Creating Custom App-ID for an unknown TCP session that is encrypted or doesn't seem to have a pattern.

jkreyes — Fri, 31 Jul 2015 03:12:24 GMT

How do i create a custom App-ID if i can't see any pattern on the captured packets? The pcap data seems to be encrypted. For example, i was trying to create a custom app-id for the game Clash Of Clans and i can't seem to find any pattern at all.

Re: Creating Custom App-ID for an unknown TCP session that is encrypted or doesn't seem to have a pattern.

pulukas — Fri, 31 Jul 2015 23:57:15 GMT

App ID works of regular expression so you do have to find a pattern of some sort.

I would submit a request for a new official App-ID using these instructions.

How to Request a new App-ID

Then contact your sales engineer to see if there is a way they can goose the process.

You can also look to use old fashion methods. See if the game has a known set of ip addresses you can simply block with a standard rule in the mean time.

topic Creating Custom App-ID for an unknown TCP session that is encrypted or doesn't seem to have a pattern. in Automation/API Discussions

Creating Custom App-ID for an unknown TCP session that is encrypted or doesn't seem to have a pattern.

Re: Creating Custom App-ID for an unknown TCP session that is encrypted or doesn't seem to have a pattern.