macOS
Homebrewverifiziert · 100%
brew install libprotoidentlocal Homebrew formula metadata
brew
libprotoident mit Homebrew, Nix installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für libprotoident in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Linux
Nixverifiziert · 92%
nix profile install nixpkgs#libprotoidentnixpkgs package indexes · pkgs/by-name/li/libprotoident/package.nix · Quelle: api.github.com
Überblick
Paketzusammenfassung
Performs application layer protocol identification for flows
Projektlinks
Befehle und Aliase
- lpi_arff
- lpi_find_unknown
- lpi_protoident
Verlauf
Projektgeschichte und Nutzung
libprotoident is a lightweight network-traffic classification library from the University of Waikato WAND research group. Its niche is application protocol identification using only a small amount of payload from each direction of a flow.
Projektgeschichte
The source headers credit the University of Waikato WAND research group and carry copyright years beginning in 2011. The public GitHub repository was created on 2014-03-20, and the README identifies Shane Alcock as author with additional contributors.
The project frames itself as a deliberately limited form of deep packet inspection: it uses the first four bytes of application payload sent in each direction, plus flow metadata, instead of requiring complete packet payload capture.
Adoptionsgeschichte
libprotoident's adoption is concentrated in packet-trace and traffic-analysis circles rather than broad application development. Its README ties it to `libtrace` and `libflowmanager`, and its bundled tools operate on libtrace trace URIs, including live network-interface sources.
Wie es verwendet wird
The package provides a library API plus command-line tools: `lpi_protoident` identifies flows, `lpi_find_unknown` reports unidentified flows to aid new rule development, and `lpi_arff` emits ARFF output for Weka workflows.
Warum Paket-Nerds sich dafür interessieren
For package maintainers, libprotoident is interesting because it sits between academic network measurement and practical CLI tooling. It pulls in the LibtraceTeam stack and gives users a packaged way to run protocol classification experiments without building the WAND tools by hand.
Zeitleiste
- 2011: Source headers identify University of Waikato WAND work beginning in this period.
- 2014-03-20: The public GitHub repository was created.
- 2017-06-28: Version 2.0.11 added many protocols and moved tools to parallel libtrace and libflowmanager 3 compatibility.
- 2020-11-12: Version 2.0.15 added protocols, an industrial-control-systems category, and category lookup APIs.
Related projects
- libtrace, libflowmanager, Weka, packet-trace analysis tools, and other traffic-classification projects such as nDPI and Zeek occupy adjacent space.
Quellen
- https://api.github.com/repos/LibtraceTeam/libprotoident
- https://api.github.com/repos/LibtraceTeam/libprotoident/releases
- https://github.com/LibtraceTeam/libprotoident
- https://raw.githubusercontent.com/LibtraceTeam/libprotoident/master/README
- https://raw.githubusercontent.com/LibtraceTeam/libprotoident/master/lib/libprotoident.h
Sicherheitslage
Risikostufe: grün
library-like package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- library-like package without higher-risk signals
Signale
- metadata:library-like
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 12 Plattformziele verfügbar.
- Installiert mit 2 Laufzeitabhängigkeiten.
- Build-Metadaten listen 3 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
lpi_arff | cli | globales Executable | |
lpi_find_unknown | cli | globales Executable | |
lpi_protoident | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-26
Manager-Version2.0.15-2
Manager aktualisiert
lokale DatenOK
Upstreamaktuell
neueste erkannte Version2.0.15-2
https://github.com/LibtraceTeam/libprotoident
- InfoNo package-manager update timestamp was available.niedrig Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:libprotoident |
|---|---|
| Version | 2.0.15-2 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/libprotoident |
| Homepage | https://github.com/LibtraceTeam/libprotoident |
| Repository | https://github.com/LibtraceTeam/libprotoident |
| Upstream-Dokumentation | https://github.com/LibtraceTeam/libprotoident/blob/master/README.md |
| Lizenz | LGPL-3.0-or-later |
| Quellarchiv | https://github.com/LibtraceTeam/libprotoident/archive/refs/tags/2.0.15-2.tar.gz |
| Abhängigkeiten | libflowmanager, libtrace |
| Build-Abhängigkeiten | autoconf, automake, libtool |
| Bottle | verfügbar (auf arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | libprotoident |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Nix95%
libprotoident
nix profile install nixpkgs#libprotoident- normalized package name match
- Abgeglichen nach: Libprotoident
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment