Edit application protocols

To open the application protocol property dialog, do one of the following:

  • Right-click on the application protocol you want to edit, select Edit item.
  • Double-click the items in the application protocol list.
Figure 8-2. Application protocol property dialog

Netwalk proto edit Edit application protocols

  • Protocol Name: Type a name for the application protocol. The name must be unique.
  • Max Flows: The total number of the flows application protocol should keep during monitoring or post-capture analysising.

Note: If the number of flows exceeds the max count, the oldest flow might be aged out by a rule.

  • Short Description: Type a short description for the application protocol. It can be empty.
  • Base on Port: Selecting it means this application protocol will be recognized base on port.
  • Port: The port(s) used for this application protocol.
  • Transport Protocol: Specify the application protocol is based on which Transfer Protocol.
  • Base on Smelling: Selecting it means this application protocol will be recognized base on smelling.
  • Smell Rule: Click Netwalk btn reference Edit application protocols button on the right to set the smelling rule.
  • Smell Count: Set the number of each flow smelling to improve the efficiency.

Important: How to understand the number of smelling?

The smelling-based application protocol of AthTek NetWalk is Flow-Oriented. That is, if a flow is identified, the follow-up packets in the flow would no longer be applied in the smelling rules, and they will be considered as a part of the application protocol. Specify the number of smelling (assumed to be N) is to improve efficiency. If the first N packets of a flow don’t match the smelling rule, the flow impossibly belongs to this application protocol. Then the remaining packets of this flow will not need to be smelt, thereby improving the efficiency. The range of smell count is 1 – 50.

Edit application protocols