you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 3 years ago (1 child)

Look up NBAR for the basic idea. Each vendor has their own 'secret sauce' implementation, Palo Alto only needs 9 bytes of payload for disambiguation, iirc.

  • source
  • parent
  • hideshow 2 child comments