sueboy: 20 4月 2014

[DHCP-SERVER] Delete all dynamic leases

http://forum.mikrotik.com/viewtopic.php?f=2&t=70106

if you have only one DHCP-Server you can do the following:
/ip dhcp-server lease remove [find dynamic]

if you have several servers, you have to add additional filter to filter by server.
/ip dhcp-server lease remove [find dynamic server=dhcp1]

mikrotik Qos Use Queue Tree and priority

最近使用心得，這種使用方式，在流量全滿是做不了QOS....它的Queue Tree是ok，但流量滿時，就算優先最低的，還是佔頻寬，最高的吃不到，所以非常建議把Queue Tree和Simple Queues兩個都開，直接把每個ip設上Simple Queues，避免有人把頻寬佔滿。這做法之後，就不用管那個人會多吃頻寬了。
==============
Ether1是Wan，此法不用Simple Queues，用Queue Tree

參考網址：

http://gregsowell.com/?p=4665 最重要

http://wiki.mikrotik.com/wiki/Basic_traffic_shaping_based_on_layer-7_protocols

queue tree

# apr/21/2014 21:37:44 by RouterOS 6.11

# software id = 7AF7-LQ1I

/queue tree

add disabled=yes max-limit=30k name=p2p_prerouting packet-mark=Qos_p2p_8_prerouting \

parent=global queue=default

add disabled=yes max-limit=2M name=p2p_postouting packet-mark=Qos_p2p_8_postrouting \

parent=global queue=default

add disabled=yes name=root_postouting packet-mark=Qos_root_1_postrouting parent=\

global priority=1 queue=default

add disabled=yes name=root_prerouting packet-mark=Qos_root_1_prerouting parent=\

global priority=1 queue=default

add max-limit=15M name=in parent=global

add max-limit=1M name=out parent=global

add limit-at=3M max-limit=15M name=http-in packet-mark=http-in parent=in priority=4 \

queue=default

add limit-at=4M max-limit=15M name=streaming-video-in packet-mark=\

streaming-video-in parent=in priority=3 queue=streaming-video-in

add limit-at=500k max-limit=15M name=gaming-in packet-mark=games-in parent=in \

priority=2 queue=games-in-pcq

add max-limit=15M name=download-in packet-mark=in parent=in queue=default

add max-limit=1M name=upload-out packet-mark=out parent=out queue=default

add limit-at=500k max-limit=1M name=gaming-out packet-mark=games-out parent=out \

priority=2 queue=default

add limit-at=500k max-limit=1M name=http-out packet-mark=http-out parent=out \

priority=4 queue=default

add limit-at=500k max-limit=1M name=streaming-video-out packet-mark=\

streaming-video-out parent=out priority=3 queue=default

add limit-at=1M max-limit=15M name=customer-servers-in packet-mark=\

customer-servers-in parent=in priority=1 queue=default

add limit-at=1M max-limit=1M name=customer-servers-out packet-mark=\

customer-servers-out parent=out priority=1 queue=default

add limit-at=500k max-limit=15M name=voip-in packet-mark=voip-in parent=in \

priority=1 queue=default

add limit-at=500k max-limit=15M name=vpn-in packet-mark=vpn-in parent=in priority=2 \

queue=default

add limit-at=500k max-limit=1M name=voip-out packet-mark=voip-out parent=out \

priority=1 queue=default

add limit-at=500k max-limit=1M name=vpn-out packet-mark=vpn-out parent=out \

priority=2 queue=default

add limit-at=500k max-limit=15M name=admin-in packet-mark=admin-in parent=in \

priority=1 queue=default

add limit-at=500k max-limit=1M name=admin-out packet-mark=admin-out parent=out \

priority=1 queue=default

ip firewall mangle

# apr/21/2014 21:40:11 by RouterOS 6.11

# software id = 7AF7-LQ1I

/ip firewall mangle

add action=mark-packet chain=prerouting comment=Qos_p2p_8_prerouting \

disabled=yes layer7-protocol=bittorrent new-packet-mark=\

Qos_p2p_8_prerouting passthrough=no

add action=mark-packet chain=prerouting disabled=yes layer7-protocol=edonkey \

new-packet-mark=Qos_p2p_8_prerouting passthrough=no

add action=mark-packet chain=prerouting disabled=yes layer7-protocol=\

fasttrack new-packet-mark=Qos_p2p_8_prerouting passthrough=no

add action=mark-packet chain=prerouting disabled=yes layer7-protocol=gnutella \

new-packet-mark=Qos_p2p_8_prerouting passthrough=no

add action=mark-packet chain=prerouting disabled=yes layer7-protocol=\

torrent-dns new-packet-mark=Qos_p2p_8_prerouting passthrough=no

add action=mark-packet chain=prerouting disabled=yes layer7-protocol=\

torrent-wwws new-packet-mark=Qos_p2p_8_prerouting passthrough=no

add action=mark-packet chain=prerouting disabled=yes new-packet-mark=\

Qos_p2p_8_prerouting p2p=all-p2p passthrough=no

add action=mark-packet chain=postrouting comment=Qos_p2p_8_postouting \

disabled=yes layer7-protocol=bittorrent new-packet-mark=\

Qos_p2p_8_postrouting passthrough=no

add action=mark-packet chain=postrouting disabled=yes layer7-protocol=edonkey \

new-packet-mark=Qos_p2p_8_postrouting passthrough=no

add action=mark-packet chain=postrouting disabled=yes layer7-protocol=\

fasttrack new-packet-mark=Qos_p2p_8_postrouting passthrough=no

add action=mark-packet chain=postrouting disabled=yes layer7-protocol=\

gnutella new-packet-mark=Qos_p2p_8_postrouting passthrough=no

add action=mark-packet chain=postrouting disabled=yes layer7-protocol=\

torrent-dns new-packet-mark=Qos_p2p_8_postrouting passthrough=no

add action=mark-packet chain=postrouting disabled=yes layer7-protocol=\

torrent-wwws new-packet-mark=Qos_p2p_8_postrouting passthrough=no

add action=mark-packet chain=postrouting disabled=yes new-packet-mark=\

Qos_p2p_8_postrouting p2p=all-p2p passthrough=no

add action=mark-packet chain=prerouting comment=Qos_root_1_prerouting_upload \

disabled=yes new-packet-mark=Qos_root_1_prerouting passthrough=no \

src-address-list=root_ip

add action=mark-packet chain=postrouting comment=Qos_root_1_postrouting_down \

disabled=yes dst-address-list=root_ip new-packet-mark=\

Qos_root_1_postrouting passthrough=no

add action=mark-packet chain=prerouting comment=\

"internal-traffic packet mark" dst-address-list=internal-nets \

new-packet-mark=internal-traffic passthrough=no src-address-list=\

internal-nets

add action=mark-packet chain=prerouting comment=\

"customer-servers-out packet mark" new-packet-mark=customer-servers-out \

passthrough=no src-address-list=customer-servers

add action=mark-packet chain=prerouting comment=\

"customer-servers-in packet mark" dst-address-list=customer-servers \

new-packet-mark=customer-servers-in passthrough=no

add action=mark-packet chain=prerouting comment="admin-in packet mark DNS" \

in-interface=ether1 new-packet-mark=admin-in passthrough=no protocol=udp \

src-port=53

add action=mark-packet chain=prerouting comment="admin-in packet mark snmp" \

dst-port=161 in-interface=ether1 new-packet-mark=admin-in passthrough=no \

protocol=udp

add action=mark-connection chain=prerouting comment=\

"Remote Protocols admin connection mark" new-connection-mark=admin port=\

20,21,22,23,3389,8291 protocol=tcp

add action=mark-connection chain=prerouting comment=\

"icmp connection mark as admin" new-connection-mark=admin protocol=icmp \

src-address-list=internal-nets

add action=mark-packet chain=prerouting comment="admin-in packet mark" \

connection-mark=admin in-interface=ether1 new-packet-mark=admin-in \

passthrough=no

add action=mark-packet chain=prerouting comment="admin-out packet mark" \

connection-mark=admin new-packet-mark=admin-out passthrough=no

add action=mark-connection chain=prerouting comment=\

"streaming video connection mark" dst-port=80 layer7-protocol=video \

new-connection-mark=streaming-video protocol=tcp src-address-list=\

internal-nets

add action=mark-packet chain=prerouting comment=\

"streaming video in packet mark" connection-mark=streaming-video \

in-interface=ether1 new-packet-mark=streaming-video-in passthrough=no

add action=mark-packet chain=prerouting comment=\

"streaming video out packet mark" connection-mark=streaming-video \

new-packet-mark=streaming-video-out passthrough=no

add action=mark-connection chain=prerouting comment=\

"http traffic connection mark" dst-port=80,443 new-connection-mark=http \

protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"http traffic connection mark" connection-bytes=5000000-4294967295 \

dst-port=80,443 new-connection-mark=http-download protocol=tcp \

src-address-list=internal-nets

add action=mark-packet chain=prerouting comment="http in packet mark" \

connection-mark=http in-interface=ether1 new-packet-mark=http-in \

passthrough=no

add action=mark-packet chain=prerouting comment="http out packet mark" \

connection-mark=http new-packet-mark=http-out passthrough=no

add action=mark-connection chain=prerouting comment=\

"wow connetion mark as gaming" dst-port=\

1119,3724,6112-6114,4000,6881-6999 new-connection-mark=games protocol=tcp \

src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"eve online connetion mark as gaming" dst-address=87.237.38.200 \

new-connection-mark=games src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"starcraft 2 connetion mark as gaming" dst-port=1119 new-connection-mark=\

games protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"heros of newerth connetion mark as gaming" dst-port=11031,11235-11335 \

new-connection-mark=games protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"steam connetion mark as gaming" dst-port=27014-27050 \

new-connection-mark=games protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"xbox live connetion mark as gaming" dst-port=3074 new-connection-mark=\

games protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"ps3 online connetion mark as gaming" dst-port=5223 new-connection-mark=\

games protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"wii online connetion mark as gaming" dst-port=28910,29900,29901,29920 \

new-connection-mark=games protocol=tcp src-address-list=internal-nets

add action=mark-connection chain=prerouting comment=\

"lol connetion mark as gaming" dst-port=2099,5223,5222,8393-8400 \

new-connection-mark=games protocol=tcp src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"games packet mark forever-saken-game" dst-address-list=external-nets \

new-packet-mark=games-in passthrough=no src-address-list=\

forever-saken-game

add action=mark-packet chain=prerouting comment="games packet mark wow" \

dst-address-list=external-nets new-packet-mark=games-in passthrough=no \

protocol=udp src-port=53,3724

add action=mark-packet chain=prerouting comment=\

"games packet mark starcraft2" dst-address-list=external-nets \

new-packet-mark=games-in passthrough=no protocol=udp src-port=1119,6113

add action=mark-packet chain=prerouting comment="games packet mark HoN" \

dst-address-list=external-nets new-packet-mark=games-in passthrough=no \

protocol=udp src-port=11031,11235-11335

add action=mark-packet chain=prerouting comment="games packet mark steam in" \

dst-address-list=external-nets new-packet-mark=games-in passthrough=no \

port=4380,28960,27000-27030 protocol=udp

add action=mark-packet chain=prerouting comment="games packet mark steam out" \

dst-port=53,1500,3005,3101,3478,4379-4380,4380,28960,27000-27030,28960 \

new-packet-mark=games-out passthrough=no protocol=udp src-address-list=\

internal-nets

add action=mark-packet chain=prerouting comment="games packet mark xbox live" \

dst-address-list=external-nets new-packet-mark=games-in passthrough=no \

protocol=udp src-port=88,3074,3544,4500

add action=mark-packet chain=prerouting comment=\

"games packet mark ps3 online" dst-address-list=external-nets \

new-packet-mark=games-in passthrough=no protocol=udp src-port=\

3478,3479,3658

add action=mark-packet chain=prerouting comment="games packet mark lol" \

dst-address-list=external-nets new-packet-mark=games-in passthrough=no \

protocol=udp src-port=5000-5500

add action=mark-packet chain=prerouting comment="games packet mark in" \

connection-mark=games dst-address-list=external-nets new-packet-mark=\

games-in passthrough=no

add action=mark-packet chain=prerouting comment="games packet mark out" \

connection-mark=games new-packet-mark=games-out passthrough=no \

src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"voip-in packet mark teamspeak" dst-address-list=external-nets \

new-packet-mark=voip-in passthrough=no protocol=udp src-port=9987

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark teamspeak" dst-port=9987 new-packet-mark=voip-out \

passthrough=no protocol=udp src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark teamspeak" dst-address-list=external-nets \

new-packet-mark=voip-in passthrough=no protocol=udp src-port=9987

add action=mark-packet chain=prerouting comment=\

"voip-in packet mark ventrilo" dst-address-list=external-nets \

new-packet-mark=voip-in passthrough=no protocol=udp src-port=3784

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark ventrilo" dst-port=3784 new-packet-mark=voip-out \

passthrough=no protocol=udp src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"voip-in packet mark ventrilo" dst-address-list=external-nets \

new-packet-mark=voip-in passthrough=no protocol=tcp src-port=3784

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark ventrilo" dst-port=3784 new-packet-mark=voip-out \

passthrough=no protocol=tcp src-address-list=internal-nets

add action=mark-packet chain=prerouting comment="voip-in packet mark SIP" \

dst-address-list=internal-nets new-packet-mark=voip-in passthrough=no \

port=5060 protocol=tcp

add action=mark-packet chain=prerouting comment="voip-out packet mark SIP" \

new-packet-mark=voip-out passthrough=no port=5060 protocol=tcp \

src-address-list=internal-nets

add action=mark-packet chain=prerouting comment="voip-in packet mark udp SIP" \

dst-address-list=internal-nets new-packet-mark=voip-in passthrough=no \

port=5004,5060 protocol=udp

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark udp SIP" new-packet-mark=voip-out passthrough=no \

port=5004,5060 protocol=udp src-address-list=internal-nets

add action=mark-packet chain=prerouting comment="voip-in packet mark RTP" \

dst-address-list=internal-nets new-packet-mark=voip-in packet-size=\

100-400 passthrough=no port=16348-32768 protocol=udp

add action=mark-packet chain=prerouting comment="voip-out packet mark RTP" \

new-packet-mark=voip-in packet-size=100-400 passthrough=no port=\

16348-32768 protocol=udp src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"voip-in packet mark SKYPE_OUT" dst-address-list=internal-nets \

layer7-protocol=skypeout new-packet-mark=voip-in passthrough=no

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark SKYPE_OUT" layer7-protocol=skypeout \

new-packet-mark=voip-in passthrough=no src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"voip-out packet mark SKYPETOSKYPE" layer7-protocol=skypetoskype \

new-packet-mark=voip-in passthrough=no src-address-list=internal-nets

add action=mark-packet chain=prerouting comment=\

"voip-in packet mark SKYPETOSKYPE" dst-address-list=internal-nets \

layer7-protocol=skypetoskype new-packet-mark=voip-in passthrough=no

add action=mark-packet chain=prerouting comment="vpn-in packet mark GRE" \

in-interface=ether1 new-packet-mark=vpn-in passthrough=no protocol=gre

add action=mark-packet chain=prerouting comment="vpn-out packet mark GRE" \

new-packet-mark=vpn-out passthrough=no protocol=gre

add action=mark-packet chain=prerouting comment="vpn-in packet mark ESP" \

in-interface=ether1 new-packet-mark=vpn-in passthrough=no protocol=\

ipsec-esp

add action=mark-packet chain=prerouting comment="vpn-out packet mark ESP" \

new-packet-mark=vpn-out passthrough=no protocol=ipsec-esp

add action=mark-packet chain=prerouting comment=\

"vpn-in packet mark VPN UDP ports" in-interface=ether1 new-packet-mark=\

vpn-in passthrough=no protocol=udp src-port=500,1701,4500

add action=mark-packet chain=prerouting comment=\

"vpn-out packet mark VPN UDP ports" new-packet-mark=vpn-out passthrough=\

no protocol=udp src-port=500,1701,4500

add action=mark-packet chain=prerouting comment="vpn-in packet mark PPTP" \

in-interface=ether1 new-packet-mark=vpn-in passthrough=no protocol=tcp \

src-port=1723

add action=mark-packet chain=prerouting comment="vpn-out packet mark PPTP" \

new-packet-mark=vpn-out passthrough=no protocol=tcp src-port=1723

add action=mark-packet chain=prerouting comment="all in" in-interface=ether1 \

new-packet-mark=in passthrough=no

add action=mark-packet chain=prerouting comment="all out" new-packet-mark=out \

passthrough=no

ip firewall address-list

# apr/21/2014 21:41:35 by RouterOS 6.11

# software id = 7AF7-LQ1I

/ip firewall address-list

add address=192.168.5.0/24 list=internal-nets

add address=192.168.1.0/24 list=external-nets

add address=192.168.5.253 list=customer-servers

ip firewall layer7-protocol

# apr/21/2014 21:42:16 by RouterOS 6.11

# software id = 7AF7-LQ1I

/ip firewall layer7-protocol

add name=edonkey regexp="^[\C5\D4\E3-\E5].\?.\?.\?.\?([\01\02\05\14\15\16\18\

\19\1A\1B\1C !234568@ABCFGHIJKLMNOPQRSTUVWX[`\81\82\90\91\93\96\97\98\99\

\9A\9B\9C\9E\A0\A1\A2\A3\A4]|Y................\?[ -~]|\96....\$)"

add name=goboogy regexp="|^get /getfilebyhash\\.cgi\\\?|^get /queue_\

add name=soribada regexp="^GETMP3\r\

\nFilename|^\01.\?.\?.\?(Q:\\+|Q2:)|^\10[\14-\16]\10[\15-\17].\?.\?.\?.\?\

\$"

add name=rdp regexp=rdpdr.*cliprdr.*rdpsnd

add name=gnutella regexp="^(gnd[\01\02]\?.\?.\?\01|gnutella connect/[012]\\.[0\

-9]\r\

\n|get /uri-res/n2r\\\?urn:sha1:|get /.*user-agent: (gtk-gnutella|bearshar\

ion/x-gnutella-packets|giv [0-9]*:[0-9a-f]*/|queue [0-9a-f]* [1-9][0-9]\?[\

0-9]\?\\.[1-9][0-9]\?[0-9]\?\\.[1-9][0-9]\?[0-9]\?\\.[1-9][0-9]\?[0-9]\?:[\

1-9][0-9]\?[0-9]\?[0-9]\?|gnutella.*content-type: application/x-gnutella|.\

..................\?lime)"

add name=cvs regexp="^BEGIN (AUTH|VERIFICATION|GSSAPI) REQUEST\

\n"

add name=nbns regexp="\01\10\01|\\)\10\01\01|0\10\01"

add name=shoutcast regexp=\

"icy [1-5][0-9][0-9] [\t-\r -~]*(content-type:audio|icy-)"

add name=dns regexp="^.\?.\?.\?.\?[\01\02].\?.\?.\?.\?.\?.\?[\01-\?][a-z0-9][\

\01-\?a-z]*[\02-\06][a-z][a-z][fglmoprstuvz]\?[aeop]\?(um)\?[\01-\10\1C][\

\01\03\04\FF]"

add name=quake-halflife regexp="^\FF\FF\FF\FFget(info|challenge)"

add name=poco regexp="^\80\94\

\n\01....\1F\9E"

add name=ciscovpn regexp="^\01\F4\01\F4"

add name=x11 regexp="^[lb].\?\0B"

add name=xboxlive regexp="^X\80........\F3|^\06XN"

add name=applejuice regexp="^ajprot\r\

\n"

add name=zmaap regexp="^\1B\D7;H[\01\02]\01\?\01"

add name=live365 regexp=membername.*session.*player

add name=rlogin regexp="^[a-z][a-z0-9][a-z0-9]+/[1-9][0-9]\?[0-9]\?[0-9]\?00"

add name=http regexp="http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*(con\

nection:|content-type:|content-length:|date:)|post [\t-\r -~]* http/[01]\\\

.[019]"

add name=sip regexp=\

"^(invite|register|cancel) sip[\t-\r -~]*sip/[0-2]\\.[0-9]"

add name=pop3 regexp="^(\\+ok |-err )"

add name=smb regexp="\FFsmb[r%]"

add name=quake1 regexp="^\80\0C\01quake\03"

add name=lpd regexp="^(\01[!-~]+|\02[!-~]+\

\n.[\01\02\03][\01-\

\n -~]*|[\03\04][!-~]+[\t-\r]+[a-z][\t-\r -~]*|\05[!-~]+[\t-\r]+([a-z][!-~\

]*[\t-\r]+[1-9][0-9]\?[0-9]\?|root[\t-\r]+[!-~]+).*)\

\n\$"

add name=mute regexp="^(Public|AES)Key: [0-9a-f]*\

\nEnd(Public|AES)Key\

\n\$"

add name=ssh regexp="^ssh-[12]\\.[0-9]"

add name=jabber regexp=\

add name=bittorrent regexp="^(\13bittorrent protocol|azver\01\$|get /scrape\\\

\?info_hash=)|d1:ad2:id20:|\08'7P\\)[RP]"

add name=ncp regexp="^(dmdt.*\01.*(\"\"|\11\11|uu)|tncp.*33)"

add name=tls regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)"

add name=directconnect regexp="^(\\\$mynick |\\\$lock |\\\$key )"

add name=netbios regexp="\81.\?.\?.[A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-\

P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A\

-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][\

A-P][A-P]"

add name=tftp regexp="^(\01|\02)[ -~]*(netascii|octet|mail)"

add name=subspace regexp="^\01....\11\10........\01\$"

add name=hotline regexp="^....................TRTPHOTL\01\02"

add name=doom3 regexp="^\FF\FFchallenge"

add name=ftp regexp="^220[\t-\r -~]*ftp"

add name=kugoo regexp="^1..\8E"

add name=tsp regexp="^[\01-\13\16-\$]\01.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?[ -~]+"

add name=battlefield1942 regexp="^\01\11\10\\|\F8\02\10@\06"

add name=ssdp regexp="^notify[\t-\r ]\\*[\t-\r ]http/1\\.1[\t-\r -~]*ssdp:(ali\

ve|byebye)|^m-search[\t-\r ]\\*[\t-\r ]http/1\\.1[\t-\r -~]*ssdp:discover"

add name=imap regexp="^(\\* ok|a[0-9]+ noop)"

add name=ares regexp="^\03[]Z].\?.\?\05\$"

add name=fasttrack regexp="^get (/.download/[ -~]*|/.supernode[ -~]|/.status[ \

-~]|/.network[ -~]*|/.files|/.hash=[0-9a-f]*/[ -~]*) http/1.1|user-agent: \

ive [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]\?[0-9]\?[0-9]\?"

add name=qq regexp="^.\?\02.+\03\$"

add name=100bao regexp="^\01\01\05\

\n"

add name=aim regexp=\

"^(\\*[\01\02].*\03\0B|\\*\01.\?.\?.\?.\?\01)|flapon|toc_signon.*0x"

add name=unknown regexp=.

add name=msn-filetransfer regexp=\

"^(ver [ -~]*msnftp\r\

\nver msnftp\r\

\nusr|method msnmsgr:)"

add name=yahoo regexp="^(ymsg|ypns|yhoo).\?.\?.\?.\?.\?.\?.\?[lwt].*\C0\80"

add name=validcertssl regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B).*\

(thawte|equifax secure|rsa data security, inc|verisign, inc|gte cybertrust\

\_root|entrust\\.net limited)"

add name=ntp regexp="^([\13\1B#\D3\DB\E3]|[\14\1C\$].......\?.\?.\?.\?.\?.\?.\

\?.\?.\?[\C6-\FF])"

add name=gnucleuslan regexp=\

"gnuclear connect/[\t-\r -~]*user-agent: gnucleus [\t-\r -~]*lan:"

add name=vnc regexp="^rfb 00[1-9]\\.00[0-9]\

\n\$"

add name=bgp regexp=\

"^\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF..\?\01[\03\04]"

add name=tesla regexp="\03\9A\89\"111\\.00 Beta |\E2

add name=openft regexp="x-openftalias: [-)(0-9a-z ~.]"

add name=h323 regexp=\

"^\03..\?\08...\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\05"

add name=finger regexp=\

"^[a-z][a-z0-9\\-_]+|login: [\t-\r -~]* name: [\t-\r -~]* Directory:"

add name=ident regexp="^[1-9][0-9]\?[0-9]\?[0-9]\?[0-9]\?[\t-\r]*,[\t-\r]*[1-9\

][0-9]\?[0-9]\?[0-9]\?[0-9]\?(\r\

\n|[\r\

\n])\?\$"

add name=gkrellm regexp="^gkrellm [23].[0-9].[0-9]\

\n\$"

add name=hddtemp regexp=\

"^\\|/dev/[a-z][a-z][a-z]\\|[0-9a-z]*\\|[0-9][0-9]\\|[cfk]\\|"

add name=socks regexp="\05[\01-\08]*\05[\01-\08]\?.*\05[\01-\03][\01\03].*\05[\

\01-\08]\?[\01\03]"

add name=biff regexp="^[a-z][a-z0-9]+@[1-9][0-9]+\$"

add name=dhcp regexp="^[\01\02][\01- ]\06.*c\82sc"

add name=smtp regexp="^220[\t-\r -~]* (e\?smtp|simple mail)"

add name=ipp regexp=ipp://

add name=msnmessenger regexp="ver [0-9]+ msnp[1-9][0-9]\? [\t-\r -~]*cvr0\r\

\n\$|usr 1 [!-~]+ [0-9. ]+\r\

\n\$|ans 1 [!-~]+ [0-9. ]+\r\

\n\$"

add name=irc regexp="^(nick[\t-\r -~]*user[\t-\r -~]*:|user[\t-\r -~]*:[\02-\r\

\_-~]*nick[\t-\r -~]*\r\

\n)"

add name=gopher regexp="^[\t-\r]*[1-9,+tgi][\t-\r -~]*\t[\t-\r -~]*\t[a-z0-9.]\

*\\.[a-z][a-z].\?.\?\t[1-9]"

add name=telnet regexp="^\FF[\FB-\FE].\FF[\FB-\FE].\FF[\FB-\FE]"

add name=snmp regexp="^\02\01\04.+([\A0-\A3]\02[\01-\04].\?.\?.\?.\?\02\01.\?\

\02\01.\?0|\A4\06.+@\04.\?.\?.\?.\?\02\01.\?\02\01.\?C)"

add name=nntp regexp=\

"^(20[01][\t-\r -~]*AUTHINFO USER|20[01][\t-\r -~]*news)"

add name=aimwebcontent regexp=user-agent:aim/

add name=rtsp regexp="rtsp/1.0 200 ok"

add name=skypeout regexp="^(\01.\?.\?.\?.\?.\?.\?.\?.\?\01|\02.\?.\?.\?.\?.\?.\

\?.\?.\?\02|\03.\?.\?.\?.\?.\?.\?.\?.\?\03|\04.\?.\?.\?.\?.\?.\?.\?.\?\04|\

\05.\?.\?.\?.\?.\?.\?.\?.\?\05|\06.\?.\?.\?.\?.\?.\?.\?.\?\06|\07.\?.\?.\?\

.\?.\?.\?.\?.\?\07|\08.\?.\?.\?.\?.\?.\?.\?.\?\08|\t.\?.\?.\?.\?.\?.\?.\?.\

\?\t|\

\n.\?.\?.\?.\?.\?.\?.\?.\?\

\n|\0B.\?.\?.\?.\?.\?.\?.\?.\?\0B|\0C.\?.\?.\?.\?.\?.\?.\?.\?\0C|\r.\?.\?.\

\?.\?.\?.\?.\?.\?\r|\0E.\?.\?.\?.\?.\?.\?.\?.\?\0E|\0F.\?.\?.\?.\?.\?.\?.\

\?.\?\0F|\10.\?.\?.\?.\?.\?.\?.\?.\?\10|\11.\?.\?.\?.\?.\?.\?.\?.\?\11|\12\

.\?.\?.\?.\?.\?.\?.\?.\?\12|\13.\?.\?.\?.\?.\?.\?.\?.\?\13|\14.\?.\?.\?.\?\

.\?.\?.\?.\?\14|\15.\?.\?.\?.\?.\?.\?.\?.\?\15|\16.\?.\?.\?.\?.\?.\?.\?.\?\

\16|\17.\?.\?.\?.\?.\?.\?.\?.\?\17|\18.\?.\?.\?.\?.\?.\?.\?.\?\18|\19.\?.\

\?.\?.\?.\?.\?.\?.\?\19|\1A.\?.\?.\?.\?.\?.\?.\?.\?\1A|\1B.\?.\?.\?.\?.\?.\

\?.\?.\?\1B|\1C.\?.\?.\?.\?.\?.\?.\?.\?\1C|\1D.\?.\?.\?.\?.\?.\?.\?.\?\1D|\

\1E.\?.\?.\?.\?.\?.\?.\?.\?\1E|\1F.\?.\?.\?.\?.\?.\?.\?.\?\1F| .\?.\?.\?.\

\?.\?.\?.\?.\? |!.\?.\?.\?.\?.\?.\?.\?.\?!|\".\?.\?.\?.\?.\?.\?.\?.\?\"|#.\

\?.\?.\?.\?.\?.\?.\?.\?#|\\\$.\?.\?.\?.\?.\?.\?.\?.\?\\\$|%.\?.\?.\?.\?.\?\

.\?.\?.\?%|&.\?.\?.\?.\?.\?.\?.\?.\?&|'.\?.\?.\?.\?.\?.\?.\?.\?'|\\(.\?.\?\

.\?.\?.\?.\?.\?.\?\$|\$.\?.\?.\?.\?.\?.\?.\?.\?\\)|\\*.\?.\?.\?.\?.\?.\?\

.\?.\?\\*|\\+.\?.\?.\?.\?.\?.\?.\?.\?\\+|,.\?.\?.\?.\?.\?.\?.\?.\?,|-.\?.\

\?.\?.\?.\?.\?.\?.\?-|\\..\?.\?.\?.\?.\?.\?.\?.\?\\.|/.\?.\?.\?.\?.\?.\?.\

\?.\?/|0.\?.\?.\?.\?.\?.\?.\?.\?0|1.\?.\?.\?.\?.\?.\?.\?.\?1|2.\?.\?.\?.\?\

.\?.\?.\?.\?2|3.\?.\?.\?.\?.\?.\?.\?.\?3|4.\?.\?.\?.\?.\?.\?.\?.\?4|5.\?.\

\?.\?.\?.\?.\?.\?.\?5|6.\?.\?.\?.\?.\?.\?.\?.\?6|7.\?.\?.\?.\?.\?.\?.\?.\?\

7|8.\?.\?.\?.\?.\?.\?.\?.\?8|9.\?.\?.\?.\?.\?.\?.\?.\?9|:.\?.\?.\?.\?.\?.\

\?.\?.\?:|;.\?.\?.\?.\?.\?.\?.\?.\?;|<.\?.\?.\?.\?.\?.\?.\?.\?<|=.\?.\?.\?\

.\?.\?.\?.\?.\?=|>.\?.\?.\?.\?.\?.\?.\?.\?>|\\\?.\?.\?.\?.\?.\?.\?.\?.\?\\\

\?|@.\?.\?.\?.\?.\?.\?.\?.\?@|A.\?.\?.\?.\?.\?.\?.\?.\?A|B.\?.\?.\?.\?.\?.\

\?.\?.\?B|C.\?.\?.\?.\?.\?.\?.\?.\?C|D.\?.\?.\?.\?.\?.\?.\?.\?D|E.\?.\?.\?\

.\?.\?.\?.\?.\?E|F.\?.\?.\?.\?.\?.\?.\?.\?F|G.\?.\?.\?.\?.\?.\?.\?.\?G|H.\

\?.\?.\?.\?.\?.\?.\?.\?H|I.\?.\?.\?.\?.\?.\?.\?.\?I|J.\?.\?.\?.\?.\?.\?.\?\

.\?J|K.\?.\?.\?.\?.\?.\?.\?.\?K|L.\?.\?.\?.\?.\?.\?.\?.\?L|M.\?.\?.\?.\?.\

\?.\?.\?.\?M|N.\?.\?.\?.\?.\?.\?.\?.\?N|O.\?.\?.\?.\?.\?.\?.\?.\?O|P.\?.\?\

.\?.\?.\?.\?.\?.\?P|Q.\?.\?.\?.\?.\?.\?.\?.\?Q|R.\?.\?.\?.\?.\?.\?.\?.\?R|\

S.\?.\?.\?.\?.\?.\?.\?.\?S|T.\?.\?.\?.\?.\?.\?.\?.\?T|U.\?.\?.\?.\?.\?.\?.\

\?.\?U|V.\?.\?.\?.\?.\?.\?.\?.\?V|W.\?.\?.\?.\?.\?.\?.\?.\?W|X.\?.\?.\?.\?\

.\?.\?.\?.\?X|Y.\?.\?.\?.\?.\?.\?.\?.\?Y|Z.\?.\?.\?.\?.\?.\?.\?.\?Z|\\[.\?\

.\?.\?.\?.\?.\?.\?.\?\\[|\\].\?.\?.\?.\?.\?.\?.\?.\?\\]|\\].\?.\?.\?.\?.\?\

.\?.\?.\?\\]|\\^.\?.\?.\?.\?.\?.\?.\?.\?\\^|_.\?.\?.\?.\?.\?.\?.\?.\?_|`.\

\?.\?.\?.\?.\?.\?.\?.\?`|a.\?.\?.\?.\?.\?.\?.\?.\?a|b.\?.\?.\?.\?.\?.\?.\?\

.\?b|c.\?.\?.\?.\?.\?.\?.\?.\?c|d.\?.\?.\?.\?.\?.\?.\?.\?d|e.\?.\?.\?.\?.\

\?.\?.\?.\?e|f.\?.\?.\?.\?.\?.\?.\?.\?f|g.\?.\?.\?.\?.\?.\?.\?.\?g|h.\?.\?\

.\?.\?.\?.\?.\?.\?h|i.\?.\?.\?.\?.\?.\?.\?.\?i|j.\?.\?.\?.\?.\?.\?.\?.\?j|\

k.\?.\?.\?.\?.\?.\?.\?.\?k|l.\?.\?.\?.\?.\?.\?.\?.\?l|m.\?.\?.\?.\?.\?.\?.\

\?.\?m|n.\?.\?.\?.\?.\?.\?.\?.\?n|o.\?.\?.\?.\?.\?.\?.\?.\?o|p.\?.\?.\?.\?\

.\?.\?.\?.\?p|q.\?.\?.\?.\?.\?.\?.\?.\?q|r.\?.\?.\?.\?.\?.\?.\?.\?r|s.\?.\

\?.\?.\?.\?.\?.\?.\?s|t.\?.\?.\?.\?.\?.\?.\?.\?t|u.\?.\?.\?.\?.\?.\?.\?.\?\

u|v.\?.\?.\?.\?.\?.\?.\?.\?v|w.\?.\?.\?.\?.\?.\?.\?.\?w|x.\?.\?.\?.\?.\?.\

\?.\?.\?x|y.\?.\?.\?.\?.\?.\?.\?.\?y|z.\?.\?.\?.\?.\?.\?.\?.\?z|\\{.\?.\?.\

\?.\?.\?.\?.\?.\?\\{|\\|.\?.\?.\?.\?.\?.\?.\?.\?\\||\\}.\?.\?.\?.\?.\?.\?.\

\?.\?\\}|~.\?.\?.\?.\?.\?.\?.\?.\?~|\7F.\?.\?.\?.\?.\?.\?.\?.\?\7F|\80.\?.\

\?.\?.\?.\?.\?.\?.\?\80|\81.\?.\?.\?.\?.\?.\?.\?.\?\81|\82.\?.\?.\?.\?.\?.\

\?.\?.\?\82|\83.\?.\?.\?.\?.\?.\?.\?.\?\83|\84.\?.\?.\?.\?.\?.\?.\?.\?\84|\

\85.\?.\?.\?.\?.\?.\?.\?.\?\85|\86.\?.\?.\?.\?.\?.\?.\?.\?\86|\87.\?.\?.\?\

.\?.\?.\?.\?.\?\87|\88.\?.\?.\?.\?.\?.\?.\?.\?\88|\89.\?.\?.\?.\?.\?.\?.\?\

.\?\89|\8A.\?.\?.\?.\?.\?.\?.\?.\?\8A|\8B.\?.\?.\?.\?.\?.\?.\?.\?\8B|\8C.\

\?.\?.\?.\?.\?.\?.\?.\?\8C|\8D.\?.\?.\?.\?.\?.\?.\?.\?\8D|\8E.\?.\?.\?.\?.\

\?.\?.\?.\?\8E|\8F.\?.\?.\?.\?.\?.\?.\?.\?\8F|\90.\?.\?.\?.\?.\?.\?.\?.\?\

\90|\91.\?.\?.\?.\?.\?.\?.\?.\?\91|\92.\?.\?.\?.\?.\?.\?.\?.\?\92|\93.\?.\

\?.\?.\?.\?.\?.\?.\?\93|\94.\?.\?.\?.\?.\?.\?.\?.\?\94|\95.\?.\?.\?.\?.\?.\

\?.\?.\?\95|\96.\?.\?.\?.\?.\?.\?.\?.\?\96|\97.\?.\?.\?.\?.\?.\?.\?.\?\97|\

\98.\?.\?.\?.\?.\?.\?.\?.\?\98|\99.\?.\?.\?.\?.\?.\?.\?.\?\99|\9A.\?.\?.\?\

.\?.\?.\?.\?.\?\9A|\9B.\?.\?.\?.\?.\?.\?.\?.\?\9B|\9C.\?.\?.\?.\?.\?.\?.\?\

.\?\9C|\9D.\?.\?.\?.\?.\?.\?.\?.\?\9D|\9E.\?.\?.\?.\?.\?.\?.\?.\?\9E|\9F.\

\?.\?.\?.\?.\?.\?.\?.\?\9F|\A0.\?.\?.\?.\?.\?.\?.\?.\?\A0|\A1.\?.\?.\?.\?.\

\?.\?.\?.\?\A1|\A2.\?.\?.\?.\?.\?.\?.\?.\?\A2|\A3.\?.\?.\?.\?.\?.\?.\?.\?\

\A3|\A4.\?.\?.\?.\?.\?.\?.\?.\?\A4|\A5.\?.\?.\?.\?.\?.\?.\?.\?\A5|\A6.\?.\

\?.\?.\?.\?.\?.\?.\?\A6|\A7.\?.\?.\?.\?.\?.\?.\?.\?\A7|\A8.\?.\?.\?.\?.\?.\

\?.\?.\?\A8|\A9.\?.\?.\?.\?.\?.\?.\?.\?\A9|\AA.\?.\?.\?.\?.\?.\?.\?.\?\AA|\

\AB.\?.\?.\?.\?.\?.\?.\?.\?\AB|\AC.\?.\?.\?.\?.\?.\?.\?.\?\AC|\AD.\?.\?.\?\

.\?.\?.\?.\?.\?\AD|\AE.\?.\?.\?.\?.\?.\?.\?.\?\AE|\AF.\?.\?.\?.\?.\?.\?.\?\

.\?\AF|\B0.\?.\?.\?.\?.\?.\?.\?.\?\B0|\B1.\?.\?.\?.\?.\?.\?.\?.\?\B1|\B2.\

\?.\?.\?.\?.\?.\?.\?.\?\B2|\B3.\?.\?.\?.\?.\?.\?.\?.\?\B3|\B4.\?.\?.\?.\?.\

\?.\?.\?.\?\B4|\B5.\?.\?.\?.\?.\?.\?.\?.\?\B5|\B6.\?.\?.\?.\?.\?.\?.\?.\?\

\B6|\B7.\?.\?.\?.\?.\?.\?.\?.\?\B7|\B8.\?.\?.\?.\?.\?.\?.\?.\?\B8|\B9.\?.\

\?.\?.\?.\?.\?.\?.\?\B9|\BA.\?.\?.\?.\?.\?.\?.\?.\?\BA|\BB.\?.\?.\?.\?.\?.\

\?.\?.\?\BB|\BC.\?.\?.\?.\?.\?.\?.\?.\?\BC|\BD.\?.\?.\?.\?.\?.\?.\?.\?\BD|\

\BE.\?.\?.\?.\?.\?.\?.\?.\?\BE|\BF.\?.\?.\?.\?.\?.\?.\?.\?\BF|\C0.\?.\?.\?\

.\?.\?.\?.\?.\?\C0|\C1.\?.\?.\?.\?.\?.\?.\?.\?\C1|\C2.\?.\?.\?.\?.\?.\?.\?\

.\?\C2|\C3.\?.\?.\?.\?.\?.\?.\?.\?\C3|\C4.\?.\?.\?.\?.\?.\?.\?.\?\C4|\C5.\

\?.\?.\?.\?.\?.\?.\?.\?\C5|\C6.\?.\?.\?.\?.\?.\?.\?.\?\C6|\C7.\?.\?.\?.\?.\

\?.\?.\?.\?\C7|\C8.\?.\?.\?.\?.\?.\?.\?.\?\C8|\C9.\?.\?.\?.\?.\?.\?.\?.\?\

\C9|\CA.\?.\?.\?.\?.\?.\?.\?.\?\CA|\CB.\?.\?.\?.\?.\?.\?.\?.\?\CB|\CC.\?.\

\?.\?.\?.\?.\?.\?.\?\CC|\CD.\?.\?.\?.\?.\?.\?.\?.\?\CD|\CE.\?.\?.\?.\?.\?.\

\?.\?.\?\CE|\CF.\?.\?.\?.\?.\?.\?.\?.\?\CF|\D0.\?.\?.\?.\?.\?.\?.\?.\?\D0|\

\D1.\?.\?.\?.\?.\?.\?.\?.\?\D1|\D2.\?.\?.\?.\?.\?.\?.\?.\?\D2|\D3.\?.\?.\?\

.\?.\?.\?.\?.\?\D3|\D4.\?.\?.\?.\?.\?.\?.\?.\?\D4|\D5.\?.\?.\?.\?.\?.\?.\?\

.\?\D5|\D6.\?.\?.\?.\?.\?.\?.\?.\?\D6|\D7.\?.\?.\?.\?.\?.\?.\?.\?\D7|\D8.\

\?.\?.\?.\?.\?.\?.\?.\?\D8|\D9.\?.\?.\?.\?.\?.\?.\?.\?\D9|\DA.\?.\?.\?.\?.\

\?.\?.\?.\?\DA|\DB.\?.\?.\?.\?.\?.\?.\?.\?\DB|\DC.\?.\?.\?.\?.\?.\?.\?.\?\

\DC|\DD.\?.\?.\?.\?.\?.\?.\?.\?\DD|\DE.\?.\?.\?.\?.\?.\?.\?.\?\DE|\DF.\?.\

\?.\?.\?.\?.\?.\?.\?\DF|\E0.\?.\?.\?.\?.\?.\?.\?.\?\E0|\E1.\?.\?.\?.\?.\?.\

\?.\?.\?\E1|\E2.\?.\?.\?.\?.\?.\?.\?.\?\E2|\E3.\?.\?.\?.\?.\?.\?.\?.\?\E3|\

\E4.\?.\?.\?.\?.\?.\?.\?.\?\E4|\E5.\?.\?.\?.\?.\?.\?.\?.\?\E5|\E6.\?.\?.\?\

.\?.\?.\?.\?.\?\E6|\E7.\?.\?.\?.\?.\?.\?.\?.\?\E7|\E8.\?.\?.\?.\?.\?.\?.\?\

.\?\E8|\E9.\?.\?.\?.\?.\?.\?.\?.\?\E9|\EA.\?.\?.\?.\?.\?.\?.\?.\?\EA|\EB.\

\?.\?.\?.\?.\?.\?.\?.\?\EB|\EC.\?.\?.\?.\?.\?.\?.\?.\?\EC|\ED.\?.\?.\?.\?.\

\?.\?.\?.\?\ED|\EE.\?.\?.\?.\?.\?.\?.\?.\?\EE|\EF.\?.\?.\?.\?.\?.\?.\?.\?\

\EF|\F0.\?.\?.\?.\?.\?.\?.\?.\?\F0|\F1.\?.\?.\?.\?.\?.\?.\?.\?\F1|\F2.\?.\

\?.\?.\?.\?.\?.\?.\?\F2|\F3.\?.\?.\?.\?.\?.\?.\?.\?\F3|\F4.\?.\?.\?.\?.\?.\

\?.\?.\?\F4|\F5.\?.\?.\?.\?.\?.\?.\?.\?\F5|\F6.\?.\?.\?.\?.\?.\?.\?.\?\F6|\

\F7.\?.\?.\?.\?.\?.\?.\?.\?\F7|\F8.\?.\?.\?.\?.\?.\?.\?.\?\F8|\F9.\?.\?.\?\

.\?.\?.\?.\?.\?\F9|\FA.\?.\?.\?.\?.\?.\?.\?.\?\FA|\FB.\?.\?.\?.\?.\?.\?.\?\

.\?\FB|\FC.\?.\?.\?.\?.\?.\?.\?.\?\FC|\FD.\?.\?.\?.\?.\?.\?.\?.\?\FD|\FE.\

\?.\?.\?.\?.\?.\?.\?.\?\FE|\FF.\?.\?.\?.\?.\?.\?.\?.\?\FF)"

add name=skypetoskype regexp="^..\02............."

add name=counterstrike-source regexp="^\FF\FF\FF\FF.*cstrikeCounter-Strike"

add name=halflife2-deathmatch regexp="^\FF\FF\FF\FF.*hl2mpDeathmatch"

add name=freenet regexp="^\01[\08\t][\03\04]"

add name=battlefield2 regexp="^(\11 \01...\?\11|\FE\FD.\?.\?.\?.\?.\?.\?(\14\

\01\06|\FF\FF\FF))|[]\01].\?battlefield2"

add name=napster regexp="^(.[\02\06][!-~]+ [!-~]+ [0-9][0-9]\?[0-9]\?[0-9]\?[0\

-9]\? \"[\t-\r -~]+\" ([0-9]|10)|1(send|get)[!-~]+ \"[\t-\r -~]+\")"

add name=soulseek regexp="^(\05..\?|.\01.[ -~]+\01F..\?.\?.\?.\?.\?.\?.\?)\$"

add name=xunlei regexp="^[()]...\?.\?.\?(reg|get|query)"

add name=ssl regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)"

add name=citrix regexp="2&\85\92X"

add name=whois regexp="^[ !-~]+\r\

\n\$"

add name=dayofdefeat-source regexp="^\FF\FF\FF\FF.*dodDay of Defeat"

add name=teamspeak regexp="^\F4\BE\03.*teamspeak"

add name=worldofwarcraft regexp="^\06\EC\01"

add name=ventrilo regexp="^..\?v\\\$\CF"

add name=http-rtsp regexp="^(get[\t-\r -~]* Accept: application/x-rtsp-tunnell\

ed|http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*a=control:rtsp://)"

add name=thecircle regexp=\

"^t\03ni.\?[\01-\06]\?t[\01-\05]s[\

\n\0B](glob|who are you\$|query data)"

add name=uucp regexp="^\10here="

add name=pcanywhere regexp="^(nq|st)\$"

add name=subversion regexp="^\\( success \\( 1 2 \\("

add name=imesh regexp="^(post[\t-\r -~]*........................\

........

|4\80\?\r\?\FC\FF\04|get[\t-\r -~]*Host:\

\_imsh\\.download-prod\\.musicnet\\.com|\02(\01|\02)\83.\?.\?.\?.\?.\?.\?.\

\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\02(\01|\

\02)\83)"

add name=cimd regexp="\02[0-4][0-9]:[0-9]+.*\03\$"

add name=mohaa regexp="^\FF\FF\FF\FFgetstatus\

\n"

add name=stun regexp="^[\01\02]................\?\$"

add name=tor regexp=TOR1.*

add name=radmin regexp="^\01\01(\08\08|\1B\1B)\$"

add name=unset regexp=.

add name=chikka regexp="^CTPv1.[123] Kamusta.*\r\

\n\$"

add name=replaytv-ivs regexp="^(get /ivs-IVSGetFileChunk|http/(0\\.9|1\\.0|1\\\

.1) [1-5][0-9][0-9] [\t-\r -~]*#####REPLAY_CHUNK_START#####)"

add name=armagetron regexp=YCLC_E|CYEL

add name=speedtest-servers regexp="^.*(get|GET).+speedtest.*\$"

add name=torrent-wwws regexp="^.*(get|GET).+(torrent|thepiratebay|isohunt|ente\

add name=torrent-dns regexp="^.+(torrent|thepiratebay|isohunt|entertane|demono\

fulldls|btbot|fenopy|gpirate|commonbits).*\$"

add name=netflix regexp="^.*(get|GET).+(netflix).*\$"

add name=mp4 regexp="^.*(get|GET).+\\.mp4.*\$"

add name=swf regexp="^.*(get|GET).+\\.swf.*\$"

add name=flv regexp="^.*(get|GET).+\\.flv.*\$"

add name=video regexp="^.*(get|GET).+(\\.flv|\\.mp4|netflix|\\.swf).*\$"

訂閱：文章 (Atom)

EExcel 丞燕快速查詢2

[DHCP-SERVER] Delete all dynamic leases

mikrotik Qos Use Queue Tree and priority