Talk:Counter-Strike

From Protocolinfo

Jump to: navigation, search

[edit] Counter-Strike detection discussion

The current pattern is:

^\xff\xff\xff\xff.*cstrikeCounter-Strike

and by looking at the captured data I think that this is not enough since there is a null byte between "cstrike" and "Counter-Strike" strings. So, although I did not test either of these patterns (I do not have CS), I think the pattern should be modified as follows:

^\xff\xff\xff\xff.*cstrike.Counter-Strike

L7-filter strips NULL bytes out of its input, so your proposed pattern would not work. See http://l7-filter.sourceforge.net/Pattern-HOWTO --Sysop 10:52, 19 January 2008 (PST)
Personal tools