Q_MPA_ENCODING,encoding,,string,Message encoding.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,644,Q_MPA_CHAT_ID,chat_id,,string,Window chat id.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,14,Q_YMSG_TIMESTAMP,timestamp,,timeval,Packet timestamp.,0,session_fix,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,643,Q_MPA_REQUEST,request,,parent,Parent attribute including a YMSG method and its service.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,555,Q_MPA_METHOD,method,,string_index,Name of the command sent.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,1,Q_YMSG_MSG_CODE,msg_code,,uint16,Contains the number of YMSG command.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,2,Q_YMSG_SESSIONID,sessionid,,uint32,Identification number of session.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,4,Q_YMSG_CLIENT_FIRSTNAME,client_firstname,,string,First name of the user.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,5,Q_YMSG_CLIENT_LASTNAME,client_lastname,,string,Last name of the user.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,6,Q_YMSG_CLIENT_COUNTRY,client_country,,string,Country of the user.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,3,Q_YMSG_CHANNEL,channel,,string,Chat room name.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,9,Q_YMSG_FILE_URL,file_url,,string,URL of the tranfered file.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,642,Q_MPA_FILEHASH,filehash,,string,Hash of transferred file.,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,8,Q_YMSG_CLIENT_LOCAL_IP,client_local_ip,,ip_addr,Client local ip.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,686,Q_MPA_CHANNEL_ENTRY,channel_entry,,parent,Parent to channel attributes,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,11,Q_YMSG_CHANNEL_NAME,channel_name,,string,Channel name,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,691,Q_MPA_CHANNEL_ACTION,channel_action,,string,Action associated to a channel,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,692,Q_MPA_CHANNEL_USER,channel_user,,string,User associated to an action on a channel,0,session_prt,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,12,Q_YMSG_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,13,Q_YMSG_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session_mod,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_fix,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,15,Q_YMSG_TRANSFER_ID,transfer_id,,string,Transfer identifier.,0,session_fix,0 +237,Q_PROTO_YMSG,Instant Messaging,ymsg,Yahoo Messenger,16,Q_YMSG_WEBCAM_BRAND,webcam_brand,,string,Webcam brand.,0,session_fix,0 +238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,546,Q_MPA_INHERIT_PARENT,inherit_parent,,binary,"Parent inheritance key, stored in an hashtable and kept until parent session expiration.",0,session_mod,0 +238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,524,Q_MPA_CALLER,caller,,string,Contains the identity (or the phone number) of the initiator of the call.,0,session_mod,0 +238,Q_PROTO_YMSG_CONF,Instant Messaging,ymsg_conf,Yahoo Messenger conference service,521,Q_MPA_CALL_DURATION,call_duration,,timeval,Call duration.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,538,Q_MPA_FILE,file,,parent,File related information.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,539,Q_MPA_FILE_SENDER,file_sender,,string,Contains the identity of the sender of a file transfer.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,540,Q_MPA_FILE_RECEIVER,file_receiver,,string,Contains the identity of the receiver for a file transfer.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,541,Q_MPA_FILENAME,filename,,string,Name of the transferred file.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,642,Q_MPA_FILEHASH,filehash,x,string,File hash. This attribute is deprecated.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,542,Q_MPA_FILESIZE,filesize,,uint32,Size (byte) of the transferred file.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,1,Q_YMSG_TRANSFER_FILE_URL,file_url,,string,URL of the transferred file.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,5,Q_YMSG_TRANSFER_FILE_IDENTIFIER,file_identifier,x,string,File identifier. This attribute is deprecated.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,530,Q_MPA_CONTENT,content,,buffer,File content,1,session_mod,1 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,3,Q_YMSG_TRANSFER_CLIENT_IP,client_ip,,ip_addr,User IP address.,0,session_mod,0 +255,Q_PROTO_YMSG_TRANSFER,File Transfer,ymsg_transfer,Yahoo Messenger Transfer Protocol,4,Q_YMSG_TRANSFER_SERVER_IP,server_ip,,ip_addr,Server IP address.,0,session_mod,0 +239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,545,Q_MPA_INHERIT_KEY,inherit_key,,binary,"Candidate inheritance key, generated from the first ixE-classified child session packet.",0,session_mod,0 +239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +239,Q_PROTO_YMSG_VIDEO,Audio/Video,ymsg_video,Yahoo Messenger Video,1,Q_YMSG_VIDEO_WEBCAM_BRAND,webcam_brand,,string,Brand of webcam.,0,session_fix,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,2,Q_YMSG_WEBMESSENGER_SESSIONID,sessionid,,string,Identification number of session.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,608,Q_MPA_VERSION,version,,string,Version number.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,527,Q_MPA_CLIENT_STATUS,client_status,,string_index,Status of connected user.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,552,Q_MPA_MESSAGE,message,,string,Contains the chat message.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,585,Q_MPA_RECEIVER,receiver,,string,Contains the identity of the receiver for a chat message or a file transfer.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,600,Q_MPA_SENDER,sender,,string,Contains the identity of the sender of a chat session or a file transfer.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,525,Q_MPA_CHAT,chat,,parent,"Parent entry, empty, for fields belonging to the chat (message, sender, receiver, encoding).",0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,635,Q_MPA_CONTACT_FIRSTNAME,contact_firstname,,string,Contact first name.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,636,Q_MPA_CONTACT_LASTNAME,contact_lastname,,string,Contact last name.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,528,Q_MPA_CONTACT_LOGIN,contact_login,,string,Contact login.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,529,Q_MPA_CONTACT_STATUS,contact_status,,string_index,Contact status.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,640,Q_MPA_CONTACT_NAME,contact_name,,string,Contact name.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,604,Q_MPA_SERVICE,service,,string,Type of service.,0,session_prt,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,555,Q_MPA_METHOD,method,,string_index,Contains the description of YMSG command.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,1,Q_YMSG_WEBMESSENGER_MSG_CODE,msg_code,,string,Contains the number of YMSG command.,0,session_mod,0 +276,Q_PROTO_YMSG_WEBMESSENGER,Instant Messaging,ymsg_webmessenger,Yahoo Webmessenger,643,Q_MPA_REQUEST,request,,parent,Contains the YMSG command.,0,session_mod,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,630,Q_MPA_ACCOUNT,account,,parent,User account metadata including the login and the password.,0,session_fix,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,581,Q_MPA_QUERY,query,,parent,Contains the raw and text query sent.,0,session_mod,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,583,Q_MPA_QUERY_TEXT,query_text,,string,Query sent to the search engine.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,582,Q_MPA_QUERY_RAW,query_raw,,string,Contains the query sent to the search engine as indicated in the URL.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,7,Q_YOUTUBE_VIDEO,video,,parent,"Parent entry, empty, for video metadata related attributes.",0,session_fix,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,1,Q_YOUTUBE_URL,url,,string,Contains the url for embedded players,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,577,Q_MPA_NAME,name,,string,Name the user.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,2,Q_YOUTUBE_DESCRIPTION,description,,string,Contains video description,1,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,3,Q_YOUTUBE_TAGS,tags,,string,Contains the tag list linked to the video,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,4,Q_YOUTUBE_VIDEOID,videoid,,string,Contains the unique identifier of the uploaded video,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,5,Q_YOUTUBE_TITLE,title,,string,Contains the video title,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,6,Q_YOUTUBE_NAMEVIEWER,nameviewer,,string,Contains the name of the user watching the video,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,555,Q_MPA_METHOD,method,,string,Contains the method used,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,763,Q_MPA_VIDEO_DURATION,video_duration,,uint32,Duration of the video in seconds.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,764,Q_MPA_VIDEO_WIDTH,video_width,,uint32,Width of the video in pixels.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,765,Q_MPA_VIDEO_HEIGHT,video_height,,uint32,Height of the video in pixels.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,766,Q_MPA_VIDEO_DATARATE,video_datarate,,uint32,Video bitrate in kilobits per second.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,767,Q_MPA_AUDIO_DATARATE,audio_datarate,,uint32,Audio bitrate in kilobits per second.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,768,Q_MPA_VIDEO_FRAMERATE,video_framerate,,uint32,Number of frames per second.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,709,Q_MPA_START_TIME,start_time,,uint32,Start date of the call.,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,769,Q_MPA_VIDEO_TOTALDURATION,video_totalduration,,uint32,Total duration of the video in seconds (not extracted).,0,session_prt,0 +240,Q_PROTO_YOUTUBE,Web,youtube,Youtube.com,770,Q_MPA_TOTAL_DATARATE,total_datarate,,uint32,Sum of video and audio datarates.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_fix,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,578,Q_MPA_PASSWORD,password,,string,User's password string.,0,session_fix,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,572,Q_MPA_MSGLIST_SENDER,msglist_sender,,string,Full address of email sender (alias and email address).,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,574,Q_MPA_MSGLIST_SENDER_EMAIL,msglist_sender_email,,string,Address of email sender.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,569,Q_MPA_MSGLIST_RECEIVER,msglist_receiver,,string,Full address of email receiver in a message list.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,571,Q_MPA_MSGLIST_RECEIVER_EMAIL,msglist_receiver_email,,string,Email address of the email receiver.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_prt,0 +311,Q_PROTO_ZIMBRA,Webmail,zimbra,Zimbra.com,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,617,Q_MPA_END,end,,ptr,Indicates the end of a top level event.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,565,Q_MPA_MSGLIST_DATE,msglist_date,,string,Message date in a message list.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,576,Q_MPA_MSGLIST_SUBJECT,msglist_subject,,string,Message subject in a message list.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,573,Q_MPA_MSGLIST_SENDER_ALIAS,msglist_sender_alias,,string,Name of email sender.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,611,Q_MPA_MSGLIST_SENDER_ENTRY,msglist_sender_entry,,parent,Parent entry for a sender in a message list.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,570,Q_MPA_MSGLIST_RECEIVER_ALIAS,msglist_receiver_alias,,string,Name of email receiver.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,612,Q_MPA_MSGLIST_RECEIVER_ENTRY,msglist_receiver_entry,,parent,Parent entry for a receiver in a message list.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,566,Q_MPA_MSGLIST_ENTRY,msglist_entry,,parent,"Parent entry, for different elements belonging to the same message of a message list.",0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,567,Q_MPA_MSGLIST_FOLDER,msglist_folder,,string,Indicates the directory from a message list.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,557,Q_MPA_MSG_ID,msg_id,,string,Identifier of the message.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,533,Q_MPA_DRAFT,draft,,uint32,Indicates if the email is a draft or has really been posted,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,601,Q_MPA_SENDER_ALIAS,sender_alias,,string,Name of the email sender.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,602,Q_MPA_SENDER_EMAIL,sender_email,,string,Email address of the email sender.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,600,Q_MPA_SENDER,sender,,string,Full address of email sender (alias followed by email address).,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,609,Q_MPA_SENDER_ENTRY,sender_entry,,parent,"Parent entry, for different elements belonging to the sender.",0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,520,Q_MPA_ATTACH_TYPE,attach_type,,string,Content type of the sent attached file.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,597,Q_MPA_RECEIVER_TYPE,receiver_type,,string,Type of the email receiver.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,586,Q_MPA_RECEIVER_ALIAS,receiver_alias,,string,Name of email receiver (included cc and bcc receivers).,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,593,Q_MPA_RECEIVER_EMAIL,receiver_email,,string,Email address of message receiver (included cc and bcc receivers).,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,585,Q_MPA_RECEIVER,receiver,,string,Full address of email receiver (including cc and bcc receivers).,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,610,Q_MPA_RECEIVER_ENTRY,receiver_entry,,parent,"Parent entry, for different elements belonging to the email receiver.",0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,517,Q_MPA_ATTACH_ID,attach_id,,string,Attachment identifier.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,519,Q_MPA_ATTACH_SIZE,attach_size,,uint32,Attached file MIME size.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,516,Q_MPA_ATTACH_FILENAME,attach_filename,,string,Attachment name.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,513,Q_MPA_ATTACH,attach,,parent,"Parent entry, for attach fields in a message.",0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,530,Q_MPA_CONTENT,content,,string,Message content.,1,session_mod,1 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,607,Q_MPA_SUBJECT,subject,,string,Message subject.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,512,Q_MPA_ACTION,action,,string,Indicates if the message is read (Read) or composed (Compose).,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,535,Q_MPA_EMAIL,email,,parent,"Parent entry, for fields belonging to the same email.",0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,550,Q_MPA_LOGIN,login,,string,User's login string.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,514,Q_MPA_ATTACH_CONTENT,attach_content,,buffer,Attached files' content.,1,session_mod,1 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,615,Q_MPA_CONTACT_ALIAS,contact_alias,,string,Alias of a contact.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,616,Q_MPA_CONTACT_EMAIL,contact_email,,string,Email address of a contact.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,634,Q_MPA_CONTACT,contact,,string,Complete contact.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,614,Q_MPA_CONTACT_ENTRY,contact_entry,,parent,This attribute groups information about a contact.,0,session_mod,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,532,Q_MPA_DATE,date,,string,Message date.,0,session_prt,0 +325,Q_PROTO_ZIMBRA_STANDARD,Webmail,zimbra_standard,Zimbra Webmail Standard Version,598,Q_MPA_REPLYTO,replyto,,string,Email address to use in a reply for this message.,0,session_prt,0 diff --git a/resources/Qosmos_Protocol_Bundle_Protobook_1.42.0_v1.0.xlsx b/resources/Qosmos_Protocol_Bundle_Protobook_1.51.0_v1.0.xlsx similarity index 54% rename from resources/Qosmos_Protocol_Bundle_Protobook_1.42.0_v1.0.xlsx rename to resources/Qosmos_Protocol_Bundle_Protobook_1.51.0_v1.0.xlsx index 5464ae99856bf..0b1835b601941 100755 Binary files a/resources/Qosmos_Protocol_Bundle_Protobook_1.42.0_v1.0.xlsx and b/resources/Qosmos_Protocol_Bundle_Protobook_1.51.0_v1.0.xlsx differ diff --git a/resources/Qosmos_Protocol_Bundle_Release_Notes_1.42.0_v1.0.pdf b/resources/Qosmos_Protocol_Bundle_Release_Notes_1.42.0_v1.0.pdf deleted file mode 100755 index 194cc70277c83..0000000000000 Binary files a/resources/Qosmos_Protocol_Bundle_Release_Notes_1.42.0_v1.0.pdf and /dev/null differ diff --git a/resources/Qosmos_Protocol_Bundle_Release_Notes_1.51.0_v1.0.pdf b/resources/Qosmos_Protocol_Bundle_Release_Notes_1.51.0_v1.0.pdf new file mode 100755 index 0000000000000..24b87ecd8e1cb Binary files /dev/null and b/resources/Qosmos_Protocol_Bundle_Release_Notes_1.51.0_v1.0.pdf differ diff --git a/resources/Qosmos_Protocols.csv b/resources/Qosmos_Protocols.csv index c8d9f0ab57cd5..6c7628e9b4bf8 100755 --- a/resources/Qosmos_Protocols.csv +++ b/resources/Qosmos_Protocols.csv @@ -1,1710 +1,1765 @@ ,,,,,,,,,,Classification,,,,,,Offloading,,,,,Tags,,,,,,,,,,,,,,,,,,,,,,,,, id,protocol_id_mane,name,deprecated,longname,description,family,layer_below,supported version,Last checked versions,explicit,PDATA Signature(s),ip,pattern,correlation,Port based classification over SSL,tunneling,multiplexing,signalization,inheritance,declassification,basic,networking,email,webmail,im_mc,chat,audio_chat,video_chat,file_transfer,social_network,voip,web,web_search,web_ecom,web_sites,mobile,p2p,file_mngt,db,enterprise,update,gaming,aaa,remote_access,mm_streaming,vpn_tun -948,Q_PROTO_01NET,01net,,01net,This protocol plug-in classifies the http traffic to the host 01net.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1123,Q_PROTO_050PLUS,050plus,,050 plus,050 plus is a Japanese embedded smartphone application dedicated to audio-conferencing.,Audio/Video,http;https;sip;ssl,2.0.4,Mobile-Android-App2.1.5 (2012-05-30);iPhone-iOS5.0.1-App2.0.4 (2012-05-30),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,,,,,,,,,,, -584,Q_PROTO_0ZZ0,0zz0,,0zz0,"0zz0 is an online solution to store, send and share files",Web,http;https,20101216,PC-Windows-Browser-20101222 (2010-12-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1339,Q_PROTO_10050NET,10050net,,10050,China Railcom group web portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -949,Q_PROTO_10086CN,10086cn,,10086cn,This protocol plug-in classifies the http traffic to the host 10086.cn. It also classifies the ssl traffic to the Common Name 10086.cn.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1336,Q_PROTO_104COM,104com,,104,Web site dedicated to job research.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1338,Q_PROTO_1111TW,1111tw,,1111,Website dedicated to job research in Taiwan.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -950,Q_PROTO_114LA,114la,,114la,This protocol plug-in classifies the http traffic to the host 114la.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -951,Q_PROTO_115COM,115com,,115com,This protocol plug-in classifies the http traffic to the host 115.com. It also classifies the ssl traffic to the Common Name 115.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -952,Q_PROTO_118114CN,118114cn,,118114cn,This protocol plug-in classifies the http traffic to the host 118114.cn.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1191,Q_PROTO_11ST,11st,,11st,This protocol plug-in classifies the http traffic to the host 11st.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -953,Q_PROTO_123PEOPLE,123people,,123people,This protocol plug-in classifies the http traffic to the host 123people.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1700,Q_PROTO_1337X,1337x,,1337x,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1819,Q_PROTO_15MIN,15min,,15min,Lithuanian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1242,Q_PROTO_163COM,163com,,163,This protocol plug-in classifies the http traffic to the host 163.com. It also classifies the ssl traffic to the Common Name .163.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1340,Q_PROTO_17173COM,17173com,,17173,Website distributing Chinese games.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1341,Q_PROTO_17U,17u,,17u,Chinese online travel booking website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2017,Q_PROTO_20MIN,20min,,20min,Swiss news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1820,Q_PROTO_24H,24h,,24h,Vietnamese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1821,Q_PROTO_24ORA,24ora,,24ora,Aruban news portal,Web,http;https,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1822,Q_PROTO_24SATA,24sata,,24sata,Croatian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1823,Q_PROTO_24UR,24ur,,24ur,Slovenian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1316,Q_PROTO_2CH,2ch,,2ch,Japanese adult videos web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -266,Q_PROTO_2SHARED,2shared,,2shared,2shared is an online space for sharing and storage.,Web,http;https,20090312,PC-Windows-20090717 (2009-07-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1248,Q_PROTO_360BUY,360buy,x,360buy,This protocol plug-in classified the http traffic to the host 360buy.com.,Web,,20120827,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1255,Q_PROTO_360CN,360cn,,360,This protocol plug-in classifies the http traffic to the host 360.cn.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1437,Q_PROTO_3GPP_LI,3gpp_li,,3gpp_li,3gpp_li is a protocol which form a standard for telecoms operators and networks operators.,Tunneling,base,33.108 7.3.0,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -606,Q_PROTO_3PC,3pc,,Third Party Connect Protocol,The 3pc protocol (Third Party Connect Protocol) is found over the IP layer (IANA protocol number: 34).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1269,Q_PROTO_4399COM,4399com,,4399,This protocol plug-in classifies the http traffic to the host 4399.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -267,Q_PROTO_4SHARED,4shared,,4shared,4shared is an online space for sharing and storage.,Web,http;https,"20140109,4.0.3.1 (Windows),2.2.1 (Android),1.8.0 (iPhone)",Mobile-Android-App2.2.1 (2014-01-09);Mobile-Android-App2.2.1 (Korea) (2014-01-09);PC-Windows-4.0.3.1 (2014-01-09);PC-Windows-4.0.3.1 (Korea) (2014-01-09);PC-Windows-Browser-Chrome-20131010 (2014-01-09);iPhone-iOS-App1.8.0 (2014-01-09);iPhone-iOS-App1.8.0 (Korea) (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1505,Q_PROTO_51_COM,51_com,,51 Com ,"Provide social networking applications ( http://www.51.com ), IM, music, photo albums.",Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1508,Q_PROTO_51_COM_BBS,51_com_bbs,,51 Com bbs,"BBS, Forum ( bbs.51.com )",Web,51_com,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1506,Q_PROTO_51_COM_MUSIC,51_com_music,,51 Com music,Music streaming ( http://music.51.com ),Web,51_com,20130715,10/17/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1507,Q_PROTO_51_COM_POSTING,51_com_posting,,51 Com posting,Collaboration web site ( http://home.51.com/posting ),Web,51_com,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1278,Q_PROTO_51JOB,51job,,51job,This protocol plug-in classifies the http traffic to the host 51job.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1277,Q_PROTO_51LA,51la,,51,This protocol plug-in classifies the http traffic to the host 51.la.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1259,Q_PROTO_56COM,56com,,56,This protocol plug-in classifies the http traffic to the host 56.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1257,Q_PROTO_58COM,58com,,58,This protocol plug-in classifies the http traffic to the host 58.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1337,Q_PROTO_591TW,591tw,,591,Taiwanese real estate web site.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1342,Q_PROTO_7K7K,7k7k,,7k7k,Chinese game portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -7,Q_PROTO_8021Q,8021q,,Ethernet VLAN,802.1Q is a protocol which allows sending VLAN membership information of a frame.,Network Service,eth,8021q,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1290,Q_PROTO_802_11,802_11,,802.11 Protocol,The 802.11 protocol is used to carry data (at MAC level) on IEEE 802.11 Wireless Local Area Networks.,Network Service,capwap,IEEE 802.11,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1335,Q_PROTO_91COM,91com,,91 (TQ Game,The TQ game entertainment portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -2081,Q_PROTO_999_MD,999_md,,999,Moldavian classified ads,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1343,Q_PROTO_9GAME,9game,,9game,Chinese game distribution platform.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1690,Q_PROTO_ABC,abc,,Pingpong ABC,ABC is a Bittorrent client based on BitTornado,Peer to Peer,bittorrent;http;https,3.1,PC-Windows-ABC3.1 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1824,Q_PROTO_ABC_NEWS,abc_news,,ABC News,Paraguayan news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -954,Q_PROTO_ABCNEWS,abcnews,,abcnews,This protocol plug-in classifies the http traffic to the hosts abcnews.com and abcnews.go.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1825,Q_PROTO_ABIDJAN,abidjan,,Abidjan,Cote d Ivoire news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2018,Q_PROTO_ABOLA,abola,,Abola,Portugese sports news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -955,Q_PROTO_ABOUT,about,,about,This protocol plug-in classifies the http traffic to the host about.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1826,Q_PROTO_ABV,abv,,Abv,Bulgarian webmail,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -956,Q_PROTO_ACCUWEATHER,accuweather,,accuweather,This protocol plug-in classifies the http traffic to the host accuweather.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -957,Q_PROTO_ACER,acer,,acer,This protocol plug-in classifies the http traffic to the host acer.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -958,Q_PROTO_ACROBAT,acrobat,,acrobat,This protocol plug-in classifies the http traffic to the host www.acrobat.com. It also classifies the ssl traffic to the Common Name www.acrobat.com.,Web,http;https,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -939,Q_PROTO_ACSE,acse,,ISO 8650-1 Association Control Service,ISO 8650-1/X.227 OSI Association Control SErvice (ACSE).,Network Service,pp,ISO 8650-1/X.227,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +948,Q_PROTO_01NET,01net,,01net.com,This protocol plug-in classifies the http traffic to the host 01net.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1123,Q_PROTO_050PLUS,050plus,,050 plus,050 plus is a Japanese embedded smartphone application dedicated to audio-conferencing.,Audio/Video,http;https;sip;ssl,2.0.4,Mobile-Android-050Plus-2.1.5 (2012-05-30);iPhone-iOS-5.0.1-050Plus-2.0.4 (2012-05-30),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,,,,,,,,,,, +584,Q_PROTO_0ZZ0,0zz0,,0zz0.com,"0zz0 is an online solution to store, send and share files",Web,http;https,20101216,PC-Windows-Chromium (2010-12-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1339,Q_PROTO_10050NET,10050net,,10050.net,China Railcom group web portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +949,Q_PROTO_10086CN,10086cn,,10086.cn,This protocol plug-in classifies the http traffic to the host 10086.cn. It also classifies the ssl traffic to the Common Name 10086.cn.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1336,Q_PROTO_104COM,104com,,104.com,Web site dedicated to job research.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1338,Q_PROTO_1111TW,1111tw,,1111.com.tw,Website dedicated to job research in Taiwan.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +950,Q_PROTO_114LA,114la,,114la.com,This protocol plug-in classifies the http traffic to the host 114la.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +951,Q_PROTO_115COM,115com,,115.com,This protocol plug-in classifies the http traffic to the host 115.com. It also classifies the ssl traffic to the Common Name 115.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +952,Q_PROTO_118114CN,118114cn,,118114.cn,This protocol plug-in classifies the http traffic to the host 118114.cn.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1191,Q_PROTO_11ST,11st,,11st.co.kr,This protocol plug-in classifies the http traffic to the host 11st.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +953,Q_PROTO_123PEOPLE,123people,,123people.com,This protocol plug-in classifies the http traffic to the host 123people.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1700,Q_PROTO_1337X,1337x,,1337x.org,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1819,Q_PROTO_15MIN,15min,,15min.lt,Lithuanian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1242,Q_PROTO_163COM,163com,,163.com,This protocol plug-in classifies the http traffic to the host 163.com. It also classifies the ssl traffic to the Common Name .163.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1340,Q_PROTO_17173COM,17173com,,17173.com,Website distributing Chinese games.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1341,Q_PROTO_17U,17u,,17u.com,Chinese online travel booking website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +2017,Q_PROTO_20MIN,20min,,20min.ch,Swiss news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1820,Q_PROTO_24H,24h,,24h.com.vn,Vietnamese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1821,Q_PROTO_24ORA,24ora,,24ora.com,Aruban news portal,Web,http;https,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1822,Q_PROTO_24SATA,24sata,,24sata.hr,Croatian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1823,Q_PROTO_24UR,24ur,,24ur.com,Slovenian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1316,Q_PROTO_2CH,2ch,,2ch.net,Japanese adult videos web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +266,Q_PROTO_2SHARED,2shared,,2shared.com,2shared is an online space for sharing and storage.,Web,http;https,20090312,PC-Windows- (2009-07-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1248,Q_PROTO_360BUY,360buy,x,360buy.com,This protocol plug-in classified the http traffic to the host 360buy.com.,Web,,20120827,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1255,Q_PROTO_360CN,360cn,,360.cn,This protocol plug-in classifies the http traffic to the host 360.cn.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1437,Q_PROTO_3GPP_LI,3gpp_li,,3GPP LI,3gpp_li is a protocol which form a standard for telecoms operators and networks operators.,Tunneling,base,33.108 7.3.0,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +606,Q_PROTO_3PC,3pc,,Third Party Connect,The 3pc protocol (Third Party Connect Protocol) is found over the IP layer (IANA protocol number: 34).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1269,Q_PROTO_4399COM,4399com,,4399.com,This protocol plug-in classifies the http traffic to the host 4399.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +267,Q_PROTO_4SHARED,4shared,,4shared.com,4shared is an online space for sharing and storage.,Web,http;https;ssl,PC-Windows-Browser-www.4shared.com (2014-02-20);PC-Windows-4shared 4.0.3.1 (2014-01-17);Mobile-Android-4shared 2.2.1 (2014-02-10);iPhone-iOS-4shared 1.8.0 (2014-01-15);Symbian-4shared 2.10.S.05 (2014-02-19);Windows Phone-Windows Phone OS 8-4shared 1.5 (2014-02-11);BlackBerry-BlackBerry OS-4shared 1.4.1.5 (2014-02-27);Mac-Mac OS-4shared 1.3 (2014-02-17);PC-Linux-4shared 1.3 (2014-02-17),BlackBerry-BlackBerry OS-4shared-1.4.1.5 (2014-02-19);BlackBerry-BlackBerry OS-4shared-1.4.1.5-KR (2014-02-27);Mac-Mac OS-4shared-1.3 (2014-02-17);Mac-Mac OS-4shared-1.3-KR (2014-02-19);Mobile-Android-4shared-2.2.1 (2014-02-10);Mobile-Android-4shared-2.2.1-KR (2014-02-10);Nokia Mobile-Symbian-4shared-2.10.S.05 (2014-02-19);Nokia Mobile-Symbian-4shared-2.10.S.05-KR (2014-02-19);PC-Linux-4shared-1.3 (2014-02-17);PC-Linux-4shared-1.3-KR (2014-02-18);PC-Windows-4shared-4.0.3.1-Korea (2014-01-09);PC-Windows-7-4shared-4.0.3.1 (2014-01-17);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-20);Windows Phone-Windows Phone OS-8-4shared-1.5 (2014-02-11);Windows Phone-Windows Phone OS-8-4shared-1.5.0.0-KR (2014-02-12);iPhone-iOS-4shared-1.8.0 (2014-01-15);iPhone-iOS-4shared-1.8.0-KR (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1505,Q_PROTO_51_COM,51_com,,51.com,"Provide social networking applications ( http://www.51.com ), IM, music, photo albums.",Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1508,Q_PROTO_51_COM_BBS,51_com_bbs,,51.com BBS,"BBS, Forum ( bbs.51.com )",Web,51_com,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1506,Q_PROTO_51_COM_MUSIC,51_com_music,,51.com Music,Music streaming ( http://music.51.com ),Web,51_com,20130715,10/17/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1507,Q_PROTO_51_COM_POSTING,51_com_posting,,51.com Posting,Collaboration web site ( http://home.51.com/posting ),Web,51_com,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1278,Q_PROTO_51JOB,51job,,51job.com,This protocol plug-in classifies the http traffic to the host 51job.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1277,Q_PROTO_51LA,51la,,51.la,This protocol plug-in classifies the http traffic to the host 51.la.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1259,Q_PROTO_56COM,56com,,56.com,This protocol plug-in classifies the http traffic to the host 56.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1257,Q_PROTO_58COM,58com,,58.com,This protocol plug-in classifies the http traffic to the host 58.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1337,Q_PROTO_591TW,591tw,,591.com.tw,Taiwanese real estate web site.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1342,Q_PROTO_7K7K,7k7k,,7k7k.com,Chinese game portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +7,Q_PROTO_8021Q,8021q,,802.1Q Ethernet VLAN,802.1Q is a protocol which allows sending VLAN membership information of a frame.,Network Service,eth,8021q,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1290,Q_PROTO_802_11,802_11,,802.11,The 802.11 protocol is used to carry data (at MAC level) on IEEE 802.11 Wireless Local Area Networks.,Network Service,capwap,IEEE 802.11,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1335,Q_PROTO_91COM,91com,,91.com,The TQ game entertainment portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +2081,Q_PROTO_999_MD,999_md,,999.md,Moldavian classified ads,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1343,Q_PROTO_9GAME,9game,,9game.com,Chinese game distribution platform.,Web,http;https,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +2208,Q_PROTO_A_DAKAR,a_dakar,,A.dakar,Senegalese news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1690,Q_PROTO_ABC,abc,,ABC Bittorrent client,ABC is a Bittorrent client based on BitTornado,Peer to Peer,bittorrent;http;https,3.1,PC-Windows-ABC-3.1 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1824,Q_PROTO_ABC_NEWS,abc_news,,ABC.com.py,Paraguayan news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +954,Q_PROTO_ABCNEWS,abcnews,,ABCNews.go.com,This protocol plug-in classifies the http traffic to the hosts abcnews.com and abcnews.go.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1825,Q_PROTO_ABIDJAN,abidjan,,Abidjan.net,Cote d Ivoire news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2018,Q_PROTO_ABOLA,abola,,Abola.pt,Portugese sports news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +955,Q_PROTO_ABOUT,about,,About.com,This protocol plug-in classifies the http traffic to the host about.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1826,Q_PROTO_ABV,abv,,Abv.bg,Bulgarian webmail,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +956,Q_PROTO_ACCUWEATHER,accuweather,,AccuWeather.com,This protocol plug-in classifies the http traffic to the host accuweather.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +957,Q_PROTO_ACER,acer,,Acer.com,This protocol plug-in classifies the http traffic to the host acer.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +958,Q_PROTO_ACROBAT,acrobat,,Acrobat.com,This protocol plug-in classifies the http traffic to the host www.acrobat.com. It also classifies the ssl traffic to the Common Name www.acrobat.com.,Web,http;https,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +939,Q_PROTO_ACSE,acse,,Association Control Service,ISO 8650-1/X.227 OSI Association Control SErvice (ACSE).,Network Service,pp,ISO 8650-1/X.227,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 607,Q_PROTO_ACTIVENET,activenet,,Active Networks,The activenet protocol (Active Networks) is found over the IP layer (IANA protocol number: 107).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -911,Q_PROTO_ACTIVESYNC,activesync,,Activesync,"Microsoft ActiveSync is a mobile data synchronization technology and protocol developed by Microsoft, originally released in 1996.",Web,http;https,20110209,8/2/2011,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1438,Q_PROTO_ADC,adc,,adc,ADC is a peer-to-peer protocol widely used in Direct Connect networks. It superseeds the protocol NMDC and corrects many flaws identified in this older protocol.,Peer to Peer,socks4;socks5;ssl;tcp;udp,DC++ v0.830 (ADC 1.0.3),2/28/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1782,Q_PROTO_ADCASH,adcash,,Adcash,Adcash is an international Ad network providing Internet publishers,Web,http;https;ssl,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -960,Q_PROTO_ADDICTINGGAMES,addictinggames,,addictinggames,This protocol plug-in classifies the http traffic to the host addictinggames.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -758,Q_PROTO_ADNSTREAM,adnstream,,ADNStream,This protocol plug-in classifies the ssl traffic to the Common Name adnstream.tv.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +911,Q_PROTO_ACTIVESYNC,activesync,,Microsoft ActiveSync,"Microsoft ActiveSync is a mobile data synchronization technology and protocol developed by Microsoft, originally released in 1996.",Web,http;https,20110209,8/2/2011,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +1438,Q_PROTO_ADC,adc,,Advanced Direct Connect,ADC is a peer-to-peer protocol widely used in Direct Connect networks. It superseeds the protocol NMDC and corrects many flaws identified in this older protocol.,Peer to Peer,socks4;socks5;ssl;tcp;udp,DC++ v0.830 (ADC 1.0.3),2/28/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1782,Q_PROTO_ADCASH,adcash,,Adcash Advertising Network,Adcash is an international Ad network providing Internet publishers,Web,http;https;ssl,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +960,Q_PROTO_ADDICTINGGAMES,addictinggames,,Addictinggames.com,This protocol plug-in classifies the http traffic to the host addictinggames.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +758,Q_PROTO_ADNSTREAM,adnstream,,ADNStream.tv,This protocol plug-in classifies the ssl traffic to the Common Name adnstream.tv.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 929,Q_PROTO_ADOBE_CONNECT,adobe_connect,,Adobe Connect,"Adobe Connect is a web communication system for the training, the marketing, the conferences and the online collaboration.",Audio/Video,http;https;rtmp;ssl,Adobe connect 8;20130830,10/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -759,Q_PROTO_ADOBE_MEETING_RC,adobe_meeting_rc,,Adobe Meeting Remote Control,"This protocol plug-in classifies the http traffic to the hosts connectpro97286496.emea.acrobat.com, connectpro97286496.adobeconnect.com and www.emea.acrobat.com. It also classifies the ssl traffic to the Common Name emea.acrobat.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,x,,,,,,, -1556,Q_PROTO_ADOBE_ONLINE_OFFICE,adobe_online_office,,Adobe online office,Online collaborative office. ( http://www.acrobat.com/main/fr_FR/home.html ),Web,https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -549,Q_PROTO_ADOBE_UPDATE,adobe_update,,Adobe Update Manager,The Adobe Update Manager is a program which maintains up-to-date versions of Adobe Acrobat Reader software.,Web,http;https;ssl,Adobe Reader 10.1.8,PC-Windows-Adobe Reader 10 (2013-11-06),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -760,Q_PROTO_ADRIVE,adrive,,Adrive,This protocol plug-in classifies the http traffic to the host adrive.com. It also classifies the ssl traffic to the Common Name adrive.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1794,Q_PROTO_ADSERVERPLUS,adserverplus,,Adserverplus,Online advertisement,Web,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -961,Q_PROTO_ADULTADWORLD,adultadworld,,adultadworld,This protocol plug-in classifies the http traffic to the host adultadworld.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -962,Q_PROTO_ADULTFRIENDFINDER,adultfriendfinder,,adultfriendfinder,This protocol plug-in classifies the http traffic to the host adultfriendfinder.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -357,Q_PROTO_ADVOGATO,advogato,,Advogato,This protocol plug-in classifies the http traffic to the host advogato.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1827,Q_PROTO_AFTONBLADET,aftonbladet,,Aftonbladet,Swedish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -963,Q_PROTO_AGAME,agame,,agame,This protocol plug-in classifies the http traffic to the host agame.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +759,Q_PROTO_ADOBE_MEETING_RC,adobe_meeting_rc,,Adobe Meeting Remote Control,"This protocol plug-in classifies the http traffic to the hosts connectpro97286496.emea.acrobat.com, connectpro97286496.adobeconnect.com and www.emea.acrobat.com. It also classifies the ssl traffic to the Common Name emea.acrobat.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,x,,,,,,, +1556,Q_PROTO_ADOBE_ONLINE_OFFICE,adobe_online_office,,Adobe online office,Online collaborative office. ( http://www.acrobat.com/main/fr_FR/home.html ),Web,https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +549,Q_PROTO_ADOBE_UPDATE,adobe_update,,Adobe Update Manager,The Adobe Update Manager is a program which maintains up-to-date versions of Adobe Acrobat Reader software.,Web,http;https;ssl,PC-Windows-Adobe Reader 10.1.8,PC-Windows-Adobe Reader-10.0 (2013-11-06),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +760,Q_PROTO_ADRIVE,adrive,,Adrive.com,This protocol plug-in classifies the http traffic to the host adrive.com. It also classifies the ssl traffic to the Common Name adrive.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1794,Q_PROTO_ADSERVERPLUS,adserverplus,,Adserverplus,Online advertisement,Web,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +961,Q_PROTO_ADULTADWORLD,adultadworld,,AdultAdWorld.com,This protocol plug-in classifies the http traffic to the host adultadworld.com.,Web,http;https,PC-Windows-Browser-www.adultadworld.com (2013-07-13),3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +962,Q_PROTO_ADULTFRIENDFINDER,adultfriendfinder,,AdultFriendFinder.com,This protocol plug-in classifies the http traffic to the host adultfriendfinder.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +357,Q_PROTO_ADVOGATO,advogato,,Advogato.org,This protocol plug-in classifies the http traffic to the host advogato.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1827,Q_PROTO_AFTONBLADET,aftonbladet,,Aftonbladet.se,Swedish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +963,Q_PROTO_AGAME,agame,,Agame.com,This protocol plug-in classifies the http traffic to the host agame.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, 720,Q_PROTO_AH,ah,,Authentication Header,The ah protocol (Authentication Header) is found over the IP layer (IANA protocol number: 51).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -964,Q_PROTO_AIAIGAME,aiaigame,,aiaigame,This protocol plug-in classifies the http traffic to the host aiaigame.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1344,Q_PROTO_AILI,aili,,Aili,Chinese fashion shopping website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -8,Q_PROTO_AIM,aim,,AOL Instant Messenger (OSCAR protocol),AIM (originally AOL Instant Messenger) is an instant messaging application. The protocol name is OSCAR (Open System for CommunicAtion in Realtime) and is used in both ICQ and AIM services. [Note: aim is also known as oscar.],Instant Messaging,http;https;rtmp;tcp,8.0;7.5.9.11;AgileMessenger;IM+;ICQ v7-9,PC-Windows-Pidgin2.10.7 (2013-07-25),,x,,x,,,,,x,x,x,,,,,x,x,,,x,,,,,,,,,,,,,,,,, +964,Q_PROTO_AIAIGAME,aiaigame,,AiAiGame.com,This protocol plug-in classifies the http traffic to the host aiaigame.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +2185,Q_PROTO_AIB,aib,,Aib,Irish banking website,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1344,Q_PROTO_AILI,aili,,Aili.com,Chinese fashion shopping website.,Web,http;https,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +8,Q_PROTO_AIM,aim,,AOL Instant Messenger (formerly OSCAR),AIM (originally AOL Instant Messenger) is an instant messaging application. The protocol name is OSCAR (Open System for CommunicAtion in Realtime) and is used in both ICQ and AIM services. [Note: aim is also known as oscar.],Instant Messaging,http;https;rtmp;tcp,PC-Windows-Aim 8.0;PC-Windows-Aim 7.5.9;PC-Windows 7-Pidgin 2.10.7 (2013-07-25),Mac-Mac OS-AIM-8.0.5.2 (2014-01-21);Mobile-Android-AIM-2.7.2.19 (2014-01-14);PC-Windows-7-AIM-8.0.6.1 (2014-01-22);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-22);PC-Windows-Pidgin-2.10.7 (2013-07-25);iPhone-iOS-AIM-5.1.5 (2014-01-23),,x,,x,,,,,x,x,x,,,,,x,x,,,x,,,,,,,,,,,,,,,,, 275,Q_PROTO_AIM_EXPRESS,aim_express,,AIM express,"AOL Instant Messaging Express supports many of the standard features included in AIM, but does not provide advanced features like file transfer, audio chat or video conferencing",Instant Messaging,http;https;ssl,v0.1,10/15/2012,,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, -245,Q_PROTO_AIM_TRANSFER,aim_transfer,,AIM Transfer Protocol,AIM is an instant messaging protocol,File Transfer,tcp,<=6.5,10/2/2008,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -1239,Q_PROTO_AIMINI,aimini,,aimini,"Aimini is an online solution to store, send and share files.",File Server,http;https,20120802,"PC-Windows-Chrome 21.0.1180.89m, PC-Windows-IE 8.0.7600 (2014-01-09)",,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,x,,,,,,,, +245,Q_PROTO_AIM_TRANSFER,aim_transfer,,AIM Transfer,AIM is an instant messaging protocol,File Transfer,tcp,<=6.5,10/2/2008,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +1239,Q_PROTO_AIMINI,aimini,,Aimini.net,"Aimini is an online solution to store, send and share files.",File Server,http;https,20120802,PC-Windows-Chrome-21.0.1180.89m (2014-03-14);PC-Windows-Internet Explorer-8.0.7600 (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,x,,,,,,,, 281,Q_PROTO_AIMS,aims,,Secure AIM,AIMS is the secure version of AIM.,Instant Messaging,http;https;ssl,aimv7,6/10/2011,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -761,Q_PROTO_AIRAIM,airaim,,AirAIM,This protocol plug-in classifies the http traffic to the host airaim.com. It also classifies the ssl traffic to the Common Name airaim.com.,Instant Messaging,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1268,Q_PROTO_AIZHAN,aizhan,,Aizhan,This protocol plug-in classifies the http traffic to the host aizhan.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1284,Q_PROTO_AKAMAI,akamai,,Akamai Technologies CDN,"This protocol plug-in classifies the http traffic to the hosts akamai.net, akamaihd.net, akamaiedge.net, edgesuite.net, edgekey.net and srip.net. It also classifies the ssl traffic to the Common Names akamai.net and akamaihd.net.",Web,http;https;ssl,20121025,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1828,Q_PROTO_AKTUALITY,aktuality,,Aktuality,Slovak news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2019,Q_PROTO_ALAKHBAR,alakhbar,,Alakhbar,Mauritanian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -965,Q_PROTO_ALEXA,alexa,,alexa,This protocol plug-in classifies the http traffic to the host alexa.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1829,Q_PROTO_ALFAJERTV,alfajertv,,Alfajertv,Palestinian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1258,Q_PROTO_ALIBABA,alibaba,,Alibaba,Alibaba is the world largest online business-to-business trading platform for small businesses.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2020,Q_PROTO_ALIEXPRESS,aliexpress,,Aliexpress,Chinese ecommerce website,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1275,Q_PROTO_ALIMAMA,alimama,,Alimama,This protocol plug-in classifies the http traffic to the host alimama.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1250,Q_PROTO_ALIPAY,alipay,,Alipay,This protocol plug-in classifies the http traffic to the host alipay.com. It also classifies the ssl traffic to the Common Name alipay.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -966,Q_PROTO_ALJAZEERA,aljazeera,,aljazeera,This protocol plug-in classifies the http traffic to the host aljazeera.net.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -762,Q_PROTO_ALL_SLOTS_CASINO,all_slots_casino,,All Slots Casino,This protocol plug-in classifies the http traffic to the host setup.realgaming.com.,Game,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1830,Q_PROTO_ALLEGRO,allegro,,Allegro,Polish shopping web portal,Web,http;https,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2003,Q_PROTO_ALLMUSIC,allmusic,,AllMusic,"Allmusic is an online music guide service website. This plug-in classifies navigation on the AllMusic web service, and MP3 music playback. Video clip streaming is handled by youtube.",Audio/Video,http;https,20131211,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -967,Q_PROTO_ALLOCINE,allocine,,allocine,This protocol plug-in classifies the http traffic to the host allocine.fr.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1831,Q_PROTO_ALMANAR,almanar,,Almanar,Lebanese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1832,Q_PROTO_ALNILIN,alnilin,,Alnilin,Sudanese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1833,Q_PROTO_ALRAKOBA,alrakoba,,Alrakoba,Sudanese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2196,Q_PROTO_AIR_VIDEO,air_video,,Air Video,"Air Video can stream videos to your iPhone, iPad and iPod touch.",Audio/Video,apple_hls;http;https,iPhone-iOS (2014-03-19),,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, +761,Q_PROTO_AIRAIM,airaim,,AirAIM.com,This protocol plug-in classifies the http traffic to the host airaim.com. It also classifies the ssl traffic to the Common Name airaim.com.,Instant Messaging,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +1268,Q_PROTO_AIZHAN,aizhan,,Aizhan.com,This protocol plug-in classifies the http traffic to the host aizhan.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1284,Q_PROTO_AKAMAI,akamai,,Akamai Technologies CDN,"This protocol plug-in classifies the http traffic to the hosts akamai.net, akamaihd.net, akamaiedge.net, edgesuite.net, edgekey.net and srip.net. It also classifies the ssl traffic to the Common Names akamai.net and akamaihd.net.",Web,http;https;ssl,20121025,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1828,Q_PROTO_AKTUALITY,aktuality,,Aktuality.sk,Slovak news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2019,Q_PROTO_ALAKHBAR,alakhbar,,Alakhbar.info,Mauritanian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +965,Q_PROTO_ALEXA,alexa,,Alexa.com,This protocol plug-in classifies the http traffic to the host alexa.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1829,Q_PROTO_ALFAJERTV,alfajertv,,Alfajertv.com,Palestinian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1258,Q_PROTO_ALIBABA,alibaba,,Alibaba.com,Alibaba is the world largest online business-to-business trading platform for small businesses.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2020,Q_PROTO_ALIEXPRESS,aliexpress,,AliExpress.com,Chinese ecommerce website,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1275,Q_PROTO_ALIMAMA,alimama,,Alimama.com,This protocol plug-in classifies the http traffic to the host alimama.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1250,Q_PROTO_ALIPAY,alipay,,Alipay.com,This protocol plug-in classifies the http traffic to the host alipay.com. It also classifies the ssl traffic to the Common Name alipay.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +966,Q_PROTO_ALJAZEERA,aljazeera,,AlJazeera.net,This protocol plug-in classifies the http traffic to the host aljazeera.net.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +762,Q_PROTO_ALL_SLOTS_CASINO,all_slots_casino,,All Slots Casino,This protocol plug-in classifies the http traffic to the host setup.realgaming.com.,Game,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1830,Q_PROTO_ALLEGRO,allegro,,Allegro.pl,Polish shopping web portal,Web,http;https,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2003,Q_PROTO_ALLMUSIC,allmusic,,AllMusic.com,"Allmusic is an online music guide service website. This plug-in classifies navigation on the AllMusic web service, and MP3 music playback. Video clip streaming is handled by youtube.",Audio/Video,http;https,20131211,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +967,Q_PROTO_ALLOCINE,allocine,,AlloCine.fr,This protocol plug-in classifies the http traffic to the host allocine.fr.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1831,Q_PROTO_ALMANAR,almanar,,AlManar.com,Lebanese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1832,Q_PROTO_ALNILIN,alnilin,,Alnilin.com,Sudanese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1833,Q_PROTO_ALRAKOBA,alrakoba,,Alrakoba.net,Sudanese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 897,Q_PROTO_ALTIRIS,altiris,,Altiris,Altiris provides service-oriented management solutions which allow managing IT infrastructures.,Network Management,http;https;tcp,Altiris Client Management Suite 7.1,6/28/2011,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -2021,Q_PROTO_ALWAKEELNEWS,alwakeelnews,,Alwakeelnews,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1834,Q_PROTO_ALWATANVOICE,alwatanvoice,,Alwatanvoice,Palestinian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -968,Q_PROTO_AMAZON,amazon,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the generic http trafic to Amazon services.,Web,http;https;ssl,20121025,PC-Windows-Browser-20131221 (2013-12-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1183,Q_PROTO_AMAZON_AWS,amazon_aws,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the http trafic coming from the Amazon content delivery network.,Web,http;https;ssl,20121025,PC-Linux-BasicTest-20131003 (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1167,Q_PROTO_AMAZON_MP3,amazon_mp3,,Amazon MP3,Amazon MP3 is an online music store owned and operated by Amazon.com.,Web,http;https,20120530,PC-Windows-Browser-20120619 (2012-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1240,Q_PROTO_AMAZON_VIDEO,amazon_video,,Amazon Video,Amazon Video is an online video on demand service owned and operated by Amazon.com.,Web,http;https;rtmp;ssl,20130620,PC-Windows-Browser-20130701 (2013-07-01),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1835,Q_PROTO_AMBEBI,ambebi,,Ambebi,Georgian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1312,Q_PROTO_AMEBA,ameba,,Ameba,Japanese web portal for teenagers,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -969,Q_PROTO_AMERICANEXPRESS,americanexpress,,americanexpress,This protocol plug-in classifies the http traffic to the host americanexpress.com. It also classifies the ssl traffic to the Common Name americanexpress.com.,Web,http;https;ssl,20120930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -358,Q_PROTO_AMIE_STREET,amie_street,,Amie street,This protocol plug-in classifies the http traffic to the host amiestreet.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2021,Q_PROTO_ALWAKEELNEWS,alwakeelnews,,Alwakeelnews.com,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1834,Q_PROTO_ALWATANVOICE,alwatanvoice,,Alwatanvoice.com,Palestinian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +968,Q_PROTO_AMAZON,amazon,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the generic http trafic to Amazon services.,Web,http;https;ssl,PC-Windows-Browser-www.amazon.com (2012-10-25);Windows Phone-Windows Phone OS-Amazon 2.2.82.13 (2014-02-25),BlackBerry-BlackBerry OS-10.2.1.195-Search for Amazon-1.4.8 (2014-02-25);Mobile-Android-4.2.1-Amazon-2.9.1 (2014-02-25);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-26);Windows Phone-Windows Phone OS-8-Amazon Mobile-2.2.82.13 (2014-02-25);iPhone-iOS-7.0.6-Amazon-3.2.1 (2014-02-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1183,Q_PROTO_AMAZON_AWS,amazon_aws,,Amazon Web Services/Cloudfront CDN,This protocol plug-in classifies the http trafic coming from the Amazon content delivery network.,Web,http;https;ssl,20121025,PC-Linux-BasicTest (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1167,Q_PROTO_AMAZON_MP3,amazon_mp3,,Amazon MP3,Amazon MP3 is an online music store owned and operated by Amazon.com.,Web,http;https,20120530,PC-Windows-Firefox (2012-06-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1240,Q_PROTO_AMAZON_VIDEO,amazon_video,,Amazon Video,Amazon Video is an online video on demand service owned and operated by Amazon.com.,Web,http;https;rtmp;ssl,20130620,PC-Windows-Firefox (2013-07-01),,x,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1835,Q_PROTO_AMBEBI,ambebi,,Ambebi.ge,Georgian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1312,Q_PROTO_AMEBA,ameba,,Ameba.jp,Japanese web portal for teenagers,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +969,Q_PROTO_AMERICANEXPRESS,americanexpress,,AmericanExpress.com,This protocol plug-in classifies the http traffic to the host americanexpress.com. It also classifies the ssl traffic to the Common Name americanexpress.com.,Web,http;https;ssl,20120930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +358,Q_PROTO_AMIE_STREET,amie_street,,AmieStreet.com,This protocol plug-in classifies the http traffic to the host amiestreet.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 9,Q_PROTO_AMQP,amqp,,Advance Message Queuing Protocol,AMQP (Advanced Message Queuing Protocol) is an open standard application layer protocol for message-oriented middleware,Middleware,tcp,0.8;0.9,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1702,Q_PROTO_ANIMEBW,animebw,,Animebw,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -359,Q_PROTO_ANOBII,anobii,,aNobii,This protocol plug-in classifies the http traffic to the host anobii.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -970,Q_PROTO_ANSWERS,answers,,answers,This protocol plug-in classifies the http traffic to the host answers.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1691,Q_PROTO_ANTS_P2P,ants_p2p,,Ants P2P,Ants is a distributed P2P client.,Peer to Peer,https;ssl,v1.6.0 Beta - Protocol 1.0.0,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -727,Q_PROTO_ANY_0HOP,any_0hop,,Any 0-hop protocol,The any_0hop protocol (Any 0-hop protocol) is found over the IP layer (IANA protocol number: 114).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1751,Q_PROTO_ANZ,anz,,Anz,"Offers home, car, and business loans, as well as internet banking, and insurance.",Web,http;https;ssl,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1345,Q_PROTO_ANZHI,anzhi,,Anzhi,Chinese mobile device games and forums.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -2022,Q_PROTO_APA,apa,,Apa,Azerbaijani news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1118,Q_PROTO_APNS,apns,,Apple Push Notification Service,Apple Push Notification Service is an Apple service which forwards notifications from the servers of third party applications to iOS devices.,Application Service,https;ssl,iOS 7.0.3,iPhone-iOS 7.0.3 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1702,Q_PROTO_ANIMEBW,animebw,,AnimeBW Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +359,Q_PROTO_ANOBII,anobii,,aNobii.com,This protocol plug-in classifies the http traffic to the host anobii.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +970,Q_PROTO_ANSWERS,answers,,Answers.com,This protocol plug-in classifies the http traffic to the host answers.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1691,Q_PROTO_ANTS_P2P,ants_p2p,,ANts P2P client,Ants is a distributed P2P client.,Peer to Peer,https;ssl,v1.6.0 Beta - Protocol 1.0.0,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +727,Q_PROTO_ANY_0HOP,any_0hop,,Any 0-hop,The any_0hop protocol (Any 0-hop protocol) is found over the IP layer (IANA protocol number: 114).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1751,Q_PROTO_ANZ,anz,,Australia and New Zealand Banking Group,"Offers home, car, and business loans, as well as internet banking, and insurance.",Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1345,Q_PROTO_ANZHI,anzhi,,Anzhi.com,Chinese mobile device games and forums.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +2022,Q_PROTO_APA,apa,,APA.az,Azerbaijani news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1118,Q_PROTO_APNS,apns,,Apple Push Notification Service,Apple Push Notification Service is an Apple service which forwards notifications from the servers of third party applications to iOS devices.,Application Service,https;ssl,iPhone-iOS 7.0.3,iPhone-iOS-7.0.3-iMessage (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, 10,Q_PROTO_APOLLO,apollo,,Apollo Domain:XEROX,Apollo is the routing protocol implemented natively in Apollo workstations.,Routing,8021q;eth;snap,Apollo v1,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -2082,Q_PROTO_APOLLO_LV,apollo_lv,,Apollo.lv,Latvian news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1346,Q_PROTO_APPCHINA,appchina,,Appchina,Chinese Android application market.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -306,Q_PROTO_APPLE,apple,,Apple,This protocol plug-in classifies the http traffic to the host www.apple.com. It also classifies the ssl traffic to the Common Name apple.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1688,Q_PROTO_APPLE_AIRPLAY,apple_airplay,,airplay,Apple airplay is a protocol for display picture and video to a connected tv from a device connected to the same private network,Audio/Video,http;https,Airplay 160.10,Mac-MacOS-Reflector-1.5.4 (2013-10-04);PC-Windows-AirServer-1.9.1.0 (2013-10-04);PC-Windows-Reflector-1.2.6 (2013-10-04),,x,,,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +2082,Q_PROTO_APOLLO_LV,apollo_lv,,Apollo.lv,Latvian news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1346,Q_PROTO_APPCHINA,appchina,,APPChina.com,Chinese Android application market.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +306,Q_PROTO_APPLE,apple,,Apple.com,This protocol plug-in classifies the http traffic to the host www.apple.com. It also classifies the ssl traffic to the Common Name apple.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1688,Q_PROTO_APPLE_AIRPLAY,apple_airplay,,Apple Airplay,Apple airplay is a protocol for display picture and video to a connected tv from a device connected to the same private network,Audio/Video,http;https,Airplay 160.10,Mac-Mac OS-Reflector-1.5.4 (2013-10-04);PC-Windows-AirServer-1.9.1.0 (2013-10-04);PC-Windows-Reflector-1.2.6 (2013-10-04),,x,,,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, 946,Q_PROTO_APPLE_AIRPORT,apple_airport,,Apple Airport,Apple Airport is a protocol aiming to configure a wireless device.,Web,http;https;tcp,Apple Airport,10/24/2011,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, -1689,Q_PROTO_APPLE_AIRPRINT,apple_airprint,,Apple AirPrint,Apple Airprint is a network printing feature for Apple systems. It's based on the Dns Service Discovery protocol and IPP(needs URF format support).,Printer,,ios 6,Mac-MacOS-Printopia-2.1.10 (2013-10-04),x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1799,Q_PROTO_APPLE_HLS,apple_hls,,Apple HTTP Live Streaming,Apple implementation of the HTTP Live Streaming IETF draft. Used on Apple iOS devices.,Audio/Video,http;https,"draft-pantos-http-live-streaming-11,iOS 3.x and more",PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1500,Q_PROTO_APPLE_MAPS,apple_maps,,Apple Maps,Apple Maps is a proprietary map application for iOS 6 devices.,Web,http;https,iOS 6.0,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1481,Q_PROTO_APPLE_SIRI,apple_siri,,Apple SIRI,Advanced voice recognition system used on some Apple iPhone devices.,Web,https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -563,Q_PROTO_APPLE_UPDATE,apple_update,,Apple Update,Apple_update is the protocol used for apple softwares updates.,Web,http;https,Mac OS Leopard v10.5;Mac OS Snow Leopard v10.6;Windows 7,PC-Windows-Quick Time update to 7.7.4 (2013-10-04);PC-iTunes-Dashboard update to 3.0 (2013-10-04),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1347,Q_PROTO_APPLEDAILY,appledaily,,Appledaily,Taiwanese news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1689,Q_PROTO_APPLE_AIRPRINT,apple_airprint,,Apple AirPrint,Apple Airprint is a network printing feature for Apple systems. It's based on the Dns Service Discovery protocol and IPP(needs URF format support).,Printer,,ios 6,Mac-Mac OS-Printopia-2.1.10 (2013-10-04),x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +1799,Q_PROTO_APPLE_HLS,apple_hls,,Apple HTTP Live Streaming,Apple implementation of the HTTP Live Streaming IETF draft. Used on Apple iOS devices.,Audio/Video,http;https,"draft-pantos-http-live-streaming-11,iOS 3.x and more",PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1500,Q_PROTO_APPLE_MAPS,apple_maps,,Apple Maps,Apple Maps is a proprietary map application for iOS 6 devices.,Web,http;https,iOS 6.0,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1481,Q_PROTO_APPLE_SIRI,apple_siri,,Apple SIRI,Advanced voice recognition system used on some Apple iPhone devices.,Web,https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +563,Q_PROTO_APPLE_UPDATE,apple_update,,Apple Update,Apple_update is the protocol used for apple softwares updates.,Web,http;https,Mac-Mac OS 10.5-Apple Software Update;Mac-Mac OS 10.6-Apple Software Update;PC-Windows 7-Apple Software Update,PC-Windows-7-QuickTime-7.7.5 (2014-02-28);PC-Windows-7-iTunes-11.1.5 (2014-02-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +1347,Q_PROTO_APPLEDAILY,appledaily,,AppleDaily.com.tw,Taiwanese news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 566,Q_PROTO_APPLEJUICE,applejuice,,AppleJuice,AppleJuice is a peer-to-peer file exchange protocol similar to E-Donkey.,Peer to Peer,tcp,0.31,4/16/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1348,Q_PROTO_APPSHOPPER,appshopper,,Appshopper,"Mac Apps, Mac App Store, iPad, iPhone and iPod touch app store listings, news, and price drops.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1106,Q_PROTO_APPSTORE,appstore,,Apple App Store,The Apple App Store is a digital application distribution platform for iOS developed and maintained by Apple Inc.,Application Service,http;https;ssl,20120412,iPhone-iOS7.0.4-20140113 (2014-01-13),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1836,Q_PROTO_APROD,aprod,,Aprod,Hungarian free classifieds website,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -564,Q_PROTO_ARCHIVE,archive,,archive,"Archive.org is building a digital library of Internet sites and other cultural artifacts in digital form. Like a paper library, Archive.org provides free access to researchers, historians, scholars, and the general audience.",Web,http;https;ssl,20110913,PC-Windows-Browser-20110913 (2011-09-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -272,Q_PROTO_ARES,ares,,Ares Protocol,Ares is a peer-to-peer protocol.,Peer to Peer,socks4;socks5;spid;tcp;udp,2.2.5.3049,PC-Windows-AresGalaxy2.2.5.3049 (2013-12-12),,,,x,ares,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1348,Q_PROTO_APPSHOPPER,appshopper,,AppShopper.com,"Mac Apps, Mac App Store, iPad, iPhone and iPod touch app store listings, news, and price drops.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1106,Q_PROTO_APPSTORE,appstore,,Apple App Store,The Apple App Store is a digital application distribution platform for iOS developed and maintained by Apple Inc.,Application Service,http;https;ssl,PC-Windows (2014-01-13);iPhone-iOS 7.0.4 (2014-01-13),PC-Windows-7-Chrome-32.0.1700.107 (2014-02-05);iPhone-iOS-7.0.4 (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1836,Q_PROTO_APROD,aprod,,Aprod.hu,Hungarian free classifieds website,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2187,Q_PROTO_ARABIAWEATHER,arabiaweather,,Arabiaweather,Jordanian meteorological portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +564,Q_PROTO_ARCHIVE,archive,,Archive.org,"Archive.org is building a digital library of Internet sites and other cultural artifacts in digital form. Like a paper library, Archive.org provides free access to researchers, historians, scholars, and the general audience.",Web,http;https;ssl,20110913,PC-Windows-Chrome (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +272,Q_PROTO_ARES,ares,,Ares,Ares is a peer-to-peer protocol.,Peer to Peer,socks4;socks5;spid;tcp;udp,PC-Linux ubuntu 12.04.1 LTS-ares 2.2.4.3048 (2014-02-27),PC-Linux-Ares Galaxy-2.2.4.3048 (2014-03-04);PC-Windows-Ares Galaxy-2.2.6.3051 (2014-03-03),,,,x,ares,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 608,Q_PROTO_ARGUS,argus,,ARGUS,The argus protocol (ARGUS) is found over the IP layer (IANA protocol number: 13).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 609,Q_PROTO_ARIS,aris,,ARIS,The aris protocol (ARIS) is found over the IP layer (IANA protocol number: 104).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -971,Q_PROTO_ARMORGAMES,armorgames,,armorgames,This protocol plug-in classifies the http traffic to the host armorgames.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -11,Q_PROTO_ARP,arp,,Adress Resolution Protocol,The ARP protocol is used to determine the MAC Address of a PC for which the IP address is known.,Network Service,8021q;eth;gre;llc;snap,ARP IP v4,39633 (2008-07-04),x,,,,,,,x,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1192,Q_PROTO_ASIAE,asiae,,Asiae,This protocol plug-in classifies the http traffic to the host asiae.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1703,Q_PROTO_ASIANDVDCLUB,asiandvdclub,,Asiandvdclub,Bittorrent tracker search engine,Peer to Peer,http;https;ssl,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -283,Q_PROTO_ASK,ask,,Ask,This protocol plug-in classifies the http traffic to the host .ask.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2083,Q_PROTO_ASK_FM,ask_fm,,Ask.fm,International Social network,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -360,Q_PROTO_ASMALLWORLD,asmallworld,,ASmallWorld,This protocol plug-in classifies the http traffic to the host asmallworld.net.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2010,Q_PROTO_ASPROXY,asproxy,,ASProxy,"ASProxy is a free and open-source web proxy which allows the user to surf the net anonymously. This plug-in classifies the usage of this proxy for web browsing, as a fallback to other recognized applications/protocols.",Tunneling,http;https,ASProxy Server 5.5.0,PC-Windows-5.5.0 (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +971,Q_PROTO_ARMORGAMES,armorgames,,Armorgames.com,This protocol plug-in classifies the http traffic to the host armorgames.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +2156,Q_PROTO_ARMORGAMES_PLAY,armorgames_play,,Armorgames Game Play,"This signature detects requests to play games on ArmorGames.com, an on-line, flash-based video game site. Users can play simple video games for free.",Web,http;https,20110930,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +11,Q_PROTO_ARP,arp,,Address Resolution Protocol,The ARP protocol is used to determine the MAC Address of a PC for which the IP address is known.,Network Service,8021q;eth;gre;llc;snap,ARP IP v4,7/4/2008,x,,,,,,,x,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1192,Q_PROTO_ASIAE,asiae,,Asiae.co.kr,This protocol plug-in classifies the http traffic to the host asiae.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1703,Q_PROTO_ASIANDVDCLUB,asiandvdclub,,AsianDVDClub.org,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +283,Q_PROTO_ASK,ask,,Ask.com,This protocol plug-in classifies the http traffic to the host .ask.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +2083,Q_PROTO_ASK_FM,ask_fm,,Ask.fm,International Social network,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +360,Q_PROTO_ASMALLWORLD,asmallworld,,ASmallWorld.net,This protocol plug-in classifies the http traffic to the host asmallworld.net.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +2010,Q_PROTO_ASPROXY,asproxy,,ASProxy,"ASProxy is a free and open-source web proxy which allows the user to surf the net anonymously. This plug-in classifies the usage of this proxy for web browsing, as a fallback to other recognized applications/protocols.",Tunneling,http;https,ASProxy Server 5.5.0,PC-Windows-ASProxy-5.5.0 (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x 12,Q_PROTO_ATALK,atalk,,AppleTalk,"The AppleTalk Protocol Suite implements services for routing, file transfer, printer sharing and emails in Apple environments.",Network Service,8021q;eth;gre;snap,AppleTalk v60.0a6,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -361,Q_PROTO_ATHLINKS,athlinks,,Athlinks,This protocol plug-in classifies the http traffic to the host athlinks.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2023,Q_PROTO_ATLASINFO,atlasinfo,,Atlasinfo,Mauritanian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -972,Q_PROTO_ATT,att,,att,This protocol plug-in classifies the http traffic to the host att.com. It also classifies the ssl traffic to the Common Name att.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1322,Q_PROTO_ATWIKI,atwiki,,Atwiki,Japanese web site design service and wiki hosting,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1229,Q_PROTO_AUCTION,auction,,Auction,This protocol plug-in classifies the http traffic to the host www.auction.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -973,Q_PROTO_AUFEMININ,aufeminin,,aufeminin,This protocol plug-in classifies the http traffic to the host aufeminin.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1334,Q_PROTO_AUONE,auone,,Auone,Multi services web portal owned by KDDI,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -363,Q_PROTO_AVATARS_UNITED,avatars_united,,Avatars united,This protocol plug-in classifies the http traffic to the host avatarsunited.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2024,Q_PROTO_AVAZ,avaz,,Avaz,Croatian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1755,Q_PROTO_AVG,avg,,AVG,Antivirus and security software products for home and business users.,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +361,Q_PROTO_ATHLINKS,athlinks,,Athlinks.com,This protocol plug-in classifies the http traffic to the host athlinks.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2023,Q_PROTO_ATLASINFO,atlasinfo,,Atlasinfo.info,Mauritanian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +972,Q_PROTO_ATT,att,,ATT.com (AT&T),This protocol plug-in classifies the http traffic to the host att.com. It also classifies the ssl traffic to the Common Name att.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1322,Q_PROTO_ATWIKI,atwiki,,Atwiki.jp,Japanese web site design service and wiki hosting,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1229,Q_PROTO_AUCTION,auction,,Auction.co.kr,This protocol plug-in classifies the http traffic to the host www.auction.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +973,Q_PROTO_AUFEMININ,aufeminin,,Aufeminin.com,This protocol plug-in classifies the http traffic to the host aufeminin.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1334,Q_PROTO_AUONE,auone,,Auone.jp,Multi services web portal owned by KDDI,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +363,Q_PROTO_AVATARS_UNITED,avatars_united,,AvatarsUnited.com,This protocol plug-in classifies the http traffic to the host avatarsunited.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2024,Q_PROTO_AVAZ,avaz,,Avaz.ba,Croatian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1755,Q_PROTO_AVG,avg,,AVG.com,Antivirus and security software products for home and business users.,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 714,Q_PROTO_AVG_UPDATE,avg_update,,Avg Update,Avg_update is the protocol used for AVG softwares updates.,Web,http;https,AVG Antivirus 2011,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, 604,Q_PROTO_AVIRA_UPDATE,avira_update,,Avira Update,Avira_update is the protocol used for Avira softwares updates.,Web,http;https,Avira AntiVir Premium V10,3/14/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1800,Q_PROTO_AVITO_MA,avito_ma,,Avito.ma,Free Moroccan classified ads,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1801,Q_PROTO_AVITO_RU,avito_ru,,Avito.ru,Free russian classified ads,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -353,Q_PROTO_AVOIDR,avoidr,,Avoidr,This protocol plug-in classifies the http traffic to the host avoidr.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1837,Q_PROTO_AVTO,avto,,Avto,Slovenian vehicle related classifieds,Web,http;https,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1800,Q_PROTO_AVITO_MA,avito_ma,,Avito.ma,Free Moroccan classified ads,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1801,Q_PROTO_AVITO_RU,avito_ru,,Avito.ru,Free russian classified ads,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +353,Q_PROTO_AVOIDR,avoidr,,Avoidr.com,This protocol plug-in classifies the http traffic to the host avoidr.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +1837,Q_PROTO_AVTO,avto,,Avto.net,Slovenian vehicle related classifieds,Web,http;https,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 723,Q_PROTO_AX25,ax25,,AX.25 Frames,The ax25 protocol (AX.25 Frames) is found over the IP layer (IANA protocol number: 93).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1509,Q_PROTO_AXIFILE,axifile,,Axifile,AXifile is a file sharing service. ( http://www.axifile.com ),Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1838,Q_PROTO_AZET,azet,,Azet,Slovak web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1839,Q_PROTO_B92,b92,,B92,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -763,Q_PROTO_BABELGUM,babelgum,,Babelgum,This protocol plug-in classifies the http traffic to the host babelgum.com.,Audio/Video,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -364,Q_PROTO_BABYCENTER,babycenter,,Babycenter,This protocol plug-in classifies the http traffic to the host babycenter.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1349,Q_PROTO_BABYHOME,babyhome,,Babyhome,"Taiwanese pregnancy and parenting information, albums and parenting diaries.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1766,Q_PROTO_BABYLON,babylon,,Babylon,Babylon is a leading global provider of language and search solutions,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1350,Q_PROTO_BACKPACKERS,backpackers,,Backpackers,"Taiwanese most popular tourist site, backpacking forum, cheap flights parity Reservation parity.",Web,http;https,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -586,Q_PROTO_BADONGO,badongo,,Badongo,"Badongo is an online solution to store, send and share files",Web,http;https,20110111,2/24/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -365,Q_PROTO_BADOO,badoo,,badoo,Badoo is a dating oriented social networking website.,Instant Messaging,http;https;ssl,20131010,PC-Windows-Browser-20131010 (2013-10-10),,x,,,,,,,,,,,,,,x,x,,,,x,,,,,,,,,,,,,,,, -548,Q_PROTO_BAIDU,baidu,,baidu,"Baidu is a Chinese search engine for websites, audio files and images.",Web,conduit;http;https;ssl,v5.0.1 (iOS);v5.0 (Android);20140110,Mobile-Android-App5.0 (2014-01-15);PC-Windows-Browser-20140110 (2014-01-10);iPhone-iOS-App5.0.1 (2014-01-15),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,x,,,,,,,,,, -1510,Q_PROTO_BAIDU_HI_GAMES,baidu_hi_games,,Baidu hi games,"CHinese online game site, Flash and html5 based. ( http://youxi.baidu.com )",Web,baidu,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1464,Q_PROTO_BAIDU_PLAYER,baidu_player,,Baidu Player,"BaiduPlayer is a video player that can play local, online and OnDemand videos.",Audio/Video,http;https;ssl,2.5.1.17-net-player;1.19.0.159-browserZ-player,PC-Linux-Player-1.19.0.68 (2013-07-02),,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -1351,Q_PROTO_BAIKE,baike,,Baike,Interactive encyclopedia online encyclopedia based on the Chinese Wikipedia.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1840,Q_PROTO_BALKANWEB,balkanweb,,Balkanweb,Albanian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1841,Q_PROTO_BANGLANEWS24,banglanews24,,Banglanews24,Bangladeshi news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2025,Q_PROTO_BANKMELLAT,bankmellat,,Bankmellat,Iranian Banking website,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1352,Q_PROTO_BAOFENG,baofeng,,Baofeng,Chinese video streaming portal.,Audio/Video,http;https;tcp,5.25.0613.1111-win7,PC-Windows-Baofeng-5.25.0613.1111 (2013-07-03),,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -3,Q_PROTO_BASE,base,,TD virtual protocol,"Base is a virtual protocol, specific to DPI, that encapsulates all other protocols. It contains fundamental protocol attributes such as time characteristics.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1754,Q_PROTO_BBC,bbc,,BBC,The BBC Homepage providing News and Broadcast,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1509,Q_PROTO_AXIFILE,axifile,,AxiFile.com,AXifile is a file sharing service. ( http://www.axifile.com ),Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1838,Q_PROTO_AZET,azet,,Azet.sk,Slovak web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1839,Q_PROTO_B92,b92,,B92.net,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +763,Q_PROTO_BABELGUM,babelgum,,Babelgum.com,This protocol plug-in classifies the http traffic to the host babelgum.com.,Audio/Video,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +364,Q_PROTO_BABYCENTER,babycenter,,BabyCenter.com,This protocol plug-in classifies the http traffic to the host babycenter.com.,Web,http;https;rtmp;ssl,PC-Windows-Browser-www.babycenter.com (2014-02-26);Mobile-Android-My Baby Today 1.2.0 (2014-02-25);iPhone-iOS-My Baby Today 1.6.2 (2014-02-25),Mobile-Android-4.2.1-My Baby Today-1.2.0 (2014-02-25);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-26);iPhone-iOS-7.0.6-My Baby Today-1.6.2 (2014-02-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1349,Q_PROTO_BABYHOME,babyhome,,BabyHome.com.tw,"Taiwanese pregnancy and parenting information, albums and parenting diaries.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1766,Q_PROTO_BABYLON,babylon,,Babylon.com,Babylon is a leading global provider of language and search solutions,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1350,Q_PROTO_BACKPACKERS,backpackers,,Backpackers.com.tw,"Taiwanese most popular tourist site, backpacking forum, cheap flights parity Reservation parity.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +586,Q_PROTO_BADONGO,badongo,,Badongo.com,"Badongo is an online solution to store, send and share files",Web,http;https,20110111,2/24/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +365,Q_PROTO_BADOO,badoo,,Badoo.com,Badoo is a dating oriented social networking website.,Instant Messaging,http;https;ssl,PC-Windows-Browser-badoo.com (2013-10-10),PC-Windows-7-Chrome-31.0.1650.63 (2014-01-16);PC-Windows-7-Chrome-31.0.1650.63-Badoo-0.1.166 (2014-01-16);iPhone-iOS-7.0.4-Badoo-2.4.1 (2014-01-14),,x,,,,,,,,,,,,,,x,x,,,,x,,,,,,,,,,,,,,,, +548,Q_PROTO_BAIDU,baidu,,Baidu.com,"Baidu is a Chinese search engine for websites, audio files and images.",Web,conduit;http;https;ssl,PC-Windows-Browser-www.baidu.com (2014-01-10);iPhone-iOS-Baidu 5.0.1;Mobile-Android-Baidu 5.0,Mobile-Android-Baidu-5.1 (2014-02-06);PC-Windows-7-Baidu-2.0(639) (2014-02-05);PC-Windows-7-Baidu-2.0(639)-CN (2014-02-05);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-05);Windows Phone-Windows Phone OS-Baidu-4.5.0.0 (2014-02-24);iPhone-iOS-Baidu-5.0.1 (2014-01-15),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,x,,,,,,,,,, +1510,Q_PROTO_BAIDU_HI_GAMES,baidu_hi_games,,Baidu Games (youxi.baidu.com),"CHinese online game site, Flash and html5 based. ( http://youxi.baidu.com )",Web,baidu,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1464,Q_PROTO_BAIDU_PLAYER,baidu_player,,Baidu Player,"BaiduPlayer is a video player that can play local, online and OnDemand videos.",Audio/Video,http;https;ssl,2.5.1.17-net-player;1.19.0.159-browserZ-player,PC-Linux-Baidu Player-1.19.0.68 (2013-07-02),,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +1351,Q_PROTO_BAIKE,baike,,Baike.com,Interactive encyclopedia online encyclopedia based on the Chinese Wikipedia.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1840,Q_PROTO_BALKANWEB,balkanweb,,BalkanWeb.com,Albanian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1841,Q_PROTO_BANGLANEWS24,banglanews24,,Banglanews24.com,Bangladeshi news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2025,Q_PROTO_BANKMELLAT,bankmellat,,Bankmellat.ir,Iranian Banking website,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1352,Q_PROTO_BAOFENG,baofeng,,Baofeng.com,Chinese video streaming portal.,Audio/Video,http;https;tcp,5.25.0613.1111-win7,PC-Windows-Baofeng-5.25.0613.1111 (2013-07-03),,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +3,Q_PROTO_BASE,base,,Base virtual protocol,"Base is a virtual protocol, specific to DPI, that encapsulates all other protocols. It contains fundamental protocol attributes such as time characteristics.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1754,Q_PROTO_BBC,bbc,,BBC.co.uk,The BBC Homepage providing News and Broadcast,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 736,Q_PROTO_BBC_PLAYER,bbc_player,,BBC Player,BBC Player is an in-browser live video streaming service.,Audio/Video,http;https;rtmp;ssl,20120718,10/12/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1557,Q_PROTO_BBM,bbm,,BlackBerry Messenger,BBM is the messenger/voip/Video protocol for blackberry. This plug-in classifies the audio and video data flows of BlackBerry Messenger.,Instant Messaging,stun,Blackberry 0S 10.2.x,Mobile-OSv10.2.0.424 (2014-01-06),x,,,,,,,,x,,,,,,,x,x,x,x,,,,,,,,x,,,,,,,,,, -1558,Q_PROTO_BBM_AUDIO,bbm_audio,,BlackBerry Messenger Audio,bbm_audio is the voip layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,Mobile-OSv10.2.0.424 (2014-01-06),x,,,,,,,,,,,,,,,,,x,,,,,,,,,x,,,,,,,,,, -1559,Q_PROTO_BBM_VIDEO,bbm_video,,BlackBerry Messenger Video,BBM_video is the video layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,Mobile-OSv10.2.0.424 (2014-01-06),x,,,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,, +1557,Q_PROTO_BBM,bbm,,BlackBerry Messenger,BBM is the messenger/voip/Video protocol for blackberry. This plug-in classifies the audio and video data flows of BlackBerry Messenger.,Instant Messaging,stun,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424 (2014-01-06),x,,,,,,,,x,,,,,,,x,x,x,x,,,,,,,,x,,,,,,,,,, +1558,Q_PROTO_BBM_AUDIO,bbm_audio,,BlackBerry Messenger Audio,bbm_audio is the voip layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424 (2014-01-06),x,,,,,,,,,,,,,,,,,x,,,,,,,,,x,,,,,,,,,, +1559,Q_PROTO_BBM_VIDEO,bbm_video,,BlackBerry Messenger Video,BBM_video is the video layer of the blackberry's messenger.,Instant Messaging,bbm,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424 (2014-01-06),x,,,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,, 610,Q_PROTO_BBN_RCC_MON,bbn_rcc_mon,,BBN RCC Monitoring,The bbn_rcc_mon protocol (BBN RCC Monitoring) is found over the IP layer (IANA protocol number: 10).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1154,Q_PROTO_BCA_CO,bca_co,,Bca.co,This protocol plug-in classifies the http traffic to the host bca.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1842,Q_PROTO_BDNEWS24,bdnews24,,Bdnews24,Bangladeshi news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1353,Q_PROTO_BEANFUN,beanfun,,Beanfun,"Taiwanese largest game portal, a single account to log into all games.",Web,http;https,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -268,Q_PROTO_BEBO,bebo,,Bebo,"Bebo is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20100311,PC-Windows7-Chrome (2013-03-01);iPhone-iOS-App1.2.2 (2013-03-01);iPhone-iOS-Safari (2013-03-01),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1511,Q_PROTO_BEBO_MAIL,bebo_mail,,Bebo mail,Bebo is a social networking website. ( www.bebo.com ),Web,bebo;google_ads,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1704,Q_PROTO_BEMANISO,bemaniso,,Bemaniso,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1162,Q_PROTO_BERNIAGA,berniaga,,Berniaga,This protocol plug-in classifies the http traffic to the host berniaga.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1974,Q_PROTO_BESTSHARING_COM,bestsharing_com,,bestsharing.com,Classifies web browsing on the bestsharing.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1512,Q_PROTO_BET365,bet365,,Bet365,ONline betting site ( http://www.bet365.com ),Web,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1154,Q_PROTO_BCA_CO,bca_co,,Bank BCA (bca.co.id),This protocol plug-in classifies the http traffic to the host bca.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1842,Q_PROTO_BDNEWS24,bdnews24,,Bdnews24.com,Bangladeshi news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1353,Q_PROTO_BEANFUN,beanfun,,Beanfun.com,"Taiwanese largest game portal, a single account to log into all games.",Web,http;https,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +268,Q_PROTO_BEBO,bebo,,Bebo.com,"Bebo is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20100311,PC-Windows-7-Chrome (2013-03-01);iPhone-iOS-Bebo-1.2.2 (2013-03-01);iPhone-iOS-Safari (2013-03-01),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1511,Q_PROTO_BEBO_MAIL,bebo_mail,,Bebo mail,Bebo is a social networking website. ( www.bebo.com ),Web,bebo;google_ads,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1704,Q_PROTO_BEMANISO,bemaniso,,Bemaniso Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1162,Q_PROTO_BERNIAGA,berniaga,,Berniaga.com,This protocol plug-in classifies the http traffic to the host berniaga.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1974,Q_PROTO_BESTSHARING_COM,bestsharing_com,,bestsharing.com,Classifies web browsing on the bestsharing.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1512,Q_PROTO_BET365,bet365,,Bet365.com,ONline betting site ( http://www.bet365.com ),Web,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 13,Q_PROTO_BGP,bgp,,Border Gateway Protocol,Border Gateway Protocol (BGP) is an inter Autonomous Systems routing protocol used by most ISPs.,Routing,tcp,BGP v1,12/8/2010,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -2026,Q_PROTO_BIDORBUY,bidorbuy,,Bidorbuy,South African auction and shopping website,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -366,Q_PROTO_BIGADDA,bigadda,,Bigadda,This protocol plug-in classifies the http traffic to the host bigadda.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1323,Q_PROTO_BIGLOBE_NE,biglobe_ne,,Biglobe,Japanese web portal and search site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -367,Q_PROTO_BIGTENT,bigtent,,BigTent,This protocol plug-in classifies the http traffic to the host bigtent.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -764,Q_PROTO_BIGUPLOAD,bigupload,,Bigupload,This protocol plug-in classifies the http traffic to the host bigupload.com. It also classifies the ssl traffic to the Common Name www3.bigupload.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -368,Q_PROTO_BIIP,biip,,Biip,This protocol plug-in classifies the http traffic to the host biip.no.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2027,Q_PROTO_BIKHIR,bikhir,,Bikhir,Moroccan classified ads,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2028,Q_PROTO_BILD,bild,,Bild,German news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -547,Q_PROTO_BING,bing,,Bing,This protocol is used for sending user queries to the Bing search engine.,Web,http;https;ssl,20121029,PC-Windows-20120306 (2012-03-06),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +2026,Q_PROTO_BIDORBUY,bidorbuy,,Bidorbuy.co.za,South African auction and shopping website,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +366,Q_PROTO_BIGADDA,bigadda,,BigAdda.com,This protocol plug-in classifies the http traffic to the host bigadda.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1323,Q_PROTO_BIGLOBE_NE,biglobe_ne,,Biglobe.ne.jp,Japanese web portal and search site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +367,Q_PROTO_BIGTENT,bigtent,,BigTent.com,This protocol plug-in classifies the http traffic to the host bigtent.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +764,Q_PROTO_BIGUPLOAD,bigupload,,Bigupload.com,This protocol plug-in classifies the http traffic to the host bigupload.com. It also classifies the ssl traffic to the Common Name www3.bigupload.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +368,Q_PROTO_BIIP,biip,,Biip.no,This protocol plug-in classifies the http traffic to the host biip.no.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +2027,Q_PROTO_BIKHIR,bikhir,,Bikhir.ma,Moroccan classified ads,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2028,Q_PROTO_BILD,bild,,Bild.de,German news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +547,Q_PROTO_BING,bing,,Bing.com,This protocol is used for sending user queries to the Bing search engine.,Web,http;https;ssl,20121029,PC-Windows (2012-03-06),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, 1692,Q_PROTO_BITCOIN,bitcoin,,Bitcoin client,Bitcoin is a distributed payment system.,Peer to Peer,tcp,0.8.3,10/2/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -593,Q_PROTO_BITDEFENDER_UPDATE,bitdefender_update,,BitDefender Update,BitDefender_update is the protocol used for BitDefender softwares updates.,Web,http;https;ssl,Bitdefender Antivirus 2011,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1705,Q_PROTO_BITENOVA,bitenova,,Bitenova,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1706,Q_PROTO_BITHQ,bithq,,Bithq,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1707,Q_PROTO_BITME,bitme,,Bitme,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1708,Q_PROTO_BITMETV,bitmetv,,Bitmetv,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1913,Q_PROTO_BITS,bits,,Background Intelligent Transfer Service (BITS),Background Intelligent Transfer Service (BITS) transfers files (downloads or uploads) between a client and server and provides progress information related to the transfers.,File Transfer,http;https,7.5,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,, -1709,Q_PROTO_BITSEDUCE,bitseduce,,Bitseduce,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1710,Q_PROTO_BITSHOCK,bitshock,,Bitshock,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1711,Q_PROTO_BITSOUP,bitsoup,,Bitsoup,Bittorrent tracker search engine,Peer to Peer,http;https;ssl,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -15,Q_PROTO_BITTORRENT,bittorrent,,Bittorrent Protocol,BitTorrent is a peer-to-peer protocol. [Note: bittorrent is also known as kadmelia.],Peer to Peer,http;https;soap;socks4;socks5;spid;tcp;udp;utp,PC-Windows-Vuze 5.0.0 (2013-06-29);PC-Windows-uTorrent 3.2.0 (2012-02-09);PC-Windows-BitComet 1.34 (2012-09-18);PC-Windows-Deluge 1.3.0 (2010-09-18);PC-Windows-qBittorrent 3.0.2 (2012-09-01);PC-Windows-BitTorrent 7.7.0 (2012-09-17),PC-Windows-BitLord 2.3.2-245 (2013-10-14);PC-Windows-Bitcomet v1.36 (2013-12-11);PC-Windows-Bittorrent v7.8.2 (2013-10-14);PC-Windows-Frostwire 5.6.6 (2013-10-14);PC-Windows-SoMud 1.3.8 (2013-10-18);PC-Windows-Transmission v2.13 (11501) (2012-10-19);PC-Windows-Vuze v5.1.0.0 (2013-10-16);PC-Windows-Xunlei (thunder) v7.9.10.4610 (2013-10-21);PC-Windows-qBittorrent 3.0.4 (2012-10-19);PC-Windows-uTorrent 3.3.2 (2013-10-15),,x,,x,BitTorrent,,,,x,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1712,Q_PROTO_BITVAULTTORRENT,bitvaulttorrent,,Bitvaulttorrent,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1701,Q_PROTO_BITWORLD,bitworld,,Bitworld,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -932,Q_PROTO_BLACKBERRY,blackberry,,BlackBerry,This protocol refers to all Blackberry mobile device communications over wifi. This includes the chat flows of BlackBerry Messenger.,Web,http;https;ssl,Blackberry OS 10.2.x,Mobile-OSv10.2.0.424 (2014-01-06),,x,,,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -1560,Q_PROTO_BLACKBERRY_LOCATE,blackberry_locate,,BlackBerry,This protocol refers to all Blackberry mobile device communications about localization over wifi.,Web,https;ssl,Blackberry OS 10.2.x,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1563,Q_PROTO_BLACKBERRY_UPDATE,blackberry_update,,BlackBerry OS Updates,This protocol classifies the Blackberry 10 family OS software updates.,Web,http;https,Blackberry 0S 10.2.x,Mobile-OSv10.2.0.424 (2014-01-06),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -369,Q_PROTO_BLACKPLANET,blackplanet,,BlackPlanet,This protocol plug-in classifies the http traffic to the host blackplanet.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1806,Q_PROTO_BLIC,blic,,Blic,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2029,Q_PROTO_BLICK,blick,,Blick,Swiss news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1168,Q_PROTO_BLIP_TV,blip_tv,,Blip.tv TV Series,This protocol plug-in classifies the http traffic to the host blip.tv.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1169,Q_PROTO_BLOCKBUSTER,blockbuster,,Blockbuster,This protocol plug-in classifies the http traffic to the host .blockbuster.com.,Audio/Video,http;https;ssl,20120530,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1843,Q_PROTO_BLOCKET,blocket,,Blocket,Swedish local classified ads,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1844,Q_PROTO_BLOG,blog,,Blog,Hungarian blog hosting website,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1163,Q_PROTO_BLOGDETIK,blogdetik,,Blogdetik,This protocol plug-in classifies the http traffic to the host blogdetik.com.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1796,Q_PROTO_BLOGFA,blogfa,,Blogfa,Persian Blog Hosting,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -974,Q_PROTO_BLOGGER,blogger,,blogger,This protocol plug-in classifies the http traffic to the host blogger.com.,Web,http;https;ssl,20131104,PC-Windows-Browser-20131104 (2013-11-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1320,Q_PROTO_BLOGIMG,blogimg,,Blogpark,Japanese blog site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -975,Q_PROTO_BLOGSPOT,blogspot,,blogspot,This protocol plug-in classifies the http traffic to the host blogspot.com.,Web,http;https,20131104,PC-Windows-Browser-20131104 (2013-11-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -370,Q_PROTO_BLOGSTER,blogster,,Blogster,This protocol plug-in classifies the http traffic to the host blogster.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -765,Q_PROTO_BLOKUS,blokus,,Blokus,This protocol plug-in classifies the http traffic to the host blokus.fr.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -893,Q_PROTO_BLOOMBERG,bloomberg,,Bloomberg,Bloomberg is a website about business and financial news.,Web,akamai;http;https;rtmp;ssl,20110526,5/30/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1279,Q_PROTO_BLUBSTER,blubster,,Blubster,"Blubster is a peer-to-peer music file sharing software. Blubster uses the Manolito protocol, therefore a part of its traffic is classified as Manolito.",Peer to Peer,http;https,3.1.1,PC-Windows-Blubster 3.1.1 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -976,Q_PROTO_BLUEJAYFILMS,bluejayfilms,,bluejayfilms,This protocol plug-in classifies the http traffic to the host bluejayfilms.webs.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1845,Q_PROTO_BLUEWIN,bluewin,,Bluewin,Swiss news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +593,Q_PROTO_BITDEFENDER_UPDATE,bitdefender_update,,BitDefender Update,BitDefender_update is the protocol used for BitDefender softwares updates.,Web,http;https;ssl,Bitdefender Antivirus 2011,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +1705,Q_PROTO_BITENOVA,bitenova,,Bitenova Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1706,Q_PROTO_BITHQ,bithq,,BitHQ Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1707,Q_PROTO_BITME,bitme,,BitMe Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1708,Q_PROTO_BITMETV,bitmetv,,BitMeTV Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1913,Q_PROTO_BITS,bits,,Background Intelligent Transfer Service,Background Intelligent Transfer Service (BITS) transfers files (downloads or uploads) between a client and server and provides progress information related to the transfers.,File Transfer,http;https,7.5,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,, +1709,Q_PROTO_BITSEDUCE,bitseduce,,BitSeduce Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1710,Q_PROTO_BITSHOCK,bitshock,,BitShock Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1711,Q_PROTO_BITSOUP,bitsoup,,Bitsoup Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +15,Q_PROTO_BITTORRENT,bittorrent,,BitTorrent,BitTorrent is a peer-to-peer protocol. [Note: bittorrent is also known as kadmelia.],Peer to Peer,http;https;soap;socks4;socks5;spid;tcp;udp;utp,PC-Windows-Vuze 5.1.0.0;PC-Windows-uTorrent 3.3.2;PC-Windows-BitComet 1.34;PC-Windows-Deluge 1.3.0;PC-Windows-qBittorrent 3.0.2;PC-Windows-BitTorrent 7.7.0;PC-Windows-SoMud 1.3.8;PC-Windows-Thunder 7.9.10.4610,Mac-Mac OS-BitLord-2.3.2 (2014-01-21);Mac-Mac OS-Bittorrent-7.4.1 build 29971 (2014-01-23);Mac-Mac OS-Frostwire-5.6.9 (2014-01-13);Mac-Mac OS-Vuze-5.2.0.0 (2014-01-14);Mac-Mac OS-uTorrent-1.8.4 build 29971 (2014-01-14);Mobile-Android-Frostwire-1.2.2 (2014-01-21);Mobile-Android-uTorrent-1.21.29 (2014-01-08);PC-Linux-Frostwire-5.6.5 (2014-01-23);PC-Linux-Vuze-4.3.0.6 (2014-01-22);PC-Linux-uTorrent-3.0-25053 (2014-01-22);PC-Windows-7-Bitcomet-1.36 (2013-12-30);PC-Windows-7-uTorrent-3.3.2 build 30446 (2013-12-30);PC-Windows-BitLord-2.3.2 (2013-10-14);PC-Windows-Bittorrent-7.8.2 (2013-10-14);PC-Windows-Frostwire-5.6.6 (2013-10-14);PC-Windows-SoMud-1.3.8 (2014-01-23);PC-Windows-Transmission-2.13 (2012-10-19);PC-Windows-Vuze-5.1.0.0 (2013-10-16);PC-Windows-Xunlei-7.9.10.4610 (2013-10-21);PC-Windows-qBittorrent-3.0.4 (2012-10-19),,x,,x,BitTorrent,,,,x,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, +2152,Q_PROTO_BITTORRENT_APPLICATION,bittorrent_application,,Bittorrent Apps,This signature detects the access to the BitTorrent Apps web ressources from the BitTorrent application.,Peer to Peer,bittorrent,PC-Windows-BitTorrent 7.x,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1712,Q_PROTO_BITVAULTTORRENT,bitvaulttorrent,,Bitvaulttorrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1701,Q_PROTO_BITWORLD,bitworld,,BitWorld Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +932,Q_PROTO_BLACKBERRY,blackberry,,BlackBerry.com,This protocol refers to all Blackberry mobile device communications over wifi. This includes the chat flows of BlackBerry Messenger.,Web,http;https;ssl,BlackBerry-BlackBerry OS 10.2,BlackBerry-BlackBerry OS-10.2.0.424 (2014-01-06),,x,,,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +1560,Q_PROTO_BLACKBERRY_LOCATE,blackberry_locate,,BlackBerry Locate,This protocol refers to all Blackberry mobile device communications about localization over wifi.,Web,https;ssl,Blackberry OS 10.2.x,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1563,Q_PROTO_BLACKBERRY_UPDATE,blackberry_update,,BlackBerry OS Updates,This protocol classifies the Blackberry 10 family OS software updates.,Web,http;https,Blackberry 0S 10.2.x,BlackBerry-BlackBerry OS-10.2.0.424 (2014-01-06),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +369,Q_PROTO_BLACKPLANET,blackplanet,,BlackPlanet.com,This protocol plug-in classifies the http traffic to the host blackplanet.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1806,Q_PROTO_BLIC,blic,,Blic.rs,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2029,Q_PROTO_BLICK,blick,,Blick.ch,Swiss news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1168,Q_PROTO_BLIP_TV,blip_tv,,Blip.tv TV Series,This protocol plug-in classifies the http traffic to the host blip.tv.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1169,Q_PROTO_BLOCKBUSTER,blockbuster,,Blockbuster.com,This protocol plug-in classifies the http traffic to the host .blockbuster.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1843,Q_PROTO_BLOCKET,blocket,,Blocket.se,Swedish local classified ads,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1844,Q_PROTO_BLOG,blog,,Blog.hu,Hungarian blog hosting website,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1163,Q_PROTO_BLOGDETIK,blogdetik,,BlogDetik.com,This protocol plug-in classifies the http traffic to the host blogdetik.com.,Web,http;https,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1796,Q_PROTO_BLOGFA,blogfa,,Blogfa.com,Persian Blog Hosting,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +974,Q_PROTO_BLOGGER,blogger,,Blogger.com,This protocol plug-in classifies the http traffic to the host blogger.com.,Web,http;https;ssl,PC-Windows-Browser-www.blogger.com (2013-11-04),PC-Windows-Internet Explorer (2013-11-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1320,Q_PROTO_BLOGIMG,blogimg,,Blogpark.jp,Japanese blog site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +975,Q_PROTO_BLOGSPOT,blogspot,,Blogspot.com,This protocol plug-in classifies the http traffic to the host blogspot.com.,Web,http;https,PC-Windows-Browser-www.blogspot.com (2013-11-04),PC-Windows-Internet Explorer (2013-11-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +370,Q_PROTO_BLOGSTER,blogster,,Blogster.com,This protocol plug-in classifies the http traffic to the host blogster.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +765,Q_PROTO_BLOKUS,blokus,,Blokus.fr,This protocol plug-in classifies the http traffic to the host blokus.fr.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +893,Q_PROTO_BLOOMBERG,bloomberg,,Bloomberg.com,Bloomberg is a website about business and financial news.,Web,akamai;http;https;rtmp;ssl,20110526,5/30/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1279,Q_PROTO_BLUBSTER,blubster,,Blubster,"Blubster is a peer-to-peer music file sharing software. Blubster uses the Manolito protocol, therefore a part of its traffic is classified as Manolito.",Peer to Peer,http;https,3.1.1,PC-Windows-Blubster-3.1.1 (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +976,Q_PROTO_BLUEJAYFILMS,bluejayfilms,,Bluejayfilms.webs.com,This protocol plug-in classifies the http traffic to the host bluejayfilms.webs.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1845,Q_PROTO_BLUEWIN,bluewin,,Bluewin.ch,Swiss news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1293,Q_PROTO_BMFF,bmff,,ISO Base Media File Format,"The ISO Base Media File Format, as described in ISO/IEC 14496-12:2008 (MPEG-4 Part 12).",Audio/Video,http;nba,ISO/IEC 14496/15444-12 (2008),,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, 611,Q_PROTO_BNA,bna,,BNA,The bna protocol (BNA) is found over the IP layer (IANA protocol number: 49).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1846,Q_PROTO_BOLHA,bolha,,Bolha,Slovenian local classified ads,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -371,Q_PROTO_BOLT,bolt,,Bolt,This protocol plug-in classifies the http traffic to the hosts bolt.com and bolt3.com.,Web,http;https,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1514,Q_PROTO_BONDISK,bondisk,,Bondisk,Site for downloading videos.,Peer to Peer,http;https,1.0.0.3,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -766,Q_PROTO_BONPOO,bonpoo,,Bonpoo,This protocol plug-in classifies the http traffic to the host bonpoo.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1354,Q_PROTO_BOOKS,books,,Books iRead,This protocol plug-in classifies the http traffic to the host weread.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -372,Q_PROTO_BOOKS_IREAD,books_iread,,Books iRead,This protocol plug-in classifies the http traffic to the host weread.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1713,Q_PROTO_BOOTYTAPE,bootytape,,Bootytape,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -767,Q_PROTO_BOX_NET,box_net,,Box.net,This protocol plug-in classifies the http traffic to the host .box.net. It also classifies the ssl traffic to the Common Names .box.net and .box.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1846,Q_PROTO_BOLHA,bolha,,Bolha.com,Slovenian local classified ads,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +371,Q_PROTO_BOLT,bolt,,Bolt.com - Bolt3.com,This protocol plug-in classifies the http traffic to the hosts bolt.com and bolt3.com.,Web,http;https,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1514,Q_PROTO_BONDISK,bondisk,,Bondisk.com,Site for downloading videos.,Peer to Peer,http;https,1.0.0.3,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +766,Q_PROTO_BONPOO,bonpoo,,Bonpoo.com,This protocol plug-in classifies the http traffic to the host bonpoo.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1354,Q_PROTO_BOOKS,books,,Books.com.tw,Taiwanese on-line books store.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +372,Q_PROTO_BOOKS_IREAD,books_iread,x,Books iRead,This protocol plug-in classified the http traffic to the host weread.com. Moved to flipkart.com/books service.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1713,Q_PROTO_BOOTYTAPE,bootytape,,BootyTape Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +767,Q_PROTO_BOX_NET,box_net,,Box.com,This protocol plug-in classifies the http traffic to the host .box.net. It also classifies the ssl traffic to the Common Names .box.net and .box.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 612,Q_PROTO_BR_SAT_MON,br_sat_mon,,Backroom SATNET Monitoring,The br_sat_mon protocol (Backroom SATNET Monitoring) is found over the IP layer (IANA protocol number: 76).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -769,Q_PROTO_BRIGHTTALK,brighttalk,,Brighttalk,This protocol plug-in classifies the http traffic to the host brighttalk.com. It also classifies the ssl traffic to the Common Name .brighttalk.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1714,Q_PROTO_BROWNTRACKER,browntracker,,Browntracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +769,Q_PROTO_BRIGHTTALK,brighttalk,,BrightTALK.com,This protocol plug-in classifies the http traffic to the host brighttalk.com. It also classifies the ssl traffic to the Common Name .brighttalk.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1714,Q_PROTO_BROWNTRACKER,browntracker,,Brown Tracker Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, 741,Q_PROTO_BSSAP,bssap,,BSS Application Part,BSSAP is a telephony protocol used in SS7 networks.,Telephony,sccp_ss7;sctp,BSSAP v1,3/23/2011,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,x,,,,,,,,,, -1802,Q_PROTO_BT_BT,bt_bt,,Bt.bt,Bhutan Telecom Limited (BTL) is the leading provider of telecommunications and Internet services in the Kingdom of Bhutan.,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1715,Q_PROTO_BT_CHAT,bt_chat,,BT Chat,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1803,Q_PROTO_BT_DK,bt_dk,,Bt.dk,Danish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1716,Q_PROTO_BT_WRZRU,bt_wrzru,,BT Wrzru,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1717,Q_PROTO_BTJUNKIE,btjunkie,,BT Junkie,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1193,Q_PROTO_BUDDYBUDDY,buddybuddy,x,BuddyBuddy,This protocol plug-in classified the http traffic to the host buddybuddy.co.kr.,Web,,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1194,Q_PROTO_BUGS,bugs,,Bugs,This protocol plug-in classifies the http traffic to the host bugs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -977,Q_PROTO_BUSINESSWEEK,businessweek,,businessweek,This protocol plug-in classifies the http traffic to the host businessweek.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1355,Q_PROTO_BUSINESSWEEKLY,businessweekly,,Businessweekly TW,"Weekly financial news, delivered every Thursday, providing industry information, enterprise Interviews, enterprise stories, financial news and other content.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1476,Q_PROTO_BUZZFEED,buzzfeed,,Buzzfeed,International news webportal.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -373,Q_PROTO_BUZZNET,buzznet,,Buzznet,This protocol plug-in classifies the http traffic to the host buzznet.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1802,Q_PROTO_BT_BT,bt_bt,,Bhutan Telecom (bt.bt),Bhutan Telecom Limited (BTL) is the leading provider of telecommunications and Internet services in the Kingdom of Bhutan.,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1715,Q_PROTO_BT_CHAT,bt_chat,,BT Chat Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1803,Q_PROTO_BT_DK,bt_dk,,Bt.dk,Danish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1716,Q_PROTO_BT_WRZRU,bt_wrzru,,BT Wrzru Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1717,Q_PROTO_BTJUNKIE,btjunkie,,BT Junkie Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1193,Q_PROTO_BUDDYBUDDY,buddybuddy,x,BuddyBuddy.co.kr,This protocol plug-in classified the http traffic to the host buddybuddy.co.kr.,Web,,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1194,Q_PROTO_BUGS,bugs,,Bugs.co.kr,This protocol plug-in classifies the http traffic to the host bugs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +977,Q_PROTO_BUSINESSWEEK,businessweek,,Businessweek.com,This protocol plug-in classifies the http traffic to the host businessweek.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1355,Q_PROTO_BUSINESSWEEKLY,businessweekly,,Businessweekly.com.tw,"Weekly financial news, delivered every Thursday, providing industry information, enterprise Interviews, enterprise stories, financial news and other content.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1476,Q_PROTO_BUZZFEED,buzzfeed,,BuzzFeed.com,International news webportal.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +373,Q_PROTO_BUZZNET,buzznet,,Buzznet.com,This protocol plug-in classifies the http traffic to the host buzznet.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 16,Q_PROTO_BXML,bxml,,WAP Binary XML,The WAP Binary XML protocol defines an encoding scheme for the binary data used in WAP environments.,Wap,wsp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -352,Q_PROTO_BYPASSTHAT,bypassthat,,BypassThat,This protocol plug-in classifies the http traffic to the host bypassthat.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -2030,Q_PROTO_CAAK,caak,,Caak,Mongolian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1805,Q_PROTO_CAF,caf,,Caf,French National Fund for Family Allowances (Caisse d Allocation familiale),Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -374,Q_PROTO_CAFEMOM,cafemom,,Cafemom,This protocol plug-in classifies the http traffic to the host cafemom.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -979,Q_PROTO_CAM4,cam4,,cam4,This protocol plug-in classifies the http traffic to the host cam4.com.,Web,http;https,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -770,Q_PROTO_CAMPFIRE,campfire,,Campfire,This protocol plug-in classifies the http traffic to the host campfirenow.com. It also classifies the ssl traffic to the Common Name campfirenow.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -980,Q_PROTO_CAMZAP,camzap,,camzap,This protocol plug-in classifies the http traffic to the host camzap.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -981,Q_PROTO_CAPITALONE,capitalone,,capitalone,This protocol plug-in classifies the http traffic to the host capitalone.com. It also classifies the ssl traffic to the Common Name capitalone.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1289,Q_PROTO_CAPWAP,capwap,,Control And Provisioning of Wireless Access Points (CAPWAP),"CAPWAP stands for Control And Provisioning of Wireless Access Points. It is a standard, interoperable protocol that enables a controller to manage a collection of wireless access points.",Tunneling,udp,RFC 5415,Customer captures (2012-11-23),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -376,Q_PROTO_CARE2,care2,,Care2,This protocol plug-in classifies the http traffic to the host care2.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -982,Q_PROTO_CARTOONNETWORK,cartoonnetwork,,cartoonnetwork,This protocol plug-in classifies the http traffic to the host cartoonnetwork.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,x, -2031,Q_PROTO_CAS,cas,,Cas,Slovak news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +352,Q_PROTO_BYPASSTHAT,bypassthat,,BypassThat.com,This protocol plug-in classifies the http traffic to the host bypassthat.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +2030,Q_PROTO_CAAK,caak,,Caak.mn,Mongolian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1805,Q_PROTO_CAF,caf,,Caisse d'Allocations Familiales,French National Fund for Family Allowances (Caisse d Allocation familiale),Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +374,Q_PROTO_CAFEMOM,cafemom,,CafeMom.com,This protocol plug-in classifies the http traffic to the host cafemom.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +979,Q_PROTO_CAM4,cam4,,Cam4.com,This protocol plug-in classifies the http traffic to the host cam4.com.,Web,http;https,20110930,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +770,Q_PROTO_CAMPFIRE,campfire,,Campfire.com,This protocol plug-in classifies the http traffic to the host campfirenow.com. It also classifies the ssl traffic to the Common Name campfirenow.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +980,Q_PROTO_CAMZAP,camzap,,Campzap.com,This protocol plug-in classifies the http traffic to the host camzap.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +981,Q_PROTO_CAPITALONE,capitalone,,CapitalOne.com,This protocol plug-in classifies the http traffic to the host capitalone.com. It also classifies the ssl traffic to the Common Name capitalone.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1289,Q_PROTO_CAPWAP,capwap,,Control And Provisioning of Wireless Access Points,"CAPWAP stands for Control And Provisioning of Wireless Access Points. It is a standard, interoperable protocol that enables a controller to manage a collection of wireless access points.",Tunneling,udp,RFC 5415,11/23/2012,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +376,Q_PROTO_CARE2,care2,,Care2.com,This protocol plug-in classifies the http traffic to the host care2.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +982,Q_PROTO_CARTOONNETWORK,cartoonnetwork,,CartoonNetwork.com,This protocol plug-in classifies the http traffic to the host cartoonnetwork.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,x, +2031,Q_PROTO_CAS,cas,,CAS.sk,Slovak news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 613,Q_PROTO_CBT,cbt,,Core-based trees,The cbt protocol (Core-based trees) is found over the IP layer (IANA protocol number: 7).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -17,Q_PROTO_CCP,ccp,,Control Compression Protocol,The Compression Control Protocol (CCP) is responsible for configuring data compression algorithms on a point-to-point link.,Compression,ppp,RFC 1962,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -1463,Q_PROTO_CCTV_VOD,cctv_vod,,CCTV vod,VodCCTV provides a web on-line video and video on demand client for the CCTV Chinese television network.,Audio/Video,http;https;rtmp;udp,2.4.0.7,6/6/2013,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -983,Q_PROTO_CDISCOUNT,cdiscount,,cdiscount,This protocol plug-in classifies the http traffic to the host cdiscount.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2032,Q_PROTO_CDM,cdm,,Cdm,Montenegrin news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +17,Q_PROTO_CCP,ccp,,Compression Control Protocol,The Compression Control Protocol (CCP) is responsible for configuring data compression algorithms on a point-to-point link.,Compression,ppp,RFC 1962,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +1463,Q_PROTO_CCTV_VOD,cctv_vod,,VodCCTV,VodCCTV provides a web on-line video and video on demand client for the CCTV Chinese television network.,Audio/Video,http;https;rtmp;udp,2.4.0.7,6/6/2013,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +983,Q_PROTO_CDISCOUNT,cdiscount,,Cdiscount.com,This protocol plug-in classifies the http traffic to the host cdiscount.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2032,Q_PROTO_CDM,cdm,,CdM.me,Montenegrin news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 18,Q_PROTO_CDP,cdp,,Cisco Discovery Protocol,Cisco Discovery Protocol (CDP) is a layer 2 protocol used by Cisco network equipments to discover other Cisco network equipments present on a link.,Network Management,8021q;eth;gre;ppp;snap,CDP v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -377,Q_PROTO_CELLUFUN,cellufun,,Cellufun,This protocol plug-in classifies the http traffic to the host m.cellufun.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, -1718,Q_PROTO_CENTRAL_TORRENT,central_torrent,,Central Torrent,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1807,Q_PROTO_CENTRUM_CZ,centrum_cz,,Centrum.cz,Czech web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1808,Q_PROTO_CENTRUM_SK,centrum_sk,,Centrum.sk,Slovakian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +377,Q_PROTO_CELLUFUN,cellufun,,Cellufun.com,This protocol plug-in classifies the http traffic to the host m.cellufun.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, +1718,Q_PROTO_CENTRAL_TORRENT,central_torrent,,Central Torrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1807,Q_PROTO_CENTRUM_CZ,centrum_cz,,Centrum.cz,Czech web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1808,Q_PROTO_CENTRUM_SK,centrum_sk,,Centrum.sk,Slovakian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 256,Q_PROTO_CFT,cft,,Cross File Transfer,CFT (Cross File Transfer) is a file transfer software developed by Axway,File Server,tcp;x25,CFT v2.2,1/14/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -614,Q_PROTO_CFTP,cftp,,CFTP,The cftp protocol (CFTP) is found over the IP layer (IANA protocol number: 62).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1087,Q_PROTO_CGIPROXY,cgiproxy,,CGI Proxy,CGIProxy is a proxy software package. A CGI (Common Gateway Interface) Proxy is a proxy that appears as a web page allowing the user access to all sites through it.,Network Service,http;https,20111019,,,x,,,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, +614,Q_PROTO_CFTP,cftp,,Covert File Transfer Protocol,The cftp protocol (CFTP) is found over the IP layer (IANA protocol number: 62).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1087,Q_PROTO_CGIPROXY,cgiproxy,,CGIProxy,CGIProxy is a proxy software package. A CGI (Common Gateway Interface) Proxy is a proxy that appears as a web page allowing the user access to all sites through it.,Network Service,http;https,20111019,,,x,,,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, 19,Q_PROTO_CGMP,cgmp,,Cisco Group Management Protocol,Cisco Group Management Protocol (CGMP) limits the forwarding of IP multicast packets to only those ports associated with IP multicast clients.,Network Service,eth;gre;snap,CGMP v1;CGMP v2,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -771,Q_PROTO_CHANNEL4,channel4,,Channel4,This protocol plug-in classifies the http traffic to the host channel4.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +771,Q_PROTO_CHANNEL4,channel4,,Channel4.com,This protocol plug-in classifies the http traffic to the host channel4.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 615,Q_PROTO_CHAOS,chaos,,Chaos,The chaos protocol (Chaos) is found over the IP layer (IANA protocol number: 16).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -20,Q_PROTO_CHAP,chap,,PPP Challenge Handshake Authentication Protocol,The CHAP protocol is used to verify the identity of a peer on a point-to-point link.,Authentication,ppp,RFC 1994,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x -1567,Q_PROTO_CHAT_ON,chat_on,,ChatON,ChatON is a global mobile communication service introduced by Samsung Electronics.,Instant Messaging,http;https;ssl,"2.7.7 (iOS),3.2.137 (Android)",Mobile-Android-App3.2.137 (2014-01-10);iPhone-iOS7.0.4-App2.7.7 (2014-01-10),,x,,,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -1515,Q_PROTO_CHATROULETTE,chatroulette,,Chatroulette,Chatroulette is an online chat website. ( http://chatroulette.com ),Web,http;https;rtmp,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1356,Q_PROTO_CHINA_AIRLINES,china_airlines,,China Airlines,China-airlines booking site.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -984,Q_PROTO_CHINACOM,chinacom,,china.com.cn,This protocol plug-in classifies the http traffic to the host china.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -985,Q_PROTO_CHINACOMCN,chinacomcn,,china.com.cn,This protocol plug-in classifies the http traffic to the host china.com.cn.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1357,Q_PROTO_CHINANEWS,chinanews,,Chinanews,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1516,Q_PROTO_CHINAREN,chinaren,,Chinaren,Chinese social networking website for former classmates. ( class.chinaren.com ),Web,http;https;sohu,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1358,Q_PROTO_CHINATIMES,chinatimes,,Chinatimes,One of Taiwan top news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1249,Q_PROTO_CHINAZ,chinaz,,Chinaz,This protocol plug-in classifies the http traffic to the host chinaz.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1195,Q_PROTO_CHOSUN,chosun,,Chosun Daily,This protocol plug-in classifies the http traffic to the host chosun.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1230,Q_PROTO_CHOSUN_DAILY,chosun_daily,,Chosun Daily,This protocol plug-in classifies the http traffic to the host www.chosun.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -567,Q_PROTO_CHROME_UPDATE,chrome_update,,Chrome Update,Chrome Update is the protocol for the updates of the Google chrome browser.,Web,google_gen;http;https,30.0.1599.69,PC-Windows7-Chrome-30.0.1599.69 (2013-10-11),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1719,Q_PROTO_CINEMAGEDDON,cinemageddon,,Cinemageddon,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1474,Q_PROTO_CITRIX_ONLINE,citrix_online,,Citrix Online,On-line collaboration suite for small businesses.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -1196,Q_PROTO_CJ_MALL,cj_mall,,CJ mall,This protocol plug-in classifies the http traffic to the host cjmall.com. It also classifies the ssl traffic to the Common Name .cjmall.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1359,Q_PROTO_CK101,ck101,,Ck101,ck101 is one of the major forum sites in Taiwan.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2034,Q_PROTO_CLARIN,clarin,,Clarin,Argentinian news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1847,Q_PROTO_CLASIFICADOSONLINE,clasificadosonline,,Clasificadosonline,Puerto Rican classified ads,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -378,Q_PROTO_CLASSMATES,classmates,,Classmates,This protocol plug-in classifies the http traffic to the host classmates.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -902,Q_PROTO_CLEARCASE,clearcase,,clearcase,"ClearCase is a source control / configuration management tool from IBM's ""Rational""division",Thin Client,http;https,7.1.2,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1517,Q_PROTO_CLEARSPACE,clearspace,,JIve (formerly Clearspace),Enterprise collaboration and knowlegde management platform ( https://jiveon.com ),Web,http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -772,Q_PROTO_CLIP2NET,clip2net,,Clip2Net,This protocol plug-in classifies the http traffic to the host clip2net.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,x, -379,Q_PROTO_CLOOB,cloob,,Cloob,This protocol plug-in classifies the http traffic to the host cloob.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1445,Q_PROTO_CLOUDFLARE,cloudflare,,CloudFlare CDN,CloudFlare CDN is a content delivery network with advanced security and analytics features.,Web,http;https;ssl,20130315,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1471,Q_PROTO_CLOUDME,cloudme,,CloudMe,Free on-line file storage service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1518,Q_PROTO_CLUBBOX,clubbox,,Clubbox,Korean file sharing web site that requires installing a p2p client called zmlauncher.exe ( http://www.clubbox.co.kr ),Peer to Peer,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -986,Q_PROTO_CLUBIC,clubic,,clubic,This protocol plug-in classifies the http traffic to the host clubic.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -987,Q_PROTO_CNET,cnet,,CNET TV,This protocol plug-in classifies the http traffic to the host .cnet.com.,Audio/Video,http;https;ssl,20130713,PC-Linux-BasicTest-20131003 (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1170,Q_PROTO_CNET_TV,cnet_tv,,CNET TV,This protocol plug-in classifies the http traffic to the host cnettv.cnet.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -988,Q_PROTO_CNN,cnn,,CNN (Cable News Network),"CNN is an international TV network, broadcasting news to the web and to mobile device applications.",Web,akamai;http;https,"2.0 (iOS),20140114",PC-Linux-BasicTest-20140109 (2014-01-09);iPhone-iOS7.0.4-App2.0 (2014-01-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -989,Q_PROTO_CNTV,cntv,,cntv,Chinese Central Television and China Network Television web site.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1360,Q_PROTO_CNYES,cnyes,,Cnyes,cnYES.com is the most trusted and consulted leading financial portal among the Chinese online professionals.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1254,Q_PROTO_CNZZ,cnzz,,Cnzz,This protocol plug-in classifies the http traffic to the hosts cnzz.com and cnzz.net.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2035,Q_PROTO_COCCOC,coccoc,,Coccoc,Vietnamese search engine,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1328,Q_PROTO_COCOLOG_NIFTY,cocolog_nifty,,Cocolog-nifty,Japanese blog web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -380,Q_PROTO_COLLEGE_BLENDER,college_blender,,College Blender,This protocol plug-in classifies the http traffic to the host collegeblender.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -990,Q_PROTO_COMCAST,comcast,,comcast,This protocol plug-in classifies the http traffic to the hosts comcast.com and comcast.net.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1496,Q_PROTO_COMM,comm,,COMM,COMM is a VoIP and Instant messaging application for mobile phones commonly used in Japan.,Audio/Video,https;ssl,20130604,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,x,,,,,,,,,,x,,,,,,,,,, -1757,Q_PROTO_COMMENTCAMARCHE,commentcamarche,,CommentCaMarche,CommentCaMarche.net is a french website providing technical explanations as well as forums.,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -21,Q_PROTO_COMP,comp,,Compression,COMP protocol is used for data compression over PPP.,Compression,ppp,RFC 1661,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -616,Q_PROTO_COMPAQ_PEER,compaq_peer,,Compaq Peer Protocol,The compaq_peer protocol (Compaq Peer Protocol) is found over the IP layer (IANA protocol number: 110).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -773,Q_PROTO_CONCUR,concur,,Concur,This protocol plug-in classifies the http traffic to the hosts concur.com and concursolutions.com. It also classifies the ssl traffic to the Common Names concursolutions.com and .concur.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1443,Q_PROTO_CONDUIT,conduit,,Conduit Services,Conduit provides services for web sites audience increase.,Web,http;https;ssl,20140114,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2015,Q_PROTO_CONVIVA,conviva,,Conviva CDN,Conviva is a video streaming solution provider for audio/video content web services.,Web,http;https;ssl,20140114,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -774,Q_PROTO_CORALCDN_USER,coralcdn_user,,CoralCDN user,This protocol plug-in classifies the http traffic to the host nyud.net.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -22,Q_PROTO_COTP,cotp,,Connection Oriented Transfer Protocol (ISO),COTP (Connection Oriented Transport Protocol) is a protocol ensuring the transport service in the OSI model.,Network Service,tcp,RFC 905/ISO 8073/X.224,7/4/2008,,,,x,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,, -381,Q_PROTO_COUCH_SURFING,couch_surfing,,Couch surfing,This protocol plug-in classifies the http traffic to the host couchsurfing.org. It also classifies the ssl traffic to the Common Name .couchsurfing.org.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1197,Q_PROTO_COUPANG,coupang,,Coupang,This protocol plug-in classifies the http traffic to the host coupang.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +20,Q_PROTO_CHAP,chap,,Challenge Handshake Authentication Protocol,The CHAP protocol is used to verify the identity of a peer on a point-to-point link.,Authentication,ppp,RFC 1994,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x +1567,Q_PROTO_CHAT_ON,chat_on,,ChatON,ChatON is a global mobile communication service introduced by Samsung Electronics.,Instant Messaging,http;https;ssl,Mobile-Android-Chat On 3.2.137;iPhone-iOS-Chat On 2.7.7,Mobile-Android-ChatON-3.2.137 (2014-01-10);iPhone-iOS-7.0.4-ChatON-2.7.7 (2014-01-10),,x,,,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +1515,Q_PROTO_CHATROULETTE,chatroulette,,Chatroulette.com,Chatroulette is an online chat website. ( http://chatroulette.com ),Web,http;https;rtmp,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1356,Q_PROTO_CHINA_AIRLINES,china_airlines,,China-airlines.com,China-airlines booking site.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +984,Q_PROTO_CHINACOM,chinacom,,China.com,This protocol plug-in classifies the http traffic to the host china.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +985,Q_PROTO_CHINACOMCN,chinacomcn,,china.com.cn,This protocol plug-in classifies the http traffic to the host china.com.cn.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1357,Q_PROTO_CHINANEWS,chinanews,,Chinanews.com,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1516,Q_PROTO_CHINAREN,chinaren,,ChinaRen.com,Chinese social networking website for former classmates. ( class.chinaren.com ),Web,http;https;sohu,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1358,Q_PROTO_CHINATIMES,chinatimes,,Chinatimes.com,One of Taiwan top news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1249,Q_PROTO_CHINAZ,chinaz,,Chinaz.com,This protocol plug-in classifies the http traffic to the host chinaz.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1195,Q_PROTO_CHOSUN,chosun,,Chosun services,This protocol plug-in classifies the http traffic to the host chosun.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1230,Q_PROTO_CHOSUN_DAILY,chosun_daily,,Chosun website,This protocol plug-in classifies the http traffic to the host www.chosun.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +567,Q_PROTO_CHROME_UPDATE,chrome_update,,Chrome Update,Chrome Update is the protocol for the updates of the Google chrome browser.,Web,google_gen;http;https,PC-Windows 7-Chrome 30.0.1599.69,Mac-Mac OS-Chrome-32.0.1700.102 (2014-01-28);PC-Windows-7-Chrome-32.0.1700.102 (2014-01-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +1719,Q_PROTO_CINEMAGEDDON,cinemageddon,,Cinemageddon Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1474,Q_PROTO_CITRIX_ONLINE,citrix_online,,Citrix Online,On-line collaboration suite for small businesses.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +1196,Q_PROTO_CJ_MALL,cj_mall,,Cjmall.com,This protocol plug-in classifies the http traffic to the host cjmall.com. It also classifies the ssl traffic to the Common Name .cjmall.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1359,Q_PROTO_CK101,ck101,,CK101.com,ck101 is one of the major forum sites in Taiwan.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +2034,Q_PROTO_CLARIN,clarin,,Clarin.com,Argentinian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1847,Q_PROTO_CLASIFICADOSONLINE,clasificadosonline,,ClasificadosOnline.com,Puerto Rican classified ads,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +378,Q_PROTO_CLASSMATES,classmates,,Classmates.com,This protocol plug-in classifies the http traffic to the host classmates.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +902,Q_PROTO_CLEARCASE,clearcase,,Rational ClearCase,"ClearCase is a source control / configuration management tool from IBM's ""Rational""division",Thin Client,http;https,7.1.2,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +1517,Q_PROTO_CLEARSPACE,clearspace,,Jive,Enterprise collaboration and knowlegde management platform ( https://jiveon.com ),Web,http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +772,Q_PROTO_CLIP2NET,clip2net,,Clip2Net.com,This protocol plug-in classifies the http traffic to the host clip2net.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,x, +379,Q_PROTO_CLOOB,cloob,,Cloob.com,This protocol plug-in classifies the http traffic to the host cloob.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1445,Q_PROTO_CLOUDFLARE,cloudflare,,CloudFlare CDN,CloudFlare CDN is a content delivery network with advanced security and analytics features.,Web,http;https;ssl,20130315,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1471,Q_PROTO_CLOUDME,cloudme,,CloudMe.com,Free on-line file storage service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1518,Q_PROTO_CLUBBOX,clubbox,,Clubbox.co.kr,Korean file sharing web site that requires installing a p2p client called zmlauncher.exe ( http://www.clubbox.co.kr ),Peer to Peer,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +986,Q_PROTO_CLUBIC,clubic,,Clubic.com,This protocol plug-in classifies the http traffic to the host clubic.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2178,Q_PROTO_CLUMSY_NINJA,clumsy_ninja,,Clumsy Ninja,Mobile game.,Game,http;https,iPhone-iOS,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +987,Q_PROTO_CNET,cnet,,Cnet.com,This protocol plug-in classifies the http traffic to the host .cnet.com.,Audio/Video,akamai;http;https;ssl,PC-Windows-Browser-www.cnet.com (2014-02-26);Mobile-Android-CNET 2.5 (2014-02-26);iPhone-iOS-CNET 2.4.1 (2014-02-26),Mobile-Android-4.1.2-CNET-2.5 (2014-02-26);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-26);iPhone-iOS-7.0.4-CNET-2.4.1 (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1170,Q_PROTO_CNET_TV,cnet_tv,,Cnettv.cnet.com,This protocol plug-in classifies the http traffic to the host cnettv.cnet.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +988,Q_PROTO_CNN,cnn,,CNN (Cable News Network),"CNN is an international TV network, broadcasting news to the web and to mobile device applications.",Web,akamai;apple_hls;http;https;mms,PC-Windows-Browser-www.cnn.com (2014-01-03);iPhone-iOS-CNN App 2.0 (2014-01-12);Mobile-Android-CNN App 1.4.1 (2014-01-15);Windows Phone-Windows Phone OS-CNN 1.5.1.0 (2014-01-13),BlackBerry-BlackBerry OS-CNN Turk for BlackBerry-3.0 (2014-01-15);Mobile-Android-CNN App for Android Phones-1.4.1 (2014-01-15);PC-Windows-7-Chrome-31.0.1650.63 (2014-01-16);Windows Phone-Windows Phone OS-8-CNN-1.5.1.0 (2014-01-13);iPhone-iOS-7.0.4-CNN App for iPhone-2.0 (2014-01-12),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +989,Q_PROTO_CNTV,cntv,,China Network Television,Chinese Central Television and China Network Television web site.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1360,Q_PROTO_CNYES,cnyes,,cnYES.com,cnYES.com is the most trusted and consulted leading financial portal among the Chinese online professionals.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1254,Q_PROTO_CNZZ,cnzz,,cnzz.com,This protocol plug-in classifies the http traffic to the hosts cnzz.com and cnzz.net.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2035,Q_PROTO_COCCOC,coccoc,,Coccoc.com,Vietnamese search engine,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1328,Q_PROTO_COCOLOG_NIFTY,cocolog_nifty,,Cocolog-nifty.com,Japanese blog web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +380,Q_PROTO_COLLEGE_BLENDER,college_blender,,CollegeBlender.com,This protocol plug-in classifies the http traffic to the host collegeblender.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +990,Q_PROTO_COMCAST,comcast,,Comcast.com,This protocol plug-in classifies the http traffic to the hosts comcast.com and comcast.net.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1496,Q_PROTO_COMM,comm,,COMM,COMM is a VoIP and Instant messaging application for mobile phones commonly used in Japan.,Audio/Video,https;ssl,20130604,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,x,,,,,,,,,,x,,,,,,,,,, +1757,Q_PROTO_COMMENTCAMARCHE,commentcamarche,,CommentCaMarche.net,CommentCaMarche.net is a french website providing technical explanations as well as forums.,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +21,Q_PROTO_COMP,comp,,COMP,COMP protocol is used for data compression over PPP.,Compression,ppp,RFC 1661,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +616,Q_PROTO_COMPAQ_PEER,compaq_peer,,Compaq Peer,The compaq_peer protocol (Compaq Peer Protocol) is found over the IP layer (IANA protocol number: 110).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +773,Q_PROTO_CONCUR,concur,,Concur.com,This protocol plug-in classifies the http traffic to the hosts concur.com and concursolutions.com. It also classifies the ssl traffic to the Common Names concursolutions.com and .concur.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1443,Q_PROTO_CONDUIT,conduit,,Conduit Services,Conduit provides services for web sites audience increase.,Web,http;https;ssl,20140114,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2015,Q_PROTO_CONVIVA,conviva,,Conviva CDN,Conviva is a video streaming solution provider for audio/video content web services.,Web,https;ssl,20140114,PC-Linux-BasicTest (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +774,Q_PROTO_CORALCDN_USER,coralcdn_user,,CoralCDN user,This protocol plug-in classifies the http traffic to the host nyud.net.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +22,Q_PROTO_COTP,cotp,,Connection Oriented Transfer Protocol,COTP (Connection Oriented Transport Protocol) is a protocol ensuring the transport service in the OSI model.,Network Service,tcp,RFC 905/ISO 8073/X.224,7/4/2008,,,,x,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,, +381,Q_PROTO_COUCH_SURFING,couch_surfing,,CouchSurfing.org,This protocol plug-in classifies the http traffic to the host couchsurfing.org. It also classifies the ssl traffic to the Common Name .couchsurfing.org.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1197,Q_PROTO_COUPANG,coupang,,Coupang.com,This protocol plug-in classifies the http traffic to the host coupang.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 617,Q_PROTO_CPHB,cphb,,Computer Protocol Heart Beat,The cphb protocol (Computer Protocol Heart Beat) is found over the IP layer (IANA protocol number: 73).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 618,Q_PROTO_CPNX,cpnx,,Computer Protocol Network Executive,The cpnx protocol (Computer Protocol Network Executive) is found over the IP layer (IANA protocol number: 72).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1848,Q_PROTO_CRAIGSLIST,craigslist,,"Craigslist,NestedApplication:CRAIGSLIST",Online classified ads mostly used in the US and Canada,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1720,Q_PROTO_CRAZYSALOON,crazysaloon,,Crazysaloon,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1849,Q_PROTO_CRNOBELO,crnobelo,,Crnobelo,Macedonian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1450,Q_PROTO_CROCKO,crocko,,CROCKO (Crockotec),CROCKOTec is a Direct Download (DDL file sharing website).,Web,http;https;ssl,20130415,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1848,Q_PROTO_CRAIGSLIST,craigslist,,"Craigslist.org,NestedApplication:CRAIGSLIST",Online classified ads mostly used in the US and Canada,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1720,Q_PROTO_CRAZYSALOON,crazysaloon,,Crazysaloon Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1849,Q_PROTO_CRNOBELO,crnobelo,,Crnobelo.com,Macedonian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1450,Q_PROTO_CROCKO,crocko,,Crocko.com (CROCKOTEC),CROCKOTec is a Direct Download (DDL file sharing website).,Web,http;https;ssl,20130415,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 619,Q_PROTO_CRTP,crtp,,Combat Radio Transport Protocol,The crtp protocol (Combat Radio Transport Protocol) is found over the IP layer (IANA protocol number: 126).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 620,Q_PROTO_CRUDP,crudp,,Combat Radio User Datagram,The crudp protocol (Combat Radio User Datagram) is found over the IP layer (IANA protocol number: 127).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1519,Q_PROTO_CRYPTOHEAVEN,cryptoheaven,,Cryptoheaven,Secure email and online file storage service.,Peer to Peer,http;https,3.7.6,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1265,Q_PROTO_CSDN,csdn,,Csdn,This protocol plug-in classifies the http traffic to the host csdn.net.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1519,Q_PROTO_CRYPTOHEAVEN,cryptoheaven,,CryptoHeaven.com,Secure email and online file storage service.,Peer to Peer,http;https,3.7.6,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1265,Q_PROTO_CSDN,csdn,,Chinese Software Developer Network,This protocol plug-in classifies the http traffic to the host csdn.net.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 23,Q_PROTO_CSTRIKE,cstrike,,CounterStrike,"Cstrike is a protocol used by CounterStrike game, by Steam.",Game,tcp;udp,CounterStrike v1.5;CounterStrike v1.6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1361,Q_PROTO_CTRIP,ctrip,,Ctrip,"Travel Destination Guide, online booking of hotels, flights and holiday.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1361,Q_PROTO_CTRIP,ctrip,,Ctrip.com?,"Travel Destination Guide, online booking of hotels, flights and holiday.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 24,Q_PROTO_CUPS,cups,,Common Unix Printer System,"The Common Unix Printer System (CUPS) protocol is a cross-platform printing solution for UNIX environments. It is based on the ""Internet Printing Protocol""and it is compatible with Microsoft operating systems since Windows 2000.",Printer,udp,CUPS v1.5,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1721,Q_PROTO_CUTEYHONEYFLASH,cuteyhoneyflash,,Cuteyhoneyflash,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1721,Q_PROTO_CUTEYHONEYFLASH,cuteyhoneyflash,,Cutey Honey Flash Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, 1100,Q_PROTO_CVS,cvs,,Concurrent Versions System,"The Concurrent Versions System keeps track of all work and all changes in a set of files, typically the implementation of a software project, and allows several developers to collaborate.",Network Service,tcp;udp,20111030,12/1/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1722,Q_PROTO_CYBER12,cyber12,,Cyber 12,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2036,Q_PROTO_CYBERCTM,cyberctm,,Cyberctm,Chinese news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1520,Q_PROTO_CYWORLD,cyworld,,Cyworld,CYworld is a South Korean social network service which belongs to nate.com. ( http://www.nate.com/cymain/?f=auto_cymain ),Web,http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1850,Q_PROTO_DAGBLADET,dagbladet,,Dagbladet,Norwegian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -382,Q_PROTO_DAILY_BOOTH,daily_booth,,Daily booth,This protocol plug-in classifies the http traffic to the host dailybooth.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -383,Q_PROTO_DAILY_STRENGH,daily_strengh,,Daily strengh,This protocol plug-in classifies the http traffic to the host dailystrength.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -991,Q_PROTO_DAILYMAIL,dailymail,,dailymail,This protocol plug-in classifies the http traffic to the host dailymail.co.uk.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -25,Q_PROTO_DAILYMOTION,dailymotion,,dailymotion,Dailymotion is a website where users can send or watch videos.,Web,http;https;ssl,20131009,PC-Windows-Browser-20131007 (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2037,Q_PROTO_DAKARACTU,dakaractu,,Dakaractu,Senegalese news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1362,Q_PROTO_DANGDANG,dangdang,,Dangdang,"Books, film and television productions, and digital products shopping site.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1723,Q_PROTO_DANISHBITS,danishbits,,Danishbits,Bittorrent tracker search engine,Peer to Peer,http;https;ssl,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1851,Q_PROTO_DANTRI,dantri,,Dantri,Vietnamese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1852,Q_PROTO_DAP_NEWS,dap_news,,Dap News,Cambodian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1955,Q_PROTO_DATA_HU,data_hu,,data.hu,Classifies web browsing on the data.hu Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -992,Q_PROTO_DAUM,daum,,Daum.net,This protocol plug-in classifies the http traffic to the host daum.net.,Web,http;https,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1521,Q_PROTO_DAUMMAIL,daummail,,Daummail,Webmail for daum.net ( http://mail.daum.net ),Web,daum,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -993,Q_PROTO_DAVIDOV,davidov,,davidov,This protocol plug-in classifies the http traffic to the host davidov.do.am.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2038,Q_PROTO_DAY,day,,Day,Azerbaijani news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -901,Q_PROTO_DB2,db2,,db2 protocol,DB2 is a relational model database server from IBM which has its roots in the early 1980s. It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;tcp,9.7,8/3/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1853,Q_PROTO_DBS,dbs,,Dbs,Singaporian online banking website,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1722,Q_PROTO_CYBER12,cyber12,,Cyber12 Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +2036,Q_PROTO_CYBERCTM,cyberctm,,CyberCTM.com,Chinese news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1520,Q_PROTO_CYWORLD,cyworld,,Cyworld.com,CYworld is a South Korean social network service which belongs to nate.com. ( http://www.nate.com/cymain/?f=auto_cymain ),Web,http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1850,Q_PROTO_DAGBLADET,dagbladet,,Dagbladet.no,Norwegian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +382,Q_PROTO_DAILY_BOOTH,daily_booth,,DailyBooth.com,This protocol plug-in classifies the http traffic to the host dailybooth.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +383,Q_PROTO_DAILY_STRENGH,daily_strengh,,DailyStrengh.org,This protocol plug-in classifies the http traffic to the host dailystrength.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +991,Q_PROTO_DAILYMAIL,dailymail,,DailyMail.co.uk,This protocol plug-in classifies the http traffic to the host dailymail.co.uk.,Web,http;https,PC-Windows-Browser-www.dailymail.co.uk (2014-03-13);iPhone-iOS-Mail Online 1.7.3 (2014-02-28);Windows Phone-Windows Phone OS-Mail Online 1.0.0.0 (2014-02-28);Mobile-Android-Daily Mail Online 3.0.7 (2014-02-28);BlackBerry-BlackBerry OS-Daily Mail Online 1.1.5.22344 (2014-02-28),BlackBerry-BlackBerry OS-Daily Mail Online-1.1.5.22344 (2014-03-07);Mobile-Android-4.1.2-Daily Mail Online-3.0.7 (2014-02-27);Windows Phone-Windows Phone OS-8-Dailymail-1.0.0.0 (2014-02-28);iPhone-iOS-7.0.4-MailOnline-1.7.3 (2014-02-28),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +25,Q_PROTO_DAILYMOTION,dailymotion,,Dailymotion.com,Dailymotion is a website where users can send or watch videos.,Web,http;https;ssl,PC-Windows-Browser-www.dailymotion.com (2013-10-09);Mobile-Android-Dailymotion 4.0.0.1 (2014-01-29),BlackBerry-BlackBerry OS-10.2.1.1925-Dailymotion-3.0.2 (2014-02-06);Mobile-Android-4.2.1-Dailymotion-4.0.0.1 (2014-02-05);Nokia Mobile-Symbian-113.010.15-Dailymotion-1.2 (2014-03-04);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-07);Windows Phone-Windows Phone OS-8-Dailymotion-2.0.0.0 (2014-03-04);iPhone-iOS-7.0.6-Dailymotion-3.5.2 (2014-03-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2037,Q_PROTO_DAKARACTU,dakaractu,,Dakaractu.com,Senegalese news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1362,Q_PROTO_DANGDANG,dangdang,,Dangdang.com,"Books, film and television productions, and digital products shopping site.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1723,Q_PROTO_DANISHBITS,danishbits,,Danishbits Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https;ssl,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1851,Q_PROTO_DANTRI,dantri,,Dantri.com.vn,Vietnamese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1852,Q_PROTO_DAP_NEWS,dap_news,,Dap-News.com,Cambodian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1955,Q_PROTO_DATA_HU,data_hu,,data.hu,Classifies web browsing on the data.hu Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +992,Q_PROTO_DAUM,daum,,Daum.net,This protocol plug-in classifies the http traffic to the host daum.net.,Web,http;https,20110930,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1521,Q_PROTO_DAUMMAIL,daummail,,Daum Mail,Webmail for daum.net ( http://mail.daum.net ),Web,daum,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +993,Q_PROTO_DAVIDOV,davidov,,Davidov.do.am,This protocol plug-in classifies the http traffic to the host davidov.do.am.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2038,Q_PROTO_DAY,day,,Day.az,Azerbaijani news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +901,Q_PROTO_DB2,db2,,DB2,DB2 is a relational model database server from IBM which has its roots in the early 1980s. It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;tcp,9.7,8/3/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +1853,Q_PROTO_DBS,dbs,,DBS Bank (dbs.com.sg),Singaporian online banking website,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 621,Q_PROTO_DCCP,dccp,,Datagram Congestion Control Protocol,The dccp protocol (Datagram Congestion Control Protocol) is found over the IP layer (IANA protocol number: 33).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -26,Q_PROTO_DCERPC,dcerpc,,Distributed Computing Environment Remote Procedure Call,The DCERPC protocol is an RPC implementation used in Distributed Computing Environments. This protocol is used by many software applications including Microsft Exchange.,Middleware,smb;tcp;udp,DCE/RPC v1.2,7/4/2008,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1522,Q_PROTO_DCINSIDE,dcinside,,Dcinside,Information portal ( www.dcinside.com ),Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +26,Q_PROTO_DCERPC,dcerpc,,Distributed Computing Environment - Remote Procedure Call,The DCERPC protocol is an RPC implementation used in Distributed Computing Environments. This protocol is used by many software applications including Microsft Exchange.,Middleware,smb;tcp;udp,DCE/RPC v1.2,7/4/2008,,,,x,,,,,,,x,,x,,,,,,,,,,,,,,,,,x,,,,,,, +1522,Q_PROTO_DCINSIDE,dcinside,,DCinside.com,Information portal ( www.dcinside.com ),Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 622,Q_PROTO_DCN_MEAS,dcn_meas,,DCN Measurement Subsystems,The dcn_meas protocol (DCN Measurement Subsystems) is found over the IP layer (IANA protocol number: 19).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 623,Q_PROTO_DDP,ddp,,Datagram Delivery Protocol,The ddp protocol (Datagram Delivery Protocol) is found over the IP layer (IANA protocol number: 37).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -624,Q_PROTO_DDX,ddx,,D-II Data Exchange (DDX,The ddx protocol (D-II Data Exchange (DDX) is found over the IP layer (IANA protocol number: 116).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2039,Q_PROTO_DEALFISH,dealfish,,Dealfish,Thai classified ads,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -574,Q_PROTO_DEBIAN_UPDATE,debian_update,,Debian/Ubuntu Update,"Update protocol of APT, the Debian/Ubuntu packet manager.",Web,http;https,debian5-lenny;debian6;debian7;ubuntu10.10,PC-Linux-Debian7.3 (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -28,Q_PROTO_DEC,dec,,DEC Protocol,DEC is a Digital Equipment Corporation's proprietary network protocol.,Network Service,8021q;eth;gre;snap,na,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -384,Q_PROTO_DECAYENNE,decayenne,,Decayenne,This protocol plug-in classifies the http traffic to the host decayenne.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1724,Q_PROTO_DEEPSEEK,deepseek,,Deepseek,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -310,Q_PROTO_DEEZER,deezer,,Deezer,This protocol plug-in classifies the http traffic to the host deezer.com. It also classifies the ssl traffic to the Common Name .deezer.com.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1854,Q_PROTO_DEFIMEDIA,defimedia,,Defimedia,Mauritian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1784,Q_PROTO_DELFI,delfi,,Delfi,"Estonian news portal, also accessible from Latvia and Lituania.",Web,http;https,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -605,Q_PROTO_DELICIOUS,delicious,,Delicious update,"Delicious (formerly del.icio.us, pronounced ""delicious"") is a social bookmarking web service for storing, sharing, and discovering web bookmarks.",Web,http;https;ssl;yahoo,20110209,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1765,Q_PROTO_DELTA_SEARCH,delta_search,,Delta Search,Browser toolbar search engine,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -775,Q_PROTO_DEPOSITFILES,depositfiles,,DepositFiles,This protocol plug-in classifies the http traffic to the host depositfiles.com. It also classifies the ssl traffic to the Common Name .depositfiles.com.,Web,http;https;ssl,20130616,PC-Linux-BasicTest-20131003 (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -2040,Q_PROTO_DERSTANDARD,derstandard,,Derstandard,Austrian news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1128,Q_PROTO_DETIK,detik,,Detiknews,This protocol plug-in classifies the http traffic to the host detik.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1132,Q_PROTO_DETIKNEWS,detiknews,,Detiknews,This protocol plug-in classifies the http traffic to the hosts detiknews.com and news.detik.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -385,Q_PROTO_DEVIANT_ART,deviant_art,,Deviant Art,This protocol plug-in classifies the http traffic to the host deviantart.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -625,Q_PROTO_DFS,dfs,,Any distributed file system,The dfs protocol (Any distributed file system) is found over the IP layer (IANA protocol number: 68).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +624,Q_PROTO_DDX,ddx,,D-II Data Exchange,The ddx protocol (D-II Data Exchange (DDX) is found over the IP layer (IANA protocol number: 116).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +2039,Q_PROTO_DEALFISH,dealfish,,Dealfish.co.th,Thai classified ads,Web,http;https,20140117,PC-Linux-BasicTest (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +574,Q_PROTO_DEBIAN_UPDATE,debian_update,,Debian/Ubuntu Update,"Update protocol of APT, the Debian/Ubuntu packet manager.",Web,http;https,PC-Debian 5;PC-Debian 6;PC-Debian 6;PC-Ubuntu 10.10,PC-Debian-7.3 (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +28,Q_PROTO_DEC,dec,,Digital Equipment Corporation,DEC is a Digital Equipment Corporation's proprietary network protocol.,Network Service,8021q;eth;gre;snap,na,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +384,Q_PROTO_DECAYENNE,decayenne,,Decayenne.com,This protocol plug-in classifies the http traffic to the host decayenne.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1724,Q_PROTO_DEEPSEEK,deepseek,,DeepSeek Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +2180,Q_PROTO_DEER_HUNTER_2014,deer_hunter_2014,,Deer Hunter 2014,Mobile game.,Game,http;https,Mobile-Android;iPhone-iOS,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +310,Q_PROTO_DEEZER,deezer,,Deezer.com,This protocol plug-in classifies the http traffic to the host deezer.com. It also classifies the ssl traffic to the Common Name .deezer.com.,Web,http;https;ssl,PC-Windows 7-Browser-www.deezer.com (2014-03-05);Windows Phone-Windows Phone OS-Deezer 2.1.1.1 (2014-03-04);Mobile-Android-Deezer 4.2.3.1 (2014-03-04);BlackBerry-BlackBerry OS-Deezer 3.137 (2014-03-04);PC-Windows 7-Chrome 33.0.1750.146-Deezer 1.3.2 (2014-03-05),BlackBerry-BlackBerry OS-10.2.0.424-Deezer-3.137 (2014-03-04);Mac-Mac OS-10.8.3-Safari-6.0.3 (2014-02-07);Mobile-Android-4.2.3.1-Deezer-4.2.1.2 (2014-03-04);PC-Linux-Firefox-20.0 (2014-02-12);PC-Windows-7-Chrome-33.0.1750.146 (2014-03-05);PC-Windows-7-Chrome-33.0.1750.146-Deezer-1.3.2 (2014-03-05);PC-Windows-8-Deezer (2014-02-12);Windows Phone-Windows Phone OS-8-Deezer-2.1.1.1 (2014-03-04);iPhone-iOS-7.0.4-Deezer-4.8.1 (2014-03-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1854,Q_PROTO_DEFIMEDIA,defimedia,,Defimedia.info,Mauritian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1784,Q_PROTO_DELFI,delfi,,Delfi.ee,"Estonian news portal, also accessible from Latvia and Lituania.",Web,http;https,20140130,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +605,Q_PROTO_DELICIOUS,delicious,,Delicious.com,"Delicious (formerly del.icio.us, pronounced ""delicious"") is a social bookmarking web service for storing, sharing, and discovering web bookmarks.",Web,http;https;ssl;yahoo,20110209,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1765,Q_PROTO_DELTA_SEARCH,delta_search,,Delta Search,Browser toolbar search engine,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +775,Q_PROTO_DEPOSITFILES,depositfiles,,DepositFiles.com,This protocol plug-in classifies the http traffic to the host depositfiles.com. It also classifies the ssl traffic to the Common Name .depositfiles.com.,Web,http;https;ssl,PC-Windows-Browser-www.depositfiles.com (2013-06-16),Mobile-Android-Depositfiles FileManager-20.131112.50 (2014-02-22);PC-Linux-Firefox (2014-02-22);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-22);iPhone-iOS-7.0.4-Safari (2014-02-22),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +2040,Q_PROTO_DERSTANDARD,derstandard,,derStandard.at,Austrian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1128,Q_PROTO_DETIK,detik,,Detik.com,This protocol plug-in classifies the http traffic to the host detik.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1132,Q_PROTO_DETIKNEWS,detiknews,,Detiknews.com,This protocol plug-in classifies the http traffic to the hosts detiknews.com and news.detik.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +385,Q_PROTO_DEVIANT_ART,deviant_art,,DeviantArt.com,This protocol plug-in classifies the http traffic to the host deviantart.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +625,Q_PROTO_DFS,dfs,,Distributed File System,The dfs protocol (Any distributed file system) is found over the IP layer (IANA protocol number: 68).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 626,Q_PROTO_DGP,dgp,,Dissimilar Gateway Protocol,The dgp protocol (Dissimilar Gateway Protocol) is found over the IP layer (IANA protocol number: 86).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 29,Q_PROTO_DHCP,dhcp,,Dynamic Host Configuration Protocol,The DHCP protocol is used to configure automatically the network parameters of a station.,Network Service,udp,DHCP IPv4,7/4/2008,,,,x,dhcp,,,x,,x,,x,x,,,,,,,,,,,,,,,,,,,,,x,,, 602,Q_PROTO_DIAMETER,diameter,,Diameter,"Diameter is an AAA (authentication, authorization and accounting) protocol for computer networks and an alternative to RADIUS.",Authentication,sctp;tcp,Diameter v1,2/22/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, -30,Q_PROTO_DICT,dict,,Dictionary Server Protocol,The DICT protocol is a TCP transaction based query/response protocol that enables a client to access dictionary definitions from a set of natural language dictionary databases.,Application Service,tcp,DICT v1,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -995,Q_PROTO_DIGG,digg,,digg,This protocol plug-in classifies the http traffic to the host digg.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -386,Q_PROTO_DIGITALVERSE,digitalverse,,DigitalVerse,This protocol plug-in classifies the http traffic to the host digitalverse.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -776,Q_PROTO_DIINO,diino,,Diino,This protocol plug-in classifies the ssl traffic to the Common Name diino.com.,Peer to Peer,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +30,Q_PROTO_DICT,dict,,Dictionary Server,The DICT protocol is a TCP transaction based query/response protocol that enables a client to access dictionary definitions from a set of natural language dictionary databases.,Application Service,tcp,DICT v1,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +995,Q_PROTO_DIGG,digg,,Digg.com,This protocol plug-in classifies the http traffic to the host digg.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +386,Q_PROTO_DIGITALVERSE,digitalverse,,DigitalVerse.org,This protocol plug-in classifies the http traffic to the host digitalverse.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +776,Q_PROTO_DIINO,diino,,Diino.com,This protocol plug-in classifies the ssl traffic to the Common Name diino.com.,Peer to Peer,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 329,Q_PROTO_DIMP,dimp,,Dynamic Internet Messaging Program,DIMP is a Webmail protocol,Webmail,http;https;imp,20090904,6/6/2011,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1523,Q_PROTO_DIODEO,diodeo,,Diodeo,Information portal ( www.diodeo.com ),Web,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1523,Q_PROTO_DIODEO,diodeo,,Diodeo.com,Information portal ( www.diodeo.com ),Web,http;https;rtmp;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 914,Q_PROTO_DIOP,diop,,Datagram Inter-ORB Protocol,DIOP is a GIOP implementation over UDP which aims to be more efficient than the TCP one.,Middleware,giop,20110801,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1855,Q_PROTO_DIR,dir,,Dir,Bulgarian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -31,Q_PROTO_DIRECTCONNECT,directconnect,,DirectConnect (NMDC),DirectConnect is a peer-to-peer protocol. [Note: directconnect is also known as nmdc.],Peer to Peer,socks4;socks5;tcp;udp,DC++ v0.830,PC-Windows-DC++0.830 (2013-10-17),,,,x,directconnect,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -713,Q_PROTO_DIRECTDOWNLOADLINKS,directdownloadlinks,x,DirectDownload Links,"Direct download link is a term used within the Internet-based file sharing community. It is used to describe a hyperlink that points to a location within the Internet where the user can download a file. This protocol used to contain a list of DDL websites, that was split into multiple protocols.",Web,,20130713,PC-Linux-BasicTest-20131003 (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1776,Q_PROTO_DIRECTREV,directrev,,DirectREV,"DirectREV Media Delivery Platform is a real-time digital ad marketplace that connects publishers with agencies, ad networks and third-party technology providers.",Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -996,Q_PROTO_DIRECTV,directv,,directv,This protocol plug-in classifies the http traffic to the host directv.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2041,Q_PROTO_DIRETUBE,diretube,,Diretube,Ethiopian media website,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -387,Q_PROTO_DISABOOM,disaboom,,Disaboom,This protocol plug-in classifies the http traffic to the host disaboom.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -777,Q_PROTO_DIVSHARE,divshare,,DivShare,This protocol plug-in classifies the http traffic to the host divshare.com. It also classifies the ssl traffic to the Common Name divshare.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1314,Q_PROTO_DMM_CO,dmm_co,,Dmm,Japanese adult videos web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1855,Q_PROTO_DIR,dir,,Dir.bg,Bulgarian news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +31,Q_PROTO_DIRECTCONNECT,directconnect,,DirectConnect (NMDC),DirectConnect is a peer-to-peer protocol. [Note: directconnect is also known as nmdc.],Peer to Peer,socks4;socks5;tcp;udp,PC-Windows-DC++ 0.830;Mac-Mac OS 10.9.1-valknut 0.4.9 (2014-02-13);PC-Linux 12.04.1 lts-valknut 0.4.9 (2014-02-13),Mac-Mac OS-Valknut-0.4.9 (2014-03-03);PC-Linux-Valknut-0.4.9 (2014-03-06);PC-Windows-DC++-0.830 (2013-10-17),,,,x,directconnect,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +713,Q_PROTO_DIRECTDOWNLOADLINKS,directdownloadlinks,x,DirectDownload Links,"Direct download link is a term used within the Internet-based file sharing community. It is used to describe a hyperlink that points to a location within the Internet where the user can download a file. This protocol used to contain a list of DDL websites, that was split into multiple protocols.",Web,,PC-Windows-Browser-www.directdownloadlinks.com (2013-07-13),10/3/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1776,Q_PROTO_DIRECTREV,directrev,,DirectREV.com,"DirectREV Media Delivery Platform is a real-time digital ad marketplace that connects publishers with agencies, ad networks and third-party technology providers.",Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +996,Q_PROTO_DIRECTV,directv,,DirecTV.com,This protocol plug-in classifies the http traffic to the host directv.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2041,Q_PROTO_DIRETUBE,diretube,,DireTube.com,Ethiopian media website,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +387,Q_PROTO_DISABOOM,disaboom,,Disaboom.com,This protocol plug-in classifies the http traffic to the host disaboom.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +777,Q_PROTO_DIVSHARE,divshare,,DivShare.com,This protocol plug-in classifies the http traffic to the host divshare.com. It also classifies the ssl traffic to the Common Name divshare.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1314,Q_PROTO_DMM_CO,dmm_co,,Dmm.co.jp,Japanese adult videos web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 32,Q_PROTO_DNS,dns,,Domain Name Service,The DNS protocol is used to translate internet names (www.site.com) into IP addresses and vice versa.,Network Service,tcp;udp,DNS IPv4;DNS IPv6,7/4/2008,,,,x,,,x,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1199,Q_PROTO_DNSHOP,dnshop,,Dnshop,This protocol plug-in classifies the http traffic to the host dnshop.com.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -778,Q_PROTO_DOCSTOC,docstoc,,Docstoc,This protocol plug-in classifies the http traffic to the hosts docstoccdn.com and docstoc.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2042,Q_PROTO_DOISONGPHAPLUAT,doisongphapluat,,Doisongphapluat,Vietnamese news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -388,Q_PROTO_DOL2DAY,dol2day,,Dol2day,This protocol plug-in classifies the http traffic to the host dol2day.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1856,Q_PROTO_DONEDEAL,donedeal,,Donedeal,Irish classified ads website,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1200,Q_PROTO_DONGA,donga,,Donga,This protocol plug-in classifies the http traffic to the host donga.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -389,Q_PROTO_DONTSTAYIN,dontstayin,,DontStayIn,This protocol plug-in classifies the http traffic to the host dontstayin.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1315,Q_PROTO_DOORBLOG,doorblog,,Doorblog,This protocol plug-in classifies the http traffic to the host doorblog.jp. It also classifies the ssl traffic to the Common Name doorblog.jp.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1857,Q_PROTO_DORGIO,dorgio,,Dorgio,Mongolian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1252,Q_PROTO_DOUBAN,douban,,Douban,This protocol plug-in classifies the http traffic to the host douban.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2043,Q_PROTO_DR,dr,,Dr,Danish news and content portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1858,Q_PROTO_DRAUGAS,draugas,,Draugas,Lithuanian web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -390,Q_PROTO_DRAUGIEM,draugiem,,Draugiem,This protocol plug-in classifies the http traffic to the host draugiem.lv.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1199,Q_PROTO_DNSHOP,dnshop,,Dnshop.com,This protocol plug-in classifies the http traffic to the host dnshop.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +778,Q_PROTO_DOCSTOC,docstoc,,Docstoc.com,This protocol plug-in classifies the http traffic to the hosts docstoccdn.com and docstoc.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2042,Q_PROTO_DOISONGPHAPLUAT,doisongphapluat,,Doisongphapluat.com,Vietnamese news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +388,Q_PROTO_DOL2DAY,dol2day,,Dol2day.com,This protocol plug-in classifies the http traffic to the host dol2day.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1856,Q_PROTO_DONEDEAL,donedeal,,DoneDeal.ie,Irish classified ads website,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1200,Q_PROTO_DONGA,donga,,Donga.com,This protocol plug-in classifies the http traffic to the host donga.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +389,Q_PROTO_DONTSTAYIN,dontstayin,,DontStayIn.com,This protocol plug-in classifies the http traffic to the host dontstayin.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1315,Q_PROTO_DOORBLOG,doorblog,,Doorblog.jp,This protocol plug-in classifies the http traffic to the host doorblog.jp. It also classifies the ssl traffic to the Common Name doorblog.jp.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1857,Q_PROTO_DORGIO,dorgio,,Dorgio.mn,Mongolian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1252,Q_PROTO_DOUBAN,douban,,Douban.com,This protocol plug-in classifies the http traffic to the host douban.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2043,Q_PROTO_DR,dr,,Dr.dk,Danish news and content portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1858,Q_PROTO_DRAUGAS,draugas,,Draugas.lt,Lithuanian web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +390,Q_PROTO_DRAUGIEM,draugiem,,Draugiem.lv,This protocol plug-in classifies the http traffic to the host draugiem.lv.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 912,Q_PROTO_DRDA,drda,,Distributed Relational Database Architecture,DRDA is a protocol for carrying out SQL queries and commands.,Database,sna;tcp,4,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1725,Q_PROTO_DREAMORA,dreamora,,Dreamora,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1201,Q_PROTO_DREAMWIZ,dreamwiz,,Dreamwiz,This protocol plug-in classifies the http traffic to the host dreamwiz.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -779,Q_PROTO_DROPBOX,dropbox,,Dropbox,Dropbox is a free in-the-cloud file storage and synchronization service providing both web and smart application interfaces.,Web,http;https;ssl;udp,20130713,PC-Windows-2.4.1 (2013-10-07);PC-Windows-Browser-20131003 (2013-10-07),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1859,Q_PROTO_DRUKNET,druknet,,Druknet,Buthan Telecom website,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -997,Q_PROTO_DRUPAL,drupal,,drupal,This protocol plug-in classifies the http traffic to the host drupal.org. It also classifies the ssl traffic to the Common Name .drupal.org.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -702,Q_PROTO_DSR,dsr,,Dynamic Source Routing Protocol,The dsr protocol (Dynamic Source Routing Protocol) is found over the IP layer (IANA protocol number: 48).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1860,Q_PROTO_DSTV,dstv,,Dstv,Program synopsis and channel information for South Africa satellite network.,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1291,Q_PROTO_DTLS,dtls,,DTLS Protocol,"DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents eavesdropping, tampering, or message forgery.",Network Service,capwap,1.2,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1725,Q_PROTO_DREAMORA,dreamora,,Dreamora Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1201,Q_PROTO_DREAMWIZ,dreamwiz,,DreamWiz.com,This protocol plug-in classifies the http traffic to the host dreamwiz.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +779,Q_PROTO_DROPBOX,dropbox,,Dropbox.com,Dropbox is a free in-the-cloud file storage and synchronization service providing both web and smart application interfaces.,Web,http;https;ssl;udp,PC-Windows-Browser-www.dropbox.com (2013-07-13),Kindle Fire-Android-Dropbox-2.3.10.4 (2014-02-11);Mac-Mac OS-10.8.3-DropBox-2.6.2 (2014-02-10);Mobile-Android-Dropbox-2.3.12 (2014-02-11);PC-Linux-DropBox-1.6.1 (2014-02-10);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-13);PC-Windows-DropBox-2.4.10 (2014-02-12);Windows Phone-Windows Phone OS-8-Dropbox-3.0.0.0 (2014-02-11);iPhone-iOS-7.0.4-Dropbox-3.0.2 (2014-02-14),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1859,Q_PROTO_DRUKNET,druknet,,DrukNet.bt (Bhutan Telecom),Buthan Telecom website,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +997,Q_PROTO_DRUPAL,drupal,,Drupal.org,This protocol plug-in classifies the http traffic to the host drupal.org. It also classifies the ssl traffic to the Common Name .drupal.org.,Web,http;https;ssl,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +702,Q_PROTO_DSR,dsr,,Dynamic Source Routing,The dsr protocol (Dynamic Source Routing Protocol) is found over the IP layer (IANA protocol number: 48).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1860,Q_PROTO_DSTV,dstv,,Dstv,Program synopsis and channel information for South Africa satellite network.,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1291,Q_PROTO_DTLS,dtls,,Datagram Transport Layer Security,"DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents eavesdropping, tampering, or message forgery.",Network Service,capwap,1.2,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, 33,Q_PROTO_DTP,dtp,,Dynamic Trunking Protocol,DTP (Dynamic Trunk Protocol) is a proprietary networking protocol developed by Cisco Systems for the purpose of negociating trunking on a link between two VLAN-aware switches.,Network Service,8021q;eth;gre;snap,DTP v1,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1817,Q_PROTO_DUBIZZLE,dubizzle,,Dubizzle,"Dubizzle is your free classifieds website to buy, sell and find anything in your local community. It is covering Arabian Peninsula and Maghreb.",Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1363,Q_PROTO_DUOWAN,duowan,,Duowan,Chinese online game media.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1861,Q_PROTO_DV,dv,,Dv,Icelandic news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -780,Q_PROTO_DYNAMICINTRANET,dynamicintranet,,Dynamic Intranet,This protocol plug-in classifies the http traffic to the host dynamicintranet.com. It also classifies the ssl traffic to the Common Name dynamicintranet.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -781,Q_PROTO_EARTHCAM,earthcam,,EarthCam,This protocol plug-in classifies the http traffic to the host earthcam.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1364,Q_PROTO_EASTMONEY,eastmoney,,Eastmoney,"One of Chinese most influential financial media, providing comprehensive financial news and financial market information, covering stocks, finance, securities, finance, market, funds, Hong Kong stocks, foreign exchange, futures, bonds, insurance, banking.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1365,Q_PROTO_EASYTRAVEL,easytravel,,Easytravel TW,Taiwanese travel booking agency.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -34,Q_PROTO_EBAY,ebay,,ebay,Ebay is a famous online auction and shopping website.,Web,http;https,20090924,3/6/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -269,Q_PROTO_EBUDDY,ebuddy,,ebuddy,eBuddy is a web and mobile messenger which supports various instant messaging.,Instant Messaging,http;https;ssl;tcp,20120926,PC-Windows-Browser-20120926 (2014-01-14),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, -935,Q_PROTO_ECHO,echo,,Echo Protocol,The echo service simply sends back to the originating source any data it receives.,Network Service,tcp;udp,RFC 862,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1862,Q_PROTO_ECHOROUKONLINE,echoroukonline,,Echoroukonline,Algerian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2016,Q_PROTO_EDGECAST,edgecast,,EdgeCast Networks CDN,Edgecast is a file streaming solution provider for audio/video content web services.,Web,http;https;ssl,20140114,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -35,Q_PROTO_EDONKEY,edonkey,,Edonkey,Edonkey is a peer-to-peer protocol. [Note: edonkey is also known as kadmelia and emule.],Peer to Peer,http;socks4;socks5;tcp;udp,emule0.48a,PC-Linux-aMule2.2.6 (2012-10-29);PC-Windows-Lphant3.51 (2012-10-29);PC-Windows-eMule0.50a (2012-10-29),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1524,Q_PROTO_EGNYTE,egnyte,,Egnyte,Enterprise online file sharing ( https://www-am2.egnyte.com/corp/registration/lp-join-the-thousands.html ),Web,http;https;ssl,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1817,Q_PROTO_DUBIZZLE,dubizzle,,Dubizzle.com,"Dubizzle is your free classifieds website to buy, sell and find anything in your local community. It is covering Arabian Peninsula and Maghreb.",Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1363,Q_PROTO_DUOWAN,duowan,,Duowan.com,Chinese online game media.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1861,Q_PROTO_DV,dv,,DV.is,Icelandic news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +780,Q_PROTO_DYNAMICINTRANET,dynamicintranet,,DynamicIntranet.com,This protocol plug-in classifies the http traffic to the host dynamicintranet.com. It also classifies the ssl traffic to the Common Name dynamicintranet.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +781,Q_PROTO_EARTHCAM,earthcam,,EarthCam.com,This protocol plug-in classifies the http traffic to the host earthcam.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1364,Q_PROTO_EASTMONEY,eastmoney,,Eastmoney.com,"One of Chinese most influential financial media, providing comprehensive financial news and financial market information, covering stocks, finance, securities, finance, market, funds, Hong Kong stocks, foreign exchange, futures, bonds, insurance, banking.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1365,Q_PROTO_EASYTRAVEL,easytravel,,Easytravel.com.tw,Taiwanese travel booking agency.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +34,Q_PROTO_EBAY,ebay,,eBay.com,Ebay is a famous online auction and shopping website.,Web,http;https,20090924,3/6/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +269,Q_PROTO_EBUDDY,ebuddy,,eBuddy.com,eBuddy is a web and mobile messenger which supports various instant messaging.,Instant Messaging,http;https;ssl;tcp,20120926,PC-Windows-Firefox-20140114 (2014-03-11),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, +935,Q_PROTO_ECHO,echo,,Echo,The echo service simply sends back to the originating source any data it receives.,Network Service,tcp;udp,RFC 862,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +1862,Q_PROTO_ECHOROUKONLINE,echoroukonline,,Echoroukonline.com,Algerian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2016,Q_PROTO_EDGECAST,edgecast,,EdgeCast Networks CDN,Edgecast is a file streaming solution provider for audio/video content web services.,Web,http;https;ssl,20140114,PC-Linux-BasicTest (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +35,Q_PROTO_EDONKEY,edonkey,,Edonkey,Edonkey is a peer-to-peer protocol. [Note: edonkey is also known as kadmelia and emule.],Peer to Peer,http;socks4;socks5;tcp;udp,PC-Windows-eMule 0.48a,PC-Linux-aMule-2.2.6 (2012-10-29);PC-Windows-Lphant-3.51 (2012-10-29);PC-Windows-eMule-0.50a (2012-10-29),,,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +2161,Q_PROTO_EDUCARRIERE,educarriere,,Educarriere,Ivory Coast Job portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1524,Q_PROTO_EGNYTE,egnyte,,Egnyte Enterprise File Sharing,Enterprise online file sharing ( https://www-am2.egnyte.com/corp/registration/lp-join-the-thousands.html ),Web,http;https;ssl,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 710,Q_PROTO_EGP,egp,,Exterior Gateway Protocol,The egp protocol (Exterior Gateway Protocol) is found over the IP layer (IANA protocol number: 8).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 36,Q_PROTO_EIGRP,eigrp,,Enhanced Interior Gateway Routing Protocol,"The Enhanced Interior Gateway Routing Protocol (EIGRP) is an improved version of its predecessor IGRP, a Cisco proprietary protocol.",Routing,ip,EIGRP v2,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1863,Q_PROTO_EKANTIPUR,ekantipur,,Ekantipur,Nepalese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20131125 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1864,Q_PROTO_EKSTRABLADET,ekstrabladet,,Ekstrabladet,Danish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1865,Q_PROTO_ELCAT,elcat,,Elcat,Kyrgyzstanese internet service provider,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131127 (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2044,Q_PROTO_ELCOMERCIO,elcomercio,,Elcomercio,Ecuadorian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2045,Q_PROTO_ELDEBER,eldeber,,Eldeber,Bolivian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -391,Q_PROTO_ELFTOWN,elftown,,Elftown,This protocol plug-in classifies the http traffic to the host elftown.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1866,Q_PROTO_ELHEDDAF,elheddaf,,Elheddaf,Algerian sports new portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2046,Q_PROTO_ELHERALDO,elheraldo,,Elheraldo,Honduran news portral,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1366,Q_PROTO_ELLE_TW,elle_tw,,Elle Taiwan,"Taiwanese portal Beauty, style trends, editor's picks, shopping, astrology, reader forums and supplemental content from the print publication.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1525,Q_PROTO_ELLUMINATE,elluminate,,Elluminate,Rent virtual rooms where people can hold classes and meetings ( http://try.bbcollaborate.com/trial/register.go ).,Web,http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2047,Q_PROTO_ELMUNDO,elmundo,,Elmundo,El Salvadorian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2084,Q_PROTO_ELNASHRA,elnashra,,Elnashra,Lebanese news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1867,Q_PROTO_ELNUEVODIA,elnuevodia,,Elnuevodia,Puerto Rican news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1868,Q_PROTO_ELNUEVODIARIO,elnuevodiario,,Elnuevodiario,Nicaraguan news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1761,Q_PROTO_ELPAIS,elpais,,Elpais,"Spanish news web portal, also accessed from Uruguay and Colombia.",Web,http;https,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2085,Q_PROTO_ELSALVADOR,elsalvador,,Elsalvador,EL Salvadorian news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1202,Q_PROTO_EMAPS,emaps,,Emaps,This protocol plug-in classifies the http traffic to the host empas.com.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1863,Q_PROTO_EKANTIPUR,ekantipur,,Ekantipur.com,Nepalese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1864,Q_PROTO_EKSTRABLADET,ekstrabladet,,EkstraBladet.dk,Danish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1865,Q_PROTO_ELCAT,elcat,,ElCat.kg,Kyrgyzstanese internet service provider,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2013-11-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2044,Q_PROTO_ELCOMERCIO,elcomercio,,Elcomercio.pe,Peruvian news portal.,Web,http;https,20140220,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2045,Q_PROTO_ELDEBER,eldeber,,Eldeber.com.bo,Bolivian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +391,Q_PROTO_ELFTOWN,elftown,,Elftown.com,This protocol plug-in classifies the http traffic to the host elftown.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1866,Q_PROTO_ELHEDDAF,elheddaf,,ElHeddaf.com,Algerian sports new portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2046,Q_PROTO_ELHERALDO,elheraldo,,Elheraldo.hn,Honduran news portral,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2165,Q_PROTO_ELHOURRIYA,elhourriya,,Elhourriya,Mauritanian news portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1366,Q_PROTO_ELLE_TW,elle_tw,,Elle.com.tw,"Taiwanese portal Beauty, style trends, editor's picks, shopping, astrology, reader forums and supplemental content from the print publication.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1525,Q_PROTO_ELLUMINATE,elluminate,,Elluminate.com,Rent virtual rooms where people can hold classes and meetings ( http://try.bbcollaborate.com/trial/register.go ).,Web,http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2047,Q_PROTO_ELMUNDO,elmundo,,Elmundo.es,Spanish news portal.,Web,http;https,20140220,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2084,Q_PROTO_ELNASHRA,elnashra,,Elnashra.com,Lebanese news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1867,Q_PROTO_ELNUEVODIA,elnuevodia,,ElNuevoDia.com,Puerto Rican news portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1868,Q_PROTO_ELNUEVODIARIO,elnuevodiario,,ElNuevoDiario.com.ni,Nicaraguan news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1761,Q_PROTO_ELPAIS,elpais,,ElPais.com,"Spanish news web portal, also accessed from Uruguay and Colombia.",Web,http;https,20140130,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2085,Q_PROTO_ELSALVADOR,elsalvador,,Elsalvador.com,EL Salvadorian news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2183,Q_PROTO_ELTIEMPO,eltiempo,,Eltiempo,Colombian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2203,Q_PROTO_ELUNIVERSO,eluniverso,,Eluniverso,Ecuadorian news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1202,Q_PROTO_EMAPS,emaps,x,Empas,This protocol plug-in classifies the http traffic to the host empas.com.,Web,,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, 627,Q_PROTO_EMCON,emcon,,EMCON,The emcon protocol (EMCON) is found over the IP layer (IANA protocol number: 14).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2086,Q_PROTO_EMOL,emol,,Emol,Chilean news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2086,Q_PROTO_EMOL,emol,,Emol.com,Chilean news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 726,Q_PROTO_ENCAP,encap,,Encapsulation Header,The encap protocol (Encapsulation Header) is found over the IP layer (IANA protocol number: 98).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1783,Q_PROTO_ENCUENTRA24,encuentra24,,Encuentra 24,"Official Panama Classifieds Portal. Publish ads for rent or sale real estate, or jobs, cars, pet",Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1726,Q_PROTO_ENERGY_TORRENT,energy_torrent,,Energy torrent,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -393,Q_PROTO_EONS,eons,,Eons,This protocol plug-in classifies the http traffic to the host eons.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -392,Q_PROTO_EPERNICUS,epernicus,,Epernicus,This protocol plug-in classifies the http traffic to the host epernicus.com. It also classifies the ssl traffic to the Common Name epernicus.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -37,Q_PROTO_EPM,epm,,End Point Mapper,End Point Mapper is a protocol used by Exchange to determine the ports used by various services.,Application Service,dcerpc;msrpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -782,Q_PROTO_EROOM_NET,eroom_net,,eRoom.net,This protocol plug-in classifies the ssl traffic to the Common Name project1.eroom.net.,Web,https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -783,Q_PROTO_ESNIPS,esnips,,eSnips,This protocol plug-in classifies the http traffic to the host esnips.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -719,Q_PROTO_ESP,esp,,Encap Security Payload,The esp protocol (Encap Security Payload) is found over the IP layer (IANA protocol number: 50).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1467,Q_PROTO_ESPN,espn,,ESPN,American news website/resources about sports.,Web,http;https;ssl,20130425,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1773,Q_PROTO_ESPNCRICINFO,espncricinfo,,Espncricinfo,"International cricket news, live scores, photos, columns and player profiles.",Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2087,Q_PROTO_ESSIRAGE,essirage,,Essirage,Mauritanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1783,Q_PROTO_ENCUENTRA24,encuentra24,,Encuentra24.com,"Official Panama Classifieds Portal. Publish ads for rent or sale real estate, or jobs, cars, pet",Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1726,Q_PROTO_ENERGY_TORRENT,energy_torrent,,Energy-Torrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +393,Q_PROTO_EONS,eons,,Eons.com,This protocol plug-in classifies the http traffic to the host eons.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +392,Q_PROTO_EPERNICUS,epernicus,,Epernicus.com,This protocol plug-in classifies the http traffic to the host epernicus.com. It also classifies the ssl traffic to the Common Name epernicus.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +37,Q_PROTO_EPM,epm,,EndPoint Mapper,End Point Mapper is a protocol used by Exchange to determine the ports used by various services.,Application Service,dcerpc;msrpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +782,Q_PROTO_EROOM_NET,eroom_net,,eRoom.net,This protocol plug-in classifies the ssl traffic to the Common Name project1.eroom.net.,Web,https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +783,Q_PROTO_ESNIPS,esnips,,eSnips.com,This protocol plug-in classifies the http traffic to the host esnips.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +719,Q_PROTO_ESP,esp,,Encapsulating Security Payload,The esp protocol (Encap Security Payload) is found over the IP layer (IANA protocol number: 50).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1467,Q_PROTO_ESPN,espn,,ESPN.go.com,American news website/resources about sports.,Web,http;https,20130425,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1773,Q_PROTO_ESPNCRICINFO,espncricinfo,,ESPNCricinfo.com,"International cricket news, live scores, photos, columns and player profiles.",Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2087,Q_PROTO_ESSIRAGE,essirage,,EssirageNet,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 42,Q_PROTO_ESTABLISHED,established,,Established TCP Connection,The Established protocol is a virtual protocol grouping all TCP connections already established before starting analyzing the traffic (no SYNC).,Standard,tcp,NA,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1367,Q_PROTO_ETAO,etao,,Etao,eTao is the most comprehensive shopping search engine in China in terms of product and merchant information.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1367,Q_PROTO_ETAO,etao,,Etao.com,eTao is the most comprehensive shopping search engine in China in terms of product and merchant information.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 43,Q_PROTO_ETH,eth,,Ethernet,The Ethernet protocol enables the addressing and sending of data between stations of an Ethernet segment.,Network Service,base;capwap;isl;mpls;pwe,Ethernet II,,x,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, 44,Q_PROTO_ETHERIP,etherip,,Ethernet Over IP,The EtherIP protocol is used to encapsulate Ethernet frames in IP packets.,Tunneling,ip,RFC 3378,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2088,Q_PROTO_ETHIOJOBS,ethiojobs,,Ethiojobs,Ethiopian job ads,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2089,Q_PROTO_ETHIOTUBE,ethiotube,,Ethiotube,Ethiopian video hosting website,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2088,Q_PROTO_ETHIOJOBS,ethiojobs,,Ethiojobs.net,Ethiopian job ads,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2089,Q_PROTO_ETHIOTUBE,ethiotube,,EthioTube.net,Ethiopian video hosting website,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 537,Q_PROTO_ETSI_LI,etsi_li,,ETSI Lawful Interception TS 10 232-1 V2.1.1,Etsi LI is a protocol which forms a standard for telecoms operators and networks operators.,Tunneling,base,ETSI v2.1.1,,x,,,,,,x,x,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1368,Q_PROTO_ETTODAY,ettoday,,Ettoday,"ETtoday.net provide real-time news, including political, financial, social and international news, as well as life, consumption, pets, novelty, entertainment, sports, travel information and related news stories.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1112,Q_PROTO_EVE_ONLINE,eve_online,,Eve Online,Eve Online is a multiplayer online game edited by CCP.,Game,http;https;sip;ssl;tcp,7.41.377968,Mac (2012-05-29);Windows 7 (2012-05-29),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1495,Q_PROTO_EVERNOTE,evernote,,Evernote,Web-based portal for note taking.,Web,akamai;http;https;ssl,20130701,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1282,Q_PROTO_EVERQUEST,everquest,,EverQuest II,"Everquest is a 3D fantasy massively multiplayer online role-playing game (MMORPG), for Windows platforms, developed by Sony Online Entertainment(SOE).",Game,http;https;ssl;udp,20041008,EverQuest 2 (2012-10-31),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -784,Q_PROTO_EVONY,evony,,Evony,This protocol plug-in classifies the http traffic to the host evony.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1330,Q_PROTO_EXBLOG,exblog,,Exblog,Japanase blog hosting services owned by Excite,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -288,Q_PROTO_EXPEDIA,expedia,,Expedia,This protocol plug-in classifies the http traffic to the hosts expedia.com and expedia.fr.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -394,Q_PROTO_EXPERIENCE_PROJECT,experience_project,,Experience Project,This protocol plug-in classifies the http traffic to the host experienceproject.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -395,Q_PROTO_EXPLOROO,exploroo,,Exploroo,This protocol plug-in classifies the http traffic to the host exploroo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1727,Q_PROTO_EXTREMEBITS,extremebits,,Extremebits,Bittorrent tracker search engine,Peer to Peer,http;https;ssl,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1728,Q_PROTO_EXTREMENOVA,extremenova,,Extremenova,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -785,Q_PROTO_EYEJOT,eyejot,,Eyejot,"This protocol plug-in classifies the http traffic to the hosts eyejot.com, eyejot.typepad.com and eyejot.uservoice.com. It also classifies the ssl traffic to the Common Name .eyejot.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1369,Q_PROTO_EYNY,eyny,,Eyny,"Hot topic, leisure and entertainment, academic, computer, information exchange forum.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1370,Q_PROTO_EZFLY,ezfly,,Ezfly,Taiwanese online travel agency.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1526,Q_PROTO_EZPEER,ezpeer,,Mymusic (formerly ezpeer),P2p for music. music files downloading ( http://www.ezpeer.com ),Peer to Peer,http;https;ssl,6.0.1.7,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1371,Q_PROTO_EZTRAVEL,eztravel,,Eztravel,Taiwanese online travel agency.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -244,Q_PROTO_FACEBOOK,facebook,,Facebook,Facebook is a social network.,Web,http;https;ssl,v4.0.0 (Android);v6.8 (iOS);20140114,Mobile-Android-Browser-20140114 (2014-01-14);PC-Windows-Chrome-20140114 (2014-01-14),,x,,,,,,,,,x,,,,,x,x,,,,x,,x,,,,x,,,,,,,,,, -1280,Q_PROTO_FACEBOOK_APPS,facebook_apps,,Facebook Apps,Facebook Applications.,Web,http;https;ssl,v4.0.0 (Android);v6.8 (iOS);20140114,Mobile-Android-App4.0.0.26.3 (zynga poker;farmville) (2014-01-14);PC-Windows-Browser-Chrome31-20140116 (angrybirds;farmville) (2014-01-16);iPhone-iOS7.0.4-App6.8 (zynga poker;farmville) (2014-01-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,x,,,, -524,Q_PROTO_FACEBOOK_MAIL,facebook_mail,,facebook mail,Facebook_mail is a webmail environment on Facebook.,Webmail,http;https;ssl,20130830,Mobile-Android-Browser-20131202 (2014-01-14),,x,,x,,,,,,,x,,,,x,,,,,,x,,x,,,,,,,,,,,,,, -1869,Q_PROTO_FACENAMA,facenama,,Facenama,Iranian social network,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -396,Q_PROTO_FACEPARTY,faceparty,,Faceparty,This protocol plug-in classifies the http traffic to the host faceparty.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -397,Q_PROTO_FACES,faces,,Faces,This protocol plug-in classifies the http traffic to the host faces.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1117,Q_PROTO_FACETIME,facetime,,Apple FaceTime,FaceTime is an Apple video calling software which runs on iOS based mobile devices.,Audio/Video,rtp;sip,1.1.1 (MacOS X);iOS 7.0.4,Mac-MacOS-App1.1.1(309) (2013-12-17);iPhone-iOS7.0.4 (2013-12-17),,x,,,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, -1870,Q_PROTO_FARSNEWS,farsnews,,Farsnews,Iranian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1372,Q_PROTO_FASHIONGUIDE,fashionguide,,Fashionguide,"Fashion, beauty, discount information guide, fashion and beauty forum, cosmetic reviews.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1871,Q_PROTO_FATAKAT,fatakat,,Fatakat,Egyptian portal targeted to arab wowen lifestyle,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1308,Q_PROTO_FC2,fc2,,FC2,Japanese free blog platform and social website,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1729,Q_PROTO_FENOPY,fenopy,,Fenopy,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -398,Q_PROTO_FETLIFE,fetlife,,Fetlife,This protocol plug-in classifies the http traffic to the host fetlife.com. It also classifies the ssl traffic to the Common Name fetlife.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1368,Q_PROTO_ETTODAY,ettoday,,Ettoday.net,"ETtoday.net provide real-time news, including political, financial, social and international news, as well as life, consumption, pets, novelty, entertainment, sports, travel information and related news stories.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1112,Q_PROTO_EVE_ONLINE,eve_online,,Eve Online,Eve Online is a multiplayer online game edited by CCP.,Game,http;https;sip;ssl;tcp,7.41.377968,Mac-Mac OS (2012-05-29);PC-Windows-7 (2012-05-29),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1495,Q_PROTO_EVERNOTE,evernote,,Evernote.com,Web-based portal for note taking.,Web,akamai;http;https;ssl,20130701,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1282,Q_PROTO_EVERQUEST,everquest,,EverQuest - EverQuest II,"Everquest is a 3D fantasy massively multiplayer online role-playing game (MMORPG), for Windows platforms, developed by Sony Online Entertainment(SOE).",Game,http;https;ssl;udp,20041008,PC-Windows-EverQuest-2 (2012-10-31),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +784,Q_PROTO_EVONY,evony,,Evony.com,This protocol plug-in classifies the http traffic to the host evony.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1330,Q_PROTO_EXBLOG,exblog,,Exblog.jp,Japanase blog hosting services owned by Excite,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +288,Q_PROTO_EXPEDIA,expedia,,Expedia.fr,This protocol plug-in classifies the http traffic to the hosts expedia.com and expedia.fr.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +394,Q_PROTO_EXPERIENCE_PROJECT,experience_project,,ExperienceProject.com,This protocol plug-in classifies the http traffic to the host experienceproject.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +395,Q_PROTO_EXPLOROO,exploroo,,Exploroo.com,This protocol plug-in classifies the http traffic to the host exploroo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1727,Q_PROTO_EXTREMEBITS,extremebits,,ExtremeBits Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1728,Q_PROTO_EXTREMENOVA,extremenova,,ExtremeNova Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +785,Q_PROTO_EYEJOT,eyejot,,Eyejot.com,"This protocol plug-in classifies the http traffic to the hosts eyejot.com, eyejot.typepad.com and eyejot.uservoice.com. It also classifies the ssl traffic to the Common Name .eyejot.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1369,Q_PROTO_EYNY,eyny,,Eyny.com,"Hot topic, leisure and entertainment, academic, computer, information exchange forum.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1370,Q_PROTO_EZFLY,ezfly,,Ezfly.com,Taiwanese online travel agency.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1526,Q_PROTO_EZPEER,ezpeer,,MyMusic.net.tw,P2p for music. music files downloading ( http://www.ezpeer.com ),Peer to Peer,http;https;ssl,6.0.1.7,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1371,Q_PROTO_EZTRAVEL,eztravel,,EzTravel.com.tw,Taiwanese online travel agency.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +244,Q_PROTO_FACEBOOK,facebook,,Facebook.com,Facebook is a social network.,Web,http;https;ssl,PC-Windows-Browser-www.facebook.com (2014-02-12);Mobile-Android-Facebook 4.0.0;iPhone-iOS-Facebook 6.9.1 (2014-02-07);Nokia Mobile-Windows Phone OS 8.0.10517.150-Facebook 5.2.3.0 (2014-02-12);BlackBerry-BlackBerry OS 10.2.1.1925-Facebook 10.3.0.2 (2014-02-12),BlackBerry-BlackBerry OS-10.2.1.1925-Facebook-10.3.0.2 (2014-02-12);Mobile-Android-Browser- (2014-03-11);Mobile-Android-Facebook-4.0.0.26.3 (2014-01-04);Nokia Mobile-Symbian-Facebook-1.2.1 (2014-02-25);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-12);PC-Windows-7-Chrome-32.0.1700.107-Facebook-6.4.2 (2014-02-12);Windows Phone-Windows Phone OS-8-Facebook-5.2.1.0 (2014-02-12);iPhone-iOS-7.0.4-Facebook-6.9.1 (2014-02-07),,x,,,,,,,,,x,,,,,x,x,,,,x,,x,,,,x,,,,,,,,,, +1280,Q_PROTO_FACEBOOK_APPS,facebook_apps,,Facebook Apps,Facebook Applications.,Web,http;https;ssl,PC-Windows-Browser-apps.facebook.com (2014-11-14);Mobile-Android-Facebook 4.0.0;iPhone-iOS-Facebook 6.8,BlackBerry-BlackBerry OS-10.3.0.2 (2014-01-31);Mobile-Android-Facebook-4.0.0.26.3-zynga poker/farmville (2014-01-14);PC-Windows-7-Chrome-31.0.1650.63-angrybirds/farmville- (2014-01-16);iPhone-iOS-7.0.4-Facebook-6.8-zynga poker/farmville (2014-01-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,x,,,, +524,Q_PROTO_FACEBOOK_MAIL,facebook_mail,,facebook mail,Facebook_mail is a webmail environment on Facebook.,Webmail,http;https;ssl,PC-Windows-Browser-www.facebook.com (2013-08-30),PC-Windows-7-Chrome- (2013-12-02),,x,,x,,,,,,,x,,,,x,,,,,,x,,x,,,,,,,,,,,,,, +1869,Q_PROTO_FACENAMA,facenama,,Facenama.com,Iranian social network,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +396,Q_PROTO_FACEPARTY,faceparty,,Faceparty.com,This protocol plug-in classifies the http traffic to the host faceparty.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +397,Q_PROTO_FACES,faces,,Faces.com,This protocol plug-in classifies the http traffic to the host faces.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1117,Q_PROTO_FACETIME,facetime,,Apple FaceTime,FaceTime is an Apple video calling software which runs on iOS based mobile devices.,Audio/Video,rtp;sip,Mac-Mac OS 10-FaceTime 1.1.1;Mac-iOS-FaceTime 7.0.4,Mac-Mac OS-Facetime-1.1.1 (2013-12-17);iPhone-iOS-7.0.4-Facetime-7.0.4 (2013-12-17),,x,,,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +1870,Q_PROTO_FARSNEWS,farsnews,,FarsNews.com,Iranian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1372,Q_PROTO_FASHIONGUIDE,fashionguide,,FashionGuide.com.tw,"Fashion, beauty, discount information guide, fashion and beauty forum, cosmetic reviews.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1871,Q_PROTO_FATAKAT,fatakat,,Fatakat.com,Egyptian portal targeted to arab wowen lifestyle,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1308,Q_PROTO_FC2,fc2,,FC2.com,Japanese free blog platform and social website,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2206,Q_PROTO_FEMINA,femina,,Femina,"Macedonian website specialised in women news, trends, gears, etc",Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1729,Q_PROTO_FENOPY,fenopy,,Fenopy Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +398,Q_PROTO_FETLIFE,fetlife,,FetLife.com,This protocol plug-in classifies the http traffic to the host fetlife.com. It also classifies the ssl traffic to the Common Name fetlife.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 629,Q_PROTO_FIBRE_CHANNEL,fibre_channel,,Fibre Channel,The fibre_channel protocol (Fibre Channel) is found over the IP layer (IANA protocol number: 133).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1872,Q_PROTO_FIJITIMES,fijitimes,,Fijitimes,Fijian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -787,Q_PROTO_FILE_DROPPER,file_dropper,,File Dropper,This protocol plug-in classifies the http traffic to the host filedropper.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -786,Q_PROTO_FILE_HOST,file_host,,File Host,This protocol plug-in classifies the http traffic to the host filehost.ro.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1991,Q_PROTO_FILEFACTORY_COM,filefactory_com,,filefactory.com,Classifies web browsing on the filefactory.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -316,Q_PROTO_FILEFLYER,fileflyer,,fileflyer,"FileFlyer is an online solution to store, send and share files",Web,http;https,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1527,Q_PROTO_FILEGURI,fileguri,,Fileguri,File sharing web site and p2p client ( http://www.fileguri.com ),Peer to Peer,http;https;ssl,6.9.2,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1528,Q_PROTO_FILEI,filei,,Filei,P2P website. ( http://www.filei.co.kr ),Peer to Peer,http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -2090,Q_PROTO_FILELIST,filelist,,Filelist,Romanian torrent indexing website,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1529,Q_PROTO_FILEMAIL,filemail,,Filemail,File transfer service for private business. Uses Microsoft Cloud ( http://www.filemail.com ),Web,http;https;ssl,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1872,Q_PROTO_FIJITIMES,fijitimes,,FijiTimes.com,Fijian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +787,Q_PROTO_FILE_DROPPER,file_dropper,,FileDropper.com,This protocol plug-in classifies the http traffic to the host filedropper.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +786,Q_PROTO_FILE_HOST,file_host,,FileHost.ro,This protocol plug-in classifies the http traffic to the host filehost.ro.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1991,Q_PROTO_FILEFACTORY_COM,filefactory_com,,filefactory.com,Classifies web browsing on the filefactory.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +316,Q_PROTO_FILEFLYER,fileflyer,,FileFlyer.com,"FileFlyer is an online solution to store, send and share files",Web,http;https,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1527,Q_PROTO_FILEGURI,fileguri,,Fileguri.com,File sharing web site and p2p client ( http://www.fileguri.com ),Peer to Peer,http;https;ssl,6.9.2,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1528,Q_PROTO_FILEI,filei,,Filei.co.kr,P2P website. ( http://www.filei.co.kr ),Peer to Peer,http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +2090,Q_PROTO_FILELIST,filelist,,Filelist.ro,Romanian torrent indexing website,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1529,Q_PROTO_FILEMAIL,filemail,,Filemail.com,File transfer service for private business. Uses Microsoft Cloud ( http://www.filemail.com ),Web,http;https;ssl,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1086,Q_PROTO_FILEMAKER_PRO,filemaker_pro,,FileMaker Pro,FileMaker Pro is a relational database application from FileMaker Inc and which runs on Microsoft Windows as well as Mac OS.,Database,http;https;iiop,7,11/7/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1957,Q_PROTO_FILEPOST_RU,filepost_ru,,filepost.ru,Classifies web browsing on the filepost.ru Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -788,Q_PROTO_FILER_CX,filer_cx,,Filer.cx,This protocol plug-in classifies the http traffic to the host filer.cx.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1998,Q_PROTO_FILER_NET,filer_net,,filer.net,Classifies web browsing on the filer.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -789,Q_PROTO_FILES_TO,files_to,,Files.to,This protocol plug-in classifies the http traffic to the host files.to.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1997,Q_PROTO_FILESEND_NET,filesend_net,,filesend.net,Classifies web browsing on the filesend.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1530,Q_PROTO_FILESERVE,fileserve,,Fileserve,FIleserve is a file share service for personal use. ( http://www.fileserve.com ),Web,http;https,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1907,Q_PROTO_FILESHAREPRO,filesharepro,,WWW File Share Pro,"File transfer application, allowing file sharing on a LAN network, or on the Internet.",File Transfer,http;https,7.0 (Windows),PC-Windows-FileSharePro-7.0 (2013-12-23),,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -1693,Q_PROTO_FILESOVERMILES,filesovermiles,,Filesovermiles.com,Filesovermiles is a p2p written in Flash which is meant to be executed from a browser page (blocking use case is supported but flow classification is limited to web).,Peer to Peer,http;https,20130819,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -790,Q_PROTO_FILESTUBE,filestube,,Filestube,This protocol plug-in classifies the http traffic to the host filestube.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -560,Q_PROTO_FILETOPIA,filetopia,,Filetopia,"Filetopia is a free, proprietary peer-to-peer client software for Windows. It uses an encrypted protocol for all its communications. In addition to the usual peer-to-peer features, Filetopia provides a chat, a buddy search and a message board.",Peer to Peer,https;socks4;socks5;tcp;udp,Filetopia 3.04d,4/13/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -399,Q_PROTO_FILLOS_DE_GALICIA,fillos_de_galicia,,Fillos de Galicia,This protocol plug-in classifies the http traffic to the host fillos.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -400,Q_PROTO_FILMAFFINITY,filmaffinity,,FilmAffinity,This protocol plug-in classifies the http traffic to the host filmaffinity.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1873,Q_PROTO_FINN,finn,,Finn,Norwegian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1957,Q_PROTO_FILEPOST_RU,filepost_ru,,filepost.ru,Classifies web browsing on the filepost.ru Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +788,Q_PROTO_FILER_CX,filer_cx,,Filer.cx,This protocol plug-in classifies the http traffic to the host filer.cx.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1998,Q_PROTO_FILER_NET,filer_net,,filer.net,Classifies web browsing on the filer.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +789,Q_PROTO_FILES_TO,files_to,x,Files.to,This protocol plug-in classifies the http traffic to the host files.to.,Web,,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1997,Q_PROTO_FILESEND_NET,filesend_net,,filesend.net,Classifies web browsing on the filesend.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1530,Q_PROTO_FILESERVE,fileserve,,FileServe.com,FIleserve is a file share service for personal use. ( http://www.fileserve.com ),Web,http;https,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1907,Q_PROTO_FILESHAREPRO,filesharepro,,WWW File Share Pro (wfshome.com),"File transfer application, allowing file sharing on a LAN network, or on the Internet.",File Transfer,http;https,7.0 (Windows),PC-Windows-FileSharePro-7.0 (2013-12-23),,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +1693,Q_PROTO_FILESOVERMILES,filesovermiles,,Filesovermiles.com,Filesovermiles is a p2p written in Flash which is meant to be executed from a browser page (blocking use case is supported but flow classification is limited to web).,Peer to Peer,http;https,20130819,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +790,Q_PROTO_FILESTUBE,filestube,,FilesTube.com,This protocol plug-in classifies the http traffic to the host filestube.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +560,Q_PROTO_FILETOPIA,filetopia,,Filetopia.org,"Filetopia is a free, proprietary peer-to-peer client software for Windows. It uses an encrypted protocol for all its communications. In addition to the usual peer-to-peer features, Filetopia provides a chat, a buddy search and a message board.",Peer to Peer,https;socks4;socks5;tcp;udp,Filetopia 3.04d,4/13/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +399,Q_PROTO_FILLOS_DE_GALICIA,fillos_de_galicia,,Fillos de Galicia (fillos.org),This protocol plug-in classifies the http traffic to the host fillos.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +400,Q_PROTO_FILMAFFINITY,filmaffinity,,FilmAffinity.com,This protocol plug-in classifies the http traffic to the host filmaffinity.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1873,Q_PROTO_FINN,finn,,FINN.no,Norwegian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 630,Q_PROTO_FIRE,fire,,FIRE,The fire protocol (FIRE) is found over the IP layer (IANA protocol number: 125).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -556,Q_PROTO_FIREFOX_UPDATE,firefox_update,,Firefox Update,Mozilla Firefox update protocol for the browser and its plugins. This only applies to updates made from the browser and not those manually downloaded.,Web,http;https;ssl,Mozilla Firefox 24,PC-Windows-Firefox-v24 (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +556,Q_PROTO_FIREFOX_UPDATE,firefox_update,,Firefox Update,Mozilla Firefox update protocol for the browser and its plugins. This only applies to updates made from the browser and not those manually downloaded.,Web,http;https;ssl,PC-Windows-Firefox 24,Mac-Mac OS-Firefox-27.0.1 (2014-02-28);PC-Windows-Firefox-27.0.1 (2014-02-28),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, 942,Q_PROTO_FLASH,flash,,Flash Media Playback,Adobe Flash Media Playback is a dynamic HTTP streaming protocol used to access video contents from a smart client application.,Audio/Video,http;https,2.0,9/28/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -550,Q_PROTO_FLASHPLUGIN_UPDATE,flashplugin_update,,Adobe Flash-Plugin Update,Flash exchanges plug-in version numbers with Adobe servers.,Web,http;https,11.7.700 (Windows);11.9.900 (Windows),PC-Windows-Flash Plugin 11.9.90 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -401,Q_PROTO_FLEDGEWING,fledgewing,,FledgeWing,This protocol plug-in classifies the http traffic to the host fledgewing.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -300,Q_PROTO_FLICKR,flickr,,Flickr,This protocol plug-in classifies the http traffic to the host flickr.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2091,Q_PROTO_FLIPKART,flipkart,,Flipkart,Indian ecommerce website,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -402,Q_PROTO_FLIXSTER,flixster,,Flixster,This protocol plug-in classifies the http traffic to the host flixster.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -791,Q_PROTO_FLUMOTION,flumotion,,Flumotion,This protocol plug-in classifies the http traffic to the host flumotion.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -792,Q_PROTO_FLUXIOM,fluxiom,,Fluxiom,This protocol plug-in classifies the http traffic to the host fluxiom.com. It also classifies the ssl traffic to the Common Name fluxiom.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -793,Q_PROTO_FLY_PROXY,fly_proxy,,Fly Proxy,This protocol plug-in classifies the http traffic to the host flyproxy.com. It also classifies the ssl traffic to the Common Names flyproxy.com and SD259.slicebox.net.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1809,Q_PROTO_FLYCELL_EC,flycell_ec,,Flycell.ec,SMS alerts service based in Ecuador,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1810,Q_PROTO_FLYCELL_PE,flycell_pe,,Flycell.pe,"Peruvian ringtone, wallpaper and mobile game portal",Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -794,Q_PROTO_FOGBUGZ,fogbugz,,FogCreek (formerly Fogbugz),This protocol plug-in classifies the http traffic to the host fogbugz.com. It also classifies the ssl traffic to the Common Name fogbugz.com.,Web,http;https;ssl,20130828,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1874,Q_PROTO_FORENINGSSPARBANKEN,foreningssparbanken,,Foreningssparbanken,Swedish web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1373,Q_PROTO_FORTUNECHINA,fortunechina,,Fortunechina,Chinese top fortune news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2092,Q_PROTO_FORUM,forum,,Forum,Coratian forum,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -795,Q_PROTO_FOTKI,fotki,,Fotki,This protocol plug-in classifies the http traffic to the host fotki.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -403,Q_PROTO_FOTOLOG,fotolog,,Fotolog,This protocol plug-in classifies the http traffic to the host fotolog.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1531,Q_PROTO_FOTOWEB,fotoweb,,Fotoweb,Digital asset management workflow solutions ( http://fotoweb.fotoware.com ),Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -404,Q_PROTO_FOURSQUARE,foursquare,,Foursquare,This protocol plug-in classifies the http traffic to the host foursquare.com. It also classifies the ssl traffic to the Common Name foursquare.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -998,Q_PROTO_FOXMOVIES,foxmovies,,foxmovies,This protocol plug-in classifies the http traffic to the host foxmovies.jp.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -999,Q_PROTO_FOXNEWS,foxnews,,foxnews,This protocol plug-in classifies the http traffic to the host foxnews.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1000,Q_PROTO_FOXSPORTS,foxsports,,foxsports,This protocol plug-in classifies the http traffic to the host foxsports.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +550,Q_PROTO_FLASHPLUGIN_UPDATE,flashplugin_update,,Adobe Flash Plugin Update,Flash exchanges plug-in version numbers with Adobe servers.,Web,http;https,PC-Windows 7-Firefox 17;PC-Windows 7-Firefox 17,PC-Windows-Flash Player-11.9.90 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +401,Q_PROTO_FLEDGEWING,fledgewing,,FledgeWing.com,This protocol plug-in classifies the http traffic to the host fledgewing.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +300,Q_PROTO_FLICKR,flickr,,Flickr.com,This protocol plug-in classifies the http traffic to the host flickr.com.,Web,http;https;ssl,PC-Windows-Browser-www.flickr.com (2014-03-10);Mobile-Android 4.2.1-Flickr 2.1.5.29352 (2014-03-13),Mobile-Android-Flickr-2.1.5 (2014-03-13);PC-Windows-7-Chrome-31.0.1650.63 (2014-03-10);PC-Windows-7-Chrome-31.0.1650.63-Flickr-1.4- (2014-03-05);Windows Phone-Windows Phone OS-Flickr-2.1.0.0 (2014-01-07);iPhone-iOS-Flickr-2.32.1556 (2014-01-06),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2091,Q_PROTO_FLIPKART,flipkart,,Flipkart.com,Indian ecommerce website,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +402,Q_PROTO_FLIXSTER,flixster,,Flixster.com,This protocol plug-in classifies the http traffic to the host flixster.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +791,Q_PROTO_FLUMOTION,flumotion,,Flumotion.com,This protocol plug-in classifies the http traffic to the host flumotion.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +792,Q_PROTO_FLUXIOM,fluxiom,,Fluxiom.com,This protocol plug-in classifies the http traffic to the host fluxiom.com. It also classifies the ssl traffic to the Common Name fluxiom.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +793,Q_PROTO_FLY_PROXY,fly_proxy,,FlyProxy.com,This protocol plug-in classifies the http traffic to the host flyproxy.com. It also classifies the ssl traffic to the Common Names flyproxy.com and SD259.slicebox.net.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1809,Q_PROTO_FLYCELL_EC,flycell_ec,,Flycell.ec,SMS alerts service based in Ecuador,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1810,Q_PROTO_FLYCELL_PE,flycell_pe,,Flycell.pe,"Peruvian ringtone, wallpaper and mobile game portal",Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2168,Q_PROTO_FNB,fnb,,Fnb,South African banking website,Web,http;https;ssl,20140210,2/13/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +794,Q_PROTO_FOGBUGZ,fogbugz,,FogCreek.com,This protocol plug-in classifies the http traffic to the host fogbugz.com. It also classifies the ssl traffic to the Common Name fogbugz.com.,Web,http;https;ssl,20130828,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1874,Q_PROTO_FORENINGSSPARBANKEN,foreningssparbanken,,ForeningsSparbanken (swedbank.se),Swedish web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1373,Q_PROTO_FORTUNECHINA,fortunechina,,Fortunechina.com,Chinese top fortune news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2092,Q_PROTO_FORUM,forum,,Forum.ge,Coratian forum,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +795,Q_PROTO_FOTKI,fotki,,Fotki.com,This protocol plug-in classifies the http traffic to the host fotki.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +403,Q_PROTO_FOTOLOG,fotolog,,Fotolog.com,This protocol plug-in classifies the http traffic to the host fotolog.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1531,Q_PROTO_FOTOWEB,fotoweb,,Fotoweb.fotoware.com,Digital asset management workflow solutions ( http://fotoweb.fotoware.com ),Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +404,Q_PROTO_FOURSQUARE,foursquare,,Foursquare.com,This protocol plug-in classifies the http traffic to the host foursquare.com. It also classifies the ssl traffic to the Common Name foursquare.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +2195,Q_PROTO_FOXBUSINESS,foxbusiness,,Fox Business Network,Fox Business Network (FBN) is an American cable and satellite business news television channel that is owned by the Fox Entertainment Group division of 21st Century Fox. The network discusses business and financial news.,Web,http;https,2294,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +998,Q_PROTO_FOXMOVIES,foxmovies,,Foxmovies.jp,This protocol plug-in classifies the http traffic to the host foxmovies.jp.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +999,Q_PROTO_FOXNEWS,foxnews,,FoxNews.com,This protocol plug-in classifies the http traffic to the host foxnews.com.,Web,akamai;http;https,PC-Windows-Browser-www.foxnews.com (2014-03-14),PC-Windows-7-Chrome-33.0.1750.149 (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1000,Q_PROTO_FOXSPORTS,foxsports,,FoxSports.com,This protocol plug-in classifies the http traffic to the host foxsports.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 887,Q_PROTO_FOXY,foxy,,Foxy,Foxy is a peer-to-peer protocol based on GnucDNA.,Peer to Peer,gnutella;http;https,1,6/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1811,Q_PROTO_FREE,free,,Free,French ISP and mobile operator website.,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2197,Q_PROTO_FREE_MUSIC_DOWNLOAD,free_music_download,,Free Music Download Pro - Downloader and Player,"Download, play, sort, organize media files.",Audio/Video,http;https,iPhone-iOS-Free Music Download Pro 1.4 (2014-03-19),,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,x, 568,Q_PROTO_FREEBSD_UPDATE,freebsd_update,,FreeBSD Updates,This protocol is used for FreeBSD updates.,Web,http;https,FreeBSD v8.1,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -796,Q_PROTO_FREEETV,freeetv,,FreeeTV,This protocol plug-in classifies the http traffic to the host freeetv.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1730,Q_PROTO_FREELOADER,freeloader,,Freeloader,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1875,Q_PROTO_FREEMAIL,freemail,,Freemail,Hungarian webmail,Web,http;https,20131025,,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2007,Q_PROTO_FREEPROXIES,freeproxies,,Freeproxies,"Proxy hosting service (redirector and anonymizer) that uses the CGI Proxy script. Main features are SSL support and Youtube.com video streaming proxying. It hosts several proxy websites, like Vtunnel.com.",Web,http;https;ssl,20131227,PC-Windows-20131219 (2013-12-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1731,Q_PROTO_FREETORRENT,freetorrent,,Freetorrent,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -405,Q_PROTO_FRIENDS_REUNITED,friends_reunited,,Friends Reunited,This protocol plug-in classifies the http traffic to the host friendsreunited.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -320,Q_PROTO_FRIENDSTER,friendster,,Friendster,"Friendster is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20111115,11/4/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -797,Q_PROTO_FRIENDVOX,friendvox,,FriendVox,This protocol plug-in classifies the http traffic to the host friendvox.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +796,Q_PROTO_FREEETV,freeetv,,FreeeTV.com,This protocol plug-in classifies the http traffic to the host freeetv.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1730,Q_PROTO_FREELOADER,freeloader,,Freeloader Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1875,Q_PROTO_FREEMAIL,freemail,,Freemail.hu,Hungarian webmail,Web,http;https,20131025,,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +2007,Q_PROTO_FREEPROXIES,freeproxies,,Freeproxies.org,"Proxy hosting service (redirector and anonymizer) that uses the CGI Proxy script. Main features are SSL support and Youtube.com video streaming proxying. It hosts several proxy websites, like Vtunnel.com.",Web,http;https;ssl,20131227,PC-Windows (2013-12-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +1731,Q_PROTO_FREETORRENT,freetorrent,,Freetorrent Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +405,Q_PROTO_FRIENDS_REUNITED,friends_reunited,,FriendsReunited.com,This protocol plug-in classifies the http traffic to the host friendsreunited.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +320,Q_PROTO_FRIENDSTER,friendster,,Friendster.com,"Friendster is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20111115,11/4/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +797,Q_PROTO_FRIENDVOX,friendvox,,FriendVox.com,This protocol plug-in classifies the http traffic to the host friendvox.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, 536,Q_PROTO_FRING,fring,,fring - Peer to Peer Mobile VOIP,Fring is a peer-to-peer Mobile VoIP based Internet telephony network.,Audio/Video,http;https;ssl;tcp;udp,20100804,12/12/2011,,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -2001,Q_PROTO_FROSTWIRE,frostwire,,FrostWire,FrostWire is a BitTorrent client. This signature classifies flows to the official software website,Peer to Peer,bittorrent;http;https,20131204,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -406,Q_PROTO_FRUHSTUCKSTREFF,fruhstuckstreff,,Fruhstuckstreff,This protocol plug-in classifies the http traffic to the host fruehstueckstreff.de.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -589,Q_PROTO_FSECURE_UPDATE,fsecure_update,,Fsecure Update,Fsecure_update is the protocol used for fsecure softwares updates.,Web,http;https,F-Secure Anti-Virus 2011,PC-Windows-Antivirus-1.77.132.0 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +2001,Q_PROTO_FROSTWIRE,frostwire,,FrostWire Bittorrent client,FrostWire is a BitTorrent client. This signature classifies flows to the official software website,Peer to Peer,bittorrent;http;https,20131204,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +406,Q_PROTO_FRUHSTUCKSTREFF,fruhstuckstreff,,Fruhstuckstreff.de,This protocol plug-in classifies the http traffic to the host fruehstueckstreff.de.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2176,Q_PROTO_FRUIT_NINJA,fruit_ninja,,Fruit Ninja,Mobile game.,Game,http;https,Mobile-Android-Fruit Ninja 1.8.8;iPhone-iOS-Fruit Ninja 1.8.8,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +589,Q_PROTO_FSECURE_UPDATE,fsecure_update,,Fsecure Update,Fsecure_update is the protocol used for Fsecure softwares updates.,Web,http;https,PC-Windows 7-F-Secure Anti-Virus 1.77.132.0,PC-Windows-F-Secure Anti-Virus-1.77.132.0 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, 45,Q_PROTO_FTP,ftp,,File Transfer Protocol,The FTP protocol is used for reliable data transfer between a client and a server.,File Server,http;socks4;socks5;tcp,File Transfer Protocol IPv4;File Transfer Protocol IPv6,7/4/2008,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,x,,,,,,,, 46,Q_PROTO_FTP_DATA,ftp_data,,File Transfer Protocol Data,This protocol is used to transport data in data connection of FTP communication.,File Server,http;tcp,FTP Data IPv4;FTP Data IPv6,7/4/2008,,,,,ftp,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -751,Q_PROTO_FTPS,ftps,,FTP over SSL,Secure version of the FTP protocol.,File Server,ssl,Secure FTP IPv4;Secure FTP IPv6,,,,,,,989 and 990,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -407,Q_PROTO_FUBAR,fubar,,Fubar,This protocol plug-in classifies the http traffic to the host fubar.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +751,Q_PROTO_FTPS,ftps,,File Transfer Protocol Secure,Secure version of the FTP protocol.,File Server,ssl,Secure FTP IPv4;Secure FTP IPv6,,,,,,,989 and 990,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +407,Q_PROTO_FUBAR,fubar,,Fubar.com,This protocol plug-in classifies the http traffic to the host fubar.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 1094,Q_PROTO_FUNSHION,funshion,,Funshion video player,Funshion player is a Chinese service for downloading and streaming movies.,Web,http;https;tcp;udp,2.4.5.9,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1532,Q_PROTO_FUZE_MEETING,fuze_meeting,,Fuze meeting,"Video-conferencing application (audio, video HD, desktop sharing, file transfer)",Audio/Video,https;ssl,1.10.45735.0,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -343,Q_PROTO_GADUGADU,gadugadu,,Gadu Gadu,Gadu Gadu is a Polish instant messaging protocol.,Instant Messaging,http;https;tcp,GaduGadu v10,10/16/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -408,Q_PROTO_GAIAONLINE,gaiaonline,,GaiaOnline,This protocol plug-in classifies the http traffic to the host gaiaonline.com. It also classifies the ssl traffic to the Common Name .gaiaonline.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1374,Q_PROTO_GAMEBASE_TW,gamebase_tw,,Gamebase Taiwan,"Taiwanese game information portal providing game reviews, walkthrough, cheats.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1375,Q_PROTO_GAMER_TW,gamer_tw,,Gamer Taiwan,"Taiwanese game portal providing game reviews, forum, news.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -409,Q_PROTO_GAMERDNA,gamerdna,,GamerDNA,This protocol plug-in classifies the http traffic to the host gamerdna.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1150,Q_PROTO_GAMES_CO,games_co,,Games_co,This protocol plug-in classifies the http traffic to the host games.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1376,Q_PROTO_GAMESMOMO,gamesmomo,,Gamesmomo,"Selection of fun games, Flash Games.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1273,Q_PROTO_GANJI,ganji,,Ganji,This protocol plug-in classifies the http traffic to the host ganji.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1876,Q_PROTO_GARAANEWS,garaanews,,Garaanews,Jordanian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1532,Q_PROTO_FUZE_MEETING,fuze_meeting,,Fuze meeting,"Video-conferencing application (audio, video HD, desktop sharing, file transfer)",Audio/Video,https;ssl,1.10.45735.0,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +343,Q_PROTO_GADUGADU,gadugadu,,Gadu-Gadu,Gadu Gadu is a Polish instant messaging protocol.,Instant Messaging,http;https;tcp,GaduGadu v10,10/16/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +408,Q_PROTO_GAIAONLINE,gaiaonline,,GaiaOnline.com,This protocol plug-in classifies the http traffic to the host gaiaonline.com. It also classifies the ssl traffic to the Common Name .gaiaonline.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1374,Q_PROTO_GAMEBASE_TW,gamebase_tw,,Gamebase.com.tw,"Taiwanese game information portal providing game reviews, walkthrough, cheats.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1375,Q_PROTO_GAMER_TW,gamer_tw,,Gamer.com.tw,"Taiwanese game portal providing game reviews, forum, news.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +409,Q_PROTO_GAMERDNA,gamerdna,,GamerDNA.com,This protocol plug-in classifies the http traffic to the host gamerdna.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1150,Q_PROTO_GAMES_CO,games_co,,Games.co.id,This protocol plug-in classifies the http traffic to the host games.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1376,Q_PROTO_GAMESMOMO,gamesmomo,,Gamesmomo.net,"Selection of fun games, Flash Games.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1273,Q_PROTO_GANJI,ganji,,Ganji.com,This protocol plug-in classifies the http traffic to the host ganji.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1876,Q_PROTO_GARAANEWS,garaanews,,GaraaNews.com,Jordanian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 48,Q_PROTO_GARP,garp,,Generic Attribute Registration Protocol,The Generic Attribute Registration Protocol (GARP) provides a generic framework whereby devices in a bridged LAN can register or delete attribute values between each other.,Application Service,8021q;eth;gre,RFC 3945,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -410,Q_PROTO_GATHER,gather,,Gather,This protocol plug-in classifies the http traffic to the host gather.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1533,Q_PROTO_GATHERPLACE,gatherplace,,Gatherplace,Gatherplace is a web conferencing software.,Web,http;https;ssl,4.3.8.2,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -411,Q_PROTO_GAYS,gays,,Gays,This protocol plug-in classifies the http traffic to the host gays.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1877,Q_PROTO_GAZETA,gazeta,,Gazeta,Polish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2009,Q_PROTO_GBRIDGE,gbridge,,Gbridge,"Gbridge is a free software that lets you remotely control PCs, sync folders, share files, and chat securely.",Tunneling,http;https;udp,2.0.0.1363,PC-Windows-2.0.0.1363 (2013-12-17),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -412,Q_PROTO_GENI,geni,,Geni,This protocol plug-in classifies the http traffic to the host geni.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,, -2093,Q_PROTO_GERASANEWS,gerasanews,,Gerasanews,Jordanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1377,Q_PROTO_GFAN,gfan,,Gfan,"One of the largest Android communities providing ROM, applications, tutorials and other content.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -631,Q_PROTO_GGP,ggp,,Gateway_to_Gateway,The ggp protocol (Gateway_to_Gateway) is found over the IP layer (IANA protocol number: 3).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1878,Q_PROTO_GHANAWEB,ghanaweb,,Ghanaweb,Ghanaian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1107,Q_PROTO_GHOSTSURF,ghostsurf,,GhostSurf Protocol,GhostSurf is an internet privacy application.,Security Service,ssl;tcp,6.0,6.0 (2012-04-20),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1987,Q_PROTO_GIGASIZE_COM,gigasize_com,,gigasize.com,Classifies web browsing on the gigasize.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1534,Q_PROTO_GIGATRIBE,gigatribe,,GigaTribe,GigaTribe is a peer-to-peer file sharing network (classification of web/authentication part only).,Peer to Peer,http;https;ssl,3.04.012,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -798,Q_PROTO_GIGAUP,gigaup,,Gigaup,This protocol plug-in classifies the http traffic to the host gigaup.fr. It also classifies the ssl traffic to the Common Name gigaup.fr.,Web,http;https;ssl,20120209,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -49,Q_PROTO_GIOP,giop,,General Inter-ORB Protocol (Corba),The General Inter-Orb protocol (GIOP) is used to make requests or return replies between ORBs in a Corba environment.,Middleware,tcp;udp,1.0;1.1;1.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -752,Q_PROTO_GIOPS,giops,,Secure General Inter-ORB Protocol,This protocol is the secure version of the GIOP protocol.,Middleware,ssl,Secure General Inter-ORB Protocol v1,,,,,,,684,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -50,Q_PROTO_GIZMO,gizmo,x,Gizmo Protocol,"Gizmo was an instant messaging service, acquired and closed by Google.",Instant Messaging,http,WinGizmo;Gizmo-s2n1,7/4/2008,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, -799,Q_PROTO_GLIDE,glide,,Glide,This protocol plug-in classifies the http traffic to the host desktop.glidesociety.com. It also classifies the ssl traffic to the Common Name glidesociety.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1879,Q_PROTO_GLOBO,globo,,Globo,Brazilian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -51,Q_PROTO_GMAIL,gmail,,Google Mail,Gmail is the Google webmail service.,Webmail,google_gen;http;https;ssl,20130830,PC-Windows-Chrome-20140109 (2014-01-09),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -263,Q_PROTO_GMAIL_BASIC,gmail_basic,,Gmail basic,Gmail basic is the HTML version of the Google Webmail service.,Webmail,google_gen;http;https,20130705,PC-Windows-Browser-20130101 (2014-01-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +410,Q_PROTO_GATHER,gather,,Gather.com,This protocol plug-in classifies the http traffic to the host gather.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1533,Q_PROTO_GATHERPLACE,gatherplace,,GatherPlace.net,Gatherplace is a web conferencing software.,Web,http;https;ssl,4.3.8.2,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +411,Q_PROTO_GAYS,gays,,Gays.com,This protocol plug-in classifies the http traffic to the host gays.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1877,Q_PROTO_GAZETA,gazeta,,Gazeta.pl,Polish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2181,Q_PROTO_GAZETAEXPRESS,gazetaexpress,,Gazetaexpress,Albanian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2184,Q_PROTO_GAZZETTA,gazzetta,,Gazzetta,Greek news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2009,Q_PROTO_GBRIDGE,gbridge,,Gbridge.com,"Gbridge is a free software that lets you remotely control PCs, sync folders, share files, and chat securely.",Tunneling,http;https;udp,2.0.0.1363,PC-Windows-Gbridge-2.0.0.1363 (2013-12-17),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +412,Q_PROTO_GENI,geni,,Geni.com,This protocol plug-in classifies the http traffic to the host geni.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,, +2093,Q_PROTO_GERASANEWS,gerasanews,,Gerasanews.com,Jordanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1377,Q_PROTO_GFAN,gfan,,Gfan.com,"One of the largest Android communities providing ROM, applications, tutorials and other content.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +631,Q_PROTO_GGP,ggp,,Gateway-to-Gateway Protocol,The ggp protocol (Gateway_to_Gateway) is found over the IP layer (IANA protocol number: 3).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1878,Q_PROTO_GHANAWEB,ghanaweb,,GhanaWeb.com,Ghanaian news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1107,Q_PROTO_GHOSTSURF,ghostsurf,,GhostSurf,GhostSurf is an internet privacy application.,Security Service,ssl;tcp,6.0,PC-Windows-7-GhostSurf-6.0 (2012-04-20),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +1987,Q_PROTO_GIGASIZE_COM,gigasize_com,,gigasize.com,Classifies web browsing on the gigasize.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1534,Q_PROTO_GIGATRIBE,gigatribe,,GigaTribe.com,GigaTribe is a peer-to-peer file sharing network (classification of web/authentication part only).,Peer to Peer,http;https;ssl,3.04.012,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +798,Q_PROTO_GIGAUP,gigaup,,GigaUP.fr,This protocol plug-in classifies the http traffic to the host gigaup.fr. It also classifies the ssl traffic to the Common Name gigaup.fr.,Web,http;https;ssl,20120209,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +49,Q_PROTO_GIOP,giop,,General Inter-ORB Protocol,The General Inter-Orb protocol (GIOP) is used to make requests or return replies between ORBs in a Corba environment.,Middleware,tcp;udp,1.0;1.1;1.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +752,Q_PROTO_GIOPS,giops,,General Inter-ORB Protocol Secure ,This protocol is the secure version of the GIOP protocol.,Middleware,ssl,Secure General Inter-ORB Protocol v1,,,,,,,684,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +50,Q_PROTO_GIZMO,gizmo,x,Gizmo,"Gizmo was an instant messaging service, acquired and closed by Google.",Instant Messaging,http,WinGizmo;Gizmo-s2n1,7/4/2008,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, +799,Q_PROTO_GLIDE,glide,,Glide services,This protocol plug-in classifies the http traffic to the host desktop.glidesociety.com. It also classifies the ssl traffic to the Common Name glidesociety.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2192,Q_PROTO_GLOBALPUBLISHERS,globalpublishers,,Globalpublishers,Tanzanian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1879,Q_PROTO_GLOBO,globo,,Globo.com,Brazilian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +51,Q_PROTO_GMAIL,gmail,,Google Mail,Gmail is the Google webmail service.,Webmail,google_gen;http;https;ssl,PC-Windows-Browser-www.gmail.com (2013-08-30),Mobile-Android-Gmail-4.5.2-714156 (2014-01-09);PC-Windows-7-Chrome-31.0.1650.63- (2014-01-09);Windows Phone-Windows Phone OS-8-Gmail-8.2.1.5 (2014-01-16);iPhone-iOS-Gmail-2.71828 (2014-01-07),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +263,Q_PROTO_GMAIL_BASIC,gmail_basic,,Gmail basic,Gmail basic is the HTML version of the Google Webmail service.,Webmail,google_gen;http;https,PC-Windows-Browser-www.gmail.com (2013-07-05),PC-Windows-Firefox (2014-03-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, 273,Q_PROTO_GMAIL_CHAT,gmail_chat,,Google Chat,Google chat is an online Webmessenger from Google.,Instant Messaging,google_gen;http;https;ssl,20110210,3/7/2012,,x,,,,,,,,x,x,,,,,x,x,,,,,,,,,,,,,,,,,,,, 906,Q_PROTO_GMAIL_DRIVE,gmail_drive,,Gmail drive,"GMAIL Drive is a Shell Namespace Extension that creates a virtual file system around a Google Mail account, allowing Gmail as a storage medium. GMAIL Drive is only classified over http and not over https.",File Server,http;https,1.0.17,8/2/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -280,Q_PROTO_GMAIL_MOBILE,gmail_mobile,,Gmail mobile version,Gmail_mobile is the Google webmail for mobile phones. This protocol decodes only the non-ciphered version.,Webmail,google_gen;http;https,20120229,1/14/2014,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -1203,Q_PROTO_GMARKET,gmarket,,Gmarket,This protocol plug-in classifies the http traffic to the host gmarket.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +280,Q_PROTO_GMAIL_MOBILE,gmail_mobile,,Gmail Mobile,Gmail_mobile is the Google webmail for mobile phones. This protocol decodes only the non-ciphered version.,Webmail,google_gen;http;https,20120229,3/11/2014,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +1203,Q_PROTO_GMARKET,gmarket,,Gmarket.co.kr,This protocol plug-in classifies the http traffic to the host gmarket.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 632,Q_PROTO_GMTP,gmtp,,GMTP,The gmtp protocol (GMTP) is found over the IP layer (IANA protocol number: 100).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1116,Q_PROTO_GMX,gmx,,gmx,GMX is a German webmail.,Webmail,http;https;ssl,20130418,chrome (2013-04-29),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -903,Q_PROTO_GNUNET,gnunet,,GNUnet Protocol,GNUnet is a framework for secure peer-to-peer networking mainly used for anonymous file sharing. It is part of the GNU project.,Peer to Peer,http;https;tcp;udp,9.7,8/9/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -52,Q_PROTO_GNUTELLA,gnutella,,gnutella,Gnutella is a peer-to-peer protocol. [Note: gnutella is also known as kadmelia.],Peer to Peer,http;https;tcp;udp,Gnutella<=2;LimeWire<=4.16.6;Shareaza <= 2.7.0.0;imesh<=7.2;Foxy,PC-Windows-LimeRunner-2.8.0.0 (2013-10-22);PC-Windows-Shareaza-2.7.0.0 (2013-11-25),,x,,x,,,,,,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1780,Q_PROTO_GOAL,goal,,Goal,New media company that provides soccer news and entertainment,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2094,Q_PROTO_GOB,gob,,Gob,Bolivian government portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -53,Q_PROTO_GOBOOGY,goboogy,,GoBoogy Protocol,GoBoogy is a peer-to-peer (p2p) application used to share files with other GoBoogy users over the Internet.,Peer to Peer,http;https;tcp,Goboogy v2.3.9,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1880,Q_PROTO_GOGO,gogo,,Gogo,Mongolian search engine and web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1535,Q_PROTO_GOGOBOX,gogobox,,Gogobox,Cloud file storage web service.,Web,http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -413,Q_PROTO_GOGOYOKO,gogoyoko,,Gogoyoko,This protocol plug-in classifies the http traffic to the host gogoyoko.com.,Web,amazon_aws;http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1378,Q_PROTO_GOHAPPY,gohappy,,Gohappy,Taiwanese E-commerce web portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1536,Q_PROTO_GOMEETNOW,gomeetnow,,Gomeetnow,Gomeetnow is a web conferencing software.,Web,http;https;ssl,5.0.1.40,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1503,Q_PROTO_GOMTV_VOD,gomtv_vod,,Gom TV (VOD),Gom TV is a social video website designed for gamers.,Web,http;https;ssl,20130628,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1310,Q_PROTO_GOO_NE,goo_ne,,Goo,Japanese web portal owned by NTT,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -414,Q_PROTO_GOODREADS,goodreads,,Goodreads,This protocol plug-in classifies the http traffic to the host goodreads.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -54,Q_PROTO_GOOGLE,google,,Google,This protocol is used for sending user queries to the Google search engine.,Web,google_gen;https;ssl,20110621,PC-Windows-Website-20120924 (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -247,Q_PROTO_GOOGLE_ADS,google_ads,,Google ads,Google Ads is the online ad service from Google.,Web,google_gen;http;https;ssl,20131009,PC-Windows7-ChromeBrowser30.0.1599.69m-20131007 (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -744,Q_PROTO_GOOGLE_ANALYTICS,google_analytics,,Google Analytics,Google Analytics is the enterprise-class web analytics solution that gives you rich insights into your website traffic and marketing effectiveness.,Web,google_gen;http;https;ssl,20131009,PC-Windows7-ChromeBrowser30.0.1599.69m-20131007 (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1104,Q_PROTO_GOOGLE_APPENGINE,google_appengine,,Google App Engine,Google App Engine is a platform as a service (PaaS) cloud computing platform for developing and hosting web applications in Google-managed data centers.,Web,google_gen;http;https;ssl,1.8.8,PC-Windows-GoogleAppEngine1.8.8 (2013-12-16),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1116,Q_PROTO_GMX,gmx,,GMX webmail,GMX is a German webmail.,Webmail,http;https;ssl,20130418,PC-Windows-Chrome (2013-04-29),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +903,Q_PROTO_GNUNET,gnunet,,GNUnet,GNUnet is a framework for secure peer-to-peer networking mainly used for anonymous file sharing. It is part of the GNU project.,Peer to Peer,http;https;tcp;udp,9.7,8/9/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +52,Q_PROTO_GNUTELLA,gnutella,,gnutella,Gnutella is a peer-to-peer protocol. [Note: gnutella is also known as kadmelia.],Peer to Peer,http;https;tcp;udp,PC-Windows-Gnutella 2.0;PC-Windows-LimeWire 4.16.6;PC-Windows-imesh 7.2;PC-Windows 7-Shareaza 2.7.0.0 (2013-11-25),Mobile-Android-4.2.1-DroidG (gnutella)-1.2 (2014-02-19);Mobile-Android-4.2.1-DroidG2 (gnutella 2)-1.1.f (2014-02-19);PC-Windows-LimeRunner-2.8.0.0 (2013-10-22);PC-Windows-Shareaza-2.7.0.0 (2013-11-25);PC-Windows-Shareaza-2.7.1.0 (2014-01-14),,x,,x,,,,,,,x,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1780,Q_PROTO_GOAL,goal,,Goal.com,New media company that provides soccer news and entertainment,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2094,Q_PROTO_GOB,gob,,Gob.bo,Bolivian government portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +53,Q_PROTO_GOBOOGY,goboogy,,GoBoogy,GoBoogy is a peer-to-peer (p2p) application used to share files with other GoBoogy users over the Internet.,Peer to Peer,http;https;tcp,Goboogy v2.3.9,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1880,Q_PROTO_GOGO,gogo,,Gogo.mn,Mongolian search engine and web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1535,Q_PROTO_GOGOBOX,gogobox,,Gogobox.com.tw,Cloud file storage web service.,Web,http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +413,Q_PROTO_GOGOYOKO,gogoyoko,,Gogoyoko.com,This protocol plug-in classifies the http traffic to the host gogoyoko.com.,Web,amazon_aws;http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1378,Q_PROTO_GOHAPPY,gohappy,,Gohappy.com.tw,Taiwanese E-commerce web portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1536,Q_PROTO_GOMEETNOW,gomeetnow,,Gomeetnow,Gomeetnow is a web conferencing software.,Web,http;https;ssl,5.0.1.40,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1503,Q_PROTO_GOMTV_VOD,gomtv_vod,,GOMTV.net (VOD),Gom TV is a social video website designed for gamers.,Web,http;https;ssl,20130628,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1310,Q_PROTO_GOO_NE,goo_ne,,Goo.ne.jp,Japanese web portal owned by NTT,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +414,Q_PROTO_GOODREADS,goodreads,,Goodreads.com,This protocol plug-in classifies the http traffic to the host goodreads.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +54,Q_PROTO_GOOGLE,google,,Google.com,This protocol is used for sending user queries to the Google search engine.,Web,google_gen;https;ssl,PC-Windows-Browser-www.google.com (2014-02-06);Mobile-Android-Google Search 3.1.24.941712 (2014-02-06);iPhone-iOS-Google Search 3.2.1.25875 (2014-02-06);Windows Phone-Windows Phone OS-Google 2.0.295.80 (2014-02-06);BlackBerry-BlackBerry OS-Google Search Popup 1.7.1 (2014-02-06),BlackBerry-BlackBerry OS-Google Search Pop Up from RadicalAppz-1.7.1 (2014-02-06);Mobile-Android-Google Search-3.1.24.941712 (2014-02-06);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-06);Windows Phone-Windows Phone OS-Google Search-2.0.295.80 (2014-02-06);iPhone-iOS-Google Search-3.2.0 (2014-02-06),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +2150,Q_PROTO_GOOGLE_ACCOUNTS,google_accounts,,Google Accounts,Detects SSL access to the Google Accounts server.,Web,google_gen,20140203,2/13/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +247,Q_PROTO_GOOGLE_ADS,google_ads,,Google ads,Google Ads is the online ad service from Google.,Web,google_gen;http;https;ssl,PC-Windows-Browser-adwords.google.com (2013-10-09),PC-Windows-7-Chrome-30.0.1599.69m (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +744,Q_PROTO_GOOGLE_ANALYTICS,google_analytics,,Google Analytics,Google Analytics is the enterprise-class web analytics solution that gives you rich insights into your website traffic and marketing effectiveness.,Web,google_gen;http;https;ssl,PC-Windows-Browser-www.google.com/analytics/ (2013-10-09),PC-Windows-7-Chrome-30.0.1599.69m (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1104,Q_PROTO_GOOGLE_APPENGINE,google_appengine,,Google App Engine,Google App Engine is a platform as a service (PaaS) cloud computing platform for developing and hosting web applications in Google-managed data centers.,Web,google_gen;http;https;ssl,PC-Windows 7-Google App Engine 1.8.8 (2013-11-19),PC-Windows-Google App Engine-1.8.8 (2013-12-16),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 800,Q_PROTO_GOOGLE_CACHE,google_cache,,Google Cache,Google Cache saves a copy of the webpages which were found by the Google search engine.,Web,google_gen;http;https;ssl,20111107,3/29/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1099,Q_PROTO_GOOGLE_DESKTOP,google_desktop,,Google Desktop,"Google Desktop is a desktop search software made by Google, with indexed document metadata.",Web,google_gen;http;https,20111122,5.9.1005.12335 (last version: google_desktop is no longer supported by google) (2011-12-20),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1489,Q_PROTO_GOOGLE_DOCS,google_docs,,Google Documents,"On-line file storage and sharing web-service by Google. Most of the traffic is encrypted with generic Google certificates, and cannot be classified. Classification is correct for traffic under a proxy and some limited workflows. [Note: google_docs is also known as google_drive.]",Web,google_gen,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -55,Q_PROTO_GOOGLE_EARTH,google_earth,,Google Earth,Google Earth is a program used to view a virtual Earth in 3D.,Web,google_gen;http;https,7.1.1.1888,PC-Windows-7.1.1.1888 (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1099,Q_PROTO_GOOGLE_DESKTOP,google_desktop,,Google Desktop,"Google Desktop is a desktop search software made by Google, with indexed document metadata.",Web,google_gen;http;https,20111122,PC-Windows-Google Desktop-5.9.1005.12335 (2011-12-20),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1489,Q_PROTO_GOOGLE_DOCS,google_docs,,Google Documents,"On-line file storage and sharing web-service by Google. Most of the traffic is encrypted with generic Google certificates, and cannot be classified. Classification is correct for traffic under a proxy and some limited workflows. [Note: google_docs is also known as google_drive.]",Web,google_gen,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +55,Q_PROTO_GOOGLE_EARTH,google_earth,,Google Earth,Google Earth is a program used to view a virtual Earth in 3D.,Web,google_gen;http;https,PC-Windows 7-Google Earth 7.1.1.1888 (2013-07-15),Mobile-Android-4.1.2-Google Earth-7.1.3.1255 (2014-03-03);PC-Windows-7-Google Earth-7.1.2.2041 (2014-02-28);iPhone-iOS-7.0.4-Google Earth-7.1.1.1843 (2014-03-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 943,Q_PROTO_GOOGLE_GEN,google_gen,,Google Generic,This protocol is a generic layer used as a base for all the Google protocols.,Web,http;https;ssl,20110621,,,x,,,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,, 56,Q_PROTO_GOOGLE_GROUPS,google_groups,,Google groups,Google groups,Forum,google_gen;http;https,20110119,10/4/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -57,Q_PROTO_GOOGLE_MAPS,google_maps,,Google Maps,Google Maps can be used to calculate routes and to look at maps. This traffic is classified as google on iOS and Android mobile version (encrypted traffic).,Web,google_gen;http;https;ssl,8.0.9.1(winphone);20131009,Mobile-Android-App7.5.0 (2014-01-17);Mobile-WindowsPhone-App8.0.9.1 (2014-01-17);PC-Windows-Chrome-20131009 (2014-01-17);iPhone-iOS7.0.4-App2.5.3.14911 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -594,Q_PROTO_GOOGLE_PICASA,google_picasa,,Google Picasa,Google Picasa is a digital photo and video organizer used to edit and synchronize pictures or videos over the web.,Web,google_gen;http;https;ssl,20110225,"picasa 3.8.0 (117.29,0) (2011-08-02)",,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1122,Q_PROTO_GOOGLE_PLAY,google_play,,Google Play,Google Play (formerly Android Market) is an online software store developed by Google for Android OS devices.,Application Service,http;https,20120329,Mobile-Android4.2.1-App4.5.10 (2014-01-08);PC-Windows-Browser-Chrome32-20140116 (2014-01-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1125,Q_PROTO_GOOGLE_PLUS,google_plus,,Google Plus,Google Plus is a social network. It is classified when sharing from an external link. Other traffic is classified as google or google_cache.,Web,google_gen;http;https;ssl,20131125,Mobile-Android-App4.2.3.56698342-v10 (2013-11-25);PC-Windows-Website-Chrome30.0.1599.69m (2013-11-25);iPhone-iOS-App4.6.0 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1171,Q_PROTO_GOOGLE_SKYMAP,google_skymap,,Google Skymap,Google Sky Map is an outer space viewer Android mobile application.,Web,google_analytics,20120530,Google skymap for android 1.6.4 (2012-06-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1105,Q_PROTO_GOOGLE_TOOLBAR,google_toolbar,,Google Toolbar,"The Google Toolbar is an extension for Internet Explorer and Mozilla Firefox which provides a search box, a pop-up blocker, a translator, etc..",Web,google_gen;http;https,Google Toolbar 7.0,IE and Firefox (2011-12-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +57,Q_PROTO_GOOGLE_MAPS,google_maps,,Google Maps,Google Maps can be used to calculate routes and to look at maps. This traffic is classified as google on iOS and Android mobile version (encrypted traffic).,Web,google_gen;http;https;ssl,PC-Windows-Browser-maps.google.com (2013-10-09);Windows Phone-Windows Phone OS-Google Maps 8.0.9.1,Mobile-Android-Google Maps-7.5.0 (2014-01-17);PC-Windows-Chrome (2013-10-09);Windows Phone-Windows Phone OS-Google Maps-8.0.9.1 (2014-01-17);iPhone-iOS-7.0.4-Google Maps-2.5.3 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +594,Q_PROTO_GOOGLE_PICASA,google_picasa,,Google Picasa,Google Picasa is a digital photo and video organizer used to edit and synchronize pictures or videos over the web.,Web,google_gen;http;https;ssl,20110225,"PC-Windows-XP-Picasa-3.8.0 (117.29,0) (2011-08-02)",,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1122,Q_PROTO_GOOGLE_PLAY,google_play,,Google Play,Google Play (formerly Android Market) is an online software store developed by Google for Android OS devices.,Application Service,http;https,PC-Windows-Browser-play.google.com (2012-03-29),Mobile-Android-4.2.1-Google Play-4.5.10 (2014-01-08);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1125,Q_PROTO_GOOGLE_PLUS,google_plus,,Google Plus,Google Plus is a social network. It is classified when sharing from an external link. Other traffic is classified as google or google_cache.,Web,google_gen;http;https;ssl,PC-Windows-Browser-plus.google.com (2013-11-25),Mobile-Android-Google+-4.2.3.56698342 (2013-11-25);PC-Windows-Chrome-30.0.1599.69m (2013-10-07);Windows Phone-Windows Phone OS-8-Google+-3.0.0.0 (2014-01-15);iPhone-iOS-Google+-4.6.0 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1171,Q_PROTO_GOOGLE_SKYMAP,google_skymap,,Google Skymap,Google Sky Map is an outer space viewer Android mobile application.,Web,google_analytics,20120530,Mobile-Android-Google Skymap-1.6.4 (2012-06-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1105,Q_PROTO_GOOGLE_TOOLBAR,google_toolbar,,Google Toolbar,"The Google Toolbar is an extension for Internet Explorer and Mozilla Firefox which provides a search box, a pop-up blocker, a translator, etc..",Web,google_gen;http;https,Google Toolbar 7.0,PC-Windows-Internet Explorer (2011-12-19),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 801,Q_PROTO_GOOGLE_TRANSLATE,google_translate,,Google Translate,Google Translate is the Google translation tool.,Web,google_gen;http;https;ssl,20120530,6/4/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2095,Q_PROTO_GOSSIPLANKANEWS,gossiplankanews,,Gossiplankanews,SriLankan news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -886,Q_PROTO_GOTODEVICE,gotodevice,,GotoDevice,GoToDevice is a remote control and administration tool.,Thin Client,ipx;netbios;tcp;udp,Gotodevice v2.1.8087,6/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -889,Q_PROTO_GOTOMEETING,gotomeeting,,Gotomeeting - online meeting service (Citrix),GoToMeeting is an online meeting service developed by Citrix.,Audio/Video,http;https;ssl;udp,GotoMeeting v4.8.0.708,6/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -894,Q_PROTO_GOTOMYPC,gotomypc,,Citrix GoToMyPC Remote Access,"Citrix GoToMyPC is a secured web-based remote access solution, enabling to take control of a PC/MAC from a web browser.",Thin Client,http;https;ssl,Citrix GoToMyPC 7.0,6/15/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, -338,Q_PROTO_GOUGOU,gougou,,Gougou Search Engine,Gougou is a chinese web search engine.,Web,http;https,20091112,10/11/2011,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1147,Q_PROTO_GRATISINDO,gratisindo,,Gratisindo,This protocol plug-in classifies the http traffic to the host gratisindo.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2095,Q_PROTO_GOSSIPLANKANEWS,gossiplankanews,,GossipLankaNews.com,SriLankan news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +886,Q_PROTO_GOTODEVICE,gotodevice,,GoToDevice Remote Administration,GoToDevice is a remote control and administration tool.,Thin Client,ipx;netbios;tcp;udp,Gotodevice v2.1.8087,6/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +889,Q_PROTO_GOTOMEETING,gotomeeting,,GoToMeeting Online Meeting,GoToMeeting is an online meeting service developed by Citrix.,Audio/Video,http;https;ssl;udp,GotoMeeting v4.8.0.708,6/10/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +894,Q_PROTO_GOTOMYPC,gotomypc,,GoToMyPC Remote Access,"Citrix GoToMyPC is a secured web-based remote access solution, enabling to take control of a PC/MAC from a web browser.",Thin Client,http;https;ssl,Citrix GoToMyPC 7.0,6/15/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, +338,Q_PROTO_GOUGOU,gougou,,Gougou.com,Gougou is a chinese web search engine.,Web,http;https,20091112,10/11/2011,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1147,Q_PROTO_GRATISINDO,gratisindo,,Gratisindo.co.id,This protocol plug-in classifies the gratisindo http traffic.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 58,Q_PROTO_GRE,gre,,Generic Routing Encapsulation,The Generic Routing Encapsulation protocol (GRE) is used to encapsulate a protocol into another one generically.,Tunneling,ip;mobile_ip,RFC 1701;RFC 2784,7/4/2008,,x,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1333,Q_PROTO_GREE,gree,,Gree,Japanese web portal dedicated to smartphone games,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1881,Q_PROTO_GRID,grid,,Grid,Macedonian news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -417,Q_PROTO_GRONO,grono,,Grono,This protocol plug-in classifies the http traffic to the host grono.net.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1333,Q_PROTO_GREE,gree,,GREE Games,Japanese web portal dedicated to smartphone games,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1881,Q_PROTO_GRID,grid,,Grid.mk,Macedonian news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +417,Q_PROTO_GRONO,grono,,Grono.net,This protocol plug-in classifies the http traffic to the host grono.net.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 261,Q_PROTO_GROOVE,groove,,Microsoft Office Groove,Microsoft Office Groove is a desktop application designed for document collaboration in teams with members who are regularly off-line or who do not share the same network security clearance.,Microsoft Office,http;https;ssl;tcp;udp,20081103,1/14/2009,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -532,Q_PROTO_GROOVESHARK,grooveshark,,Grooveshark,Grooveshark is an online unlimited service for music.,Audio/Video,http;https,4.0.20120206.19,PC-Windows-Website-Chrome30.0.1599.69m (2013-10-04),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1001,Q_PROTO_GROUPON,groupon,,groupon,"This protocol plug-in classifies the http traffic to the hosts groupon.com, groupon.com.br, groupon.fr and groupon.jp. It also classifies the ssl traffic to the Common Name .groupon..",Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -936,Q_PROTO_GROUPWISE,groupwise,,Groupwise,"Novell Groupwise is a groupware, instant-messaging and mail-application.",Web,http;tcp,8.0,10/18/2011,,,,x,,,,,,,,,,,x,x,,,,,,,x,,,,,,,x,,,,,,, -1204,Q_PROTO_GSSHOP,gsshop,,Gsshop,This protocol plug-in classifies the http traffic to the host gsshop.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -745,Q_PROTO_GSTATIC,gstatic,,Google GStatic,GStatic is a download server providing static resources (like CSS or scripts) for Google web applications.,Web,google_gen;http;https;ssl,20131009,PC-Windows-Website-Chrome30.0.1599.69m (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +532,Q_PROTO_GROOVESHARK,grooveshark,,Grooveshark.com,Grooveshark is an online unlimited service for music.,Audio/Video,http;https,PC-Windows-Chrome 30.0.1599.66 (2013-10-04),Mobile-Android-Grooveshark-1.0.11 (2014-01-15);PC-Windows-Chrome-30.0.1599.69m (2014-01-15),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1001,Q_PROTO_GROUPON,groupon,,Groupon,"This protocol plug-in classifies the http traffic to the hosts groupon.com, groupon.com.br, groupon.fr and groupon.jp. It also classifies the ssl traffic to the Common Name .groupon..",Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +936,Q_PROTO_GROUPWISE,groupwise,,Groupwise (Novell),"Novell Groupwise is a groupware, instant-messaging and mail-application.",Web,http;tcp,8.0,10/18/2011,,,,x,,,,,,,,,,,x,x,,,,,,,x,,,,,,,x,,,,,,, +1204,Q_PROTO_GSSHOP,gsshop,,Gsshop.com,This protocol plug-in classifies the http traffic to the host gsshop.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +745,Q_PROTO_GSTATIC,gstatic,,Google GStatic,GStatic is a download server providing static resources (like CSS or scripts) for Google web applications.,Web,google_gen;http;https;ssl,PC-Windows-Browser-www.gstatic.com (2013-10-09),PC-Windows-Chrome-30.0.1599.69m (2013-10-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1441,Q_PROTO_GTALK,gtalk,,Google Talk,"Google Talk is an instant messaging service, using XMPP, and provides both text and voice communication. [Note: gtalk is also known as google_hangouts.]",Instant Messaging,http;https;jabber;ssl,Google Talk,,,x,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, 59,Q_PROTO_GTP,gtp,,GPRS Tunneling Protocol,"The GPRS Tunneling Protocol (GTP) is used to create a tunnel between the SGSN and GGSNs of a mobile operator network, thus allowing mobile station data to be transmitted.",Tunneling,udp,GTP v0;GTP v1,7/4/2008,,,,x,,,x,x,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, 735,Q_PROTO_GTPV2,gtpv2,,GPRS Tunneling Protocol version 2,"The GPRS Tunneling Protocol (GTP) version 2 is used in G4 mobile networks (LTE). Its purpose is to exchange control message between the MME, the SGW et the PGW. These messages lead to the creation of an IP data tunnel between the eNodeB, the SGW and the PGW, thus allowing mobile station data to be transmited.",Tunneling,udp,GPRS Tunneling Protocol V2,3/3/2011,,,,x,,,,x,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1882,Q_PROTO_GUAMPDN,guampdn,,Guampdn,Guamanian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1141,Q_PROTO_GUDANGLAGU,gudanglagu,,Gudanglagu,This protocol plug-in classifies the http traffic to the host gudanglagu.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1816,Q_PROTO_GULFUP,gulfup,,Gulfup,Online file sharing website popular in Saudi Arabia and countries around the Gulf,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1798,Q_PROTO_GUMTREE,gumtree,,Gumtree,"Gumtree is the first site for free classifieds ads in the UK for buying and selling items, cars, properties, and find or offer jobs. It's also accessed from South Africa, Australia and Poland.",Web,http;https,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -802,Q_PROTO_GYAO,gyao,,Gyao,This protocol plug-in classifies the http traffic to the host gyao.yahoo.co.jp.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1882,Q_PROTO_GUAMPDN,guampdn,,GuamPDN.com,Guamanian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1141,Q_PROTO_GUDANGLAGU,gudanglagu,,Gudanglagu.com,This protocol plug-in classifies the http traffic to the host gudanglagu.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1816,Q_PROTO_GULFUP,gulfup,,Gulfup.com,Online file sharing website popular in Saudi Arabia and countries around the Gulf,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1798,Q_PROTO_GUMTREE,gumtree,,Gumtree.com,"Gumtree is the first site for free classifieds ads in the UK for buying and selling items, cars, properties, and find or offer jobs. It's also accessed from South Africa, Australia and Poland.",Web,http;https,20140130,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +802,Q_PROTO_GYAO,gyao,,GyaO.yahoo.co.jp,This protocol plug-in classifies the http traffic to the host gyao.yahoo.co.jp.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 60,Q_PROTO_H225,h225,,H225,"The H225 Protocol is a VoIP protocol, used for call signaling and RAS (Registration, Admission and Status).",Audio/Video,q931;udp,H225 v5,7/4/2008,,,,x,,,,,x,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, 61,Q_PROTO_H245,h245,,H245,"H245 is a VoIP protocol, used for call signaling codec negotiation.",Audio/Video,tcp,H245 v10,7/4/2008,,,,,h323,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, 1187,Q_PROTO_H248_BINARY,h248_binary,,h248 Protocol (Megaco) in binary mode,h248 Protocol (Megaco) in binary mode.,Audio/Video,udp,1;2;3,7/20/2012,,,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,, 1188,Q_PROTO_H248_TEXT,h248_text,,h248 Protocol (Megaco) in text mode,h248 Protocol (Megaco) in text mode.,Audio/Video,udp,1;2;3,7/20/2012,,,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,, -418,Q_PROTO_HABBO,habbo,,Habbo,Habbo is a is a social-networking site that offers games and chat.,Web,http;https;ssl;tcp,20110331,,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -590,Q_PROTO_HALFLIFE,halflife,,Half-Life and Half-Life 2,Half-Life and Half-Life 2 are two first-person shooter video games developed by Valve Corporation and provide on-line gaming features.,Game,http;https;udp,Half-Life and Half-Life 2,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -2005,Q_PROTO_HAMACHI,hamachi,,LogMeIn Hamachi,"Hamachi is a VPN service provided by LogMeIn. This signature classifies traffic to the LogMeIn servers used by Hamachi. The P2P VPN streams between users are using IPSEC, and won't be classified as hamachi, but ipsec instead.",Tunneling,ip,2.2.0 (Windows),PC-Windows-v2.2.0.109 (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -803,Q_PROTO_HANGAME,hangame,,Hangame,This protocol plug-in classifies the http traffic to the host hangame.com/.co.jp.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1205,Q_PROTO_HANKOOKI,hankooki,,Hankooki,This protocol plug-in classifies the http traffic to the host hankooki.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1206,Q_PROTO_HANKYUNG,hankyung,,Hankyung,This protocol plug-in classifies the http traffic to the host hankyung.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1247,Q_PROTO_HAO123,hao123,,Hao123,This protocol plug-in classifies the http traffic to the host hao123.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1002,Q_PROTO_HARDSEXTUBE,hardsextube,,hardsextube,This protocol plug-in classifies the http traffic to the host hardsextube.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1313,Q_PROTO_HATENA_NE,hatena_ne,,Hatena,Japanese web portal dedicated to social networking,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1883,Q_PROTO_HAVEERU,haveeru,,Haveeru,Maldivian news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1172,Q_PROTO_HBO_GO,hbo_go,,HBO GO,This protocol plug-in classifies the http traffic to the host .hbogo.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1207,Q_PROTO_HERALDM,heraldm,,Heraldm,This protocol plug-in classifies the http traffic to the host heraldm.com. It also classifies the ssl traffic to the Common Name emember.heraldcorp.com.,Web,http;https;ssl,20130828,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1451,Q_PROTO_HERE,here,,Nokia Here API,"On-line maps and localization service brought by NAVTEQ and Nokia Maps. This plug-in both classifies the ""here.com""maps website browsing, and the Nokia NLP API (REST) usage by third party applications.",Web,http;https;nokia_ovi,20140114,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1884,Q_PROTO_HESPRESS,hespress,,Hespress,Moroccan news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1795,Q_PROTO_HEUREKA,heureka,,Heureka,Czech e-commerce website,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1379,Q_PROTO_HEXUN,hexun,,Hexun,Chinese finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1003,Q_PROTO_HGTV,hgtv,,hgtv,This protocol plug-in classifies the http traffic to the host hgtv.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -301,Q_PROTO_HI5,hi5,,Hi5,"Hi5 is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20111115,3/9/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +418,Q_PROTO_HABBO,habbo,,Habbo.com,Habbo is a is a social-networking site that offers games and chat.,Web,http;https;ssl;tcp,20110331,,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +2170,Q_PROTO_HABER7,haber7,,Haber7,Turkish tv streaming website,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +590,Q_PROTO_HALFLIFE,halflife,,Half-Life - Half-Life 2,Half-Life and Half-Life 2 are two first-person shooter video games developed by Valve Corporation and provide on-line gaming features.,Game,http;https;udp,Half-Life and Half-Life 2,2/22/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +2005,Q_PROTO_HAMACHI,hamachi,,LogMeIn Hamachi,"Hamachi is a VPN service provided by LogMeIn. This signature classifies traffic to the LogMeIn servers used by Hamachi. The P2P VPN streams between users are using IPSEC, and won't be classified as hamachi, but ipsec instead.",Tunneling,ip,2.2.0 (Windows),PC-Windows-Hamachi-2.2.0.109 (2013-12-24),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +803,Q_PROTO_HANGAME,hangame,,Hangame.com,This protocol plug-in classifies the http traffic to the host hangame.com/.co.jp.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1205,Q_PROTO_HANKOOKI,hankooki,,Hankooki.com,This protocol plug-in classifies the http traffic to the host hankooki.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1206,Q_PROTO_HANKYUNG,hankyung,,Hankyung.com,This protocol plug-in classifies the http traffic to the host hankyung.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1247,Q_PROTO_HAO123,hao123,,Hao123,This protocol plug-in classifies the http traffic to the host hao123.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1002,Q_PROTO_HARDSEXTUBE,hardsextube,,Hardsextube.com,This protocol plug-in classifies the http traffic to the host hardsextube.com.,Web,http;https,PC-Windows-Browser-www.hardsextube.com (2013-07-13),3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1313,Q_PROTO_HATENA_NE,hatena_ne,,Hatena.ne.jp,Japanese web portal dedicated to social networking,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1883,Q_PROTO_HAVEERU,haveeru,,Haveeru.com.mv,Maldivian news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1172,Q_PROTO_HBO_GO,hbo_go,,HBOGO.com,This protocol plug-in classifies the http traffic to the host .hbogo.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1207,Q_PROTO_HERALDM,heraldm,,Heraldm.com,This protocol plug-in classifies the http traffic to the host heraldm.com. It also classifies the ssl traffic to the Common Name emember.heraldcorp.com.,Web,http;https;ssl,20130828,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1451,Q_PROTO_HERE,here,,Nokia Here API,"On-line maps and localization service brought by NAVTEQ and Nokia Maps. This plug-in both classifies the ""here.com""maps website browsing, and the Nokia NLP API (REST) usage by third party applications.",Web,http;https;nokia_ovi,20140114,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1884,Q_PROTO_HESPRESS,hespress,,Hespress.com,Moroccan news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1795,Q_PROTO_HEUREKA,heureka,,Heureka.cz,Czech e-commerce website,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1379,Q_PROTO_HEXUN,hexun,,Hexun.com,Chinese finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1003,Q_PROTO_HGTV,hgtv,,HGTV.com,This protocol plug-in classifies the http traffic to the host hgtv.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +301,Q_PROTO_HI5,hi5,,Hi5.com,"Hi5 is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https;ssl,20111115,3/9/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 1561,Q_PROTO_HIGH_ENTROPY,high_entropy,,High Entropy,"High Entropy is a virtual protocol used to detect potentially encrypted payloads. Important note: the classification of this layer is effective since the 4.18.0 version of the ixEngine framework. The classification is based on two methods: entropy value computation, and printable strings detection.",Standard,unknown,1.0,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1380,Q_PROTO_HINET_GAMES,hinet_games,,Hinet games,"Taiwanese game portal providing game reviews, forum, news.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1380,Q_PROTO_HINET_GAMES,hinet_games,,HiNet Games (games.hinet.net),"Taiwanese game portal providing game reviews, forum, news.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, 730,Q_PROTO_HIP,hip,,Host Identity Protocol,The hip protocol (Host Identity Protocol) is found over the IP layer (IANA protocol number: 139).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1804,Q_PROTO_HKGOLDEN,hkgolden,,Hkgolden,Game and electonics news portal based in Hong Kong,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2096,Q_PROTO_HLN,hln,,Hln,Belgian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -633,Q_PROTO_HMP,hmp,,Host Monitoring,The hmp protocol (Host Monitoring) is found over the IP layer (IANA protocol number: 20).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1804,Q_PROTO_HKGOLDEN,hkgolden,,Hkgolden.com,Game and electonics news portal based in Hong Kong,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2096,Q_PROTO_HLN,hln,,HLN.be,Belgian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +633,Q_PROTO_HMP,hmp,,Host Monitoring Protocol,The hmp protocol (Host Monitoring) is found over the IP layer (IANA protocol number: 20).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 703,Q_PROTO_HOPOPT,hopopt,,IPv6 Hop-by-Hop Option,The hopopt protocol (IPv6 Hop-by-Hop Option) is found over the IP layer (IANA protocol number: 0).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -419,Q_PROTO_HOSPITALITY_CLUB,hospitality_club,,Hospitality Club,This protocol plug-in classifies the http traffic to the host hospitalityclub.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -634,Q_PROTO_HOST,host,,Any host internal protocol,The host protocol (Any host internal protocol) is found over the IP layer (IANA protocol number: 61).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1485,Q_PROTO_HOTFILE,hotfile,,Hotfile,On-line file sharing service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +419,Q_PROTO_HOSPITALITY_CLUB,hospitality_club,,HospitalityClub.org,This protocol plug-in classifies the http traffic to the host hospitalityclub.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +634,Q_PROTO_HOST,host,,Host internal protocol,The host protocol (Any host internal protocol) is found over the IP layer (IANA protocol number: 61).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1485,Q_PROTO_HOTFILE,hotfile,,Hotfile.com,On-line file sharing service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 739,Q_PROTO_HOTLINE,hotline,,HotLine,"The Hotline protocol is used to upload/download files, to chat and to get news about chatters (it is not a peer-to-peer protocol).",File Server,http;https;tcp,20110301,3/1/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2002,Q_PROTO_HOTSPOT_SHIELD,hotspot_shield,,Hotspot Shield,The Hotspot Shield application secures internet connections made from public access points using a VPN network.,Tunneling,tcp,3.20(Windows);3.19(MacOSX),Mac-MacOS-v3.19 (2013-12-05);PC-Windows-v3.20 (2013-12-05),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -804,Q_PROTO_HOVRS,hovrs,,Hands On Video Relay Services Inc,"This protocol plug-in classifies the http traffic to the hosts i711.com, hovrs.com and purple.us. It also classifies the ssl traffic to the Common Name hovrs.com.",Instant Messaging,http;https;ssl,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1173,Q_PROTO_HOWCAST,howcast,,Howcast,This protocol plug-in classifies the http traffic to the host .howcast.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1004,Q_PROTO_HOWSTUFFWORKS,howstuffworks,,howstuffworks,This protocol plug-in classifies the http traffic to the host howstuffworks.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2002,Q_PROTO_HOTSPOT_SHIELD,hotspot_shield,,Hotspot Shield,The Hotspot Shield application secures internet connections made from public access points using a VPN network.,Tunneling,tcp,3.20(Windows);3.19(MacOSX),Mac-Mac OS-HotSpot Shield-3.19 (2013-12-05);PC-Windows-Hotspot Shield-3.20 (2013-12-05),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +804,Q_PROTO_HOVRS,hovrs,,Hands On Video Relay Services,"This protocol plug-in classifies the http traffic to the hosts i711.com, hovrs.com and purple.us. It also classifies the ssl traffic to the Common Name hovrs.com.",Instant Messaging,http;https;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +1173,Q_PROTO_HOWCAST,howcast,,Howcast.com,This protocol plug-in classifies the http traffic to the host .howcast.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1004,Q_PROTO_HOWSTUFFWORKS,howstuffworks,,HowStuffWorks.com,This protocol plug-in classifies the http traffic to the host howstuffworks.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 65,Q_PROTO_HPELLC,hpellc,,HP Extended Local-Link Control,HP Extended Local-Link Control is an LLC protocol enhancement. It is HP proprietary.,Network Service,llc,HPELLC v1.4.7,7/4/2008,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2097,Q_PROTO_HS,hs,,Hs,Finnish news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1750,Q_PROTO_HSBC,hsbc,,HSBC,HSBC banking website,Web,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -66,Q_PROTO_HSRP,hsrp,,Cisco Hot Standby Router Protocol(HSRP),The Cisco Hot Standby Router Protocol (HSRP) enables you to manage router redundancy in a network.,Routing,udp,HSRP v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +2097,Q_PROTO_HS,hs,,Hs.fi (Helsingin Sanomat),Finnish news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1750,Q_PROTO_HSBC,hsbc,,HSBC Bank,HSBC banking website,Web,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +66,Q_PROTO_HSRP,hsrp,,Hot Standby Router Protocol,The Cisco Hot Standby Router Protocol (HSRP) enables you to manage router redundancy in a network.,Routing,udp,HSRP v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 67,Q_PROTO_HTTP,http,,HyperText Transfer Protocol,The Hypertext Transfer Protocol (HTTP) is used for browsing the web.,Web,http_tunnel;socks4;socks5;tcp;udp,0.9;1.0;1.1,7/4/2008,,,,x,,,,,,,x,x,,,,,,,,,,,x,,,,,,,,,,,,,, 750,Q_PROTO_HTTP_TUNNEL,http_tunnel,,HTTP Tunnel,HTTP Tunnel protocol is used to tunnel protocols inside an HTTP stream.,Tunneling,http;https,http_tunnel3.3,5/30/2011,,x,,,,,,,,x,x,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -68,Q_PROTO_HTTPS,https,,Secure HTTP,HTTPS is the secure version of HTTP.,Web,http;ssl,HTTP 1.1;SSL-V2.0;SSL-V3.0,7/4/2008,,,,,,443,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,, -1272,Q_PROTO_HUDONG,hudong,x,Hudong,This protocol plug-in classifies the http traffic to the host hudong.com.,Web,http;https,20120827,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1174,Q_PROTO_HULU,hulu,,Hulu,This protocol plug-in classifies the http traffic to the host .hulu.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1885,Q_PROTO_HURRIYET,hurriyet,,Hurriyet,Turkish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -420,Q_PROTO_HYVES,hyves,,Hyves,This protocol plug-in classifies the http traffic to the host hyves.nl.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1381,Q_PROTO_I_GAMER,i_gamer,,I-gamer,Online games and manga website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -638,Q_PROTO_I_NLSP,i_nlsp,,Integrated Net Layer Security TUBA,The i_nlsp protocol (Integrated Net Layer Security TUBA) is found over the IP layer (IANA protocol number: 52).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1382,Q_PROTO_I_PART,i_part,,I-part,Taiwanese online dating site.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1383,Q_PROTO_IAPP,iapp,,Iapp,News site about mobile applications.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +68,Q_PROTO_HTTPS,https,,HyperText Transfer Protocol Secure,HTTPS is the secure version of HTTP.,Web,http;ssl,HTTP 1.1;SSL-V2.0;SSL-V3.0,7/4/2008,,,,,,443,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,, +1272,Q_PROTO_HUDONG,hudong,x,Hudong.com,This protocol plug-in classifies the http traffic to the host hudong.com.,Web,http;https,20120827,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1174,Q_PROTO_HULU,hulu,,Hulu.com,This protocol plug-in classifies the http traffic to the host .hulu.com.,Audio/Video,http;https,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1885,Q_PROTO_HURRIYET,hurriyet,,Hurriyet.com.tr,Turkish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +420,Q_PROTO_HYVES,hyves,,Hyves Games,This protocol plug-in classifies the http traffic to the host hyves.nl.,Web,http;https,20140220,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1381,Q_PROTO_I_GAMER,i_gamer,,iGamer.com,Online games and manga website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +638,Q_PROTO_I_NLSP,i_nlsp,,Integrated Net Layer Security Protocol,The i_nlsp protocol (Integrated Net Layer Security TUBA) is found over the IP layer (IANA protocol number: 52).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1382,Q_PROTO_I_PART,i_part,,i-Part.com.tw,Taiwanese online dating site.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1383,Q_PROTO_IAPP,iapp,,Iapp.com.tw,News site about mobile applications.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, 635,Q_PROTO_IATP,iatp,,Interactive Agent Transfer Protocol,The iatp protocol (Interactive Agent Transfer Protocol) is found over the IP layer (IANA protocol number: 117).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 565,Q_PROTO_IAX,iax,,Inter Asterisk eXchange,Inter Asterisk eXchange (IAX2) is a data exchange protocol between Asterisk servers.,Audio/Video,udp,2,12/15/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, -755,Q_PROTO_IBACKUP,ibackup,,ibackup - online files backup protocol,ibackup is an online file backup protocol.,File Server,http;https;rsync;ssl,Ibackup for Mac v1.2.3,6/22/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1886,Q_PROTO_IBAY,ibay,,Ibay,Maldivian online classified ads,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -421,Q_PROTO_IBIBO,ibibo,,Ibibo,This protocol plug-in classifies the http traffic to the host ibibo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +755,Q_PROTO_IBACKUP,ibackup,,iBackup.com,ibackup is an online file backup protocol.,File Server,http;https;rsync;ssl,Ibackup for Mac v1.2.3,6/22/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1886,Q_PROTO_IBAY,ibay,,Ibay.com.mv,Maldivian online classified ads,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +421,Q_PROTO_IBIBO,ibibo,,Ibibo.com,This protocol plug-in classifies the http traffic to the host ibibo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, 69,Q_PROTO_ICA,ica,,Independant Computing Architecture (Citrix),ICA (Independent Computing Architecture) is a communication protocol and a property of the Citrix Company.,Thin Client,http;https;tcp;udp,nfuse v1.1,7/4/2008,,x,,x,ica,,,,x,,,,,,,x,,,,,,,,,,,,,,x,,,,,x,, -557,Q_PROTO_ICALL,icall,,icall,icall is proprietary voice/video over IP protocol.,Audio/Video,http;https;rtmp;sip;ssl,icall v7,iCall PC version 4.0.0.22 (2010-12-15);iCall iphone version 1.3.1 (2010-12-15),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1103,Q_PROTO_ICAP,icap,,ICAP,"The Internet Content Adaptation Protocol (ICAP) is a lightweight HTTP-like protocol which is used to extend transparent proxy servers, thereby freeing up resources and standardizing the way in which new features are implemented. ICAP is generally used to implement virus scanning and content filters (including censorware) in transparent HTTP proxy caches.",Web,tcp,1.0,1.0.8 (2012-01-03),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +557,Q_PROTO_ICALL,icall,,icall,icall is proprietary voice/video over IP protocol.,Audio/Video,http;https;rtmp;sip;ssl,icall v7,PC-Windows-iCall-4.0.0.22 (2010-12-15);iPhone-iOS-iCall-1.3.1 (2010-12-15),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +1103,Q_PROTO_ICAP,icap,,Internet Content Adaptation Protocol,"The Internet Content Adaptation Protocol (ICAP) is a lightweight HTTP-like protocol which is used to extend transparent proxy servers, thereby freeing up resources and standardizing the way in which new features are implemented. ICAP is generally used to implement virus scanning and content filters (including censorware) in transparent HTTP proxy caches.",Web,tcp,1.0,PC-Linux-GreasySpoon-1.0.8 (2012-01-03),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 941,Q_PROTO_ICCP,iccp,,Inter-Control Center Communications Protocol,"IEC 60870-6/TASE.2. Inter-Control Center Communications Protocol (ICCP) provides data exchange over Wide Area Networks (WANs) between utility control centers, utilities, power pools, regional control centers, and Non-Utility Generators.",Network Service,mms_iso,IEC 60870-6/TASE.2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -579,Q_PROTO_ICECAST,icecast,,icecast,Icecast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https,Icecast 2.3.1,PC-Windows-2.3.1 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1126,Q_PROTO_ICLOUD,icloud,,iCloud,"iCloud is a cloud computing service developed by Apple Inc. which allows to store and share data, from an iOS mobile (iPhone, iPad, iPod Touch) or a Macintosh.",Application Service,http;https;ssl,3.0.2.163,3.0.2 (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -70,Q_PROTO_ICMP,icmp,,Internet Control Message,The Internet Control Message protocol (ICMP) is the diagnostic protocol of IPv4 networks.,Network Service,ip,ICMP v4,7/4/2008,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +579,Q_PROTO_ICECAST,icecast,,icecast,Icecast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;mms,PC-Windows 7-Icecast 2.3.1 (2013-11-06),PC-Windows-Icecast-2.3.1 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1126,Q_PROTO_ICLOUD,icloud,,iCloud (Apple),"iCloud is a cloud computing service developed by Apple Inc. which allows to store and share data, from an iOS mobile (iPhone, iPad, iPod Touch) or a Macintosh.",Application Service,http;https;ssl,PC-Windows-Browser-www.icloud.com (2014-02-18);PC-Windows 7-iCloud 3.1 (2014-02-19);PC-Windows 8-iCloud 3.1 (2014-02-18);iPhone-iOS-iCloud 7.0.4 (2014-02-18);Mac-Mac OS-iCloud 10.9.1 (2014-02-19),Mac-Mac OS-10.9.1 (2014-02-19);PC-Windows-7 (2014-02-18);PC-Windows-7-Chrome-32.0.1700.72 (2014-02-18);PC-Windows-8 (2014-02-18);iPhone-iOS-7.0.4 (2014-02-18),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +70,Q_PROTO_ICMP,icmp,,Internet Control Message Protocol,The Internet Control Message protocol (ICMP) is the diagnostic protocol of IPv4 networks.,Network Service,ip,ICMP v4,7/4/2008,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 71,Q_PROTO_ICMP6,icmp6,,Internet Control Message Protocol for IP6,ICMPv6 is the diagnostic protocol used in IPv6 networks.,Network Service,ip6,ICMP v6,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -805,Q_PROTO_ICQ2GO,icq2go,,ICQ2Go,This protocol plug-in classifies the http traffic to the hosts icq.com and icq.net. It also classifies the ssl traffic to the Common Names icq.com and icq.net.,Instant Messaging,http;https;ssl,20130117,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +805,Q_PROTO_ICQ2GO,icq2go,,Web-ICQ,This protocol plug-in classifies the http traffic to the hosts icq.com and icq.net. It also classifies the ssl traffic to the Common Names icq.com and icq.net.,Instant Messaging,http;https;ssl,20130117,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, 73,Q_PROTO_IDENT,ident,,Identification Protocol,The Identification Protocol provides a means to determine the identity of a user of a specific TCP connection.,Authentication,tcp,RFC 1413,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,, -1887,Q_PROTO_IDNES,idnes,,Idnes,Czech news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -704,Q_PROTO_IDPR,idpr,,Inter_Domain Policy Routing Protocol,The idpr protocol (Inter_Domain Policy Routing Protocol) is found over the IP layer (IANA protocol number: 35).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -705,Q_PROTO_IDPR_CMTP,idpr_cmtp,,IDPR Control Message Transport Proto,The idpr_cmtp protocol (IDPR Control Message Transport Proto) is found over the IP layer (IANA protocol number: 38).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -706,Q_PROTO_IDRP,idrp,,Inter_Domain Routing Protocol,The idrp protocol (Inter_Domain Routing Protocol) is found over the IP layer (IANA protocol number: 45).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1245,Q_PROTO_IFENG,ifeng,,Ifeng finance,"The leading new media company providing premium content on an integrated platform across Internet, mobile and TV channels in China.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1384,Q_PROTO_IFENG_FINANCE,ifeng_finance,,Ifeng finance,Ifeng finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -806,Q_PROTO_IFILE_IT,ifile_it,,ifile.it,This protocol plug-in classifies the http traffic to the host filecloud.io.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1887,Q_PROTO_IDNES,idnes,,iDNES.cz,Czech news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +704,Q_PROTO_IDPR,idpr,,Inter Domain Policy Routing,The idpr protocol (Inter_Domain Policy Routing Protocol) is found over the IP layer (IANA protocol number: 35).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +705,Q_PROTO_IDPR_CMTP,idpr_cmtp,,IDPR Control Message Transport Protocol,The idpr_cmtp protocol (IDPR Control Message Transport Proto) is found over the IP layer (IANA protocol number: 38).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +706,Q_PROTO_IDRP,idrp,,Inter Domain Routing Protocol,The idrp protocol (Inter_Domain Routing Protocol) is found over the IP layer (IANA protocol number: 45).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1245,Q_PROTO_IFENG,ifeng,,Ifeng.com,"The leading new media company providing premium content on an integrated platform across Internet, mobile and TV channels in China.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1384,Q_PROTO_IFENG_FINANCE,ifeng_finance,,Ifeng finance,Ifeng finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +806,Q_PROTO_IFILE_IT,ifile_it,,iFile.it (Filecloud.io),This protocol plug-in classifies the http traffic to the host filecloud.io.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 636,Q_PROTO_IFMP,ifmp,,Ipsilon Flow Management Protocol,The ifmp protocol (Ipsilon Flow Management Protocol) is found over the IP layer (IANA protocol number: 101).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1958,Q_PROTO_IFOLDER_RU,ifolder_ru,,ifolder (rusfolder.com),Classifies web browsing on the ifolder.ru Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1888,Q_PROTO_IGIHE,igihe,,Igihe,Rwandan news website,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1958,Q_PROTO_IFOLDER_RU,ifolder_ru,,iFolder.ru,Classifies web browsing on the ifolder.ru Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1888,Q_PROTO_IGIHE,igihe,,Igihe.com,Rwandan news website,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 74,Q_PROTO_IGMP,igmp,,Internet Group Management Protocol,The Internet Group Management Protocol (IGMP) is used by IP hosts to report their multicast group membership to routers.,Network Service,ip,IGMPv3,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -716,Q_PROTO_IGP,igp,,any private interior gateway (used by Cisco for their IGRP),The igp protocol (any private interior gateway (used by Cisco for their IGRP)) is found over the IP layer (IANA protocol number: 9).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -807,Q_PROTO_IHEARTRADIO,iheartradio,,iHeartRadio,This protocol plug-in classifies the http traffic to the hosts iheartradio.com and iheart.com.,Audio/Video,http;https;rtmp,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +716,Q_PROTO_IGP,igp,,Interior Gateway Protocol,The igp protocol (any private interior gateway (used by Cisco for their IGRP)) is found over the IP layer (IANA protocol number: 9).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +807,Q_PROTO_IHEARTRADIO,iheartradio,,iHeartradio.com - iHeart.com,This protocol plug-in classifies the http traffic to the hosts iheartradio.com and iheart.com.,Audio/Video,http;https;rtmp,20120928,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 913,Q_PROTO_IIOP,iiop,,Internet Inter-ORB Protocol,IIOP is the GIOP implementation over TCP.,Middleware,giop,20110801,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1005,Q_PROTO_IKEA,ikea,,ikea,This protocol plug-in classifies the http traffic to the host ikea.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1889,Q_PROTO_IKMAN,ikman,,Ikman,Sri Lankan free online classified ads,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1890,Q_PROTO_IKUB,ikub,,Ikub,Albanian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -637,Q_PROTO_IL,il,,IL Transport Protocol,The il protocol (IL Transport Protocol) is found over the IP layer (IANA protocol number: 40).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1781,Q_PROTO_ILIVID,ilivid,,Ilivid,Browser toolbar search engine and video player,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -808,Q_PROTO_ILOVEIM,iloveim,,IloveIM,This protocol plug-in classifies the http traffic to the host iloveim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1891,Q_PROTO_ILTALEHTI,iltalehti,,Iltalehti,Finnish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1892,Q_PROTO_ILTASANOMAT,iltasanomat,,Iltasanomat,Finnish news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1486,Q_PROTO_IMAGESHACK,imageshack,,ImageShack,On-line free image sharing service.,Web,http;https,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1005,Q_PROTO_IKEA,ikea,,IKEA.com,This protocol plug-in classifies the http traffic to the host ikea.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1889,Q_PROTO_IKMAN,ikman,,Ikman.lk,Sri Lankan free online classified ads,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1890,Q_PROTO_IKUB,ikub,,Ikub.al,Albanian web portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +637,Q_PROTO_IL,il,,Internet Link (Transport protocol),The il protocol (IL Transport Protocol) is found over the IP layer (IANA protocol number: 40).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1781,Q_PROTO_ILIVID,ilivid,,Ilivid,Browser toolbar search engine and video player,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +808,Q_PROTO_ILOVEIM,iloveim,,IloveIM.com,This protocol plug-in classifies the http traffic to the host iloveim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +1891,Q_PROTO_ILTALEHTI,iltalehti,,Iltalehti.fi,Finnish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1892,Q_PROTO_ILTASANOMAT,iltasanomat,,Ilta-Sanomat.fi,Finnish news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1486,Q_PROTO_IMAGESHACK,imageshack,,ImageShack.com,On-line free image sharing service.,Web,http;https,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 75,Q_PROTO_IMAP,imap,,Internet Message Access Protocol version 4,The IMAP protocol (Internet Message Access Protocol Version 4) enables a client to access and manipulate electronic mail messages on a server.,Mail,socks4;socks5;tcp,IMAP v4,7/4/2008,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -76,Q_PROTO_IMAPS,imaps,,Secure IMAP,IMAPS is the secure version of the IMAP protocol.,Mail,ssl,IMAPS v4,7/4/2008,,,,,,993,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -1480,Q_PROTO_IMDB,imdb,,Internet Movie Database (IMDb),On-line information database related to movies and tv-shows.,Web,http;https,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -422,Q_PROTO_IMEEM,imeem,,Imeem,This protocol plug-in classifies the http traffic to the host imeem.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1472,Q_PROTO_IMEET,imeet,,iMeet,On-line video-conferencing service using cloud-based technology.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,, -271,Q_PROTO_IMESH,imesh,,imesh,iMesh is a peer-to-peer protocol.,Peer to Peer,http;https;ssl;tcp;udp,12.0.0.2883,PC-Windows-iMesh12.0.0.2883 (2013-11-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +76,Q_PROTO_IMAPS,imaps,,Internet Message Access Protocol Secure,IMAPS is the secure version of the IMAP protocol.,Mail,ssl,IMAPS v4,7/4/2008,,,,,,993,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +1480,Q_PROTO_IMDB,imdb,,Internet Movie Database,On-line information database related to movies and tv-shows.,Web,http;https,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +422,Q_PROTO_IMEEM,imeem,,Imeem.com,This protocol plug-in classifies the http traffic to the host imeem.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1472,Q_PROTO_IMEET,imeet,,iMeet.com,On-line video-conferencing service using cloud-based technology.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,, +271,Q_PROTO_IMESH,imesh,,imesh,iMesh is a peer-to-peer protocol.,Peer to Peer,http;https;ssl;tcp;udp,PC-Windows 7-iMesh 12.0.0.2883 (2013-11-25),PC-Windows-7-Chrome-32.0.1700.107 (2014-02-06);PC-Windows-7-iMesh-12.5.0.1.134242 (2014-02-06),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 1912,Q_PROTO_IMESSAGE_FILE_DOWNLOAD,imessage_file_download,,iMessage File Download,Apple Web Service used to retrieve video messages sent between two iOS devices via the iMessage application. This signature only classifies video download from the message receiver device. The video upload from the sender will be classified as apns (Apple Push Notification),File Transfer,http;https,iMessage 1.0.0,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1483,Q_PROTO_IMGUR,imgur,,Imgur,A free online image hosting service.,Web,http;https,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1744,Q_PROTO_IMINENT,iminent,,Iminent,Website providing add-ons for most messengers,Application Service,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -77,Q_PROTO_IMP,imp,,Internet Messaging Program,IMP is the IMAP webmail of the Horde project,Webmail,http;https,20090908,1/14/2014,,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1331,Q_PROTO_IMPRESS,impress,,Impress,Japanese IT news web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -809,Q_PROTO_IMVU,imvu,,IMVU,This protocol plug-in classifies the http traffic to the host imvu.com.,Game,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, -1893,Q_PROTO_INBOX,inbox,,Inbox,Latvian webmail and wep portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -6,Q_PROTO_INCOMPLETE,incomplete,,Incomplete,Incomplete is used when the protocol signature is too long.,Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -423,Q_PROTO_INDABA_MUSIC,indaba_music,,Indaba Music,This protocol plug-in classifies the http traffic to the host indabamusic.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1812,Q_PROTO_INDEX_HR,index_hr,,Index.hr,Croatian web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1813,Q_PROTO_INDEX_HU,index_hu,,Index.hu,Hungarian web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1894,Q_PROTO_INDIATIMES,indiatimes,,"Indiatimes,NestedApplication:INDIATIMES","This signature detects indiantimes and a large number of its subdomains, which is one of the most popular Internet and mobile value-added services web portal in India.",Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1137,Q_PROTO_INDONETWORK,indonetwork,,Indonetwork,This protocol plug-in classifies the http traffic to the host indonetwork.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1136,Q_PROTO_INDOWEBSTER,indowebster,,Indowebster,This protocol plug-in classifies the http traffic to the host indowebster.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -928,Q_PROTO_INFORMIX,informix,,informix protocol,Informix is a family of relational database management systems developed by IBM. IBM acquired the Informix technology in 2001 but it dates back to 1981.It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;sqli,11.70,9/14/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1895,Q_PROTO_ING,ing,,Ing,ING online banking website,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1140,Q_PROTO_INILAH,inilah,,Inilah.com,This protocol plug-in classifies the http traffic to the host inilah.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1175,Q_PROTO_INSTAGRAM,instagram,,Instagram,This protocol plug-in classifies the http traffic to the hosts instagr.am and instagram.com. It also classifies the ssl traffic to the Common Name instagram.com.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1385,Q_PROTO_INTALKING,intalking,,Intalking,"Taiwanese beauty, makeup portal.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1896,Q_PROTO_INTERIA,interia,,Interia,Polish news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -426,Q_PROTO_INTERNATIONS,internations,,InterNations,This protocol plug-in classifies the http traffic to the host internations.org. It also classifies the ssl traffic to the Common Name .internations.org.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1232,Q_PROTO_INTERPARK,interpark,,InterPark,This protocol plug-in classifies the http traffic to the host www.interpark.com. It also classifies the ssl traffic to the Common Name .interpark.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1006,Q_PROTO_INTUIT,intuit,,intuit,This protocol plug-in classifies the http traffic to the host intuit.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2099,Q_PROTO_INVESTIGATOR,investigator,,Investigator,Ugandan news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1119,Q_PROTO_IOS_OTA_UPDATE,ios_ota_update,,iOS over-the-air (OTA update),iOS OTA Update is the protocol used for iOS updates Over The Air.,Application Service,http;https,7.0.3,iPhone-iOS7.0.2 (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,, +1483,Q_PROTO_IMGUR,imgur,,Imgur.com,A free online image hosting service.,Web,http;https,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1744,Q_PROTO_IMINENT,iminent,,Iminent.com,Website providing add-ons for most messengers,Application Service,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +77,Q_PROTO_IMP,imp,,Internet Messaging Program,IMP is the IMAP webmail of the Horde project,Webmail,http;https,20090908,3/11/2014,,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +1331,Q_PROTO_IMPRESS,impress,,Impress.co.jp,Japanese IT news web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +809,Q_PROTO_IMVU,imvu,,IMVU.com (Instant Message Virtuel Universe),This protocol plug-in classifies the http traffic to the host imvu.com.,Game,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, +1893,Q_PROTO_INBOX,inbox,,Inbox.lv,Latvian webmail and wep portal,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +6,Q_PROTO_INCOMPLETE,incomplete,,Incomplete virtual protocol,Incomplete is used when the protocol signature is too long.,Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +423,Q_PROTO_INDABA_MUSIC,indaba_music,,Indaba Music,This protocol plug-in classifies the http traffic to the host indabamusic.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1812,Q_PROTO_INDEX_HR,index_hr,,Index.hr,Croatian web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1813,Q_PROTO_INDEX_HU,index_hu,,Index.hu,Hungarian web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1894,Q_PROTO_INDIATIMES,indiatimes,,"Indiatimes.com - Indiatimes.in,NestedApplication:INDIATIMES","This signature detects indiantimes and a large number of its subdomains, which is one of the most popular Internet and mobile value-added services web portal in India.",Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1137,Q_PROTO_INDONETWORK,indonetwork,,Indonetwork.co.id,This protocol plug-in classifies the http traffic to the host indonetwork.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1136,Q_PROTO_INDOWEBSTER,indowebster,,Indowebster.com,This protocol plug-in classifies the http traffic to the host indowebster.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +928,Q_PROTO_INFORMIX,informix,,IBM Informix,Informix is a family of relational database management systems developed by IBM. IBM acquired the Informix technology in 2001 but it dates back to 1981.It runs on IBM mainframes and is also available for Linux/Unix/Windows.,Database,drda;sqli,11.70,9/14/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +1895,Q_PROTO_ING,ing,,ING Bank,ING online banking website,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1140,Q_PROTO_INILAH,inilah,,Inilah.com,This protocol plug-in classifies the http traffic to the host inilah.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1175,Q_PROTO_INSTAGRAM,instagram,,Instagram,This protocol plug-in classifies the http traffic to the hosts instagr.am and instagram.com. It also classifies the ssl traffic to the Common Name instagram.com.,Web,amazon_aws;http;https;ssl,PC-Windows-Browser-www.instagram.com (2014-02-10);Mobile-Android-Instagram 5.0.6 (2014-02-10);iPhone-iOS-Facebook 5.0.3 (2014-02-10),Mobile-Android-4.2.1-Instagram-5.0.6 (2014-02-10);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-10);iPhone-iOS-7.0.4-Instagram-5.0.3 (2014-02-10),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1385,Q_PROTO_INTALKING,intalking,,Intalking.com,"Taiwanese beauty, makeup portal.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1896,Q_PROTO_INTERIA,interia,,Interia.pl,Polish news portal,Web,http;https;ssl,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +426,Q_PROTO_INTERNATIONS,internations,,InterNations.org,This protocol plug-in classifies the http traffic to the host internations.org. It also classifies the ssl traffic to the Common Name .internations.org.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1232,Q_PROTO_INTERPARK,interpark,,Interpark.com,This protocol plug-in classifies the http traffic to the host www.interpark.com. It also classifies the ssl traffic to the Common Name .interpark.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1006,Q_PROTO_INTUIT,intuit,,Intuit.com,This protocol plug-in classifies the http traffic to the host intuit.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2099,Q_PROTO_INVESTIGATOR,investigator,,Investigator.co.ug,Ugandan news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1119,Q_PROTO_IOS_OTA_UPDATE,ios_ota_update,,iOS over-the-air (OTA update),iOS OTA Update is the protocol used for iOS updates Over The Air.,Application Service,http;https,iPhone-iOS 7.0.3 (2013-10-25),iPhone-iOS-7.0.2-OTA Update-7.0.2 (2013-10-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,, 81,Q_PROTO_IP,ip,,Internet Protocol,The Internet Protocol allows logical addressing of stations over an interconnected system of networks.,Network Service,3gpp_li;8021q;base;eth;etsi_li;gre;gtp;icmp;ip;ip6;llc;mobile_ip;mpls;ppp;pwe;snap,IP v4,,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 82,Q_PROTO_IP6,ip6,,Internet Protocol V6,"IPv6 is the next generation protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 (IPv4).",Network Service,8021q;base;eth;gre;gtp;ip;ip6;llc;mpls;ppp;teredo,IP v6,,,x,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1686,Q_PROTO_IP_EXP_1,ip_exp_1,,IANA Internet Protocol Number 253 used for experimentation and testing,The ip_exp_1 protocol (IANA Internet Protocol Number 253 used for experimentation and testing) is found over the IP layer (IANA protocol number: 253).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1687,Q_PROTO_IP_EXP_2,ip_exp_2,,IANA Internet Protocol Number 254 used for experimentation and testing,The ip_exp_2 protocol (IANA Internet Protocol Number 254 used for experimentation and testing) is found over the IP layer (IANA protocol number: 254).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -715,Q_PROTO_IP_IN_IP,ip_in_ip,,IP_within_IP Encapsulation Protocol,The ip_in_ip protocol (IP_within_IP Encapsulation Protocol) is found over the IP layer (IANA protocol number: 94).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1686,Q_PROTO_IP_EXP_1,ip_exp_1,,IANA Internet Protocol Number 253,The ip_exp_1 protocol (IANA Internet Protocol Number 253 used for experimentation and testing) is found over the IP layer (IANA protocol number: 253).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1687,Q_PROTO_IP_EXP_2,ip_exp_2,,IANA Internet Protocol Number 254,The ip_exp_2 protocol (IANA Internet Protocol Number 254 used for experimentation and testing) is found over the IP layer (IANA protocol number: 254).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +715,Q_PROTO_IP_IN_IP,ip_in_ip,,IP-in-IP tunneling,The ip_in_ip protocol (IP_within_IP Encapsulation Protocol) is found over the IP layer (IANA protocol number: 94).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 717,Q_PROTO_IP_RDP,ip_rdp,,Reliable Data Protocol over IP,The ip_rdp protocol (Reliable Data Protocol over IP) is found over the IP layer (IANA protocol number: 27).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 671,Q_PROTO_IP_RESERVED,ip_reserved,,IANA Reserved Internet Protocol Number,The ip_reserved protocol (IANA Reserved Internet Protocol Number) is found over the IP layer (IANA protocol number: 255).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 639,Q_PROTO_IPCOMP,ipcomp,,IP Payload Compression Protocol,The ipcomp protocol (IP Payload Compression Protocol) is found over the IP layer (IANA protocol number: 108).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -83,Q_PROTO_IPCP,ipcp,,IP Control Protocol,The IP Control Protocol (IPCP) is used to configure IP parameters of a station on a Point To Point link.,Network Service,ppp,RFC 1172,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -640,Q_PROTO_IPCV,ipcv,,Internet Packet Core Utility,The ipcv protocol (Internet Packet Core Utility) is found over the IP layer (IANA protocol number: 71).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +83,Q_PROTO_IPCP,ipcp,,Internet Protocol Control Protocol,The IP Control Protocol (IPCP) is used to configure IP parameters of a station on a Point To Point link.,Network Service,ppp,RFC 1172,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +640,Q_PROTO_IPCV,ipcv,,IPCV Internet Packet Core Utility,The ipcv protocol (Internet Packet Core Utility) is found over the IP layer (IANA protocol number: 71).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1461,Q_PROTO_IPERF,iperf,,iperf,The iperf protocol is used by the self-titled tool for network performance measures.,Network Management,tcp;udp,20130604,6/14/2013,,,,x,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,,,,, 641,Q_PROTO_IPLT,iplt,,IPDS MES Physical Layer Tester,The iplt protocol (IPDS MES Physical Layer Tester) is found over the IP layer (IANA protocol number: 129).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 84,Q_PROTO_IPP,ipp,,Internet Printing Protocol,Internet Printing Protocol (IPP) is a standard used for remote printing using Internet tools and technologies.,Printer,http;https,RFC 2911,7/4/2008,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,, 642,Q_PROTO_IPPC,ippc,,Internet Pluribus Packet Core,The ippc protocol (Internet Pluribus Packet Core) is found over the IP layer (IANA protocol number: 67).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 85,Q_PROTO_IPSEC,ipsec,,IP secure,"IPSec protocol provides services for securing hosts communications. IPsec provides two security services: Authentication Header (AH), which allows authentication of the sender and Encapsulating Security Payload (ESP), which allows both authentication of the sender and encryption of data.",Encrypted,ip;ip6;udp,RFC 4306,7/4/2008,,,,x,isakmp,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -722,Q_PROTO_IPTM,iptm,,Protocol Internet Protocol Traffic Manager,The iptm protocol (Protocol Internet Protocol Traffic Manager) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +722,Q_PROTO_IPTM,iptm,,Internet Protocol Traffic Manager,The iptm protocol (Protocol Internet Protocol Traffic Manager) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 86,Q_PROTO_IPV6CP,ipv6cp,,IPv6 Control Protocol,This Protocol is used for establishing and configuring IPv6 over PPP.,Tunneling,ppp,RFC 2472,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -87,Q_PROTO_IPX,ipx,,Novell IPX,Internet Protocol Exchange (IPX) is Novell's network layer 3 protocol.,Network Service,8021q;eth;gre;llc;ppp;snap,RFC 1132,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -643,Q_PROTO_IPX_IN_IP,ipx_in_ip,,IPX in IP,The ipx_in_ip protocol (IPX in IP) is found over the IP layer (IANA protocol number: 111).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -88,Q_PROTO_IPXRIP,ipxrip,,RIP over IPX,RIPIPX is the equivalent of the RIP protocol in Novell networks.,Routing,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -89,Q_PROTO_IPXSAP,ipxsap,,Service Advertisement Protocol,Service Advertisement Protocol (SAP) allows servers to advertise their services to clients in a Novell network.,Network Service,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1261,Q_PROTO_IQIYI,iqiyi,,Iqiyi,This protocol plug-in classifies the http traffic to the host iqiyi.com. It also classifies the ssl traffic to the Common Name .iqiyi.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +87,Q_PROTO_IPX,ipx,,Internet Protocol eXchange,Internet Protocol Exchange (IPX) is Novell's network layer 3 protocol.,Network Service,8021q;eth;gre;llc;ppp;snap,RFC 1132,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +643,Q_PROTO_IPX_IN_IP,ipx_in_ip,,Internet Protocol eXchange in IP,The ipx_in_ip protocol (IPX in IP) is found over the IP layer (IANA protocol number: 111).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +88,Q_PROTO_IPXRIP,ipxrip,,Routine Information Protocol over IPX,RIPIPX is the equivalent of the RIP protocol in Novell networks.,Routing,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +89,Q_PROTO_IPXSAP,ipxsap,,IPX Service Advertisement Protocol,Service Advertisement Protocol (SAP) allows servers to advertise their services to clients in a Novell network.,Network Service,ipx,RFC 1634,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +1261,Q_PROTO_IQIYI,iqiyi,,iQiyi.com,This protocol plug-in classifies the http traffic to the host iqiyi.com. It also classifies the ssl traffic to the Common Name .iqiyi.com.,Web,http;https;ssl,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 90,Q_PROTO_IRC,irc,,Internet Relay Chat,IRC (Internet Relay Chat) is an instant messaging protocol.,Instant Messaging,http;tcp,RFC 1459,9/23/2011,,,,x,irc,,,,x,x,x,,,,,x,x,,,x,x,,,,,,,,,,,,,,,, -424,Q_PROTO_IRC_GALLERIA,irc_galleria,,IRC Galleria,This protocol plug-in classifies the http traffic to the host irc-galleria.net.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1113,Q_PROTO_IRC_TRANSFER,irc_transfer,,IRC File Transfer Data,This protocol is used to transport data in IRC file transfer.,File Transfer,tcp,20120124,client xchat 2.8.8 server ircd-irc2 2.11.2p2 (2012-06-18),,,,,irc,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -91,Q_PROTO_IRCS,ircs,,Secure IRC,IRCs is the secure version of the IRC protocol.,Forum,http;https;ssl,RFC 1459,9/12/2011,,x,,,,994,,,,,,,,,,x,,,,,x,,,,,,,,,,,,,,,, -644,Q_PROTO_IRTP,irtp,,Internet Reliable Transaction,The irtp protocol (Internet Reliable Transaction) is found over the IP layer (IANA protocol number: 28).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +424,Q_PROTO_IRC_GALLERIA,irc_galleria,,IRC-Galleria.net,This protocol plug-in classifies the http traffic to the host irc-galleria.net.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1113,Q_PROTO_IRC_TRANSFER,irc_transfer,,IRC File Transfer Data,This protocol is used to transport data in IRC file transfer.,File Transfer,tcp,20120124,PC-Linux-xchat-2.8.8 (2012-06-18),,,,,irc,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +91,Q_PROTO_IRCS,ircs,,Internet Relay Chat Secure,IRCs is the secure version of the IRC protocol.,Forum,http;https;ssl,RFC 1459,9/12/2011,,x,,,,994,,,,,,,,,,x,,,,,x,,,,,,,,,,,,,,,, +644,Q_PROTO_IRTP,irtp,,Internet Reliable Transaction Protocol,The irtp protocol (Internet Reliable Transaction) is found over the IP layer (IANA protocol number: 28).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 92,Q_PROTO_ISAKMP,isakmp,,Internet Security Association and Key Management Protocol,"The Internet Security Association and Key Management Protocol (ISAKMP) defines procedures and packet formats to establish, negotiate, modify and delete Security Associations (SA).",Encrypted,udp,Internet Security Association and Key Management Protocol v1,7/4/2008,,,,x,,,,,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,, -1906,Q_PROTO_ISCSI,iscsi,,Internet Small Computer Systems Interface (iSCSI),"Internet Small Computer Systems Interface (iSCSI), as described in RFC3720.",Network Service,tcp,RFC3720 April 2004,PC-Linux-iscsi-initiator-utils/netbsd-iscsi (2013-12-03),,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -707,Q_PROTO_ISIS,isis,,ISIS for ipv4,The isis protocol (ISIS for ipv4) is found over the IP layer (IANA protocol number: 124).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -93,Q_PROTO_ISL,isl,,InterSwitch Link Frame Format,InterSwitch Link Frame Format is a Cisco proprietary protocol used between network equipment of a LAN to transmit VLAN membership information of a frame.,Network Service,base,IEEE 802.1Q,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +1906,Q_PROTO_ISCSI,iscsi,,Internet Small Computer Systems Interface,"Internet Small Computer Systems Interface (iSCSI), as described in RFC3720.",Network Service,tcp,RFC3720 April 2004,PC-Linux-iscsi_initiator_utils/netbsd_iscsi (2013-12-03),,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +707,Q_PROTO_ISIS,isis,,ISIS,The isis protocol (ISIS for ipv4) is found over the IP layer (IANA protocol number: 124).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +93,Q_PROTO_ISL,isl,,InterSwitch Link,InterSwitch Link Frame Format is a Cisco proprietary protocol used between network equipment of a LAN to transmit VLAN membership information of a frame.,Network Service,base,IEEE 802.1Q,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 645,Q_PROTO_ISO_IP,iso_ip,,ISO Internet Protocol,The iso_ip protocol (ISO Internet Protocol) is found over the IP layer (IANA protocol number: 80).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 646,Q_PROTO_ISO_TP4,iso_tp4,,ISO Transport Protocol Class 4,The iso_tp4 protocol (ISO Transport Protocol Class 4) is found over the IP layer (IANA protocol number: 29).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1537,Q_PROTO_ISSUU,issuu,,Issuu,Digital publishing website. ( http://issuu.com/ ),Web,amazon_aws;http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1537,Q_PROTO_ISSUU,issuu,,Issuu.com,Digital publishing website. ( http://issuu.com/ ),Web,amazon_aws;http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 344,Q_PROTO_ISUP,isup,,ISDN User Part,ISUP (ISDN User Part) is a telephony protocol used in SS7 networks.,Telephony,m3ua;sctp,ISDN User Part v1,3/31/2010,,,,x,,,,,,,x,,,,,,,,,,,x,,,,,x,,,,,,,,,, -425,Q_PROTO_ITALKI,italki,,Italki,This protocol plug-in classifies the http traffic to the host italki.com. It also classifies the ssl traffic to the Common Name .italki.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -427,Q_PROTO_ITSMY,itsmy,,Itsmy,This protocol plug-in classifies the http traffic to the host mobile.itsmy.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -530,Q_PROTO_ITUNES,itunes,,iTunes,"iTunes is an Apple proprietary digital media player application, used for playing and organizing digital music and video files.",Audio/Video,http;https;ssl,10.x;11.1.0.126,PC-Windows-iTunes11.1.0.126 (2013-10-07),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -1562,Q_PROTO_ITV_PLAYER,itv_player,,ITV Player,Proprietary iOS application and website for VOD content (TV catch up) and live channels streaming.,Web,apple_hls;http;https;ssl,2.2.1(iOS);20130828(Web),PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -428,Q_PROTO_IWIW,iwiw,,Iwiw,This protocol plug-in classifies the http traffic to the host iwiw.hu.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1897,Q_PROTO_JA,ja,,Ja,Icelandic web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -94,Q_PROTO_JABBER,jabber,,XMPP Protocol (Jabber),Jabber is an open standard instant messaging and presence system involving the XMPP protocol. [Note: jabber is also known as xmpp.],Instant Messaging,google_gen;http;https;socks4;socks5;ssl;tcp,jingle;pidgin;psi;RFC3920,1/14/2014,,,,x,,,,,x,x,x,,,,,x,x,x,,x,,x,,,,,,,,,,,,,,, +425,Q_PROTO_ITALKI,italki,,Italki.com,This protocol plug-in classifies the http traffic to the host italki.com. It also classifies the ssl traffic to the Common Name .italki.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +427,Q_PROTO_ITSMY,itsmy,,Itsmy.com,This protocol plug-in classifies the http traffic to the host mobile.itsmy.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +530,Q_PROTO_ITUNES,itunes,,iTunes,"iTunes is an Apple proprietary digital media player application, used for playing and organizing digital music and video files.",Audio/Video,http;https;ssl,Mac-Mac OS 10-iTunes 10;Mac-Mac OS 10-iTunes 11.1.0.126,Mac-Mac OS-iTunes-11.1.3 (2014-01-16);PC-Windows-7-iTunes-11.1.3 (2014-01-10);iPhone-iOS-7.0.4-iTunes- (2014-01-10),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +1562,Q_PROTO_ITV_PLAYER,itv_player,,ITV Player,Proprietary iOS application and website for VOD content (TV catch up) and live channels streaming.,Web,apple_hls;http;https;ssl,2.2.1(iOS);20130828(Web),PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +428,Q_PROTO_IWIW,iwiw,,iWiW.hu,This protocol plug-in classifies the http traffic to the host iwiw.hu.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1897,Q_PROTO_JA,ja,,Ja.is,Icelandic web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +94,Q_PROTO_JABBER,jabber,,XMPP Protocol (Jabber),Jabber is an open standard instant messaging and presence system involving the XMPP protocol. [Note: jabber is also known as xmpp.],Instant Messaging,google_gen;http;https;socks4;socks5;ssl;tcp,jingle;pidgin;psi;RFC3920,3/11/2014,,,,x,,,,,x,x,x,,,,,x,x,x,,x,,x,,,,,,,,,,,,,,, 260,Q_PROTO_JABBER_TRANSFER,jabber_transfer,,Jabber File Transfer,Jabber transfer is an open standard to transfer file between two Jabber clients.,File Transfer,tcp,jingle;pidgin;psi,,,,,,jabber,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -429,Q_PROTO_JAIKU,jaiku,,Jaiku,This protocol plug-in classifies the http traffic to the host jaiku.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1281,Q_PROTO_JAJAH,jajah,x,Jajah,"Jajah was a VoIP provider owned by Telefonica Europe; Telefonica has shut down Jajah on January 31, 2014.",Audio/Video,http;https;ssl,1.0.0 (iOS);1.0.0 (Android);20120830 (Web),Mobile-Android2.3.7-App1.0.0 (2012-10-25);iPhone-iOS-App1.0.0 (2012-10-25),,x,,,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1898,Q_PROTO_JAMIIFORUMS,jamiiforums,,Jamiiforums,Tanzanian forum and blog hosting site,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -430,Q_PROTO_JAMMERDIRECT,jammerdirect,,JammerDirect,This protocol plug-in classifies the http traffic to the host jammerdirect.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -810,Q_PROTO_JANGO,jango,,Jango,This protocol plug-in classifies the http traffic to the host jango.com.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1538,Q_PROTO_JAP,jap,,Jap,VPN/Anonymizer application.,Web,http;https,0.18.1.0,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -561,Q_PROTO_JAVA_UPDATE,java_update,,Java Update,"Java Update is the protocol for the update of the java virtual machines, also called JVM.",Web,http;https;ssl,JME Platform SDK 3.0;Java 1.6.0;Java 1.7.0_40 (Windows),PC-Windows-Java SE 1.7.40 (2013-10-10),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -918,Q_PROTO_JEDI,jedi,,Citrix JEDI,JEDI is the name of the CITRIX streaming connection protocol.,Thin Client,https;tcp,20110609,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +429,Q_PROTO_JAIKU,jaiku,,Jaiku.com,This protocol plug-in classifies the http traffic to the host jaiku.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1281,Q_PROTO_JAJAH,jajah,x,Jajah,"Jajah was a VoIP provider owned by Telefonica Europe; Telefonica has shut down Jajah on January 31, 2014.",Audio/Video,http;https;ssl,iPhone-iOS-Jajah 1.0.0 (2012-10-25);Mobile-Android 2.3.7-Jajah 1.0.0 (2012-10-25);PC-Windows-Browser-www.jajah.com (2012-08-30),Mobile-Android-2.3.7-Jajah-1.0.0 (2012-10-25);iPhone-iOS-Jajah-1.0.0 (2012-10-25),,x,,,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +2163,Q_PROTO_JAMAICAOBSERVER,jamaicaobserver,,Jamaicaobserver,Jamaican news portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1898,Q_PROTO_JAMIIFORUMS,jamiiforums,,JamiiForums.com,Tanzanian forum and blog hosting site,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +430,Q_PROTO_JAMMERDIRECT,jammerdirect,,JammerDirect.com,This protocol plug-in classifies the http traffic to the host jammerdirect.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +810,Q_PROTO_JANGO,jango,,Jango.com,This protocol plug-in classifies the http traffic to the host jango.com.,Web,http;https;ssl,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1538,Q_PROTO_JAP,jap,,Jap,VPN/Anonymizer application.,Web,http;https,0.18.1.0,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +561,Q_PROTO_JAVA_UPDATE,java_update,,Java Update,"Java Update is the protocol for the update of the java virtual machines, also called JVM.",Web,http;https;ssl,PC-Windows-Java ME SDK 3.0;PC-Windows-Java 1.6.0;PC-Windows-Java 1.7.0_40,Mac-Mac OS-10.9-Java SE-1.7.51 (2014-03-03);PC-Windows-7-Java SE-1.7.51 (2014-03-02);PC-Windows-8-Java SE-1.7.51 (2014-03-02),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +918,Q_PROTO_JEDI,jedi,,JEDI (Citrix),JEDI is the name of the CITRIX streaming connection protocol.,Thin Client,https;tcp,20110609,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, 95,Q_PROTO_JETDIRECT,jetdirect,,HP Printer Job Language,The Jetdirect protocol is used by HP network printers.,Printer,tcp,HP Jetdirect,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1797,Q_PROTO_JFRANEWS,jfranews,,Jfranews,New portal popular in Jordan and Palestinian Territory,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1498,Q_PROTO_JINGDONG,jingdong,,JingDong (formerly 360buy,Popular chinese on-line hi-tech shop.,Web,http;https,20130613,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -811,Q_PROTO_JIRA,jira,,Jira,This protocol plug-in classifies the http traffic to the host onjira.com. It also classifies the ssl traffic to the Common Name onjira.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1152,Q_PROTO_JNE,jne,,Jne.co,This protocol plug-in classifies the http traffic to the host jne.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1814,Q_PROTO_JOBS_AF,jobs_af,,Jobs.af,Online job search in Afghanistan,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1815,Q_PROTO_JOBS_BG,jobs_bg,,Jobs.bg,Bulgarian online job search,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1149,Q_PROTO_JOBSTREET,jobstreet,,Jobstreet,This protocol plug-in classifies the http traffic to the host jobstreet.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1233,Q_PROTO_JOONGANG_DAILY,joongang_daily,,Joongang Daily,This protocol plug-in classifies the http traffic to the hosts www.joins.com and www.joinsmsn.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -813,Q_PROTO_JUBII,jubii,,Jubii,This protocol plug-in classifies the http traffic to the host jubii.dk.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -814,Q_PROTO_JUSTIN_TV,justin_tv,,Justin.tv,This protocol plug-in classifies the http traffic to the host justin.tv. It also classifies the ssl traffic to the Common Name .justin.tv.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2100,Q_PROTO_JUTARNJI,jutarnji,,Jutarnji,Croatian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1699,Q_PROTO_JXTA,jxta,,Juxtapose (JXTA),Open source peer-to-peer protocol launched by Sun Microsystems.,Peer to Peer,tcp;udp,2.5,10/1/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -431,Q_PROTO_KAIOO,kaioo,,Kaioo,This protocol plug-in classifies the http traffic to the host kaioo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -815,Q_PROTO_KAIXIN_CHAT,kaixin_chat,,Kaixin Chat,This protocol plug-in classifies the http traffic to the host kaixin001.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -2101,Q_PROTO_KAJGANA,kajgana,,Kajgana,Macedonian news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1311,Q_PROTO_KAKAKU,kakaku,,Kakaku,Website dedicated to price comparisons and product tests.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1186,Q_PROTO_KAKAOTALK,kakaotalk,,KakaoTalk,"KakaoTalk is an instant messenging platform for mobile devices; users or group of users can send messages, share photos, videos and contact information.",Instant Messaging,http;https;ssl;tcp,3.7.2 (iOS);4.0.3 (Android);KakaoStory 1.8.5/6 (iOS/Android),Mobile-Android4.1-AppKakaoStory1.8.5 (2013-10-11);Mobile-Android4.1-AppKakaoTalk4.0.3 (2013-10-11);iPhone-iOS7.0.2-AppKakaoStory1.8.6 (2013-10-11);iPhone-iOS7.0.2-AppKakaoTalk3.7.2 (2013-10-11),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1447,Q_PROTO_KANKAN,kankan,,Kankan,Chinese video streaming website.,Web,http;https,20130412,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1134,Q_PROTO_KAPANLAGI,kapanlagi,,Kapanlagi,This protocol plug-in classifies the http traffic to the host kapanlagi.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1752,Q_PROTO_KAPOOK,kapook,,Kapook,Thailandese web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1008,Q_PROTO_KAROSGAME,karosgame,,karosgame,This protocol plug-in classifies the http traffic to the host karosgame.ru.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1127,Q_PROTO_KASKUS,kaskus,,Kaskus,Kaskus is an indonesian forum hosting platform.,Forum,http;https,20131227,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1009,Q_PROTO_KASPERSKY,kaspersky,,kaspersky,This protocol plug-in classifies the http traffic to the host kaspersky.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -603,Q_PROTO_KASPERSKY_UPDATE,kaspersky_update,,Kaspersky Update,Kaspersky_update is the protocol used for Kaspersky softwares updates.,Web,http;https;kaspersky,Kaspersky antivirus 2011 v11.0.2.55,PC-Windows-Antivirus2014-v14.0.0.4651 (2013-10-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -96,Q_PROTO_KAZAA,kazaa,,Kazaa (FastTrack protocol),KaZaA is a peer-to-peer protocol. [Note: kazaa is also known as fasttrack.],Peer to Peer,http;https;udp,Kazaa Lite K++ 2.7;Kazaa Lite Resurrection 0.0.9,Kazaa Lite Resurrection 0.0.9 (2013-03-05);kazaa Lite K++2.7 (2013-03-05),,x,,x,kazaa,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1235,Q_PROTO_KB_BANK,kb_bank,,Kookmin Bank,This protocol plug-in classifies the http traffic to the host .kbstar.com. It also classifies the ssl traffic to the Common Name .kbstar.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1234,Q_PROTO_KBS,kbs,,KBS,This protocol plug-in classifies the http traffic to the host www.kbs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1208,Q_PROTO_KBSTAR,kbstar,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1010,Q_PROTO_KEEZMOVIES,keezmovies,,keezmovies,This protocol plug-in classifies the http traffic to the host keezmovies.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1145,Q_PROTO_KEMENKUMHAM,kemenkumham,,Kemenkumham,This protocol plug-in classifies the http traffic to the host kemenkumham.go.id.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1209,Q_PROTO_KHAN,khan,,Khan,This protocol plug-in classifies the http traffic to the host khan.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1899,Q_PROTO_KHMERLOAD,khmerload,,Khmerload,Cambodian web portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1900,Q_PROTO_KIGALITODAY,kigalitoday,,Kigalitoday,Rwandese news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1901,Q_PROTO_KIJIJI,kijiji,,Kijiji,Canadian free local classifieds,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1295,Q_PROTO_KIK,kik,,KIK Messenger,KIK Messenger is a Chinese Instant Messaging service.,Instant Messaging,http;https;ssl,6.1.0.20 (Android and iOS),Mobile-Android4.1-App6.7.0 (2013-10-15);WindowsPhone7-App6.7.0 (2013-10-15);iPhone-iOS7.0.2-App6.7.0 (2013-10-15),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, -1732,Q_PROTO_KINGDOMXXX,kingdomxxx,,Kingdom XXX,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -816,Q_PROTO_KINO,kino,,Kino,This protocol plug-in classifies the http traffic to the host kino.to.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -433,Q_PROTO_KIWIBOX,kiwibox,,Kiwibox,This protocol plug-in classifies the http traffic to the host kiwibox.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1131,Q_PROTO_KLIKBCA,klikbca,,KlikBCA,This protocol plug-in classifies the http traffic to the host klikbca.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2102,Q_PROTO_KLIX,klix,,Klix,Bosinian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1130,Q_PROTO_KOMPAS,kompas,,Kompasiana,This protocol plug-in classifies the http traffic to the host kompas.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1160,Q_PROTO_KOMPASIANA,kompasiana,,Kompasiana,This protocol plug-in classifies the http traffic to the host kompasiana.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1439,Q_PROTO_KONAMINET,konaminet,,Konaminet,This protocol plug-in classifies the http traffic to the host konaminet.jp. It also classifies the ssl traffic to the Common Name konaminet.jp.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -817,Q_PROTO_KOOLIM,koolim,,KoolIM,This protocol plug-in classifies the http traffic to the host koolim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1769,Q_PROTO_KOOORA,kooora,,Kooora,Arabic sports news portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -351,Q_PROTO_KPROXY,kproxy,,Kproxy,This protocol plug-in classifies the http traffic to the host kproxy.com. It also classifies the ssl traffic to the Common Name .kproxy.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +1797,Q_PROTO_JFRANEWS,jfranews,,Jfranews.com,New portal popular in Jordan and Palestinian Territory,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1498,Q_PROTO_JINGDONG,jingdong,,JingDong,Popular chinese on-line hi-tech shop.,Web,http;https,20130613,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +811,Q_PROTO_JIRA,jira,,Onjira.com (JIRA),This protocol plug-in classifies the http traffic to the host onjira.com. It also classifies the ssl traffic to the Common Name onjira.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1152,Q_PROTO_JNE,jne,,JNE.co.id,This protocol plug-in classifies the http traffic to the host jne.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1814,Q_PROTO_JOBS_AF,jobs_af,,Jobs.af,Online job search in Afghanistan,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1815,Q_PROTO_JOBS_BG,jobs_bg,,Jobs.bg,Bulgarian online job search,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1149,Q_PROTO_JOBSTREET,jobstreet,,JobStreet.co.id,This protocol plug-in classifies the http traffic to the host jobstreet.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1233,Q_PROTO_JOONGANG_DAILY,joongang_daily,,Joongang Daily,This protocol plug-in classifies the http traffic to the hosts www.joins.com and www.joinsmsn.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +813,Q_PROTO_JUBII,jubii,,Jubii.dk,This protocol plug-in classifies the http traffic to the host jubii.dk.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +814,Q_PROTO_JUSTIN_TV,justin_tv,,Justin.tv,This protocol plug-in classifies the http traffic to the host justin.tv. It also classifies the ssl traffic to the Common Name .justin.tv.,Web,http;https;ssl,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2100,Q_PROTO_JUTARNJI,jutarnji,,Jutarnji.hr,Croatian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1699,Q_PROTO_JXTA,jxta,,Juxtapose,Open source peer-to-peer protocol launched by Sun Microsystems.,Peer to Peer,tcp;udp,2.5,10/1/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +431,Q_PROTO_KAIOO,kaioo,,Kaioo.com,This protocol plug-in classifies the http traffic to the host kaioo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +815,Q_PROTO_KAIXIN_CHAT,kaixin_chat,,Kaixin001.com,This protocol plug-in classifies the http traffic to the host kaixin001.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +2101,Q_PROTO_KAJGANA,kajgana,,Kajgana.com,Macedonian news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-02-05),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1311,Q_PROTO_KAKAKU,kakaku,,Kakaku.com,Website dedicated to price comparisons and product tests.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1186,Q_PROTO_KAKAOTALK,kakaotalk,,KakaoTalk,"KakaoTalk is an instant messenging platform for mobile devices; users or group of users can send messages, share photos, videos and contact information. Audio flows are classified as RTP only.",Instant Messaging,http;https;ssl;tcp,iPhone-iOS-Kakao Talk 4.0.0;Mobile-Android-Kakao Talk 4.2.3;iPhone-iOS-Kakao Story 1.8.6;Mobile-Android-Kakao Story 1.8.6;PC-Windows-Kakao Talk 1.1.5.484;Windows Phone-Windows Phone OS-Kakao Talk 2.0.0 (2014-01-15),Mobile-Android-KakaoStory-2.0.6 (2014-02-11);Mobile-Android-KakaoStory-2.0.6-JP (2014-02-11);Mobile-Android-KakaoStory-2.0.6-KR (2014-02-11);Mobile-Android-KakaoTalk-4.2.3 (2014-01-22);Mobile-Bada-KakaoTalk-2.0.3 (2014-02-13);PC-Windows-KakaoTalk-1.1.5.484 (2014-01-22);Windows Phone-Windows Phone OS-KakaoTalk-2.0.0.0 (2014-01-15);iPhone-iOS-7.0.2-KakaoStory-1.8.6 (2014-01-22);iPhone-iOS-KakaoTalk-4.0.0 (2014-01-22),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +1447,Q_PROTO_KANKAN,kankan,,Kankan.com,Chinese video streaming website.,Web,http;https,20130412,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1134,Q_PROTO_KAPANLAGI,kapanlagi,,KapanLagi.com,This protocol plug-in classifies the http traffic to the host kapanlagi.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1752,Q_PROTO_KAPOOK,kapook,,Kapook.com,Thailandese web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1008,Q_PROTO_KAROSGAME,karosgame,,Karosgame.ru,This protocol plug-in classifies the http traffic to the host karosgame.ru.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1127,Q_PROTO_KASKUS,kaskus,,Kaskus.co.id,Kaskus is an indonesian forum hosting platform.,Forum,http;https,20131227,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1009,Q_PROTO_KASPERSKY,kaspersky,,Kaspersky.com,This protocol plug-in classifies the http traffic to the host kaspersky.com.,Web,http;https,PC-Windows-Browser-www.kaspersky.com (2013-07-13),3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +603,Q_PROTO_KASPERSKY_UPDATE,kaspersky_update,,Kaspersky Update,Kaspersky_update is the protocol used for Kaspersky softwares updates.,Web,http;https;kaspersky,PC-Windows 7-Kaspersky antivirus 11.0.2.55,PC-Windows-Kaspersky Anti-Virus-14.0.0.4651 (2013-10-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +96,Q_PROTO_KAZAA,kazaa,,Kazaa (FastTrack protocol),KaZaA is a peer-to-peer protocol. [Note: kazaa is also known as fasttrack.],Peer to Peer,http;https;udp,Kazaa Lite K++ 2.7;Kazaa Lite Resurrection 0.0.9,PC-Windows-Kazaa Lite K++-2.7 (2013-03-05);PC-Windows-Kazaa Lite Resurrection-0.0.9 (2013-03-05),,x,,x,kazaa,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1235,Q_PROTO_KB_BANK,kb_bank,,Kbstar.com (KB Kookmin Bank),This protocol plug-in classifies the http traffic to the host .kbstar.com. It also classifies the ssl traffic to the Common Name .kbstar.com.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1234,Q_PROTO_KBS,kbs,,KBS.co.kr,This protocol plug-in classifies the http traffic to the host www.kbs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1208,Q_PROTO_KBSTAR,kbstar,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1010,Q_PROTO_KEEZMOVIES,keezmovies,,KeezMovies.com,This protocol plug-in classifies the http traffic to the host keezmovies.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1145,Q_PROTO_KEMENKUMHAM,kemenkumham,,Kemenkumham.go.id,This protocol plug-in classifies the http traffic to the host kemenkumham.go.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1209,Q_PROTO_KHAN,khan,,Khan.co.kr,This protocol plug-in classifies the http traffic to the host khan.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2182,Q_PROTO_KHMER_NEWS,khmer_news,,Khmer.news,Cambodian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1899,Q_PROTO_KHMERLOAD,khmerload,,Khmerload.com,Cambodian web portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1900,Q_PROTO_KIGALITODAY,kigalitoday,,KigaliToday.com,Rwandese news portal,Web,http;https,20131025,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1901,Q_PROTO_KIJIJI,kijiji,,Kijiji.ca,Canadian free local classifieds,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1295,Q_PROTO_KIK,kik,,KIK Messenger,KIK Messenger is a Chinese Instant Messaging service.,Instant Messaging,http;https;ssl,iPhone-iOS 5.1.1-Kik Messenger 6.1.0.20;Mobile-Android 2.3.6-Kik Messenger 7.0.1.76 (2014-03-07);Windows Phone-Windows Phone OS 7.5-Kik Messenger 2.1.0.0,Mobile-Android-4.3-Kik Messenger-7.0.1.76 (2013-10-15);Windows Phone-Windows Phone OS-7-Kik Messenger-2.1.0.0 (2013-10-15);iPhone-iOS-7.0.2-Kik-6.7.0 (2013-10-15),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, +1732,Q_PROTO_KINGDOMXXX,kingdomxxx,,Kingdom XXX Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +816,Q_PROTO_KINO,kino,x,Kino,This protocol plug-in classifies the http traffic to the host kino.to.,Web,,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +433,Q_PROTO_KIWIBOX,kiwibox,,Kiwibox.com,This protocol plug-in classifies the http traffic to the host kiwibox.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1131,Q_PROTO_KLIKBCA,klikbca,,KlikBCA.com,This protocol plug-in classifies the http traffic to the host klikbca.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2102,Q_PROTO_KLIX,klix,,Klix.ba,Bosnian news portal.,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2200,Q_PROTO_KOHSANTEPHEAPDAILY,kohsantepheapdaily,,Kohsantepheapdaily,Cambodian news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1130,Q_PROTO_KOMPAS,kompas,,Kompass.com,This protocol plug-in classifies the http traffic to the host kompas.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1160,Q_PROTO_KOMPASIANA,kompasiana,,Kompasiana.com,This protocol plug-in classifies the http traffic to the host kompasiana.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1439,Q_PROTO_KONAMINET,konaminet,,Konaminet.jp,This protocol plug-in classifies the http traffic to the host konaminet.jp. It also classifies the ssl traffic to the Common Name konaminet.jp.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +817,Q_PROTO_KOOLIM,koolim,,KoolIM.com,This protocol plug-in classifies the http traffic to the host koolim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +1769,Q_PROTO_KOOORA,kooora,,Kooora.com,Arabic sports news portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +351,Q_PROTO_KPROXY,kproxy,,Kproxy.com,This protocol plug-in classifies the http traffic to the host kproxy.com. It also classifies the ssl traffic to the Common Name .kproxy.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x 97,Q_PROTO_KRB5,krb5,,Kerberos,Kerberos provides a means to verify the identities of the different workstations on an open (unprotected) network.,Authentication,dns;ldap;msrpc;smb;tcp;udp,Kerberos 5,7/4/2008,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,, 647,Q_PROTO_KRYPTOLAN,kryptolan,,Kryptolan,The kryptolan protocol (Kryptolan) is found over the IP layer (IANA protocol number: 65).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1266,Q_PROTO_KU6,ku6,,Ku6,This protocol plug-in classifies the http traffic to the host ku6.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1902,Q_PROTO_KUENSELONLINE,kuenselonline,,Kuenselonline,Bhutanese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1266,Q_PROTO_KU6,ku6,,Ku6.com,This protocol plug-in classifies the http traffic to the host ku6.com.,Web,http;https,20120827,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1902,Q_PROTO_KUENSELONLINE,kuenselonline,,KuenselOnline.com,Bhutanese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 740,Q_PROTO_KUGOU,kugou,,Kugou/Kugoo,"Kugou is a multimedia peer-to-peer application providing file sharing, chat or broadcasting services.",Peer to Peer,http;https;udp,20110125,3/14/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,x,x,,,,,,,x, -1818,Q_PROTO_KURIR_INFO,kurir_info,,Kurir Info,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1386,Q_PROTO_KUXUN,kuxun,,Kuxun,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -98,Q_PROTO_L2TP,l2tp,,Layer 2 Tunneling Protocol,Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider (ISP) to enable the operation of a virtual private network (VPN) over the Internet.,Tunneling,ip;udp,L2TP v2,7/4/2008,,x,,x,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1746,Q_PROTO_LABANQUEPOSTALE,labanquepostale,,Labanquepostale,French bank offering insurance an banking services,Web,http;https;ssl,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1387,Q_PROTO_LADY8844,lady8844,,Lady8844,Chinese fashion and beauty website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -709,Q_PROTO_LAN,lan,,Any local network,The lan protocol (Any local network) is found over the IP layer (IANA protocol number: 63).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2103,Q_PROTO_LANACION,lanacion,,Lanacion,Argentinian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1694,Q_PROTO_LANSHARK,lanshark,,LanShark,Lanshark is a p2p client for LAN.,Peer to Peer,http;https,0.0.2,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -270,Q_PROTO_LAPOSTE_WEBMAIL,laposte_webmail,,La Poste Webmail,Laposte Webmail is a webmail protocol.,Webmail,http;https,20090311,1/14/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1903,Q_PROTO_LAPRENSA,laprensa,,Laprensa,"Nicaraguan news portal, also accessed from Honduras.",Web,http;https;ssl,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1011,Q_PROTO_LAREDOUTE,laredoute,,La Redoute,This protocol plug-in classifies the http traffic to the host laredoute.fr.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1818,Q_PROTO_KURIR_INFO,kurir_info,,Kurir Info,Serbian news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1386,Q_PROTO_KUXUN,kuxun,,Kuxun.cn,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2189,Q_PROTO_KWEJK,kwejk,,Kwejk,Polish multimedia website,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, +98,Q_PROTO_L2TP,l2tp,,Layer 2 Tunneling Protocol,Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider (ISP) to enable the operation of a virtual private network (VPN) over the Internet.,Tunneling,ip;udp,L2TP v2 and v3,2/11/2014,,x,,x,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +1746,Q_PROTO_LABANQUEPOSTALE,labanquepostale,,LaBanquePostale.fr,French bank offering insurance an banking services,Web,http;https;ssl,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1387,Q_PROTO_LADY8844,lady8844,,Lady8844.com,Chinese fashion and beauty website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +709,Q_PROTO_LAN,lan,,Local Area Network,The lan protocol (Any local network) is found over the IP layer (IANA protocol number: 63).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +2103,Q_PROTO_LANACION,lanacion,,Lanacion.com.ar,Argentinian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1694,Q_PROTO_LANSHARK,lanshark,,LanShark,Lanshark is a p2p client for LAN.,Peer to Peer,http;https,0.0.2,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +2172,Q_PROTO_LAPATILLA,lapatilla,,Lapatilla,Venezuelian news portal,Web,http;https;ssl,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +270,Q_PROTO_LAPOSTE_WEBMAIL,laposte_webmail,,La Poste Webmail,Laposte Webmail is a webmail protocol.,Webmail,http;https,20090311,3/11/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +1903,Q_PROTO_LAPRENSA,laprensa,,Laprensa.com.ni,"Nicaraguan news portal, also accessed from Honduras.",Web,http;https;ssl,20140130,PC-Linux-BasicTest (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1011,Q_PROTO_LAREDOUTE,laredoute,,LaRedoute.fr,This protocol plug-in classifies the http traffic to the host laredoute.fr.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 648,Q_PROTO_LARP,larp,,Locus Address Resolution Protocol,The larp protocol (Locus Address Resolution Protocol) is found over the IP layer (IANA protocol number: 91).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -434,Q_PROTO_LASTFM,lastfm,,Last.Fm,"This protocol plug-in classifies the http traffic to the hosts lastfm.com, ws.audioscrobbler.com and last.fm.",Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1539,Q_PROTO_LASTPASS,lastpass,,Lastpass,Password manager application.,Web,https;ssl,2.0.20,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1388,Q_PROTO_LATIV,lativ,,Lativ,Taiwanese online clothes shop.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +434,Q_PROTO_LASTFM,lastfm,,Last.fm,"Last.fm is a web-radio service, featuring a music recommender system (called Audioscrobbler).",Web,http;https,20140320,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1539,Q_PROTO_LASTPASS,lastpass,,LastPass.com,Password manager application.,Web,http;https;ssl,2.0.20,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1388,Q_PROTO_LATIV,lativ,,Lativ.com.tw,Taiwanese online clothes shop.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 99,Q_PROTO_LCP,lcp,,Line Control Protocol,"LCP is used to establish, configure and test the data-link connection for a PPP link. This protocol is used to automatically agree upon the encapsulation format options, handle varying limits on sizes of packets, detect a looped-back link and other common misconfiguration errors, and terminate the link. This protocol is used to establish, configure and test the data-link connection for a PPP link.",Network Management,ppp,RFC 1663,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x 100,Q_PROTO_LDAP,ldap,,Lighweight Directory Access Protocol,LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this protocol to send queries to Active Directory. [Note: ldap is also known as cldap.],Application Service,tcp;udp,LDAP v3,1/30/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, -101,Q_PROTO_LDAPS,ldaps,,Secure LDAP,Secure LDAP is the Secure version of the LDAP protocol.,Application Service,ssl,LDAPS v3,7/4/2008,,,,,,636,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, -1332,Q_PROTO_LDBLOG,ldblog,,Livedoor Blog,Japanese blog dedicated to IT and Hacking,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +101,Q_PROTO_LDAPS,ldaps,,Lighweight Directory Access Protocol Secure,Secure LDAP is the Secure version of the LDAP protocol.,Application Service,ssl,LDAPS v3,7/4/2008,,,,,,636,,,,,,,,,,,,,,,,,,,,,,,,x,,,,x,,, +1332,Q_PROTO_LDBLOG,ldblog,,Livedoor Blog,Japanese blog dedicated to IT and Hacking,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 649,Q_PROTO_LEAF_1,leaf_1,,Leaf 1,The leaf_1 protocol (Leaf 1) is found over the IP layer (IANA protocol number: 25).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 650,Q_PROTO_LEAF_2,leaf_2,,Leaf 2,The leaf_2 protocol (Leaf 2) is found over the IP layer (IANA protocol number: 26).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -819,Q_PROTO_LEAPFILE,leapfile,,Leapfile,This protocol plug-in classifies the http traffic to the host secure.leapfile.com. It also classifies the ssl traffic to the Common Name secure.leapfile.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1013,Q_PROTO_LEBONCOIN,leboncoin,,Le Bon Coin,This protocol plug-in classifies the http traffic to the host leboncoin.fr.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1904,Q_PROTO_LERAL,leral,,Leral,Senegalese news portal,Web,http;https,20131025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1964,Q_PROTO_LETECKAPOSTA_CZ,leteckaposta_cz,,leteckaposta.cz,Classifies web browsing on the leteckaposta.cz Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1014,Q_PROTO_LETV,letv,,letv,This protocol plug-in classifies the http traffic to the host letv.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1287,Q_PROTO_LEVEL3,level3,,Level 3 Communications CDN,"This protocol plug-in classifies the http traffic to the hosts l3.net, level3.net and level3.com.",Web,http;https,20121025,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2104,Q_PROTO_LEXPRESS,lexpress,,Lexpress,Mauritian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1210,Q_PROTO_LG_ESHOP,lg_eshop,,LG eshop,This protocol plug-in classifies the http traffic to the host lgeshop.com.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -820,Q_PROTO_LIBERO_VIDEO,libero_video,,Libero Video,This protocol plug-in classifies the http traffic to the hosts libero.it and video.libero.it.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -435,Q_PROTO_LIBRARYTHING,librarything,,LibraryThing,This protocol plug-in classifies the http traffic to the host librarything.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -436,Q_PROTO_LIFEKNOT,lifeknot,,Lifeknot,This protocol plug-in classifies the http traffic to the host lifeknot.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1124,Q_PROTO_LINE,line,,Line,"Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Call metadata is no more extracted from line, but can be raised from the SIP layer (not valid since version 3).",Instant Messaging,http;https;naver;rtp;rtsp;sip;ssl;stun,3.9.3 (iOS);3.9.4 (Android);3.2.1.83 (Windows 7),Mobile-Android-App3.9.4 (2013-11-14);PC-Windows-3.2.1.83 (2013-11-14);iPhone-iOS-App3.9.3 (2013-11-14),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1572,Q_PROTO_LINE_GAMES,line_games,,Line games,"This protocol plug-in classifies the http traffic to the host linegame.com, the portal of various Line games.",Game,http;https,20130904,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1570,Q_PROTO_LINE_WIND_RUNNER,line_wind_runner,,LineWindRunner,Line Wind Runner is a popular asian mobile device game accessible from the Line application.,Game,hangame;line_games,1.1.5,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1283,Q_PROTO_LINEAGE2,lineage2,,Lineage II,Lineage2 is a MMORPG developed by NCSoft.,Game,http;https;tcp,1.0.0.15-1.0.0.19;1.2.1.21,1.2.1.21 (2012-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -305,Q_PROTO_LINKEDIN,linkedin,,LinkedIn,LinkedIn is professional social network.,Forum,http;https;ssl,3.2.2 (Android);7.0.2 (iOS);1.6.0 (WinPhone),Mobile-Android-App3.2.2 (2014-01-06);Mobile-WindowsPhone-App1.6.0.0 (2014-01-06);PC-Windows-20131001 (2013-10-01);iPhone-iOS7.0.4-App7.0.2 (2014-01-06),,x,,x,,,,,,,,,,x,,,,,,,x,,x,,,,x,,,,,,,,,, -1139,Q_PROTO_LINTASBERITA,lintasberita,,LintasBerita,This protocol plug-in classifies the http traffic to the hosts lintasberita.com and lintas.me. It also classifies the ssl traffic to the Common Name lintas.me.,Web,http;https;ssl,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1155,Q_PROTO_LIONAIR,lionair,,Lionair,This protocol plug-in classifies the http traffic to the host lionair.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1389,Q_PROTO_LIONTRAVEL,liontravel,,Liontravel,Liontravel.com is the official website of Lion Travel Service which is the leading travel agency headquartered in Taipei.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -437,Q_PROTO_LISTOGRAFY,listografy,,Listografy,This protocol plug-in classifies the http traffic to the host listography.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +819,Q_PROTO_LEAPFILE,leapfile,,LeapFILE.com,This protocol plug-in classifies the http traffic to the host leapfile.com. It also classifies the ssl traffic to the Common Name leapfile.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1013,Q_PROTO_LEBONCOIN,leboncoin,,LeBonCoin.fr,This protocol plug-in classifies the http traffic to the host leboncoin.fr.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1904,Q_PROTO_LERAL,leral,,Leral.net,Senegalese news portal,Web,http;https,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1964,Q_PROTO_LETECKAPOSTA_CZ,leteckaposta_cz,,leteckaposta.cz,Classifies web browsing on the leteckaposta.cz Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1014,Q_PROTO_LETV,letv,,LeTV.com,This protocol plug-in classifies the http traffic to the host letv.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1287,Q_PROTO_LEVEL3,level3,,Level 3 Communications CDN,"This protocol plug-in classifies the http traffic to the hosts l3.net, level3.net and level3.com.",Web,http;https,20121025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2104,Q_PROTO_LEXPRESS,lexpress,,lexpress.mu,Mauritian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1210,Q_PROTO_LG_ESHOP,lg_eshop,,Lgeshop.com,This protocol plug-in classifies the http traffic to the host lgeshop.com.,Web,http;https,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +820,Q_PROTO_LIBERO_VIDEO,libero_video,,Libero.it,This protocol plug-in classifies the http traffic to the hosts libero.it and video.libero.it.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +435,Q_PROTO_LIBRARYTHING,librarything,,LibraryThing.com,This protocol plug-in classifies the http traffic to the host librarything.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +436,Q_PROTO_LIFEKNOT,lifeknot,,LifeKnot.com,This protocol plug-in classifies the http traffic to the host lifeknot.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1124,Q_PROTO_LINE,line,,Line,"Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Call metadata is no more extracted from line, but can be raised from the SIP layer (not valid since version 3).",Instant Messaging,http;https;naver;rtp;rtsp;sip;ssl;stun,iPhone-iOS-Line 3.9.3;Mobile-Android-Line 3.9.4;PC-Windows 7-Line 3.2.1.83,Mac-Mac OS-10.9-Line-3.4.0 (2014-02-22);Mobile-Android-Line-3.9.4 (2013-11-14);PC-Windows-7-Chrome-33.0.1750.146 (2014-03-05);PC-Windows-7-Line-3.4.0.21 (2014-02-22);PC-Windows-8-Line-1.0.8.90 (2014-02-22);Windows Phone-Windows Phone OS-8-Line-3.2.0.274 (2014-02-22);iPhone-iOS-Line-3.9.3 (2013-11-14),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +1572,Q_PROTO_LINE_GAMES,line_games,,LineGames.com,"This protocol plug-in classifies the http traffic to the host linegame.com, the portal of various Line games.",Game,http;https,20130904,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +1570,Q_PROTO_LINE_WIND_RUNNER,line_wind_runner,,LINE WIND runner application,Line Wind Runner is a popular asian mobile device game accessible from the Line application.,Game,hangame;line_games,1.1.5,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +1283,Q_PROTO_LINEAGE2,lineage2,,Lineage II,Lineage2 is a MMORPG developed by NCSoft.,Game,http;https;tcp,1.0.0.15-1.0.0.19;1.2.1.21,PC-Windows-7-Line Age-1.2.1.21 (2012-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +305,Q_PROTO_LINKEDIN,linkedin,,LinkedIn.com,LinkedIn is professional social network.,Forum,http;https;ssl,Mobile-Android-Linkedin 3.2.2 (2014-01-06);iPhone-iOS-Linkedin 7.0.2 (2014-01-06);Windows Phone-Windows Phone OS-Linkedin 1.6.0 (2014-01-06),BlackBerry-BlackBerry OS-10.1.6.2-Linkedin (2014-02-07);Mobile-Android-Linkedin-3.2.3 (2014-01-23);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-25);Windows Phone-Windows Phone OS-8-Linkedin-1.6.0.0 (2014-01-23);iPhone-iOS-Linkedin-7.0.3 (2014-01-23),,x,,x,,,,,,,,,,x,,,,,,,x,,x,,,,x,,,,,,,,,, +1139,Q_PROTO_LINTASBERITA,lintasberita,,LintasBerita.com - Lintas.me,This protocol plug-in classifies the http traffic to the hosts lintasberita.com and lintas.me. It also classifies the ssl traffic to the Common Name lintas.me.,Web,http;https;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1155,Q_PROTO_LIONAIR,lionair,,LionAir.co.id,This protocol plug-in classifies the http traffic to the host lionair.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1389,Q_PROTO_LIONTRAVEL,liontravel,,LionTravel.com,Liontravel.com is the official website of Lion Travel Service which is the leading travel agency headquartered in Taipei.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +437,Q_PROTO_LISTOGRAFY,listografy,,Listografy.com,This protocol plug-in classifies the http traffic to the host listography.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 335,Q_PROTO_LIVE_GROUPS,live_groups,,Windows Live Groups,"Windows Live Groups is an online service by Microsoft that enables users to create their social groups for sharing, discussion and coordination.",Forum,http;https;ssl,20110415,10/4/2012,,x,,,,,,,,,x,,,,,,,,,,x,,x,,,,,,,,,,,,,, -262,Q_PROTO_LIVE_HOTMAIL,live_hotmail,,Windows Live Hotmail,Windows Live Hotmail is a free webmail service operated by Microsoft.,Webmail,http;https;ssl,20140115,PC-Windows-20121001 (2012-10-01),,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +262,Q_PROTO_LIVE_HOTMAIL,live_hotmail,,Windows Live Hotmail,Windows Live Hotmail is a free webmail service operated by Microsoft.,Webmail,http;https;ssl,PC-Windows-Browser-www.live.com (2014-01-15),PC-Windows-7-Chrome-32.0.1700.76 (2014-01-16),,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, 888,Q_PROTO_LIVE_MEETING,live_meeting,,Microsoft Office Live Meeting,Microsoft Office Live Meeting is a commercial subscription-based web conferencing service operated by Microsoft.,Web,http;https;ssl,Live Meeting 2007,6/22/2011,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -821,Q_PROTO_LIVE_MESH,live_mesh,,Live Mesh,"This protocol plug-in classifies the ssl traffic to the Common Names accounts.mesh.com, storage.mesh.com and enclosure.mesh.com.",Peer to Peer,https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +821,Q_PROTO_LIVE_MESH,live_mesh,,Windows Live Mesh,"This protocol plug-in classifies the ssl traffic to the Common Names accounts.mesh.com, storage.mesh.com and enclosure.mesh.com.",Peer to Peer,https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 1184,Q_PROTO_LIVE_STORAGE,live_storage,,Windows Live File Storage,"Windows Live File Storage is a Microsoft web service designed to be used by other Microsoft web services that may need storage, for example msn, skydrive, etc.",Network Service,http;https;ssl,20120613,6/29/2012,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1015,Q_PROTO_LIVEDOOR,livedoor,,livedoor,This protocol plug-in classifies the http traffic to the hosts livedoor.com and livedoor.jp.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1016,Q_PROTO_LIVEINTERNET,liveinternet,,liveinternet,This protocol plug-in classifies the http traffic to the host liveinternet.ru.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -438,Q_PROTO_LIVEJOURNAL,livejournal,,LiveJournal,This protocol plug-in classifies the http traffic to the host livejournal.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -327,Q_PROTO_LIVEMAIL_MOBILE,livemail_mobile,,Live hotmail for mobile,Livemail_mobile is the livemail webmail for mobile phones. Encrypted traffic is classified as windowslive or live_hotmail.,Webmail,http;https,20140114,Mobile-Android-Chrome-20131003 (2013-10-03),,x,,,,,,,,,,,,,x,,,,,,,x,,,,,x,,,,,,,,,, -439,Q_PROTO_LIVEMOCHA,livemocha,,Livemocha,This protocol plug-in classifies the http traffic to the host livemocha.com. It also classifies the ssl traffic to the Common Name .livemocha.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1148,Q_PROTO_LIVINGSOCIAL,livingsocial,,Livingsocial,This protocol plug-in classifies the http traffic to the host livingsocial.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1015,Q_PROTO_LIVEDOOR,livedoor,,Livedoor.com,This protocol plug-in classifies the http traffic to the hosts livedoor.com and livedoor.jp.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1016,Q_PROTO_LIVEINTERNET,liveinternet,,LiveInternet.ru,This protocol plug-in classifies the http traffic to the host liveinternet.ru.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +438,Q_PROTO_LIVEJOURNAL,livejournal,,LiveJournal.com,This protocol plug-in classifies the http traffic to the host livejournal.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2158,Q_PROTO_LIVEMAIL_ATTACH,livemail_attach,,Windows Live Hotmail Attachements,This signature detects Windows Live Mail File attachment uploads.,Webmail,live_hotmail,PC-Windows-Browser-www.live.com (2014-01-15),2/13/2014,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, +327,Q_PROTO_LIVEMAIL_MOBILE,livemail_mobile,,Live hotmail for mobile,Livemail_mobile is the livemail webmail for mobile phones. Encrypted traffic is classified as windowslive or live_hotmail.,Webmail,http;https,Windows Phone-Windows Phone OS (2014-01-17);Mobile-Android (2014-01-17),Mobile-Android-Browser (2014-01-17);Windows Phone-Windows Phone OS-Browser (2014-01-17),,x,,,,,,,,,,,,,x,,,,,,,x,,,,,x,,,,,,,,,, +439,Q_PROTO_LIVEMOCHA,livemocha,,Livemocha.Com,This protocol plug-in classifies the http traffic to the host livemocha.com. It also classifies the ssl traffic to the Common Name .livemocha.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1148,Q_PROTO_LIVINGSOCIAL,livingsocial,,Livingsocial.co.id,This protocol plug-in classifies the http traffic to the host livingsocial.co.id.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 104,Q_PROTO_LLC,llc,,Logical Link Control,"The IEEE 802.2 Logical Link Control (LLC) protocol provides a link mechanism for upper layer protocols encapsulated in a frame. LLC type I service provides a datalink connectionless mode service, while LLC type II provides a connection-oriented service at the datalink layer.",Network Service,8021q;eth;ppp,RFC 1483,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1286,Q_PROTO_LLNWD,llnwd,,Limelight Networks CDN,"Content Delivery Network owned by the Limelight Networks company, providing media storage for several media content web services.",Web,http;https;ssl,20140114,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1961,Q_PROTO_LOAD_TO,load_to,,load.to,Classifies web browsing on the load.to Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1286,Q_PROTO_LLNWD,llnwd,,Limelight Networks CDN,"Content Delivery Network owned by the Limelight Networks company, providing media storage for several media content web services.",Web,http;https;ssl,20140114,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1961,Q_PROTO_LOAD_TO,load_to,,load.to,Classifies web browsing on the load.to Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 105,Q_PROTO_LOADBALAN,loadbalan,,Load Balancing,Load Balancing is a protocol used in the Windows environment to distribute traffic between servers.,Network Service,8021q;eth;gre,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1540,Q_PROTO_LOKALISTEN,lokalisten,,Lokalisten,German social networking website. ( http://www.lokalisten.de ),Web,http;https;ssl,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1540,Q_PROTO_LOKALISTEN,lokalisten,,Lokalisten.de,German social networking website. ( http://www.lokalisten.de ),Web,http;https;ssl,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 106,Q_PROTO_LOOP,loop,,Loopback:XEROX,Loop is a protocol used by Cisco routers to test the status of a connected link.,Routing,8021q;eth;gre,Ethernet II,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1390,Q_PROTO_LOTOUR,lotour,,Lotour,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1211,Q_PROTO_LOTTE,lotte,,Lotte,This protocol plug-in classifies the http traffic to the host lotte.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1905,Q_PROTO_LOTTERYPOST,lotterypost,,Lotterypost,Provides information about winning lottery numbers in the US,Web,http;https;ssl,20131025,PC-Linux-BasicTest-20131125 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1499,Q_PROTO_LOTUS_LIVE,lotus_live,,IBM SmartCloud (formerly Lotus Live),"Lotus live, now IBM SmartCloud, is a web-based collaborative suite of applications for enterprises, including mail, file transfer, meetings and forms.",Web,http;https;ssl,20130628,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,x,x,,,,,,, +1390,Q_PROTO_LOTOUR,lotour,,Lotour.com,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1211,Q_PROTO_LOTTE,lotte,,Lotte.com,This protocol plug-in classifies the http traffic to the host lotte.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1905,Q_PROTO_LOTTERYPOST,lotterypost,,Lotterypost.com,Provides information about winning lottery numbers in the US,Web,http;https;ssl,20131025,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1499,Q_PROTO_LOTUS_LIVE,lotus_live,,IBM SmartCloud,"Lotus live, now IBM SmartCloud, is a web-based collaborative suite of applications for enterprises, including mail, file transfer, meetings and forms.",Web,https;ssl,20130628,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,x,x,,,,,,, 896,Q_PROTO_LOTUS_SAMETIME,lotus_sametime,,IBM Lotus Sametime,"IBM Lotus Sametime is a client-server application and middleware platform that provides real-time, unified communications and collaboration for enterprises.",Instant Messaging,http;https;tcp,Lotus Sametime 8,6/23/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, 107,Q_PROTO_LOTUSNOTES,lotusnotes,,Lotus Notes,"Lotus Notes is a groupware knowledge management system which integrates various services such as web browsing, calendaring and mailing.",Mail,tcp,20070618,7/4/2008,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,, -108,Q_PROTO_LPR,lpr,,Line Printer Daemon,LPR is a protocol providing printing services and used in Berkeley distributions of the Unix operating system.,Printer,tcp,RFC 1179,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -109,Q_PROTO_LQR,lqr,,Link Quality Report Protocol,"The Link Quality Report (LQR) protocol is a part of the Point-to-Point Protocol (PPP), which allows two computers to connect to each other. LQR allows peers at either end of the PPP link to assess the state and quality of the PPP link.",Tunneling,ppp,RFC 1989,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -2105,Q_PROTO_LRYTAS,lrytas,,Lrytas,Lithuanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +108,Q_PROTO_LPR,lpr,,Line Printer Remote,LPR is a protocol providing printing services and used in Berkeley distributions of the Unix operating system.,Printer,tcp,RFC 1179,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +109,Q_PROTO_LQR,lqr,,Link Quality Report,"The Link Quality Report (LQR) protocol is a part of the Point-to-Point Protocol (PPP), which allows two computers to connect to each other. LQR allows peers at either end of the PPP link to assess the state and quality of the PPP link.",Tunneling,ppp,RFC 1989,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +2105,Q_PROTO_LRYTAS,lrytas,,Lrytas.lt,Lithuanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1698,Q_PROTO_LUKE,luke,,LUKE,Luke is a P2P portal and software.,Peer to Peer,http;https;tcp,v1.0.0.0.0,10/1/2013,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -440,Q_PROTO_LUNARSTORM,lunarstorm,,Lunarstorm,This protocol plug-in classifies the http traffic to the host lunarstorm.se.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1391,Q_PROTO_LVPING,lvping,,Lvping,"Chinese Hotel Reviews, Travel Guides, Forum and tourist guide.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +440,Q_PROTO_LUNARSTORM,lunarstorm,,LunarStorm.se,This protocol plug-in classifies the http traffic to the host lunarstorm.se.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1391,Q_PROTO_LVPING,lvping,,Lvping.com,"Chinese Hotel Reviews, Travel Guides, Forum and tourist guide.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1564,Q_PROTO_LYNC,lync,,Microsoft Lync,"Microsoft Lync IM, VoIP and desktop sharing services (Lync Server and Lync Online are supported).",Instant Messaging,https;rtp;ssl;stun,MS Lync 2010;Office 365,,,x,,,,,,,x,,,,,,,x,,,,,,x,,,,,,,,x,,,,,,, -1454,Q_PROTO_LYNC_ONLINE,lync_online,,Lync Online,On-line version of the Microsoft Lync IM and VoIP services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x,,,,,,, +1454,Q_PROTO_LYNC_ONLINE,lync_online,,Microsoft Lync Online,On-line version of the Microsoft Lync IM and VoIP services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x,,,,,,, 1304,Q_PROTO_M2PA,m2pa,,MTP2 User Peer-to-Peer Adaptation Layer,M2PA is a signaling peer-to-peer protocol used by MTP2 in the Signaling System 7 (SS7).,Network Service,sctp,1.2 - RFC 4165,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, 1302,Q_PROTO_M2UA,m2ua,,MTP2 User Adaptation Layer,M2UA is an SCTP adaptation layer for encapsulated MTP2 messages in the Signaling System 7 (SS7).,Network Service,sctp,1.2 - RFC 3331,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, 1301,Q_PROTO_M3UA,m3ua,,MTP3 User Adaptation Layer,"M3UA enables SS7 protocols stacking (ISUP, SCCP, ...) over an IP network.",Network Service,sctp,RFC 4666,,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1571,Q_PROTO_MAAII,maaii,,maaii,Maaii is a cross-platform messaging application which allows iPhone and Android users to send and receive text messages and phone calls for free.,Instant Messaging,http;https;ssl;udp,2.1.6,Mobile-Android2.3.5-App2.1.6 (2013-09-16);iPhone-iOS6.1.3-App2.1.6 (2013-09-16),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -2106,Q_PROTO_MAANNEWS,maannews,,Maannews,Palestinian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1566,Q_PROTO_MAGUMAGU,magumagu,,Magu-Magu (aka 2013 for Kakao),"2013 for Kakao (aka Magu-Magu) is Korean baseball game, developped by CJ E&M corp.",Game,netmarble,2.0.1,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1393,Q_PROTO_MAIL2000,mail2000,,Mail2000,Taiwanese Webmail and SMS services.,Webmail,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1392,Q_PROTO_MAIL_189,mail_189,,Mail 189,China Telecom email services.,Webmail,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1542,Q_PROTO_MAIL_RU_GAMES,mail_ru_games,,Mail.ru games,ONline gaming site ( http://games.mail.ru ),Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1543,Q_PROTO_MAIL_RU_MOIMIR,mail_ru_moimir,,Mail.ru Moimir,Social networking website ( http://my.mail.ru ).,Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1544,Q_PROTO_MAIL_RU_WEBAGENT,mail_ru_webagent,,Mail.ru Webagent,Mail.ru custom web browser ( internet.mail.ru ).,Web,http;https,1.0.0.1326,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -334,Q_PROTO_MAILRU,mailru,,Mail.ru Webmail,"Mail.ru is a Russian web portal providing services such as webmail, search engine, instant messaging.",Webmail,http;https;ssl,20120329,PC-Windows-Browser-20130101 (2014-01-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2107,Q_PROTO_MAKO,mako,,Mako,Israeli news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1571,Q_PROTO_MAAII,maaii,,Maaii application,Maaii is a cross-platform messaging application which allows iPhone and Android users to send and receive text messages and phone calls for free.,Instant Messaging,http;https;ssl;udp,PC-Windows-browser-maaii.com (2014-03-07);Mobile-Android 2.3.5-Maaii 2.1.6 (2013-09-16);iPhone-iOS 6.1.3-Maaii 2.2.1 (2014-03-07),Mobile-Android-2.3.5-Maaii-2.1.6 (2013-10-17);PC-Windows-7-Chrome-33.0.1750.146 (2014-03-07);iPhone-iOS-7.0.6-Maaii-2.2.1 (2014-03-09),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +2106,Q_PROTO_MAANNEWS,maannews,,Maannews.net,Palestinian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1566,Q_PROTO_MAGUMAGU,magumagu,,Magu-Magu (aka 2013 for Kakao),"2013 for Kakao (aka Magu-Magu) is Korean baseball game, developped by CJ E&M corp.",Game,netmarble,2.0.1,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +1393,Q_PROTO_MAIL2000,mail2000,,Mail2000.com.tw,Taiwanese Webmail and SMS services.,Webmail,http;https;ssl,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +1392,Q_PROTO_MAIL_189,mail_189,,Mail189.cn,China Telecom email services.,Webmail,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +1542,Q_PROTO_MAIL_RU_GAMES,mail_ru_games,,Mail.ru games,ONline gaming site ( http://games.mail.ru ),Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1543,Q_PROTO_MAIL_RU_MOIMIR,mail_ru_moimir,,Mail.ru Moimir,Social networking website ( http://my.mail.ru ).,Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1544,Q_PROTO_MAIL_RU_WEBAGENT,mail_ru_webagent,,Mail.ru Webagent,Mail.ru custom web browser ( internet.mail.ru ).,Web,http;https,1.0.0.1326,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +334,Q_PROTO_MAILRU,mailru,,Mail.ru Webmail,"Mail.ru is a Russian web portal providing services such as webmail, search engine, instant messaging.",Webmail,http;https;ssl,PC-Windows-Browser-www.mailru.com (2013-07-15),Mobile-Android-4.1.2-Mail.Ru-2.3.0.4639 (2014-02-21);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-20);iPhone-iOS-7.0.4-Mail.Ru-4.0.0.6796 (2014-02-24),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +2107,Q_PROTO_MAKO,mako,,Mako.co.il,Israeli news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 246,Q_PROTO_MAKTOOB,maktoob,,Maktoob mail,Maktoob is a webmail protocol.,Webmail,http;https,20110321,1/14/2009,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -5,Q_PROTO_MALFORMED,malformed,,Malformed,A packet belongs to the protocol 'malformed' if the protocol announced by the lower level protocol does not correspond to the one determined by the system.,Standard,,na,7/4/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1918,Q_PROTO_MALTAPARK,maltapark,,Maltapark,Maltapark is the most popular trading website in Malta.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2108,Q_PROTO_MALTATODAY,maltatoday,,Maltatoday,Maltese news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1919,Q_PROTO_MANA,mana,,Mana,French Polynesian internet service provider website,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -583,Q_PROTO_MANDRIVA_UPDATE,mandriva_update,,Mandriva Update,"This protocol manages the mandriva update operations. It allows identifying package name, package version, package architecture and distribution, thanks to the HTTP User Agent, the HTTP Uri and the HTTP method used. The HTTP User Agent must be the Aria2 download manager, the HTTP URI must be finished with RPM extension and the HTTP method must be a GET request.",Web,http;https,Mandriva2010,Mandriva 2010 (2011-12-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +5,Q_PROTO_MALFORMED,malformed,,Malformed virtual protocol,A packet belongs to the protocol 'malformed' if the protocol announced by the lower level protocol does not correspond to the one determined by the system.,Standard,,na,7/4/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1918,Q_PROTO_MALTAPARK,maltapark,,Maltapark.com,Maltapark is the most popular trading website in Malta.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2108,Q_PROTO_MALTATODAY,maltatoday,,MaltaToday.com.mt,Maltese news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1919,Q_PROTO_MANA,mana,,Mana.pf,French Polynesian internet service provider website,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +583,Q_PROTO_MANDRIVA_UPDATE,mandriva_update,,Mandriva Update,"This protocol manages the mandriva update operations. It allows identifying package name, package version, package architecture and distribution, thanks to the HTTP User Agent, the HTTP Uri and the HTTP method used. The HTTP User Agent must be the Aria2 download manager, the HTTP URI must be finished with RPM extension and the HTTP method must be a GET request.",Web,http;https,Mandriva2010,PC-Mandriva-2010 (2011-12-02),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, 729,Q_PROTO_MANET,manet,,MANET Protocols,The manet protocol (MANET Protocols) is found over the IP layer (IANA protocol number: 138).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1394,Q_PROTO_MANGOCITY,mangocity,,Mangocity,Chinese Travel website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -554,Q_PROTO_MANOLITO,manolito,,manolito,Manolito is a peer-to-peer file sharing software.,Peer to Peer,tcp;udp,Manolito v3.1.1,Manolito 3.11 (2012-04-13),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1394,Q_PROTO_MANGOCITY,mangocity,,Mangocity.com,Chinese Travel website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +554,Q_PROTO_MANOLITO,manolito,,manolito,Manolito is a peer-to-peer file sharing software.,Peer to Peer,tcp;udp,Manolito v3.1.1,PC-Windows-Manolito-3.11 (2012-04-13),,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 110,Q_PROTO_MAPI,mapi,,MS Exchange Message API,MS Exchange Message API is a protocol used by Exchange clients to retrieve their emails.,Mail,dcerpc;msrpc,Microsoft Outlook,7/4/2008,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,, -1468,Q_PROTO_MAPQUEST,mapquest,,MapQuest,Free online web mapping service owned by AOL.,Web,http;https;ssl,20130828,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1764,Q_PROTO_MARCA,marca,,Marca,Spanish sports news portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1920,Q_PROTO_MARKTPLAATS,marktplaats,,Marktplaats,"Dutch advertising site where you can sell, new and second-hand goods.",Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1017,Q_PROTO_MASHABLE,mashable,,mashable,This protocol plug-in classifies the http traffic to the host mashable.com. It also classifies the ssl traffic to the Common Name .mashable.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -587,Q_PROTO_MASHARE,mashare,,mashare,"mashare is an online solution to store, send and share files",Web,http;https,20110104,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1018,Q_PROTO_MATCH,match,,match,This protocol plug-in classifies the http traffic to the host match.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2109,Q_PROTO_MAYBANK2U,maybank2u,,Maybank2u,Malay banking website,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1231,Q_PROTO_MBC,mbc,,MBC,This protocol plug-in classifies the http traffic to the host www.imbc.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2110,Q_PROTO_MBL,mbl,,Mbl,Icelandic news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1212,Q_PROTO_MBN,mbn,,mbn,This protocol plug-in classifies the http traffic to the host mbn.co.kr. It also classifies the ssl traffic to the Common Name .mbn.co.kr.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1468,Q_PROTO_MAPQUEST,mapquest,,MapQuest.com,Free online web mapping service owned by AOL.,Web,http;https;ssl,20130828,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1764,Q_PROTO_MARCA,marca,,Marca.com,Spanish sports news portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1920,Q_PROTO_MARKTPLAATS,marktplaats,,Marktplaats.nl,"Dutch advertising site where you can sell, new and second-hand goods.",Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1017,Q_PROTO_MASHABLE,mashable,,Mashable.com,This protocol plug-in classifies the http traffic to the host mashable.com. It also classifies the ssl traffic to the Common Name .mashable.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +587,Q_PROTO_MASHARE,mashare,,Ma-Share.com,"mashare is an online solution to store, send and share files",Web,http;https,20110104,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1018,Q_PROTO_MATCH,match,,Match.com,This protocol plug-in classifies the http traffic to the host match.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2109,Q_PROTO_MAYBANK2U,maybank2u,,Maybank2u.com,Malay banking website,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1231,Q_PROTO_MBC,mbc,,iMBC.com,This protocol plug-in classifies the http traffic to the host www.imbc.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2110,Q_PROTO_MBL,mbl,,Mbl.is,Icelandic news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1212,Q_PROTO_MBN,mbn,,MBN.co.kr,This protocol plug-in classifies the http traffic to the host mbn.co.kr. It also classifies the ssl traffic to the Common Name .mbn.co.kr.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, 111,Q_PROTO_MCAFEE,mcafee,,McAfee Client update,McAfee is one of the leaders in intrusion prevention and security risk management on the web.,Security Service,http;https;ssl,20050626,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, 112,Q_PROTO_MCS,mcs,,Multipoint Communication Service,"Multipoint Communication Service (MCS) is a multipoint data delivery service for use in multimedia and audiovisual conferencing service. It provides the mechanism for multipoint aware applications to send data to all or a subset of the group with a single send primitive and to force, if desired, a uniformly sequenced reception of data for all users.",Network Service,capwap;cotp,2,7/4/2008,,,,x,,,,,,,,,x,,,x,,,,,,x,,,,,,,,,,,,,,, -822,Q_PROTO_MEDIAFIRE,mediafire,,MediaFire,This protocol plug-in classifies the http traffic to the hosts a.1521.x.akamai.net and mediafire.com. It also classifies the ssl traffic to the Common Name mediafire.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -441,Q_PROTO_MEETIN,meetin,,MEETin,This protocol plug-in classifies the http traffic to the host meetin.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +822,Q_PROTO_MEDIAFIRE,mediafire,,MediaFire.com,This protocol plug-in classifies the http traffic to the hosts a.1521.x.akamai.net and mediafire.com. It also classifies the ssl traffic to the Common Name mediafire.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +441,Q_PROTO_MEETIN,meetin,,MEETin.org,This protocol plug-in classifies the http traffic to the host meetin.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1083,Q_PROTO_MEETINGPLACE,meetingplace,,Cisco MeetingPlace,"MeetingPlace is a protocol used by the Cisco Unified MeetingPlace suite of voice, web, and video conferencing products.",Audio/Video,http;https;soap;ssl,20110928,10/26/2011,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -1452,Q_PROTO_MEETME,meetme,,MeetMe (where new friends meet),Social networking web-service available on PC and mobile devices.,Web,http;https;ssl,20130415 (web app),PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -443,Q_PROTO_MEETTHEBOSS,meettheboss,,Meettheboss,This protocol plug-in classifies the http traffic to the host meettheboss.tv.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -442,Q_PROTO_MEETUP,meetup,,Meetup,This protocol plug-in classifies the http traffic to the host meetup.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -823,Q_PROTO_MEEVEE,meevee,,MeeVee,This protocol plug-in classifies the http traffic to the host ip-204-145-65-216.static.atlanticmetro.net.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1299,Q_PROTO_MEGA,mega,,Megavideo,This protocol plug-in classifies the http traffic to the host mega.co.nz. It also classifies the ssl traffic to the Common Name mega.co.nz.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -350,Q_PROTO_MEGAPROXY,megaproxy,,Megaproxy,This protocol plug-in classifies the http traffic to the hosts megaproxy.fr and megaproxy.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1989,Q_PROTO_MEGASHARES_COM,megashares_com,,megashares.com,Classifies web browsing on the megashares.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1452,Q_PROTO_MEETME,meetme,,MeetMe.com,Social networking web-service available on PC and mobile devices.,Web,http;https;ssl,20130415 (web app),PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +443,Q_PROTO_MEETTHEBOSS,meettheboss,,MeetTheBoss.tv,This protocol plug-in classifies the http traffic to the host meettheboss.tv.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +442,Q_PROTO_MEETUP,meetup,,Meetup.com,This protocol plug-in classifies the http traffic to the host meetup.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +823,Q_PROTO_MEEVEE,meevee,x,MeeVee,Closed on-line video aggregator website.,Web,,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1299,Q_PROTO_MEGA,mega,,Mega.co.nz,This protocol plug-in classifies the http traffic to the host mega.co.nz. It also classifies the ssl traffic to the Common Name mega.co.nz.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +350,Q_PROTO_MEGAPROXY,megaproxy,,Megaproxy.com,This protocol plug-in classifies the http traffic to the hosts megaproxy.fr and megaproxy.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +1989,Q_PROTO_MEGASHARES_COM,megashares_com,,megashares.com,Classifies web browsing on the megashares.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 314,Q_PROTO_MEGAUPLOAD,megaupload,,megaupload,"Megaupload was an online solution to store, send and share files. Megaupload was shut in January 2012.",Web,http;https,20080118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -824,Q_PROTO_MEGAVIDEO,megavideo,,Megavideo,This protocol plug-in classifies the http traffic to the host megavideo.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1545,Q_PROTO_MEKUSHARIM,mekusharim,,Mekusharim,Social network website ( http://mekusharim.walla.co.il/ ).,Web,http;https,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1546,Q_PROTO_MENDELEY,mendeley,,Mendeley,Sharing and annotating document web service. ( http://www.mendeley.com ),Web,amazon_aws;http;https;scribd;ssl;vimeo,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1770,Q_PROTO_MERCADOLIBRE,mercadolibre,,MercadoLibre,"MercadoLibre is a technology company that provides e-commerce solutions. Their website is accessed from Uruguay, Venezuela, Mexico, Columbia, Ecuador, Peru, Chile and Costa Rica.",Web,http;https,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +824,Q_PROTO_MEGAVIDEO,megavideo,x,Megavideo,This protocol plug-in classifies the http traffic to the host megavideo.com.,Web,,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1545,Q_PROTO_MEKUSHARIM,mekusharim,,Mekusharim.walla.co.il,Social network website ( http://mekusharim.walla.co.il/ ).,Web,http;https,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1546,Q_PROTO_MENDELEY,mendeley,,Mendeley.com,Sharing and annotating document web service. ( http://www.mendeley.com ),Web,amazon_aws;http;https;scribd;ssl;vimeo,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1770,Q_PROTO_MERCADOLIBRE,mercadolibre,,MercadoLibre.com,"MercadoLibre is a technology company that provides e-commerce solutions. Their website is accessed from Uruguay, Venezuela, Mexico, Columbia, Ecuador, Peru, Chile and Costa Rica.",Web,http;https,20140130,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +2191,Q_PROTO_MERCADOR,mercador,,Mercador,Romanian classified ads portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 651,Q_PROTO_MERIT_INP,merit_inp,,MERIT Internodal Protocol,The merit_inp protocol (MERIT Internodal Protocol) is found over the IP layer (IANA protocol number: 32).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2111,Q_PROTO_MERRJEP,merrjep,,Merrjep,Kosovan classified ads,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -825,Q_PROTO_MESSENGERFX,messengerfx,,MessengerFX,This protocol plug-in classifies the http traffic to the host messengerfx.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1176,Q_PROTO_METACAFE,metacafe,,Metacafe,"This protocol plug-in classifies the http traffic to the hosts .metacafe.com, v.mccont.com and .mcstatic.com.",Audio/Video,http;https,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2111,Q_PROTO_MERRJEP,merrjep,,MerrJep.com,Kosovan classified ads,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +825,Q_PROTO_MESSENGERFX,messengerfx,,MessengerFX.com,This protocol plug-in classifies the http traffic to the host messengerfx.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +1176,Q_PROTO_METACAFE,metacafe,,Metacafe.com,"This protocol plug-in classifies the http traffic to the hosts .metacafe.com, v.mccont.com and .mcstatic.com.",Audio/Video,http;https,20120530,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 652,Q_PROTO_MFE_NSP,mfe_nsp,,MFE Network Services Protocol,The mfe_nsp protocol (MFE Network Services Protocol) is found over the IP layer (IANA protocol number: 31).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 113,Q_PROTO_MGCP,mgcp,,Media Gateway Control Protocol,MGCP protocol is used as signaling protocol for voice IP applications.,Audio/Video,tcp;udp,MGCP v1.0,7/4/2008,,,,x,mgcp,,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, -1547,Q_PROTO_MGOON,mgoon,,Mgoon,"Watch video, play games ( http://www.mgoon.com/ ).",Web,http;https;ssl,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -826,Q_PROTO_MIBBIT,mibbit,,Mibbit,This protocol plug-in classifies the http traffic to the host 02.chat.mibbit.com. It also classifies the ssl traffic to the Common Names web2.mibbit.com and chat.mibbit.com.,Forum,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -724,Q_PROTO_MICP,micp,,Mobile Internetworking Control Pro.,The micp protocol (Mobile Internetworking Control Pro.) is found over the IP layer (IANA protocol number: 95).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1921,Q_PROTO_MIHANBLOG,mihanblog,,Mihanblog,Persian blogging platform,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2112,Q_PROTO_MILLIYET,milliyet,,Milliyet,Turkish news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1547,Q_PROTO_MGOON,mgoon,,Mgoon.com,"Watch video, play games ( http://www.mgoon.com/ ).",Web,http;https;ssl,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +826,Q_PROTO_MIBBIT,mibbit,,Mibbit chat network,This protocol plug-in classifies the http traffic of any client for chat.mibbit.com. It also classifies the ssl traffic to the Common Names web2.mibbit.com and chat.mibbit.com.,Forum,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +724,Q_PROTO_MICP,micp,,Mobile Internetworking Control Protocol,The micp protocol (Mobile Internetworking Control Pro.) is found over the IP layer (IANA protocol number: 95).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1921,Q_PROTO_MIHANBLOG,mihanblog,,Mihanblog.com,Persian blogging platform,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2162,Q_PROTO_MIHANWEBADS,mihanwebads,,Mihanwebads,Iranian Internet AD company website,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2151,Q_PROTO_MIKOGO,mikogo,,Mikogo,Mikogo is a free desktop sharing and web conferencing service.,Web,cloudflare;http;https;ssl,20121004,2/13/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,x,, +2112,Q_PROTO_MILLIYET,milliyet,,Milliyet.com.tr,Turkish news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 326,Q_PROTO_MIMP,mimp,,IMP mobile version,MIMP is the IMP webmail for mobile phones.,Webmail,http;https,20090817,6/6/2011,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, 114,Q_PROTO_MIPV6,mipv6,,Mobile IPv6,Mobile IP is a proposed standard protocol that builds on the Internet Protocol by making mobility transparent to applications and higher level protocols like TCP.,Network Service,ip6,Mobile IPv6,7/4/2008,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1548,Q_PROTO_MIRO,miro,,Miro,Multimedia player. ( http://www.getmiro.com ),Peer to Peer,http;https;ssl,6.0,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -2113,Q_PROTO_MISTRECI,mistreci,,Mistreci,Albanian movie streaming website,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1298,Q_PROTO_MITALK,mitalk,,MiTalk Messenger (Miliao),MiTalk (aka Miliao) is a mobile instant messaging application from Xiaomi Tech.,Instant Messaging,http;https;jabber;udp,6.3.1(iOS);5.6.733(Android),Mobile-Android-App5.6.733 (2013-11-06);iPhone-iOS-App6.3.1 (2013-11-06),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -444,Q_PROTO_MIXI,mixi,,Mixi,This protocol plug-in classifies the http traffic to the host mixi.jp.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1213,Q_PROTO_MK,mk,,Mk,This protocol plug-in classifies the http traffic to the host mk.co.kr. It also classifies the ssl traffic to the Common Name member.mk.co.kr.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1548,Q_PROTO_MIRO,miro,,Miro (getmiro.com),Multimedia player. ( http://www.getmiro.com ),Peer to Peer,http;https;ssl,6.0,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +2113,Q_PROTO_MISTRECI,mistreci,,Mistreci.com,Albanian movie streaming website,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1298,Q_PROTO_MITALK,mitalk,,MiTalk Messenger (Miliao),MiTalk (aka Miliao) is a mobile instant messaging application from Xiaomi Tech.,Instant Messaging,http;https;jabber;udp,iPhone-iOS-MiTalk 6.3.1 (2013-11-06);Mobile-Android-MiTalk 5.6.733 (2013-11-06),Mobile-Android-4.1.2-MiTalk-5.0.735 (2014-02-22);Windows Phone-Windows Phone OS-MiTalk-1.5.38.0 (2014-02-25);iPhone-iOS-7.0.4-MiTalk-6.5.1 (2014-02-22),,x,,x,,,,,,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +444,Q_PROTO_MIXI,mixi,,Mixi.jp,This protocol plug-in classifies the http traffic to the host mixi.jp.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1213,Q_PROTO_MK,mk,,Mk.co.kr,This protocol plug-in classifies the http traffic to the host mk.co.kr. It also classifies the ssl traffic to the Common Name member.mk.co.kr.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, 115,Q_PROTO_MMS,mms,,Microsoft Multimedia Streaming,MMS protocol is used extensively nowadays by Microsoft video streaming servers. It enables to stream a file in real time to many simultaneous viewers.,Audio/Video,http;https;tcp;udp,MediaPlayer,9/29/2011,,x,,x,mms,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -940,Q_PROTO_MMS_ISO,mms_iso,,ISO 9506 Manufacturing Message Specification,ISO 9506 Manufacturing Message Specification (MMS).,Network Service,acse;pp,ISO 9506,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -116,Q_PROTO_MMSE,mmse,,MMS Encapsulation,The MultiMedia Messages Encapsulation protocol (MMSE) is used by mobile stations to send multimedia messages.,Wap,http;https;wsp,wap 1.0;wap 2.0;mmse 1.0,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -1456,Q_PROTO_MOBAGE,mobage,,Mobage games,Mobile games download portal and identification services.,Web,http;https;ssl,20130304,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +940,Q_PROTO_MMS_ISO,mms_iso,,Manufacturing Message Specification (ISO 9506 ),ISO 9506 Manufacturing Message Specification (MMS).,Network Service,acse;pp,ISO 9506,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +116,Q_PROTO_MMSE,mmse,,MultiMedia Messages Encapsulation,The MultiMedia Messages Encapsulation protocol (MMSE) is used by mobile stations to send multimedia messages.,Wap,http;https;wsp,wap 1.0;wap 2.0;mmse 1.0,7/4/2008,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +1456,Q_PROTO_MOBAGE,mobage,,Mobage games,Mobile games download portal and identification services.,Web,http;https;ssl,20130304,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 653,Q_PROTO_MOBILE,mobile,,IP Mobility,The mobile protocol (IP Mobility) is found over the IP layer (IANA protocol number: 55).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1395,Q_PROTO_MOBILE01,mobile01,,Mobile01,Taiwanese social network.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1395,Q_PROTO_MOBILE01,mobile01,,Mobile01.com,Taiwanese social network.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 1292,Q_PROTO_MOBILE_IP,mobile_ip,,Mobile IP,Mobile IP is an IETF standard communications protocol that is designed to allow mobile device users to move from one network to another while maintaining a permanent IP address.,Tunneling,udp,RFC 5944,11/23/2012,,,,x,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -827,Q_PROTO_MOBILE_ME,mobile_me,,Mobile Me,This protocol plug-in classifies the ssl traffic to the Common Name auth.me.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +827,Q_PROTO_MOBILE_ME,mobile_me,x,Mobile Me,On-line web application suite (me.com) created by Apple and remplaced by iCloud in 2011.,Web,,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 654,Q_PROTO_MOBILEHDR,mobilehdr,,Mobile Header,The mobilehdr protocol (Mobile Header) is found over the IP layer (IANA protocol number: 135).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1082,Q_PROTO_MOBILINK,mobilink,,Mobilink,"Mobilink is a proprietary, binary, TCP based protocol which is used to synchronize the contents of multiple mobile client databases with a central SQL Server. The clients can run on smartphones, Java applets, etc., in addition to PC computers.",Database,tcp,Mobilink 12.0.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -446,Q_PROTO_MOCOSPACE,mocospace,,MocoSpace,This protocol plug-in classifies the http traffic to the host mocospace.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -447,Q_PROTO_MOG,mog,,Livestream (formerly Mogulus),This protocol plug-in classifies the http traffic to the host mog.com. It also classifies the ssl traffic to the Common Name mog.com.,Audio/Video,http;https;ssl,20120928,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -828,Q_PROTO_MOGULUS,mogulus,,Livestream (formerly Mogulus),This protocol plug-in classifies the http traffic to the hosts livestream.com and a749.g.akamai.net. It also classifies the ssl traffic to the Common Name livestream.com.,Audio/Video,http;https;rtmp;ssl,20120928,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1396,Q_PROTO_MOMOSHOP,momoshop,,Momoshop,Taiwanese online shop.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1460,Q_PROTO_MONEX,monex,,monex,Online broker.,Web,http;https;ssl,20130304,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1397,Q_PROTO_MONEY_163,money_163,,Money 163,Chinese finance portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1398,Q_PROTO_MONEYDJ,moneydj,,Moneydj,Taiwanese finance portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2114,Q_PROTO_MONITOR,monitor,,Monitor,Ugandan news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1019,Q_PROTO_MONSTER,monster,,monster,This protocol plug-in classifies the http traffic to the hosts monster.com and monster.fr.,Web,http;https,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1922,Q_PROTO_MOOV,moov,,Moov,Malagasy internet web portal,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1276,Q_PROTO_MOP,mop,,Mop,This protocol plug-in classifies the http traffic to the host mop.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1787,Q_PROTO_MOREFREECAMSECRETS,morefreecamsecrets,,MoreFreeCamSecrets,Adult live webcam site,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1923,Q_PROTO_MOTIKA,motika,,Motika,Macedonian video posting website.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +446,Q_PROTO_MOCOSPACE,mocospace,,MocoSpace.com,This protocol plug-in classifies the http traffic to the host mocospace.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2166,Q_PROTO_MOE_GOV,moe_gov,,Moe.gov,Omanian Ministry of Education portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +447,Q_PROTO_MOG,mog,,MOG.com,This protocol plug-in classifies the http traffic to the host mog.com. It also classifies the ssl traffic to the Common Name mog.com.,Audio/Video,http;https;ssl,20120928,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +828,Q_PROTO_MOGULUS,mogulus,,Livestream.com,This protocol plug-in classifies the http traffic to the hosts livestream.com and a749.g.akamai.net. It also classifies the ssl traffic to the Common Name livestream.com.,Audio/Video,http;https;rtmp;ssl,20120928,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1396,Q_PROTO_MOMOSHOP,momoshop,,Momoshop.com.tw,Taiwanese online shop.,Web,http;https,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1460,Q_PROTO_MONEX,monex,,Monex.com,Online broker.,Web,http;https;ssl,20130304,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1397,Q_PROTO_MONEY_163,money_163,,Money163.com,Chinese finance portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1398,Q_PROTO_MONEYDJ,moneydj,,MoneyDJ.com,Taiwanese finance portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2114,Q_PROTO_MONITOR,monitor,,Monitor.co.ug,Ugandan news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1019,Q_PROTO_MONSTER,monster,,Monster.com,This protocol plug-in classifies the http traffic to the hosts monster.com and monster.fr.,Web,http;https,20110930,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1922,Q_PROTO_MOOV,moov,,Moov.mg,Malagasy internet web portal,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1276,Q_PROTO_MOP,mop,,Mop.com,This protocol plug-in classifies the http traffic to the host mop.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1787,Q_PROTO_MOREFREECAMSECRETS,morefreecamsecrets,,MoreFreeCamSecrets.com,Adult live webcam site,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2169,Q_PROTO_MOSAIQUEFM,mosaiquefm,,Mosaiquefm,Tunisian radio streaming website,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1923,Q_PROTO_MOTIKA,motika,,Motika.com.mk,Macedonian video posting website.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 118,Q_PROTO_MOUNT,mount,,Mount,"The Mount protocol is related to the NFS protocol. It provides operating system specific services to launch the NFS protocol -- looking up server path names, validating user identity, and checking access permissions.",File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -448,Q_PROTO_MOUTHSHUT,mouthshut,,MouthShut,This protocol plug-in classifies the http traffic to the host mouthshut.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1020,Q_PROTO_MOZILLA,mozilla,,mozilla,This protocol plug-in classifies the http traffic to the hosts mozilla.com and mozilla.org. It also classifies the ssl traffic to the Common Name mozilla.org.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2004,Q_PROTO_MP3_ROCKET,mp3_rocket,,MP3 Rocket,"MP3 Rocket is a music file downloader application. It uses the Youtube (aka Google Video) service to search and download video clips, and then transforms them into MP3 files on the host machine using a MP3 converter. This plug-in only classifies secondary flows of the application, like client updates. Video clip downloads are classified as youtube.",Audio/Video,http;https,"6.3.15,6.4.3",PC-Windows-v6.4.3 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -251,Q_PROTO_MPEGTS,mpegts,,MPEG-TS,MPEG-Transport Stream is a protocol used for MPEG flows transmission,Audio/Video,apple_hls;http;https;rtp;udp,MPEG-2 Part1,10/13/2009,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +448,Q_PROTO_MOUTHSHUT,mouthshut,,MouthShut.com,This protocol plug-in classifies the http traffic to the host mouthshut.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2193,Q_PROTO_MOVER,mover,,Mover,Uzbek vide streaming website,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1020,Q_PROTO_MOZILLA,mozilla,,Mozilla.com - Mozilla.org,This protocol plug-in classifies the http traffic to the hosts mozilla.com and mozilla.org. It also classifies the ssl traffic to the Common Name mozilla.org.,Web,http;https;ssl,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2004,Q_PROTO_MP3_ROCKET,mp3_rocket,,MP3 Rocket application,"MP3 Rocket is a music file downloader application. It uses the Youtube (aka Google Video) service to search and download video clips, and then transforms them into MP3 files on the host machine using a MP3 converter. This plug-in only classifies secondary flows of the application, like client updates. Video clip downloads are classified as youtube.",Audio/Video,http;https,"6.3.15,6.4.3",PC-Windows-MP3 Rocket-6.4.3 (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +251,Q_PROTO_MPEGTS,mpegts,,MPEG-Transport Stream,MPEG-Transport Stream is a protocol used for MPEG flows transmission,Audio/Video,apple_hls;http;https;rtp;udp,MPEG-2 Part1,10/13/2009,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 119,Q_PROTO_MPLS,mpls,,Multiprotocol Packet Label Switching,Multiprotocol Label Switching (MPLS) is an Internet Engineering Task Force (IETF) protocol. It is used for routing and allows you to define a delivery path to a flow identified by a specific label.,Routing,8021q;eth;mpls;ppp,RFC 3031,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 655,Q_PROTO_MPLS_IN_IP,mpls_in_ip,,Multi Protocol Label Switching data-carrying mechanism,The mpls_in_ip protocol (Multi Protocol Label Switching data-carrying mechanism) is found over the IP layer (IANA protocol number: 137).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1455,Q_PROTO_MPLUS_MESSENGER,mplus_messenger,,M+ Messenger,M+ is a taiwanese mobile IM application with audio/image file send feature.,Instant Messaging,http;https;ssl;tcp,1.7.0 (Android);1.6.10 (iOS),7/3/2013,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -287,Q_PROTO_MPQUEST,mpquest,x,Mpquest,This protocol plug-in classifies the http traffic to the hosts mapquest.com and mapquest.fr.,Web,,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -312,Q_PROTO_MQ,mq,,Websphere Message Queue series,Mq (IBM Websphere MQ) is an inter-application communication protocol.,Application Service,tcp,IBM Websphere MQ 20090528,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -898,Q_PROTO_MS_COMMUNICATOR,ms_communicator,,Microsoft Communicator,"Microsoft Office Communicator is a client software launched in October 2007 for conferences which aims to communicate between collaborators using instant messaging, VoIP and videoconference.",Instant Messaging,https;ssl,MS Communicator 2007,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -120,Q_PROTO_MSN,msn,,MSN Messenger,The MSN protocol allows the exchange of instant messages. The MSN protocol is used by the Microsoft software Microsoft Messenger,Instant Messaging,http;https;socks4;socks5;ssl;tcp;udp,4.7;6.5;7.5;8.1;8.5;AgileMessenger;IM+;TOnline;WLM 2011,1/14/2014,,x,,x,msn,,,,x,x,x,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, +287,Q_PROTO_MPQUEST,mpquest,x,MapQuest.com,This protocol plug-in classifies the http traffic to the hosts mapquest.com and mapquest.fr.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +312,Q_PROTO_MQ,mq,,IBM Websphere MQ,Mq (IBM Websphere MQ) is an inter-application communication protocol.,Application Service,tcp,IBM Websphere MQ 20090528,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +898,Q_PROTO_MS_COMMUNICATOR,ms_communicator,,Microsoft Communicator,"Microsoft Office Communicator is a client software launched in October 2007 for conferences which aims to communicate between collaborators using instant messaging, VoIP and videoconference.",Instant Messaging,https;ssl,MS Communicator 2007,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +120,Q_PROTO_MSN,msn,,MSN Messenger,The MSN protocol allows the exchange of instant messages. The MSN protocol is used by the Microsoft software Microsoft Messenger,Instant Messaging,http;https;socks4;socks5;ssl;tcp;udp,PC-Windows-Msn Messenger 4.7;PC-Windows-Msn Messenger 6.5;PC-Windows-Msn Messenger 7.5;PC-Windows-Msn Messenger 8.1;PC-Windows-Msn Messenger 8.5;iPhone-iOS-Agile Messenger;PC-Windows-IM+;PC-Windows-T-Online Messenger;PC-Windows 7-Windows Live Messenger 2011,3/11/2014,,x,,x,msn,,,,x,x,x,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, 121,Q_PROTO_MSN_GROUPS,msn_groups,,MSN groups,"MSN Groups was a website part of the MSN network which hosted online communities, and which contained Web pages, hosted images, and contained a message board. MSN Groups was shut down on February 2009 as part of a migration of online applications and services to the Windows Live brand, and later renovated as Windows Live Groups.",Forum,http;https,20080129fr;20080129en,,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 122,Q_PROTO_MSN_SEARCH,msn_search,,MSN Search,This protocol is used for sending user queries to the MSN Live search engine.,Web,http;https,20071001,9/25/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, 123,Q_PROTO_MSN_VIDEO,msn_video,,MSN Video,This protocol is used by MSN Messenger for video conversations (is not used anymore since MSN version 8.X).,Audio/Video,tcp;udp,4.7;6.5;7.5;8.1;8.5;AgileMessenger;IM+;TOnline;WLM 2011,7/4/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, 258,Q_PROTO_MSNMOBILE,msnmobile,,MSN live for Mobile,MSNMobile is the MSN instant messenger for mobile.,Instant Messaging,tcp,20080118,4/4/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -919,Q_PROTO_MSRP,msrp,,The Message Session Relay Protocol (MSRP),"Message Session Relay Protocol (MSRP) is a protocol for transmitting instant messages, defined by RFC 4975.",Audio/Video,tcp,rfc 4975,3/23/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +919,Q_PROTO_MSRP,msrp,,Message Session Relay Protocol,"Message Session Relay Protocol (MSRP) is a protocol for transmitting instant messages, defined by RFC 4975.",Audio/Video,tcp,rfc 4975,3/23/2012,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, 742,Q_PROTO_MSRPC,msrpc,,Microsoft Remote Procedure Call,Microsoft Remote Procedure Call (MSRPC) is the Microsoft implementation of the DCE RPC mechanism.,Middleware,dcerpc,RPC v1.2,3/25/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1214,Q_PROTO_MT,mt,,mtv,This protocol plug-in classifies the http traffic to the host mtv.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1214,Q_PROTO_MT,mt,,mt,This protocol plug-in classifies the http traffic to the host mt.co.kr.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 656,Q_PROTO_MTP,mtp,,Multicast Transport Protocol,The mtp protocol (Multicast Transport Protocol) is found over the IP layer (IANA protocol number: 92).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1021,Q_PROTO_MTV,mtv,,mtv,This protocol plug-in classifies the http traffic to the host mtv.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1924,Q_PROTO_MUDAH,mudah,,Mudah,Malaisian free classified ads.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -449,Q_PROTO_MULTIPLY,multiply,,Multiply,This protocol plug-in classifies the http traffic to the host multiply.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1022,Q_PROTO_MULTIUPLOAD,multiupload,,multiupload,This protocol plug-in classifies the http traffic to the hosts multiupload.com and multiupload.nl.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1023,Q_PROTO_MUSICA,musica,,musica,This protocol plug-in classifies the http traffic to the host musica.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -124,Q_PROTO_MUTE,mute,,Mute Protocol,Mute is a peer-to-peer protocol.,Peer to Peer,http;https;tcp,20111020,4/11/2012,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1021,Q_PROTO_MTV,mtv,,MTV,This protocol plug-in classifies the http traffic to the host mtv.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1924,Q_PROTO_MUDAH,mudah,,Mudah.mi,Malaisian free classified ads.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +449,Q_PROTO_MULTIPLY,multiply,,Multiply.com,This protocol plug-in classifies the http traffic to the host multiply.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1022,Q_PROTO_MULTIUPLOAD,multiupload,,Multiupload.com,This protocol plug-in classifies the http traffic to the hosts multiupload.com and multiupload.nl.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1023,Q_PROTO_MUSICA,musica,,Musica.com,This protocol plug-in classifies the http traffic to the host musica.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +124,Q_PROTO_MUTE,mute,,Mute,Mute is a peer-to-peer protocol.,Peer to Peer,http;https;tcp,20111020,4/11/2012,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 657,Q_PROTO_MUX,mux,,Multiplexing,The mux protocol (Multiplexing) is found over the IP layer (IANA protocol number: 18).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -450,Q_PROTO_MUXLIM,muxlim,x,Muxlim,This protocol plug-in classifies the http traffic to the host muxlim.com.,Web,,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -535,Q_PROTO_MXIT,mxit,,mxit,"MXit (pronounced ""mix it"") is a free instant messaging software application developed by MXit Lifestyle in South Africa that runs on GPRS/3G mobile phones and on PCs.",Instant Messaging,http;https;tcp,20100803,10/1/2010,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -455,Q_PROTO_MY_OPERA,my_opera,,My Opera,This protocol plug-in classifies the http traffic to the host my.opera.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +450,Q_PROTO_MUXLIM,muxlim,x,Muxlim,This protocol plug-in classifies the http traffic to the host muxlim.com.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +535,Q_PROTO_MXIT,mxit,,Mxit.com,"MXit (pronounced ""mix it"") is a free instant messaging software application developed by MXit Lifestyle in South Africa that runs on GPRS/3G mobile phones and on PCs.",Instant Messaging,http;https;tcp,20100803,10/1/2010,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +455,Q_PROTO_MY_OPERA,my_opera,,My Opera,This protocol plug-in classifies the http traffic to the host my.opera.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2177,Q_PROTO_MY_TALKING_TOM,my_talking_tom,,My Talking Tom,My Talking Tom is a mobile game.,Game,http;https,Mobile-Android;iPhone-iOS,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, 945,Q_PROTO_MY_YAHOO,my_yahoo,,My Yahoo,"A customizable web page with news, weather, etc., for Yahoo users.",Web,http;https;yahoo,20110926,10/12/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -451,Q_PROTO_MYANIMELIST,myanimelist,,MyAnimeList,This protocol plug-in classifies the http traffic to the host myanimelist.net.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -452,Q_PROTO_MYCHURCH,mychurch,,MyChurch,This protocol plug-in classifies the http traffic to the host mychurch.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1549,Q_PROTO_MYDOWNLOADER,mydownloader,,Mydownloader,Download files from multiple filesharing websites ( http://www.mydownloader.net/ ).,Web,http;https,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -453,Q_PROTO_MYHERITAGE,myheritage,,MyHeritage,This protocol plug-in classifies the http traffic to the hosts myheritage.fr and myheritage.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -454,Q_PROTO_MYLIFE,mylife,,MyLife,This protocol plug-in classifies the http traffic to the host mylife.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1569,Q_PROTO_MYPEOPLE_MESSENGER,mypeople_messenger,,MyPeople Messenger,"MyPeople Messenger is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,http;https;ssl;udp,4.2.3,iPhone-iOS6.1.3-App4.2.3 (2013-09-16),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -125,Q_PROTO_MYSPACE,myspace,,My Space,MySpace is one of most popular social networking sites on the Web.,Web,http;https;ssl,20111114,1/14/2014,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -829,Q_PROTO_MYSPACE_VIDEO,myspace_video,,Myspace Video,This signature detects usage of the video-related features of Myspace.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, +451,Q_PROTO_MYANIMELIST,myanimelist,,MyAnimeList.net,This protocol plug-in classifies the http traffic to the host myanimelist.net.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +452,Q_PROTO_MYCHURCH,mychurch,,MyChurch.org,This protocol plug-in classifies the http traffic to the host mychurch.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1549,Q_PROTO_MYDOWNLOADER,mydownloader,,MyDownloader.net,Download files from multiple filesharing websites ( http://www.mydownloader.net/ ).,Web,http;https,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +453,Q_PROTO_MYHERITAGE,myheritage,,MyHeritage.com -MyHeritage.fr,This protocol plug-in classifies the http traffic to the hosts myheritage.fr and myheritage.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2204,Q_PROTO_MYJOYONLINE,myjoyonline,,Myjoyonline,Ghanaian news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +454,Q_PROTO_MYLIFE,mylife,,MyLife.com,This protocol plug-in classifies the http traffic to the host mylife.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1569,Q_PROTO_MYPEOPLE_MESSENGER,mypeople_messenger,,MyPeople Messenger,"MyPeople Messenger is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,http;https;ssl;udp,iPhone-iOS 6.3-mypeople Messenger 4.2.3,PC-Windows-7-Chrome-32.0.1700.107 (2014-02-19);iPhone-iOS-6.1.3-mypeople Messenger-4.2.3 (2013-10-17),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +125,Q_PROTO_MYSPACE,myspace,,MySpace.com,MySpace is one of most popular social networking sites on the Web.,Web,http;https;ssl,20111114,3/11/2014,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +829,Q_PROTO_MYSPACE_VIDEO,myspace_video,,Myspace Video,This signature detects usage of the video-related features of Myspace.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,x, 126,Q_PROTO_MYSQL,mysql,,MySQL Protocol,"MySQL is an open source relational database management system (RDBMS) that uses Structured Query Language (SQL), the most popular language for adding, accessing, and processing data in a database.",Database,tcp,MySQL 3.x;MySQL 4.1+,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -1024,Q_PROTO_MYVIDEO,myvideo,,myvideo,This protocol plug-in classifies the http traffic to the host myvideo.de.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1025,Q_PROTO_MYWEBSEARCH,mywebsearch,,mywebsearch,This protocol plug-in classifies the http traffic to the host mywebsearch.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -456,Q_PROTO_MYYEARBOOK,myyearbook,x,MyYearBook,This social networking service is closed.,Web,,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2115,Q_PROTO_NACION,nacion,,Nacion,Costa Rican news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2048,Q_PROTO_NAGARIKNEWS,nagariknews,,Nagariknews,Nepali news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1925,Q_PROTO_NAIRALAND,nairaland,,Nairaland,Nigerian forum hosting site,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1926,Q_PROTO_NAMBA,namba,,Namba,Kyrgyzstani forum and social networking site.,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -830,Q_PROTO_NAPSTER,napster,,Napster,"This protocol plug-in classifies the http traffic to the hosts napster.com, napsterinc.tt.omtrdc.net, a1082.b.akamai.net and a1702.b.akamai.net. It also classifies the ssl traffic to the Common Name sms.napster.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1024,Q_PROTO_MYVIDEO,myvideo,,Myvideo.de,This protocol plug-in classifies the http traffic to the host myvideo.de.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1025,Q_PROTO_MYWEBSEARCH,mywebsearch,,Mywebsearch.com,This protocol plug-in classifies the http traffic to the host mywebsearch.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +456,Q_PROTO_MYYEARBOOK,myyearbook,x,MyYearBook,This social networking service is closed.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2115,Q_PROTO_NACION,nacion,,Nacion.com,Costa Rican news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2048,Q_PROTO_NAGARIKNEWS,nagariknews,,NagarikNews.com,Nepali news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1925,Q_PROTO_NAIRALAND,nairaland,,Nairaland.com,Nigerian forum hosting site,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1926,Q_PROTO_NAMBA,namba,,Namba.kg,Kyrgyzstani forum and social networking site.,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +830,Q_PROTO_NAPSTER,napster,,Napster.com,"This protocol plug-in classifies the http traffic to the hosts napster.com, napsterinc.tt.omtrdc.net, a1082.b.akamai.net and a1702.b.akamai.net. It also classifies the ssl traffic to the Common Name sms.napster.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 127,Q_PROTO_NARP,narp,,NBMA Address Resolution Protocol,"NBMA Address Resolution Protocol (NARP) allows a source terminal (a host or router), wishing to communicate over a Non-Broadcast Multi-Access (NBMA) link layer network, to find out the NBMA addresses of a destination terminal if the destination terminal is connected to the same NBMA network as the source.",Network Service,ip,"RFC 1735,NARP v1",,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1026,Q_PROTO_NASA,nasa,,nasa,This protocol plug-in classifies the http traffic to the host nasa.gov.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -457,Q_PROTO_NASZA_KLASA,nasza_klasa,,Nasza Klasa,This protocol plug-in classifies the http traffic to the hosts nasza-klasa.pl and nk.pl.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1215,Q_PROTO_NATECYWORLD,natecyworld,,Nate,This protocol plug-in classifies the http traffic to the hosts nate.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2049,Q_PROTO_NATION,nation,,Nation,Kenyan news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1028,Q_PROTO_NATIONALGEOGRAPHIC,nationalgeographic,,nationalgeographic,This protocol plug-in classifies the http traffic to the host nationalgeographic.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1027,Q_PROTO_NATIONALLOTTERY,nationallottery,,national-lottery,This protocol plug-in classifies the http traffic to the host national-lottery.co.uk.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2050,Q_PROTO_NATIONNEWS,nationnews,,Nationnews,Barbadian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1029,Q_PROTO_NAVER,naver,,naver,"This protocol plug-in classifies the http traffic to the hosts naver.com, naver.jp and navercorp.jp.",Web,http;https;ssl,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1550,Q_PROTO_NAVERDRIVE,naverdrive,,Naverdrive,The file storage client of Naver ( http://ndrive.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1551,Q_PROTO_NAVERMAIL,navermail,,Navermail,The webmail client of naver.com ( http://mail.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1030,Q_PROTO_NBA,nba,,NBA,"News website dedicated to the NBA, featuring video clips.",Web,akamai;apple_hls;http;https,"20140117,5.1.4 (iOS),4.1106 (Android)",Mobile-Android-App4.1106 (2014-01-13);PC-Wi ndows-Browser-20131010 (2014-01-13);iPhone-iOS7.0.4-App5.1.4 (2014-01-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -1399,Q_PROTO_NBA_CHINA,nba_china,,Nba China,Chinese NBA website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1026,Q_PROTO_NASA,nasa,,NASA.gov,This protocol plug-in classifies the http traffic to the host nasa.gov.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +457,Q_PROTO_NASZA_KLASA,nasza_klasa,,Nasza Klasa (nk.pl),This protocol plug-in classifies the http traffic to the hosts nasza-klasa.pl and nk.pl.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1215,Q_PROTO_NATECYWORLD,natecyworld,,Nate.com,This protocol plug-in classifies the http traffic to the hosts nate.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +2049,Q_PROTO_NATION,nation,,Nation.co.ke,Kenyan news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1028,Q_PROTO_NATIONALGEOGRAPHIC,nationalgeographic,,NationalGeographic.com,This protocol plug-in classifies the http traffic to the host nationalgeographic.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1027,Q_PROTO_NATIONALLOTTERY,nationallottery,,National-lottery.co.uk,This protocol plug-in classifies the http traffic to the host national-lottery.co.uk.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2050,Q_PROTO_NATIONNEWS,nationnews,,NationNews.com,Barbadian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1029,Q_PROTO_NAVER,naver,,Naver.com,"This protocol plug-in classifies the http traffic to the hosts naver.com, naver.jp and navercorp.jp.",Web,http;https;ssl,20110930,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1550,Q_PROTO_NAVERDRIVE,naverdrive,,Naver Drive,The file storage client of Naver ( http://ndrive.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1551,Q_PROTO_NAVERMAIL,navermail,,Naver Mail,The webmail client of naver.com ( http://mail.naver.com/ ).,Web,naver,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1030,Q_PROTO_NBA,nba,,NBA.com,"News website dedicated to the NBA, featuring video clips.",Web,akamai;apple_hls;http;https,iPhone-iOS-NBA Game Time 5.1.4;Mobile-Android-NBA Game Time 4.1106;PC-Windows-Browser-www.nba.com (2014-01-17),Mobile-Android-NBA Game Time-4.1106 (2014-01-13);PC-Windows-Firefox (2014-01-13);iPhone-iOS-7.0.4-NBA Game Time-5.1.4 (2014-01-13),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +1399,Q_PROTO_NBA_CHINA,nba_china,,Nba China,Chinese NBA website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 128,Q_PROTO_NBNS,nbns,,Netbios Name Service,"NetBios Name Service (NBNS) is a protocol resulting from NetBios, and which makes it possible to manage the names in a Microsoft NetBios network. NetBios names are human readable and NBNS serves the same purpose as the DNS system in IP environments.",Network Service,8021q;gre;ipx;llc;tcp;udp,RFC 1002,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 933,Q_PROTO_NCP,ncp,,Netware Core Protocol,"The NetWare Core Protocol (NCP) is a network protocol used to access file, print, directory, clock synchronization, messaging, remote command execution and other network service functions.",Network Service,ipx;tcp,20110919,10/21/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1917,Q_PROTO_NDMP,ndmp,,NDMP,NDMP (Network Data Management Protocol) is an open protocol for enterprise-wide network based backup over TCP.,Network Service,tcp,4,"NDMP v3, NDMP v4 (2013-12-03)",,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,,, -1400,Q_PROTO_NDUOA,nduoa,,Nduoa,Chinese Android forum and applications sharing.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1552,Q_PROTO_NEFSYS,nefsys,,Nefsys,Video conference website ( http://www.nefsis.com/ ),Web,http;https,20130715,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1459,Q_PROTO_NEND,nend,,nend,Mobile in-apps ads integration service.,Web,http;https;ssl,20130304,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1767,Q_PROTO_NEOBUX,neobux,,NeoBux,NeoBux excels in providing new business solutions as a Paid-to-Click service,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2051,Q_PROTO_NET,net,,Net,Croatian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1917,Q_PROTO_NDMP,ndmp,,Network Data Management Protocol,NDMP (Network Data Management Protocol) is an open protocol for enterprise-wide network based backup over TCP.,Network Service,tcp,4,NDMP v3 (2013-12-03);NDMP v4 (2013-12-03),,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,x,,,,,,,, +1400,Q_PROTO_NDUOA,nduoa,,Nduoa.com,Chinese Android forum and applications sharing.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1552,Q_PROTO_NEFSYS,nefsys,,Nefsys.com,Video conference website ( http://www.nefsis.com/ ),Web,http;https,20130715,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1459,Q_PROTO_NEND,nend,,Nend.net,Mobile in-apps ads integration service.,Web,http;https;ssl,20130304,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1767,Q_PROTO_NEOBUX,neobux,,NeoBux.com,NeoBux excels in providing new business solutions as a Paid-to-Click service,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2051,Q_PROTO_NET,net,,Net.hr,Croatian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 129,Q_PROTO_NETBIOS,netbios,,Netbios,"NetBIOS defines a software interface and standard methods providing a communication interface between the application program and the attached medium. NetBIOS is used in various LAN (Ethernet, Token Ring etc) as well as WAN environments such TCP/IP, PPP and X.25 networks.",File Server,8021q;gre;ipx;llc;tcp;udp,RFC 1002,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 658,Q_PROTO_NETBLT,netblt,,Bulk Data Transfer Protocol,The netblt protocol (Bulk Data Transfer Protocol) is found over the IP layer (IANA protocol number: 30).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 569,Q_PROTO_NETBSD_UPDATE,netbsd_update,,NetBSD Updates,NetBSD update manages the updates for NetBSD. NetBSD is a Unix-like Open Source operating system.,Web,http;https,NetBSD-4.0,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -734,Q_PROTO_NETFLIX,netflix,,Netflix,NetFlix is a site using Silverlight protocol to stream videos.,Audio/Video,http;https;ssl,20120930,Androïd v2.4.0 (2013-08-28);IOS v4.2 (2013-08-28),,x,,x,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,x, -130,Q_PROTO_NETFLOW,netflow,,Cisco Netflow Protocol,"NetFlow is a Cisco protocol that provides nearly real-time traffic monitoring, aggregation and statistic evaluation, multicriteria data flow selection, using source/destination IP addresses, protocols, etc.",Network Management,udp,Netflow v1;Netflow v5;Netflow v7;Netflow v8;Netflow v9,7/22/2013,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -831,Q_PROTO_NETLOAD,netload,,Netload,This protocol plug-in classifies the http traffic to the host netload.in.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -322,Q_PROTO_NETLOG,netlog,,netlog,"Netlog is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https,20080118,11/3/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1216,Q_PROTO_NETMARBLE,netmarble,,NetMarble,This protocol plug-in classifies the http traffic to the host netmarble.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -931,Q_PROTO_NETMEETING_ILS,netmeeting_ils,,netmeeting ils protocol,Netmeeting ILS is the protocol used between Netmeeting and Internet Locator Servers (ILS). Netmeeting is a VoIP and multi-point videoconferencing client included in many versions of Microsoft Window. A Internet Locator Server (ILS) is a directory used to find other users and facilitate rendezvous.,Instant Messaging,ldap,11.70,10/5/2011,x,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, -458,Q_PROTO_NETTBY,nettby,,Nettby,This protocol plug-in classifies the http traffic to the host nettby.no.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2117,Q_PROTO_NEWS24,news24,,News24,South African news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1778,Q_PROTO_NEWS_AM,news_am,,Armenian News,Armenian news portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2116,Q_PROTO_NEWS_MN,news_mn,,News.mn,Mongolian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2052,Q_PROTO_NEWSIT,newsit,,Newsit,Greek news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1151,Q_PROTO_NEXIAN,nexian,,Nexian,This protocol plug-in classifies the http traffic to the hosts nexian.co.id and nexian.us.to.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1236,Q_PROTO_NEXON,nexon,,Nexon,This protocol plug-in classifies the http traffic to the host www.nexon.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -459,Q_PROTO_NEXOPIA,nexopia,,Nexopia,This protocol plug-in classifies the http traffic to the host nexopia.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1031,Q_PROTO_NFL,nfl,,nfl,This protocol plug-in classifies the http traffic to the host nfl.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +734,Q_PROTO_NETFLIX,netflix,,Netflix.com,NetFlix is a site using Silverlight protocol to stream videos.,Audio/Video,http;https;ssl,20120930,Mobile-Android-NetFlix-2.4.0 (2013-08-28);iPhone-iOS-NetFlix-4.2 (2013-08-28),,x,,x,,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,x, +130,Q_PROTO_NETFLOW,netflow,,Cisco Netflow,"NetFlow is a Cisco protocol that provides nearly real-time traffic monitoring, aggregation and statistic evaluation, multicriteria data flow selection, using source/destination IP addresses, protocols, etc.",Network Management,udp,Netflow v1;Netflow v5;Netflow v7;Netflow v8;Netflow v9,7/22/2013,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +831,Q_PROTO_NETLOAD,netload,,Netload.in,This protocol plug-in classifies the http traffic to the host netload.in.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +322,Q_PROTO_NETLOG,netlog,,Netlog.com,"Netlog is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https,20080118,11/3/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1216,Q_PROTO_NETMARBLE,netmarble,,NetMarble.com,This protocol plug-in classifies the http traffic to the host netmarble.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +931,Q_PROTO_NETMEETING_ILS,netmeeting_ils,,NetMeeting ILS,Netmeeting ILS is the protocol used between Netmeeting and Internet Locator Servers (ILS). Netmeeting is a VoIP and multi-point videoconferencing client included in many versions of Microsoft Window. A Internet Locator Server (ILS) is a directory used to find other users and facilitate rendezvous.,Instant Messaging,ldap,11.70,10/5/2011,x,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,, +458,Q_PROTO_NETTBY,nettby,,Nettby.no,This protocol plug-in classifies the http traffic to the host nettby.no.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2117,Q_PROTO_NEWS24,news24,,News24.com,South African news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1778,Q_PROTO_NEWS_AM,news_am,,News.am,Armenian news portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2199,Q_PROTO_NEWS_AU,news_au,,News,Australian news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2116,Q_PROTO_NEWS_MN,news_mn,,News.mn,Mongolian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2052,Q_PROTO_NEWSIT,newsit,,Newsit.gr,Greek news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2171,Q_PROTO_NEWVISION,newvision,,Newvision,Ugandan news portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1151,Q_PROTO_NEXIAN,nexian,,Nexian.co.id - Nexian.us.to,This protocol plug-in classifies the http traffic to the hosts nexian.co.id and nexian.us.to.,Web,http;https,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1236,Q_PROTO_NEXON,nexon,,Nexon.com,This protocol plug-in classifies the http traffic to the host www.nexon.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +459,Q_PROTO_NEXOPIA,nexopia,,Nexopia.com,This protocol plug-in classifies the http traffic to the host nexopia.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1031,Q_PROTO_NFL,nfl,,National Football League (NFL.com),This protocol plug-in classifies the http traffic to the host nfl.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 131,Q_PROTO_NFS,nfs,,Network File System,The NFS protocol provides transparent remote access to shared file systems across networks as described in RFC 1813.,File Server,rpc,NFS V3.0 (RFC 1813);RPC V2 (RFC 5531),7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -460,Q_PROTO_NGO_POST,ngo_post,,NGO Post,This protocol plug-in classifies the http traffic to the host ngopost.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -832,Q_PROTO_NICONICO_DOUGA,niconico_douga,,NicoNico Douga,Nico Nico Douga is a Japanese video streaming platform for mobile devices and PC.,Audio/Video,http;https;rtmp;ssl;tcp,2019091;0.1.18_p1,web version and android (0.1.18_p1.KARI) (2013-01-24),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -1318,Q_PROTO_NIFTY,nifty,,Nifty,Japanese web portal and search site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1033,Q_PROTO_NIKE,nike,,nike,This protocol plug-in classifies the http traffic to the host nike.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1329,Q_PROTO_NIKKEI,nikkei,,Nikkei,Online version of a Japanese newspaper for economists,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1488,Q_PROTO_NIMBUZZ_WEB,nimbuzz_web,,Nimbuzz,Instant Messaging client for mobile devices.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, -461,Q_PROTO_NING,ning,,Ning,This protocol plug-in classifies the http traffic to the host ning.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1927,Q_PROTO_NJUSKALO,njuskalo,,Njuskalo,Croatian online classified ads,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +460,Q_PROTO_NGO_POST,ngo_post,,NGOPost.org,This protocol plug-in classifies the http traffic to the host ngopost.org.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +832,Q_PROTO_NICONICO_DOUGA,niconico_douga,,Nicovideo.jp (aka Nico Nico Douga),Nico Nico Douga is a Japanese video streaming platform for mobile devices and PC.,Audio/Video,http;https;rtmp;ssl;tcp,2019091;0.1.18_p1,Mobile-Android-Niconico Douga-0.1.18_p1.KARI (2013-01-24);PC-Linux-Browser (2013-01-24),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +1318,Q_PROTO_NIFTY,nifty,,Nifty.com,Japanese web portal and search site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1033,Q_PROTO_NIKE,nike,,Nike.com,This protocol plug-in classifies the http traffic to the host nike.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1329,Q_PROTO_NIKKEI,nikkei,,Nikkei.com,Online version of a Japanese newspaper for economists,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1488,Q_PROTO_NIMBUZZ_WEB,nimbuzz_web,,Nimbuzz,Instant Messaging client for mobile devices.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, +461,Q_PROTO_NING,ning,,Ning.com,This protocol plug-in classifies the http traffic to the host ning.com.,Web,http;https,PC-Windows-Browser-www.ning.com (2013-07-13),3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1927,Q_PROTO_NJUSKALO,njuskalo,,Njuskalo.hr,Croatian online classified ads,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 132,Q_PROTO_NLOCKMGR,nlockmgr,,Network Lock Manager,The network lock manager is a facility that works in cooperation with the Network File System (NFS) to provide a System V style of advisory file and record locking over the network.,File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, 133,Q_PROTO_NLSP,nlsp,,Netware Link Services Protocol,NetWare Link Services Protocol (NLSP) provides link state routing for Internetwork Packet Exchange networks.,Routing,ipx,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 134,Q_PROTO_NNTP,nntp,,Network News Transport Protocol,"The Network News Transport Protocol (NNTP) is used for the distribution, inquiry, retrieval and posting of net news articles using a reliable stream-based mechanism.",Forum,socks4;socks5;tcp,RFC 977;RFC 3977,10/10/2011,,,,x,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, -135,Q_PROTO_NNTPS,nntps,,Secure NNTP,Secure version of the NNTP protocol.,Forum,ssl,RFC 977;RFC 3977,7/4/2008,,,,,,563,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, +135,Q_PROTO_NNTPS,nntps,,Network News Transport Protocol Secure,Secure version of the NNTP protocol.,Forum,ssl,RFC 977;RFC 3977,7/4/2008,,,,,,563,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,, 595,Q_PROTO_NOD32_UPDATE,nod32_update,,ESET NOD32 Antivirus Updates,Virus definitions and engine updates for the ESET NOD32 anti-virus.,Web,http;https,20110214,2/9/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -576,Q_PROTO_NOKIA_OVI,nokia_ovi,,Nokia Ovi,"Nokia Ovi is a protocol used by customers to synchronize their personal data with their Nokia mobile phone (contacts, mail, calendar, music).",Web,http;https;ssl,"Nokia ovi 1.09 (Nokia N95),20131025 (web)",Mobile-NokiaN95-ovi1.09 (2013-10-21);PC-Windows-Chrome-20131021 (2013-10-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1217,Q_PROTO_NONGHYUP_BANK,nonghyup_bank,,Nonghyup Bank,This protocol plug-in classifies the http traffic to the host nohyup.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1779,Q_PROTO_NORDEA,nordea,,Nordea,Danish online banking and investment web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -596,Q_PROTO_NORTON_UPDATE,norton_update,,Symantec Norton AntiVirus Updates,Virus definitions and engine updates for the Symantec Norton anti-virus.,Web,http;https,21.1.0.18,PC-Windows-Antivirus-21.1.0.18 (2013-11-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -2118,Q_PROTO_NOVINKY,novinky,,Novinky,Czech news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1401,Q_PROTO_NOWNEWS,nownews,,Nownews,Taiwanese news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2053,Q_PROTO_NRK,nrk,,Nrk,Norwegian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -659,Q_PROTO_NSFNET_IGP,nsfnet_igp,,NSFNET_IGP,The nsfnet_igp protocol (NSFNET_IGP) is found over the IP layer (IANA protocol number: 85).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +576,Q_PROTO_NOKIA_OVI,nokia_ovi,,Nokia Ovi,"Nokia Ovi is a protocol used by customers to synchronize their personal data with their Nokia mobile phone (contacts, mail, calendar, music).",Web,http;https;ssl,PC-Windows 7-Browser-ovi.nokia.com (2013-10-25);Nokia Mobile N95-Symbian-Nokia Ovi Store 1.09,Nokia Mobile-N95-Nokia Ovi Store-1.09 (2013-10-21);PC-Windows-7-Nokia Suite-3.8.48 (2014-02-26);PC-Windows-Chrome (2013-10-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1217,Q_PROTO_NONGHYUP_BANK,nonghyup_bank,,Nonghyup Bank (Nohyup.com),This protocol plug-in classifies the http traffic to the host nohyup.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1779,Q_PROTO_NORDEA,nordea,,Nordea.dk,Danish online banking and investment web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +596,Q_PROTO_NORTON_UPDATE,norton_update,,Symantec Norton AntiVirus Updates,Virus definitions and engine updates for the Symantec Norton anti-virus.,Web,http;https,PC-Windows 7-Norton AntiVirus 21.1.0.18 (2013-11-25),Mac-Mac OS-Norton Antivirus-12.6 (2014-02-05);PC-Windows-7-Norton Antivirus-21.1.0.18 (2014-02-06);PC-Windows-8-Norton Antivirus-21.1.0.18 (2014-02-06),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +2194,Q_PROTO_NOTICIAS24,noticias24,,Noticias24,Venezuelian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2118,Q_PROTO_NOVINKY,novinky,,Novinky.cz,Czech news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1401,Q_PROTO_NOWNEWS,nownews,,NOWnews.com,Taiwanese news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2053,Q_PROTO_NRK,nrk,,NRK.no,Norwegian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +659,Q_PROTO_NSFNET_IGP,nsfnet_igp,,NSFNET-IGP,The nsfnet_igp protocol (NSFNET_IGP) is found over the IP layer (IANA protocol number: 85).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 136,Q_PROTO_NSPI,nspi,,Name Service Provider Interface,Name Service Provider Interface is a protocol used by Exchange.,Application Service,dcerpc;msrpc,NSPI-V5.5,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, 137,Q_PROTO_NTP,ntp,,Network Time Protocol,Network Time Protocol (NTP) is a time synchronization system for computer clocks through the Internet network. It provides mechanisms to synchronize time and coordinate time distribution in a large network.,Network Service,udp,NTP-4.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1034,Q_PROTO_NTV,ntv,,ntv,This protocol plug-in classifies the http traffic to the host ntv.co.jp.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2119,Q_PROTO_NU,nu,,Nu,Dutch news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -660,Q_PROTO_NVP_II,nvp_ii,,Network Voice Protocol,The nvp_ii protocol (Network Voice Protocol) is found over the IP layer (IANA protocol number: 11).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1035,Q_PROTO_NYDAILYNEWS,nydailynews,,nydailynews,This protocol plug-in classifies the http traffic to the host nydailynews.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1036,Q_PROTO_NYTIMES,nytimes,,nytimes,This protocol plug-in classifies the http traffic to the host nytimes.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2054,Q_PROTO_NZHERALD,nzherald,,Nzherald,New zealander news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1034,Q_PROTO_NTV,ntv,,Ntv.co.jp,This protocol plug-in classifies the http traffic to the host ntv.co.jp.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2119,Q_PROTO_NU,nu,,Nu.nl,Dutch news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +660,Q_PROTO_NVP_II,nvp_ii,,Network Voice Protocol II,The nvp_ii protocol (Network Voice Protocol) is found over the IP layer (IANA protocol number: 11).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1035,Q_PROTO_NYDAILYNEWS,nydailynews,,NYDailyNews.com,This protocol plug-in classifies the http traffic to the host nydailynews.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1036,Q_PROTO_NYTIMES,nytimes,,NYTimes.com,This protocol plug-in classifies the http traffic to the host nytimes.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2054,Q_PROTO_NZHERALD,nzherald,,NZHerald.co.nz,New zealander news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 330,Q_PROTO_OCSP,ocsp,,Online Certificate Status Protocol,This network protocol is used for validating certificates.,Encrypted,http;https,RFC 2560;RFC 4806,10/13/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,x,,, -833,Q_PROTO_OCTOPZ,octopz,,Octopz,This protocol plug-in classifies the http traffic to the host octopz.net. It also classifies the ssl traffic to the Common Name cfs1.octopz.net.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -462,Q_PROTO_ODNOKLASSNIKI,odnoklassniki,,odnoklassniki,Odnoklassniki is a Russian social network.,Forum,http;https,20111214,10/10/2013,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2000,Q_PROTO_ODSIEBIE_NAJLEPSZE_NET,odsiebie_najlepsze_net,,odsiebie.najlepsze.net,Classifies web browsing on the odsiebie.najlepsze.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1448,Q_PROTO_OFFICE365,office365,,Microsoft Office 365,Office 365 is a Microsoft on-line service which gives access to Office applications from the internet.,Web,http;https;ssl,20130415,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -296,Q_PROTO_OFFICEDEPOT,officedepot,,Officedepot,This protocol plug-in classifies the http traffic to the hosts officedepot.com and officedepot.fr.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +833,Q_PROTO_OCTOPZ,octopz,,Octopz.com,This protocol plug-in classifies the http traffic to the host octopz.net. It also classifies the ssl traffic to the Common Name cfs1.octopz.net.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2154,Q_PROTO_OCTOSHAPE,octoshape,,OctoShape,Octoshape is a video streaming solution provider for web streaming platforms which uses P2P technology.,Audio/Video,tcp;udp,PC-Windows-Octoshape Chrome Plug-in 1103234 (2014-01-24),,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +462,Q_PROTO_ODNOKLASSNIKI,odnoklassniki,,Odnoklassniki.ru,Odnoklassniki is a Russian social network.,Forum,http;https,PC-Windows-Browser-www.odnoklassniki.ru (2011-12-14),PC-Windows-7-Chrome-33.0.1750.154 (2014-03-17),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2000,Q_PROTO_ODSIEBIE_NAJLEPSZE_NET,odsiebie_najlepsze_net,,odsiebie.najlepsze.net,Classifies web browsing on the odsiebie.najlepsze.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1448,Q_PROTO_OFFICE365,office365,,Microsoft Office 365,Office 365 is a Microsoft on-line service which gives access to Office applications from the internet.,Web,http;https;ssl,20130415,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +296,Q_PROTO_OFFICEDEPOT,officedepot,,OfficeDepot.fr,This protocol plug-in classifies the http traffic to the hosts officedepot.com and officedepot.fr.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 1095,Q_PROTO_OICQ,oicq,,OICQ,"Oicq is a proprietary messaging protocol developed by Tencent, at the origin of the qq protocol.",Instant Messaging,tcp;udp,20111108,7/4/2008,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -1135,Q_PROTO_OKEZONE,okezone,,Okezone,This protocol plug-in classifies the http traffic to the host okezone.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1325,Q_PROTO_OKWAVE,okwave,,OKWave,Decision support for professionals,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1772,Q_PROTO_OLX,olx,,Olx,Free international classified ads website.,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -463,Q_PROTO_ONECLIMATE,oneclimate,,OneClimate,This protocol plug-in classifies the http traffic to the host oneworld.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1553,Q_PROTO_ONEHUB,onehub,,Onehub,File sharing website ( https://onehub.com/ ).,Web,https;ssl,20130715,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2120,Q_PROTO_ONET,onet,,Onet,Polish news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -464,Q_PROTO_ONEWORLDTV,oneworldtv,,OneWorldTV,This protocol plug-in classifies the http traffic to the host tv.oneworld.net.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1037,Q_PROTO_ONLINEDOWN,onlinedown,,onlinedown,This protocol plug-in classifies the http traffic to the host onlinedown.net.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2055,Q_PROTO_ONLINEKHABAR,onlinekhabar,,Onlinekhabar,Nepali news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2121,Q_PROTO_ONLINER,onliner,,Onliner,Belarussian ecommerce website,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1135,Q_PROTO_OKEZONE,okezone,,Okezone.com,This protocol plug-in classifies the http traffic to the host okezone.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1325,Q_PROTO_OKWAVE,okwave,,OKWave.jp,Decision support for professionals,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1772,Q_PROTO_OLX,olx,,Olx.com.ar,Free international classified ads website.,Web,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +463,Q_PROTO_ONECLIMATE,oneclimate,x,OneWorld.net,This protocol plug-in is deprecated.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1553,Q_PROTO_ONEHUB,onehub,,OneHub.com,File sharing website ( https://onehub.com/ ).,Web,http;https;ssl,20130715,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2120,Q_PROTO_ONET,onet,,Onet.pl,Polish news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2175,Q_PROTO_ONEWORLD_ORG,oneworld_org,,OneWorld.org,OneWorld is a NGO with a mission to provide internet and mobile phone applications to third-world countries inhabitants,Web,http;https,20140218,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +464,Q_PROTO_ONEWORLDTV,oneworldtv,x,OneWorld TV,This protocol plug-in is deprecated.,Web,,20140220,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1037,Q_PROTO_ONLINEDOWN,onlinedown,,Onlinedown.net,This protocol plug-in classifies the http traffic to the host onlinedown.net.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2055,Q_PROTO_ONLINEKHABAR,onlinekhabar,,Onlinekhabar.com,Nepali news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2121,Q_PROTO_ONLINER,onliner,,Onliner.by,Belarussian ecommerce website,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 553,Q_PROTO_OOVOO,oovoo,,Oovoo,"oovoo is an instant messenger application, with audio/video support.",Instant Messaging,http;https;jabber;ssl;udp,Oovoo v2.8.0.39,10/15/2012,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -834,Q_PROTO_OOYALA,ooyala,,Ooyala,This protocol plug-in classifies the http traffic to the hosts l.player.ooyala.com and ooyala.jp. It also classifies the ssl traffic to the Common Name ooyala.jp.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -465,Q_PROTO_OPEN_DIARY,open_diary,,Open Diary,This protocol plug-in classifies the http traffic to the host opendiary.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +834,Q_PROTO_OOYALA,ooyala,,Ooyala.jp,This protocol plug-in classifies the http traffic to the hosts l.player.ooyala.com and ooyala.jp. It also classifies the ssl traffic to the Common Name ooyala.jp.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +465,Q_PROTO_OPEN_DIARY,open_diary,,OpenDiary.com,This protocol plug-in classifies the http traffic to the host opendiary.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 570,Q_PROTO_OPENBSD_UPDATE,openbsd_update,,OpenBSD Updates,This protocol manages OpenBSD updates.,Web,http;https,OpenBSD4.8,12/8/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -138,Q_PROTO_OPENFT,openft,,OpenFT Protocol,OpenFT is a peer-to-peer protocol.,Peer to Peer,http,Apollon,4/20/2012,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +138,Q_PROTO_OPENFT,openft,,OpenFT,OpenFT is a peer-to-peer protocol.,Peer to Peer,http,Apollon,4/20/2012,x,,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 2008,Q_PROTO_OPENGW,opengw,,OpenGW (VPN Gate),"OpenGW (aka VPN Gate) is a Public VPN Relay Servers service, used in several VPN solutions (example: PacketiX. This service uses the SoftEther VPN technology.",Web,http;https;ssl,"SoftEther PacketiX v4.02,20131227",,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -1789,Q_PROTO_OPENSOOQ,opensooq,,Opensooq,Market place framework aimed to Arab countries,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1789,Q_PROTO_OPENSOOQ,opensooq,,Opensooq.com,Market place framework aimed to Arab countries,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 336,Q_PROTO_OPENVPN,openvpn,,openvpn,OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities.,Tunneling,https;ssl;tcp;udp,OpenVPN 1.8.3,1/11/2010,,x,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x 578,Q_PROTO_OPERA_UPDATE,opera_update,,Opera Update,Opera Update is the protocol used for the update of the Opera browser.,Web,http;https;ssl,Opera11.00,10/26/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1753,Q_PROTO_ORANGE,orange,,Orange,"French telecom operator website providing internet and telephone services as well as web and media portal services. This portal provides services to countries like Mauritius, Madagascar, Uganda, Jordan, Kenya, Poland, Ivory Coast, Tunisia, or Moldova.",Web,http;https,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -265,Q_PROTO_ORANGEMAIL,orangemail,,Orange webmail,Orangemail is the webmail of webmail.orange.fr.,Webmail,http;https;ssl,20130828,PC-Windows-Browser-20130101 (2014-01-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +1753,Q_PROTO_ORANGE,orange,,Orange.com,"French telecom operator website providing internet and telephone services as well as web and media portal services. This portal provides services to countries like Mauritius, Madagascar, Uganda, Jordan, Kenya, Poland, Ivory Coast, Tunisia, or Moldova.",Web,http;https,20140130,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +265,Q_PROTO_ORANGEMAIL,orangemail,,Orange webmail,Orangemail is the webmail of webmail.orange.fr.,Webmail,http;https;ssl,PC-Windows-Browser-www.orangemail.com (2013-08-28),PC-Windows-Firefox (2014-03-11),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, 544,Q_PROTO_ORB,orb,,orb,ORB is a streaming software that enables users to remotely access all their personal digital media files.,Web,http;https;ssl;tcp;udp,20101214,12/21/2010,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -2056,Q_PROTO_ORF,orf,,Orf,Austrian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2122,Q_PROTO_ORIGO,origo,,Origo,Hungarian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -466,Q_PROTO_ORKUT,orkut,,Orkut,"Orkut is a social networking website competing with Facebook or Twitter, popular in Brazil and now owned and operated by Google Inc.",Web,google_desktop;http;https;ssl,20110331,7/2/2010,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +2056,Q_PROTO_ORF,orf,,Orf.at,Austrian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2122,Q_PROTO_ORIGO,origo,,Origo.hu,Hungarian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +466,Q_PROTO_ORKUT,orkut,,Orkut.com,"Orkut is a social networking website competing with Facebook or Twitter, popular in Brazil and now owned and operated by Google Inc.",Web,google_desktop;http;https;ssl,20110331,7/2/2010,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 139,Q_PROTO_OSINL,osinl,,OSI Network Layer,"ISO Network Layer Protocol is used by Cisco Equipment to transmit OSI protocols (IS-IS, ...) over Ethernet.",Network Service,eth;gre;llc;osinl,RFC 1377,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 140,Q_PROTO_OSPF,ospf,,Open Shortest Path First,OSPF (Open Short Path First) is a link state routing protocol used within large autonomous system networks. It is is considered to be the best Inter Routing protocol today and it is use it strongly encouraged.,Routing,ip;ip6,OSPF v2;OSPF v3,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1928,Q_PROTO_OUEDKNISS,ouedkniss,,Ouedkniss,Algerian internet portal,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -467,Q_PROTO_OUTEVERYWHERE,outeverywhere,,OUTeverywhere,This protocol plug-in classifies the http traffic to the host outeverywhere.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1478,Q_PROTO_OUTLOOK,outlook,,Outlook Web Access (Office 365),"On-line Microsoft Outlook encrypted service, from the Office 365 productivity suite.",Web,office365,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -141,Q_PROTO_OWA,owa,,Outlook Web Access,"Outlook Web App is used to access e-mail (including support for S/MIME), calendars, contacts, tasks, documents (used with SharePoint or in 2010 Office Web Apps), and other mailbox content when access to the Microsoft Outlook desktop application is unavailable.",Webmail,http;https,20100129,7/4/2008,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,x,,,,,,, -1274,Q_PROTO_PAIPAI,paipai,,Paipai,This protocol plug-in classifies the http traffic to the host paipai.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -142,Q_PROTO_PALTALK,paltalk,,PalTalk Protocol,Paltalk is an instant messaging protocol.,Instant Messaging,http;https;ssl;tcp,8.1;8.5;9.0;9.1;9.4;10.0,1/14/2014,,x,,x,,,,,x,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, -143,Q_PROTO_PALTALK_AUDIO,paltalk_audio,,Paltalk audio chat,Proprietary protocol used by Paltalk in audio chats.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,1/14/2014,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, -252,Q_PROTO_PALTALK_TRANSFER,paltalk_transfer,,PalTalk Transfer Protocol,Paltalk is an instant messaging protocol,File Transfer,tcp,9.4,1/14/2014,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -599,Q_PROTO_PALTALK_VIDEO,paltalk_video,,Paltalk video,Proprietary protocol used by Paltalk in video.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,Paltalk Messenger 10.0 (2011-09-03),,,,,paltalk,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +1928,Q_PROTO_OUEDKNISS,ouedkniss,,Ouedkniss.com,Algerian internet portal,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +467,Q_PROTO_OUTEVERYWHERE,outeverywhere,,OUTeverywhere.com,This protocol plug-in classifies the http traffic to the host outeverywhere.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1478,Q_PROTO_OUTLOOK,outlook,,Outlook Web Access (Office 365),"On-line Microsoft Outlook encrypted service, from the Office 365 productivity suite.",Web,office365,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +2164,Q_PROTO_OVER_BLOG,over_blog,,Over-blog,French and American blog administration website,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +141,Q_PROTO_OWA,owa,,Outlook Web App,"Outlook Web App is used to access e-mail (including support for S/MIME), calendars, contacts, tasks, documents (used with SharePoint or in 2010 Office Web Apps), and other mailbox content when access to the Microsoft Outlook desktop application is unavailable.",Webmail,http;https,20100129,7/4/2008,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,x,,,,,,, +1274,Q_PROTO_PAIPAI,paipai,,Paipai.com,This protocol plug-in classifies the http traffic to the host paipai.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +142,Q_PROTO_PALTALK,paltalk,,PalTalk,Paltalk is an instant messaging protocol.,Instant Messaging,http;https;ssl;tcp,8.1;8.5;9.0;9.1;9.4;10.0,3/11/2014,,x,,x,,,,,x,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, +143,Q_PROTO_PALTALK_AUDIO,paltalk_audio,,Paltalk audio chat,Proprietary protocol used by Paltalk in audio chats.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,3/11/2014,x,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, +252,Q_PROTO_PALTALK_TRANSFER,paltalk_transfer,,PalTalk Transfer Protocol,Paltalk is an instant messaging protocol,File Transfer,tcp,9.4,3/11/2014,,,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +599,Q_PROTO_PALTALK_VIDEO,paltalk_video,,Paltalk video,Proprietary protocol used by Paltalk in video.,Audio/Video,tcp,8.1;8.5;9.0;9.1;9.4;10.0,PC-Windows-Paltalk Messenger-10.0 (2011-09-03),,,,,paltalk,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +2188,Q_PROTO_PALWEATHER,palweather,,Palweather,Palestinian meteorological portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 711,Q_PROTO_PANDA_UPDATE,panda_update,,Panda Update,Panda_update is the protocol used for panda softwares updates.,Web,http;https;ssl,20110216,2/16/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -278,Q_PROTO_PANDO,pando,x,Pando protocol,pando is a peer-to-peer protocol. Pando servers have been definitely shutted down in August 2013.,Peer to Peer,bittorrent;http;https;ssl;tcp;udp,<=2.3.0.9,4/10/2012,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -835,Q_PROTO_PANDORA,pandora,,Pandora Tv,This protocol plug-in classifies the http traffic to the host pandora.com.,Web,http;https;ssl,20140115,PC-Windows-Browser-20140115 (2014-01-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -836,Q_PROTO_PANDORA_TV,pandora_tv,,Pandora Tv,This protocol plug-in classifies the http traffic to the host pandora.tv.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1775,Q_PROTO_PANET,panet,,Panet,News and entertainment web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2057,Q_PROTO_PANTIP,pantip,,Pantip,Thai information and entertainment portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -144,Q_PROTO_PAP,pap,,PPP Password Authentication Protocol,The Password Authentication Protocol (PAP) provides a simple authentication method over a PPP link.,Authentication,ppp,RFC 1334,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x -2123,Q_PROTO_PARAGUAY,paraguay,,Paraguay,Paraguayan news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1219,Q_PROTO_PARAN,paran,,Paran,This protocol plug-in classifies the http traffic to the host praran.com.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -2058,Q_PROTO_PARTIS,partis,,Partis,Slovenian news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -468,Q_PROTO_PARTNERUP,partnerup,,PartnerUp,This protocol plug-in classifies the http traffic to the host partnerup.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -837,Q_PROTO_PARTY_POKER,party_poker,,Party Poker,This protocol plug-in classifies the ssl traffic to the Common Names partyaccount.com and partypoker.com.,Web,https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -469,Q_PROTO_PASSPORTSTAMP,passportstamp,,PassportStamp,This protocol plug-in classifies the http traffic to the host passportstamp.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2011,Q_PROTO_PATH,path,,Path,"It is a free social instant messenger for private messaging and sharing photos, videos, music, etc.",Instant Messaging,http;https;jabber;ssl,3.2.2 (iOS);3.2.4 (Android),Mobile-Android-App3.2.4 (2013-12-18);iPhone-iOS-App3.2.2 (2013-12-18),,x,,x,,,,,,,,,,,,x,x,,,x,x,,,,,,x,,,,,,,,,, -1402,Q_PROTO_PAYEASY,payeasy,,Payeasy,Taiwanese online beauty store.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1747,Q_PROTO_PAYPAL,paypal,,Paypal,Online payment services,Web,http;https;ssl,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -2124,Q_PROTO_PAZAR3,pazar3,,Pazar3,Macedonian classifed ads,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +278,Q_PROTO_PANDO,pando,x,Pando,pando is a peer-to-peer protocol. Pando servers have been definitely shutted down in August 2013.,Peer to Peer,,PC-Windows-Pando 2.3.0.9 (2009-05-01),4/10/2012,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +835,Q_PROTO_PANDORA,pandora,,Pandora Radio,This protocol plug-in classifies the http traffic to the host pandora.com.,Web,http;https;ssl,PC-Windows-Browser-www.pandora.com (2014-01-15),Mobile-Android-Pandora internet radio-5.1.1-USA (2014-02-03);PC-Windows-7-Chrome-32.0.1700.107-USA (2014-02-10);Windows Phone-Windows Phone OS-Pandora-1.0.0 (2014-02-03);iPhone-iOS-Pandora Radio-5.1-USA (2014-02-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +836,Q_PROTO_PANDORA_TV,pandora_tv,,Pandora.tv,This protocol plug-in classifies the http traffic to the host pandora.tv.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1775,Q_PROTO_PANET,panet,,Panet.co.il,News and entertainment web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2057,Q_PROTO_PANTIP,pantip,,Pantip.com,Thai information and entertainment portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +144,Q_PROTO_PAP,pap,,Password Authentication Protocol,The Password Authentication Protocol (PAP) provides a simple authentication method over a PPP link.,Authentication,ppp,RFC 1334,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,,x +2123,Q_PROTO_PARAGUAY,paraguay,,Paraguay.com,Paraguayan news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1219,Q_PROTO_PARAN,paran,x,Paran,This protocol plug-in classifies the http traffic to the host praran.com.,Web,,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +2058,Q_PROTO_PARTIS,partis,,Partis.si,Slovenian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +468,Q_PROTO_PARTNERUP,partnerup,,PartnerUp.com,This protocol plug-in classifies the http traffic to the host partnerup.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +837,Q_PROTO_PARTY_POKER,party_poker,,PartyPoker.com - PartyAccount.com,This protocol plug-in classifies the ssl traffic to the Common Names partyaccount.com and partypoker.com.,Web,https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +469,Q_PROTO_PASSPORTSTAMP,passportstamp,,PassportStamp.com,This protocol plug-in classifies the http traffic to the host passportstamp.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2011,Q_PROTO_PATH,path,,Path,"It is a free social instant messenger for private messaging and sharing photos, videos, music, etc.",Instant Messaging,http;https;jabber;ssl,3.2.2 (iOS);3.2.4 (Android),Mobile-Android-Path-3.2.4 (2013-12-18);iPhone-iOS-Path-3.2.2 (2013-12-18),,x,,x,,,,,,,,,,,,x,x,,,x,x,,,,,,x,,,,,,,,,, +1402,Q_PROTO_PAYEASY,payeasy,,Payeasy.com.tw,Taiwanese online beauty store.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1747,Q_PROTO_PAYPAL,paypal,,Paypal.com,Online payment services,Web,http;https;ssl,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +2124,Q_PROTO_PAZAR3,pazar3,,Pazar3.mk,Macedonian classifed ads,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 324,Q_PROTO_PCANYWHERE,pcanywhere,,PCAnywhere,PCAnywhere is a remote control solution. It can manage both Windows and Linux systems. Enhanced video performance and built-in AES 256-bit encryption help make communications fast and secure. PCAnywhere also features powerful file-transfer capabilities.,Thin Client,tcp;udp,20070321,7/17/2009,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1403,Q_PROTO_PCGAMES,pcgames,,Pcgames,Chinese Games portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1404,Q_PROTO_PCHOME,pchome,,Pchome,"Taiwanese Web portal (news, webmail, shopping....",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1405,Q_PROTO_PCLADY,pclady,,Pclady,Chinese beauty and fashion portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1260,Q_PROTO_PCONLINE,pconline,,Pconline,This protocol plug-in classifies the http traffic to the host pconline.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1475,Q_PROTO_PEERCAST,peercast,,PeerCast,PeerCast is an open-source multimedia streaming protocol.,Web,http;https,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2006,Q_PROTO_PEERGUARDIAN,peerguardian,,PeerGuardian,PeerGuardian is capable of blocking incoming and outgoing connections based on IP blacklists. This plug-in classifies the firewall attempts to update its blacklist from PeerGuardian servers.,Security Service,http;https,2.2.3 (Linux),PC-Linux-2.2.3 (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1256,Q_PROTO_PENGYOU,pengyou,,Pengyou,This protocol plug-in classifies the http traffic to the host pengyou.com.,Web,http;https,20120827,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1267,Q_PROTO_PEOPLE,people,,People,This protocol plug-in classifies the http traffic to the host people.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1403,Q_PROTO_PCGAMES,pcgames,,PCgames.com.cn,Chinese Games portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1404,Q_PROTO_PCHOME,pchome,,PChome.com.tw,"Taiwanese Web portal (news, webmail, shopping....",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1405,Q_PROTO_PCLADY,pclady,,PClady.com.cn,Chinese beauty and fashion portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1260,Q_PROTO_PCONLINE,pconline,,PConline.com.cn,This protocol plug-in classifies the http traffic to the host pconline.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1475,Q_PROTO_PEERCAST,peercast,,PeerCast,PeerCast is an open-source multimedia streaming protocol.,Web,http;https,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2006,Q_PROTO_PEERGUARDIAN,peerguardian,,PeerGuardian,PeerGuardian is capable of blocking incoming and outgoing connections based on IP blacklists. This plug-in classifies the firewall attempts to update its blacklist from PeerGuardian servers.,Security Service,http;https,2.2.3 (Linux),PC-Linux-PeerGuardian-2.2.3 (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +1256,Q_PROTO_PENGYOU,pengyou,,Pengyou.com,This protocol plug-in classifies the http traffic to the host pengyou.com.,Web,http;https,20120827,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1267,Q_PROTO_PEOPLE,people,,People.com.cn,This protocol plug-in classifies the http traffic to the host people.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2148,Q_PROTO_PERFECT_DARK,perfect_dark,,Perfect Dark,Perfect Dark is a peer-to-peer file-sharing (P2P) protocol from Japan.,Peer to Peer,,PC-Windows-Perfect Dark 1.10 (2014-02-04),PC-Windows-7-Perfect Dark-1.10 (2014-01-23),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 1091,Q_PROTO_PERFORCE,perforce,,Perforce Protocol,"Perforce is a commercial, proprietary, centralized revision control system developed by Perforce Software, Inc.",Application Service,tcp,2010.2,11/29/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -319,Q_PROTO_PERFSPOT,perfspot,,Perfspot,"Perfspot is a social networking website, enabling users to connect to relatives, friends, or unknown people and to share files.",Web,http;https,20080118,9/26/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1929,Q_PROTO_PERSIANBLOG,persianblog,,Persianblog,Persian blogging platform,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1930,Q_PROTO_PETITESANNONCES,petitesannonces,,Petitesannonces,French Polinesian online classified ads,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1931,Q_PROTO_PEYVANDHA,peyvandha,,Peyvandha,Persian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +319,Q_PROTO_PERFSPOT,perfspot,,Perfspot.com,"Perfspot is a social networking website, enabling users to connect to relatives, friends, or unknown people and to share files.",Web,http;https,20080118,9/26/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1929,Q_PROTO_PERSIANBLOG,persianblog,,Persianblog.ir,Persian blogging platform,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1930,Q_PROTO_PETITESANNONCES,petitesannonces,,PetitesAnnonces.pf,French Polinesian online classified ads,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1931,Q_PROTO_PEYVANDHA,peyvandha,,Peyvandha.ir,Persian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 661,Q_PROTO_PGM,pgm,,PGM Reliable Transport Protocol,The pgm protocol (PGM Reliable Transport Protocol) is found over the IP layer (IANA protocol number: 113).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2059,Q_PROTO_PHILENEWS,philenews,,Philenews,Cypriot news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -838,Q_PROTO_PHOTOBUCKET,photobucket,,Photobucket,"Photo sharing web-service, with advanced editing features, available for desktop and mobile devices.",Web,http;https;ssl,20131104,PC-Linux-BasicTest-20131104 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1092,Q_PROTO_PHPROXY,phproxy,,PHProxy,PHProxy is a web HTTP proxy programmed in PHP meant to bypass firewalls and access otherwise inaccessible resources.,Network Service,http,0.5 beta 2,PHProxy 0.5b2 (2011-12-06),,,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, -839,Q_PROTO_PHWEET,phweet,,Phweet,This protocol plug-in classifies the http traffic to the host blog.phweet.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, -1554,Q_PROTO_PICHAT,pichat,,Pichat,Online Chat Application ( pichat.net ).,Peer to Peer,http;https,v0.4.2,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -1932,Q_PROTO_PIK,pik,,Pik,Bosnian online trading website.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2059,Q_PROTO_PHILENEWS,philenews,,Philenews.com,Cypriot news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +838,Q_PROTO_PHOTOBUCKET,photobucket,,Photobucket.com,"Photo sharing web-service, with advanced editing features, available for desktop and mobile devices.",Web,http;https;ssl,PC-Windows-Browser-www.photobucket.com (2014-02-20);Mobile-Android-Photobucket Mobile 3.0.11 (2014-02-21);Windows Phone-Windows Phone OS-Photobucket 2.0.0.0 (2014-02-21);iPhone-iOS-Photobucket 3.0.4 (2014-02-21),Mobile-Android-4.1.2-photobucket-3.0.11 (2014-02-21);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-20);Windows Phone-Windows Phone OS-8-photobucket-2.0.0.0 (2014-02-21);iPhone-iOS-7.0.4-photobucket-3.0.4 (2014-02-21),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1092,Q_PROTO_PHPROXY,phproxy,,PHProxy,PHProxy is a web HTTP proxy programmed in PHP meant to bypass firewalls and access otherwise inaccessible resources.,Network Service,http,0.5 beta 2,PC-Linux-PHProxy-0.5b2 (2011-12-06),,,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, +839,Q_PROTO_PHWEET,phweet,,Phweet.com,This protocol plug-in classifies the http traffic to the host phweet.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, +1554,Q_PROTO_PICHAT,pichat,,Pichat.net,Online Chat Application ( pichat.net ).,Peer to Peer,http;https,v0.4.2,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1932,Q_PROTO_PIK,pik,,Pik.ba,Bosnian online trading website.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 145,Q_PROTO_PIM,pim,,Protocol Independent Multicast,The PIM Protocol provides an efficient routing of multicast groups that may span wide-area Internet zones.,Network Service,ip;ip6,IPv4;IPv6,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1218,Q_PROTO_PIMANG,pimang,,Pimang,This protocol plug-in classifies the http traffic to the hosts pimang.com and www.pmang.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -470,Q_PROTO_PINGSTA,pingsta,,Pingsta,This protocol plug-in classifies the http traffic to the host pingsta.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1470,Q_PROTO_PINTEREST,pinterest,,Pinterest,On-line service that allows users to attach personal elements on some kind of pinboard.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1555,Q_PROTO_PIOLET,piolet,,Piolet,P2P for music files.,Peer to Peer,http;https,3.1.0,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, +1218,Q_PROTO_PIMANG,pimang,,Pmang.com,This protocol plug-in classifies the http traffic to the hosts pimang.com and www.pmang.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +470,Q_PROTO_PINGSTA,pingsta,,Pingsta.com,This protocol plug-in classifies the http traffic to the host pingsta.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1470,Q_PROTO_PINTEREST,pinterest,,Pinterest.com,On-line service that allows users to attach personal elements on some kind of pinboard.,Web,http;https;ssl,PC-Windows-Browser-www.pinterest.com (2014-02-28);Mobile-Android-Pinterest 2.4.4 (2014-02-28);iPhone-iOS-Pinterest 3.4.1 (2014-02-28);Windows Phone-Windows Phone OS-Pinterest 1.0.0.0 (2014-02-28),BlackBerry-BlackBerry OS-10.2.1.537-Pinterest-1.1.0 (2014-03-04);Mobile-Android-4.1.2-Pinterest-2.4.4 (2014-02-28);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-28);Windows Phone-Windows Phone OS-8-Pinterest-1.0.0.0 (2014-02-28);iPhone-iOS-7.0.4-Pinterest-3.4.1 (2014-02-28),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1555,Q_PROTO_PIOLET,piolet,,Piolet.net,P2P for music files.,Peer to Peer,http;https,3.1.0,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, 662,Q_PROTO_PIPE,pipe,,Private IP Encapsulation within IP,The pipe protocol (Private IP Encapsulation within IP) is found over the IP layer (IANA protocol number: 131).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1319,Q_PROTO_PIXIV,pixiv,,Pixiv,Web site dedicated to Japanese fanarts and drawings,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1406,Q_PROTO_PIXNET,pixnet,,Pixnet,Taiwanese web albums and blog service.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -471,Q_PROTO_PLAXO,plaxo,,Plaxo,This protocol plug-in classifies the http traffic to the host plaxo.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -472,Q_PROTO_PLAYAHEAD,playahead,,Playahead,This protocol plug-in classifies the http traffic to the host playahead.se.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1039,Q_PROTO_PLAYSTATION,playstation,,playstation,This protocol plug-in classifies the http traffic to the host playstation.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1933,Q_PROTO_PLIUS,plius,,Plius,Lithuanian online classified ads.,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -474,Q_PROTO_PLURK,plurk,,Plurk,This protocol plug-in classifies the http traffic to the host plurk.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1319,Q_PROTO_PIXIV,pixiv,,Pixiv.net,Web site dedicated to Japanese fanarts and drawings,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1406,Q_PROTO_PIXNET,pixnet,,Pixnet.net,Taiwanese web albums and blog service.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +471,Q_PROTO_PLAXO,plaxo,,Plaxo.com,This protocol plug-in classifies the http traffic to the host plaxo.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +472,Q_PROTO_PLAYAHEAD,playahead,x,Playahead,This protocol plug-in classifies the http traffic to the host playahead.se.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1039,Q_PROTO_PLAYSTATION,playstation,,PlayStation.com,This protocol plug-in classifies the http traffic to the host playstation.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1933,Q_PROTO_PLIUS,plius,,Plius.lt,Lithuanian online classified ads.,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +474,Q_PROTO_PLURK,plurk,,Plurk.com,This protocol plug-in classifies the http traffic to the host plurk.com.,Web,http;https;ssl,PC-Windows-Browser-www.plurk.com (2014-02-27);Mobile-Android-0.8.13 (2014-02-27),BlackBerry-BlackBerry OS-10.0.10.648-Browser (2014-02-27);Mobile-Android-4.1.2-Plurk-0.8.13 (2014-02-27);PC-Windows-7-Chrome-33.0.1750.117 (2014-03-07);Windows Phone-Windows Phone OS-8-PlurkPoster-1.3.0.0 (2014-02-27);iPhone-iOS-7.0.4-Mr. Plurk-3.1.1 (2014-03-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 663,Q_PROTO_PNNI,pnni,,PNNI over IP,The pnni protocol (PNNI over IP) is found over the IP layer (IANA protocol number: 102).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1300,Q_PROTO_POCO,poco,,POCO (people connected),"Poco is a Chinese webportal, which allow users to share pictures, chat, exchange files, etc.",Web,http;https;ssl;udp,20130121,1/23/2013,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -307,Q_PROTO_POGO,pogo,,Pogo,This protocol plug-in classifies the http traffic to the host pogo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1300,Q_PROTO_POCO,poco,,POCO.cn,"Poco is a Chinese webportal, which allow users to share pictures, chat, exchange files, etc.",Web,http;https;ssl;udp,20130121,PC-Windows-InternetExplorer (2012-02-07),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +307,Q_PROTO_POGO,pogo,,Pogo.com,This protocol plug-in classifies the http traffic to the host pogo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 899,Q_PROTO_POKER_STARS,poker_stars,,Poker Stars,Poker Stars is an online poker cardroom.,Game,http;https;ssl,4.6.9.6_en;4.7.0.1_fr;4.6.9.8_es,7/29/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1745,Q_PROTO_POLE_EMPLOI,pole_emploi,,Pole-emploi,French website for job seekers.,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -147,Q_PROTO_POP3,pop3,,Post Office Protocol,Post Office Protocol - Version 3 (POP3) allows a workstation to simply and dynamically access a mail stored on a mail server.,Mail,socks4;socks5;tcp,Post Office Protocol v3,8/30/2011,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +1745,Q_PROTO_POLE_EMPLOI,pole_emploi,,Pole-emploi.fr,French website for job seekers.,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +147,Q_PROTO_POP3,pop3,,Post Office Protocol (Version 3),Post Office Protocol - Version 3 (POP3) allows a workstation to simply and dynamically access a mail stored on a mail server.,Mail,socks4;socks5;tcp,Post Office Protocol v3,8/30/2011,,,,x,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, 148,Q_PROTO_POP3S,pop3s,,Secure POP3,Secure version of the POP3 protocol.,Mail,ssl,Secure Post Office Protocol v3,7/4/2008,,,,,,995,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -1440,Q_PROTO_PORNHUB,pornhub,,Pornhub,This protocol plug-in classifies the http traffic to the hosts pornhub.com and pornhub.phncdn.com.,Web,http;https,20121023,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1440,Q_PROTO_PORNHUB,pornhub,,Pornhub.com,This protocol plug-in classifies the http traffic to the hosts pornhub.com and pornhub.phncdn.com.,Web,http;https,20121023,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 149,Q_PROTO_PORTMAP,portmap,,Port Mapper,Port Mapper protocol maps RPC program and version numbers to port numbers. This program makes dynamic binding of remote programs possible.,Application Service,rpc,Port Mapping v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -150,Q_PROTO_POSTGRES,postgres,,Postgres,"PostgreSQL is a sophisticated Object-Relational DBMS, supporting almost all SQL constructs, including subselects, transactions, and user-defined types and functions.",Database,tcp,7.3;7.4;8.0;8.1;8.2,7/4/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -2125,Q_PROTO_POSTIMEES,postimees,,Postimees,Estonian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +150,Q_PROTO_POSTGRES,postgres,,PostgreSQL,"PostgreSQL is a sophisticated Object-Relational DBMS, supporting almost all SQL constructs, including subselects, transactions, and user-defined types and functions.",Database,tcp,7.3;7.4;8.0;8.1;8.2,7/4/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +2125,Q_PROTO_POSTIMEES,postimees,,Postimees.ee,Estonian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 938,Q_PROTO_PP,pp,,ISO 8823 Presentation Protocol,ISO 8823/X.226 OSI PRESENTATION PROTOCOL (PP).,Network Service,sp,ISO 8823/X.226,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 1090,Q_PROTO_PPFILM,ppfilm,,PIPI Film,PP Film (aka PIPI.cn or PIPI Player) is a Chinese peer-to-peer and VOD service.,Web,http;https;udp,2.8.0.0,11/10/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, 331,Q_PROTO_PPLIVE,pplive,,pplive,PPLIVE is an application intended to watch TV in peer-to-peer. The PPLIVE application has two main functions : live TV(streaming) and on-demand TV (VOD). These are two different protocols. This protocol plug-in handles both.,Audio/Video,http;https;udp,1.9.35;2.6,10/22/2012,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,x, -151,Q_PROTO_PPP,ppp,,Point to Point Protocol,"PPP (Point-to-Point Protocol) is a link layer protocol used for transferring data along a Point to Point link. It provides dynamic IP addressing, password support, error checking, and multiple protocols transmission on the same link.",Tunneling,eth;gre;l2tp;pppoe,RFC 1661,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -152,Q_PROTO_PPPOE,pppoe,,PPP Over Ethernet,PPP over Ethernet (PPPoE) provides the ability to connect a network of hosts over a simple bridging access device to a remote Access Concentrator.,Tunneling,8021q;eth;gre,RFC 2516,7/4/2008,x,,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1040,Q_PROTO_PPS,pps,,pps,This protocol plug-in classifies the http traffic to the host pps.tv.,Web,http;https,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -533,Q_PROTO_PPSTREAM,ppstream,,ppStream - P2P based Streamed Media,The ppstream protocol provides audio and video streaming. It is based on bittorent (peer-to-peer) technology. It is mainly used in China.,Audio/Video,http;https;tcp;udp,3.2.0.1003,PC-Windows-3.2.0.1003 (2013-10-10),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +151,Q_PROTO_PPP,ppp,,Point-to-Point Protocol,"PPP (Point-to-Point Protocol) is a link layer protocol used for transferring data along a Point to Point link. It provides dynamic IP addressing, password support, error checking, and multiple protocols transmission on the same link.",Tunneling,eth;gre;l2tp;pppoe,RFC 1661,7/4/2008,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +152,Q_PROTO_PPPOE,pppoe,,Point-to-Point Protocol Over Ethernet,PPP over Ethernet (PPPoE) provides the ability to connect a network of hosts over a simple bridging access device to a remote Access Concentrator.,Tunneling,8021q;eth;gre,RFC 2516,7/4/2008,x,,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +1040,Q_PROTO_PPS,pps,,Pps.tv,This protocol plug-in classifies the http traffic to the host pps.tv.,Web,http;https,20110930,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +533,Q_PROTO_PPSTREAM,ppstream,,PPStream - P2P based Streamed Media,The ppstream protocol provides audio and video streaming. It is based on bittorent (peer-to-peer) technology. It is mainly used in China.,Audio/Video,http;https;tcp;udp,PC-Windows-PPstream 3.2.0.1003,PC-Windows-PPStream-3.2.0.1003 (2013-10-10),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, 153,Q_PROTO_PPTP,pptp,,Point-to-Point Tunneling Protocol,Point-to-Point Tunneling Protocol allows the Point to Point Protocol (PPP) to be tunnelled through an IP network.,Tunneling,tcp,PPTP v1.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -1041,Q_PROTO_PPTV,pptv,,pptv,This protocol plug-in classifies the http traffic to the host pptv.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -475,Q_PROTO_PRESENT,present,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2060,Q_PROTO_PRESS24,press24,,Press24,Macedonian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2126,Q_PROTO_PRESSAN,pressan,,Pressan,Icelandic news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1042,Q_PROTO_PRICEMINISTER,priceminister,,priceminister,This protocol plug-in classifies the http traffic to the host priceminister.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1041,Q_PROTO_PPTV,pptv,,Pptv.com,This protocol plug-in classifies the http traffic to the host pptv.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +475,Q_PROTO_PRESENT,present,x,Present,This web service is closed.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2060,Q_PROTO_PRESS24,press24,,Press24.mk,Macedonian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2126,Q_PROTO_PRESSAN,pressan,,Pressan.is,Icelandic news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1042,Q_PROTO_PRICEMINISTER,priceminister,,PriceMinister.com,This protocol plug-in classifies the http traffic to the host priceminister.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, 529,Q_PROTO_PRICERUNNER,pricerunner,,PriceRunner,pricerunner is a price comparison service,Web,http;https,20130116,9/19/2011,,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -664,Q_PROTO_PRIVATE_ENC,private_enc,,Any private encryption scheme,The private_enc protocol (Any private encryption scheme) is found over the IP layer (IANA protocol number: 99).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -840,Q_PROTO_PRIVAX,privax,,Privax,This protocol plug-in classifies the http traffic to the host privax.us.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +664,Q_PROTO_PRIVATE_ENC,private_enc,,Private encryption scheme,The private_enc protocol (Any private encryption scheme) is found over the IP layer (IANA protocol number: 99).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +840,Q_PROTO_PRIVAX,privax,,Privax.us,This protocol plug-in classifies the http traffic to the host privax.us.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 665,Q_PROTO_PRM,prm,,Packet Radio Measurement,The prm protocol (Packet Radio Measurement) is found over the IP layer (IANA protocol number: 21).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2061,Q_PROTO_PRODAVALNIK,prodavalnik,,Prodavalnik,Bulgarian classified ads,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -349,Q_PROTO_PROXEASY,proxeasy,,Proxeasy,This protocol plug-in classifies the http traffic to the host proxeasy.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -348,Q_PROTO_PROXONO,proxono,,Proxono,This protocol plug-in classifies the http traffic to the hosts proxono.org and proxono.info.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x -841,Q_PROTO_PSIPHON,psiphon,,Psiphon,This protocol plug-in classifies the http traffic to the host psiphon.ca.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -601,Q_PROTO_PSN,psn,,Playstation Network,PlayStation Network (PSN) is the on-line gaming service for consoles made by Sony.,Game,http;https;ssl,20131107 (PS3);PSP,PS3 (2013-11-05),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +2061,Q_PROTO_PRODAVALNIK,prodavalnik,,Prodavalnik.com,Bulgarian classified ads,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +349,Q_PROTO_PROXEASY,proxeasy,,Proxeasy.com,This protocol plug-in classifies the http traffic to the host proxeasy.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +348,Q_PROTO_PROXONO,proxono,,Proxono.org - Proxono.info,This protocol plug-in classifies the http traffic to the hosts proxono.org and proxono.info.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x +841,Q_PROTO_PSIPHON,psiphon,,Psiphon.ca,This protocol plug-in classifies the http traffic to the host psiphon.ca.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +601,Q_PROTO_PSN,psn,,Playstation Network,PlayStation Network (PSN) is the on-line gaming service for consoles made by Sony.,Game,http;https;ssl,Playstation 3 (2013-11-07);PSP (2013-11-07),Playstation-3 (2013-11-05),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, 666,Q_PROTO_PTP,ptp,,Performance Transparency Protocol,The ptp protocol (Performance Transparency Protocol) is found over the IP layer (IANA protocol number: 123).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2062,Q_PROTO_PULS24,puls24,,Puls24,Macedonian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2062,Q_PROTO_PULS24,puls24,,Puls24.mk,Macedonian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 667,Q_PROTO_PUP,pup,,PUP,The pup protocol (PUP) is found over the IP layer (IANA protocol number: 12).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 668,Q_PROTO_PVP,pvp,,Packet Video Protocol,The pvp protocol (Packet Video Protocol) is found over the IP layer (IANA protocol number: 75).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -345,Q_PROTO_PWE,pwe,,Pseudo Wire Emulation,Pseudo Wire Emulation (PWE) is a protocol for traffic encapsulation.,Routing,mpls,RFC 5287,3/31/2010,x,,,,,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -154,Q_PROTO_Q931,q931,,Q931,"The Q.931 protocol enables the use of voice and image on networks for video conferencing. It provides no flow control, however, or retransmission, since the underlying layers are assumed to be reliable and the circuit-oriented nature of ISDN allocates bandwidth in fixed increments of 64 kbps. Q.931 does manage connection setup and close. Like TCP, Q.931 documents both the protocol itself and a state machine.",Audio/Video,tcp,Q931 recommendation (05/98),7/4/2008,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, -476,Q_PROTO_QAPACITY,qapacity,,Qapacity,This protocol plug-in classifies the http traffic to the host qapacity.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1934,Q_PROTO_QATARLIVING,qatarliving,,Qatarliving,Qatari online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1502,Q_PROTO_QIK_VIDEO,qik_video,,QIK Video (VOD and Live streaming),QIK is a PC/smartphone application allowing live and VOD streaming from the web. The video chat additional feature is not supported yet.,Audio/Video,http;https;rtmp;ssl,"6.7(iOS 6.x),17.63(Android 2.3-4.0),20130627(PC/Adobe Air)",PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +345,Q_PROTO_PWE,pwe,,Pseudo Wire Emulation,Pseudo Wire Emulation (PWE) is a protocol for traffic encapsulation.,Routing,mpls,RFC 5287,3/31/2010,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +154,Q_PROTO_Q931,q931,,Q.931,"The Q.931 protocol enables the use of voice and image on networks for video conferencing. It provides no flow control, however, or retransmission, since the underlying layers are assumed to be reliable and the circuit-oriented nature of ISDN allocates bandwidth in fixed increments of 64 kbps. Q.931 does manage connection setup and close. Like TCP, Q.931 documents both the protocol itself and a state machine.",Audio/Video,tcp,Q931 recommendation (05/98),7/4/2008,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, +476,Q_PROTO_QAPACITY,qapacity,x,Qapacity.com,This protocol plug-in classifies the http traffic to the host qapacity.com.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1934,Q_PROTO_QATARLIVING,qatarliving,,Qatarliving.com,Qatari online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1502,Q_PROTO_QIK_VIDEO,qik_video,,QIK Video,QIK is a PC/smartphone application allowing live and VOD streaming from the web. The video chat additional feature is not supported yet.,Audio/Video,http;https;rtmp;ssl,"6.7(iOS 6.x),17.63(Android 2.3-4.0),20130627(PC/Adobe Air)",PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, 669,Q_PROTO_QNX,qnx,,QNX,The qnx protocol (QNX) is found over the IP layer (IANA protocol number: 106).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -156,Q_PROTO_QQ,qq,,QQ,QQ is the most popular free instant messaging computer program in China.,Instant Messaging,http;https;socks4;socks5;tcp;udp,4.5.11.1868 (android);4.2.2 (iOS);2.0 (Windows);3.0 (MacOS),PC-Windows-QQ international 2.0 (2014-01-14),,x,,x,,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,, -1407,Q_PROTO_QQ_BLOG,qq_blog,,QQ Blog,Tencent blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1408,Q_PROTO_QQ_FINANCE,qq_finance,,QQ finance,Tencent finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1409,Q_PROTO_QQ_GAMES,qq_games,,QQ Games,"Tencent game portal providing game reviews, forum, news.",Web,http;https;tcp;udp,20130713,PC-Windows-Browser-20131003 (2013-02-10),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1410,Q_PROTO_QQ_LADY,qq_lady,,QQ Lady,Tencent fashion website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1411,Q_PROTO_QQ_MAIL,qq_mail,,QQ Mail,Tencent Webmail.,Webmail,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -1412,Q_PROTO_QQ_NEWS,qq_news,,QQ News,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -753,Q_PROTO_QQ_TRANSFER,qq_transfer,,QQ transfer Protocol,File transfer over QQ,File Transfer,http;https;tcp,QQ2003;EN QQ2005 V05.0.200.020;TM2008 Preview [34];QQ Beta3,5/31/2011,,x,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -1241,Q_PROTO_QQ_WEB,qq_web,,QQ.com portal,QQ.com is a multi-service Chinese web portal hosted by Tencent.,Web,http;https;soso,20120827,PC-Windows-WebQQ-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1102,Q_PROTO_QQ_WEIBO,qq_weibo,,Tencent (QQ) WeiBo,QQ WeiBo is a Chinese Twitter-like micro-blogging website. It is part of Tencent's QQ.,Web,http;https,20111128,1/25/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1089,Q_PROTO_QQDOWNLOAD,qqdownload,,QQDownload,QQDownload is a Chinese download manager. Its purpose is to download files quickly using HTTP or the BitTorrent protocol.,Web,bittorrent;http;https;soap;soso,QQDownload v1.10,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +156,Q_PROTO_QQ,qq,,QQ,QQ is the most popular free instant messaging computer program in China.,Instant Messaging,http;https;socks4;socks5;tcp;udp,Mobile-Android-QQ Mobile 4.5.11.1868;iPhone-iOS-QQ Mobile 4.2.2;PC-Windows 7-QQ 2.11 (2014-03-08);Mac-Mac OS-QQ 3.0.2 (2014-03-09),Mobile-Android-4.1.2-QQ international-4.5.13 (2014-01-06);PC-Windows-7-QQ international-2.11 (2014-03-08);Windows Phone-Windows Phone OS-8-QQ international-1.4.0.0 (2014-01-06);iPhone-iOS-7.0.4-QQ international-4.5.10 (2014-01-06),,x,,x,,,,,,,x,,,,,x,,,,,,,,,,,,,,,,,,,,, +1407,Q_PROTO_QQ_BLOG,qq_blog,,QQ Blog,Tencent blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1408,Q_PROTO_QQ_FINANCE,qq_finance,,QQ finance,Tencent finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1409,Q_PROTO_QQ_GAMES,qq_games,,QQ Games,"Tencent game portal providing game reviews, forum, news.",Web,http;https;tcp;udp,PC-Windows-Browser-www.qqgames.com (2014-02-22);PC-Windows-QQ Game (2014-03-10),PC-Windows-7-Chrome-32.0.1700 (2014-02-22);PC-Windows-7-QQ Games-3.3 (2014-03-10);PC-Windows-7-QQ Games-3.3-CN (2014-03-10),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1410,Q_PROTO_QQ_LADY,qq_lady,,QQ Lady,Tencent fashion website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1411,Q_PROTO_QQ_MAIL,qq_mail,,QQ Mail,Tencent Webmail.,Webmail,http;https;ssl,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +1412,Q_PROTO_QQ_NEWS,qq_news,,QQ News,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +753,Q_PROTO_QQ_TRANSFER,qq_transfer,,QQ File Transfer,File transfer over QQ,File Transfer,http;https;tcp,QQ2003;EN QQ2005 V05.0.200.020;TM2008 Preview [34];QQ Beta3,5/31/2011,,x,,x,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +1241,Q_PROTO_QQ_WEB,qq_web,,QQ.com,QQ.com is a multi-service Chinese web portal hosted by Tencent.,Web,http;https;soso;ssl,PC-Windows-Browser-www.qq.com (2012-08-27),PC-Windows-WebQQ (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1102,Q_PROTO_QQ_WEIBO,qq_weibo,,QQ WeiBo,QQ WeiBo is a Chinese Twitter-like micro-blogging website. It is part of Tencent's QQ.,Web,http;https,20111128,1/25/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1089,Q_PROTO_QQDOWNLOAD,qqdownload,,QQDownload,QQDownload is a Chinese download manager. Its purpose is to download files quickly using HTTP or the BitTorrent protocol.,Web,http;https;soap;soso,QQDownload v1.10,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, 585,Q_PROTO_QQLIVE,qqlive,,QQLive Network Player,QQLive is an application intended to watch TV in Peer-to-Peer mode.,Audio/Video,http;https,QQLive 2010;QQLive 2011,4/6/2012,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -842,Q_PROTO_QQMUSIC,qqmusic,,QQMusic,QQMusic is a Chinese peer-to-peer file sharing software. Its purpose is to download/stream audio files.,Peer to Peer,http;https;qq_web;qq_weibo;tcp;udp,QQMusic 2011,QQMusic 2011 v2187 (2012-01-05),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x, -1185,Q_PROTO_QQSTREAM,qqstream,,QQStream,QQStream is a Chinese peer-to-peer file sharing software. QQstream is a meta protocol which contains data stream of QQLive and QQMusic.,Peer to Peer,udp,QQStream 2011,QQMusic 2011 v2187 (2012-06-20),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1733,Q_PROTO_QTRAX,qtrax,,Qtrax,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +842,Q_PROTO_QQMUSIC,qqmusic,,QQMusic,QQMusic is a Chinese peer-to-peer file sharing software. Its purpose is to download/stream audio files.,Peer to Peer,http;https;qq_web;qq_weibo;tcp;udp,QQMusic 2011,PC-Windows-7-QQMusic 2011-2187 (2012-01-05),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,x, +1185,Q_PROTO_QQSTREAM,qqstream,,QQStream,QQStream is a Chinese peer-to-peer file sharing software. QQstream is a meta protocol which contains data stream of QQLive and QQMusic.,Peer to Peer,udp,QQStream 2011,PC-Windows-7-QQMusic 2011-2187 (2012-06-20),,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1733,Q_PROTO_QTRAX,qtrax,,Qtrax Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, 157,Q_PROTO_QUAKE,quake,,Quake,Quake is a protocol allowing communication between Quake Clients and Quake servers.,Game,udp,Quake v3,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, 1916,Q_PROTO_QUANTUM_DXI_OST,quantum_dxi_ost,,Quantum DXi,Classifies the Symantec NetBackup streams that use the Quantum DXi replication solution. This implements the OpenStorage API (OST).,File Server,tcp,10.0.4.97;Quantum DXi6540,Quantum-DXi6540 (2013-12-03),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -477,Q_PROTO_QUARTERLIFE,quarterlife,,Quarterlife,This protocol plug-in classifies the http traffic to the host quarterlife.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1413,Q_PROTO_QUNAR,qunar,,Qunar,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +477,Q_PROTO_QUARTERLIFE,quarterlife,,Quarterlife.com,This protocol plug-in classifies the http traffic to the host quarterlife.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1413,Q_PROTO_QUNAR,qunar,,Qunar.com,Chinese travel website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 749,Q_PROTO_QVOD,qvod,,QVOD Player,QVOD is a peer-to-peer based Video-On-Demand player.,Audio/Video,http;https;tcp;udp,5.9,11/18/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -478,Q_PROTO_QZONE,qzone,,Qzone,Tencent social network.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1458,Q_PROTO_RADIKO,radiko,,radiko webcast,Broadband broadcasts web retransmission services.,Web,http;https,20130304,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1935,Q_PROTO_RADIO1,radio1,,Radio1,French Polinesian radio broadcast website.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +478,Q_PROTO_QZONE,qzone,,Qzone.qq.com,Tencent social network.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1458,Q_PROTO_RADIKO,radiko,,Radiko.jp,Broadband broadcasts web retransmission services.,Web,http;https,20130304,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1935,Q_PROTO_RADIO1,radio1,,Radio1.pf,French Polinesian radio broadcast website.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 158,Q_PROTO_RADIUS,radius,,Remote Authentication Dial-In User Service,RADIUS (Remote Authentication Dial-In User Service) is a client/server protocol that enables remote access servers to communicate with a central server to authenticate dial-in users and authorize their access to the requested system or service.,Authentication,udp,Radius v2.0,12/19/2013,,,,x,radius,,,x,,x,,,x,,,,,,,,,,,,,,,,,,,,,x,,, -843,Q_PROTO_RADIUSIM,radiusim,,RadiusIM,This protocol plug-in classifies the http traffic to the host radiusim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +843,Q_PROTO_RADIUSIM,radiusim,,RadiusIM.com,This protocol plug-in classifies the http traffic to the host radiusim.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, 904,Q_PROTO_RADMIN,radmin,,Radmin,Radmin is a control software which is able to establish a remote secure connection between computers.,Thin Client,tcp,Radmin 3.4,9/12/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1309,Q_PROTO_RAKUTEN,rakuten,,Rakuten,Online market place for selling goods and auctions.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -318,Q_PROTO_RAMBLER,rambler,,rambler,Rambler is a Russian information internet portal.,Web,http;https;ssl,20100430,3/7/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -527,Q_PROTO_RAMBLER_WEBMAIL,rambler_webmail,,Rambler webmail,Rambler webmail is the webmail of the Russian website rambler.ru.,Webmail,http;https,20120604,1/14/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -313,Q_PROTO_RAPIDSHARE,rapidshare,,rapidshare,"RapidShare is an online solution to store, send and share files",Web,http;https;ssl,20101209,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1971,Q_PROTO_RAPIDUPLOAD_COM,rapidupload_com,,rapidupload.com,Classifies web browsing on the rapidupload.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1734,Q_PROTO_RAULKEN,raulken,,Raulken,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -479,Q_PROTO_RAVELRY,ravelry,,Ravelry,This protocol plug-in classifies the http traffic to the host www.ravelry.com. It also classifies the ssl traffic to the Common Name .ravelry.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1735,Q_PROTO_RAYFILE,rayfile,,Rayfile,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -159,Q_PROTO_RDP,rdp,,Remote Desktop Protocol (Windows Terminal Server),"A key component of Terminal Server is the Remote Desktop Protocol which allows a thin client to communicate with the Terminal Server over the network. This protocol is based on International Telecommunications Union's (ITU) T.120 protocol, an international, standard multichannel conferencing protocol currently used in the Microsoft NetMeeting conferencing software product. It is tuned for high-bandwidth enterprise environments and will also support encrypted sessions.",Thin Client,cotp;mcs;ssl,4;5;6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +1309,Q_PROTO_RAKUTEN,rakuten,,Rakuten.co.jp,Online market place for selling goods and auctions.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +318,Q_PROTO_RAMBLER,rambler,,Rambler.ru,Rambler is a Russian information internet portal.,Web,http;https;ssl,20100430,3/7/2012,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +527,Q_PROTO_RAMBLER_WEBMAIL,rambler_webmail,,Rambler webmail,Rambler webmail is the webmail of the Russian website rambler.ru.,Webmail,http;https,20120604,3/11/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +313,Q_PROTO_RAPIDSHARE,rapidshare,,RapidShare.com,"RapidShare is an online solution to store, send and share files",Web,http;https;ssl,20101209,7/17/2009,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1971,Q_PROTO_RAPIDUPLOAD_COM,rapidupload_com,,rapidupload.com,Classifies web browsing on the rapidupload.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1734,Q_PROTO_RAULKEN,raulken,,Raulken Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +479,Q_PROTO_RAVELRY,ravelry,,Ravelry.com,This protocol plug-in classifies the http traffic to the host www.ravelry.com. It also classifies the ssl traffic to the Common Name .ravelry.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1735,Q_PROTO_RAYFILE,rayfile,,Rayfile Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +159,Q_PROTO_RDP,rdp,,Remote Desktop Protocol (Windows Terminal Server),"A key component of Terminal Server is the Remote Desktop Protocol which allows a thin client to communicate with the Terminal Server over the network. This protocol is based on International Telecommunications Union's (ITU) T.120 protocol, an international, standard multichannel conferencing protocol currently used in the Microsoft NetMeeting conferencing software product. It is tuned for high-bandwidth enterprise environments and will also support encrypted sessions.",Thin Client,cotp;mcs,4;5;6,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, 160,Q_PROTO_RDT,rdt,,Real Data Transport,This protocol is used to transport audio/video data.,Audio/Video,rtsp;udp,RDT v2;RDT v3,7/4/2008,,,,x,rtsp,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,x, -293,Q_PROTO_REALTOR,realtor,,Realtor,This protocol plug-in classifies the http traffic to the host realtor.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1479,Q_PROTO_REDDIT,reddit,,Reddit.com,Social news website.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +293,Q_PROTO_REALTOR,realtor,,Realtor.com,This protocol plug-in classifies the http traffic to the host realtor.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1479,Q_PROTO_REDDIT,reddit,,Reddit.com,Social news website.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 571,Q_PROTO_REDHAT_UPDATE,redhat_update,,RedHat Update,This protocol is used for Red Hat updates.,Web,http;https,Fedora14;CentOS5.5;Scientific5.5;RedHat6.0,11/29/2010,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -1043,Q_PROTO_REDTUBE,redtube,,redtube,This protocol plug-in classifies the http traffic to the host redtube.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2128,Q_PROTO_REKLAMA5,reklama5,,Reklama5,Macedonian classifed ads,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -480,Q_PROTO_RENREN,renren,,Renren,This protocol plug-in classifies the http traffic to the host renren.com.,Web,http;https,20111121,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2063,Q_PROTO_REPUBBLICA,repubblica,,Repubblica,Italian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1153,Q_PROTO_REPUBLIKA,republika,,Republika,This protocol plug-in classifies the http traffic to the host republika.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -481,Q_PROTO_RESEARCHGATE,researchgate,,ResearchGATE,This protocol plug-in classifies the http traffic to the host researchgate.net.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1044,Q_PROTO_REUTERS,reuters,,reuters,This protocol plug-in classifies the http traffic to the host reuters.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -482,Q_PROTO_REVERBNATION,reverbnation,,ReverbNation,This protocol plug-in classifies the http traffic to the host reverbnation.com. It also classifies the ssl traffic to the Common Name .reverbnation.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1045,Q_PROTO_REVERSO,reverso,,reverso,This protocol plug-in classifies the http traffic to the host reverso.net.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -161,Q_PROTO_RFB,rfb,,Remote Frame Buffer (VNC),RFB (Remote Frame Buffer) is a simple protocol for remote access to graphical user interfaces.,Thin Client,tcp,RFB v3.3;RFB v3.7;RFB v3.8,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1189,Q_PROTO_RHAPSODY,rhapsody,,Rhapsody,Rhapsody is a subcription based music streaming service.,Audio/Video,http;https;llnwd;rtmp;ssl,2.2.4-Android;2.2.10-iOS;20120611-web,android 2.2.4.21 (2012-09-03);iOS 2.2.10 (2012-09-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1936,Q_PROTO_RICARDO,ricardo,,Ricardo,Swiss online trading website.,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2129,Q_PROTO_RIMNOW,rimnow,,Rimnow,Mauritanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1043,Q_PROTO_REDTUBE,redtube,,Redtube.com,This protocol plug-in classifies the http traffic to the host redtube.com.,Web,http;https,PC-Windows-Browser-www.redtube.com (2014-01-30),PC-Windows-7-Chrome-32.0.1700.102 (2014-01-30),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2128,Q_PROTO_REKLAMA5,reklama5,,Reklama5.mk,Macedonian classifed ads,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +480,Q_PROTO_RENREN,renren,,Renren.com,This protocol plug-in classifies the http traffic to the host renren.com.,Web,http;https,20111121,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2063,Q_PROTO_REPUBBLICA,repubblica,,Repubblica.it,Italian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1153,Q_PROTO_REPUBLIKA,republika,,Republika.co.id,This protocol plug-in classifies the http traffic to the host republika.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +481,Q_PROTO_RESEARCHGATE,researchgate,,ResearchGATE.net,This protocol plug-in classifies the http traffic to the host researchgate.net.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1908,Q_PROTO_RETROSHARE,retroshare,,RetroShare,Retroshare is a communication and file-sharing Open Source platform which is secured and decentralized.,Peer to Peer,ssl,PC-Windows-Retroshare 0.5.4e_6268,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1044,Q_PROTO_REUTERS,reuters,,Reuters.com,This protocol plug-in classifies the http traffic to the host reuters.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +482,Q_PROTO_REVERBNATION,reverbnation,,ReverbNation.com,This protocol plug-in classifies the http traffic to the host reverbnation.com. It also classifies the ssl traffic to the Common Name .reverbnation.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1045,Q_PROTO_REVERSO,reverso,,Reverso.net,This protocol plug-in classifies the http traffic to the host reverso.net.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +161,Q_PROTO_RFB,rfb,,Remote Frame Buffer,RFB (Remote Frame Buffer) is a simple protocol for remote access to graphical user interfaces.,Thin Client,tcp,RFB v3.3;RFB v3.7;RFB v3.8,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +1189,Q_PROTO_RHAPSODY,rhapsody,,Rhapsody,Rhapsody is a subcription based music streaming service.,Audio/Video,http;https;llnwd;rtmp;ssl,2.2.4-Android;2.2.10-iOS;20120611-web,Mobile-Android-Rhapsody-2.2.4.21 (2012-09-03);iPhone-iOS-Rhapsody-2.2.10 (2012-09-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1936,Q_PROTO_RICARDO,ricardo,,Ricardo.ch,Swiss online trading website.,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2129,Q_PROTO_RIMNOW,rimnow,,Rimnow.com,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 162,Q_PROTO_RIP1,rip1,,Routing Information Protocol V1,RIP1 (Routing Information Protocol Version 1) is a Distance Vector routing protocol used in Inter Autonomous Systems.,Routing,udp,Routing Information Protocol V1,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 163,Q_PROTO_RIP2,rip2,,Routing Information Protocol V2,"RIP2 (Routing Information Protocol Version 2) is an enhancement of the Version 1 of the protocol. The main differences are the use of multicast instead of broadcast, and the support of variable length subnet mask networks since subnets are now sent inside the updates.",Routing,udp,Routing Information Protocol V2,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 164,Q_PROTO_RIPNG1,ripng1,,Routing Internet Protocol ng1,RIPng (RIP New Generation) is intended to allow routers to exchange information for computing routes through an IPv6-based network. RIPng is a distance vector protocol. RIPng should be implemented only in routers since IPv6 provides other mechanisms for router discovery.,Routing,udp,RIPng v1,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -165,Q_PROTO_RLOGIN,rlogin,,Remote Login,The Rlogin protocol is used to establish a bidirectional communication to distant terminals.,Terminal,tcp,RFC 1282,Putty 0.62 (2012-04-20),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +165,Q_PROTO_RLOGIN,rlogin,,Remote Login,The Rlogin protocol is used to establish a bidirectional communication to distant terminals.,Terminal,tcp,RFC 1282,PC-Windows-Putty-0.62 (2012-04-20),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, 166,Q_PROTO_RLP,rlp,,Resource Location Protocol,Resource Location Protocol (RLP) is a protocol used to discover the location of resources present in a network.,Network Service,udp,RFC 887,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -905,Q_PROTO_RMI_IIOP,rmi_iiop,,RMI over IIOP,"RMI-IIOP (Remote Method Invocation over Internet Inter-ORB Protocol) delivers CORBA distributed architecture to Java 2 platform, using both remote method invocation system RMI and IIOP protocol.",Middleware,iiop,CORBA/IIOP 2.3.1,9/16/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1736,Q_PROTO_RMVBUSTERS,rmvbusters,,Rmvbusters,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +905,Q_PROTO_RMI_IIOP,rmi_iiop,,Remote Method Invocation over Internet Inter-ORB Protocol,"RMI-IIOP (Remote Method Invocation over Internet Inter-ORB Protocol) delivers CORBA distributed architecture to Java 2 platform, using both remote method invocation system RMI and IIOP protocol.",Middleware,iiop,CORBA/IIOP 2.3.1,9/16/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +1736,Q_PROTO_RMVBUSTERS,rmvbusters,,Rmvbusters Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, 733,Q_PROTO_ROHC,rohc,,Robust Header Compression,The rohc protocol (Robust Header Compression) is found over the IP layer (IANA protocol number: 142).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 167,Q_PROTO_RPC,rpc,,Remote Procedure Call,"RPC (Remote Procedure Call) is an easy and popular paradigm for implementing the client-server model of distributed computing. A request is sent to a remote system to execute a designated procedure, using arguments supplied, and the result is returned to the caller.",Middleware,http;https;tcp;udp,RPC v2,7/4/2008,,x,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -168,Q_PROTO_RPL,rpl,,IBM RPL Protocol,IBM Remote Program Load allows a client computer to retrieve startup and configuration software from a server when it starts.,Network Service,8021q;eth;gre;llc,na,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +168,Q_PROTO_RPL,rpl,,IBM Remote Program Load,IBM Remote Program Load allows a client computer to retrieve startup and configuration software from a server when it starts.,Network Service,8021q;eth;gre;llc,na,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 169,Q_PROTO_RQUOTA,rquota,,Rquota,The RQuota protocol enables the implementation of quotas on remote machines. It is used in conjunction with the NFS protocol.,File Server,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, 170,Q_PROTO_RSH,rsh,,Remote Shell,The RSH protocol allows a user to establish a secure connection to a remote host and to obtain a shell allowing commands to be sent to the remote machine to be executed.,Terminal,tcp,RSH 4.2BSD,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, 922,Q_PROTO_RSS,rss,,RSS,RSS is a family of web feed formats used to publish frequently updated works in a standardized format.,Web,http;https,0.90;0.91;0.92;0.93;0.94;1.0;2.0,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 171,Q_PROTO_RSTAT,rstat,,Rstat,The RStat protocol is used in the Sun NFS family to exchange statistics on network activity.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, 172,Q_PROTO_RSVP,rsvp,,Reservation Protocol,"RSVP is a Resource reSerVation setup Protocol designed for an integrated services Internet. RSVP provides receiver-initiated setup of resource reservations for multicast or unicast data flows, with good scaling and robustness properties. The RSVP protocol is used by a host to request specific qualities of service from the network for particular application data streams or flows. RSVP is also used by routers to deliver quality-of-service (QoS) requests to all nodes along the path(s) of the flows and to establish and maintain state to provide the requested service.",Network Management,ip,RSVP-V1.0,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 728,Q_PROTO_RSVP_E2E_IGNORE,rsvp_e2e_ignore,,Original experimental academic or proprietary protocols,The rsvp_e2e_ignore protocol (Original experimental academic or proprietary protocols) is found over the IP layer (IANA protocol number: 134).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -173,Q_PROTO_RSYNC,rsync,,Remote synchronous (file transfer),"Rsync is a protocol used by various services performing updates. It greatly speeds up the update process since only the differences between two sets of files are transfered, instead of the whole new file.",File Server,tcp;udp,RSYNC v2.0;RSYNC v3.0,3.0.7 (2012-02-02),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -2064,Q_PROTO_RT,rt,,Rt,"Worldwide Russian news channel in Russian, Arabic, Spanish and English.",Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +173,Q_PROTO_RSYNC,rsync,,Remote synchronous (file transfer),"Rsync is a protocol used by various services performing updates. It greatly speeds up the update process since only the differences between two sets of files are transfered, instead of the whole new file.",File Server,tcp;udp,RSYNC v2.0;RSYNC v3.0,PC-Linux-rsync-3.0.7 (2012-02-02),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +2064,Q_PROTO_RT,rt,,Rt.com,"Worldwide Russian news channel in Russian, Arabic, Spanish and English.",Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 174,Q_PROTO_RTCP,rtcp,,Real Time Control Protocol,"The real-time transport Control protocol RTP allows monitoring of the data delivery in a manner scalable to large multicast networks, and to provide minimal control and identification functionality.",Audio/Video,udp,RTCP v2,7/4/2008,,,,x,,,,,,,x,,,,,x,,,,,,x,,,,,,,,,,,,,,, -1046,Q_PROTO_RTL,rtl,,rtl,This protocol plug-in classifies the http traffic to the host rtl.de.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1046,Q_PROTO_RTL,rtl,,rtl.de,This protocol plug-in classifies the http traffic to the host rtl.de.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 337,Q_PROTO_RTMP,rtmp,,Real Time Messaging Protocol,"Real Time Messaging Protocol (RTMP) is a proprietary protocol developed by Adobe Systems for streaming audio, video and data over the Internet, between a Flash player and a server.",Network Service,http;tcp,20101210,9/10/2012,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 175,Q_PROTO_RTP,rtp,,Real Time Protocol,"RTP is the real-time transport protocol used to transmit real-time data, such as audio, video or simulation data, over multicast or unicast network services.",Audio/Video,tcp;udp,RTP V2,6/20/2012,,,,x,"rtp, rtsp",,,x,,x,,,,,,x,,,,,,x,,,,,,,,,,,,,,x, 176,Q_PROTO_RTSP,rtsp,,Real Time Streaming Protocol,"The Real Time Streaming Protocol (RTSP) is an application-level protocol for control over the delivery of data with real-time properties. RTSP provides an extensible framework to enable controlled, on-demand delivery of real-time data, such as audio and video.",Audio/Video,http;tcp,1.0,7/4/2008,,,,x,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,,,x, -2130,Q_PROTO_RTVSLO,rtvslo,,Rtvslo,Slovenian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -309,Q_PROTO_RUNESCAPE,runescape,,RuneScape,Massively Multiplayer Online Role Playing Game published by Jadex.,Game,http;https;ssl;tcp,3.1,runescape 3.1 (2012-05-30),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2130,Q_PROTO_RTVSLO,rtvslo,,Rtvslo.si,Slovenian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +309,Q_PROTO_RUNESCAPE,runescape,,RuneScape,Massively Multiplayer Online Role Playing Game published by Jadex.,Game,http;https;ssl;tcp,3.1,PC-Windows-runescape-3.1 (2012-05-30),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 177,Q_PROTO_RUSERS,rusers,,Rusers,The RUser's protocol provides a service that lists users currently logged on a remote server.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,x,, -1414,Q_PROTO_RUTEN,ruten,,Ruten,Taiwanese auction website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1749,Q_PROTO_RUTRACKER,rutracker,,Rutracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -2065,Q_PROTO_RUV,ruv,,Ruv,Icelandic news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -672,Q_PROTO_RVD,rvd,,MIT Remote Virtual Disk Protocol,The rvd protocol (MIT Remote Virtual Disk Protocol) is found over the IP layer (IANA protocol number: 66).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1047,Q_PROTO_RYANAIR,ryanair,,ryanair,This protocol plug-in classifies the http traffic to the host ryanair.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -483,Q_PROTO_RYZE,ryze,,Ryze,This protocol plug-in classifies the http traffic to the host ryze.com. It also classifies the ssl traffic to the Common Name .ryze.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1306,Q_PROTO_S1AP,s1ap,,S1 Application Protocol (S1AP),"S1 Application Protocol (S1AP), as described in 3GPP TS 36.413 version 11.2.1 Release 11 (2013-02).",Network Service,sctp,3GPP TS 36.413 version 11.2.1 Release 11 (2013-02),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1942,Q_PROTO_S_OMAN,s_oman,,S-oman,Omani forum hosting website.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1565,Q_PROTO_SAAVN_MUSIC,saavn_music,,Saavn Bollywood Music,Saavn is a streaming application providing free Indian and Bollywood music to listeners.,Web,http;https;ssl,2.1,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2131,Q_PROTO_SABAY,sabay,,Sabay,Cambodian news and information portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1146,Q_PROTO_SABERINDO,saberindo,,Saberindo,This protocol plug-in classifies the http traffic to the host saberindo.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2066,Q_PROTO_SABQ,sabq,,Sabq,Saudi Arabian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2132,Q_PROTO_SAHARAMEDIAS,saharamedias,,Saharamedias,Mauritanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1937,Q_PROTO_SAHIBINDEN,sahibinden,,Sahibinden,Turkish online classified ads and e-commerce platform.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1938,Q_PROTO_SAITEBI,saitebi,,Saitebi,Georgian internet catalog.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1321,Q_PROTO_SAKURA_NE,sakura_ne,,SAKURA Internet,Japanese professional web hosting services.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -844,Q_PROTO_SALESFORCE,salesforce,,Salesforce,This protocol plug-in classifies the ssl traffic to the Common Name .salesforce.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -2067,Q_PROTO_SAMEERBOOK,sameerbook,,Sameerbook,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1121,Q_PROTO_SAMSUNG_APPS,samsung_apps,,Samsung Apps,Samsung Apps is an application store for Samsung mobile and TV users.,Application Service,http;https;ssl,2.6.148,Mobile-Android4.1-20131011 (2013-10-11),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -2133,Q_PROTO_SANA,sana,,Sana,Syrian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1762,Q_PROTO_SANOOK,sanook,,Sanook,"Thailandese website providing lottery games, music. chat, news, jobs, shopping and entertainment.",Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1414,Q_PROTO_RUTEN,ruten,,Ruten.com.tw,Taiwanese auction website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1749,Q_PROTO_RUTRACKER,rutracker,,Rutracker Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +2065,Q_PROTO_RUV,ruv,,Ruv.is,Icelandic news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +672,Q_PROTO_RVD,rvd,,MIT Remote Virtual Disk,The rvd protocol (MIT Remote Virtual Disk Protocol) is found over the IP layer (IANA protocol number: 66).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1047,Q_PROTO_RYANAIR,ryanair,,Ryanair.com,This protocol plug-in classifies the http traffic to the host ryanair.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +483,Q_PROTO_RYZE,ryze,,Ryze.com,This protocol plug-in classifies the http traffic to the host ryze.com. It also classifies the ssl traffic to the Common Name .ryze.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1306,Q_PROTO_S1AP,s1ap,,S1 Application Protocol,"S1 Application Protocol (S1AP), as described in 3GPP TS 36.413 version 11.2.1 Release 11 (2013-02).",Network Service,sctp,3GPP TS 36.413 version 11.2.1 Release 11 (2013-02),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1942,Q_PROTO_S_OMAN,s_oman,,S-oman.net,Omani forum hosting website.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1565,Q_PROTO_SAAVN_MUSIC,saavn_music,,Saavn Bollywood Music,Saavn is a streaming application providing free Indian and Bollywood music to listeners.,Web,http;https;ssl,2.1,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2131,Q_PROTO_SABAY,sabay,,Sabay.com.kh,Cambodian news and information portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1146,Q_PROTO_SABERINDO,saberindo,,Saberindo.co.id,This protocol plug-in classifies the http traffic to the host saberindo.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2066,Q_PROTO_SABQ,sabq,,Sabq.org,Saudi Arabian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2173,Q_PROTO_SAHAFAH,sahafah,,Sahafah,Yemeni news portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2132,Q_PROTO_SAHARAMEDIAS,saharamedias,,SaharaMedias.net,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1937,Q_PROTO_SAHIBINDEN,sahibinden,,Sahibinden.com,Turkish online classified ads and e-commerce platform.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1938,Q_PROTO_SAITEBI,saitebi,,Saitebi.ge,Georgian internet catalog.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1321,Q_PROTO_SAKURA_NE,sakura_ne,,Sakura.ne.jp,Japanese professional web hosting services.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +844,Q_PROTO_SALESFORCE,salesforce,,Salesforce.com,This protocol plug-in classifies the ssl traffic to the Common Name .salesforce.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +2067,Q_PROTO_SAMEERBOOK,sameerbook,,Sameerbook.com,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1121,Q_PROTO_SAMSUNG_APPS,samsung_apps,,Samsung Apps,Samsung Apps is an application store for Samsung mobile and TV users.,Application Service,http;https;ssl,Mobile-Android-Samsung Apps 2.6.148,Mobile-Android-4.1.2-Samsung Apps-14022004.20.051.0 (2014-03-01);Mobile-Bada-2.0-Samsung Apps-1.1.203 (2014-03-10);PC-Windows-7-Chrome-33.0.1750.117 (2014-03-03),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +2133,Q_PROTO_SANA,sana,,Sana.sy,Syrian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1762,Q_PROTO_SANOOK,sanook,,Sanook.com,"Thailandese website providing lottery games, music. chat, news, jobs, shopping and entertainment.",Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 178,Q_PROTO_SAP,sap,,SAP,SAP is both a protocol and the name of an ERP application used by most companies.,ERP,tcp,SAP R/3,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1788,Q_PROTO_SAPO,sapo,,Sapo,"Mozambican web portal including mail, news, lifestyle. This portal is also accessed from Portugal.",Web,http;https,20140130,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1788,Q_PROTO_SAPO,sapo,,Sapo.mz - Sapo.pt,"Mozambican web portal including mail, news, lifestyle. This portal is also accessed from Portugal.",Web,http;https,20140130,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2186,Q_PROTO_SARAYANEWS,sarayanews,,Sarayanews,Jordanian news portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 673,Q_PROTO_SAT_EXPAK,sat_expak,,SATNET and Backroom EXPAK,The sat_expak protocol (SATNET and Backroom EXPAK) is found over the IP layer (IANA protocol number: 64).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 674,Q_PROTO_SAT_MON,sat_mon,,SATNET Monitoring,The sat_mon protocol (SATNET Monitoring) is found over the IP layer (IANA protocol number: 69).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1978,Q_PROTO_SAVEFILE_COM,savefile_com,,savefile.com,Classifies web browsing on the savefile.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1220,Q_PROTO_SAYCLUB,sayclub,,SayClub,This protocol plug-in classifies the http traffic to the host sayclub.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1221,Q_PROTO_SBS,sbs,,sbs,This protocol plug-in classifies the http traffic to the host sbs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1978,Q_PROTO_SAVEFILE_COM,savefile_com,,savefile.com,Classifies web browsing on the savefile.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1220,Q_PROTO_SAYCLUB,sayclub,,SayClub.com,This protocol plug-in classifies the http traffic to the host sayclub.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1221,Q_PROTO_SBS,sbs,,Sbs.co.kr,This protocol plug-in classifies the http traffic to the host sbs.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, 725,Q_PROTO_SCC_SP,scc_sp,,Semaphore Communications Sec. Pro.,The scc_sp protocol (Semaphore Communications Sec. Pro.) is found over the IP layer (IANA protocol number: 96).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1909,Q_PROTO_SCCM,sccm,,System Center Configuration Manager,"System Center Configuration Manager, is a systems management software product by Microsoft for managing large groups of computers running Windows, Mac OS X, Linux or UNIX, as well as various mobile operating systems. [Note: sccm is also known as mssms.]",Network Management,http;https,20130701,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, 179,Q_PROTO_SCCP,sccp,,Skinny Client Control Protocol,Skinny Client Control Protocol (SCCP) is a Cisco proprietary protocol used between Cisco Call Manager and Cisco VOIP phones. It is also supported by some other vendors.,Audio/Video,tcp,20051122,7/4/2008,,,,x,,,,,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,, 1307,Q_PROTO_SCCP_SS7,sccp_ss7,,Stream Connection Control Part,"SCCP is a network layer protocol that provides routing, flow control or error detection services in SS7 networks.",Network Service,m3ua,RFC 2960,,x,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1737,Q_PROTO_SCENEHD,scenehd,,Scenehd,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -484,Q_PROTO_SCIENCESTAGE,sciencestage,,ScienceStage,This protocol plug-in classifies the http traffic to the host sciencestage.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -485,Q_PROTO_SCISPACE,scispace,,Scispace,This protocol plug-in classifies the http traffic to the host scispace.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1737,Q_PROTO_SCENEHD,scenehd,,SceneHD Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +2014,Q_PROTO_SCHEDULED_TP,scheduled_tp,,Scheduled Transfer Protocol,STP is a connection-oriented data transfer protocol. It is found over the IP layer (IANA protocol number: 118).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +484,Q_PROTO_SCIENCESTAGE,sciencestage,,ScienceStage.com,This protocol plug-in classifies the http traffic to the host sciencestage.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +485,Q_PROTO_SCISPACE,scispace,,Scispace.com,This protocol plug-in classifies the http traffic to the host scispace.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 675,Q_PROTO_SCPS,scps,,SCPS,The scps protocol (SCPS) is found over the IP layer (IANA protocol number: 105).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1166,Q_PROTO_SCRIBD,scribd,,Scribd,This protocol plug-in classifies the http traffic to the host scribd.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1166,Q_PROTO_SCRIBD,scribd,,Scribd.com,This protocol plug-in classifies the http traffic to the host scribd.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 180,Q_PROTO_SCTP,sctp,,Stream Control Transmission Protocol,SCTP (Stream Control Transmission Protocol) is a protocol designed to transport PSTN signaling messages over IP networks.,Network Service,ip;ip6,RFC 2960,7/4/2008,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1415,Q_PROTO_SDO,sdo,,Sdo,Chinese entertainment portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1415,Q_PROTO_SDO,sdo,,Sdo.com,Chinese entertainment portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 708,Q_PROTO_SDRP,sdrp,,Source Demand Routing Protocol,The sdrp protocol (Source Demand Routing Protocol) is found over the IP layer (IANA protocol number: 42).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1774,Q_PROTO_SEARCHNU,searchnu,,Searchnu,Browser toolbar search engine,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -250,Q_PROTO_SECONDLIFE,secondlife,,Second Life,Secondlife is is an Internet-based virtual world which enables its users to interact with each other through motional avatars.,Web,http;https;udp,20081118,1/14/2009,,x,,x,,,,,,,,,,,,x,x,,,,x,,x,,,,,,,,,,x,,,, -676,Q_PROTO_SECURE_VMTP,secure_vmtp,,SECURE_VMTP,The secure_vmtp protocol (SECURE_VMTP) is found over the IP layer (IANA protocol number: 82).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -845,Q_PROTO_SEEQPOD,seeqpod,,Seeqpod,This protocol plug-in classifies the http traffic to the host intertrust.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1317,Q_PROTO_SEESAA,seesaa,,Seesaa,Japanese web portal dedicated to smartphone applications and other web sites,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -846,Q_PROTO_SEESMIC,seesmic,,Seesmic,This protocol plug-in classifies the http traffic to the host seesmic.com. It also classifies the ssl traffic to the Common Name .seesmic.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1222,Q_PROTO_SEGYE,segye,,Segye,This protocol plug-in classifies the http traffic to the host segye.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -317,Q_PROTO_SENDSPACE,sendspace,,SendSpace,This protocol plug-in classifies the http traffic to the host sendspace.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2068,Q_PROTO_SENEWEB,seneweb,,Seneweb,Senegalese news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1190,Q_PROTO_SEOUL_NEWS,seoul_news,,Seoul News,This protocol plug-in classifies the http traffic to the host seoul.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1939,Q_PROTO_SEZNAM,seznam,,Seznam,Czech internet web protal.,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20131125 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1048,Q_PROTO_SFR,sfr,,sfr,This protocol plug-in classifies the http traffic to the host sfr.fr.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1774,Q_PROTO_SEARCHNU,searchnu,,Searchnu,Browser toolbar search engine,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +250,Q_PROTO_SECONDLIFE,secondlife,,SecondLife.com,Secondlife is is an Internet-based virtual world which enables its users to interact with each other through motional avatars.,Web,http;https;udp,20081118,1/14/2009,,x,,x,,,,,,,,,,,,x,x,,,,x,,x,,,,,,,,,,x,,,, +676,Q_PROTO_SECURE_VMTP,secure_vmtp,,Secure VMTP,The secure_vmtp protocol (SECURE_VMTP) is found over the IP layer (IANA protocol number: 82).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +845,Q_PROTO_SEEQPOD,seeqpod,,Intertrust.com,This protocol plug-in classifies the http traffic to the host intertrust.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1317,Q_PROTO_SEESAA,seesaa,,Seesaa.net,Japanese web portal dedicated to smartphone applications and other web sites,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +846,Q_PROTO_SEESMIC,seesmic,,Seesmic.com,This protocol plug-in classifies the http traffic to the host seesmic.com. It also classifies the ssl traffic to the Common Name .seesmic.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1222,Q_PROTO_SEGYE,segye,,Segye.com,This protocol plug-in classifies the http traffic to the host segye.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +317,Q_PROTO_SENDSPACE,sendspace,,SendSpace.com,This protocol plug-in classifies the http traffic to the host sendspace.com.,Web,http;https;ssl,PC-Windows-Browser-www.sendspace.com (2014-02-18);Mobile-Android (2014-02-18);PC-Windows 7 (2014-02-19),Mac-Mac OS-10.9-Safari (2014-02-18);Mobile-Android-4.1.2-Sendspace-2.1.1 (2014-02-18);PC-Linux-Firefox-17 (2014-02-18);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-18);PC-Windows-7-Sendspace-1.4.1 (2014-02-19);iPhone-iOS-7.0.4-Safari (2014-02-18),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2068,Q_PROTO_SENEWEB,seneweb,,Seneweb.com,Senegalese news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1190,Q_PROTO_SEOUL_NEWS,seoul_news,,Seoul.co.kr,This protocol plug-in classifies the http traffic to the host seoul.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1939,Q_PROTO_SEZNAM,seznam,,Seznam.cz,Czech internet web protal.,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1048,Q_PROTO_SFR,sfr,,SFR.fr,This protocol plug-in classifies the http traffic to the host sfr.fr.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1444,Q_PROTO_SHARE,share,,Share,Share is a free peer-to-peer application allowing users to exchange files anonymously and in a secure way.,Peer to Peer,tcp,EX2,3/21/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1988,Q_PROTO_SHAREBEE_COM,sharebee_com,,sharebee.com,Classifies web browsing on the sharebee.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1738,Q_PROTO_SHAREBOX,sharebox,,Sharebox,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1988,Q_PROTO_SHAREBEE_COM,sharebee_com,,sharebee.com,Classifies web browsing on the sharebee.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1738,Q_PROTO_SHAREBOX,sharebox,,Sharebox Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, 756,Q_PROTO_SHAREPOINT,sharepoint,,Microsoft SharePoint,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems.",Web,http;https,SharePoint 2010,7/4/2008,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,, 757,Q_PROTO_SHAREPOINT_ADMIN,sharepoint_admin,,Microsoft SharePoint Administration Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the administration back-end of SharePoint.",Web,sharepoint,SharePoint 2010,7/11/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, 924,Q_PROTO_SHAREPOINT_BLOG,sharepoint_blog,,Microsoft SharePoint Blog Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the blog management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, 925,Q_PROTO_SHAREPOINT_CALENDAR,sharepoint_calendar,,Microsoft SharePoint Calendar Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the calendar management module of SharePoint.",Web,http;https;sharepoint,SharePoint 2010,10/20/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, 926,Q_PROTO_SHAREPOINT_DOCUMENT,sharepoint_document,,Microsoft SharePoint Document Management Application,"SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems. This plug-in classifies the document management module of SharePoint.",Web,sharepoint,SharePoint 2010,10/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1453,Q_PROTO_SHAREPOINT_ONLINE,sharepoint_online,,SharePoint Online,On-line version of the Microsoft Sharepoint services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -1739,Q_PROTO_SHAREREACTOR,sharereactor,,Sharereactor,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -486,Q_PROTO_SHARETHEMUSIC,sharethemusic,,ShareTheMusic,This protocol plug-in classifies the http traffic to the host sharethemusic.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1178,Q_PROTO_SHAZAM,shazam,,Shazam,This protocol plug-in classifies the http traffic to the hosts shazamid.com and cdn.shazam.com. It also classifies the ssl traffic to the Common Name beacon.shazam.com.,Web,http;https;ssl,20120530,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -2134,Q_PROTO_SHEKULLI,shekulli,,Shekulli,Albanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -487,Q_PROTO_SHELFARI,shelfari,,Shelfari,This protocol plug-in classifies the http traffic to the host shelfari.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1453,Q_PROTO_SHAREPOINT_ONLINE,sharepoint_online,,SharePoint Online,On-line version of the Microsoft Sharepoint services (included in Office 365).,Web,office365,20130415,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +1739,Q_PROTO_SHAREREACTOR,sharereactor,,Sharereactor Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +486,Q_PROTO_SHARETHEMUSIC,sharethemusic,,ShareTheMusic.com,This protocol plug-in classifies the http traffic to the host sharethemusic.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1178,Q_PROTO_SHAZAM,shazam,,Shazamid.com,This protocol plug-in classifies the http traffic to the hosts shazamid.com and cdn.shazam.com. It also classifies the ssl traffic to the Common Name beacon.shazam.com.,Web,http;https;ssl,20120530,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +2134,Q_PROTO_SHEKULLI,shekulli,,Shekulli.com.al,Albanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +487,Q_PROTO_SHELFARI,shelfari,,Shelfari.com,This protocol plug-in classifies the http traffic to the host shelfari.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 731,Q_PROTO_SHIM6,shim6,,Shim6 Protocol,The shim6 protocol (Shim6 Protocol) is found over the IP layer (IANA protocol number: 140).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1223,Q_PROTO_SHINHAN,shinhan,,Shinhan,This protocol plug-in classifies the http traffic to the host shinhan.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1940,Q_PROTO_SHOBIDDAK,shobiddak,,Shobiddak,Palestinian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -181,Q_PROTO_SHOUTCAST,shoutcast,,ShoutCast,Shoutcast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;tcp,20131025,PC-Windows-Website-20131022 (2013-11-06),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -847,Q_PROTO_SHOWMYPC,showmypc,,ShowMyPc,This protocol plug-in classifies the http traffic to the host showmypc.com. It also classifies the ssl traffic to the Common Name showmypc.com.,Thin Client,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, -848,Q_PROTO_SHUTTERFLY,shutterfly,,Shutterfly,This protocol plug-in classifies the http traffic to the host shutterfly.com. It also classifies the ssl traffic to the Common Name shutterfly.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1223,Q_PROTO_SHINHAN,shinhan,,Shinhan.com,This protocol plug-in classifies the http traffic to the host shinhan.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1940,Q_PROTO_SHOBIDDAK,shobiddak,,Shobiddak.com,Palestinian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +181,Q_PROTO_SHOUTCAST,shoutcast,,ShoutCast,Shoutcast is a protocol used to stream audio files over HTTP.,Audio/Video,http;https;tcp,PC-Windows-Browser-www.shoutcast.com (2014-02-22),Mobile-iOS-7.0.4-Safari (2014-02-22);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-22),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +847,Q_PROTO_SHOWMYPC,showmypc,,ShowMyPc.com,This protocol plug-in classifies the http traffic to the host showmypc.com. It also classifies the ssl traffic to the Common Name showmypc.com.,Thin Client,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,x,, +848,Q_PROTO_SHUTTERFLY,shutterfly,,Shutterfly.com,This protocol plug-in classifies the http traffic to the host shutterfly.com. It also classifies the ssl traffic to the Common Name shutterfly.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 944,Q_PROTO_SIEBEL_CRM,siebel_crm,,Siebel CRM,A customer relationship management (CRMs) solution by Siebel Systems.,Web,http;https,20110826,10/21/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -737,Q_PROTO_SILVERLIGHT,silverlight,,Silverlight,"Silverlight is a Microsoft web browser plugin designed to render programable animations and to stream videos. It quite similar with Adobe Flash: animated vector graphics, H264 video streaming",Audio/Video,akamai;http;https,5,XBOX-Silverlight-v5 (2013-10-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2202,Q_PROTO_SIGMALIVE,sigmalive,,Sigmalive,Cypriot news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +737,Q_PROTO_SILVERLIGHT,silverlight,,Silverlight,"Silverlight is a Microsoft web browser plugin designed to render programable animations and to stream videos. It quite similar with Adobe Flash: animated vector graphics, H264 video streaming",Audio/Video,akamai;http;https,PC-Windows-Internet Explorer-Silverlight 5.0 (2011-12-09),Xbox-360-Silverlight-5 (2013-10-04),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 679,Q_PROTO_SIMPLE_MSG_P,simple_msg_p,,Simple Message Protocol,The simple_msg_p protocol (Simple Message Protocol) is found over the IP layer (IANA protocol number: 121).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1995,Q_PROTO_SIMPLEUPLOAD_NET,simpleupload_net,,simpleupload.net,Classifies web browsing on the simpleupload.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1088,Q_PROTO_SINA,sina,,Sina,"Sina is a Chinese chat client similar to MSN Messenger or ICQ. It contains several features like chat, news portal, micro blogging, music player, online storage (files, photos, etc..).",Web,http;https;jabber;ssl;udp,Sina v1.7 (IM);20130215 (Web),PC-Windows-UC 8.3.4 (2013-10-17),,x,,x,,,,,,,,,,,,x,,,,,x,,,,,,,,,,,,,,,, -1416,Q_PROTO_SINA_BLOG,sina_blog,,Sina blog,Sina blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1417,Q_PROTO_SINA_FINANCE,sina_finance,,Sina finance,Sina finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1418,Q_PROTO_SINA_NEWS,sina_news,,Sina News,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1462,Q_PROTO_SINA_VIDEO,sina_video,,Sina Video,Chinese on-line video streaming and VOD service.,Web,sina,"1.0 (CLIENT),20130425 (Web)",PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1995,Q_PROTO_SIMPLEUPLOAD_NET,simpleupload_net,,simpleupload.net,Classifies web browsing on the simpleupload.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1088,Q_PROTO_SINA,sina,,Sina.com.cn,"Sina is a Chinese chat client similar to MSN Messenger or ICQ. It contains several features like chat, news portal, micro blogging, music player, online storage (files, photos, etc..).",Web,http;https;jabber;ssl;udp,Mobile-Android-Sina 1.7;PC-Windows-Browser-www.sina.com.cn (2014-02-23),PC-Windows-Firefox (2013-10-17);PC-Windows-Sina UC-8.3.4 (2013-10-11),,x,,x,,,,,,,x,,,,,x,,,,,x,,,,,,,,,,,,,,,, +1416,Q_PROTO_SINA_BLOG,sina_blog,,Sina blog,Sina blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1417,Q_PROTO_SINA_FINANCE,sina_finance,,Sina finance,Sina finance news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1418,Q_PROTO_SINA_NEWS,sina_news,,Sina News,Chinese news portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1462,Q_PROTO_SINA_VIDEO,sina_video,,Sina Video,Chinese on-line video streaming and VOD service.,Web,sina,"1.0 (CLIENT),20130425 (Web)",PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 1097,Q_PROTO_SINA_WEIBO,sina_weibo,,Sina Weibo,Sina Weibo is a Chinese microblogging website.,Web,http;https;ssl,20111121,1/25/2012,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -2069,Q_PROTO_SIOL,siol,,Siol,Slovenian news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2069,Q_PROTO_SIOL,siol,,Siol.net,Slovenian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 182,Q_PROTO_SIP,sip,,Session Initiation Protocol,"Session Initiation Protocol (SIP) is the Internet Engineering Task Force's (IETF's) standard for multimedia conferencing over IP. Like other VoIP protocols, SIP is designed to address the functions of signaling and session management within a packet telephony network.",Audio/Video,aim;http;msn;sip;stun;tcp;udp,2.0,7/4/2008,,,,x,sip,,,x,,x,x,,,,,x,,x,x,,,x,,,,,,,,,,,,,,, -1941,Q_PROTO_SKELBIU,skelbiu,,Skelbiu,Lithuanian online classified ads and trading website.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1941,Q_PROTO_SKELBIU,skelbiu,,Skelbiu.lt,Lithuanian online classified ads and trading website.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 677,Q_PROTO_SKIP,skip,,SKIP,The skip protocol (SKIP) is found over the IP layer (IANA protocol number: 57).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2135,Q_PROTO_SKROUTZ,skroutz,,Skroutz,Greek price comparator,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1049,Q_PROTO_SKY,sky,,Skyrock,This protocol plug-in classifies the http traffic to the host www.sky.com.,Audio/Video,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -849,Q_PROTO_SKY_PLAYER,sky_player,,Sky Player,This protocol plug-in classifies the http traffic to the host skyplayer.sky.com. It also classifies the ssl traffic to the Common Name .sky.com.,Audio/Video,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2135,Q_PROTO_SKROUTZ,skroutz,,Skroutz.gr,Greek price comparator,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1049,Q_PROTO_SKY,sky,,Sky,This protocol plug-in classifies the http traffic to the host www.sky.com.,Audio/Video,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +849,Q_PROTO_SKY_PLAYER,sky_player,,SkyPlayer.sky.com,This protocol plug-in classifies the http traffic to the host skyplayer.sky.com. It also classifies the ssl traffic to the Common Name .sky.com.,Audio/Video,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 323,Q_PROTO_SKYBLOG,skyblog,,skyblog,SkyBlog is a website where users can have blogs.,Web,http;https;ssl,20131118,7/17/2009,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1050,Q_PROTO_SKYCN,skycn,,skycn,This protocol plug-in classifies the http traffic to the host skycn.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -850,Q_PROTO_SKYDRIVE,skydrive,,Windows Live SkyDrive,"This protocol plug-in classifies the ssl traffic to the Common Names live.com.nsatc.net, gateway.edge.messenger.live.com, skydrive.live.com and skyapi.live.net.",Web,http;https;ssl,20130909,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1575,Q_PROTO_SKYDRIVE_LOGIN,skydrive_login,,Windows Live SkyDrive,On-line file storage service owned by Microsoft.,Web,http;https,20130909,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -183,Q_PROTO_SKYPE,skype,,skype,"Skype is a widely used voice over IP protocol. Since the merge with MSN service in 2013, it may be required to use this protocol in conjonction with msn and windowslive protocols to optimise the coverage of traffic generated by Skype clients.",Instant Messaging,http;https;ssl;tcp;udp,6.9.0.106-WinPC;3.2.0.6673-Android;4.8-iOS;2.6.0.148-winphone,Mobile-Android-App3.2.0.6673 (2013-10-17);PC-Windows-App6.9.73.106 (2013-10-17);iPad2-iOS-App4.8 (2013-10-17),,x,,x,skype,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -302,Q_PROTO_SKYROCK,skyrock,x,Skyrock,This protocol plug-in classifies the http traffic to the host www.skyrock.com. Now classified as skyblog.,Web,,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1179,Q_PROTO_SLACKER,slacker,,Slacker Personal Radio,This protocol plug-in classifies the http traffic to the host .slacker.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1786,Q_PROTO_SLANDO,slando,,Slando,Belarusian free classified ads,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1051,Q_PROTO_SLIDESHARE,slideshare,,slideshare,This protocol plug-in classifies the http traffic to the host slideshare.net.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1050,Q_PROTO_SKYCN,skycn,,Skycn.com,This protocol plug-in classifies the http traffic to the host skycn.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +850,Q_PROTO_SKYDRIVE,skydrive,,Windows Live SkyDrive,"This protocol plug-in classifies the ssl traffic to the Common Names live.com.nsatc.net, gateway.edge.messenger.live.com, skydrive.live.com and skyapi.live.net.",Web,http;https;ssl,20130909,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1575,Q_PROTO_SKYDRIVE_LOGIN,skydrive_login,,Windows Live SkyDrive Login,On-line file storage service owned by Microsoft.,Web,http;https,20130909,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +183,Q_PROTO_SKYPE,skype,,skype,"Skype is a widely used voice over IP protocol. Since the merge with MSN service in 2013, it may be required to use this protocol in conjonction with msn and windowslive protocols to optimise the coverage of traffic generated by Skype clients.",Instant Messaging,http;https;ssl;tcp;udp,PC-Windows 7-Skype 6.9.0.106;Mobile-Android-Skype 3.2.0.6673;iPad-iOS-Skype 4.8;Windows Phone-Windows Phone OS-Skype 2.6.0.148,Mac-Mac OS-Skype-6.12.59.438 (2014-02-12);Mobile-Android-Skype-4.5.0.39600 (2014-02-07);PC-Linux-4.2.0.13 (2014-02-12);PC-Windows-Chrome-32.0.1700.76m (2014-01-28);PC-Windows-Skype-6.11.0.102 (2013-10-17);Windows Phone-Windows Phone OS-8-Skype-2.13.0.290 (2014-01-06);iPhone-iOS-Skype-4.17.124 (2014-02-12),,x,,x,skype,,,,x,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +302,Q_PROTO_SKYROCK,skyrock,x,Skyrock.com,This protocol plug-in classifies the http traffic to the host www.skyrock.com. Now classified as skyblog.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1179,Q_PROTO_SLACKER,slacker,,Slacker Personal Radio,This protocol plug-in classifies the http traffic to the host .slacker.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1786,Q_PROTO_SLANDO,slando,,Slando.by,Belarusian free classified ads,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1051,Q_PROTO_SLIDESHARE,slideshare,,Slideshare.net,This protocol plug-in classifies the http traffic to the host slideshare.net.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 892,Q_PROTO_SLINGBOX,slingbox,,Slingbox,Slingbox is a streaming protocol over the Internet used to watch and control TV shows received from your home devices.,Audio/Video,http;https;ssl;tcp,1.5.1.119,7/4/2008,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -184,Q_PROTO_SLSK,slsk,,SoulSeek,Soulseek is a peer-to-peer protocol.,Peer to Peer,tcp,<=1.57,157 NS 13 e (2013-03-05),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -678,Q_PROTO_SM,sm,,SM,The sm protocol (SM) is found over the IP layer (IANA protocol number: 122).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -185,Q_PROTO_SMB,smb,,Server Message Block (Windows File Server),The Server Message Block Protocol (SMB/SMB2) provides a method for client applications to read and write to files and to request services from server programs in a computers network.,File Server,netbios,smb;smb2,samba server (3.4.0) on ARCH_LINUX (2012-09-10),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -2070,Q_PROTO_SME,sme,,Sme,Slovak news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +184,Q_PROTO_SLSK,slsk,,SoulSeek,Soulseek is a peer-to-peer protocol.,Peer to Peer,tcp,<=1.57,PC-Linux-Soulseek-157 NS 13 e (2013-03-05),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +678,Q_PROTO_SM,sm,,Sparse Mode,The sm protocol (SM) is found over the IP layer (IANA protocol number: 122).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +185,Q_PROTO_SMB,smb,,Server Message Block (Windows File Server),The Server Message Block Protocol (SMB/SMB2) provides a method for client applications to read and write to files and to request services from server programs in a computers network.,File Server,netbios,smb;smb2,PC-Linux-Samba Server-3.4.0 (2012-09-10),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, +2070,Q_PROTO_SME,sme,,Sme.sk,Slovak news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 738,Q_PROTO_SMPP,smpp,,Short message peer-to-peer protocol,SMPP is a telecommunications industry protocol for exchanging SMS messages between SMS peer entities.,Wap,tcp,3.4;5.0,2/28/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, 186,Q_PROTO_SMTP,smtp,,Simple Mail Transfer Protocol,The Simple Mail Transfer Protocol (SMTP) is a protocol used for transfering mail reliably and efficiently.,Mail,socks4;socks5;tcp,RFC 821;RFC 5321,9/6/2011,,,,x,,,,,,,x,,,x,,,,,,,,,,,,,,,,,,,,,,, -187,Q_PROTO_SMTPS,smtps,,Secure SMTP,Secure version of the SMTP protocol.,Mail,ssl,RFC 821;RFC 5321,7/4/2008,,,,,,465,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, -188,Q_PROTO_SNA,sna,,SNA,SNA (Systems Network Architecture) is an IBM's mainframe network standards.,Network Service,8021q;eth;llc;ppp,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +187,Q_PROTO_SMTPS,smtps,,Simple Mail Transfer Protocol Secure,Secure version of the SMTP protocol.,Mail,ssl,RFC 821;RFC 5321,7/4/2008,,,,,,465,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,, +188,Q_PROTO_SNA,sna,,Systems Network Architecture,SNA (Systems Network Architecture) is an IBM's mainframe network standards.,Network Service,8021q;eth;llc;ppp,na,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 189,Q_PROTO_SNAP,snap,,Sub-Network Access Protocol,Sub-Network Access Protocol (SNAP) is a protocol encapsulated in the LLC protocol enabling the encapsulation of a greater number of protocols in Ethernet II frames.,Network Service,llc,RFC 1042,7/4/2008,x,,,,,,x,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x 190,Q_PROTO_SNMP,snmp,,Simple Network Management Protocol,SNMP is a request/response protocol that communicates management information between two types of SNMP software entities: SNMP applications (also called SNMP managers) and SNMP agents.,Network Management,hpellc;udp,1;2c;2u;3,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, 680,Q_PROTO_SNP,snp,,Sitara Networks Protocol,The snp protocol (Sitara Networks Protocol) is found over the IP layer (IANA protocol number: 109).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 264,Q_PROTO_SNPP,snpp,,Simple Network Paging Protocol,This protocol defines a method by which a pager can receive a message over the Internet,Network Service,tcp,SNPP v3,4/16/2009,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 191,Q_PROTO_SOAP,soap,,Simple Object Access Protocol,"SOAP is a lightweight protocol intended for exchanging structured information in a decentralized, distributed environment. It defines, using XML technologies, an extensible messaging framework containing a message construct that can be exchanged over a variety of underlying protocols.",Middleware,http,SOAP v1.1;SOAP v1.2,2/3/2012,,,,x,,,,,,,,,x,,,,,,,,,,x,,,,,,,,,,,,,, -851,Q_PROTO_SOCIALTV,socialtv,,Socialtv,This protocol plug-in classifies the http traffic to the host srv.sixdegs.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -488,Q_PROTO_SOCIALVIBE,socialvibe,,SocialVibe,This protocol plug-in classifies the http traffic to the host socialvibe.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +851,Q_PROTO_SOCIALTV,socialtv,,Social-tv.net,This protocol plug-in classifies the http traffic to the host srv.sixdegs.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +488,Q_PROTO_SOCIALVIBE,socialvibe,x,SocialVibe.com,This protocol plug-in used to classify the http traffic to the host socialvibe.com.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 927,Q_PROTO_SOCKS2HTTP,socks2http,,socks2http,Socks2http is a client software aiming to make a tunnel.,Tunneling,http;https;tcp,1.0.2.411,10/21/2011,,x,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -192,Q_PROTO_SOCKS4,socks4,,SOCKSv4,Socks 4 is an authentication protocol.,Tunneling,tcp,SOCKS-v4,7/4/2008,,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -193,Q_PROTO_SOCKS5,socks5,,SOCKSv5,SOCKS5(SOCKet Secure v5) routes network packets between a client and server through a proxy server with authentication.,Tunneling,tcp,SOCKS-v5,7/4/2008,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x -1419,Q_PROTO_SOFT4FUN,soft4fun,,Soft4fun,Hardware and software news site.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1457,Q_PROTO_SOFTBANK,softbank,,SoftBank,Sorftbank network operator services.,Web,http;https;ssl,20130304,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1756,Q_PROTO_SOFTONIC,softonic,,Softonic,Softonic.com is a software download portal based in Barcelona,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1695,Q_PROTO_SOFTROS_MESSENGER,softros_messenger,,Softros LAN Instant Messenger,Softros Messenger is a LAN messaging and file transfer application.,Instant Messaging,tcp,5.1.1 (Windows),PC-Windows-v5.1.3 (2013-12-23),,,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -1251,Q_PROTO_SOGOU,sogou,,Sogou,This protocol plug-in classifies the http traffic to the host sogou.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1243,Q_PROTO_SOHU,sohu,,Sohu,Sohu services (except blogging classified in sohu_blog).,Web,http;https,20130215,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1420,Q_PROTO_SOHU_BLOG,sohu_blog,,Sohu blog,Sohu blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1264,Q_PROTO_SOKU,soku,,Soku,This protocol plug-in classifies the http traffic to the host soku.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1910,Q_PROTO_SOMUD,somud,,SoMud,SoMud is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the SoMud client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https,1.3.8,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1324,Q_PROTO_SONET_NE,sonet_ne,,So-net,Japanese web portal of the internet provider So-net,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -489,Q_PROTO_SONICO,sonico,,Sonico,This protocol plug-in classifies the http traffic to the host sonico.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +192,Q_PROTO_SOCKS4,socks4,,SOCKet Secure v4,Socks 4 is an authentication protocol.,Tunneling,tcp,SOCKS-v4,7/4/2008,,,,x,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +193,Q_PROTO_SOCKS5,socks5,,SOCKet Secure v5,Socks 5 is an authentication protocol.,Tunneling,tcp,SOCKS-v5,7/4/2008,,,,x,,,,,x,,,x,x,,,,,,,,,,,,,,,,,,,,,,,,x +1419,Q_PROTO_SOFT4FUN,soft4fun,,Soft4fun.net,Hardware and software news site.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1457,Q_PROTO_SOFTBANK,softbank,,SoftBank.com,SoftBank network operator services.,Web,http;https;ssl,20130304,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1756,Q_PROTO_SOFTONIC,softonic,,Softonic.com,Softonic.com is a software download portal based in Barcelona,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1695,Q_PROTO_SOFTROS_MESSENGER,softros_messenger,,Softros LAN Instant Messenger,Softros Messenger is a LAN messaging and file transfer application.,Instant Messaging,tcp,5.1.1 (Windows),PC-Windows-Softros LAN Messenger-5.1.3 (2013-12-23),,,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +1251,Q_PROTO_SOGOU,sogou,,Sogou.com,This protocol plug-in classifies the http traffic to the host sogou.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1243,Q_PROTO_SOHU,sohu,,Sohu.com,Sohu services (except blogging classified in sohu_blog).,Web,http;https,20130215,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1420,Q_PROTO_SOHU_BLOG,sohu_blog,,Sohu blog,Sohu blog hosting service.,Web,http;https,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1264,Q_PROTO_SOKU,soku,,Soku.com,This protocol plug-in classifies the http traffic to the host soku.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1910,Q_PROTO_SOMUD,somud,,SoMud Bittorrent tracker,SoMud is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the SoMud client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https,1.3.8,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1324,Q_PROTO_SONET_NE,sonet_ne,,So-net.ne.jp,Japanese web portal of the internet provider So-net,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +489,Q_PROTO_SONICO,sonico,,Sonico.com,This protocol plug-in classifies the http traffic to the host sonico.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 194,Q_PROTO_SONMP,sonmp,,Nortel/SynOptics Netwok Management Protocol,Nortel/SynOptics Network Management Protocol is a proprietary Nortel Networks management protocol.,Network Management,snap,RFC 1042,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -572,Q_PROTO_SOPCAST,sopcast,,sopcast,Sopcast is a video streaming service based on a peer-to-peer protocol : SOP (Streaming Over Peer-to-peer).,Audio/Video,http;https;udp,3.2.9,10/3/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -1096,Q_PROTO_SOPHOS_UPDATE,sophos_update,,Sophos update,Sophos antivirus update protocol.,Antivirus,http;https,7.3,9.5 and 9.7 (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x,,,,, -852,Q_PROTO_SORIBADA,soribada,,Soribada,This protocol plug-in classifies the http traffic to the host kpop.soribada.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1244,Q_PROTO_SOSO,soso,,Soso,This protocol plug-in classifies the http traffic to the host soso.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1271,Q_PROTO_SOUFUN,soufun,,Soufun,This protocol plug-in classifies the http traffic to the host soufun.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1180,Q_PROTO_SOUNDCLOUD,soundcloud,,SoundCloud,This protocol plug-in classifies the http traffic to the hosts soundcloud.com and sndcdn.com. It also classifies the ssl traffic to the Common Names .soundcloud.com and sndcdn.com.,Audio/Video,http;https;ssl,20120530,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2136,Q_PROTO_SOUQ,souq,,Souq,Saudi Arabian ecommerce website,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -289,Q_PROTO_SOUTHWEST,southwest,,Southwest,This protocol plug-in classifies the http traffic to the host southwest.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +572,Q_PROTO_SOPCAST,sopcast,,Sopcast.org,Sopcast is a video streaming service based on a peer-to-peer protocol : SOP (Streaming Over Peer-to-peer).,Audio/Video,http;https;udp,3.2.9,10/3/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +1096,Q_PROTO_SOPHOS_UPDATE,sophos_update,,Sophos update,Sophos antivirus update protocol.,Antivirus,http;https,7.3,PC-Windows-Sophos Antvirus-9.7 (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x,,,,, +852,Q_PROTO_SORIBADA,soribada,,Soribada.com,This protocol plug-in classifies the http traffic to the host kpop.soribada.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1244,Q_PROTO_SOSO,soso,,Soso.com,This protocol plug-in classifies the http traffic to the host soso.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1271,Q_PROTO_SOUFUN,soufun,,Soufun.com,This protocol plug-in classifies the http traffic to the host soufun.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1180,Q_PROTO_SOUNDCLOUD,soundcloud,,SoundCloud.com,This protocol plug-in classifies the http traffic to the hosts soundcloud.com and sndcdn.com. It also classifies the ssl traffic to the Common Names .soundcloud.com and sndcdn.com.,Audio/Video,http;https;ssl,20120530,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2136,Q_PROTO_SOUQ,souq,,Souq.com,Saudi Arabian ecommerce website,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +289,Q_PROTO_SOUTHWEST,southwest,,Southwest.com,This protocol plug-in classifies the http traffic to the host southwest.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 937,Q_PROTO_SP,sp,,ISO 8327 Session Protocol,ISO 8327-1/X.225 OSI Session Protocol (SP).,Network Service,cotp,ISO 8327-1/X.225,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 1469,Q_PROTO_SPDY,spdy,,SPDY,SPDY is an open networking protocol developed primarily at Google for transporting web content.,Web,tcp,3,7/11/2013,,,,x,,,,,,,x,x,,,,,,,,,,,x,,,,,,,,,,,,,, -1465,Q_PROTO_SPEEDTEST,speedtest,,Speedtest.net,Web site and mobile application for testing both bandwidth and latency of any internet connection.,Web,http;https;ssl,"3.0 (iOS), 2.0 (Android),20130425",PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1446,Q_PROTO_SPID,spid,,SPID : Statistical Protocol IDentification,"SPID (Statistical Protocol IDentification) is a statistical classification engine, used to identify encrypted or obfuscated streams from advanced Peer-to-peer or VPN protocols (ex: BitTorrent RC4 streams).",Standard,tcp;udp,1,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1052,Q_PROTO_SPIEGEL,spiegel,,spiegel,This protocol plug-in classifies the http traffic to the host spiegel.de.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1224,Q_PROTO_SPORTCHOSUN,sportchosun,,Sportchosun,This protocol plug-in classifies the http traffic to the host sportschosun.com. It also classifies the ssl traffic to the Common Name member.sportchosun.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1053,Q_PROTO_SPORTSILLUSTRATED,sportsillustrated,,sportsillustrated,This protocol plug-in classifies the http traffic to the hosts sportsillustrated.cnn.com and sportsillustrated.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1225,Q_PROTO_SPORTSSEOUL,sportsseoul,,Sportsseoul,This protocol plug-in classifies the http traffic to the host sportsseoul.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -534,Q_PROTO_SPOTIFY,spotify,,Spotify,Spotify is an application of musical streaming.,Audio/Video,http;https;rtmp;socks4;socks5;ssl;tcp;udp,0.9.6.72(PC);0.9.0.8(iOS);0.7.3.636(Android);20131203(Web),Mobile-Android4.0-App0.7.3.636 (2013-12-03);PC-Windows-Browser-20130312 (2013-12-03);PC-Windows7-0.9.6.72 (2013-12-03);WindowsPhone-App0.6.4.0 (2012-05-07);iPhone-iOS7-App0.9.0.8 (2013-12-03),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1054,Q_PROTO_SPRINT,sprint,,sprint,This protocol plug-in classifies the http traffic to the host sprint.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1465,Q_PROTO_SPEEDTEST,speedtest,,Speedtest.net,Web site and mobile application for testing both bandwidth and latency of any internet connection.,Web,http;https;ssl,"3.0 (iOS), 2.0 (Android),20130425",PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1446,Q_PROTO_SPID,spid,,Statistical Protocol IDentification,"SPID (Statistical Protocol IDentification) is a statistical classification engine, used to identify encrypted or obfuscated streams from advanced Peer-to-peer or VPN protocols (ex: BitTorrent RC4 streams).",Standard,tcp;udp,1,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1052,Q_PROTO_SPIEGEL,spiegel,,Spiegel.de,This protocol plug-in classifies the http traffic to the host spiegel.de.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1224,Q_PROTO_SPORTCHOSUN,sportchosun,,Sports.chosun.com,This protocol plug-in classifies the http traffic to the host sportschosun.com. It also classifies the ssl traffic to the Common Name member.sportchosun.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1053,Q_PROTO_SPORTSILLUSTRATED,sportsillustrated,,SportsIllustrated.com,This protocol plug-in classifies the http traffic to the hosts sportsillustrated.cnn.com and sportsillustrated.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1225,Q_PROTO_SPORTSSEOUL,sportsseoul,,SportsSeoul.com,This protocol plug-in classifies the http traffic to the host sportsseoul.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +534,Q_PROTO_SPOTIFY,spotify,,Spotify,Spotify is an application of musical streaming.,Audio/Video,http;https;rtmp;socks4;socks5;ssl;tcp;udp,PC-Windows-Spotify 0.9.6.72;iPhone-iOS-Spotify 0.9.0.8;Mobile-Android-Spotify 0.7.3.636;PC-Windows-Browser-www.spotify.com (2013-12-03);PC-Windows-Google Chrome-www.spotify.com (2014-03-10),Mac-Mac OS-Spotify-0.9.7.16 (2014-02-07);Mobile-Android-Spotify-0.7.5.698 (2014-02-04);PC-Windows-7-Chrome-33.0.1750.146-Spotify-0.2.3 (2014-03-10);PC-Windows-7-Spotify-0.9.6.81 (2014-01-24);PC-Windows-Firefox (2013-12-03);Windows Phone-Windows Phone OS-Spotify-2.0.4933.0 (2014-02-04);iPhone-iOS-7-Spotify-0.9.0.8 (2013-12-05),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1054,Q_PROTO_SPRINT,sprint,,Sprint.com,This protocol plug-in classifies the http traffic to the host sprint.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 681,Q_PROTO_SPRITE_RPC,sprite_rpc,,Sprite RPC Protocol,The sprite_rpc protocol (Sprite RPC Protocol) is found over the IP layer (IANA protocol number: 90).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 682,Q_PROTO_SPS,sps,,Secure Packet Shield,The sps protocol (Secure Packet Shield) is found over the IP layer (IANA protocol number: 130).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -920,Q_PROTO_SQLI,sqli,,Sqli,The SQLI protocol (Structured Query Language Interface) is a proprietary protocol seemingly used exclusively in IBM Informix servers.,Database,tcp,9.7,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -195,Q_PROTO_SQUIRRELMAIL,squirrelmail,,SquirrelMail,SquirrelMail is a web-based email application written in the PHP scripting language.,Webmail,http;https,20110527,1/14/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +920,Q_PROTO_SQLI,sqli,,Structured Query Language Interface,The SQLI protocol (Structured Query Language Interface) is a proprietary protocol seemingly used exclusively in IBM Informix servers.,Database,tcp,9.7,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, +195,Q_PROTO_SQUIRRELMAIL,squirrelmail,,SquirrelMail,SquirrelMail is a web-based email application written in the PHP scripting language.,Webmail,http;https,20110527,3/11/2014,,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, 683,Q_PROTO_SRP,srp,,SpectraLink Radio Protocol,The srp protocol (SpectraLink Radio Protocol) is found over the IP layer (IANA protocol number: 119).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 196,Q_PROTO_SRVLOC,srvloc,,Service Location Protocol,"Service Location Protocol is a decentralized, lightweight, scalable and extensible protocol for service discovery within a local area network.",Application Service,tcp;udp,SRVLOC v1;SRVLOC v2,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1943,Q_PROTO_SS,ss,,Ss,Latvian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1943,Q_PROTO_SS,ss,,Ss.lv,Latvian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 684,Q_PROTO_SSCOPMCE,sscopmce,,Service Specific Connection Oriented Protocol for M-Cast Env,The sscopmce protocol (Service Specific Connection Oriented Protocol for M-Cast Env) is found over the IP layer (IANA protocol number: 128).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 197,Q_PROTO_SSDP,ssdp,,Simple Service Discovery Protocol,Simple Service Discovery Protocol (SSDP) provides a mechanism whereby network clients can discover desired network services.,Application Service,udp,SSDP v1.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, 198,Q_PROTO_SSH,ssh,,Secure Shell,"Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and a protocol for obtaining secure access to a remote computer.",Encrypted,http;http_tunnel;tcp,ssh v2.0,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,x 199,Q_PROTO_SSL,ssl,,Secure Socket Layer,"Secure Sockets Layer (SSL) is a commonly-used protocol for managing the security of a message transmission on the Internet. SSL has recently been succeeded by Transport Layer Security (TLS), which is based on SSL.",Encrypted,cotp;http;postgres;socks4;socks5;tcp,SSL-V2.0;SSL-V3.0,7/4/2008,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, -685,Q_PROTO_ST,st,,Stream,The st protocol (Stream) is found over the IP layer (IANA protocol number: 5).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1138,Q_PROTO_STAFABAND,stafaband,,Stafaband,This protocol plug-in classifies the http traffic to the host stafaband.info.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -853,Q_PROTO_STAGEVU,stagevu,,Stagevu,This protocol plug-in classifies the http traffic to the host stagevu.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2071,Q_PROTO_STANDARDMEDIA,standardmedia,,Standardmedia,Kenyan news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1790,Q_PROTO_STARTIMES,startimes,,Startimes,Arabic forum hosting site,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1055,Q_PROTO_STAYFRIENDS,stayfriends,,stayfriends,This protocol plug-in classifies the http traffic to the host stayfriends.de.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +685,Q_PROTO_ST,st,,Stream protocol,The st protocol (Stream) is found over the IP layer (IANA protocol number: 5).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1138,Q_PROTO_STAFABAND,stafaband,,Stafaband.info,This protocol plug-in classifies the http traffic to the host stafaband.info.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +853,Q_PROTO_STAGEVU,stagevu,,Stagevu.com,This protocol plug-in classifies the http traffic to the host stagevu.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2071,Q_PROTO_STANDARDMEDIA,standardmedia,,StandardMedia.co.ke,Kenyan news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1790,Q_PROTO_STARTIMES,startimes,,Startimes.com,Arabic forum hosting site,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1055,Q_PROTO_STAYFRIENDS,stayfriends,,StayFriends.de,This protocol plug-in classifies the http traffic to the host stayfriends.de.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1696,Q_PROTO_STEALTHNET,stealthnet,,Stealthnet,Stealthnet is a file sharing application between two or more hosts.,Peer to Peer,http;https;tcp,0.8.7.9,10/2/2013,,x,,x,,,,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,, -339,Q_PROTO_STEAM,steam,,steam,"Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.",Game,http;https;tcp;udp,v1381282832,PC-Windows-SteamClient1381282832 (2013-10-10),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -490,Q_PROTO_STICKAM,stickam,,Stickam,This protocol plug-in classifies the http traffic to the host stickam.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1421,Q_PROTO_STOCKQ,stockq,,Stockq,Taiwanese stock market information.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +339,Q_PROTO_STEAM,steam,,Steampowered.com,"Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.",Game,http;https;tcp;udp,PC-Windows-Steam 1393366296 (2014-02-27);Mobile-Android-Steam 1.0.6 (2014-02-25);iPhone-iOS-Steam 1.3 (2014-02-25);Mac-Mac OS-Steam 1393366296 (2014-02-27),Mac-Mac OS-10.9-Steam-1393366296 (2014-02-27);Mobile-Android-4.1.2-Steam-1.0.6 (2014-02-25);PC-Windows-7-Steam-13933662961 (2014-02-27);iPhone-iOS-7.0.4-Steam Mobile-1.3 (2014-02-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +490,Q_PROTO_STICKAM,stickam,,Stickam.com,This protocol plug-in classifies the http traffic to the host stickam.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1421,Q_PROTO_STOCKQ,stockq,,Stockq.org,Taiwanese stock market information.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 200,Q_PROTO_STP,stp,,Spanning Tree Protocol,"Spanning Tree Protocol allows the use of layer 2 networks with redundant paths by creating a covering tree on which frames will be transmitted. The newly created topology of the network (the tree) is loop free, thus preventing problems such as broadcast storm from occurring.",Routing,eth;ip;llc;ppp,RFC 2674;RFC 1525;RFC 1493,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -854,Q_PROTO_STREAMAUDIO,streamaudio,,StreamAudio,This protocol plug-in classifies the http traffic to the host streamaudio.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -491,Q_PROTO_STUDIVZ,studivz,,StudiVZ,This protocol plug-in classifies the http traffic to the host studivz.net. It also classifies the ssl traffic to the Common Name secure.studivz.net.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2137,Q_PROTO_STUFF,stuff,,Stuff,New zealander news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -492,Q_PROTO_STUMBLEUPON,stumbleupon,,StumbleUpon,This protocol plug-in classifies the http traffic to the host stumbleupon.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -201,Q_PROTO_STUN,stun,,Simple Traversal of UDP through NATs,STUN (Session Traversal Utilities for NAT) allows a client behind a NAT to establish UDP tunnels between two hosts.,Network Service,stun;tcp;udp,STUN v0(RFC 3489);STUN v1(RFC 5389);TURN,7/4/2008,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, +854,Q_PROTO_STREAMAUDIO,streamaudio,,StreamAudio.com,This protocol plug-in classifies the http traffic to the host streamaudio.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +491,Q_PROTO_STUDIVZ,studivz,,STudiVZ.net,This protocol plug-in classifies the http traffic to the host studivz.net. It also classifies the ssl traffic to the Common Name secure.studivz.net.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2137,Q_PROTO_STUFF,stuff,,Stuff.co.nz,New zealander news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +492,Q_PROTO_STUMBLEUPON,stumbleupon,,StumbleUpon.com,This protocol plug-in classifies the http traffic to the host stumbleupon.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +201,Q_PROTO_STUN,stun,,Session Traversal Utilities for NAT,STUN (Session Traversal Utilities for NAT) allows a client behind a NAT to establish UDP tunnels between two hosts.,Network Service,stun;tcp;udp,STUN v0(RFC 3489);STUN v1(RFC 5389);TURN,7/4/2008,,,,x,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1303,Q_PROTO_SUA,sua,,SCCP User Adaptation Layer,This protocol defines the transport of SCCP signalization over an IP network through SCTP.,Network Service,sctp,1.2 - RFC 3868,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1101,Q_PROTO_SUGAR_CRM,sugar_crm,,Sugar CRM,"Sugar CRM, a client relationship management solution.",Web,http;https,Sugar CRM 6.2.1 - Build 6405,6.3.0 (Build 7004) (2011-12-01),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1477,Q_PROTO_SUGAR_SYNC,sugar_sync,,SugarSync,On-line file backup and sync service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1944,Q_PROTO_SULIT,sulit,,Sulit,Filipino online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1101,Q_PROTO_SUGAR_CRM,sugar_crm,,SugarCRM.com,"Sugar CRM, a client relationship management solution.",Web,http;https,Sugar CRM 6.2.1 - Build 6405,PC-Windows-7-SugarCRM-6.3.0 (Build 7004) (2011-12-01),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +1477,Q_PROTO_SUGAR_SYNC,sugar_sync,,SugarSync.com,On-line file backup and sync service.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1944,Q_PROTO_SULIT,sulit,,Sulit.com.ph,Filipino online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 686,Q_PROTO_SUN_ND,sun_nd,,SUN ND PROTOCOL_Temporary,The sun_nd protocol (SUN ND PROTOCOL_Temporary) is found over the IP layer (IANA protocol number: 77).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1422,Q_PROTO_SUNING,suning,,Suning,Chinese online shopping.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1945,Q_PROTO_SUPER,super,,Super,Prague based agency represents models from Czech and Slovak Republic.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1157,Q_PROTO_SUPPERSOCCER,suppersoccer,,Suppersoccer,This protocol plug-in classifies the http traffic to the host m.supersoccer.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -354,Q_PROTO_SURROGAFIER,surrogafier,,Surrogafier,This protocol plug-in classifies the http traffic to the hosts surrogafier.info and go.vfserver.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1056,Q_PROTO_SURVEYMONKEY,surveymonkey,,surveymonkey,This protocol plug-in classifies the http traffic to the host surveymonkey.com. It also classifies the ssl traffic to the Common Name .surveymonkey.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1109,Q_PROTO_SVN,svn,,Subversion version control system,"Subversion, version control system.",Network Service,http;https;tcp,2,1.6.6 and 1.7.2 (both clients are using svn protocol version 2) (2012-01-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -855,Q_PROTO_SVTPLAY,svtplay,,SVT Play,This protocol plug-in classifies the http traffic to the hosts svt.se and ld-svt-se.sitestat.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1777,Q_PROTO_SWEDBANK,swedbank,,Swedbank,Estonian online banking and investment web portal,Web,http;https;ssl,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1740,Q_PROTO_SWEPIRACY,swepiracy,,Swepiracy,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1422,Q_PROTO_SUNING,suning,,Suning.com,Chinese online shopping.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1945,Q_PROTO_SUPER,super,,Super.cz,Prague based agency represents models from Czech and Slovak Republic.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1157,Q_PROTO_SUPPERSOCCER,suppersoccer,,SupperSoccer.co.id,This protocol plug-in classifies the http traffic to the host m.supersoccer.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +354,Q_PROTO_SURROGAFIER,surrogafier,,Surrogafier.info,This protocol plug-in classifies the http traffic to the hosts surrogafier.info and go.vfserver.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1056,Q_PROTO_SURVEYMONKEY,surveymonkey,,SurveyMonkey.com,This protocol plug-in classifies the http traffic to the host surveymonkey.com. It also classifies the ssl traffic to the Common Name .surveymonkey.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1109,Q_PROTO_SVN,svn,,Subversion,"Subversion, version control system.",Network Service,http;https;tcp,2,PC-Linux-svn-1.7.2 (2012-01-25),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +855,Q_PROTO_SVTPLAY,svtplay,,SVT Play,This protocol plug-in classifies the http traffic to the hosts svt.se and ld-svt-se.sitestat.com.,Web,akamai;http;https,PC-Windows-Browser-www.svt.se (2014-02-26);Mobile-Android-SVT Play 3.1.0 (2014-02-27);iPhone-iOS-SVT Play 2.1.0 (2014-02-27);Windows Phone-Windows Phone OS-SVT Play 0.1.0.2511 (2014-02-26),Mobile-Android-4.1.2-SVTPlay-3.1.0 (2014-02-27);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-26);Windows Phone-Windows Phone OS-8-SVTPlay-0.1.0.2515 (2014-02-26);iPhone-iOS-7.0.4-SVTPlay-2.1.0 (2014-02-27),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1777,Q_PROTO_SWEDBANK,swedbank,,Swedbank.ee,Estonian online banking and investment web portal,Web,http;https;ssl,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1740,Q_PROTO_SWEPIRACY,swepiracy,,Swepiracy Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, 721,Q_PROTO_SWIPE,swipe,,IP with Encryption,The swipe protocol (IP with Encryption) is found over the IP layer (IANA protocol number: 53).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 947,Q_PROTO_SYBASE,sybase,,Sybase,Sybase protocols are used to exchange messages (namely authentication and SQL queries) between database clients and servers developed by the Sybase Company.,Database,mobilink;tds,5.0,10/11/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, 202,Q_PROTO_SYNC,sync,,Sync,The Sync protocol is an RPC service allowing data synchronisation.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,x,,,,,,,, -203,Q_PROTO_SYNFLOOD,synflood,,TCP Syn flood,The synflood protocol detects syn flood attacks.,Standard,tcp,na,10/2/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -204,Q_PROTO_SYSLOG,syslog,,Syslog,Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.,Application Service,tcp;udp,RFC3164,correlog & winsyslog (2012-03-01),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -525,Q_PROTO_T38,t38,,Group 3 facsimile communication over IP,This protocol is used to exchanges FAXes on top on TCP/IP.,Network Service,rtp;tcp;udp,T38 v3,7/2/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, -1763,Q_PROTO_T_ONLINE,t_online,,T-Online,T-Online Deutch ISP web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,x,,,,,,,,,,,, -1326,Q_PROTO_TABELOG,tabelog,,Tabelog,Online Japanese restaurant guide,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1085,Q_PROTO_TACACS_PLUS,tacacs_plus,,TACACS+,"TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco Systems proprietary protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.",Authentication,tcp,1.78,11/2/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, -285,Q_PROTO_TAGGED,tagged,,tagged,"Tagged is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https,20090528,12/1/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -856,Q_PROTO_TAGOO,tagoo,,Tagoo,This protocol plug-in classifies the http traffic to the host tagoo.ru. It also classifies the ssl traffic to the Common Name tagoo.ru.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1423,Q_PROTO_TAIWANLOTTERY,taiwanlottery,,Taiwanlottery,Taiwan lottery website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -857,Q_PROTO_TAKU_FILE_BIN,taku_file_bin,,Taku File Bin,"This protocol plug-in classifies the http traffic to the hosts wwwa.filesend.to, wwwe.filesend.to, web11.filesend.to and search.filesend.to. It also classifies the ssl traffic to the Common Name .filesend.to.",Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -493,Q_PROTO_TALENTTROVE,talenttrove,,TalentTrove,This protocol plug-in classifies the http traffic to the host lafango.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -494,Q_PROTO_TALKBIZNOW,talkbiznow,,Talkbiznow,This protocol plug-in classifies the http traffic to the host talkbiznow.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -495,Q_PROTO_TALTOPIA,taltopia,,Taltopia,This protocol plug-in classifies the http traffic to the host taltopia.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1741,Q_PROTO_TAMILTHUNDER_COM,tamilthunder_com,,Tamilthunder,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -598,Q_PROTO_TANGO,tango,,Tango Video Calls,Tango is an embedded smartphone application dedicated to audio/video-conference.,Audio/Video,http;https;jabber;ssl;stun;tcp;udp,1.4-1.6;2.4;2.6.3-3.0.5(Android and iOS),Mobile-Android-App3.0.5 (2013-10-24);iPhone-iOS-App3.0.5 (2013-10-24),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1098,Q_PROTO_TAOBAO,taobao,,taobao,This protocol plug-in classifies the http traffic to the hosts taobaocdn.com and taobao.com. It also classifies the ssl traffic to the Common Name .taobao.com.,Web,http;https;ssl,20111121,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -496,Q_PROTO_TARINGA,taringa,,Taringa,This protocol plug-in classifies the http traffic to the host taringa.net.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2072,Q_PROTO_TASWEERNEWS,tasweernews,,Tasweernews,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2138,Q_PROTO_TAWARY,tawary,,Tawary,Mauritanian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +203,Q_PROTO_SYNFLOOD,synflood,x,TCP Syn flood,This plug-in is no longer supported.,Standard,tcp,na,10/2/2008,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +204,Q_PROTO_SYSLOG,syslog,,Syslog,Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.,Application Service,tcp;udp,RFC3164,PC-Windows-CorreLog/WinSyslog (2012-03-01),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +525,Q_PROTO_T38,t38,,T.38,This protocol is used to exchanges FAXes on top on TCP/IP.,Network Service,rtp;tcp;udp,T38 v3,7/2/2010,,,,x,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,,, +1763,Q_PROTO_T_ONLINE,t_online,,T-Online.de,T-Online Deutch ISP web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,x,,,,,,,,,,,, +1326,Q_PROTO_TABELOG,tabelog,,Tabelog.com,Online Japanese restaurant guide,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1085,Q_PROTO_TACACS_PLUS,tacacs_plus,,Terminal Access Controller Access-Control System Plus,"TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco Systems proprietary protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.",Authentication,tcp,1.78,11/2/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,x,,, +285,Q_PROTO_TAGGED,tagged,,Tagged.com,"Tagged is a social networking website, enabling users to connect to relatives, friends, or unknown people.",Web,http;https,20090528,12/1/2011,,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +856,Q_PROTO_TAGOO,tagoo,,Tagoo.ru,This protocol plug-in classifies the http traffic to the host tagoo.ru. It also classifies the ssl traffic to the Common Name tagoo.ru.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1423,Q_PROTO_TAIWANLOTTERY,taiwanlottery,,Taiwanlottery.com.tw,Taiwan lottery website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +857,Q_PROTO_TAKU_FILE_BIN,taku_file_bin,,Taku File Bin,"This protocol plug-in classifies the http traffic to the hosts wwwa.filesend.to, wwwe.filesend.to, web11.filesend.to and search.filesend.to. It also classifies the ssl traffic to the Common Name .filesend.to.",Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +493,Q_PROTO_TALENTTROVE,talenttrove,,Lafango.com,This protocol plug-in classifies the http traffic to the host lafango.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +494,Q_PROTO_TALKBIZNOW,talkbiznow,,Talkbiznow.com,This protocol plug-in classifies the http traffic to the host talkbiznow.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +495,Q_PROTO_TALTOPIA,taltopia,,Taltopia.com,This protocol plug-in classifies the http traffic to the host taltopia.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1741,Q_PROTO_TAMILTHUNDER_COM,tamilthunder_com,,Tamilthunder Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +598,Q_PROTO_TANGO,tango,,Tango Video Calls,Tango is an embedded smartphone application dedicated to audio/video-conference.,Audio/Video,http;https;jabber;ssl;stun;tcp;udp,PC-Windows-Browser-tango.me (2014-02-20);PC-Windows-Tango 1.6.14117 (2014-02-24);Mobile-Android-Tango 3.0.5 (2013-07-19);iPhone-iOS-Tango 3.0.5 (2013-07-19),Mobile-Android-Tango-3.4.73370 (2014-02-25);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-20);PC-Windows-7-Tango-1.6.14117 (2014-02-24);iPhone-iOS-Tango-3.0.5 (2014-02-25),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1098,Q_PROTO_TAOBAO,taobao,,Taobaocdn.com,This protocol plug-in classifies the http traffic to the hosts taobaocdn.com and taobao.com. It also classifies the ssl traffic to the Common Name .taobao.com.,Web,http;https;ssl,20111121,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +496,Q_PROTO_TARINGA,taringa,,Taringa.net,This protocol plug-in classifies the http traffic to the host taringa.net.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2072,Q_PROTO_TASWEERNEWS,tasweernews,,Tasweernews.com,Jordanian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2138,Q_PROTO_TAWARY,tawary,,Tawary.com,Mauritanian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2205,Q_PROTO_TAYYAR,tayyar,,Tayyar,Lebaneese news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 687,Q_PROTO_TCF,tcf,,TCF,The tcf protocol (TCF) is found over the IP layer (IANA protocol number: 87).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 321,Q_PROTO_TCHATCHE,tchatche,,tchatche,Tchatche is an instant messaging website.,Web,http;https,20080118,7/17/2009,,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, 205,Q_PROTO_TCP,tcp,,Transmission Control Protocol,TCP is a protocol providing a connection-oriented and reliable transfer service. It is used by most TCP/IP applications today.,Network Service,dns;ip;ip6,TCP v2,10/28/2010,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1084,Q_PROTO_TCP_OVER_DNS,tcp_over_dns,,AnalogBit tcp-over-dns,Tcp-over-dns contains a special dns server and a special dns client. The client and server work in tandem to provide a TCP and UDP tunnel through the standard DNS protocol.,Tunneling,dns,tcp-over-dns v.1.3,10/20/2011,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x 208,Q_PROTO_TDS,tds,,Tabular Data Stream,TDS protocol is used to communicate between SQL applications and a SQL Server.,Database,tcp,tds5;tds7/8;Microsoft SQL Server 2008;Sybase,8/14/2012,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -858,Q_PROTO_TEACHERTUBE,teachertube,,TeacherTube,This protocol plug-in classifies the http traffic to the hosts teachertube.com and teachertube.biz.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -497,Q_PROTO_TEACHSTREET,teachstreet,,TeachStreet,This protocol plug-in classifies the http traffic to the host teachstreet.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +858,Q_PROTO_TEACHERTUBE,teachertube,,TeacherTube.com,This protocol plug-in classifies the http traffic to the hosts teachertube.com and teachertube.biz.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +497,Q_PROTO_TEACHSTREET,teachstreet,,TeachStreet.com,This protocol plug-in classifies the http traffic to the host teachstreet.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 526,Q_PROTO_TEAMSPEAK,teamspeak,,Teamspeak v2,The proprietary TeamSpeak2 protocol is used by gamers and oriented TeamSpeak2 VoIP software.,Instant Messaging,udp,Teamspeak-V2,12/16/2011,,,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, -1120,Q_PROTO_TEAMSPEAK_V3,teamspeak_v3,,TeamSpeak v3,TeamSpeak 3 continues the legacy of the original TeamSpeak communication system. TeamSpeak 3 is not merely an extension of its predecessors but rather a complete rewrite in C++ of its proprietary protocol and core technology.,Instant Messaging,http;https;tcp;udp,32bits 3.0.3 PC-clt;amd64 3.0.1 PC-srv;3.0.0-beta Android-clt,3.0.0 beta Android-clt (2012-04-10);32 bits 3.0.3 PC-clt (2012-04-10),,x,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, +1120,Q_PROTO_TEAMSPEAK_V3,teamspeak_v3,,TeamSpeak v3,TeamSpeak 3 continues the legacy of the original TeamSpeak communication system. TeamSpeak 3 is not merely an extension of its predecessors but rather a complete rewrite in C++ of its proprietary protocol and core technology.,Instant Messaging,http;https;tcp;udp,32bits 3.0.3 PC-clt;amd64 3.0.1 PC-srv;3.0.0-beta Android-clt,Mobile-Android-Teamspeak-3.0.0 beta (2012-04-10);PC-Windows-Teamspeak-3.0.3 (2012-04-10),,x,,x,,,,,,,,,,,,x,x,x,,,,,,,,,,,,,,,,,,, 545,Q_PROTO_TEAMVIEWER,teamviewer,,teamviewer,"TeamViewer is an application that enables a connection to a remote computer in order to perform maintenance operations. It is also possible to show the current display to a remote computer, to transfer files, and to create a VPN tunnel.",Thin Client,http;https;tcp;udp,5;6,11/23/2010,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -859,Q_PROTO_TECHINLINE,techinline,,Techinline,This protocol plug-in classifies the http traffic to the host techinline.com. It also classifies the ssl traffic to the Common Name techinline.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1760,Q_PROTO_TELEGRAAF,telegraaf,,Telegraaf,Dutch news web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1785,Q_PROTO_TELEGRAF,telegraf,,Telegraf,Serbian web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +859,Q_PROTO_TECHINLINE,techinline,,Techinline.com,This protocol plug-in classifies the http traffic to the host techinline.com. It also classifies the ssl traffic to the Common Name techinline.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1760,Q_PROTO_TELEGRAAF,telegraaf,,Telegraaf.nl,Dutch news web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1785,Q_PROTO_TELEGRAF,telegraf,,Telegraf.rs,Serbian web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2198,Q_PROTO_TELEGRAFI,telegrafi,,Telegrafi,Albanian news and media portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 209,Q_PROTO_TELNET,telnet,,Telnet,"Telnet provides a fairly general, bi-directional, eight-bit byte oriented communications facility. Its primary aim is to provide a standard method of interfacing between terminal devices and terminal-oriented processes.",Terminal,tcp,RFC 854,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, 210,Q_PROTO_TELNETS,telnets,,Secure TELNET,Secure version of the Telnet.,Terminal,ssl,RFC 854,,,,,,,992,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1142,Q_PROTO_TEMPOINTERAKTIF,tempointeraktif,,TempoInteraktif,This protocol plug-in classifies the http traffic to the hosts tempointeraktif.com and tempo.co.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1424,Q_PROTO_TENCENT,tencent,,Tencent,"Instant communications service provider in Asia, providing corporate and personal instant messaging, online entertainment and value-added services.",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -555,Q_PROTO_TEREDO,teredo,,Teredo,"The Teredo protocol enables IPv6 tunnelling over UDP, traversing NATs, and with minimum over-head.",Tunneling,udp,20101214,12/14/2010,,,,x,teredo,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1057,Q_PROTO_TF1,tf1,,tf1,This protocol plug-in classifies the http traffic to the host tf1.fr.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1142,Q_PROTO_TEMPOINTERAKTIF,tempointeraktif,,TempoInteraktif.com,This protocol plug-in classifies the http traffic to the hosts tempointeraktif.com and tempo.co.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1424,Q_PROTO_TENCENT,tencent,,Tencent.com,"Instant communications service provider in Asia, providing corporate and personal instant messaging, online entertainment and value-added services.",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +555,Q_PROTO_TEREDO,teredo,,Teredo protocol,"The Teredo protocol enables IPv6 tunnelling over UDP, traversing NATs, and with minimum over-head.",Tunneling,udp,20101214,12/14/2010,,,,x,teredo,,x,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +1057,Q_PROTO_TF1,tf1,,TF1.fr,This protocol plug-in classifies the http traffic to the host tf1.fr.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 211,Q_PROTO_TFTP,tftp,,Trivial File Transfer Protocol,Trivial File Transfer Protocol (TFTP) is a file transfer protocol that is simpler to use than the File Transfer Protocol (FTP) but that proposes less features. TFTP uses the User Datagram Protocol (UDP) rather than the Transmission Control Protocol (TCP).,File Server,udp,TFTP v2,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,, -1425,Q_PROTO_TGBUS,tgbus,,Tgbus,Chinese games portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -362,Q_PROTO_THE_AUTEURS,the_auteurs,,Mubi (formerly The Auteurs),This protocol plug-in classifies the http traffic to the hosts mubi.com and theauteurs.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1484,Q_PROTO_THEPIRATEBAY,thepiratebay,,The Pirate Bay,The most popular Swedish Torrent indexing website.,Web,http;https,20130713,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1158,Q_PROTO_THREE,three,,Three.co,This protocol plug-in classifies the http traffic to the hosts three.co.id and tri.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -274,Q_PROTO_THUNDER,thunder,,Xunlei/Thunder protocol,"Xunlei/Thunder is a Chinese multi-protocol download manager. It uses several DDL websites and P2P protocols to retrieve files. This plug-in only classifies Thunder-specific P2P protocols, and miscellaneous HTTP/HTTPS traffic related to the Xunlei/Thunder application. Downloads made by the application from public HTTP or FTP websites won't be classified as thunder, but as http and ftp_data for most of them. The usage of third party P2P protocols won't be classified as thunder, but as bittorrent or edonkey instead.",Peer to Peer,http;https;socks4;socks5;tcp;udp,Thunder 5 (Windows);Thunder 7.9.10 (Windows),PC-Windows-Xunlei (thunder) v7.9.10.4610 (2013-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -1253,Q_PROTO_TIANYA,tianya,,Tianya,This protocol plug-in classifies the http traffic to the host tianya.cn.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1425,Q_PROTO_TGBUS,tgbus,,Tgbus.com,Chinese games portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +362,Q_PROTO_THE_AUTEURS,the_auteurs,x,The Auteurs,This protocol plug-in used to classify the http traffic to the host theauteurs.com.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2179,Q_PROTO_THE_SIMPSONS_TAPPED_OUT,the_simpsons_tapped_out,,The Simpsons: Tapped Out,Mobile game (EA Games).,Game,http;https;ssl,Mobile-Android;iPhone-iOS,,,x,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,, +1484,Q_PROTO_THEPIRATEBAY,thepiratebay,,ThePirateBay.se,The most popular Swedish Torrent indexing website.,Web,http;https,20130713,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1158,Q_PROTO_THREE,three,,Three.co.id - tri.co.id,This protocol plug-in classifies the http traffic to the hosts three.co.id and tri.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +274,Q_PROTO_THUNDER,thunder,,Xunlei/Thunder protocol,"Xunlei/Thunder is a Chinese multi-protocol download manager. It uses several DDL websites and P2P protocols to retrieve files. This plug-in only classifies Thunder-specific P2P protocols, and miscellaneous HTTP/HTTPS traffic related to the Xunlei/Thunder application. Downloads made by the application from public HTTP or FTP websites won't be classified as thunder, but as http and ftp_data for most of them. The usage of third party P2P protocols won't be classified as thunder, but as bittorrent or edonkey instead.",Peer to Peer,http;https;socks4;socks5;tcp;udp,PC-Windows-Thunder 5.0;PC-Windows-Thunder 7.9.10,PC-Windows-Xunlei-7.9.10.4610 (2013-10-21),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +1253,Q_PROTO_TIANYA,tianya,,Tianya.cn,This protocol plug-in classifies the http traffic to the host tianya.cn.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 212,Q_PROTO_TIBCORDV,tibcordv,,TIBCO RendezVous Protocol,This protocol is used in the bank sector.,Network Service,udp,tibcordv v1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1226,Q_PROTO_TICKETMONSTER,ticketmonster,,Ticketmonster,This protocol plug-in classifies the http traffic to the host ticketmonster.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -860,Q_PROTO_TIDALTV,tidaltv,,TidalTV,This protocol plug-in classifies the http traffic to the host portal.tidaltv.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1226,Q_PROTO_TICKETMONSTER,ticketmonster,,Ticketmonster.co.kr,This protocol plug-in classifies the http traffic to the host ticketmonster.co.kr.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +860,Q_PROTO_TIDALTV,tidaltv,,Portal.TidalTV.com,This protocol plug-in classifies the http traffic to the host portal.tidaltv.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 934,Q_PROTO_TIME,time,,Time Protocol,"This protocol provides a site-independent, machine readable date and time.",Network Service,tcp;udp,RFC 868,10/19/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -2073,Q_PROTO_TIMESOFMALTA,timesofmalta,,Timesofmalta,Maltese news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1227,Q_PROTO_TISTORY,tistory,,Tistory,This protocol plug-in classifies the http traffic to the host tistory.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +2073,Q_PROTO_TIMESOFMALTA,timesofmalta,,Timesofmalta.com,Maltese news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1227,Q_PROTO_TISTORY,tistory,,Tistory.com,This protocol plug-in classifies the http traffic to the host tistory.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, 688,Q_PROTO_TLSP,tlsp,,Transport Layer Security,The tlsp protocol (Transport Layer Security) is found over the IP layer (IANA protocol number: 56).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1246,Q_PROTO_TMALL,tmall,,Tmall,This protocol plug-in classifies the http traffic to the host tmall.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1246,Q_PROTO_TMALL,tmall,,Tmal.com,This protocol plug-in classifies the http traffic to the host tmall.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 213,Q_PROTO_TNS,tns,,Transparent Network Service (Oracle),"Transparent Network Service (TNS) is the Oracle (version 8 or higher) networking technology that provides a single application interface to all industry-standard networking protocols. To connect to a database, users initiate a connect request by passing information (username and password) along with a short name for the database service they wish to connect to.",Database,tcp,oracle8i;oracle9i;oracle10g;oracle11g,7/4/2008,,,,x,tns,,,,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,, -214,Q_PROTO_TNVIP,tnvip,,Tnvip,Telnet VIP is an emulation of the Telnet protocol for VIP (Visual Information Projection) terminals.,Terminal,telnet,Tnvip v1,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1791,Q_PROTO_TO_MATI,to_mati,,To-mati,Greek web portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -861,Q_PROTO_TOKBOX,tokbox,,Tokbox,This protocol plug-in classifies the http traffic to the host tokbox.com. It also classifies the ssl traffic to the Common Name .tokbox.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1133,Q_PROTO_TOKOBAGUS,tokobagus,,Tokobagus,This protocol plug-in classifies the http traffic to the host tokobagus.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -2139,Q_PROTO_TOPKY,topky,,Topky,Slovak news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +214,Q_PROTO_TNVIP,tnvip,,Telnet VIP,Telnet VIP is an emulation of the Telnet protocol for VIP (Visual Information Projection) terminals.,Terminal,telnet,Tnvip v1,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +1791,Q_PROTO_TO_MATI,to_mati,,To-mati.net,Greek web portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +861,Q_PROTO_TOKBOX,tokbox,,Tokbox.com,This protocol plug-in classifies the http traffic to the host tokbox.com. It also classifies the ssl traffic to the Common Name .tokbox.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1133,Q_PROTO_TOKOBAGUS,tokobagus,,Tokobagus.com,This protocol plug-in classifies the http traffic to the host tokobagus.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +2160,Q_PROTO_TOP_CHANNEL,top_channel,,Top.channel,Albanina tv streaming website,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2139,Q_PROTO_TOPKY,topky,,Topky.sk,Slovak news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 895,Q_PROTO_TOR,tor,,Tor,Tor is an application that intends to provide online anonymity.,Encrypted,https;ssl,0.2.1.30,10/8/2012,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -2074,Q_PROTO_TORG,torg,,Torg,Uzbek classified ads,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1058,Q_PROTO_TORRENTDOWNLOADS,torrentdownloads,,torrentdownloads,This protocol plug-in classifies the http traffic to the host torrentdownloads.net.,Web,http;https,20130713,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1059,Q_PROTO_TORRENTZ,torrentz,,torrentz,This protocol plug-in classifies the http traffic to the hosts torrentz.com and torrentz.eu.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1568,Q_PROTO_TOUCH,touch,,touch,"Touch is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,http;https;ssl;tcp,3.4.3,Mobile-Android2.3.5-App3.4.3 (2013-09-16);iPhone-iOS6.1.3-App3.4.2 (2013-09-16),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, +2074,Q_PROTO_TORG,torg,,Torg.com,Uzbek classified ads,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1058,Q_PROTO_TORRENTDOWNLOADS,torrentdownloads,,TorrentDownloads.net,Bittorrent tracker search engine,Web,http;https,20130713,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1059,Q_PROTO_TORRENTZ,torrentz,,Torrentz.com,This protocol plug-in classifies the http traffic to the hosts torrentz.com and torrentz.eu.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1568,Q_PROTO_TOUCH,touch,,touch,"Touch is a cross-platform application providing free text, picture, and video messaging.",Instant Messaging,http;https;ssl;tcp,PC-Windows-Touch 3.4.3,Mobile-Android-4.2.1-Touch-3.4.2 (2014-03-08);iPhone-iOS-7.0.4-Touch-3.4.4 (2014-02-20),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, 718,Q_PROTO_TP_PLUS_PLUS,tp_plus_plus,,TP++ Transport Protocol,The tp_plus_plus protocol (TP++ Transport Protocol) is found over the IP layer (IANA protocol number: 39).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1947,Q_PROTO_TRADEME,trademe,,Trademe,New Zealander online trading site.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1972,Q_PROTO_TRANSFERBIGFILES_COM,transferbigfiles_com,,transferbigfiles.com,Classifies web browsing on the transferbigfiles.com Direct DownLoad links service.,Web,http;https;ssl,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -498,Q_PROTO_TRAVBUDDY,travbuddy,,TravBuddy,This protocol plug-in classifies the http traffic to the host travbuddy.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -499,Q_PROTO_TRAVELLERSPOINT,travellerspoint,,Travellerspoint,This protocol plug-in classifies the http traffic to the host travellerspoint.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -291,Q_PROTO_TRAVELOCITY,travelocity,,Travelocity,This protocol plug-in classifies the http traffic to the host travelocity.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -1164,Q_PROTO_TRAVIAN,travian,,Travian,This protocol plug-in classifies the http traffic to the host travian.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2140,Q_PROTO_TREND,trend,,Trend,Azerbaijani news portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -712,Q_PROTO_TRENDMICRO_UPDATE,trendmicro_update,,Trendmicro Update,Trendmicro_update is the protocol used for trendmicro softwares updates.,Web,http;https,Trendmicro Antivirus 13.0.1303,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -500,Q_PROTO_TRIBE,tribe,,Tribe,This protocol plug-in classifies the http traffic to the host tribe.net.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1161,Q_PROTO_TRIBUNNEWS,tribunnews,,Tribunnews,This protocol plug-in classifies the http traffic to the host tribunnews.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -303,Q_PROTO_TROMBI,trombi,,Trombi,This protocol plug-in classifies the http traffic to the host trombi.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1947,Q_PROTO_TRADEME,trademe,,Trademe.co.nz,New Zealander online trading site.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1972,Q_PROTO_TRANSFERBIGFILES_COM,transferbigfiles_com,,transferbigfiles.com,Classifies web browsing on the transferbigfiles.com Direct DownLoad links service.,Web,http;https;ssl,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +498,Q_PROTO_TRAVBUDDY,travbuddy,,TravBuddy.com,This protocol plug-in classifies the http traffic to the host travbuddy.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +499,Q_PROTO_TRAVELLERSPOINT,travellerspoint,,Travellerspoint.com,This protocol plug-in classifies the http traffic to the host travellerspoint.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +291,Q_PROTO_TRAVELOCITY,travelocity,,Travelocity.com,This protocol plug-in classifies the http traffic to the host travelocity.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +1164,Q_PROTO_TRAVIAN,travian,,Travian.co.id,This protocol plug-in classifies the http traffic to the host travian.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2140,Q_PROTO_TREND,trend,,Trend.az,Azerbaijani news portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +712,Q_PROTO_TRENDMICRO_UPDATE,trendmicro_update,,Trendmicro Update protocol,Trendmicro_update is the protocol used for trendmicro softwares updates.,Web,http;https,Trendmicro Antivirus 13.0.1303,2/23/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +500,Q_PROTO_TRIBE,tribe,,Tribe.net,This protocol plug-in classifies the http traffic to the host tribe.net.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1161,Q_PROTO_TRIBUNNEWS,tribunnews,,Tribunnews.com,This protocol plug-in classifies the http traffic to the host tribunnews.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +303,Q_PROTO_TROMBI,trombi,,Trombi.com,This protocol plug-in classifies the http traffic to the host trombi.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 689,Q_PROTO_TRUNK_1,trunk_1,,Trunk 1,The trunk_1 protocol (Trunk 1) is found over the IP layer (IANA protocol number: 23).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 690,Q_PROTO_TRUNK_2,trunk_2,,Trunk 2,The trunk_2 protocol (Trunk 2) is found over the IP layer (IANA protocol number: 24).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 691,Q_PROTO_TTP,ttp,,TTP,The ttp protocol (TTP) is found over the IP layer (IANA protocol number: 84).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1060,Q_PROTO_TU,tu,,TuneIn,This protocol plug-in classifies the http traffic to the host tu.tv.,Audio/Video,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1061,Q_PROTO_TUBE8,tube8,,tube8,This protocol plug-in classifies the http traffic to the host tube8.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -862,Q_PROTO_TUDOU,tudou,,Tudou,This protocol plug-in classifies the http traffic to the hosts tudou.com and at-img4.tdimg.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -501,Q_PROTO_TUENTI,tuenti,,Tuenti,This protocol plug-in classifies the http traffic to the host tuenti.com. It also classifies the ssl traffic to the Common Name .tuenti.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -502,Q_PROTO_TUMBLR,tumblr,,Tumblr,This protocol plug-in classifies the http traffic to the host tumblr.com. It also classifies the ssl traffic to the Common Name TUMBLR.COM.,Web,http;https;ssl,"20131105 (Windows),3.4.3 (iOS),3.5.0.16 (Android)",Mobile-Android-App3.5.0.16 (2014-01-09);PC-Windows-Browser-20131104 (2014-01-09);iPhone-iOS-App3.4.3 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1181,Q_PROTO_TUNEIN,tunein,,TuneIn,This protocol plug-in classifies the http traffic to the hosts tunein.com and radiotime.com.,Audio/Video,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1466,Q_PROTO_TUNEWIKI,tunewiki,,Tunewiki,"Lyrics and photos sharing webservice, available in web and mobile-app versions.",Web,http;https,Web version (20130425),PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1948,Q_PROTO_TUNISIA_SAT,tunisia_sat,,Tunisia-sat,Tunisian forum hosting platform.,Web,http;https,20131023,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1949,Q_PROTO_TUT,tut,,Tut,Belarusian internet portal.,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1062,Q_PROTO_TV,tv,,Tv4Play,This protocol plug-in classifies the http traffic to the host .tv.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1792,Q_PROTO_TV2,tv2,,Tv2,Danish news portal,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -863,Q_PROTO_TV4PLAY,tv4play,,Tv4Play,This protocol plug-in classifies the http traffic to the hosts tv4play.se and .tv4.se. It also classifies the ssl traffic to the Common Name ec2-184-73-252-58.compute-1.amazonaws.com.,Web,http;https;ssl,"20131104,2.4.0 (iOS),2.2.0 (Android)",Mobile-Android-App2.2.0 (2013-11-25);iPhone-iOS-App2.4.0 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1060,Q_PROTO_TU,tu,,Tu.tv,This protocol plug-in classifies the http traffic to the host tu.tv.,Audio/Video,http;https,PC-Windows-Browser-www.tu.tv (2013-07-13),3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1061,Q_PROTO_TUBE8,tube8,,Tube8.com,This protocol plug-in classifies the http traffic to the host tube8.com.,Web,http;https,PC-Windows-Browser-www.tube8.com (2014-03-14),PC-Windows-7-Chrome-32.0.1700.102 (2014-01-29),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +862,Q_PROTO_TUDOU,tudou,,Tudou.com,This protocol plug-in classifies the http traffic to the hosts tudou.com and at-img4.tdimg.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +501,Q_PROTO_TUENTI,tuenti,,Tuenti.com,This protocol plug-in classifies the http traffic to the host tuenti.com. It also classifies the ssl traffic to the Common Name .tuenti.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +502,Q_PROTO_TUMBLR,tumblr,,Tumblr.com,This protocol plug-in classifies the http traffic to the host tumblr.com. It also classifies the ssl traffic to the Common Name TUMBLR.COM.,Web,apple_hls;http;https;ssl,PC-Windows-Browser-www.tumblr.com (2014-03-14);iPhone-iOS-tumblr 3.5.6 (2014-03-09);Mobile-Android-tumblr 3.5.6.02 (2014-03-08),Mobile-Android-Post To Tumblr-3.5.5.07 (2014-03-08);PC-Windows-7-Chrome-32.0.1700.107m (2014-03-14);PC-Windows-7-Chrome-32.0.1700.107m-Post To Tumblr-3.25 (2014-02-13);Windows Phone-Windows Phone OS-Tumblr-1.0.1.7 (2014-02-14);iPhone-iOS-Tumblr-3.5.6 (2014-03-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1181,Q_PROTO_TUNEIN,tunein,,TuneIn,This protocol plug-in classifies the http traffic to the hosts tunein.com and radiotime.com.,Audio/Video,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1466,Q_PROTO_TUNEWIKI,tunewiki,,TuneWiki.com,"Lyrics and photos sharing webservice, available in web and mobile-app versions.",Web,http;https,Web version (20130425),PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1948,Q_PROTO_TUNISIA_SAT,tunisia_sat,,Tunisia-Sat.com,Tunisian forum hosting platform.,Web,http;https,20131023,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1949,Q_PROTO_TUT,tut,,Tut.by,Belarusian internet portal.,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1062,Q_PROTO_TV,tv,,Tv.com,This protocol plug-in classifies the http traffic to the host .tv.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1792,Q_PROTO_TV2,tv2,,Tv2.dk,Danish news portal,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +863,Q_PROTO_TV4PLAY,tv4play,,Tv4Play.se,This protocol plug-in classifies the http traffic to the hosts tv4play.se and .tv4.se. It also classifies the ssl traffic to the Common Name ec2-184-73-252-58.compute-1.amazonaws.com.,Web,http;https;ssl,PC-Windows-Browser-www.tv4play.se (2013-11-04);iPhone-iOS-TV4 Play 2.4.0;Mobile-Android-TV4 Play 2.2.0,Mobile-Android-TV4 Play-2.2.0 (2013-11-25);iPhone-iOS-TV4 Play-2.4.0 (2013-11-25),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 546,Q_PROTO_TVANTS,tvants,,TVAnts Protocol,"TVAnts is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite as well as WebTV.",Audio/Video,tcp;udp,1.0.59,10/5/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -1911,Q_PROTO_TVKING,tvking,,TvKing,TvKing is an application which is able to get video stream lists from its own web site and from other ones. Classifies HTTP web browsing only.,Web,http;https,20131107,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, -2141,Q_PROTO_TVNET,tvnet,,Tvnet,Latvian news and content portal,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -575,Q_PROTO_TVUPLAYER,tvuplayer,,TVU Network Player,TVUPlayer is an application intended to watch TV in peer_to-peer.,Audio/Video,http;https;ssl;tcp;udp,>=2.5.3,TVUPlayer 2.5.3.1 (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -864,Q_PROTO_TWITPIC,twitpic,,Twitpic,This protocol plug-in classifies the http traffic to the host twitpic.com. It also classifies the ssl traffic to the Common Name twitpic.com.,Web,http;https;ssl,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -503,Q_PROTO_TWITTER,twitter,,Twitter,Online microblogging service that enables its users to read and send text-based short messages.,Web,http;https;ssl,REST API version 1;5.0.8 (Android);6.0.2 (iOS),Mobile-Android4.1.2-App5.0.8 (2014-01-06);Mobile-iOS7.0.4-App6.0.2 (2014-01-06);PC-Windows-BrowserChrome-20140106 (2014-01-06),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, -1501,Q_PROTO_UBUNTU_ONE,ubuntu_one,,Ubuntu One,Ubuntu One is a cloud file storage service available on PC and smartphones.,Application Service,https;ssl,"4.1.91(Windows),20130627(Android)",PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1759,Q_PROTO_UCOZ,ucoz,,uCoz,uCoz is a free web hosting with a built-in content management system.,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1911,Q_PROTO_TVKING,tvking,,TvKing,TvKing is an application which is able to get video stream lists from its own web site and from other ones. Classifies HTTP web browsing only.,Web,http;https,20131107,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x, +2141,Q_PROTO_TVNET,tvnet,,Tvnet.lv,Latvian news and content portal,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +575,Q_PROTO_TVUPLAYER,tvuplayer,,TVU Network Player,TVUPlayer is an application intended to watch TV in peer_to-peer.,Audio/Video,http;https;ssl;tcp;udp,>=2.5.3,PC-Windows-TVUPlayer-2.5.3.1 (2011-11-30),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +864,Q_PROTO_TWITPIC,twitpic,,Twitpic.com,This protocol plug-in classifies the http traffic to the host twitpic.com. It also classifies the ssl traffic to the Common Name twitpic.com.,Web,amazon_aws;http;https;ssl,PC-Windows-Browser-www.twitpic.com (2014-02-25);Mobile-Android (2014-02-25);iPhone-iOS (2014-02-26),Mobile-Android-4.1.2-Twitpic-1.2.1 (2014-02-25);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-25);iPhone-iOS-7.0.4-Twitpic-1.2.1 (2014-02-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +503,Q_PROTO_TWITTER,twitter,,Twitter.com,Online microblogging service that enables its users to read and send text-based short messages.,Web,http;https;ssl,PC-Windows-Browser (2014-03-07);PC-Windows-Twitter REST API 1.0;Mobile-Android-Twitter 5.2.1 (2014-03-09);iPhone-iOS-Twitter 6.0.2,Mobile-Android-4.4.2-Twitter-5.2.1 (2014-03-09);PC-Windows-7-Chrome-32.0.1700.107-Twitter-3.5.6 (2014-02-07);PC-Windows-7-Chrome-33.0.1750.146 (2014-03-07);iPhone-iOS-7.0.4-Twitter-6.0.2 (2014-01-06),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, +1501,Q_PROTO_UBUNTU_ONE,ubuntu_one,,Ubuntu One,Ubuntu One is a cloud file storage service available on PC and smartphones.,Application Service,https;ssl,"4.1.91(Windows),20130627(Android)",PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1759,Q_PROTO_UCOZ,ucoz,,uCoz.ru,uCoz is a free web hosting with a built-in content management system.,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 215,Q_PROTO_UCP,ucp,,Universal Computer Protocol,Universal Computer Protocol is used by some mobile phones to send SMS.,Wap,tcp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, -1426,Q_PROTO_UDN,udn,,Udn,Taiwan news site.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1426,Q_PROTO_UDN,udn,,Udn.com,Taiwan news site.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 216,Q_PROTO_UDP,udp,,User Datagram Protocol,The User Datagram Protocol is a transport protocol providing a simple but non-reliable message transfer service in IP networks. It is used by most applications that do not require a reliable delivery transmission service.,Network Service,ip;ip6,UDP v1,7/4/2008,,x,,,,,,x,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -692,Q_PROTO_UDPLITE,udplite,,Connectionless protocol very similar to UDP,The udplite protocol (Connectionless protocol very similar to UDP) is found over the IP layer (IANA protocol number: 136).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1967,Q_PROTO_ULTRASHARE_NET,ultrashare_net,,ultrashare.net,Classifies web browsing on the ultrashare.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1238,Q_PROTO_ULTRASURF,ultrasurf,,Ultrasurf,Ultrasurf is a tunneling protocol used by the Ultrasurf software for Windows. The classification is based on an IP address range analysis.,Tunneling,http;https;ip,"10.08,12.02",Ultrasurf u12.02 (2012-08-09),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x +692,Q_PROTO_UDPLITE,udplite,,UDPLite,The udplite protocol (Connectionless protocol very similar to UDP) is found over the IP layer (IANA protocol number: 136).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +2167,Q_PROTO_ULTIMAHORA,ultimahora,,Ultimahora,Honduran news portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1967,Q_PROTO_ULTRASHARE_NET,ultrashare_net,,ultrashare.net,Classifies web browsing on the ultrashare.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1238,Q_PROTO_ULTRASURF,ultrasurf,,Ultrasurf,Ultrasurf is a tunneling protocol used by the Ultrasurf software for Windows. The classification is based on an IP address range analysis.,Tunneling,http;https;ip,"10.08,12.02",PC-Windows-Ultrasurf-u12.02 (2012-08-09),,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x 1576,Q_PROTO_UNASSIGNED_IP_PROT_143,unassigned_ip_prot_143,,IANA Unassigned Internet Protocol Number 143,The unassigned_ip_prot_143 protocol (IANA Unassigned Internet Protocol Number 143) is found over the IP layer (IANA protocol number: 143).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1577,Q_PROTO_UNASSIGNED_IP_PROT_144,unassigned_ip_prot_144,,IANA Unassigned Internet Protocol Number 144,The unassigned_ip_prot_144 protocol (IANA Unassigned Internet Protocol Number 144) is found over the IP layer (IANA protocol number: 144).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1578,Q_PROTO_UNASSIGNED_IP_PROT_145,unassigned_ip_prot_145,,IANA Unassigned Internet Protocol Number 145,The unassigned_ip_prot_145 protocol (IANA Unassigned Internet Protocol Number 145) is found over the IP layer (IANA protocol number: 145).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, @@ -1815,219 +1870,222 @@ id,protocol_id_mane,name,deprecated,longname,description,family,layer_below,supp 1683,Q_PROTO_UNASSIGNED_IP_PROT_250,unassigned_ip_prot_250,,IANA Unassigned Internet Protocol Number 250,The unassigned_ip_prot_250 protocol (IANA Unassigned Internet Protocol Number 250) is found over the IP layer (IANA protocol number: 250).