|
1
|
# ZMAAP - Zeroconf Multicast Address Allocation Protocol
|
|
2
|
# Pattern attributes: ok veryfast fast
|
|
3
|
# Protocol groups: networking ietf_draft_standard
|
|
4
|
# Wiki: http://www.protocolinfo.org/wiki/ZMAAP
|
|
5
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
|
6
|
#
|
|
7
|
# http://files.zeroconf.org/draft-ietf-zeroconf-zmaap-02.txt
|
|
8
|
# (Note that this reference is an Internet-Draft, and therefore must
|
|
9
|
# be considered a work in progress.)
|
|
10
|
#
|
|
11
|
# This pattern is untested!
|
|
12
|
|
|
13
|
zmaap
|
|
14
|
# - 4 byte magic number.
|
|
15
|
# - 1 byte version. Allow 1 & 2, even though only version 1 currently exists.
|
|
16
|
# - 1 byte message type,which is either 0 or 1
|
|
17
|
# - 1 byte address family. L7-filter only works in IPv4, so this is 1.
|
|
18
|
^\x1b\xd7\x3b\x48[\x01\x02]\x01?\x01
|