aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIvan Nardi <12729895+IvanNardi@users.noreply.github.com>2022-09-12 19:28:41 +0200
committerGitHub <noreply@github.com>2022-09-12 19:28:41 +0200
commit4f584f78a0c11ebecfe999e6a728db24efda5e8b (patch)
treef5a80cf2548caec7c31a6557068598a165722e26
parent4bb81f760978d12b4503bd3e7a23f21dbfb758ce (diff)
Fix `ndpi_do_guess()` (#1731)
Avoid a double call of `ndpi_guess_host_protocol_id()`. Some code paths work for ipv4/6 both Remove some never used code.
-rw-r--r--src/lib/ndpi_main.c39
-rw-r--r--tests/result/1kxun.pcap.out2
-rw-r--r--tests/result/443-chrome.pcap.out2
-rw-r--r--tests/result/443-curl.pcap.out2
-rw-r--r--tests/result/443-firefox.pcap.out2
-rw-r--r--tests/result/443-git.pcap.out2
-rw-r--r--tests/result/443-opvn.pcap.out2
-rw-r--r--tests/result/443-safari.pcap.out2
-rw-r--r--tests/result/4in4tunnel.pcap.out2
-rw-r--r--tests/result/4in6tunnel.pcap.out2
-rw-r--r--tests/result/BGP_Cisco_hdlc_slarp.pcap.out2
-rw-r--r--tests/result/BGP_redist.pcap.out2
-rw-r--r--tests/result/EAQ.pcap.out2
-rw-r--r--tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out2
-rw-r--r--tests/result/IEC104.pcap.out2
-rw-r--r--tests/result/KakaoTalk_chat.pcap.out2
-rw-r--r--tests/result/KakaoTalk_talk.pcap.out2
-rw-r--r--tests/result/NTPv2.pcap.out2
-rw-r--r--tests/result/NTPv3.pcap.out2
-rw-r--r--tests/result/NTPv4.pcap.out2
-rw-r--r--tests/result/Oscar.pcap.out2
-rw-r--r--tests/result/TivoDVR.pcap.out2
-rw-r--r--tests/result/WebattackRCE.pcap.out2
-rw-r--r--tests/result/WebattackSQLinj.pcap.out2
-rw-r--r--tests/result/WebattackXSS.pcap.out2
-rw-r--r--tests/result/activision.pcap.out2
-rw-r--r--tests/result/afp.pcap.out2
-rw-r--r--tests/result/agora-sd-rtn.pcap.out2
-rw-r--r--tests/result/ah.pcapng.out2
-rw-r--r--tests/result/aimini-http.pcap.out2
-rw-r--r--tests/result/ajp.pcap.out2
-rw-r--r--tests/result/alexa-app.pcapng.out2
-rw-r--r--tests/result/alicloud.pcap.out2
-rw-r--r--tests/result/among_us.pcap.out2
-rw-r--r--tests/result/amqp.pcap.out2
-rw-r--r--tests/result/android.pcap.out2
-rw-r--r--tests/result/anyconnect-vpn.pcap.out2
-rw-r--r--tests/result/anydesk-2.pcap.out2
-rw-r--r--tests/result/anydesk.pcap.out2
-rw-r--r--tests/result/avast.pcap.out2
-rw-r--r--tests/result/avast_securedns.pcapng.out2
-rw-r--r--tests/result/bad-dns-traffic.pcap.out2
-rw-r--r--tests/result/bitcoin.pcap.out2
-rw-r--r--tests/result/bittorrent.pcap.out2
-rw-r--r--tests/result/bittorrent_utp.pcap.out2
-rw-r--r--tests/result/bjnp.pcap.out2
-rw-r--r--tests/result/bot.pcap.out2
-rw-r--r--tests/result/bt_search.pcap.out2
-rw-r--r--tests/result/cachefly.pcapng.out2
-rw-r--r--tests/result/capwap.pcap.out2
-rw-r--r--tests/result/cassandra.pcap.out2
-rw-r--r--tests/result/check_mk_new.pcap.out2
-rw-r--r--tests/result/chrome.pcap.out2
-rw-r--r--tests/result/citrix.pcap.out2
-rw-r--r--tests/result/cloudflare-warp.pcap.out2
-rw-r--r--tests/result/coap_mqtt.pcap.out2
-rw-r--r--tests/result/collectd.pcap.out2
-rw-r--r--tests/result/corba.pcap.out2
-rw-r--r--tests/result/cpha.pcap.out2
-rw-r--r--tests/result/dazn.pcapng.out2
-rw-r--r--tests/result/dcerpc.pcap.out2
-rw-r--r--tests/result/dhcp-fuzz.pcapng.out2
-rw-r--r--tests/result/diameter.pcap.out2
-rw-r--r--tests/result/discord.pcap.out2
-rw-r--r--tests/result/dlt_ppp.pcap.out2
-rw-r--r--tests/result/dnp3.pcap.out2
-rw-r--r--tests/result/dns-invalid-chars.pcap.out2
-rw-r--r--tests/result/dns-tunnel-iodine.pcap.out2
-rw-r--r--tests/result/dns_ambiguous_names.pcap.out2
-rw-r--r--tests/result/dns_doh.pcap.out2
-rw-r--r--tests/result/dns_dot.pcap.out2
-rw-r--r--tests/result/dns_exfiltration.pcap.out2
-rw-r--r--tests/result/dns_fragmented.pcap.out2
-rw-r--r--tests/result/dns_invert_query.pcapng.out2
-rw-r--r--tests/result/dns_long_domainname.pcap.out2
-rw-r--r--tests/result/dnscrypt-v1-and-resolver-pings.pcap.out2
-rw-r--r--tests/result/dnscrypt-v2-doh.pcap.out2
-rw-r--r--tests/result/dnscrypt-v2.pcap.out2
-rw-r--r--tests/result/dnscrypt_skype_false_positive.pcapng.out2
-rw-r--r--tests/result/doq_adguard.pcapng.out2
-rw-r--r--tests/result/dos_win98_smb_netbeui.pcap.out2
-rw-r--r--tests/result/drda_db2.pcap.out2
-rw-r--r--tests/result/dropbox.pcap.out2
-rw-r--r--tests/result/dtls.pcap.out2
-rw-r--r--tests/result/dtls2.pcap.out2
-rw-r--r--tests/result/dtls_certificate.pcapng.out2
-rw-r--r--tests/result/dtls_certificate_fragments.pcap.out2
-rw-r--r--tests/result/dtls_mid_sessions.pcapng.out2
-rw-r--r--tests/result/dtls_old_version.pcapng.out2
-rw-r--r--tests/result/dtls_session_id_and_coockie_both.pcap.out2
-rw-r--r--tests/result/emotet.pcap.out2
-rw-r--r--tests/result/encrypted_sni.pcap.out2
-rw-r--r--tests/result/esp.pcapng.out2
-rw-r--r--tests/result/ethereum.pcap.out2
-rw-r--r--tests/result/ethernetIP.pcap.out2
-rw-r--r--tests/result/exe_download.pcap.out2
-rw-r--r--tests/result/exe_download_as_png.pcap.out2
-rw-r--r--tests/result/facebook.pcap.out2
-rw-r--r--tests/result/fastcgi.pcap.out2
-rw-r--r--tests/result/firefox.pcap.out2
-rw-r--r--tests/result/fix.pcap.out2
-rw-r--r--tests/result/fix2.pcap.out2
-rw-r--r--tests/result/forticlient.pcap.out2
-rw-r--r--tests/result/ftp-start-tls.pcap.out2
-rw-r--r--tests/result/ftp.pcap.out2
-rw-r--r--tests/result/fuzz-2006-06-26-2594.pcap.out2
-rw-r--r--tests/result/fuzz-2006-09-29-28586.pcap.out2
-rw-r--r--tests/result/fuzz-2020-02-16-11740.pcap.out2
-rw-r--r--tests/result/genshin-impact.pcap.out2
-rw-r--r--tests/result/git.pcap.out2
-rw-r--r--tests/result/gnutella.pcap.out2
-rw-r--r--tests/result/google_ssl.pcap.out2
-rw-r--r--tests/result/googledns_android10.pcap.out2
-rw-r--r--tests/result/gquic.pcap.out2
-rw-r--r--tests/result/gre_no_options.pcapng.out2
-rw-r--r--tests/result/gtp_c.pcap.out2
-rw-r--r--tests/result/gtp_false_positive.pcapng.out2
-rw-r--r--tests/result/gtp_prime.pcapng.out2
-rw-r--r--tests/result/h323-overflow.pcap.out2
-rw-r--r--tests/result/h323.pcap.out2
-rw-r--r--tests/result/hangout.pcap.out2
-rw-r--r--tests/result/hpvirtgrp.pcap.out2
-rw-r--r--tests/result/hsrp0.pcap.out2
-rw-r--r--tests/result/hsrp2.pcap.out2
-rw-r--r--tests/result/http-crash-content-disposition.pcap.out2
-rw-r--r--tests/result/http-lines-split.pcap.out2
-rw-r--r--tests/result/http-manipulated.pcap.out2
-rw-r--r--tests/result/http-proxy.pcapng.out2
-rw-r--r--tests/result/http_auth.pcap.out2
-rw-r--r--tests/result/http_connect.pcap.out2
-rw-r--r--tests/result/http_guessed_host_and_guessed.pcapng.out2
-rw-r--r--tests/result/http_on_sip_port.pcap.out2
-rw-r--r--tests/result/i3d.pcap.out2
-rw-r--r--tests/result/iax.pcap.out2
-rw-r--r--tests/result/icmp-tunnel.pcap.out2
-rw-r--r--tests/result/iec60780-5-104.pcap.out2
-rw-r--r--tests/result/imap-starttls.pcap.out2
-rw-r--r--tests/result/imap.pcap.out2
-rw-r--r--tests/result/imaps.pcap.out2
-rw-r--r--tests/result/imo.pcap.out2
-rw-r--r--tests/result/instagram.pcap.out2
-rw-r--r--tests/result/iphone.pcap.out2
-rw-r--r--tests/result/ipp.pcap.out2
-rw-r--r--tests/result/ipsec_isakmp_esp.pcap.out2
-rw-r--r--tests/result/irc.pcap.out2
-rw-r--r--tests/result/ja3_lots_of_cipher_suites.pcap.out2
-rw-r--r--tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out2
-rw-r--r--tests/result/jabber.pcap.out2
-rw-r--r--tests/result/kerberos-error.pcap.out2
-rw-r--r--tests/result/kerberos-login.pcap.out2
-rw-r--r--tests/result/kerberos.pcap.out2
-rw-r--r--tests/result/kerberos_fuzz.pcapng.out2
-rw-r--r--tests/result/kismet.pcap.out2
-rw-r--r--tests/result/kontiki.pcap.out2
-rw-r--r--tests/result/lisp_registration.pcap.out2
-rw-r--r--tests/result/log4j-webapp-exploit.pcap.out2
-rw-r--r--tests/result/long_tls_certificate.pcap.out2
-rw-r--r--tests/result/malformed_dns.pcap.out2
-rw-r--r--tests/result/malformed_icmp.pcap.out2
-rw-r--r--tests/result/malware.pcap.out2
-rw-r--r--tests/result/memcached.cap.out2
-rw-r--r--tests/result/mgcp.pcapng.out2
-rw-r--r--tests/result/modbus.pcap.out2
-rw-r--r--tests/result/monero.pcap.out2
-rw-r--r--tests/result/mongo_false_positive.pcapng.out2
-rw-r--r--tests/result/mongodb.pcap.out2
-rw-r--r--tests/result/mpeg-dash.pcap.out2
-rw-r--r--tests/result/mpeg.pcap.out2
-rw-r--r--tests/result/mpegts.pcap.out2
-rw-r--r--tests/result/mqtt.pcap.out2
-rw-r--r--tests/result/mssql_tds.pcap.out2
-rw-r--r--tests/result/mysql-8.pcap.out2
-rw-r--r--tests/result/nats.pcap.out2
-rw-r--r--tests/result/ndpi_match_string_subprotocol__error.pcapng.out2
-rw-r--r--tests/result/nest_log_sink.pcap.out2
-rw-r--r--tests/result/netbios.pcap.out2
-rw-r--r--tests/result/netbios_wildcard_dns_query.pcap.out2
-rw-r--r--tests/result/netflix.pcap.out2
-rw-r--r--tests/result/netflow-fritz.pcap.out2
-rw-r--r--tests/result/netflowv9.pcap.out2
-rw-r--r--tests/result/nfsv2.pcap.out2
-rw-r--r--tests/result/nfsv3.pcap.out2
-rw-r--r--tests/result/nintendo.pcap.out2
-rw-r--r--tests/result/nntp.pcap.out2
-rw-r--r--tests/result/no_sni.pcap.out2
-rw-r--r--tests/result/ocs.pcap.out2
-rw-r--r--tests/result/ocsp.pcapng.out2
-rw-r--r--tests/result/ookla.pcap.out2
-rw-r--r--tests/result/openvpn.pcap.out2
-rw-r--r--tests/result/oracle12.pcapng.out2
-rw-r--r--tests/result/os_detected.pcapng.out2
-rw-r--r--tests/result/ospfv2_add_new_prefix.pcap.out2
-rw-r--r--tests/result/pgm.pcap.out2
-rw-r--r--tests/result/pgsql.pcap.out2
-rw-r--r--tests/result/pim.pcap.out2
-rw-r--r--tests/result/pluralsight.pcap.out2
-rw-r--r--tests/result/pop3.pcap.out2
-rw-r--r--tests/result/pop3_stls.pcap.out2
-rw-r--r--tests/result/pops.pcapng.out2
-rw-r--r--tests/result/pps.pcap.out2
-rw-r--r--tests/result/pptp.pcap.out2
-rw-r--r--tests/result/psiphon3.pcap.out2
-rw-r--r--tests/result/punycode-idn.pcap.out2
-rw-r--r--tests/result/quic-24.pcap.out2
-rw-r--r--tests/result/quic-28.pcap.out2
-rw-r--r--tests/result/quic-29.pcap.out2
-rw-r--r--tests/result/quic-34.pcap.out2
-rw-r--r--tests/result/quic-fuzz-overflow.pcapng.out2
-rw-r--r--tests/result/quic-mvfst-22.pcap.out2
-rw-r--r--tests/result/quic-mvfst-22_decryption_error.pcap.out2
-rw-r--r--tests/result/quic-mvfst-27.pcapng.out2
-rw-r--r--tests/result/quic-v2-01.pcapng.out2
-rw-r--r--tests/result/quic.pcap.out2
-rw-r--r--tests/result/quic046.pcap.out2
-rw-r--r--tests/result/quic_0RTT.pcap.out2
-rw-r--r--tests/result/quic_crypto_aes_auth_size.pcap.out2
-rw-r--r--tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out2
-rw-r--r--tests/result/quic_interop_V.pcapng.out2
-rw-r--r--tests/result/quic_q39.pcap.out2
-rw-r--r--tests/result/quic_q43.pcap.out2
-rw-r--r--tests/result/quic_q46.pcap.out2
-rw-r--r--tests/result/quic_q46_b.pcap.out2
-rw-r--r--tests/result/quic_q50.pcap.out2
-rw-r--r--tests/result/quic_t50.pcap.out2
-rw-r--r--tests/result/quic_t51.pcap.out2
-rw-r--r--tests/result/quickplay.pcap.out2
-rw-r--r--tests/result/raknet.pcap.out2
-rw-r--r--tests/result/rdp.pcap.out2
-rw-r--r--tests/result/reasm_crash_anon.pcapng.out2
-rw-r--r--tests/result/reasm_segv_anon.pcapng.out2
-rw-r--r--tests/result/riotgames.pcap.out2
-rw-r--r--tests/result/rsh-syslog-false-positive.pcap.out2
-rw-r--r--tests/result/rsh.pcap.out2
-rw-r--r--tests/result/rsync.pcap.out2
-rw-r--r--tests/result/rtmp.pcap.out2
-rw-r--r--tests/result/rtsp.pcap.out2
-rw-r--r--tests/result/rtsp_setup_http.pcapng.out2
-rw-r--r--tests/result/rx.pcap.out2
-rw-r--r--tests/result/s7comm.pcap.out2
-rw-r--r--tests/result/safari.pcap.out2
-rw-r--r--tests/result/salesforce.pcap.out2
-rw-r--r--tests/result/sccp_hw_conf_register.pcapng.out2
-rw-r--r--tests/result/sctp.cap.out2
-rw-r--r--tests/result/selfsigned.pcap.out2
-rw-r--r--tests/result/sflow.pcap.out2
-rw-r--r--tests/result/signal.pcap.out2
-rw-r--r--tests/result/simple-dnscrypt.pcap.out2
-rw-r--r--tests/result/sip.pcap.out2
-rw-r--r--tests/result/sip_hello.pcapng.out2
-rw-r--r--tests/result/sites.pcapng.out2
-rw-r--r--tests/result/skinny.pcap.out2
-rw-r--r--tests/result/skype-conference-call.pcap.out2
-rw-r--r--tests/result/skype.pcap.out2
-rw-r--r--tests/result/skype_no_unknown.pcap.out2
-rw-r--r--tests/result/skype_udp.pcap.out2
-rw-r--r--tests/result/smb_deletefile.pcap.out2
-rw-r--r--tests/result/smb_frags.pcap.out2
-rw-r--r--tests/result/smbv1.pcap.out2
-rw-r--r--tests/result/smpp_in_general.pcap.out2
-rw-r--r--tests/result/smtp-starttls.pcap.out2
-rw-r--r--tests/result/smtp.pcap.out2
-rw-r--r--tests/result/smtps.pcapng.out2
-rw-r--r--tests/result/snapchat.pcap.out2
-rw-r--r--tests/result/snapchat_call.pcapng.out2
-rw-r--r--tests/result/snmp.pcap.out2
-rw-r--r--tests/result/soap.pcap.out2
-rw-r--r--tests/result/socks-http-example.pcap.out2
-rw-r--r--tests/result/softether.pcap.out2
-rw-r--r--tests/result/someip-tp.pcap.out2
-rw-r--r--tests/result/someip-udp-method-call.pcapng.out2
-rw-r--r--tests/result/someip_sd_sample.pcap.out2
-rw-r--r--tests/result/sql_injection.pcap.out2
-rw-r--r--tests/result/ssdp-m-search-ua.pcap.out2
-rw-r--r--tests/result/ssdp-m-search.pcap.out2
-rw-r--r--tests/result/ssh.pcap.out2
-rw-r--r--tests/result/ssl-cert-name-mismatch.pcap.out2
-rw-r--r--tests/result/starcraft_battle.pcap.out2
-rw-r--r--tests/result/steam.pcap.out2
-rw-r--r--tests/result/steam_datagram_relay_ping.pcapng.out2
-rw-r--r--tests/result/stun.pcap.out2
-rw-r--r--tests/result/stun_signal.pcapng.out2
-rw-r--r--tests/result/synscan.pcap.out2
-rw-r--r--tests/result/syslog.pcap.out2
-rw-r--r--tests/result/targusdataspeed_false_positives.pcap.out2
-rw-r--r--tests/result/teams.pcap.out2
-rw-r--r--tests/result/teamspeak3.pcap.out2
-rw-r--r--tests/result/teamviewer.pcap.out2
-rw-r--r--tests/result/telegram.pcap.out2
-rw-r--r--tests/result/telnet.pcap.out2
-rw-r--r--tests/result/teredo.pcap.out2
-rw-r--r--tests/result/tftp.pcap.out2
-rw-r--r--tests/result/threema.pcap.out2
-rw-r--r--tests/result/tinc.pcap.out2
-rw-r--r--tests/result/tk.pcap.out2
-rw-r--r--tests/result/tls-appdata.pcap.out2
-rw-r--r--tests/result/tls-esni-fuzzed.pcap.out2
-rw-r--r--tests/result/tls-rdn-extract.pcap.out2
-rw-r--r--tests/result/tls_2_reasms.pcapng.out2
-rw-r--r--tests/result/tls_2_reasms_b.pcapng.out2
-rw-r--r--tests/result/tls_alert.pcap.out2
-rw-r--r--tests/result/tls_certificate_too_long.pcap.out2
-rw-r--r--tests/result/tls_cipher_lens.pcap.out2
-rw-r--r--tests/result/tls_esni_sni_both.pcap.out2