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1684,Q_PROTO_UNASSIGNED_IP_PROT_251,unassigned_ip_prot_251,,IANA Unassigned Internet Protocol Number 251,The unassigned_ip_prot_251 protocol (IANA Unassigned Internet Protocol Number 251) is found over the IP layer (IANA protocol number: 251).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1685,Q_PROTO_UNASSIGNED_IP_PROT_252,unassigned_ip_prot_252,,IANA Unassigned Internet Protocol Number 252,The unassigned_ip_prot_252 protocol (IANA Unassigned Internet Protocol Number 252) is found over the IP layer (IANA protocol number: 252).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1063,Q_PROTO_UNIVISION,univision,,univision,This protocol plug-in classifies the http traffic to the host univision.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -4,Q_PROTO_UNKNOWN,unknown,,Unknown,"Unknown is a virtual protocol created for DPI that represents flows that are not recognized by the system. Most of the time, its presence is due to the existence of a business application whose specifications are not made available to the public. Such flows can be defined in the system by means of a User Defined Application.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -2075,Q_PROTO_UOL,uol,,Uol,Brazalian news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1970,Q_PROTO_UPLOAD_COM,upload_com,,CNET Upload.com (formerly files-upload.com),Classifies web browsing on the CNET upload.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20131210 (2013-12-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1963,Q_PROTO_UPLOADED_NET,uploaded_net,,uploaded.net,Classifies web browsing on the uploaded.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1064,Q_PROTO_UPLOADING,uploading,,uploading,This protocol plug-in classifies the http traffic to the host uploading.com. It also classifies the ssl traffic to the Common Name api.uploading.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1993,Q_PROTO_UPLOADINGIT_COM,uploadingit_com,,uploadingit.com,Classifies web browsing on the uploadingit.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1742,Q_PROTO_USABIT_COM,usabit_com,,Usabit,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -1065,Q_PROTO_USATODAY,usatoday,,usatoday,This protocol plug-in classifies the http traffic to the host usatoday.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -865,Q_PROTO_USEJUMP,usejump,,Usejump,This protocol plug-in classifies the http traffic to the host usejump.com. It also classifies the ssl traffic to the Common Name beta.usejump.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -866,Q_PROTO_USTREAM,ustream,,UStream,Ustream is a live video broadcasting webservice available on PC and mobile platforms.,Web,apple_hls;http;https;rtmp;ssl,20131010,Mobile-Android-Browser (2013-10-10);Mobile-WindowsPhone7-Browser (2013-10-10);iPhone-iOS-Browser (2013-10-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1063,Q_PROTO_UNIVISION,univision,,Univision.com,This protocol plug-in classifies the http traffic to the host univision.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +4,Q_PROTO_UNKNOWN,unknown,,Unknown virtual protocol,"Unknown is a virtual protocol created for DPI that represents flows that are not recognized by the system. Most of the time, its presence is due to the existence of a business application whose specifications are not made available to the public. Such flows can be defined in the system by means of a User Defined Application.",Standard,,na,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +2075,Q_PROTO_UOL,uol,,UOL.com.br,Brazalian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1970,Q_PROTO_UPLOAD_COM,upload_com,,Upload.cnet.com,Classifies web browsing on the CNET upload.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2013-12-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1963,Q_PROTO_UPLOADED_NET,uploaded_net,,uploaded.net,Classifies web browsing on the uploaded.net Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1064,Q_PROTO_UPLOADING,uploading,,Uploading.com,This protocol plug-in classifies the http traffic to the host uploading.com. It also classifies the ssl traffic to the Common Name api.uploading.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1993,Q_PROTO_UPLOADINGIT_COM,uploadingit_com,,uploadingit.com,Classifies web browsing on the uploadingit.com Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1742,Q_PROTO_USABIT_COM,usabit_com,,Usabit Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +1065,Q_PROTO_USATODAY,usatoday,,USAToday.com,This protocol plug-in classifies the http traffic to the host usatoday.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +865,Q_PROTO_USEJUMP,usejump,,Usejump.com,This protocol plug-in classifies the http traffic to the host usejump.com. It also classifies the ssl traffic to the Common Name beta.usejump.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +866,Q_PROTO_USTREAM,ustream,,UStream,Ustream is a live video broadcasting webservice available on PC and mobile platforms.,Web,apple_hls;http;https;rtmp;ssl,PC-Windows-Browser-www.ustream.tv (2013-10-10),Mobile-Android-Browser- (2013-10-18);PC-Windows-Firefox (2014-01-31);PC-Windows-Ustream Producer-5.0.2 (2014-01-31);Windows Phone-Windows Phone OS-7-Browser (2013-10-18);iPhone-iOS-7.0.4-Ustream-2.4.3 (2014-02-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 694,Q_PROTO_UTI,uti,,UTI,The uti protocol (UTI) is found over the IP layer (IANA protocol number: 120).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -580,Q_PROTO_UTP,utp,,uTP (Micro Transport Protocol),BitTorrent transport layer.,Peer to Peer,udp,0;1,Transport protocol for Bittorrent (tested with Bittorrent client) (2013-10-14),,,,x,,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,, -743,Q_PROTO_UUSEE,uusee,,UUSee Protocol,"Uusee is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite TV as well as WebTV on PC. It uses the network coding technology.",Audio/Video,http;https;tcp;udp,20110314,10/6/2011,,x,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +580,Q_PROTO_UTP,utp,,uTP (Micro Transport Protocol),BitTorrent transport layer.,Peer to Peer,udp,;,10/14/2013,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,, +743,Q_PROTO_UUSEE,uusee,,UUSee Protocol,"Uusee is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and satellite TV as well as WebTV on PC. It uses the network coding technology.",Audio/Video,http;https;tcp;udp,20110314,10/6/2011,,x,,x,,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, 1305,Q_PROTO_V5UA,v5ua,,V5.2-User Adaptation Layer,"V5UA is a transport mechanism for V5.2 messages in an IP network, through SCTP.",Network Service,sctp,1.2 - RFC 3807,,x,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -867,Q_PROTO_VAKAKA,vakaka,,Vakaka,This protocol plug-in classifies the http traffic to the host vakaka.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -505,Q_PROTO_VAMPIREFREAKS,vampirefreaks,,VampireFreaks,This protocol plug-in classifies the http traffic to the host vampirefreaks.com. It also classifies the ssl traffic to the Common Name vampirefreaks.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2142,Q_PROTO_VANGUARDNGR,vanguardngr,,Vanguardngr,Nigerian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1950,Q_PROTO_VARZESH3,varzesh3,,Varzesh3,Persian online sports new portal.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1951,Q_PROTO_VBOX7,vbox7,,Vbox7,Bulgarian video streaming website.,Web,http;https;ssl,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1743,Q_PROTO_VECTOR,vector,,Vector,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -868,Q_PROTO_VEETLE,veetle,,Veetle,This protocol plug-in classifies the http traffic to the host veetle.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -577,Q_PROTO_VEOHTV,veohtv,,veohtv,VeohTV is a VOD streaming service which includes both client software and a website with embedded flash videos.,Audio/Video,http;https;llnwd;rtmp;ssl;udp,20101116,VEOH Player beta (2011-10-07),,x,,x,veohtv,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1182,Q_PROTO_VEVO,vevo,,VEVO,This protocol plug-in classifies the http traffic to the host .vevo.com.,Audio/Video,http;https;rtmp,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -2076,Q_PROTO_VG,vg,,Vg,Norwegian news portal,Web,http;https;ssl,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -304,Q_PROTO_VIADEO,viadeo,,viadeo,Viadeo is a web site designed to manage professional contacts.,Web,http;https,20101221,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -597,Q_PROTO_VIBER,viber,,viber,"Viber is a free embedded voice over-ip application, for smartphones.",Audio/Video,amazon_aws;http;https;ssl;tcp;udp,4.0(iOS);4.0.0(Android),Mobile-Android-App4.0.0 (2013-11-14);iPhone-iOS-App4.0 (2013-11-14),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, -1066,Q_PROTO_VIDEOBASH,videobash,,videobash,This protocol plug-in classifies the http traffic to the host videobash.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1067,Q_PROTO_VIDEOSURF,videosurf,,videosurf,This protocol plug-in classifies the http traffic to the host videosurf.com.,Web,http;https,20130713,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1068,Q_PROTO_VIETBAO,vietbao,,vietbao,This protocol plug-in classifies the http traffic to the host vietbao.vn.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2143,Q_PROTO_VIJESTI,vijesti,,Vijesti,Serbian nwes portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1069,Q_PROTO_VIMEO,vimeo,,Vimeo,"Vimeo is a high definition video streaming platform, to be accessed from a web browser or mobile applications.",Audio/Video,http;https;ssl,"20140106,1.1.41 (Android)",Mobile-Android-App1.1.41 (2014-01-06);PC-Windows-Browser-20140106 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +867,Q_PROTO_VAKAKA,vakaka,,Vakaka.com,This protocol plug-in classifies the http traffic to the host vakaka.com.,Peer to Peer,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +505,Q_PROTO_VAMPIREFREAKS,vampirefreaks,,VampireFreaks.com,This protocol plug-in classifies the http traffic to the host vampirefreaks.com. It also classifies the ssl traffic to the Common Name vampirefreaks.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2142,Q_PROTO_VANGUARDNGR,vanguardngr,,Vanguardngr.com,Nigerian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1950,Q_PROTO_VARZESH3,varzesh3,,Varzesh3.com,Persian online sports new portal.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1951,Q_PROTO_VBOX7,vbox7,,VBOX7.com,Bulgarian video streaming website.,Web,http;https;ssl,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2201,Q_PROTO_VECERNJI,vecernji,,Vecernji,Crotaian news portal,Web,http;https,20140318,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1743,Q_PROTO_VECTOR,vector,,Vector Bittorrent tracker,Bittorrent tracker search engine,Peer to Peer,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +868,Q_PROTO_VEETLE,veetle,,Veetle.com,This protocol plug-in classifies the http traffic to the host veetle.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +577,Q_PROTO_VEOHTV,veohtv,,veohtv,VeohTV is a VOD streaming service which includes both client software and a website with embedded flash videos.,Audio/Video,http;https;llnwd;rtmp;ssl;udp,20101116,PC-Windows-VEOH Player-beta (2011-10-07),,x,,x,veohtv,,,,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1182,Q_PROTO_VEVO,vevo,,VEVO.com,This protocol plug-in classifies the http traffic to the host .vevo.com.,Audio/Video,http;https;rtmp,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +2076,Q_PROTO_VG,vg,,Vg.no,Norwegian news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +304,Q_PROTO_VIADEO,viadeo,,Viadeo.com,Viadeo is a web site designed to manage professional contacts.,Web,http;https,20101221,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +597,Q_PROTO_VIBER,viber,,viber,"Viber is a free embedded voice over-ip application, for smartphones.",Audio/Video,amazon_aws;http;https;ssl;tcp;udp,iPhone-iOS-Viber 4.0;Mobile-Android-Viber 4.0.0,Mac-Mac OS-Viber-? (2014-02-06);Mobile-Android-Viber-4.1.1.10 (2014-01-17);Nokia Mobile-Symbian-Viber-2.1.252 (2014-01-31);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-28);PC-Windows-7-Viber-? (2014-01-28);Windows Phone-Windows Phone OS-Viber-3.1.1 (2014-01-17);iPhone-iOS-Viber-4.1.1 (2014-01-17),,x,,x,,,,,x,,,,,,,x,,,,,,x,,,,,x,,,,,,,,,, +1066,Q_PROTO_VIDEOBASH,videobash,,VideoBash.com,This protocol plug-in classifies the http traffic to the host videobash.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1067,Q_PROTO_VIDEOSURF,videosurf,,VideoSurf.com,This protocol plug-in classifies the http traffic to the host videosurf.com.,Web,http;https,20130713,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1068,Q_PROTO_VIETBAO,vietbao,,VietBao.vn,This protocol plug-in classifies the http traffic to the host vietbao.vn.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2143,Q_PROTO_VIJESTI,vijesti,,Vijesti.me,Serbian news portal.,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1069,Q_PROTO_VIMEO,vimeo,,Vimeo.com,"Vimeo is a high definition video streaming platform, to be accessed from a web browser or mobile applications.",Audio/Video,http;https;ssl,PC-Windows-Browser-www.vimeo.com (2014-01-06);Mobile-Android-Vimeo 1.1.41,Mobile-Android-Vimeo-1.1.41 (2014-01-06);PC-Windows-7-Chrome-31.0.1650.63 (2014-01-06);PC-Windows-7-Chrome-31.0.1650.63-Vimeo-3.0.0 (2014-01-06);Windows Phone-Windows Phone OS-8-Vimeo-1.2.0.0 (2014-01-30);iPhone-iOS-7.0.4-Vimeo-4.0.7 (2014-01-30),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, 217,Q_PROTO_VINES,vines,,Vines Banyan Systems,"Vines is a network layer protocol, enabling the routing of packets from the transport layer from one node to the transport layer in another node.",Network Service,8021q;eth;ip;ppp;snap,Vines v7.0,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -695,Q_PROTO_VISA,visa,,VISA Protocol,The visa protocol (VISA Protocol) is found over the IP layer (IANA protocol number: 70).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -2077,Q_PROTO_VISIR,visir,,Visir,Icelandic news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1129,Q_PROTO_VIVANEWS,vivanews,,Vivanews,This protocol plug-in classifies the http traffic to the hosts vivanews.com and viva.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +695,Q_PROTO_VISA,visa,,VISA,The visa protocol (VISA Protocol) is found over the IP layer (IANA protocol number: 70).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, +2077,Q_PROTO_VISIR,visir,,Visir.is,Icelandic news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1129,Q_PROTO_VIVANEWS,vivanews,,Vivanews.com,This protocol plug-in classifies the http traffic to the hosts vivanews.com and viva.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 218,Q_PROTO_VJC_COMP,vjc_comp,,Van Jacobson Compressed,"Van Jacobson TCP/IP Header Compression is a data compression protocol described in RFC 1144, specifically designed by Van Jacobson to improve TCP/IP performance.",Tunneling,ppp,RFC 1144,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x 219,Q_PROTO_VJC_UNCOMP,vjc_uncomp,,Van Jacobson Uncompressed,"Van Jacobson TCP/IP Header Compression is a data compression protocol described in RFC 1144, specifically designed by Van Jacobson to improve TCP/IP performance.",Tunneling,ppp,RFC 1144,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x -504,Q_PROTO_VKONTAKTE,vkontakte,,VKontakte,vkontakte is an European social network service popular among Russian-Speaking users. It is quite similar to Facebook.,Forum,http;https;ssl,3.3.2 (Android);2.0 (iOS);3.0.3 (WinPhone),Mobile-Android-App3.3.2 (2014-01-06);Mobile-WindowsPhone-App3.0.3.0 (2014-01-06);PC-Windows-Chrome-20140114 (2014-01-14);PC-Windows-ChromeWidget-20140117 (2014-01-17);iPhone-iOS7.0.4-App2.0 (2014-01-06),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, +504,Q_PROTO_VKONTAKTE,vkontakte,,Vk.com (Vkontakte),vkontakte is an European social network service popular among Russian-Speaking users. It is quite similar to Facebook.,Forum,http;https;ssl,Mobile-Android-VK 3.4.1 (2014-03-10);iPhone-iOS-VK 2.0;Windows Phone-Windows Phone OS-VK 3.0.3,BlackBerry-BlackBerry OS-VK-1.0.9.0- (2014-03-11);Mobile-Android-4.4.2-VK-3.4.1 (2014-01-06);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-17);PC-Windows-7-Chrome-32.0.1700.76-VK-4.8.8 (2014-03-09);Windows Phone-Windows Phone OS-VK-3.0.3.0- (2014-01-06);iPhone-iOS-7.0.4-VK-2.0- (2014-01-06),,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,x,,,,,,,,,, 696,Q_PROTO_VMTP,vmtp,,VMTP,The vmtp protocol (VMTP) is found over the IP layer (IANA protocol number: 81).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 220,Q_PROTO_VMWARE,vmware,,VMWare,"VMWare is a protocol used by the VMWare application, allowing it to have network interfaces and remote access to a virtual machine.",Thin Client,tcp,na,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -2144,Q_PROTO_VNEXPRESS,vnexpress,,Vnexpress,Vietnamese news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -573,Q_PROTO_VODDLER,voddler,,Voddler,Voddler is a streaming client application distributing movies and television programming using a patented hybrid peer-to-peer distribution system.,Audio/Video,http;https;ssl;tcp;udp,20101112,in test plan 4.10 : impossible to make pcap from France (2011-10-03),,x,,x,voddler,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -506,Q_PROTO_VOX,vox,,Vox,This protocol plug-in classifies the http traffic to the host vox.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2144,Q_PROTO_VNEXPRESS,vnexpress,,VnExpress.net,Vietnamese news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +573,Q_PROTO_VODDLER,voddler,,Voddler.com,Voddler is a streaming client application distributing movies and television programming using a patented hybrid peer-to-peer distribution system.,Audio/Video,http;https;ssl;tcp;udp,20101112,10/3/2011,,x,,x,voddler,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +506,Q_PROTO_VOX,vox,,Vox.com,General news website.,Web,http;https,20140314,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 221,Q_PROTO_VRRP,vrrp,,Virtual Router Redundancy Protocol,Virtual Router Redundancy Protocol (VRRP) is a protocol designed to eliminate the single point of failure inherent in the static default routed environment. VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN.,Routing,ip,RFC 3768,7/4/2008,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 1697,Q_PROTO_VSEE,vsee,,Vsee,Vsee is a videoconferencing software.,Audio/Video,http;https;ssl;udp,13.0.0.814,10/2/2013,,x,,x,,,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,, -347,Q_PROTO_VTUNNEL,vtunnel,,Vtunnel,"Vtunnel is a WEB proxy allowing the user to bybass firewalls and access restricted resources. This plug-in classifies the HTTP tunneled sessions, including both vtunnel and the tunneled application. When using HTTPs, the Vtunnel service may connect to the Freeproxies.org proxy: the corresponding sessions are then classified as freeproxies.",Web,http;https;ssl,20131220,12/20/2013,,x,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,,x -1768,Q_PROTO_VUBE,vube,,Vube,Monthly video contest and video sharing website.,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1573,Q_PROTO_VUZE,vuze,,Vuze (aka Azureus),Vuze is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the Vuze client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https,5.1.0.0,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, -869,Q_PROTO_VYEW,vyew,,Vyew,This protocol plug-in classifies the http traffic to the host vyew.com. It also classifies the ssl traffic to the Common Name vyew.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -507,Q_PROTO_WAKOOPA,wakoopa,,Wakoopa,This protocol plug-in classifies the http traffic to the host wakoopa.com. It also classifies the ssl traffic to the Common Name .wakoopa.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1952,Q_PROTO_WALLA,walla,,Walla,Israelian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1427,Q_PROTO_WALLSTREETJOURNAL_CHINA,wallstreetjournal_china,,Wall Street Journal China,Chinese version of the Wall Street Journal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1428,Q_PROTO_WANDOUJIA,wandoujia,,Wandoujia,Chinese mobile (Android applications.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -508,Q_PROTO_WASABI,wasabi,,Wasabi,This protocol plug-in classifies the http traffic to the host wasabi.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1070,Q_PROTO_WASHINGTONPOST,washingtonpost,,washingtonpost,This protocol plug-in classifies the http traffic to the host washingtonpost.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1071,Q_PROTO_WAT,wat,,wat,This protocol plug-in classifies the http traffic to the host wat.tv.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -509,Q_PROTO_WAYN,wayn,,Wayn,This protocol plug-in classifies the http traffic to the host wayn.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +347,Q_PROTO_VTUNNEL,vtunnel,,Vtunnel.com - Vtunnels.info,"Vtunnel is a WEB proxy allowing the user to bybass firewalls and access restricted resources. This plug-in classifies the HTTP tunneled sessions, including both vtunnel and the tunneled application. When using HTTPs, the Vtunnel service may connect to the Freeproxies.org proxy: the corresponding sessions are then classified as freeproxies.",Web,http;https;ssl,20131227,12/20/2013,,x,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,,,,,,x +1768,Q_PROTO_VUBE,vube,,Vube.com,Monthly video contest and video sharing website.,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1573,Q_PROTO_VUZE,vuze,,Vuze Bittorrent client,Vuze is a BitTorrent client. This signature classifies BitTorrent tracker streams over http specific to the Vuze client. Data streams will be classified as bittorrent only.,Peer to Peer,bittorrent;http;https,5.1.0.0,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, +869,Q_PROTO_VYEW,vyew,,Vyew.com,This protocol plug-in classifies the http traffic to the host vyew.com. It also classifies the ssl traffic to the Common Name vyew.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +507,Q_PROTO_WAKOOPA,wakoopa,,Wakoopa.com,This protocol plug-in classifies the http traffic to the host wakoopa.com. It also classifies the ssl traffic to the Common Name .wakoopa.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1952,Q_PROTO_WALLA,walla,,Walla.co.il,Israelian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1427,Q_PROTO_WALLSTREETJOURNAL_CHINA,wallstreetjournal_china,,Wall Street Journal China (cn.wsj.com),Chinese version of the Wall Street Journal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1428,Q_PROTO_WANDOUJIA,wandoujia,,Wandoujia,Chinese mobile (Android applications.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +508,Q_PROTO_WASABI,wasabi,,Wasabi.com,This protocol plug-in classifies the http traffic to the host wasabi.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1070,Q_PROTO_WASHINGTONPOST,washingtonpost,,WahingtonPost.com,This protocol plug-in classifies the http traffic to the host washingtonpost.com.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1071,Q_PROTO_WAT,wat,,Wat.tv,This protocol plug-in classifies the http traffic to the host wat.tv.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +509,Q_PROTO_WAYN,wayn,,Wayn.com,This protocol plug-in classifies the http traffic to the host wayn.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 697,Q_PROTO_WB_EXPAK,wb_expak,,WIDEBAND EXPAK,The wb_expak protocol (WIDEBAND EXPAK) is found over the IP layer (IANA protocol number: 79).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 698,Q_PROTO_WB_MON,wb_mon,,WIDEBAND Monitoring,The wb_mon protocol (WIDEBAND Monitoring) is found over the IP layer (IANA protocol number: 78).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1072,Q_PROTO_WEATHER,weather,,weather,This protocol plug-in classifies the http traffic to the hosts weather.com and weather.com.cn.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1793,Q_PROTO_WEATHER2UMBRELLA,weather2umbrella,,Weather 2 Umbrella,World Weather Forecast,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -870,Q_PROTO_WEB_CRAWLER,web_crawler,,Web Crawler,This protocol plug-in classifies the http traffic to the host webcrawler.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -510,Q_PROTO_WEBBIOGRAPHIES,webbiographies,,WebBiographies,This protocol plug-in classifies the http traffic to the host webbiographies.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1072,Q_PROTO_WEATHER,weather,,Weather.com,This protocol plug-in classifies the http traffic to the hosts weather.com and weather.com.cn.,Web,http;https,20130713,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1793,Q_PROTO_WEATHER2UMBRELLA,weather2umbrella,,Weather2Umbrella.com,World Weather Forecast,Web,http;https,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +870,Q_PROTO_WEB_CRAWLER,web_crawler,,WebCrawler.com,This protocol plug-in classifies the http traffic to the host webcrawler.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +510,Q_PROTO_WEBBIOGRAPHIES,webbiographies,,WebBiographies.com,This protocol plug-in classifies the http traffic to the host webbiographies.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 890,Q_PROTO_WEBEX,webex,,WebEx,"WebEx is an online meeting, videoconferencing and collaborative application",Audio/Video,http;https;ssl;udp,Meeting Center 8.5 (WBS 27) – Client build 27.24.0.10113,6/7/2011,,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, -1473,Q_PROTO_WEBEX_WEBOFFICE,webex_weboffice,,Webex WebOffice,WebOffice is a collaboration suite for managing small businesses teams.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -1504,Q_PROTO_WEBSOCKET,websocket,,The WebSocket Protocol,"The WebSocket Protocol, as described in IETF RFC6455.",Network Service,http,IETF RFC6455,7/25/2013,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, -1296,Q_PROTO_WECHAT,wechat,,WeChat,"WeChat is a text and voice messaging application for mobile. This plug-in classifies file transfers, chat and audio/video calls.",Instant Messaging,http;https;tcp;udp,5.0.3.1 (Android);5.0.3 (iOS),Blackberry-OS6-App1.0.2 (2013-10-07);Mobile-Android-App5.1 (2014-01-13);Mobile-WindowsPhone-App5.0.1 (2014-01-13);iPhone-iOS-App5.1.0.6 (2014-01-13),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, -511,Q_PROTO_WEOURFAMILY,weourfamily,,WeOurFamily,This protocol plug-in classifies the http traffic to the host weourfamily.com. It also classifies the ssl traffic to the Common Name member.weourfamily.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -512,Q_PROTO_WERKENNTWEN,werkenntwen,,WerKenntWen,This protocol plug-in classifies the http traffic to the host wer-kennt-wen.de.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1473,Q_PROTO_WEBEX_WEBOFFICE,webex_weboffice,,Webex WebOffice,WebOffice is a collaboration suite for managing small businesses teams.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +1504,Q_PROTO_WEBSOCKET,websocket,,WebSocket,"The WebSocket Protocol, as described in IETF RFC6455.",Network Service,http,IETF RFC6455,7/25/2013,,,,x,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,,, +1296,Q_PROTO_WECHAT,wechat,,WeChat,"WeChat is a text and voice messaging application for mobile. This plug-in classifies file transfers, chat and audio/video calls.",Instant Messaging,http;https;tcp;udp,PC-Windows-Browser-www.wechat.com (2014-01-28);Mobile-Android-WeChat 5.0.3.1;iPhone-iOS-WeChat 5.0.3,BlackBerry-BlackBerry OS-6-WeChat-1.0.2 (2013-10-07);Mobile-Android-WeChat-5.1 (2014-01-13);Nokia Mobile-Symbian-WeChat-4.2.0 (2014-02-25);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-28);Windows Phone-Windows Phone OS-WeChat-5.0.1 (2014-01-13);iPhone-iOS-WeChat-5.1.0.6 (2014-01-13),,x,,x,,,,,,,,,,,,x,,,,,,,x,,,,x,,,,,,,,,, +511,Q_PROTO_WEOURFAMILY,weourfamily,,WeOurFamily.com,This protocol plug-in classifies the http traffic to the host weourfamily.com. It also classifies the ssl traffic to the Common Name member.weourfamily.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +512,Q_PROTO_WERKENNTWEN,werkenntwen,,Wer-Kennt-Wen.de,This protocol plug-in classifies the http traffic to the host wer-kennt-wen.de.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 732,Q_PROTO_WESP,wesp,,Wrapped Encapsulating Security Payload,The wesp protocol (Wrapped Encapsulating Security Payload) is found over the IP layer (IANA protocol number: 141).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1748,Q_PROTO_WESTPAC,westpac,,Westpac,Australia s First Bank with a range of innovative financial packages,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -591,Q_PROTO_WFC,wfc,,Nintendo Wi-Fi Connection,Wi-Fi Connection (WFC) is the Nintendo on-line gaming service for the Wii and DS videogame systems.,Game,https;ssl,"Nintendo Wii,Nintendo DS",PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1093,Q_PROTO_WHATSAPP,whatsapp,,WhatsApp Messenger,"WhatsApp Messenger is a cross-platform, instant, mobile messaging application which allows the users to exchange messages without having to pay for SMS. WhatsApp Messenger is available for iPhone, BlackBerry, Android and Nokia and yes, those phones can all message each other.",Instant Messaging,http;https;ssl;tcp,4.7.0.2 (iPhone);4.1.1 (Android),Mobile-Android4.1.1-App2.11.93 (2013-10-11);iPhone4S-iOS7.0.2-App2.11.4 (2013-10-11),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -921,Q_PROTO_WHOIS,whois,,Whois Protocol,"WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other information.",Network Service,socks4;socks5;tcp,RFC 3912,3/20/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, +1748,Q_PROTO_WESTPAC,westpac,,Westpac.com.au,Australia s First Bank with a range of innovative financial packages,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +591,Q_PROTO_WFC,wfc,,Nintendo Wi-Fi Connection,Wi-Fi Connection (WFC) is the Nintendo on-line gaming service for the Wii and DS videogame systems.,Game,https;ssl,"Nintendo Wii,Nintendo DS",PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +1093,Q_PROTO_WHATSAPP,whatsapp,,WhatsApp Messenger,"WhatsApp Messenger is a cross-platform, instant, mobile messaging application which allows the users to exchange messages without having to pay for SMS. WhatsApp Messenger is available for iPhone, BlackBerry, Android and Nokia and yes, those phones can all message each other.",Instant Messaging,http;https;ssl;tcp,Mobile-Android-WhatsApp 4.1.1;iPhone-iOS-WhatsApp 4.7.0.2,BlackBerry-BlackBerry OS-WhatsApp-2.11.325.0 (2014-02-07);Mobile-Android-WhatsApp-2.11.152 (2014-01-06);Nokia Mobile-Symbian-WhatsApp-2.11.224 (2014-01-29);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-28);Windows Phone-Windows Phone OS-WhatsApp-2.11.344 (2014-01-06);iPhone-iOS-WhatsApp-2.11.325.0 (2014-02-07),,x,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, +921,Q_PROTO_WHOIS,whois,,WHOIS,"WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other information.",Network Service,socks4;socks5;tcp,RFC 3912,3/20/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, 600,Q_PROTO_WIICONNECT24,wiiconnect24,,WiiConnect24,"WiiConnect24 is an asynchronous communication protocol implemented on the Nintendo Wii gaming system. It used by some information channels and services embedded in the console, and by some games too.",Game,http;https,20110127,3/1/2011,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1482,Q_PROTO_WIKIA,wikia,,Wikia (aka Wikicities),A free Wiki website hosting service.,Web,http;https,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -222,Q_PROTO_WIKIPEDIA,wikipedia,,Wikipedia,Wikipedia is the biggest multilingual free-content encyclopedia on the Internet.,Web,http;https;ssl,20131010 (Web);1.3.4 (Android);3.3.1 (iOS),Mobile-Android-App3.3.1 (2013-10-10);PC-Windows-Browser-20131010 (2013-10-10);iPhone-iOS-App1.3.4 (2013-10-10),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1953,Q_PROTO_WILLHABEN,willhaben,,Willhaben,Austrian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1288,Q_PROTO_WINDOWS_AZURE,windows_azure,,Windows Azure CDN,This protocol plug-in classifies the ssl traffic to the Common Name msecnd.net.,Web,http;https;ssl,20131115,PC-Linux-BasicTest-20131115 (2013-11-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1111,Q_PROTO_WINDOWS_MARKETPLACE,windows_marketplace,,Windows Marketplace,Windows Marketplace is a service by Microsoft for its Windows Phone 7/8 and Microsoft Windows 8 platforms that allows users to browse and download applications that have been developed by third-parties. The website of the chain of retail stores Microsoft Store is also classified.,Application Service,http;https;ssl,Windows Phone 8 (20131008),Mobile-Windows Phone 8 (2013-10-08),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, -562,Q_PROTO_WINDOWS_UPDATE,windows_update,,Windows Update,Windows_update is the protocol used for windows system updates.,Web,http;https;ssl,WindowsXP;WindowsVista;Windows7,PC-Windows 7-SP1 (2013-10-16);PC-Windows 8 (2013-10-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, -298,Q_PROTO_WINDOWSLIVE,windowslive,,Windows Live,"WindowsLive is a pseudo-protocol which classifies generic web services related to the Microsoft ""Live""platform.",Web,http;https;ssl,20121030,n/a (nested protocol) (2010-07-02),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -513,Q_PROTO_WINDOWSLIVESPACE,windowslivespace,,WindowsLiveSpace,This protocol plug-in classifies the http traffic to the host spaces.live.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1073,Q_PROTO_WINDOWSMEDIA,windowsmedia,,windowsmedia,This protocol plug-in classifies the http traffic to the host windowsmedia.com.,Web,http;https,20110930,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1482,Q_PROTO_WIKIA,wikia,,Wikia.com,A free Wiki website hosting service.,Web,http;https,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +222,Q_PROTO_WIKIPEDIA,wikipedia,,Wikipedia.com,Wikipedia is the biggest multilingual free-content encyclopedia on the Internet.,Web,http;https;ssl,iPhone-iOS-Wikipedia Mobile 3.3.1;Mobile-Android-Wikipedia Mobile 1.3.4;PC-Windows-Browser-www.wikipedia.org (2013-10-10),Mobile-Android-Wikipedia-3.3.1 (2014-02-27);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-27);PC-Windows-7-Chrome-33.0.1750.117-Wikipedia for Desktop-1.0 (2014-02-27);Windows Phone-Windows Phone OS-8-Wikipedia-2.2.0.2 (2014-02-27);iPhone-iOS-Wikipedia-1.3.4 (2014-02-27),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1953,Q_PROTO_WILLHABEN,willhaben,,Willhaben.at,Austrian online classified ads.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1288,Q_PROTO_WINDOWS_AZURE,windows_azure,,Windows Azure CDN,This protocol plug-in classifies the ssl traffic to the Common Name msecnd.net.,Web,http;https;ssl,20131115,PC-Linux-BasicTest (2013-11-15),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1111,Q_PROTO_WINDOWS_MARKETPLACE,windows_marketplace,,Windows Marketplace,Windows Marketplace is a service by Microsoft for its Windows Phone 7/8 and Microsoft Windows 8 platforms that allows users to browse and download applications that have been developed by third-parties. The website of the chain of retail stores Microsoft Store is also classified.,Application Service,http;https;ssl,Windows Phone-Windows Phone OS 8;Windows Phone-Windows Phone OS 7;PC-Windows 8,PC-Windows-7 (2014-01-24);Windows Phone-Windows Phone OS-8 (2014-01-24),,x,,x,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,, +562,Q_PROTO_WINDOWS_UPDATE,windows_update,,Windows Update,Windows_update is the protocol used for windows system updates.,Web,http;https;ssl,PC-Windows XP;PC-Windows Vista;PC-Windows 7,PC-Windows-7SP1 (2013-10-16);PC-Windows-8 (2013-10-16),,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,, +298,Q_PROTO_WINDOWSLIVE,windowslive,,Windows Live,"WindowsLive is a pseudo-protocol which classifies generic web services related to the Microsoft ""Live""platform.",Web,http;https;ssl,PC-Windows-Browser-mail.live.com (2012-10-30),,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +513,Q_PROTO_WINDOWSLIVESPACE,windowslivespace,,Windows Live Spaces,This protocol plug-in classifies the http traffic to the host spaces.live.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1073,Q_PROTO_WINDOWSMEDIA,windowsmedia,,WindowsMedia.com,This protocol plug-in classifies the http traffic to the host windowsmedia.com.,Web,http;https,20110930,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 223,Q_PROTO_WINMX,winmx,,Winmx,"WinMX is a freeware peer-to-peer file sharing program authored by Frontcode Technologies that runs on Microsoft Windows operating systems, and created in 2000.",Peer to Peer,gnutella;socks4;socks5;tcp,3.53,5/20/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,, 1442,Q_PROTO_WINNY,winny,,winNY,Winny (also known as WinNY) is a Japanese peer-to-peer (P2P) file-sharing program.,Peer to Peer,tcp,20130321,3/21/2013,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,, -891,Q_PROTO_WINS,wins,,WINS Replication protocol,"WINS (Windows Internet Naming Service) is Microsoft's implementation of NetBIOS Name Service (NBNS), which is a name server and service for NetBIOS computer names. This plug-in classifies replication flows between servers. Client-to-Server flows are handled by the nbns plug-in.",Network Service,tcp,Microsoft Windows based networks,6/29/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -514,Q_PROTO_WISEREARTH,wiserearth,,WiserEarth,This protocol plug-in classifies the http traffic to the host wiserearth.org.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -871,Q_PROTO_WIXI,wixi,,Wixi,This protocol plug-in classifies the http traffic to the host wixi.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1228,Q_PROTO_WOORIBANK,wooribank,,Wooribank,This protocol plug-in classifies the http traffic to the host wooribank.com. It also classifies the ssl traffic to the Common Name .wooribank.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -297,Q_PROTO_WORDPRESS,wordpress,,Wordpress,This protocol plug-in classifies the http traffic to the host wordpress.com. It also classifies the ssl traffic to the Common Name wordpress.com.,Web,http;https;ssl,20131104,PC-Windows-Browser-20131104 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1914,Q_PROTO_WORKSITE,worksite,,Worksite,WorkSite is a Document Management System (DMS) application. It is primarily used by law firms and corporate legal departments.,File Server,rpc,20130703,12/4/2013,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, +891,Q_PROTO_WINS,wins,,Windows Internet Naming Service,"WINS (Windows Internet Naming Service) is Microsoft's implementation of NetBIOS Name Service (NBNS), which is a name server and service for NetBIOS computer names. This plug-in classifies replication flows between servers. Client-to-Server flows are handled by the nbns plug-in.",Network Service,tcp,Microsoft Windows based networks,6/29/2011,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, +514,Q_PROTO_WISEREARTH,wiserearth,x,WiserEarth,This protocol plug-in classifies the http traffic to the host wiserearth.org.,Web,,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +871,Q_PROTO_WIXI,wixi,,Wixi.com,This protocol plug-in classifies the http traffic to the host wixi.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1228,Q_PROTO_WOORIBANK,wooribank,,WooriBank.com,This protocol plug-in classifies the http traffic to the host wooribank.com. It also classifies the ssl traffic to the Common Name .wooribank.com.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +297,Q_PROTO_WORDPRESS,wordpress,,WordPress.com,This protocol plug-in classifies the http traffic to the host wordpress.com. It also classifies the ssl traffic to the Common Name wordpress.com.,Web,http;https;ssl,PC-Windows-Browser-www.wordpress.com (2014-02-26);Mobile-Android-Wordpress 2.6.3 (2014-02-26);iPhone-iOS-Wordpress 3.9.1 (2014-02-26);Windows Phone-Windows Phone OS-Wordpress 1.2.0.0 (2014-03-03),Mobile-Android-Wordpress-2.6.3 (2014-02-26);PC-Windows-7-Chrome-33.0.1750.117 (2014-02-26);Windows Phone-Windows Phone OS-Wordpress-1.2.0.0 (2014-03-03);iPhone-iOS-7.0.4-Wordpress-3.9.1 (2014-02-26),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1914,Q_PROTO_WORKSITE,worksite,,Worksite,WorkSite is a Document Management System (DMS) application. It is primarily used by law firms and corporate legal departments.,File Server,rpc,20130703,PC-Windows (2013-07-03),x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, 340,Q_PROTO_WOW,wow,,World of Warcraft,WOW is an online role-playing game.,Game,tcp,4.0.3.13287,1/11/2010,,,,x,wow,,,,x,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -2078,Q_PROTO_WP,wp,,Wp,Polish news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1429,Q_PROTO_WRETCH,wretch,,Wretch,Taiwanese Photo Album and Blog.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +2078,Q_PROTO_WP,wp,,Wp.pl,Polish news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1429,Q_PROTO_WRETCH,wretch,,Wretch.cc,Taiwanese Photo Album and Blog.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, 699,Q_PROTO_WSN,wsn,,Wang Span Network,The wsn protocol (Wang Span Network) is found over the IP layer (IANA protocol number: 74).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 224,Q_PROTO_WSP,wsp,,Wireless Session Protocol,Wireless Session Protocol (WSP) is an application layer protocol present in the WAP stack. It is used by mobile stations to send SMS for example.,Wap,udp;wtp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,x,,,,,,,,,, 225,Q_PROTO_WTLS,wtls,,Wireless Transport layer Security,"Wireless Transport Layer Security (WTLS) is a security protocol, part of the WAP stack. It sits between the WTP and WDP layers in the WAP communications stack.",Wap,udp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,,, 226,Q_PROTO_WTP,wtp,,Wireless Transaction Protocol,Wireless Transaction Protocol (WTP) is a transport layer protocol which belongs to the WAP stack. It provides a reliable transmission of network packets and is very similar to TCP.,Wap,udp,WAP v1.0;WAP v2.0,7/4/2008,,,,x,,,,,,,,x,,,,,,,,,,,,,,,x,,,,,,,,,, -227,Q_PROTO_X11,x11,,X-Window,X11 is designed to communicate all the information necessary to operate a window system over a single asynchronous bi-directional stream of 8-bit bytes. The X protocol specifies four types of messages but named extensions can also be defined to extend the system.,Thin Client,tcp,Xorg-x11-1.1.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -228,Q_PROTO_X25,x25,,X25,"X.25 is a packet switched data network protocol which defines an international recommendation for the exchange of data as well as control information between a user device (host), called Data Terminal Equipment (DTE) and a network node, called Data Circuit Terminating Equipment (DCE).",Audio/Video,xot,CCITT Recommendation X.25;ITU-T Recommendation X.25,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,x,,,,,,,,,,,,,,, -515,Q_PROTO_XANGA,xanga,,Xanga,This protocol plug-in classifies the http traffic to the host xanga.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1074,Q_PROTO_XBOX,xbox,,Xbox,This protocol plug-in classifies the http traffic to the host xbox.com. It also classifies the ssl traffic to the Common Name .xbox.com.,Web,http;https;ssl,20130427,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -342,Q_PROTO_XBOXLIVE,xboxlive,,Xbox Live,Online multiplayer gaming and digital media delivery service created and operated by Microsoft Corporation.,Game,http;https;ssl;udp;xbox,20131004,Xbox 360 (2013-10-04),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, -1574,Q_PROTO_XBOXLIVE_MARKETPLACE,xboxlive_marketplace,,Xbox Live Marketplace,Xbox Live Marketplace is a service where users can purchase and download games and multimedia.,Game,http;https,20130830,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +227,Q_PROTO_X11,x11,,X Window System,X11 is designed to communicate all the information necessary to operate a window system over a single asynchronous bi-directional stream of 8-bit bytes. The X protocol specifies four types of messages but named extensions can also be defined to extend the system.,Thin Client,tcp,Xorg-x11-1.1.1,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, +228,Q_PROTO_X25,x25,,X.25,"X.25 is a packet switched data network protocol which defines an international recommendation for the exchange of data as well as control information between a user device (host), called Data Terminal Equipment (DTE) and a network node, called Data Circuit Terminating Equipment (DCE).",Audio/Video,xot,CCITT Recommendation X.25;ITU-T Recommendation X.25,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,x,,,,,,,,,,,,,,, +515,Q_PROTO_XANGA,xanga,,Xanga.com,This protocol plug-in classifies the http traffic to the host xanga.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1074,Q_PROTO_XBOX,xbox,,Xbox.com,This protocol plug-in classifies the http traffic to the host xbox.com. It also classifies the ssl traffic to the Common Name .xbox.com.,Web,http;https;ssl,20130427,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +342,Q_PROTO_XBOXLIVE,xboxlive,,Xbox Live,Online multiplayer gaming and digital media delivery service created and operated by Microsoft Corporation.,Game,http;https;ssl;udp;xbox,PC-Windows-Browser-www.xboxlive.com (2013-10-04),Xbox-360 (2013-10-04),,x,,x,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,, +1574,Q_PROTO_XBOXLIVE_MARKETPLACE,xboxlive_marketplace,,Xbox Live Marketplace,Xbox Live Marketplace is a service where users can purchase and download games and multimedia.,Game,http;https,20130830,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, 592,Q_PROTO_XDMCP,xdmcp,,X Display Manager Control Protocol,XDMCP is an extension of the X11 protocol that addresses the issue of discovering and authenticating available X servers on the LAN.,Thin Client,udp,1.1,2/2/2011,,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,x,, -1108,Q_PROTO_XFS,xfs,,X Font Server protocol,X Font Server is a standard communication protocol between an X server and a font renderer.,Application Service,tcp,2.0,1.0.2 (coming within CentOS 5.6 distribution) - X Font Server Protocol version 2.0 (2012-01-24),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -1487,Q_PROTO_XHAMSTER,xhamster,,xHamster,Pornographic videos streaming platform.,Web,http;https;ssl,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1430,Q_PROTO_XIAMI,xiami,,Xiami,Chinese Music P2P community website.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -516,Q_PROTO_XING,xing,,Xing,This protocol plug-in classifies the http traffic to the host xing.com. It also classifies the ssl traffic to the Common Name xing.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1263,Q_PROTO_XINHUANET,xinhuanet,,Xinhuanet,This protocol plug-in classifies the http traffic to the host xinhuanet.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2013,Q_PROTO_XL_NONTON,xl_nonton,,XL Nonton,XL Nonton offers access streaming contents via PC and Smartphone.,Audio/Video,http;https;mpegts,"2.1 (Android),20131210",Mobile-Android-App2.1 (2013-12-17);PC-Windows-Website-20131217 (2013-12-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, -1143,Q_PROTO_XL_WAP,xl_wap,,XL wap,This protocol plug-in classifies the http traffic to the host wap.xl.co.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, -1156,Q_PROTO_XL_WEBMAIL,xl_webmail,,XL Webmail,This protocol plug-in classifies the http traffic to the host webmail.xl.co.id. It also classifies the ssl traffic to the Common Name webmail.xl.co.id.,Web,http;https;ssl,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2012,Q_PROTO_XL_WEBPORTAL,xl_webportal,,XLNet,Indonesian mobile telecommunications services operator web portal.,Web,http;https,20120719,PC-Windows-Website-20140106 (2014-01-06),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, -1144,Q_PROTO_XLNET,xlnet,,XLNet,This protocol plug-in classifies the http traffic to the host xl.net.id.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -872,Q_PROTO_XM_RADIO,xm_radio,,SiriusXm Radio (formerly XM Radio),This protocol plug-in classifies the http traffic to the hosts xmradio.com and siriusxm.com. It also classifies the ssl traffic to the Common Name .siriusxm.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -229,Q_PROTO_XMLRPC,xmlrpc,,XMLRPC protocol,"XMLRPC is a remote procedure calling using HTTP as the transport and XML as the encoding. XML-RPC is designed to be as simple as possible, while allowing complex data structures to be transmitted, processed and returned.",Web,http,20080118,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1108,Q_PROTO_XFS,xfs,,X Font Server,X Font Server is a standard communication protocol between an X server and a font renderer.,Application Service,tcp,2.0,PC-Linux-CentOS/5.6-X Font Server-1.0.2 (2012-01-24),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +1487,Q_PROTO_XHAMSTER,xhamster,,xHamster.com,Pornographic videos streaming platform.,Web,http;https;ssl,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1430,Q_PROTO_XIAMI,xiami,,Xiami.com,Chinese Music P2P community website.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +516,Q_PROTO_XING,xing,,Xing.com,This protocol plug-in classifies the http traffic to the host xing.com. It also classifies the ssl traffic to the Common Name xing.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1263,Q_PROTO_XINHUANET,xinhuanet,,Xinhuanet.com,This protocol plug-in classifies the http traffic to the host xinhuanet.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2190,Q_PROTO_XL,xl,,Xl,Portugese multisites and portal,Web,http;https,20140211,,,x,,,,,,,,,,,,,,,,,,,,,x,,x,x,,,,,,,x,,,, +2013,Q_PROTO_XL_NONTON,xl_nonton,,XL Nonton,XL Nonton offers access streaming contents via PC and Smartphone.,Audio/Video,http;https;mpegts,"2.1 (Android),20131210",Mobile-Android-XL Nonton-2.1 (2014-03-14);PC-Windows-Chrome (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,x, +1143,Q_PROTO_XL_WAP,xl_wap,,XL wap,This protocol plug-in classifies the http traffic to the host wap.xl.co.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,x,,,,,,,,,, +1156,Q_PROTO_XL_WEBMAIL,xl_webmail,,XL Webmail,This protocol plug-in classifies the http traffic to the host webmail.xl.co.id. It also classifies the ssl traffic to the Common Name webmail.xl.co.id.,Web,http;https;ssl,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +2012,Q_PROTO_XL_WEBPORTAL,xl_webportal,,XL.co.id,Indonesian mobile telecommunications services operator web portal.,Web,http;https,20120719,PC-Windows-Firefox (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,x,,,,,,,,,,, +1144,Q_PROTO_XLNET,xlnet,,XL.net.id,This protocol plug-in classifies the http traffic to the host xl.net.id.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +872,Q_PROTO_XM_RADIO,xm_radio,,SiriusXm.com,This protocol plug-in classifies the http traffic to the hosts xmradio.com and siriusxm.com. It also classifies the ssl traffic to the Common Name .siriusxm.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +229,Q_PROTO_XMLRPC,xmlrpc,,XMLRPC,"XMLRPC is a remote procedure calling using HTTP as the transport and XML as the encoding. XML-RPC is designed to be as simple as possible, while allowing complex data structures to be transmitted, processed and returned.",Web,http,20080118,7/4/2008,,,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 700,Q_PROTO_XNET,xnet,,Cross Net Debugger,The xnet protocol (Cross Net Debugger) is found over the IP layer (IANA protocol number: 15).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, 230,Q_PROTO_XNS,xns,,Xerox Network Systems,Xerox Network Systems is a protocol suite originally designed by Xerox PARC. Many PC networking companies such as Novell and 3Com used or currently use a variation of XNS as their primary transport protocol stack.,Network Service,8021q;eth;snap,XNS v1,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, 701,Q_PROTO_XNS_IDP,xns_idp,,XEROX NS IDP,The xns_idp protocol (XEROX NS IDP) is found over the IP layer (IANA protocol number: 22).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1075,Q_PROTO_XNXX,xnxx,,xnxx,This protocol plug-in classifies the http traffic to the host xnxx.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1075,Q_PROTO_XNXX,xnxx,,XNXX.com,This protocol plug-in classifies the http traffic to the host xnxx.com.,Web,http;https,PC-Windows-Browser-www.xnxx.com (2014-01-31),PC-Windows-7-Chrome-32.0.1700.102 (2014-01-31),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 231,Q_PROTO_XOT,xot,,XOT (X25 over TCP),Protocol used to transport x25 data over TCP in IP network.,Tunneling,tcp,XOT v0,7/4/2008,,,,x,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,,,,, -1076,Q_PROTO_XREA,xrea,,xrea,This protocol plug-in classifies the http traffic to the host xrea.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -517,Q_PROTO_XT3,xt3,,Xt3,This protocol plug-in classifies the http traffic to the host xt3.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1076,Q_PROTO_XREA,xrea,,XREA.com,This protocol plug-in classifies the http traffic to the host xrea.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +517,Q_PROTO_XT3,xt3,,Xt3.com,This protocol plug-in classifies the http traffic to the host xt3.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 540,Q_PROTO_XTP,xtp,,XTP,The xtp protocol (XTP) is found over the IP layer (IANA protocol number: 36).,Network Service,ip,IPv4,,,x,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,,,,,, -1431,Q_PROTO_XUITE,xuite,,Xuite,"Taiwanese blog platform, media file sharing, online games...",Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1077,Q_PROTO_XVIDEOS,xvideos,,xvideoslive,This protocol plug-in classifies the http traffic to the host xvideos.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -1078,Q_PROTO_XVIDEOSLIVE,xvideoslive,,xvideoslive,This protocol plug-in classifies the http traffic to the host xvideoslive.com.,Web,http;https;rtmp,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1431,Q_PROTO_XUITE,xuite,,Xuite.net,"Taiwanese blog platform, media file sharing, online games...",Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1077,Q_PROTO_XVIDEOS,xvideos,,Xvideos.com,This protocol plug-in classifies the http traffic to the host xvideos.com.,Web,http;https,PC-Windows-Browser-www.xvideos.com (2013-07-13),PC-Windows-7-Chrome-32.0.1700.102 (2014-01-30),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1078,Q_PROTO_XVIDEOSLIVE,xvideoslive,,Xvideoslive.com,This protocol plug-in classifies the http traffic to the host xvideoslive.com.,Web,http;https;rtmp,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 232,Q_PROTO_XYPLEX,xyplex,,XYPLEX,Xyplex is used to communicate with Xyplex servers.,Network Service,eth;gre,20030724,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,,, -1758,Q_PROTO_Y8,y8,,Y8,Y8.com has Free Online Mini Games in both Flash and Shockwave,Web,http;https,20131001,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, -1294,Q_PROTO_YAHOO,yahoo,,Yahoo,Yahoo is a pseudo-protocol which classifies generic web services related to Yahoo.,Web,http;https;ssl,20130001,2/4/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -518,Q_PROTO_YAHOO360PLUSVIETNAM,yahoo360plusvietnam,,Yahoo 360Plus Vietnam,This protocol plug-in classifies the http traffic to the host vn.360plus.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -286,Q_PROTO_YAHOO_ANSWERS,yahoo_answers,,Yahoo Answers,This protocol plug-in classifies the http traffic to the host answers.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -295,Q_PROTO_YAHOO_BIZ,yahoo_biz,,Yahoo Biz,This protocol plug-in classifies the http traffic to the hosts fr.biz.yahoo.com and finance.yahoo.com.,Web,http;https,20130713,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1432,Q_PROTO_YAHOO_BUY,yahoo_buy,,Yahoo Buy TW,Yahoo Taiwanese Shopping portal.,Web,http;https,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, -873,Q_PROTO_YAHOO_DOUGA,yahoo_douga,,Yahoo Douga,This protocol plug-in classifies the http traffic to the host streaming.yahoo.co.jp.,Web,http;https,20120709,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -308,Q_PROTO_YAHOO_GAMES,yahoo_games,,Yahoo Games,This protocol plug-in classifies the http traffic to the host games.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -299,Q_PROTO_YAHOO_GEOCITIES,yahoo_geocities,,Yahoo Geocities,This protocol plug-in classifies the http traffic to the host geocities.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -233,Q_PROTO_YAHOO_GROUPS,yahoo_groups,,Yahoo groups,"Yahoo! Groups offers free mailing lists, photo and file sharing, group calendars and more.",Forum,http;https;ssl;yahoo,20110419,1/14/2014,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, -1237,Q_PROTO_YAHOO_KOREA,yahoo_korea,,Yahoo Korea,This protocol plug-in classifies the http traffic to the hosts yahoo.co.kr and kr.yahoo.com.,Web,http;https,20120719,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -290,Q_PROTO_YAHOO_MAPS,yahoo_maps,,Yahoo Maps,Yahoo Maps can be used to calculate routes or to look at maps.,Web,http;https,20120828,Android 2.3.6 (2012-09-10);Windows 7 x64 (2012-09-10);iOS 5.0.1 (2012-09-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -333,Q_PROTO_YAHOO_REALESTATE,yahoo_realestate,,Yahoo Homes (formerly Yahoo Realestate),This protocol plug-in classifies the http traffic to the hosts realestate.yahoo.com and homes.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1177,Q_PROTO_YAHOO_SCREEN,yahoo_screen,,Yahoo Screen,This protocol plug-in classifies the http traffic to the host screen.yahoo.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -234,Q_PROTO_YAHOO_SEARCH,yahoo_search,,Yahoo Search,This protocol is used to send queries to the Yahoo search engine.,Web,http;https,20131204,PC-Windows-Browser-20131010 (2013-10-10),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1433,Q_PROTO_YAHOO_STOCK_TW,yahoo_stock_tw,,Yahoo Stock,Yahoo finance Taiwanese portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -292,Q_PROTO_YAHOO_TRAVEL,yahoo_travel,,Yahoo Travel,This protocol plug-in classifies the http traffic to the hosts travel.yahoo.com and fr.voyage.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1434,Q_PROTO_YAM,yam,,Yammer,This protocol plug-in classifies the http traffic to the host www.yammer.com. It also classifies the ssl traffic to the Common Name yammer.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -519,Q_PROTO_YAMMER,yammer,,Yammer,This protocol plug-in classifies the http traffic to the host www.yammer.com. It also classifies the ssl traffic to the Common Name yammer.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -523,Q_PROTO_YANDEX,yandex,,Yandex search engine,Yandex is a Russian search engine.,Web,http;https;ssl,20120208,PC-Windows-Browser-20120209 (2012-02-22),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -528,Q_PROTO_YANDEX_WEBMAIL,yandex_webmail,,Yandex webmail,Yandex webmail is the Russian webmail on webmail.yandex.ru.,Webmail,http;https,20121115,2012.07.17 (2014-01-14),,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -520,Q_PROTO_YELP,yelp,,Yelp,This protocol plug-in classifies the http traffic to the host yelp.com.,Web,http;https;ssl,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1270,Q_PROTO_YESKY,yesky,,Yesky,This protocol plug-in classifies the http traffic to the host yesky.com.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1771,Q_PROTO_YIELDMANAGER,yieldmanager,,Yield Manager,"Yield Manager is an advertising delivery technology operated by Right Media. Since 2007, this has operated as a subsidiary of Yahoo.",Web,yahoo,20131001,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1435,Q_PROTO_YIHAODIAN,yihaodian,,Yihaodian,Chinese Online shopping.,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2145,Q_PROTO_YLE,yle,,Yle,Finnish news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -236,Q_PROTO_YMAIL2,ymail2,,Yahoo Mail v2.0,This protocol is the ajax based version of Webmail Yahoo.,Webmail,http;https;ssl;yahoo,Yahoo Mail v2.0 Minty (JSON 2011),PC-Windows-20130101 (2014-01-14),,x,,x,,,,,x,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -259,Q_PROTO_YMAIL_CLASSIC,ymail_classic,,Yahoo Mail classic,Yahoo! Mail Classic was the original interface for Yahoo! Mail.,Webmail,http;https;yahoo,20130830,12/26/2012,,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, -328,Q_PROTO_YMAIL_MOBILE,ymail_mobile,,Yahoo webmail for mobile,(Deprecated) Yahoo Mail Mobile is the yahoo.com webmail adapted to mobiles.,Webmail,http;https,20091016,,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -332,Q_PROTO_YMAIL_MOBILE_NEW,ymail_mobile_new,,Yahoo webmail (new version) for mobile,Yahoo Mail Mobile_new is the new yahoo.com webmail adapted to mobiles.,Webmail,http;https;ssl;yahoo,1.20.0.13 iPhone-iPad,12/26/2012,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, -237,Q_PROTO_YMSG,ymsg,,Yahoo Messenger,"Yahoo Messenger is used by the Yahoo Instant Messenger application to send instant messages, files and emails between users.",Instant Messaging,http;https;sip;tcp,10.0.0.1270,1/14/2014,,x,,x,,,,,,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, +1758,Q_PROTO_Y8,y8,,Y8.com,Y8.com has Free Online Mini Games in both Flash and Shockwave,Web,http;https,20131001,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,x,,,, +1294,Q_PROTO_YAHOO,yahoo,,Yahoo.com,Yahoo is a pseudo-protocol which classifies generic web services related to Yahoo.,Web,http;https;ssl,20130001,2/4/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +518,Q_PROTO_YAHOO360PLUSVIETNAM,yahoo360plusvietnam,,Yahoo 360Plus Vietnam,This protocol plug-in classifies the http traffic to the host vn.360plus.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +286,Q_PROTO_YAHOO_ANSWERS,yahoo_answers,,Yahoo Answers,This protocol plug-in classifies the http traffic to the host answers.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +295,Q_PROTO_YAHOO_BIZ,yahoo_biz,x,Yahoo Biz,This protocol plug-in classifies the http traffic to the hosts fr.biz.yahoo.com and finance.yahoo.com.,Web,,20130713,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1432,Q_PROTO_YAHOO_BUY,yahoo_buy,,Yahoo Buy Taiwan,Yahoo Taiwanese Shopping portal.,Web,http;https,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,, +873,Q_PROTO_YAHOO_DOUGA,yahoo_douga,,Yahoo Douga,This protocol plug-in classifies the http traffic to the host streaming.yahoo.co.jp.,Web,http;https,20120709,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +308,Q_PROTO_YAHOO_GAMES,yahoo_games,,Yahoo Games,This protocol plug-in classifies the http traffic to the host games.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +299,Q_PROTO_YAHOO_GEOCITIES,yahoo_geocities,,Yahoo Geocities,This protocol plug-in classifies the http traffic to the host geocities.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +233,Q_PROTO_YAHOO_GROUPS,yahoo_groups,,Yahoo groups,"Yahoo! Groups offers free mailing lists, photo and file sharing, group calendars and more.",Forum,http;https;ssl;yahoo,20110419,3/11/2014,,x,,x,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,,,,, +1237,Q_PROTO_YAHOO_KOREA,yahoo_korea,,Yahoo Korea,This protocol plug-in classifies the http traffic to the hosts yahoo.co.kr and kr.yahoo.com.,Web,http;https,20120719,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +290,Q_PROTO_YAHOO_MAPS,yahoo_maps,,Yahoo Maps,Yahoo Maps can be used to calculate routes or to look at maps.,Web,http;https,20120828,Mobile-Android-2.3.6-Browser (2012-09-10);PC-Windows-7-Browser (2012-09-10);iPhone-iOS-5.0.1-Safari (2012-09-10),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +333,Q_PROTO_YAHOO_REALESTATE,yahoo_realestate,,Yahoo Homes,This protocol plug-in classifies the http traffic to the hosts realestate.yahoo.com and homes.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1177,Q_PROTO_YAHOO_SCREEN,yahoo_screen,,Yahoo Screen,This protocol plug-in classifies the http traffic to the host screen.yahoo.com.,Audio/Video,http;https;rtmp,20120530,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +234,Q_PROTO_YAHOO_SEARCH,yahoo_search,,Yahoo Search,This protocol is used to send queries to the Yahoo search engine.,Web,http;https,PC-Windows-Browser-search.yahoo.com (2014-02-18);Mobile-Android-Yahoo Search 3.0.6 (2014-03-06);iPhone-iOS-Yahoo Search 3.0.4 (2014-03-06),Mobile-Android-Yahoo Search-3.0.6 (2014-03-06);PC-Windows-7-Chrome-32.0.1700.107 (2014-02-18);iPhone-iOS-Yahoo Search-3.0.4 (2014-03-06),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1433,Q_PROTO_YAHOO_STOCK_TW,yahoo_stock_tw,,Yahoo Stock,Yahoo finance Taiwanese portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +292,Q_PROTO_YAHOO_TRAVEL,yahoo_travel,,Yahoo Travel,This protocol plug-in classifies the http traffic to the hosts travel.yahoo.com and fr.voyage.yahoo.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1434,Q_PROTO_YAM,yam,,Yam.com,This protocol plug-in classifies the http traffic to the host yam.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +519,Q_PROTO_YAMMER,yammer,,Yammer.com,Private social network solution for entreprises.,Web,http;https;ssl,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,x,,,,,,, +523,Q_PROTO_YANDEX,yandex,,Yandex.ru,Yandex is a Russian search engine.,Web,http;https;ssl,20120208,PC-Windows-Firefox (2012-02-22),,x,,x,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +528,Q_PROTO_YANDEX_WEBMAIL,yandex_webmail,,Yandex webmail,Yandex webmail is the Russian webmail on webmail.yandex.ru.,Webmail,http;https,20121115,PC-Windows-Firefox (2014-03-11),,x,,x,,,,,,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, +520,Q_PROTO_YELP,yelp,,Yelp.com,This protocol plug-in classifies the http traffic to the host yelp.com.,Web,http;https,20110331,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2174,Q_PROTO_YEMEN_NET,yemen_net,,Yemen.net,Yemeni service provider portal,Web,http;https,20140210,3/14/2014,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1270,Q_PROTO_YESKY,yesky,,Yesky.com,This protocol plug-in classifies the http traffic to the host yesky.com.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1771,Q_PROTO_YIELDMANAGER,yieldmanager,,Yield Manager,"Yield Manager is an advertising delivery technology operated by Right Media. Since 2007, this has operated as a subsidiary of Yahoo.",Web,yahoo,20131001,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1435,Q_PROTO_YIHAODIAN,yihaodian,,Yihaodian.com,Chinese Online shopping.,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2145,Q_PROTO_YLE,yle,,Yle.fi,Finnish news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +236,Q_PROTO_YMAIL2,ymail2,,Yahoo Mail v.2.0,This protocol is the ajax based version of Webmail Yahoo.,Webmail,http;https;ssl;yahoo,PC-Windows-Browser-mail.yahoo.com (2012-12-13),PC-Windows (2014-02-12),,x,,x,,,,,x,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +259,Q_PROTO_YMAIL_CLASSIC,ymail_classic,,Yahoo Mail classic,Yahoo! Mail Classic was the original interface for Yahoo! Mail.,Webmail,http;https;yahoo,PC-Windows-Browser-mail.yahoo.com (2013-08-30),PC-Windows-7-Chrome-32.0.1700.76 (2014-01-09),,x,,,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +328,Q_PROTO_YMAIL_MOBILE,ymail_mobile,x,Yahoo webmail for mobile,(Deprecated) Yahoo Mail Mobile is the yahoo.com webmail adapted to mobiles.,Webmail,,20091016,12/26/2012,,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +332,Q_PROTO_YMAIL_MOBILE_NEW,ymail_mobile_new,,Yahoo webmail for mobile,Yahoo Mail Mobile_new is the new yahoo.com webmail adapted to mobiles.,Webmail,http;https;ssl;yahoo,iPhone-iOS-Yahoo! Mail 1.20.0.13;iPad-iOS-Yahoo! Mail 1.20.0.13,BlackBerry-BlackBerry OS-10.0.10.648-Yahoo Mail-? (2014-02-06);Mobile-Android-Yahoo Mail-3.0.15 (2014-01-06);Nokia Mobile-Symbian-Yahoo Mail-? (2014-01-29);Windows Phone-Windows Phone OS-8-Yahoo Mail-2.0.0.0 (2014-01-06);iPhone-iOS-Yahoo Mail-2.0.4 (2014-01-06),,x,,,,,,,,,,,,,x,,,,,,,,x,,,,x,,,,,,,,,, +237,Q_PROTO_YMSG,ymsg,,Yahoo Messenger,"Yahoo Messenger is used by the Yahoo Instant Messenger application to send instant messages, files and emails between users.",Instant Messaging,http;https;sip;tcp,10.0.0.1270,3/11/2014,,x,,x,,,,,,x,,,,,,x,x,x,x,x,,x,,,,,,,,,,,,,,, 238,Q_PROTO_YMSG_CONF,ymsg_conf,,Yahoo Messenger conference service,"This protocol is used in signaling part in a conference. Please note that since version 11.5.0, voice calls are not supported, therefore rtp inheritance is deprecated.",Instant Messaging,tcp,10.0.0.1270,7/4/2008,,,,x,,,,,,x,,,,,,x,,x,,,,x,,,,,,,,,,,,,,, -255,Q_PROTO_YMSG_TRANSFER,ymsg_transfer,,Ymsg Transfer Protocol,This protocol is used for file tranfers over ymsg.,File Transfer,http;https;yahoo,9.4,1/14/2014,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, -239,Q_PROTO_YMSG_VIDEO,ymsg_video,,YMSG Video,(versions prior to 10.0.0.270) This protocol is used by Yahoo Messenger for video conversations.,Audio/Video,tcp,10.0.0.1270,10/2/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, -276,Q_PROTO_YMSG_WEBMESSENGER,ymsg_webmessenger,,Yahoo messenger on web,Yahoo webmessenger.,Instant Messaging,http;https;tcp;yahoo,20130830,PC-Windows-20130101 (2014-01-14),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, -2079,Q_PROTO_YNET,ynet,,Ynet,Israeli news portal,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1436,Q_PROTO_YOKA,yoka,,Yoka,Chinese fashion portal.,Web,http;https,20130215,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1327,Q_PROTO_YOMIURI,yomiuri,,Yomiuri,Japanese news web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -874,Q_PROTO_YOONO,yoono,,Yoono,This protocol plug-in classifies the http traffic to the host .yoono.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, -1079,Q_PROTO_YOUDAO,youdao,,youdao,This protocol plug-in classifies the http traffic to the host youdao.com. It also classifies the ssl traffic to the Common Name .youdao.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -875,Q_PROTO_YOUKU,youku,,Youku,Youku is a chinese video hosting web service.,Web,http;https,20130713,PC-Linux-BasicTest-20131003 (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1080,Q_PROTO_YOUM7,youm7,,youm7,This protocol plug-in classifies the http traffic to the host youm7.com.,Web,http;https,20110930,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -521,Q_PROTO_YOUMEO,youmeo,,Youmeo,This protocol plug-in classifies the http traffic to the host calumbrannan.com.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +255,Q_PROTO_YMSG_TRANSFER,ymsg_transfer,,Yahoo Messenger Transfer Protocol,This protocol is used for file tranfers over ymsg.,File Transfer,http;https;yahoo,9.4,3/11/2014,,x,,,,,,,,,,,,,,x,,,,x,,,,,,,,,,,,,,,,, +239,Q_PROTO_YMSG_VIDEO,ymsg_video,,Yahoo Messenger Video,(versions prior to 10.0.0.270) This protocol is used by Yahoo Messenger for video conversations.,Audio/Video,tcp,10.0.0.1270,10/2/2008,,,,x,,,,,,,,,,,,x,,,x,,,,,,,,,,,,,,,,,, +276,Q_PROTO_YMSG_WEBMESSENGER,ymsg_webmessenger,,Yahoo Webmessenger,Yahoo webmessenger.,Instant Messaging,http;https;tcp;yahoo,PC-Windows-Browser-messenger.yahoo.com (2013-08-30),PC-Windows (2014-03-11),,x,,x,,,,,,,,,,,,x,x,,,,,,,,,,,,,,,,,,,, +2079,Q_PROTO_YNET,ynet,,Ynet.co.il,Israeli news portal,Web,http;https,20140117,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1436,Q_PROTO_YOKA,yoka,,Yoka.com,Chinese fashion portal.,Web,http;https,20130215,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1327,Q_PROTO_YOMIURI,yomiuri,,Yomiuri.co.jp,Japanese news web site,Web,http;https;ssl,20130215,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +874,Q_PROTO_YOONO,yoono,,Yoono.com,This protocol plug-in classifies the http traffic to the host .yoono.com.,Instant Messaging,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,x,,x,,,,,,,,,,,,,, +1079,Q_PROTO_YOUDAO,youdao,,Youdao.com,This protocol plug-in classifies the http traffic to the host youdao.com. It also classifies the ssl traffic to the Common Name .youdao.com.,Web,http;https;ssl,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +875,Q_PROTO_YOUKU,youku,,Youku.com,Youku is a chinese video hosting web service.,Web,apple_hls;http;https;mms,PC-Windows-Browser-www.youku.com (2014-01-24);Mobile-Android-youku (2014-01-25);iPhone-iOS-youku (2014-01-24);Windows Phone-Windows Phone OS-youku (2014-01-25),Mobile-Android-Youku-3.7 (2014-01-25);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-24);Windows Phone-Windows Phone OS-Youku-3.1.0.0 (2014-01-25);iPhone-iOS-Youku-3.3 (2014-01-24),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1080,Q_PROTO_YOUM7,youm7,,Youm7.com,This protocol plug-in classifies the http traffic to the host youm7.com.,Web,http;https,20110930,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +521,Q_PROTO_YOUMEO,youmeo,,CalumBrannan.com,This protocol plug-in classifies the http traffic to the host calumbrannan.com.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 1297,Q_PROTO_YOUNI,youni,,Youni SMS,Youni SMS is a totally free mobile messaging application.,Instant Messaging,http;https;jabber,3.1.0 (iOS and Android),1/24/2013,,x,,x,,,,,,,,,,,,x,,,,,,,,,,,x,,,,,,,,,, -1081,Q_PROTO_YOUPORN,youporn,,youporn,This protocol plug-in classifies the http traffic to the hosts youporn.com and youporn.phncdn.com.,Web,http;https,20130207,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -876,Q_PROTO_YOURFILEHOST,yourfilehost,,YourFileHost,This protocol plug-in classifies the http traffic to the host yourfilehost.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1965,Q_PROTO_YOURFILES_BIZ,yourfiles_biz,,yourfiles.biz,Classifies web browsing on the yourfiles.biz Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -877,Q_PROTO_YOUSEEMORE,youseemore,,YouSeeMore,This protocol plug-in classifies the http traffic to the host youseemore.com.,Web,http;https,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -878,Q_PROTO_YOUSENDIT,yousendit,,HIGHTAIL (formerly YouSendIt),Cloud file storage service with professional services.,Web,http;https;ssl,20130828,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -240,Q_PROTO_YOUTUBE,youtube,,youtube,Youtube is a website where users can send or watch videos.,Web,apple_hls;http;https;rtmp;ssl,20130426,PC-Windows-Browser-20131010 (2013-10-10),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, -558,Q_PROTO_YOUTUBE_HD,youtube_hd,,Youtube HD,Youtube HD classification ensures that the user is watching a High Definition video (at least 720 lines).,Web,youtube,20140127,PC-Windows-Chrome-20131004 (2013-11-06),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +1081,Q_PROTO_YOUPORN,youporn,,Youporn.com,This protocol plug-in classifies the http traffic to the hosts youporn.com and youporn.phncdn.com.,Web,http;https,20130207,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +876,Q_PROTO_YOURFILEHOST,yourfilehost,,YourFileHost.com,This protocol plug-in classifies the http traffic to the host yourfilehost.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1965,Q_PROTO_YOURFILES_BIZ,yourfiles_biz,,yourfiles.biz,Classifies web browsing on the yourfiles.biz Direct DownLoad links service.,Web,http;https,20131129,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +877,Q_PROTO_YOUSEEMORE,youseemore,,YouSeeMore.com,This protocol plug-in classifies the http traffic to the host youseemore.com.,Web,http;https,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +878,Q_PROTO_YOUSENDIT,yousendit,,Hightail.com,Cloud file storage service with professional services.,Web,http;https;ssl,20130828,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +240,Q_PROTO_YOUTUBE,youtube,,Youtube.com,Youtube is a website where users can send or watch videos.,Web,apple_hls;http;https;rtmp;ssl,PC-Windows-Browser-www.youtube.com (2013-10-25),BlackBerry-BlackBerry OS-10.0.10.648 (2014-02-13);Mobile-Android-Youtube-5.3.28 (2014-01-10);Mobile-Bada-1.0-Youtube- (2014-02-13);Nokia Mobile-Symbian-YouTube-111.040.1511 (2014-01-31);PC-Windows-7-Chrome-32.0.1700.107-Youtube-4.2.6 (2014-02-13);PC-Windows-7-Chrome-32.0.1700.76 (2014-01-24);Windows Phone-Windows Phone OS-8-YouTube-3.2.0.0 (2014-02-12);iPhone-iOS-7.0.4-YouTube-2.3.1 (2014-02-12),,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, +558,Q_PROTO_YOUTUBE_HD,youtube_hd,,Youtube HD,Youtube HD classification ensures that the user is watching a High Definition video (at least 720 lines).,Web,youtube,PC-Windows-Browser-www.youtube.com (2014-03-13),Mobile-Android-Youtube-5.3.32 (2014-01-24);PC-Windows-7-Chrome-33.0.1750.149 (2014-03-13);Windows Phone-Windows Phone OS-8-YouTube-3.2.0.0 (2014-03-10);iPhone-iOS-Youtube-2.3.1 (2014-01-24),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,x, 1915,Q_PROTO_YPBIND,ypbind,,Yellow Page Bind,"The ypbind utility is the process that maintains NIS binding information. At startup, it searches for an NIS server responsible for serving the system's default domain (as set by the domainname(1) command) using net-work broadcasts",Network Service,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, 241,Q_PROTO_YPPASSWD,yppasswd,,Yellow Page Passwd,The Yellow Page Password protocol enables the modification of logins and passwords in Network Interface System cards.,Authentication,rpc,RPCv2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, 242,Q_PROTO_YPSERV,ypserv,,Yellow Pages Server,Yellow Pages Server is a protocol used to distribute NIS databases to client systems within an NIS domain.,Authentication,rpc,RPC v2,7/4/2008,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, 243,Q_PROTO_YPUPDATE,ypupdate,,Yellow Pages Update,The Yellow Pages Update protocol enables information updates in Network Information Services (NIS) cards.,File Server,rpc,RPCv2,,x,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,x,,,,,x,, -746,Q_PROTO_YTIMG,ytimg,,Ytimg,This protocol plug-in classifies the http traffic to the host .ytimg.com.,Web,http;https,20110331,PC-Linux-BasicTest-20131003 (2013-10-03),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -879,Q_PROTO_YUGMA,yugma,,Yugma,This protocol plug-in classifies the http traffic to the host yugma.com. It also classifies the ssl traffic to the Common Name yugma.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -880,Q_PROTO_YUUGUU,yuuguu,,Yuuguu,This protocol plug-in classifies the http traffic to the host share.yuuguu.com. It also classifies the ssl traffic to the Common Name share.yuuguu.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1114,Q_PROTO_ZABBIX_AGENT,zabbix_agent,,Zabbix agent,Agent for Zabbix monitoring server. Uses TCP port 10050.,Network Management,tcp,1.8,PC-Linux-1.8.11 (2012-04-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, -2146,Q_PROTO_ZALUU,zaluu,,Zaluu,Mongolian news portal,Web,http;https,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -2080,Q_PROTO_ZAMUNDA,zamunda,,Zamunda,Bulgarian Torrent tracker,Web,http;https,20140117,PC-Linux-BasicTest-20140117 (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, -279,Q_PROTO_ZATTOO,zattoo,,Zattoo,Zattoo is website and a set of peer-to-peer TV applications.,Audio/Video,akamai;http;https;ssl,"Web 2012/02/21, ios v1.3.1, windows v4.0.5, android v1.0.4",Mobile-Android-App1.0.4 (2012-05-07);Mobile-WindowsPhone-App4.0.5 (2012-05-07);PC-Linux-BasicTest-20131003 (2013-10-03);iPhone-iOS-App1.3.1 (2012-05-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, -346,Q_PROTO_ZELUNE,zelune,,Zelune,This protocol plug-in classifies the http traffic to the host zelune.info.,Web,http;https,20110331,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1159,Q_PROTO_ZIDDU,ziddu,,Ziddu,This protocol plug-in classifies the http traffic to the host ziddu.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -311,Q_PROTO_ZIMBRA,zimbra,,zimbra,Zimbra provides open source server and client software for messaging and collaboration.,Webmail,http;https,20130130,1/14/2014,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, +746,Q_PROTO_YTIMG,ytimg,x,Ytimg.com,This protocol plug-in classified the http traffic to the host .ytimg.com. This traffic is now classified as youtube.,Web,,PC-Windows-Browser-*.ytimg.com (2011-03-31),10/3/2013,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +879,Q_PROTO_YUGMA,yugma,,Yugma.com,This protocol plug-in classifies the http traffic to the host yugma.com. It also classifies the ssl traffic to the Common Name yugma.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +880,Q_PROTO_YUUGUU,yuuguu,,Yuugu.com,This protocol plug-in classifies the http traffic to the host share.yuuguu.com. It also classifies the ssl traffic to the Common Name share.yuuguu.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1114,Q_PROTO_ZABBIX_AGENT,zabbix_agent,,Zabbix agent,Agent for Zabbix monitoring server. Uses TCP port 10050.,Network Management,tcp,1.8,PC-Linux-Zabbix Agent-1.8.11 (2012-04-19),,,,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,, +2146,Q_PROTO_ZALUU,zaluu,,Zaluu.com,Mongolian news portal,Web,http;https,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2080,Q_PROTO_ZAMUNDA,zamunda,,Zamunda.net,Bulgarian Torrent tracker,Web,http;https,20140117,PC-Linux-BasicTest (2014-01-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,x,,,,,,,,, +279,Q_PROTO_ZATTOO,zattoo,,Zattoo.com,Zattoo is website and a set of peer-to-peer TV applications.,Audio/Video,akamai;http;https;ssl,"Web 2012/02/21, ios v1.3.1, windows v4.0.5, android v1.0.4",Mobile-Android-Zattoo-1.0.4 (2012-05-07);PC-Windows-Firefox (2012-02-21);Windows Phone-Windows Phone OS-Zattoo-4.0.5 (2012-05-07);iPhone-iOS-Zattoo-1.3.1 (2012-05-07),,x,,,,,,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,x, +346,Q_PROTO_ZELUNE,zelune,,Zelune,HTTP redirector service (anonymizing proxy).,Web,http;https,20140220,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1159,Q_PROTO_ZIDDU,ziddu,,Ziddu.com,This protocol plug-in classifies the http traffic to the host ziddu.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +311,Q_PROTO_ZIMBRA,zimbra,,Zimbra.com,Zimbra provides open source server and client software for messaging and collaboration.,Webmail,http;https,20130130,3/11/2014,,x,,x,,,,,,,x,,,,x,,,,,,,,x,,,,,,,,,,,,,, 325,Q_PROTO_ZIMBRA_STANDARD,zimbra_standard,,Zimbra Webmail Standard Version,zimbra_standard is the called standard version for the zimbra webmail.,Webmail,http;https,20090907,3/27/2012,,x,,,,,,,x,,,,,,x,,,,,,,,x,,,,,,,,,,,,,, -2147,Q_PROTO_ZING,zing,,Zing,Vietnamese classified ads.,Web,http;https;ssl,20140131,,,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1449,Q_PROTO_ZOHO,zoho,,Zoho Show,This protocol plug-in classifies the encrypted web trafic to *.zoho.com domains.,Instant Messaging,http;https;ssl,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -881,Q_PROTO_ZOHO_CRM,zoho_crm,,Zoho CRM,This protocol plug-in classifies the http traffic to the host crm.zoho.com. It also classifies the ssl traffic to the Common Name crm.zoho.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +2147,Q_PROTO_ZING,zing,,Zing.vn,Vietnamese classified ads.,Web,http;https;ssl,20140131,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1449,Q_PROTO_ZOHO,zoho,,Zoho.com,This protocol plug-in classifies the encrypted web trafic to *.zoho.com domains.,Instant Messaging,http;https;ssl,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +881,Q_PROTO_ZOHO_CRM,zoho_crm,,Zoho CRM,This protocol plug-in classifies the http traffic to the host crm.zoho.com. It also classifies the ssl traffic to the Common Name crm.zoho.com.,Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, 882,Q_PROTO_ZOHO_DB,zoho_db,,ZOHO DB and Reports,The ZOHO DB and Reports is an online database and reporting application.,Web,facebook;http;https,20110707,9/27/2011,,x,,x,,,,,,,,,,,,,,,,,,,x,,,,,,,x,x,,,,,, -883,Q_PROTO_ZOHO_IM,zoho_im,,Zoho IM,This protocol plug-in classifies the http traffic to the host wms.zoho.com. It also classifies the ssl traffic to the Common Name wms0.zoho.com.,Instant Messaging,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,,,,,,,,,,,,,,, -884,Q_PROTO_ZOHO_MEETING,zoho_meeting,,Zoho Meeting,"This protocol plug-in classifies the http traffic to the hosts wms8.zoho.com, chat.zoho.com and meeting.zoho.com. It also classifies the ssl traffic to the Common Name meeting.zoho.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1490,Q_PROTO_ZOHO_NOTEBOOK,zoho_notebook,,Zoho Notebook,Zoho Notebook application classification.,Web,http;https,20130531,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -885,Q_PROTO_ZOHO_PEOPLE,zoho_people,,Zoho People,This protocol plug-in classifies the http traffic to the host wms2.zoho.com.,Web,http;https,20110630,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1491,Q_PROTO_ZOHO_PLANNER,zoho_planner,,Zoho Planner,Zoho Planner application classification.,Web,http;https,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1492,Q_PROTO_ZOHO_SHARE,zoho_share,,Zoho Share,Zoho Share application classification.,Web,http;https,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1493,Q_PROTO_ZOHO_SHEET,zoho_sheet,,Zoho Sheet,Zoho Sheet application classification.,Web,http;https,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1494,Q_PROTO_ZOHO_SHOW,zoho_show,,Zoho Show,Zoho Show application classification.,Web,http;https,20130531,PC-Linux-BasicTest-20131017 (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1262,Q_PROTO_ZOL,zol,,Zol,This protocol plug-in classifies the http traffic to the host zol.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -754,Q_PROTO_ZONEALARM_UPDATE,zonealarm_update,,ZoneAlarm Updates,This protocol plug-in classifies the http traffic to the hosts zonealarm.com and zonelabs.com. It also classifies the ssl traffic to the Common Name cm1.zonealarm.com.,Antivirus,http;https;ssl,ZoneAlarm Extreme Security Edition 9.3,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, -522,Q_PROTO_ZOO,zoo,,Zoo,This protocol plug-in classifies the http traffic to the host zoo.gr.,Web,http;https,20110331,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -1954,Q_PROTO_ZOZNAM,zoznam,,Zoznam,Slovakian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, -315,Q_PROTO_ZSHARE,zshare,,zShare,"zShare is an online solution to store, send and share files.",Web,http;https,20120102,PC-Linux-BasicTest-20121226 (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, -1198,Q_PROTO_ZUM,zum,,Zum,This protocol plug-in classifies the http traffic to the host zum.com.,Web,http;https,20120719,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, -1285,Q_PROTO_ZYNGA,zynga,,Zynga Game Network,Zynga is a social network oriented on-line video games editor.,Web,akamai;http;https;ssl,20140114,PC-Linux-BasicTest-20140109 (2014-01-09),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, +883,Q_PROTO_ZOHO_IM,zoho_im,,Zoho Chat,Multi-protocol Instant Messaging web service owned by ZOHO Corp.,Instant Messaging,http;https;ssl,20140314,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,x,,,,,,,x,,,,,,,,,,,,,, +884,Q_PROTO_ZOHO_MEETING,zoho_meeting,,Zoho Meeting,"This protocol plug-in classifies the http traffic to the hosts wms8.zoho.com, chat.zoho.com and meeting.zoho.com. It also classifies the ssl traffic to the Common Name meeting.zoho.com.",Web,http;https;ssl,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1490,Q_PROTO_ZOHO_NOTEBOOK,zoho_notebook,,Zoho Notebook,Zoho Notebook application classification.,Web,http;https,20130531,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +885,Q_PROTO_ZOHO_PEOPLE,zoho_people,,Zoho People,This protocol plug-in classifies the http traffic to the host wms2.zoho.com.,Web,http;https,20110630,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1491,Q_PROTO_ZOHO_PLANNER,zoho_planner,,Zoho Planner,Zoho Planner application classification.,Web,http;https,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1492,Q_PROTO_ZOHO_SHARE,zoho_share,,Zoho Share,Zoho Share application classification.,Web,http;https,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1493,Q_PROTO_ZOHO_SHEET,zoho_sheet,,Zoho Sheet,Zoho Sheet application classification.,Web,http;https,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1494,Q_PROTO_ZOHO_SHOW,zoho_show,,Zoho Show,Zoho Show application classification.,Web,http;https,20130531,PC-Linux-BasicTest (2013-10-17),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1262,Q_PROTO_ZOL,zol,,Zol.com.cn,This protocol plug-in classifies the http traffic to the host zol.com.cn.,Web,http;https,20120827,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +754,Q_PROTO_ZONEALARM_UPDATE,zonealarm_update,,ZoneAlarm Updates,This protocol plug-in classifies the http traffic to the hosts zonealarm.com and zonelabs.com. It also classifies the ssl traffic to the Common Name cm1.zonealarm.com.,Antivirus,http;https;ssl,ZoneAlarm Extreme Security Edition 9.3,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,x,,,,,,, +522,Q_PROTO_ZOO,zoo,,Zoo.gr,This protocol plug-in classifies the http traffic to the host zoo.gr.,Web,http;https,20110331,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +1954,Q_PROTO_ZOZNAM,zoznam,,Zoznam.sk,Slovakian internet portal.,Web,http;https,20131023,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,,,,,,,,, +315,Q_PROTO_ZSHARE,zshare,,zShare.com,"zShare is an online solution to store, send and share files.",Web,http;https,20120102,PC-Linux-BasicTest (2012-12-26),,x,,,,,,,,,,,,,,,,,,,,,x,,,,,,x,,,,,,,, +1198,Q_PROTO_ZUM,zum,,Zum.com,This protocol plug-in classifies the http traffic to the host zum.com.,Web,http;https,20120719,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,,,x,x,,,,,,,,,,,,, +1285,Q_PROTO_ZYNGA,zynga,,Zynga.com,Zynga is a social network oriented on-line video games editor.,Web,akamai;http;https;ssl,20140114,PC-Linux-BasicTest (2014-03-14),,x,,,,,,,,,,,,,,,,,,,x,,x,,,,,,,,,,x,,,, diff --git a/resources/remapping b/resources/remapping index 1837257298f3f..e62a61ae8e5a8 100644 --- a/resources/remapping +++ b/resources/remapping @@ -404,6 +404,7 @@ thread_id ThreadNum uid UID service Service service_duration ServiceDuration +service_duration_tv ServiceDurationTV service_id ServiceID current_version CurrentVersion new_version NewVersion @@ -415,6 +416,8 @@ package_name PkgName login Login name Name password Passwd +data_port_end_offset DataPortEndOffset +data_port_start_offset DataPortStartOffset filename Filename filesize FileSize greeting_message GreetingMsg @@ -1048,6 +1051,7 @@ call_id CallID call_pkt_count CallPktCount proto_version ProtoVersion service Service +service_duration_tv ServiceDurationTV start_time StartTime user_agent UserAgent action Action @@ -1896,10 +1900,14 @@ end_status EndStatus expires Expires from From media_attr_addr MediaAttrAddr +media_attr_addr_end_offset MediaAttrAddrEndOffset +media_attr_addr_start_offset MediaAttrAddrStartOffset media_attr_channel MediaAttrChannel media_attr_encoding MediaAttrEncoding media_attr_label MediaAttrLabel media_attr_param MediaAttrParam +media_attr_port_end_offset MediaAttrPortEndOffset +media_attr_port_start_offset MediaAttrPortStartOffset media_attr_rate MediaAttrRate media_attr_transport MediaAttrTransport media_attr_type MediaAttrType @@ -1933,6 +1941,7 @@ password Passwd nearest_service NearestService service Service service_duration ServiceDuration +service_duration_tv ServiceDurationTV service_id ServiceID version Version file_id FileID @@ -2098,6 +2107,7 @@ device_id DeviceID login Login phone_number PhoneNum service Service +service_duration_tv ServiceDurationTV user_email UserEmail user_id UserID login Login @@ -2203,6 +2213,7 @@ password Passwd filesize FileSize service Service service_duration ServiceDuration +service_duration_tv ServiceDurationTV service_id ServiceID account_uid AcctUID contact_alias ContactAlias