-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathappid.c
40901 lines (40800 loc) · 747 KB
/
appid.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
#line 1 "appid.rl"
/* -*- c -*-
*
* Application ID library
*
* Copyright (c) 2005-2007 Arbor Networks, Inc.
*
* $Id$
*/
#include <inttypes.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
/* XXX - skip netinet/in.h */
#define IPPROTO_TCP 6
#define IPPROTO_UDP 17
#include "appid.h"
#define APPID_DEBUG 1
int appid_debug = 0;
#if APPID_DEBUG
/* porky array, only for debug: */
int appid_match_conflict[MAX_APPID][MAX_APPID];
#endif
struct appid_default {
int cs;
};
struct appid_any8 {
int cs;
};
struct appid_any4 {
int cs;
};
struct appid_any16 {
int cs;
};
struct appid_any {
int cs;
};
struct appid_dns {
int cs;
int top, stack[2]; /* DNS ragel call stack is two deep */
uint32_t len;
};
struct appid {
struct appid_dns appid_dns;
struct appid_default appid_default;
struct appid_any8 appid_any8;
struct appid_any4 appid_any4;
struct appid_any16 appid_any16;
struct appid_any appid_any;
/*
* state machine management - some must persist on back to
* back calls to appid_process - application/protocol/quality
* of match need to be saved so that state machines can see if
* they should update the match when their quality is higher
* than existing match.
*/
int application; // layer 7 application - e.g. rx, soap or xmlrpc
int confidence;
uint8_t ip_protocol; // TCP/IP layer 3 protocol: 0->UDP, TCP otherwise
uint8_t match_count; // 0-> no match, 1->no recognized ambiguity, otherwise ambiguous
uint8_t all_machines_rejected;
size_t payload_offset; // help find offset into stream
size_t match_payload; // offset into payload at last match
int more_payload_coming;
};
void
appid_dump_match_conflict(void)
{
#if APPID_DEBUG
int i, j;
for(i = 0; i < MAX_APPID; i++) {
for(j = 0; j < MAX_APPID; j++) {
if (appid_match_conflict[i][j] > 0) {
printf("%s overrides %s %d times.\n",
appid_app_to_name(i),
appid_app_to_name(j),
appid_match_conflict[i][j]);
}
}
}
#else
printf("appid_dump_match_conflict called, but needs #define APPID_DEBUG 1 to be useful.\n");
#endif
}
#line 246 "appid.rl"
#line 102 "appid.c"
static const int appid_dns_start = 1;
static const int appid_dns_first_final = 42;
static const int appid_dns_error = 0;
static const int appid_dns_en_dns_consume_length = 44;
static const int appid_dns_en_dns_consume_q = 25;
static const int appid_dns_en_dns_consume_rr = 32;
static const int appid_dns_en_main = 1;
#line 249 "appid.rl"
static int
appid_dns_execute(
struct appid *a,
struct appid_dns *fsm,
unsigned char ip_protocol,
unsigned short src_ip_port,
unsigned short dst_ip_port,
const unsigned char *payload,
int payload_length)
{
const unsigned char *p = payload;
const unsigned char *pe = payload + payload_length;
#line 264 "appid.rl"
#line 129 "appid.c"
{
if ( p == pe )
goto _out;
goto _resume;
_again:
switch ( fsm->cs ) {
case 1: goto st1;
case 2: goto st2;
case 3: goto st3;
case 4: goto st4;
case 5: goto st5;
case 6: goto st6;
case 7: goto st7;
case 8: goto st8;
case 9: goto st9;
case 10: goto st10;
case 11: goto st11;
case 12: goto st12;
case 42: goto st42;
case 0: goto st0;
case 43: goto st43;
case 13: goto st13;
case 14: goto st14;
case 15: goto st15;
case 16: goto st16;
case 17: goto st17;
case 18: goto st18;
case 19: goto st19;
case 20: goto st20;
case 21: goto st21;
case 22: goto st22;
case 23: goto st23;
case 24: goto st24;
case 25: goto st25;
case 26: goto st26;
case 27: goto st27;
case 28: goto st28;
case 29: goto st29;
case 45: goto st45;
case 30: goto st30;
case 31: goto st31;
case 32: goto st32;
case 33: goto st33;
case 34: goto st34;
case 35: goto st35;
case 36: goto st36;
case 46: goto st46;
case 37: goto st37;
case 38: goto st38;
case 39: goto st39;
case 40: goto st40;
case 41: goto st41;
case 44: goto st44;
default: break;
}
if ( ++p == pe )
goto _out;
_resume:
switch ( fsm->cs )
{
st1:
if ( ++p == pe )
goto _out1;
case 1:
goto st2;
st2:
if ( ++p == pe )
goto _out2;
case 2:
goto st3;
st3:
if ( ++p == pe )
goto _out3;
case 3:
if ( (*p) < 32u ) {
if ( (*p) <= 23u )
goto st4;
} else if ( (*p) > 47u ) {
if ( (*p) > 151u ) {
if ( 160u <= (*p) && (*p) <= 175u )
goto st4;
} else if ( (*p) >= 128u )
goto st4;
} else
goto st4;
goto st0;
st4:
if ( ++p == pe )
goto _out4;
case 4:
if ( (*p) < 48u ) {
if ( (*p) < 16u ) {
if ( (*p) <= 10u )
goto st5;
} else if ( (*p) > 26u ) {
if ( 32u <= (*p) && (*p) <= 42u )
goto st5;
} else
goto st5;
} else if ( (*p) > 58u ) {
if ( (*p) < 144u ) {
if ( 128u <= (*p) && (*p) <= 138u )
goto st5;
} else if ( (*p) > 154u ) {
if ( (*p) > 170u ) {
if ( 176u <= (*p) && (*p) <= 186u )
goto st5;
} else if ( (*p) >= 160u )
goto st5;
} else
goto st5;
} else
goto st5;
goto st0;
st5:
if ( ++p == pe )
goto _out5;
case 5:
if ( (*p) == 0u )
goto st6;
goto st24;
st6:
if ( ++p == pe )
goto _out6;
case 6:
if ( (*p) == 0u )
goto st7;
goto st18;
st7:
if ( ++p == pe )
goto _out7;
case 7:
if ( (*p) == 0u )
goto st8;
goto st17;
st8:
if ( ++p == pe )
goto _out8;
case 8:
if ( (*p) == 0u )
goto st9;
goto st16;
st9:
if ( ++p == pe )
goto _out9;
case 9:
if ( (*p) == 0u )
goto st10;
goto st15;
st10:
if ( ++p == pe )
goto _out10;
case 10:
if ( (*p) == 0u )
goto st11;
goto st14;
st11:
if ( ++p == pe )
goto _out11;
case 11:
if ( (*p) == 0u )
goto st12;
goto st13;
st12:
if ( ++p == pe )
goto _out12;
case 12:
if ( (*p) == 0u )
goto st42;
goto tr20;
st42:
if ( ++p == pe )
goto _out42;
case 42:
goto st0;
st0:
goto _out0;
tr20:
#line 239 "appid.rl"
{{ fsm->stack[ fsm->top++] = 43; goto st32;} }
goto st43;
tr26:
#line 235 "appid.rl"
{ { fsm->stack[ fsm->top++] = 43; goto st25;} }
goto st43;
st43:
if ( ++p == pe )
goto _out43;
case 43:
#line 321 "appid.c"
goto st43;
st13:
if ( ++p == pe )
goto _out13;
case 13:
goto tr20;
st14:
if ( ++p == pe )
goto _out14;
case 14:
goto st13;
st15:
if ( ++p == pe )
goto _out15;
case 15:
goto st14;
st16:
if ( ++p == pe )
goto _out16;
case 16:
goto st15;
st17:
if ( ++p == pe )
goto _out17;
case 17:
goto st16;
st18:
if ( ++p == pe )
goto _out18;
case 18:
goto st19;
st19:
if ( ++p == pe )
goto _out19;
case 19:
goto st20;
st20:
if ( ++p == pe )
goto _out20;
case 20:
goto st21;
st21:
if ( ++p == pe )
goto _out21;
case 21:
goto st22;
st22:
if ( ++p == pe )
goto _out22;
case 22:
goto st23;
st23:
if ( ++p == pe )
goto _out23;
case 23:
goto tr26;
st24:
if ( ++p == pe )
goto _out24;
case 24:
goto st18;
tr28:
#line 113 "appid.rl"
{
fsm->len = (*p);
{ fsm->stack[ fsm->top++] = 25; goto st44;}
}
goto st25;
st25:
if ( ++p == pe )
goto _out25;
case 25:
#line 394 "appid.c"
if ( (*p) == 0u )
goto st26;
if ( (*p) > 63u ) {
if ( 192u <= (*p) )
goto st31;
} else if ( (*p) >= 1u )
goto tr28;
goto st0;
st26:
if ( ++p == pe )
goto _out26;
case 26:
switch( (*p) ) {
case 0u: goto st27;
case 128u: goto st30;
}
goto st0;
st27:
if ( ++p == pe )
goto _out27;
case 27:
if ( (*p) < 42u ) {
if ( (*p) > 31u ) {
if ( 33u <= (*p) && (*p) <= 40u )
goto st28;
} else if ( (*p) >= 1u )
goto st28;
} else if ( (*p) > 48u ) {
if ( (*p) > 103u ) {
if ( 249u <= (*p) )
goto st28;
} else if ( (*p) >= 100u )
goto st28;
} else
goto st28;
goto st0;
st28:
if ( ++p == pe )
goto _out28;
case 28:
if ( (*p) == 0u )
goto st29;
goto st0;
st29:
if ( ++p == pe )
goto _out29;
case 29:
if ( (*p) == 1u )
goto tr34;
if ( (*p) > 4u ) {
if ( 254u <= (*p) )
goto tr34;
} else if ( (*p) >= 3u )
goto tr34;
goto st0;
tr34:
#line 129 "appid.rl"
{
a->match_count ++;
if(a->confidence < APPID_CONFIDENCE_NORMAL) {
a->application = 25;
a->confidence = APPID_CONFIDENCE_NORMAL;
a->match_payload = a->payload_offset + (p - payload);
if (APPID_CONFIDENCE_NORMAL > APPID_CONFIDENCE_NORMAL) goto _out45;
}
}
#line 137 "appid.rl"
{ { fsm->cs = fsm->stack[-- fsm->top]; goto _again;} }
goto st45;
st45:
if ( ++p == pe )
goto _out45;
case 45:
#line 468 "appid.c"
goto st0;
st30:
if ( ++p == pe )
goto _out30;
case 30:
if ( (*p) <= 1u )
goto st28;
goto st0;
st31:
if ( ++p == pe )
goto _out31;
case 31:
goto st26;
st32:
if ( ++p == pe )
goto _out32;
case 32:
if ( (*p) == 0u )
goto st33;
if ( (*p) > 63u ) {
if ( 192u <= (*p) )
goto st41;
} else if ( (*p) >= 1u )
goto tr36;
goto st0;
st33:
if ( ++p == pe )
goto _out33;
case 33:
switch( (*p) ) {
case 0u: goto st34;
case 128u: goto st37;
}
goto st0;
st34:
if ( ++p == pe )
goto _out34;
case 34:
if ( (*p) == 41u )
goto tr41;
if ( (*p) < 33u ) {
if ( 1u <= (*p) && (*p) <= 31u )
goto st35;
} else if ( (*p) > 48u ) {
if ( (*p) > 103u ) {
if ( 249u <= (*p) )
goto st35;
} else if ( (*p) >= 100u )
goto st35;
} else
goto st35;
goto st0;
st35:
if ( ++p == pe )
goto _out35;
case 35:
if ( (*p) == 0u )
goto st36;
goto st0;
st36:
if ( ++p == pe )
goto _out36;
case 36:
if ( (*p) == 1u )
goto tr41;
if ( (*p) > 4u ) {
if ( 254u <= (*p) )
goto tr41;
} else if ( (*p) >= 3u )
goto tr41;
goto st0;
tr41:
#line 159 "appid.rl"
{
a->match_count ++;
if(a->confidence < APPID_CONFIDENCE_NORMAL) {
a->application = 25;
a->confidence = APPID_CONFIDENCE_NORMAL;
a->match_payload = a->payload_offset + (p - payload);
if (APPID_CONFIDENCE_NORMAL > APPID_CONFIDENCE_NORMAL) goto _out46;
}
}
#line 167 "appid.rl"
{ { fsm->cs = fsm->stack[-- fsm->top]; goto _again;} }
goto st46;
st46:
if ( ++p == pe )
goto _out46;
case 46:
#line 558 "appid.c"
goto st0;
st37:
if ( ++p == pe )
goto _out37;
case 37:
if ( (*p) <= 1u )
goto st35;
goto st0;
tr36:
#line 113 "appid.rl"
{
fsm->len = (*p);
{ fsm->stack[ fsm->top++] = 38; goto st44;}
}
goto st38;
st38:
if ( ++p == pe )
goto _out38;
case 38:
#line 578 "appid.c"
if ( (*p) == 0u )
goto st39;
if ( (*p) > 63u ) {
if ( 192u <= (*p) )
goto st41;
} else if ( (*p) >= 1u )
goto tr36;
goto st0;
st39:
if ( ++p == pe )
goto _out39;
case 39:
switch( (*p) ) {
case 0u: goto st40;
case 128u: goto st37;
}
goto st0;
st40:
if ( ++p == pe )
goto _out40;
case 40:
if ( (*p) < 42u ) {
if ( (*p) > 31u ) {
if ( 33u <= (*p) && (*p) <= 40u )
goto st35;
} else if ( (*p) >= 1u )
goto st35;
} else if ( (*p) > 48u ) {
if ( (*p) > 103u ) {
if ( 249u <= (*p) )
goto st35;
} else if ( (*p) >= 100u )
goto st35;
} else
goto st35;
goto st0;
st41:
if ( ++p == pe )
goto _out41;
case 41:
goto st39;
tr46:
#line 105 "appid.rl"
{
fsm->len--;
if (fsm->len == 0)
{ fsm->cs = fsm->stack[-- fsm->top]; goto _again;}
}
goto st44;
st44:
if ( ++p == pe )
goto _out44;
case 44:
#line 632 "appid.c"
goto tr46;
}
_out1: fsm->cs = 1; goto _out;
_out2: fsm->cs = 2; goto _out;
_out3: fsm->cs = 3; goto _out;
_out4: fsm->cs = 4; goto _out;
_out5: fsm->cs = 5; goto _out;
_out6: fsm->cs = 6; goto _out;
_out7: fsm->cs = 7; goto _out;
_out8: fsm->cs = 8; goto _out;
_out9: fsm->cs = 9; goto _out;
_out10: fsm->cs = 10; goto _out;
_out11: fsm->cs = 11; goto _out;
_out12: fsm->cs = 12; goto _out;
_out42: fsm->cs = 42; goto _out;
_out0: fsm->cs = 0; goto _out;
_out43: fsm->cs = 43; goto _out;
_out13: fsm->cs = 13; goto _out;
_out14: fsm->cs = 14; goto _out;
_out15: fsm->cs = 15; goto _out;
_out16: fsm->cs = 16; goto _out;
_out17: fsm->cs = 17; goto _out;
_out18: fsm->cs = 18; goto _out;
_out19: fsm->cs = 19; goto _out;
_out20: fsm->cs = 20; goto _out;
_out21: fsm->cs = 21; goto _out;
_out22: fsm->cs = 22; goto _out;
_out23: fsm->cs = 23; goto _out;
_out24: fsm->cs = 24; goto _out;
_out25: fsm->cs = 25; goto _out;
_out26: fsm->cs = 26; goto _out;
_out27: fsm->cs = 27; goto _out;
_out28: fsm->cs = 28; goto _out;
_out29: fsm->cs = 29; goto _out;
_out45: fsm->cs = 45; goto _out;
_out30: fsm->cs = 30; goto _out;
_out31: fsm->cs = 31; goto _out;
_out32: fsm->cs = 32; goto _out;
_out33: fsm->cs = 33; goto _out;
_out34: fsm->cs = 34; goto _out;
_out35: fsm->cs = 35; goto _out;
_out36: fsm->cs = 36; goto _out;
_out46: fsm->cs = 46; goto _out;
_out37: fsm->cs = 37; goto _out;
_out38: fsm->cs = 38; goto _out;
_out39: fsm->cs = 39; goto _out;
_out40: fsm->cs = 40; goto _out;
_out41: fsm->cs = 41; goto _out;
_out44: fsm->cs = 44; goto _out;
_out: {}
}
#line 265 "appid.rl"
/*
* ragel doc section 5.4.4 states that 'write eof' is of no cost
* if no machines use the EOF transitions. DNS does, so
* we include this in all
*/
#line 692 "appid.c"
{
switch ( fsm->cs ) {
case 6:
case 7:
case 8:
case 9:
case 10:
case 11:
case 12:
case 42:
#line 224 "appid.rl"
{ if (!a->more_payload_coming) { {
a->match_count ++;
if(a->confidence < APPID_CONFIDENCE_NORMAL) {
a->application = 25;
a->confidence = APPID_CONFIDENCE_NORMAL;
a->match_payload = a->payload_offset + (p - payload);
if (APPID_CONFIDENCE_NORMAL > APPID_CONFIDENCE_NORMAL) goto _out0;
}
} } }
break;
#line 714 "appid.c"
}
}
#line 271 "appid.rl"
if (fsm->cs == appid_dns_error)
return (-1);
else if (fsm->cs >= appid_dns_first_final)
return (1);
return (0);
}
#line 1866 "appid.rl"
#line 732 "appid.c"
static const int appid_default_start = 1;
static const int appid_default_first_final = 2395;
static const int appid_default_error = 0;
static const int appid_default_en_main = 1;
#line 1869 "appid.rl"
static int
appid_default_execute(
struct appid *a,
struct appid_default *fsm,
unsigned char ip_protocol,
unsigned short src_ip_port,
unsigned short dst_ip_port,
const unsigned char *payload,
int payload_length)
{
const unsigned char *p = payload;
const unsigned char *pe = payload + payload_length;
#line 1884 "appid.rl"
#line 756 "appid.c"
{
if ( p == pe )
goto _out;
switch ( fsm->cs )
{
case 1:
switch( (*p) ) {
case 0u: goto st2;
case 1u: goto st343;
case 2u: goto st453;
case 3u: goto st560;
case 4u: goto st819;
case 5u: goto st839;
case 13u: goto st916;
case 16u: goto st930;
case 17u: goto st1025;
case 18u: goto st1026;
case 19u: goto st1061;
case 32u: goto st916;
case 33u: goto st1081;
case 36u: goto st1085;
case 39u: goto st1115;
case 40u: goto st1126;
case 42u: goto st1151;
case 43u: goto st1164;
case 45u: goto st1169;
case 48u: goto st1172;
case 50u: goto st1238;
case 53u: goto st1252;
case 60u: goto st1266;
case 64u: goto st1309;
case 65u: goto st1317;
case 66u: goto st1512;
case 67u: goto st1555;
case 68u: goto st1576;
case 69u: goto st1595;
case 70u: goto st1225;
case 71u: goto st1600;
case 72u: goto st1790;
case 73u: goto st1812;
case 77u: goto st1835;
case 78u: goto st1859;
case 80u: goto st1887;
case 82u: goto st2029;
case 83u: goto st2087;
case 85u: goto st2093;
case 86u: goto st2130;
case 89u: goto st2144;
case 90u: goto st2158;
case 97u: goto st2164;
case 98u: goto st2189;
case 99u: goto st2190;
case 100u: goto st2191;
case 101u: goto st2192;
case 102u: goto st1225;
case 104u: goto st2193;
case 105u: goto st2194;
case 106u: goto st2195;
case 108u: goto st2237;
case 109u: goto st2240;
case 110u: goto st2243;
case 112u: goto st2246;
case 114u: goto st2247;
case 116u: goto st2248;
case 117u: goto st2262;
case 118u: goto st2216;
case 121u: goto st2264;
case 126u: goto st2216;
case 127u: goto st2265;
case 128u: goto st2270;
case 129u: goto st2280;
case 192u: goto st2292;
case 197u: goto st2303;
case 212u: goto st2303;
case 227u: goto st2309;
case 244u: goto st2310;
case 255u: goto st2312;
}
if ( (*p) < 107u ) {
if ( (*p) < 34u ) {
if ( (*p) > 10u ) {
if ( 25u <= (*p) && (*p) <= 29u )
goto st1080;
} else if ( (*p) >= 9u )
goto st916;
} else if ( (*p) > 37u ) {
if ( (*p) > 57u ) {
if ( 91u <= (*p) && (*p) <= 93u )
goto st1080;
} else if ( (*p) >= 49u )
goto st1225;
} else
goto st1080;
} else if ( (*p) > 111u ) {
if ( (*p) < 161u ) {
if ( (*p) > 132u ) {
if ( 153u <= (*p) && (*p) <= 157u )
goto st1080;
} else if ( (*p) >= 131u )
goto st2291;
} else if ( (*p) > 165u ) {
if ( (*p) < 217u ) {
if ( 193u <= (*p) && (*p) <= 196u )
goto st2291;
} else if ( (*p) > 221u ) {
if ( 225u <= (*p) && (*p) <= 229u )
goto st1080;
} else
goto st1080;
} else
goto st1080;
} else
goto st2216;
goto st0;
st2:
if ( ++p == pe )
goto _out2;
case 2:
switch( (*p) ) {
case 0u: goto st2395;
case 1u: goto st2397;
case 2u: goto st2481;
case 5u: goto st165;
case 7u: goto st234;
case 8u: goto st308;
case 9u: goto st330;
case 80u: goto st334;
}
if ( 3u <= (*p) && (*p) <= 4u )
goto st2482;
goto st233;
st2395:
if ( ++p == pe )
goto _out2395;
case 2395:
if ( (*p) == 0u )
goto st3;
goto st31;
st3:
if ( ++p == pe )
goto _out3;
case 3:
switch( (*p) ) {
case 0u: goto st4;
case 8u: goto st25;
case 86u: goto st29;
}
goto st24;
st4:
if ( ++p == pe )
goto _out4;
case 4:
switch( (*p) ) {
case 0u: goto st5;
case 255u: goto st16;
}
goto st0;
st5:
if ( ++p == pe )
goto _out5;
case 5:
if ( (*p) == 8u )
goto st6;
goto st0;
st0:
goto _out0;
st6:
if ( ++p == pe )
goto _out6;
case 6:
if ( (*p) == 0u )
goto st7;
goto st0;
st7:
if ( ++p == pe )
goto _out7;
case 7:
if ( (*p) == 1u )
goto st8;
goto st0;
st8:
if ( ++p == pe )
goto _out8;
case 8:
if ( (*p) == 0u )
goto st9;
goto st0;
st9:
if ( ++p == pe )
goto _out9;
case 9:
if ( (*p) == 0u )
goto st10;
goto st0;
st10:
if ( ++p == pe )
goto _out10;
case 10:
if ( (*p) == 0u )
goto st11;
goto st0;
st11:
if ( ++p == pe )
goto _out11;
case 11:
if ( (*p) == 2u )
goto st12;
goto st0;
st12:
if ( ++p == pe )
goto _out12;
case 12:
if ( (*p) == 0u )
goto st13;
goto st0;
st13:
if ( ++p == pe )
goto _out13;
case 13:
goto st14;
st14:
if ( ++p == pe )
goto _out14;
case 14:
if ( (*p) == 0u )
goto st15;
goto st0;
st15:
if ( ++p == pe )
goto _out15;
case 15:
goto tr95;
tr95:
#line 1751 "appid.rl"
{
a->match_count ++;
if(a->confidence < APPID_CONFIDENCE_NORMAL) {
a->application = 65;
a->confidence = APPID_CONFIDENCE_NORMAL;
a->match_payload = a->payload_offset + (p - payload);
if (APPID_CONFIDENCE_NORMAL > APPID_CONFIDENCE_NORMAL) goto _out2396;
}
}
goto st2396;
tr103: