# libprotoident mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für libprotoident in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:libprotoident
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install libprotoident
```

  Evidenz: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#libprotoident
```

  Evidenz: nixpkgs package indexes: pkgs/by-name/li/libprotoident/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Paketfakten

- **Paketschlüssel:** brew:libprotoident
- **Paketmanager:** Homebrew
- **Version:** 2.0.15-2
- **Quellzusammenfassung:** Performs application layer protocol identification for flows
- **Homepage:** <https://github.com/LibtraceTeam/libprotoident>
- **Repository:** <https://github.com/LibtraceTeam/libprotoident>
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- lpi_arff (Alias)
- lpi_find_unknown (Alias)
- lpi_protoident (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 2.0.15-2
## Projektgeschichte und Nutzung

libprotoident is a lightweight network-traffic classification library from the University of Waikato WAND research group. Its niche is application protocol identification using only a small amount of payload from each direction of a flow.

### Projektgeschichte

The source headers credit the University of Waikato WAND research group and carry copyright years beginning in 2011. The public GitHub repository was created on 2014-03-20, and the README identifies Shane Alcock as author with additional contributors.

The project frames itself as a deliberately limited form of deep packet inspection: it uses the first four bytes of application payload sent in each direction, plus flow metadata, instead of requiring complete packet payload capture.

### Adoptionsgeschichte

libprotoident's adoption is concentrated in packet-trace and traffic-analysis circles rather than broad application development. Its README ties it to `libtrace` and `libflowmanager`, and its bundled tools operate on libtrace trace URIs, including live network-interface sources.

### Wie es verwendet wird

The package provides a library API plus command-line tools: `lpi_protoident` identifies flows, `lpi_find_unknown` reports unidentified flows to aid new rule development, and `lpi_arff` emits ARFF output for Weka workflows.

### Warum Paket-Nerds sich dafür interessieren

For package maintainers, libprotoident is interesting because it sits between academic network measurement and practical CLI tooling. It pulls in the LibtraceTeam stack and gives users a packaged way to run protocol classification experiments without building the WAND tools by hand.

### Zeitleiste

- 2011: Source headers identify University of Waikato WAND work beginning in this period.
- 2014-03-20: The public GitHub repository was created.
- 2017-06-28: Version 2.0.11 added many protocols and moved tools to parallel libtrace and libflowmanager 3 compatibility.
- 2020-11-12: Version 2.0.15 added protocols, an industrial-control-systems category, and category lookup APIs.

### Related projects

- libtrace, libflowmanager, Weka, packet-trace analysis tools, and other traffic-classification projects such as nDPI and Zeek occupy adjacent space.

### Quellen

- <https://api.github.com/repos/LibtraceTeam/libprotoident>
- <https://api.github.com/repos/LibtraceTeam/libprotoident/releases>
- <https://github.com/LibtraceTeam/libprotoident>
- <https://raw.githubusercontent.com/LibtraceTeam/libprotoident/master/README>
- <https://raw.githubusercontent.com/LibtraceTeam/libprotoident/master/lib/libprotoident.h>


## Sicherheitshinweise

library-like package without higher-risk signals.

- **Geiger-Risiko:** grün / niedrig
- library-like package without higher-risk signals

## Andere Paketmanager-Einträge

- Nix - libprotoident: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libprotoident/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/libprotoident.yml](https://github.com/mxcl/pkgdb/blob/main/combined/libprotoident.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph