最近使用心得，這種使用方式，在流量全滿是做不了QOS….它的Queue Tree是ok，但流量滿時，就算優先最低的，還是佔頻寬，最高的吃不到，所以 非常建議把Queue Tree和Simple Queues兩個都開，直接把每個ip設上Simple Queues，避免有人把頻寬佔滿。 這做法之後，就不用管那個人會多吃頻寬了。

Ether1是Wan，此法不用Simple Queues，用Queue Tree 參考網址： http://gregsowell.com/?p=4665 最重要 http://wiki.mikrotik.com/wiki/Basic_traffic_shaping_based_on_layer-7_protocols

圖

圖

圖

圖

queue tree

apr/21/2014 21:37:44 by RouterOS 6.11

software id = 7AF7-LQ1I

/queue tree add disabled=yes max-limit=30k name=p2p_prerouting packet-mark=Qos_p2p_8_prerouting
parent=global queue=default add disabled=yes max-limit=2M name=p2p_postouting packet-mark=Qos_p2p_8_postrouting
parent=global queue=default add disabled=yes name=root_postouting packet-mark=Qos_root_1_postrouting parent=
global priority=1 queue=default add disabled=yes name=root_prerouting packet-mark=Qos_root_1_prerouting parent=
global priority=1 queue=default add max-limit=15M name=in parent=global add max-limit=1M name=out parent=global add limit-at=3M max-limit=15M name=http-in packet-mark=http-in parent=in priority=4
queue=default add limit-at=4M max-limit=15M name=streaming-video-in packet-mark=
streaming-video-in parent=in priority=3 queue=streaming-video-in add limit-at=500k max-limit=15M name=gaming-in packet-mark=games-in parent=in
priority=2 queue=games-in-pcq add max-limit=15M name=download-in packet-mark=in parent=in queue=default add max-limit=1M name=upload-out packet-mark=out parent=out queue=default add limit-at=500k max-limit=1M name=gaming-out packet-mark=games-out parent=out
priority=2 queue=default add limit-at=500k max-limit=1M name=http-out packet-mark=http-out parent=out
priority=4 queue=default add limit-at=500k max-limit=1M name=streaming-video-out packet-mark=
streaming-video-out parent=out priority=3 queue=default add limit-at=1M max-limit=15M name=customer-servers-in packet-mark=
customer-servers-in parent=in priority=1 queue=default add limit-at=1M max-limit=1M name=customer-servers-out packet-mark=
customer-servers-out parent=out priority=1 queue=default add limit-at=500k max-limit=15M name=voip-in packet-mark=voip-in parent=in
priority=1 queue=default add limit-at=500k max-limit=15M name=vpn-in packet-mark=vpn-in parent=in priority=2
queue=default add limit-at=500k max-limit=1M name=voip-out packet-mark=voip-out parent=out
priority=1 queue=default add limit-at=500k max-limit=1M name=vpn-out packet-mark=vpn-out parent=out
priority=2 queue=default add limit-at=500k max-limit=15M name=admin-in packet-mark=admin-in parent=in
priority=1 queue=default add limit-at=500k max-limit=1M name=admin-out packet-mark=admin-out parent=out
priority=1 queue=default

ip firewall mangle

apr/21/2014 21:40:11 by RouterOS 6.11

software id = 7AF7-LQ1I

/ip firewall mangle add action=mark-packet chain=prerouting comment=Qos_p2p_8_prerouting
disabled=yes layer7-protocol=bittorrent new-packet-mark=
Qos_p2p_8_prerouting passthrough=no add action=mark-packet chain=prerouting disabled=yes layer7-protocol=edonkey
new-packet-mark=Qos_p2p_8_prerouting passthrough=no add action=mark-packet chain=prerouting disabled=yes layer7-protocol=
fasttrack new-packet-mark=Qos_p2p_8_prerouting passthrough=no add action=mark-packet chain=prerouting disabled=yes layer7-protocol=gnutella
new-packet-mark=Qos_p2p_8_prerouting passthrough=no add action=mark-packet chain=prerouting disabled=yes layer7-protocol=
torrent-dns new-packet-mark=Qos_p2p_8_prerouting passthrough=no add action=mark-packet chain=prerouting disabled=yes layer7-protocol=
torrent-wwws new-packet-mark=Qos_p2p_8_prerouting passthrough=no add action=mark-packet chain=prerouting disabled=yes new-packet-mark=
Qos_p2p_8_prerouting p2p=all-p2p passthrough=no add action=mark-packet chain=postrouting comment=Qos_p2p_8_postouting
disabled=yes layer7-protocol=bittorrent new-packet-mark=
Qos_p2p_8_postrouting passthrough=no add action=mark-packet chain=postrouting disabled=yes layer7-protocol=edonkey
new-packet-mark=Qos_p2p_8_postrouting passthrough=no add action=mark-packet chain=postrouting disabled=yes layer7-protocol=
fasttrack new-packet-mark=Qos_p2p_8_postrouting passthrough=no add action=mark-packet chain=postrouting disabled=yes layer7-protocol=
gnutella new-packet-mark=Qos_p2p_8_postrouting passthrough=no add action=mark-packet chain=postrouting disabled=yes layer7-protocol=
torrent-dns new-packet-mark=Qos_p2p_8_postrouting passthrough=no add action=mark-packet chain=postrouting disabled=yes layer7-protocol=
torrent-wwws new-packet-mark=Qos_p2p_8_postrouting passthrough=no add action=mark-packet chain=postrouting disabled=yes new-packet-mark=
Qos_p2p_8_postrouting p2p=all-p2p passthrough=no add action=mark-packet chain=prerouting comment=Qos_root_1_prerouting_upload
disabled=yes new-packet-mark=Qos_root_1_prerouting passthrough=no
src-address-list=root_ip add action=mark-packet chain=postrouting comment=Qos_root_1_postrouting_down
disabled=yes dst-address-list=root_ip new-packet-mark=
Qos_root_1_postrouting passthrough=no add action=mark-packet chain=prerouting comment=
“internal-traffic packet mark” dst-address-list=internal-nets
new-packet-mark=internal-traffic passthrough=no src-address-list=
internal-nets add action=mark-packet chain=prerouting comment=
“customer-servers-out packet mark” new-packet-mark=customer-servers-out
passthrough=no src-address-list=customer-servers add action=mark-packet chain=prerouting comment=
“customer-servers-in packet mark” dst-address-list=customer-servers
new-packet-mark=customer-servers-in passthrough=no add action=mark-packet chain=prerouting comment=“admin-in packet mark DNS”
in-interface=ether1 new-packet-mark=admin-in passthrough=no protocol=udp
src-port=53 add action=mark-packet chain=prerouting comment=“admin-in packet mark snmp”
dst-port=161 in-interface=ether1 new-packet-mark=admin-in passthrough=no
protocol=udp add action=mark-connection chain=prerouting comment=
“Remote Protocols admin connection mark” new-connection-mark=admin port=
20,21,22,23,3389,8291 protocol=tcp add action=mark-connection chain=prerouting comment=
“icmp connection mark as admin” new-connection-mark=admin protocol=icmp
src-address-list=internal-nets add action=mark-packet chain=prerouting comment=“admin-in packet mark”
connection-mark=admin in-interface=ether1 new-packet-mark=admin-in
passthrough=no add action=mark-packet chain=prerouting comment=“admin-out packet mark”
connection-mark=admin new-packet-mark=admin-out passthrough=no add action=mark-connection chain=prerouting comment=
“streaming video connection mark” dst-port=80 layer7-protocol=video
new-connection-mark=streaming-video protocol=tcp src-address-list=
internal-nets add action=mark-packet chain=prerouting comment=
“streaming video in packet mark” connection-mark=streaming-video
in-interface=ether1 new-packet-mark=streaming-video-in passthrough=no add action=mark-packet chain=prerouting comment=
“streaming video out packet mark” connection-mark=streaming-video
new-packet-mark=streaming-video-out passthrough=no add action=mark-connection chain=prerouting comment=
“http traffic connection mark” dst-port=80,443 new-connection-mark=http
protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“http traffic connection mark” connection-bytes=5000000-4294967295
dst-port=80,443 new-connection-mark=http-download protocol=tcp
src-address-list=internal-nets add action=mark-packet chain=prerouting comment=“http in packet mark”
connection-mark=http in-interface=ether1 new-packet-mark=http-in
passthrough=no add action=mark-packet chain=prerouting comment=“http out packet mark”
connection-mark=http new-packet-mark=http-out passthrough=no add action=mark-connection chain=prerouting comment=
“wow connetion mark as gaming” dst-port=
1119,3724,6112-6114,4000,6881-6999 new-connection-mark=games protocol=tcp
src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“eve online connetion mark as gaming” dst-address=87.237.38.200
new-connection-mark=games src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“starcraft 2 connetion mark as gaming” dst-port=1119 new-connection-mark=
games protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“heros of newerth connetion mark as gaming” dst-port=11031,11235-11335
new-connection-mark=games protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“steam connetion mark as gaming” dst-port=27014-27050
new-connection-mark=games protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“xbox live connetion mark as gaming” dst-port=3074 new-connection-mark=
games protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“ps3 online connetion mark as gaming” dst-port=5223 new-connection-mark=
games protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“wii online connetion mark as gaming” dst-port=28910,29900,29901,29920
new-connection-mark=games protocol=tcp src-address-list=internal-nets add action=mark-connection chain=prerouting comment=
“lol connetion mark as gaming” dst-port=2099,5223,5222,8393-8400
new-connection-mark=games protocol=tcp src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“games packet mark forever-saken-game” dst-address-list=external-nets
new-packet-mark=games-in passthrough=no src-address-list=
forever-saken-game add action=mark-packet chain=prerouting comment=“games packet mark wow”
dst-address-list=external-nets new-packet-mark=games-in passthrough=no
protocol=udp src-port=53,3724 add action=mark-packet chain=prerouting comment=
“games packet mark starcraft2” dst-address-list=external-nets
new-packet-mark=games-in passthrough=no protocol=udp src-port=1119,6113 add action=mark-packet chain=prerouting comment=“games packet mark HoN”
dst-address-list=external-nets new-packet-mark=games-in passthrough=no
protocol=udp src-port=11031,11235-11335 add action=mark-packet chain=prerouting comment=“games packet mark steam in”
dst-address-list=external-nets new-packet-mark=games-in passthrough=no
port=4380,28960,27000-27030 protocol=udp add action=mark-packet chain=prerouting comment=“games packet mark steam out”
dst-port=53,1500,3005,3101,3478,4379-4380,4380,28960,27000-27030,28960
new-packet-mark=games-out passthrough=no protocol=udp src-address-list=
internal-nets add action=mark-packet chain=prerouting comment=“games packet mark xbox live”
dst-address-list=external-nets new-packet-mark=games-in passthrough=no
protocol=udp src-port=88,3074,3544,4500 add action=mark-packet chain=prerouting comment=
“games packet mark ps3 online” dst-address-list=external-nets
new-packet-mark=games-in passthrough=no protocol=udp src-port=
3478,3479,3658 add action=mark-packet chain=prerouting comment=“games packet mark lol”
dst-address-list=external-nets new-packet-mark=games-in passthrough=no
protocol=udp src-port=5000-5500 add action=mark-packet chain=prerouting comment=“games packet mark in”
connection-mark=games dst-address-list=external-nets new-packet-mark=
games-in passthrough=no add action=mark-packet chain=prerouting comment=“games packet mark out”
connection-mark=games new-packet-mark=games-out passthrough=no
src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“voip-in packet mark teamspeak” dst-address-list=external-nets
new-packet-mark=voip-in passthrough=no protocol=udp src-port=9987 add action=mark-packet chain=prerouting comment=
“voip-out packet mark teamspeak” dst-port=9987 new-packet-mark=voip-out
passthrough=no protocol=udp src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“voip-out packet mark teamspeak” dst-address-list=external-nets
new-packet-mark=voip-in passthrough=no protocol=udp src-port=9987 add action=mark-packet chain=prerouting comment=
“voip-in packet mark ventrilo” dst-address-list=external-nets
new-packet-mark=voip-in passthrough=no protocol=udp src-port=3784 add action=mark-packet chain=prerouting comment=
“voip-out packet mark ventrilo” dst-port=3784 new-packet-mark=voip-out
passthrough=no protocol=udp src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“voip-in packet mark ventrilo” dst-address-list=external-nets
new-packet-mark=voip-in passthrough=no protocol=tcp src-port=3784 add action=mark-packet chain=prerouting comment=
“voip-out packet mark ventrilo” dst-port=3784 new-packet-mark=voip-out
passthrough=no protocol=tcp src-address-list=internal-nets add action=mark-packet chain=prerouting comment=“voip-in packet mark SIP”
dst-address-list=internal-nets new-packet-mark=voip-in passthrough=no
port=5060 protocol=tcp add action=mark-packet chain=prerouting comment=“voip-out packet mark SIP”
new-packet-mark=voip-out passthrough=no port=5060 protocol=tcp
src-address-list=internal-nets add action=mark-packet chain=prerouting comment=“voip-in packet mark udp SIP”
dst-address-list=internal-nets new-packet-mark=voip-in passthrough=no
port=5004,5060 protocol=udp add action=mark-packet chain=prerouting comment=
“voip-out packet mark udp SIP” new-packet-mark=voip-out passthrough=no
port=5004,5060 protocol=udp src-address-list=internal-nets add action=mark-packet chain=prerouting comment=“voip-in packet mark RTP”
dst-address-list=internal-nets new-packet-mark=voip-in packet-size=
100-400 passthrough=no port=16348-32768 protocol=udp add action=mark-packet chain=prerouting comment=“voip-out packet mark RTP”
new-packet-mark=voip-in packet-size=100-400 passthrough=no port=
16348-32768 protocol=udp src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“voip-in packet mark SKYPE_OUT” dst-address-list=internal-nets
layer7-protocol=skypeout new-packet-mark=voip-in passthrough=no add action=mark-packet chain=prerouting comment=
“voip-out packet mark SKYPE_OUT” layer7-protocol=skypeout
new-packet-mark=voip-in passthrough=no src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“voip-out packet mark SKYPETOSKYPE” layer7-protocol=skypetoskype
new-packet-mark=voip-in passthrough=no src-address-list=internal-nets add action=mark-packet chain=prerouting comment=
“voip-in packet mark SKYPETOSKYPE” dst-address-list=internal-nets
layer7-protocol=skypetoskype new-packet-mark=voip-in passthrough=no add action=mark-packet chain=prerouting comment=“vpn-in packet mark GRE”
in-interface=ether1 new-packet-mark=vpn-in passthrough=no protocol=gre add action=mark-packet chain=prerouting comment=“vpn-out packet mark GRE”
new-packet-mark=vpn-out passthrough=no protocol=gre add action=mark-packet chain=prerouting comment=“vpn-in packet mark ESP”
in-interface=ether1 new-packet-mark=vpn-in passthrough=no protocol=
ipsec-esp add action=mark-packet chain=prerouting comment=“vpn-out packet mark ESP”
new-packet-mark=vpn-out passthrough=no protocol=ipsec-esp add action=mark-packet chain=prerouting comment=
“vpn-in packet mark VPN UDP ports” in-interface=ether1 new-packet-mark=
vpn-in passthrough=no protocol=udp src-port=500,1701,4500 add action=mark-packet chain=prerouting comment=
“vpn-out packet mark VPN UDP ports” new-packet-mark=vpn-out passthrough=
no protocol=udp src-port=500,1701,4500 add action=mark-packet chain=prerouting comment=“vpn-in packet mark PPTP”
in-interface=ether1 new-packet-mark=vpn-in passthrough=no protocol=tcp
src-port=1723 add action=mark-packet chain=prerouting comment=“vpn-out packet mark PPTP”
new-packet-mark=vpn-out passthrough=no protocol=tcp src-port=1723 add action=mark-packet chain=prerouting comment=“all in” in-interface=ether1
new-packet-mark=in passthrough=no add action=mark-packet chain=prerouting comment=“all out” new-packet-mark=out
passthrough=no

ip firewall address-list

apr/21/2014 21:41:35 by RouterOS 6.11

software id = 7AF7-LQ1I

/ip firewall address-list add address=192.168.5.0/24 list=internal-nets add address=192.168.1.0/24 list=external-nets add address=192.168.5.253 list=customer-servers

ip firewall layer7-protocol

apr/21/2014 21:42:16 by RouterOS 6.11

software id = 7AF7-LQ1I

/ip firewall layer7-protocol add name=edonkey regexp="^[\C5\D4\E3-\E5].?.?.?.?([\01\02\05\14\15\16\18
\19\1A\1B\1C !234568@ABCFGHIJKLMNOPQRSTUVWX[\81\82\90\91\93\96\97\98\99\ \9A\9B\9C\9E\A0\A1\A2\A3\A4]|Y................\?[ -~]|\96....\$)" add name=goboogy regexp="|^get /getfilebyhash\\.cgi\\\?|^get /queue_\ register\\.cgi\\\?|^get /getupdowninfo\\.cgi\\\?" add name=soribada regexp="^GETMP3\r\ \nFilename|^\01.\?.\?.\?(Q:\\+|Q2:)|^\10[\14-\16]\10[\15-\17].\?.\?.\?.\?\ \$" add name=rdp regexp=rdpdr.*cliprdr.*rdpsnd add name=gnutella regexp="^(gnd[\01\02]\?.\?.\?\01|gnutella connect/[012]\\.[0\ -9]\r\ \n|get /uri-res/n2r\\\?urn:sha1:|get /.*user-agent: (gtk-gnutella|bearshar\ e|mactella|gnucleus|gnotella|limewire|imesh)|get /.*content-type: applicat\ ion/x-gnutella-packets|giv [0-9]*:[0-9a-f]*/|queue [0-9a-f]* [1-9][0-9]\?[\ 0-9]\?\\.[1-9][0-9]\?[0-9]\?\\.[1-9][0-9]\?[0-9]\?\\.[1-9][0-9]\?[0-9]\?:[\ 1-9][0-9]\?[0-9]\?[0-9]\?|gnutella.*content-type: application/x-gnutella|.\ ..................\?lime)" add name=cvs regexp="^BEGIN (AUTH|VERIFICATION|GSSAPI) REQUEST\ \n" add name=nbns regexp="\01\10\01|\\)\10\01\01|0\10\01" add name=shoutcast regexp=\ "icy [1-5][0-9][0-9] [\t-\r -~]*(content-type:audio|icy-)" add name=dns regexp="^.\?.\?.\?.\?[\01\02].\?.\?.\?.\?.\?.\?[\01-\?][a-z0-9][\ \01-\?a-z]*[\02-\06][a-z][a-z][fglmoprstuvz]\?[aeop]\?(um)\?[\01-\10\1C][\ \01\03\04\FF]" add name=quake-halflife regexp="^\FF\FF\FF\FFget(info|challenge)" add name=poco regexp="^\80\94\ \n\01....\1F\9E" add name=ciscovpn regexp="^\01\F4\01\F4" add name=x11 regexp="^[lb].\?\0B" add name=xboxlive regexp="^X\80........\F3|^\06XN" add name=applejuice regexp="^ajprot\r\ \n" add name=zmaap regexp="^\1B\D7;H[\01\02]\01\?\01" add name=live365 regexp=membername.*session.*player add name=rlogin regexp="^[a-z][a-z0-9][a-z0-9]+/[1-9][0-9]\?[0-9]\?[0-9]\?00" add name=http regexp="http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*(con\ nection:|content-type:|content-length:|date:)|post [\t-\r -~]* http/[01]\\\ .[019]" add name=sip regexp=\ "^(invite|register|cancel) sip[\t-\r -~]*sip/[0-2]\\.[0-9]" add name=pop3 regexp="^(\\+ok |-err )" add name=smb regexp="\FFsmb[r%]" add name=quake1 regexp="^\80\0C\01quake\03" add name=lpd regexp="^(\01[!-~]+|\02[!-~]+\ \n.[\01\02\03][\01-\ \n -~]*|[\03\04][!-~]+[\t-\r]+[a-z][\t-\r -~]*|\05[!-~]+[\t-\r]+([a-z][!-~\ ]*[\t-\r]+[1-9][0-9]\?[0-9]\?|root[\t-\r]+[!-~]+).*)\ \n\$" add name=mute regexp="^(Public|AES)Key: [0-9a-f]*\ \nEnd(Public|AES)Key\ \n\$" add name=ssh regexp="^ssh-[12]\\.[0-9]" add name=jabber regexp=\ " add name=bittorrent regexp="^(\13bittorrent protocol|azver\01\$|get /scrape\\\ \?info_hash=)|d1:ad2:id20:|\08'7P\\)[RP]" add name=ncp regexp="^(dmdt.*\01.*(\"\"|\11\11|uu)|tncp.*33)" add name=tls regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)" add name=directconnect regexp="^(\\\$mynick |\\\$lock |\\\$key )" add name=netbios regexp="\81.\?.\?.[A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-\ P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A\ -P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][\ A-P][A-P]" add name=tftp regexp="^(\01|\02)[ -~]*(netascii|octet|mail)" add name=subspace regexp="^\01....\11\10........\01\$" add name=hotline regexp="^....................TRTPHOTL\01\02" add name=doom3 regexp="^\FF\FFchallenge" add name=ftp regexp="^220[\t-\r -~]*ftp" add name=kugoo regexp="^1..\8E" add name=tsp regexp="^[\01-\13\16-\$]\01.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?[ -~]+" add name=battlefield1942 regexp="^\01\11\10\\|\F8\02\10@\06" add name=ssdp regexp="^notify[\t-\r ]\\*[\t-\r ]http/1\\.1[\t-\r -~]*ssdp:(ali\ ve|byebye)|^m-search[\t-\r ]\\*[\t-\r ]http/1\\.1[\t-\r -~]*ssdp:discover" add name=imap regexp="^(\\* ok|a[0-9]+ noop)" add name=ares regexp="^\03[]Z].\?.\?\05\$" add name=fasttrack regexp="^get (/.download/[ -~]*|/.supernode[ -~]|/.status[ \ -~]|/.network[ -~]*|/.files|/.hash=[0-9a-f]*/[ -~]*) http/1.1|user-agent: \ kazaa|x-kazaa(-username|-network|-ip|-supernodeip|-xferid|-xferuid|tag)|^g\ ive [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]\?[0-9]\?[0-9]\?" add name=qq regexp="^.\?\02.+\03\$" add name=100bao regexp="^\01\01\05\ \n" add name=aim regexp=\ "^(\\*[\01\02].*\03\0B|\\*\01.\?.\?.\?.\?\01)|flapon|toc_signon.*0x" add name=unknown regexp=. add name=msn-filetransfer regexp=\ "^(ver [ -~]*msnftp\r\ \nver msnftp\r\ \nusr|method msnmsgr:)" add name=yahoo regexp="^(ymsg|ypns|yhoo).\?.\?.\?.\?.\?.\?.\?[lwt].*\C0\80" add name=validcertssl regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B).*\ (thawte|equifax secure|rsa data security, inc|verisign, inc|gte cybertrust\ \_root|entrust\\.net limited)" add name=ntp regexp="^([\13\1B#\D3\DB\E3]|[\14\1C\$].......\?.\?.\?.\?.\?.\?.\ \?.\?.\?[\C6-\FF])" add name=gnucleuslan regexp=\ "gnuclear connect/[\t-\r -~]*user-agent: gnucleus [\t-\r -~]*lan:" add name=vnc regexp="^rfb 00[1-9]\\.00[0-9]\ \n\$" add name=bgp regexp=\ "^\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF..\?\01[\03\04]" add name=tesla regexp="\03\9A\89\"111\\.00 Beta |\E2 add name=openft regexp="x-openftalias: [-)(0-9a-z ~.]" add name=h323 regexp=\ "^\03..\?\08...\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\05" add name=finger regexp=\ "^[a-z][a-z0-9\\-_]+|login: [\t-\r -~]* name: [\t-\r -~]* Directory:" add name=ident regexp="^[1-9][0-9]\?[0-9]\?[0-9]\?[0-9]\?[\t-\r]*,[\t-\r]*[1-9\ ][0-9]\?[0-9]\?[0-9]\?[0-9]\?(\r\ \n|[\r\ \n])\?\$" add name=gkrellm regexp="^gkrellm [23].[0-9].[0-9]\ \n\$" add name=hddtemp regexp=\ "^\\|/dev/[a-z][a-z][a-z]\\|[0-9a-z]*\\|[0-9][0-9]\\|[cfk]\\|" add name=socks regexp="\05[\01-\08]*\05[\01-\08]\?.*\05[\01-\03][\01\03].*\05[\ \01-\08]\?[\01\03]" add name=biff regexp="^[a-z][a-z0-9]+@[1-9][0-9]+\$" add name=dhcp regexp="^[\01\02][\01- ]\06.*c\82sc" add name=smtp regexp="^220[\t-\r -~]* (e\?smtp|simple mail)" add name=ipp regexp=ipp:// add name=msnmessenger regexp="ver [0-9]+ msnp[1-9][0-9]\? [\t-\r -~]*cvr0\r\ \n\$|usr 1 [!-~]+ [0-9. ]+\r\ \n\$|ans 1 [!-~]+ [0-9. ]+\r\ \n\$" add name=irc regexp="^(nick[\t-\r -~]*user[\t-\r -~]*:|user[\t-\r -~]*:[\02-\r\ \_-~]*nick[\t-\r -~]*\r\ \n)" add name=gopher regexp="^[\t-\r]*[1-9,+tgi][\t-\r -~]*\t[\t-\r -~]*\t[a-z0-9.]\ *\\.[a-z][a-z].\?.\?\t[1-9]" add name=telnet regexp="^\FF[\FB-\FE].\FF[\FB-\FE].\FF[\FB-\FE]" add name=snmp regexp="^\02\01\04.+([\A0-\A3]\02[\01-\04].\?.\?.\?.\?\02\01.\?\ \02\01.\?0|\A4\06.+@\04.\?.\?.\?.\?\02\01.\?\02\01.\?C)" add name=nntp regexp=\ "^(20[01][\t-\r -~]*AUTHINFO USER|20[01][\t-\r -~]*news)" add name=aimwebcontent regexp=user-agent:aim/ add name=rtsp regexp="rtsp/1.0 200 ok" add name=skypeout regexp="^(\01.\?.\?.\?.\?.\?.\?.\?.\?\01|\02.\?.\?.\?.\?.\?.\ \?.\?.\?\02|\03.\?.\?.\?.\?.\?.\?.\?.\?\03|\04.\?.\?.\?.\?.\?.\?.\?.\?\04|\ \05.\?.\?.\?.\?.\?.\?.\?.\?\05|\06.\?.\?.\?.\?.\?.\?.\?.\?\06|\07.\?.\?.\?\ .\?.\?.\?.\?.\?\07|\08.\?.\?.\?.\?.\?.\?.\?.\?\08|\t.\?.\?.\?.\?.\?.\?.\?.\ \?\t|\ \n.\?.\?.\?.\?.\?.\?.\?.\?\ \n|\0B.\?.\?.\?.\?.\?.\?.\?.\?\0B|\0C.\?.\?.\?.\?.\?.\?.\?.\?\0C|\r.\?.\?.\ \?.\?.\?.\?.\?.\?\r|\0E.\?.\?.\?.\?.\?.\?.\?.\?\0E|\0F.\?.\?.\?.\?.\?.\?.\ \?.\?\0F|\10.\?.\?.\?.\?.\?.\?.\?.\?\10|\11.\?.\?.\?.\?.\?.\?.\?.\?\11|\12\ .\?.\?.\?.\?.\?.\?.\?.\?\12|\13.\?.\?.\?.\?.\?.\?.\?.\?\13|\14.\?.\?.\?.\?\ .\?.\?.\?.\?\14|\15.\?.\?.\?.\?.\?.\?.\?.\?\15|\16.\?.\?.\?.\?.\?.\?.\?.\?\ \16|\17.\?.\?.\?.\?.\?.\?.\?.\?\17|\18.\?.\?.\?.\?.\?.\?.\?.\?\18|\19.\?.\ \?.\?.\?.\?.\?.\?.\?\19|\1A.\?.\?.\?.\?.\?.\?.\?.\?\1A|\1B.\?.\?.\?.\?.\?.\ \?.\?.\?\1B|\1C.\?.\?.\?.\?.\?.\?.\?.\?\1C|\1D.\?.\?.\?.\?.\?.\?.\?.\?\1D|\ \1E.\?.\?.\?.\?.\?.\?.\?.\?\1E|\1F.\?.\?.\?.\?.\?.\?.\?.\?\1F| .\?.\?.\?.\ \?.\?.\?.\?.\? |!.\?.\?.\?.\?.\?.\?.\?.\?!|\".\?.\?.\?.\?.\?.\?.\?.\?\"|#.\ \?.\?.\?.\?.\?.\?.\?.\?#|\\\$.\?.\?.\?.\?.\?.\?.\?.\?\\\$|%.\?.\?.\?.\?.\?\ .\?.\?.\?%|&.\?.\?.\?.\?.\?.\?.\?.\?&|'.\?.\?.\?.\?.\?.\?.\?.\?'|\\(.\?.\?\ .\?.\?.\?.\?.\?.\?\\(|\\).\?.\?.\?.\?.\?.\?.\?.\?\\)|\\*.\?.\?.\?.\?.\?.\?\ .\?.\?\\*|\\+.\?.\?.\?.\?.\?.\?.\?.\?\\+|,.\?.\?.\?.\?.\?.\?.\?.\?,|-.\?.\ \?.\?.\?.\?.\?.\?.\?-|\\..\?.\?.\?.\?.\?.\?.\?.\?\\.|/.\?.\?.\?.\?.\?.\?.\ \?.\?/|0.\?.\?.\?.\?.\?.\?.\?.\?0|1.\?.\?.\?.\?.\?.\?.\?.\?1|2.\?.\?.\?.\?\ .\?.\?.\?.\?2|3.\?.\?.\?.\?.\?.\?.\?.\?3|4.\?.\?.\?.\?.\?.\?.\?.\?4|5.\?.\ \?.\?.\?.\?.\?.\?.\?5|6.\?.\?.\?.\?.\?.\?.\?.\?6|7.\?.\?.\?.\?.\?.\?.\?.\?\ 7|8.\?.\?.\?.\?.\?.\?.\?.\?8|9.\?.\?.\?.\?.\?.\?.\?.\?9|:.\?.\?.\?.\?.\?.\ \?.\?.\?:|;.\?.\?.\?.\?.\?.\?.\?.\?;|<.\?.\?.\?.\?.\?.\?.\?.\?<|=.\?.\?.\?\ .\?.\?.\?.\?.\?=|>.\?.\?.\?.\?.\?.\?.\?.\?>|\\\?.\?.\?.\?.\?.\?.\?.\?.\?\\\ \?|@.\?.\?.\?.\?.\?.\?.\?.\?@|A.\?.\?.\?.\?.\?.\?.\?.\?A|B.\?.\?.\?.\?.\?.\ \?.\?.\?B|C.\?.\?.\?.\?.\?.\?.\?.\?C|D.\?.\?.\?.\?.\?.\?.\?.\?D|E.\?.\?.\?\ .\?.\?.\?.\?.\?E|F.\?.\?.\?.\?.\?.\?.\?.\?F|G.\?.\?.\?.\?.\?.\?.\?.\?G|H.\ \?.\?.\?.\?.\?.\?.\?.\?H|I.\?.\?.\?.\?.\?.\?.\?.\?I|J.\?.\?.\?.\?.\?.\?.\?\ .\?J|K.\?.\?.\?.\?.\?.\?.\?.\?K|L.\?.\?.\?.\?.\?.\?.\?.\?L|M.\?.\?.\?.\?.\ \?.\?.\?.\?M|N.\?.\?.\?.\?.\?.\?.\?.\?N|O.\?.\?.\?.\?.\?.\?.\?.\?O|P.\?.\?\ .\?.\?.\?.\?.\?.\?P|Q.\?.\?.\?.\?.\?.\?.\?.\?Q|R.\?.\?.\?.\?.\?.\?.\?.\?R|\ S.\?.\?.\?.\?.\?.\?.\?.\?S|T.\?.\?.\?.\?.\?.\?.\?.\?T|U.\?.\?.\?.\?.\?.\?.\ \?.\?U|V.\?.\?.\?.\?.\?.\?.\?.\?V|W.\?.\?.\?.\?.\?.\?.\?.\?W|X.\?.\?.\?.\?\ .\?.\?.\?.\?X|Y.\?.\?.\?.\?.\?.\?.\?.\?Y|Z.\?.\?.\?.\?.\?.\?.\?.\?Z|\\[.\?\ .\?.\?.\?.\?.\?.\?.\?\\[|\\].\?.\?.\?.\?.\?.\?.\?.\?\\]|\\].\?.\?.\?.\?.\?\ .\?.\?.\?\\]|\\^.\?.\?.\?.\?.\?.\?.\?.\?\\^|_.\?.\?.\?.\?.\?.\?.\?.\?_|.
?.?.?.?.?.?.?.?`|a.?.?.?.?.?.?.?.?a|b.?.?.?.?.?.?.?
.?b|c.?.?.?.?.?.?.?.?c|d.?.?.?.?.?.?.?.?d|e.?.?.?.?.
?.?.?.?e|f.?.?.?.?.?.?.?.?f|g.?.?.?.?.?.?.?.?g|h.?.?
.?.?.?.?.?.?h|i.?.?.?.?.?.?.?.?i|j.?.?.?.?.?.?.?.?j|
k.?.?.?.?.?.?.?.?k|l.?.?.?.?.?.?.?.?l|m.?.?.?.?.?.?.
?.?m|n.?.?.?.?.?.?.?.?n|o.?.?.?.?.?.?.?.?o|p.?.?.?.?
.?.?.?.?p|q.?.?.?.?.?.?.?.?q|r.?.?.?.?.?.?.?.?r|s.?.
?.?.?.?.?.?.?s|t.?.?.?.?.?.?.?.?t|u.?.?.?.?.?.?.?.?
u|v.?.?.?.?.?.?.?.?v|w.?.?.?.?.?.?.?.?w|x.?.?.?.?.?.
?.?.?x|y.?.?.?.?.?.?.?.?y|z.?.?.?.?.?.?.?.?z|\{.?.?.
?.?.?.?.?.?\{|\|.?.?.?.?.?.?.?.?\||\}.?.?.?.?.?.?.
?.?\}|~.?.?.?.?.?.?.?.?~|\7F.?.?.?.?.?.?.?.?\7F|\80.?.
?.?.?.?.?.?.?\80|\81.?.?.?.?.?.?.?.?\81|\82.?.?.?.?.?.
?.?.?\82|\83.?.?.?.?.?.?.?.?\83|\84.?.?.?.?.?.?.?.?\84|
\85.?.?.?.?.?.?.?.?\85|\86.?.?.?.?.?.?.?.?\86|\87.?.?.?
.?.?.?.?.?\87|\88.?.?.?.?.?.?.?.?\88|\89.?.?.?.?.?.?.?
.?\89|\8A.?.?.?.?.?.?.?.?\8A|\8B.?.?.?.?.?.?.?.?\8B|\8C.
?.?.?.?.?.?.?.?\8C|\8D.?.?.?.?.?.?.?.?\8D|\8E.?.?.?.?.
?.?.?.?\8E|\8F.?.?.?.?.?.?.?.?\8F|\90.?.?.?.?.?.?.?.?
\90|\91.?.?.?.?.?.?.?.?\91|\92.?.?.?.?.?.?.?.?\92|\93.?.
?.?.?.?.?.?.?\93|\94.?.?.?.?.?.?.?.?\94|\95.?.?.?.?.?.
?.?.?\95|\96.?.?.?.?.?.?.?.?\96|\97.?.?.?.?.?.?.?.?\97|
\98.?.?.?.?.?.?.?.?\98|\99.?.?.?.?.?.?.?.?\99|\9A.?.?.?
.?.?.?.?.?\9A|\9B.?.?.?.?.?.?.?.?\9B|\9C.?.?.?.?.?.?.?
.?\9C|\9D.?.?.?.?.?.?.?.?\9D|\9E.?.?.?.?.?.?.?.?\9E|\9F.
?.?.?.?.?.?.?.?\9F|\A0.?.?.?.?.?.?.?.?\A0|\A1.?.?.?.?.
?.?.?.?\A1|\A2.?.?.?.?.?.?.?.?\A2|\A3.?.?.?.?.?.?.?.?
\A3|\A4.?.?.?.?.?.?.?.?\A4|\A5.?.?.?.?.?.?.?.?\A5|\A6.?.
?.?.?.?.?.?.?\A6|\A7.?.?.?.?.?.?.?.?\A7|\A8.?.?.?.?.?.
?.?.?\A8|\A9.?.?.?.?.?.?.?.?\A9|\AA.?.?.?.?.?.?.?.?\AA|
\AB.?.?.?.?.?.?.?.?\AB|\AC.?.?.?.?.?.?.?.?\AC|\AD.?.?.?
.?.?.?.?.?\AD|\AE.?.?.?.?.?.?.?.?\AE|\AF.?.?.?.?.?.?.?
.?\AF|\B0.?.?.?.?.?.?.?.?\B0|\B1.?.?.?.?.?.?.?.?\B1|\B2.
?.?.?.?.?.?.?.?\B2|\B3.?.?.?.?.?.?.?.?\B3|\B4.?.?.?.?.
?.?.?.?\B4|\B5.?.?.?.?.?.?.?.?\B5|\B6.?.?.?.?.?.?.?.?
\B6|\B7.?.?.?.?.?.?.?.?\B7|\B8.?.?.?.?.?.?.?.?\B8|\B9.?.
?.?.?.?.?.?.?\B9|\BA.?.?.?.?.?.?.?.?\BA|\BB.?.?.?.?.?.
?.?.?\BB|\BC.?.?.?.?.?.?.?.?\BC|\BD.?.?.?.?.?.?.?.?\BD|
\BE.?.?.?.?.?.?.?.?\BE|\BF.?.?.?.?.?.?.?.?\BF|\C0.?.?.?
.?.?.?.?.?\C0|\C1.?.?.?.?.?.?.?.?\C1|\C2.?.?.?.?.?.?.?
.?\C2|\C3.?.?.?.?.?.?.?.?\C3|\C4.?.?.?.?.?.?.?.?\C4|\C5.
?.?.?.?.?.?.?.?\C5|\C6.?.?.?.?.?.?.?.?\C6|\C7.?.?.?.?.
?.?.?.?\C7|\C8.?.?.?.?.?.?.?.?\C8|\C9.?.?.?.?.?.?.?.?
\C9|\CA.?.?.?.?.?.?.?.?\CA|\CB.?.?.?.?.?.?.?.?\CB|\CC.?.
?.?.?.?.?.?.?\CC|\CD.?.?.?.?.?.?.?.?\CD|\CE.?.?.?.?.?.
?.?.?\CE|\CF.?.?.?.?.?.?.?.?\CF|\D0.?.?.?.?.?.?.?.?\D0|
\D1.?.?.?.?.?.?.?.?\D1|\D2.?.?.?.?.?.?.?.?\D2|\D3.?.?.?
.?.?.?.?.?\D3|\D4.?.?.?.?.?.?.?.?\D4|\D5.?.?.?.?.?.?.?
.?\D5|\D6.?.?.?.?.?.?.?.?\D6|\D7.?.?.?.?.?.?.?.?\D7|\D8.
?.?.?.?.?.?.?.?\D8|\D9.?.?.?.?.?.?.?.?\D9|\DA.?.?.?.?.
?.?.?.?\DA|\DB.?.?.?.?.?.?.?.?\DB|\DC.?.?.?.?.?.?.?.?
\DC|\DD.?.?.?.?.?.?.?.?\DD|\DE.?.?.?.?.?.?.?.?\DE|\DF.?.
?.?.?.?.?.?.?\DF|\E0.?.?.?.?.?.?.?.?\E0|\E1.?.?.?.?.?.
?.?.?\E1|\E2.?.?.?.?.?.?.?.?\E2|\E3.?.?.?.?.?.?.?.?\E3|
\E4.?.?.?.?.?.?.?.?\E4|\E5.?.?.?.?.?.?.?.?\E5|\E6.?.?.?
.?.?.?.?.?\E6|\E7.?.?.?.?.?.?.?.?\E7|\E8.?.?.?.?.?.?.?
.?\E8|\E9.?.?.?.?.?.?.?.?\E9|\EA.?.?.?.?.?.?.?.?\EA|\EB.
?.?.?.?.?.?.?.?\EB|\EC.?.?.?.?.?.?.?.?\EC|\ED.?.?.?.?.
?.?.?.?\ED|\EE.?.?.?.?.?.?.?.?\EE|\EF.?.?.?.?.?.?.?.?
\EF|\F0.?.?.?.?.?.?.?.?\F0|\F1.?.?.?.?.?.?.?.?\F1|\F2.?.
?.?.?.?.?.?.?\F2|\F3.?.?.?.?.?.?.?.?\F3|\F4.?.?.?.?.?.
?.?.?\F4|\F5.?.?.?.?.?.?.?.?\F5|\F6.?.?.?.?.?.?.?.?\F6|
\F7.?.?.?.?.?.?.?.?\F7|\F8.?.?.?.?.?.?.?.?\F8|\F9.?.?.?
.?.?.?.?.?\F9|\FA.?.?.?.?.?.?.?.?\FA|\FB.?.?.?.?.?.?.?
.?\FB|\FC.?.?.?.?.?.?.?.?\FC|\FD.?.?.?.?.?.?.?.?\FD|\FE.
?.?.?.?.?.?.?.?\FE|\FF.?.?.?.?.?.?.?.?\FF)" add name=skypetoskype regexp="^..\02…………." add name=counterstrike-source regexp="^\FF\FF\FF\FF.cstrikeCounter-Strike" add name=halflife2-deathmatch regexp="^\FF\FF\FF\FF.hl2mpDeathmatch" add name=freenet regexp="^\01[\08\t][\03\04]" add name=battlefield2 regexp="^(\11 \01…?\11|\FE\FD.?.?.?.?.?.?(\14
\01\06|\FF\FF\FF))|[]\01].?battlefield2" add name=napster regexp="^(.[\02\06][!-~]+ [!-~]+ [0-9][0-9]?[0-9]?[0-9]?[0
-9]? "[\t-\r -~]+" ([0-9]|10)|1(send|get)[!-~]+ "[\t-\r -~]+")" add name=soulseek regexp="^(\05..?|.\01.[ -~]+\01F..?.?.?.?.?.?.?)$" add name=xunlei regexp="^[()]…?.?.?(reg|get|query)" add name=ssl regexp="^(.?.?\16\03.\16\03|.?.?\01\03\01?.\0B)" add name=citrix regexp=“2&\85\92X” add name=whois regexp="^[ !-~]+\r
\n$" add name=dayofdefeat-source regexp="^\FF\FF\FF\FF.dodDay of Defeat" add name=teamspeak regexp="^\F4\BE\03.teamspeak" add name=worldofwarcraft regexp="^\06\EC\01" add name=ventrilo regexp="^..?v\$\CF" add name=http-rtsp regexp="^(get[\t-\r -~] Accept: application/x-rtsp-tunnell
ed|http/(0\.9|1\.0|1\.1) [1-5][0-9][0-9] [\t-\r -~]a=control:rtsp://)" add name=thecircle regexp=
“^t\03ni.?[\01-\06]?t[\01-\05]s[
\n\0B](glob|who are you$|query data)” add name=uucp regexp="^\10here=" add name=pcanywhere regexp="^(nq|st)$" add name=subversion regexp="^\( success \( 1 2 \(" add name=imesh regexp="^(post[\t-\r -~]……………………
…….. |4\80?\r?\FC\FF\04|get[\t-\r -~]Host:
_imsh\.download-prod\.musicnet\.com|\02(\01|\02)\83.?.?.?.?.?.?.
?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?.?\02(\01|
\02)\83)" add name=cimd regexp="\02[0-4][0-9]:[0-9]+.\03$" add name=mohaa regexp="^\FF\FF\FF\FFgetstatus
\n" add name=stun regexp="^[\01\02]…………….?$" add name=tor regexp=TOR1. add name=radmin regexp="^\01\01(\08\08|\1B\1B)$" add name=unset regexp=. add name=chikka regexp="^CTPv1.[123] Kamusta.\r
\n$" add name=replaytv-ivs regexp="^(get /ivs-IVSGetFileChunk|http/(0\.9|1\.0|1\\ .1) [1-5][0-9][0-9] [\t-\r -~]#####REPLAY_CHUNK_START#####)" add name=armagetron regexp=YCLC_E|CYEL add name=speedtest-servers regexp="^.(get|GET).+speedtest.$" add name=torrent-wwws regexp="^.(get|GET).+(torrent|thepiratebay|isohunt|ente
rtane|demonoid|btjunkie|mininova|flixflux|vertor|h33t|zoozle|bitnova|bitso
up|meganova|fulldls|btbot|fenopy|gpirate|commonbits).$" add name=torrent-dns regexp="^.+(torrent|thepiratebay|isohunt|entertane|demono
id|btjunkie|mininova|flixflux|vertor|h33t|zoozle|bitnova|bitsoup|meganova|
fulldls|btbot|fenopy|gpirate|commonbits).$" add name=netflix regexp="^.(get|GET).+(netflix).$" add name=mp4 regexp="^.(get|GET).+\.mp4.$" add name=swf regexp="^.(get|GET).+\.swf.$" add name=flv regexp="^.(get|GET).+\.flv.*$"

add name=video regexp="^.(get|GET).+(\.flv|\.mp4|netflix|\.swf).$"