# libprotoident を Homebrew, Nix でインストール libprotoident のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:libprotoident ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install libprotoident ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#libprotoident ``` 証拠: nixpkgs package indexes: pkgs/by-name/li/libprotoident/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## パッケージ情報 - **パッケージキー:** brew:libprotoident - **パッケージマネージャ:** Homebrew - **バージョン:** 2.0.15-2 - **ソース概要:** Performs application layer protocol identification for flows - **ホームページ:** - **リポジトリ:** - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - lpi_arff (エイリアス) - lpi_find_unknown (エイリアス) - lpi_protoident (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 2.0.15-2 ## プロジェクトの歴史と使われ方 libprotoident is a lightweight network-traffic classification library from the University of Waikato WAND research group. Its niche is application protocol identification using only a small amount of payload from each direction of a flow. ### プロジェクトの歴史 The source headers credit the University of Waikato WAND research group and carry copyright years beginning in 2011. The public GitHub repository was created on 2014-03-20, and the README identifies Shane Alcock as author with additional contributors. The project frames itself as a deliberately limited form of deep packet inspection: it uses the first four bytes of application payload sent in each direction, plus flow metadata, instead of requiring complete packet payload capture. ### 採用の歴史 libprotoident's adoption is concentrated in packet-trace and traffic-analysis circles rather than broad application development. Its README ties it to `libtrace` and `libflowmanager`, and its bundled tools operate on libtrace trace URIs, including live network-interface sources. ### 使われ方 The package provides a library API plus command-line tools: `lpi_protoident` identifies flows, `lpi_find_unknown` reports unidentified flows to aid new rule development, and `lpi_arff` emits ARFF output for Weka workflows. ### パッケージ好きにとっての重要性 For package maintainers, libprotoident is interesting because it sits between academic network measurement and practical CLI tooling. It pulls in the LibtraceTeam stack and gives users a packaged way to run protocol classification experiments without building the WAND tools by hand. ### タイムライン - 2011: Source headers identify University of Waikato WAND work beginning in this period. - 2014-03-20: The public GitHub repository was created. - 2017-06-28: Version 2.0.11 added many protocols and moved tools to parallel libtrace and libflowmanager 3 compatibility. - 2020-11-12: Version 2.0.15 added protocols, an industrial-control-systems category, and category lookup APIs. ### Related projects - libtrace, libflowmanager, Weka, packet-trace analysis tools, and other traffic-classification projects such as nDPI and Zeek occupy adjacent space. ### ソース - - - - - ## セキュリティノート library-like package without higher-risk signals. - **Geiger リスク:** グリーン / 低 - library-like package without higher-risk signals ## 他のパッケージマネージャ記録 - Nix - libprotoident: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libprotoident/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/libprotoident.yml](https://github.com/mxcl/pkgdb/blob/main/combined/libprotoident.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph