Any one konws how to mark http protocol?

RouterOS Scripting
1

As we all know that HTTP use tcp port 80,BUT,some download tools or IM use 80 too,

so,is there any way to recognise HTTP or even HTTPS very well?

I don’t kown L7 very much,really bother… :frowning:

TKS :smiley:

2

http://l7-filter.sourceforge.net/protocols

/ip firewall layer7-protocol
add name=HTTPS regexp="^(.\?.\?\\x16\\x03.*\\x16\\x03|.\?.\?\\x01\\x03\\x01\?.*\\x0b)"