Whois

From Protocolinfo

Whois is a very simple protocol for querying about domain names (and occasionally other things), defined in RFC 3912.

Contents 1 Identification 1.1 Ports 1.2 l7-filter 2 See also

[edit] Identification

[edit] Ports

Whois servers run on TCP port 43.

[edit] l7-filter

l7-filter uses the whois pattern. This is an overmatching pattern, so it should only be used to verify that traffic on port 43 looks like whois, not to attempt to identify whois traffic on other ports.

[edit] See also

• Wikipedia's Whois article