Layer-7 Packet Classifier for Linux 2.12.1

Layer-7 Packet Classifier for Linux is a classifier for the Linux kernels Netfilter subsystem that identifies packets based on application layer data (OSI layer 7).
This means that it can classify packets as HTTP, FTP, Gnucleus, eDonkey2000, etc, regardless of port. Our classifier complements existing ones that match on address, port numbers and so on.
Our intent is for l7-filter to be used in conjunction with Linux QoS to do bandwith arbitration ("packet shaping").
Main features:
- Patches for Linux 2.4 and 2.6
- Support for TCP, UDP and ICMP over IPv4
- Uses Netfilters connection tracking of FTP, IRC, etc
- Examines data across multiple packets
- Number of packets examined tunable through /proc/net/layer7_numpackets
- With the Netfilter helper match, can distinguish between parent (ex. ftp command) and child (ex. ftp data) connections
- Gives access to both Netfilter (firewall) and QoS (rate limiting) features
- Might be in the stock kernel, or at least patch-o-matic, some day
Enhancements:
- Fixed documentation on iptables patch kernel version boundary.