-rw-r--r--tests/result/tls_false_positives.pcapng.out2
-rw-r--r--tests/result/tls_invalid_reads.pcap.out2
-rw-r--r--tests/result/tls_long_cert.pcap.out2
-rw-r--r--tests/result/tls_missing_ch_frag.pcap.out2
-rw-r--r--tests/result/tls_multiple_synack_different_seq.pcapng.out2
-rw-r--r--tests/result/tls_port_80.pcapng.out2
-rw-r--r--tests/result/tls_torrent.pcapng.out2
-rw-r--r--tests/result/tls_verylong_certificate.pcap.out2
-rw-r--r--tests/result/toca-boca.pcap.out2
-rw-r--r--tests/result/tor.pcap.out2
-rw-r--r--tests/result/trickbot.pcap.out2
-rw-r--r--tests/result/tunnelbear.pcap.out2
-rw-r--r--tests/result/ubntac2.pcap.out2
-rw-r--r--tests/result/ultrasurf.pcap.out2
-rw-r--r--tests/result/upnp.pcap.out2
-rw-r--r--tests/result/viber.pcap.out2
-rw-r--r--tests/result/vnc.pcap.out2
-rw-r--r--tests/result/vxlan.pcap.out2
-rw-r--r--tests/result/wa_video.pcap.out2
-rw-r--r--tests/result/wa_voice.pcap.out2
-rw-r--r--tests/result/waze.pcap.out2
-rw-r--r--tests/result/webex.pcap.out2
-rw-r--r--tests/result/websocket.pcap.out2
-rw-r--r--tests/result/wechat.pcap.out2
-rw-r--r--tests/result/weibo.pcap.out2
-rw-r--r--tests/result/whatsapp.pcap.out2
-rw-r--r--tests/result/whatsapp_login_call.pcap.out2
-rw-r--r--tests/result/whatsapp_login_chat.pcap.out2
-rw-r--r--tests/result/whatsapp_voice_and_message.pcap.out2
-rw-r--r--tests/result/whatsappfiles.pcap.out2
-rw-r--r--tests/result/whois.pcapng.out2
-rw-r--r--tests/result/windowsupdate_over_http.pcap.out2
-rw-r--r--tests/result/wireguard.pcap.out2
-rw-r--r--tests/result/wow.pcap.out2
-rw-r--r--tests/result/xdmcp.pcap.out2
-rw-r--r--tests/result/xiaomi.pcap.out2
-rw-r--r--tests/result/xss.pcap.out2
-rw-r--r--tests/result/youtube_quic.pcap.out2
-rw-r--r--tests/result/youtubeupload.pcap.out2
-rw-r--r--tests/result/z3950.pcapng.out2
-rw-r--r--tests/result/zabbix.pcap.out2
-rw-r--r--tests/result/zattoo.pcap.out2
-rw-r--r--tests/result/zcash.pcap.out2
-rw-r--r--tests/result/zoom.pcap.out2
-rw-r--r--tests/result/zoom2.pcap.out2
348 files changed, 353 insertions, 380 deletions
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index 1f47daa7c..3922b0517 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -6193,42 +6193,15 @@ static int ndpi_do_guess(struct ndpi_detection_module_struct *ndpi_str, struct n
}
if(user_defined_proto && flow->guessed_protocol_id != NDPI_PROTOCOL_UNKNOWN) {
- if(packet->iph) {
- if(flow->guessed_host_protocol_id != NDPI_PROTOCOL_UNKNOWN) {
- u_int8_t protocol_was_guessed;
+ if(flow->guessed_host_protocol_id != NDPI_PROTOCOL_UNKNOWN) {
+ u_int8_t protocol_was_guessed;
- /* ret->master_protocol = flow->guessed_protocol_id , ret->app_protocol = flow->guessed_host_protocol_id; /\* ****** *\/ */
- *ret = ndpi_detection_giveup(ndpi_str, flow, 0, &protocol_was_guessed);
- }
-
- // if(ndpi_str->ndpi_num_custom_protocols != 0)
- ndpi_fill_protocol_category(ndpi_str, flow, ret);
- return(-1);
+ /* ret->master_protocol = flow->guessed_protocol_id , ret->app_protocol = flow->guessed_host_protocol_id; /\* ****** *\/ */
+ *ret = ndpi_detection_giveup(ndpi_str, flow, 0, &protocol_was_guessed);
}
- } else {
- /* guess host protocol */
- if(packet->iph) {
- flow->guessed_host_protocol_id = ndpi_guess_host_protocol_id(ndpi_str, flow);
- /*
- We could implement a shortcut here skipping dissectors for
- protocols we have identified by other means such as with the IP
-
- However we do NOT stop here and skip invoking the dissectors
- because we want to dissect the flow (e.g. dissect the TLS)
- and extract metadata.
- */
-#if SKIP_INVOKING_THE_DISSECTORS
- if(flow->guessed_host_protocol_id != NDPI_PROTOCOL_UNKNOWN) {
- /*
- We have identified a protocol using the IP address so
- it is not worth to dissect the traffic as we already have
- the solution
- */
- ret->master_protocol = flow->guessed_protocol_id, ret->app_protocol = flow->guessed_host_protocol_id;
- }
-#endif
- }
+ ndpi_fill_protocol_category(ndpi_str, flow, ret);
+ return(-1);
}
}
diff --git a/tests/result/1kxun.pcap.out b/tests/result/1kxun.pcap.out
index b421989d3..3a4bb4ee6 100644
--- a/tests/result/1kxun.pcap.out
+++ b/tests/result/1kxun.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 18/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 252/0 (search/found)
Patricia risk: 6/0 (search/found)
-Patricia protocols: 698/72 (search/found)
+Patricia protocols: 360/36 (search/found)
Unknown 24 6428 14
DNS 2 378 1
diff --git a/tests/result/443-chrome.pcap.out b/tests/result/443-chrome.pcap.out
index a4ffa925b..a471c36ff 100644
--- a/tests/result/443-chrome.pcap.out
+++ b/tests/result/443-chrome.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
TLS 1 1506 1
diff --git a/tests/result/443-curl.pcap.out b/tests/result/443-curl.pcap.out
index 3cf1d568e..646b8d4e0 100644
--- a/tests/result/443-curl.pcap.out
+++ b/tests/result/443-curl.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ntop 109 73982 1
diff --git a/tests/result/443-firefox.pcap.out b/tests/result/443-firefox.pcap.out
index e41b63b0a..9eae42319 100644
--- a/tests/result/443-firefox.pcap.out
+++ b/tests/result/443-firefox.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ntop 667 458067 1
diff --git a/tests/result/443-git.pcap.out b/tests/result/443-git.pcap.out
index 62fff4f0f..8440ac949 100644
--- a/tests/result/443-git.pcap.out
+++ b/tests/result/443-git.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 1/1 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Github 70 37189 1
diff --git a/tests/result/443-opvn.pcap.out b/tests/result/443-opvn.pcap.out
index 2c69313c3..afda46b3c 100644
--- a/tests/result/443-opvn.pcap.out
+++ b/tests/result/443-opvn.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
OpenVPN 46 11573 1
diff --git a/tests/result/443-safari.pcap.out b/tests/result/443-safari.pcap.out
index 7e0761143..a62e65588 100644
--- a/tests/result/443-safari.pcap.out
+++ b/tests/result/443-safari.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 7/7 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ntop 41 19929 1
diff --git a/tests/result/4in4tunnel.pcap.out b/tests/result/4in4tunnel.pcap.out
index 3ef0300fc..7340d521c 100644
--- a/tests/result/4in4tunnel.pcap.out
+++ b/tests/result/4in4tunnel.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Unknown 5 850 1
diff --git a/tests/result/4in6tunnel.pcap.out b/tests/result/4in6tunnel.pcap.out
index c2216acad..ea56bef7a 100644
--- a/tests/result/4in6tunnel.pcap.out
+++ b/tests/result/4in6tunnel.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Microsoft 4 2188 1
diff --git a/tests/result/BGP_Cisco_hdlc_slarp.pcap.out b/tests/result/BGP_Cisco_hdlc_slarp.pcap.out
index 5423983ac..11626eafa 100644
--- a/tests/result/BGP_Cisco_hdlc_slarp.pcap.out
+++ b/tests/result/BGP_Cisco_hdlc_slarp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
BGP 14 969 1
diff --git a/tests/result/BGP_redist.pcap.out b/tests/result/BGP_redist.pcap.out
index d33656673..1e4bfcfa9 100644
--- a/tests/result/BGP_redist.pcap.out
+++ b/tests/result/BGP_redist.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 4/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
BGP 2 322 2
diff --git a/tests/result/EAQ.pcap.out b/tests/result/EAQ.pcap.out
index 273c09543..01f3eedc7 100644
--- a/tests/result/EAQ.pcap.out
+++ b/tests/result/EAQ.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 62/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 120/4 (search/found)
+Patricia protocols: 60/2 (search/found)
Google 23 11743 2
EAQ 174 10092 29
diff --git a/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out b/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
index d7359b965..c4630caf9 100644
--- a/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
+++ b/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 20/0 (search/found)
+Patricia protocols: 10/0 (search/found)
RTP 6995 1395012 1
SIP 92 52851 3
diff --git a/tests/result/IEC104.pcap.out b/tests/result/IEC104.pcap.out
index 6785f1ca2..c27176036 100644
--- a/tests/result/IEC104.pcap.out
+++ b/tests/result/IEC104.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
IEC60870 15 1431 2
diff --git a/tests/result/KakaoTalk_chat.pcap.out b/tests/result/KakaoTalk_chat.pcap.out
index 32ba97bc2..149dd78e1 100644
--- a/tests/result/KakaoTalk_chat.pcap.out
+++ b/tests/result/KakaoTalk_chat.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 78/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 130/30 (search/found)
+Patricia protocols: 67/15 (search/found)
DNS 2 217 1
HTTP 1 56 1
diff --git a/tests/result/KakaoTalk_talk.pcap.out b/tests/result/KakaoTalk_talk.pcap.out
index e378ab840..85f7b1212 100644
--- a/tests/result/KakaoTalk_talk.pcap.out
+++ b/tests/result/KakaoTalk_talk.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 44/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 72/23 (search/found)
+Patricia protocols: 39/12 (search/found)
HTTP 5 280 1
QQ 15 1727 1
diff --git a/tests/result/NTPv2.pcap.out b/tests/result/NTPv2.pcap.out
index d9d9c526c..bb0c00f82 100644
--- a/tests/result/NTPv2.pcap.out
+++ b/tests/result/NTPv2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
NTP 1 410 1
diff --git a/tests/result/NTPv3.pcap.out b/tests/result/NTPv3.pcap.out
index 3edb730e6..9b1f2c197 100644
--- a/tests/result/NTPv3.pcap.out
+++ b/tests/result/NTPv3.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
NTP 1 90 1
diff --git a/tests/result/NTPv4.pcap.out b/tests/result/NTPv4.pcap.out
index fcfb07e74..239d33917 100644
--- a/tests/result/NTPv4.pcap.out
+++ b/tests/result/NTPv4.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
NTP 1 90 1
diff --git a/tests/result/Oscar.pcap.out b/tests/result/Oscar.pcap.out
index c022dc662..cf9a810f4 100644
--- a/tests/result/Oscar.pcap.out
+++ b/tests/result/Oscar.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
TLS 71 9386 1
diff --git a/tests/result/TivoDVR.pcap.out b/tests/result/TivoDVR.pcap.out
index e7618bee5..50681a19d 100644
--- a/tests/result/TivoDVR.pcap.out
+++ b/tests/result/TivoDVR.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
TiVoConnect 2 422 1
diff --git a/tests/result/WebattackRCE.pcap.out b/tests/result/WebattackRCE.pcap.out
index f6c049216..39084377a 100644
--- a/tests/result/WebattackRCE.pcap.out
+++ b/tests/result/WebattackRCE.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 777/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 1594/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 3188/0 (search/found)
+Patricia protocols: 1594/0 (search/found)
HTTP 797 191003 797
diff --git a/tests/result/WebattackSQLinj.pcap.out b/tests/result/WebattackSQLinj.pcap.out
index 50618a148..04efe1f05 100644
--- a/tests/result/WebattackSQLinj.pcap.out
+++ b/tests/result/WebattackSQLinj.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 18/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 36/0 (search/found)
+Patricia protocols: 18/0 (search/found)
HTTP 94 30008 9
diff --git a/tests/result/WebattackXSS.pcap.out b/tests/result/WebattackXSS.pcap.out
index 7b88dc170..0b7827614 100644
--- a/tests/result/WebattackXSS.pcap.out
+++ b/tests/result/WebattackXSS.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 1322/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2644/0 (search/found)
+Patricia protocols: 1322/0 (search/found)
HTTP 9374 4721148 661
diff --git a/tests/result/activision.pcap.out b/tests/result/activision.pcap.out
index bcc0e4f44..cbef44fcd 100644
--- a/tests/result/activision.pcap.out
+++ b/tests/result/activision.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/0 (search/found)
+Patricia protocols: 16/0 (search/found)
Activision 60 3904 4
diff --git a/tests/result/afp.pcap.out b/tests/result/afp.pcap.out
index 4a216a9f6..a10d6e007 100644
--- a/tests/result/afp.pcap.out
+++ b/tests/result/afp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
AFP 16 1218 1
diff --git a/tests/result/agora-sd-rtn.pcap.out b/tests/result/agora-sd-rtn.pcap.out
index fb70aecaa..fbb680828 100644
--- a/tests/result/agora-sd-rtn.pcap.out
+++ b/tests/result/agora-sd-rtn.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 52/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 156/0 (search/found)
+Patricia protocols: 104/0 (search/found)
SD-RTN 403 112365 26
diff --git a/tests/result/ah.pcapng.out b/tests/result/ah.pcapng.out
index bc04def9c..17965ad36 100644
--- a/tests/result/ah.pcapng.out
+++ b/tests/result/ah.pcapng.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
IPSec 6 1768 2
diff --git a/tests/result/aimini-http.pcap.out b/tests/result/aimini-http.pcap.out
index af1c60a53..e3baf0cb4 100644
--- a/tests/result/aimini-http.pcap.out
+++ b/tests/result/aimini-http.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 32/0 (search/found)
+Patricia protocols: 16/0 (search/found)
Aimini 133 86722 4
diff --git a/tests/result/ajp.pcap.out b/tests/result/ajp.pcap.out
index 5a8260734..50a37976e 100644
--- a/tests/result/ajp.pcap.out
+++ b/tests/result/ajp.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Unknown 6 2200 2
AJP 26 4446 2
diff --git a/tests/result/alexa-app.pcapng.out b/tests/result/alexa-app.pcapng.out
index 6d133df3f..fdab9651d 100644
--- a/tests/result/alexa-app.pcapng.out
+++ b/tests/result/alexa-app.pcapng.out
@@ -21,7 +21,7 @@ Automa risk mask: 82/0 (search/found)
Automa common alpns: 48/48 (search/found)
Patricia risk mask: 356/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 476/244 (search/found)
+Patricia protocols: 238/122 (search/found)
DNS 4 400 2
DHCP 3 1056 2
diff --git a/tests/result/alicloud.pcap.out b/tests/result/alicloud.pcap.out
index 8e8f226c1..9c2de853c 100644
--- a/tests/result/alicloud.pcap.out
+++ b/tests/result/alicloud.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 30/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 60/0 (search/found)
+Patricia protocols: 30/0 (search/found)
AliCloud 225 22986 15
diff --git a/tests/result/among_us.pcap.out b/tests/result/among_us.pcap.out
index 52de3dd00..f25459aaa 100644
--- a/tests/result/among_us.pcap.out
+++ b/tests/result/among_us.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
AmongUs 1 57 1
diff --git a/tests/result/amqp.pcap.out b/tests/result/amqp.pcap.out
index 4ffff783b..497d0d443 100644
--- a/tests/result/amqp.pcap.out
+++ b/tests/result/amqp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 18/0 (search/found)
+Patricia protocols: 12/0 (search/found)
AMQP 160 23514 3
diff --git a/tests/result/android.pcap.out b/tests/result/android.pcap.out
index 62c725251..f3840a038 100644
--- a/tests/result/android.pcap.out
+++ b/tests/result/android.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 5/0 (search/found)
Automa common alpns: 4/4 (search/found)
Patricia risk mask: 104/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 178/58 (search/found)
+Patricia protocols: 89/29 (search/found)
DNS 4 390 2
MDNS 2 174 2
diff --git a/tests/result/anyconnect-vpn.pcap.out b/tests/result/anyconnect-vpn.pcap.out
index 2297d0977..ffa6b3e81 100644
--- a/tests/result/anyconnect-vpn.pcap.out
+++ b/tests/result/anyconnect-vpn.pcap.out
@@ -22,7 +22,7 @@ Automa risk mask: 10/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 116/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 266/14 (search/found)
+Patricia protocols: 133/7 (search/found)
Unknown 19 1054 2
DNS 32 3655 16
diff --git a/tests/result/anydesk-2.pcap.out b/tests/result/anydesk-2.pcap.out
index 57d5f8bd8..3307b08c0 100644
--- a/tests/result/anydesk-2.pcap.out
+++ b/tests/result/anydesk-2.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
AnyDesk 2083 346113 4
diff --git a/tests/result/anydesk.pcap.out b/tests/result/anydesk.pcap.out
index 4923dccfe..b67595028 100644
--- a/tests/result/anydesk.pcap.out
+++ b/tests/result/anydesk.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/4 (search/found)
+Patricia protocols: 2/2 (search/found)
AnyDesk 6963 2795460 2
diff --git a/tests/result/avast.pcap.out b/tests/result/avast.pcap.out
index cebed7df2..eec8ea1d3 100644
--- a/tests/result/avast.pcap.out
+++ b/tests/result/avast.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 40/30 (search/found)
+Patricia protocols: 30/20 (search/found)
AVAST 142 9433 10
diff --git a/tests/result/avast_securedns.pcapng.out b/tests/result/avast_securedns.pcapng.out
index b72547c66..858ca17b2 100644
--- a/tests/result/avast_securedns.pcapng.out
+++ b/tests/result/avast_securedns.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 78/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 234/0 (search/found)
+Patricia protocols: 156/0 (search/found)
AVASTSecureDNS 77 11443 39
diff --git a/tests/result/bad-dns-traffic.pcap.out b/tests/result/bad-dns-traffic.pcap.out
index d33677a00..4ee76a6bc 100644
--- a/tests/result/bad-dns-traffic.pcap.out
+++ b/tests/result/bad-dns-traffic.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 6/0 (search/found)
DNS 382 99374 3
diff --git a/tests/result/bitcoin.pcap.out b/tests/result/bitcoin.pcap.out
index c9be21b3c..3ad891573 100644
--- a/tests/result/bitcoin.pcap.out
+++ b/tests/result/bitcoin.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/0 (search/found)
+Patricia protocols: 12/0 (search/found)
Mining 637 581074 6
diff --git a/tests/result/bittorrent.pcap.out b/tests/result/bittorrent.pcap.out
index c8565a4c6..63e0d234e 100644
--- a/tests/result/bittorrent.pcap.out
+++ b/tests/result/bittorrent.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 48/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 140/0 (search/found)
+Patricia protocols: 92/0 (search/found)
BitTorrent 299 305728 24
diff --git a/tests/result/bittorrent_utp.pcap.out b/tests/result/bittorrent_utp.pcap.out
index f6ff8b4f3..14a83fbf9 100644
--- a/tests/result/bittorrent_utp.pcap.out
+++ b/tests/result/bittorrent_utp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
BitTorrent 86 41489 1
diff --git a/tests/result/bjnp.pcap.out b/tests/result/bjnp.pcap.out
index 0fe1cdd0a..e5917d47b 100644
--- a/tests/result/bjnp.pcap.out
+++ b/tests/result/bjnp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 40/0 (search/found)
+Patricia protocols: 20/0 (search/found)
BJNP 10 460 10
diff --git a/tests/result/bot.pcap.out b/tests/result/bot.pcap.out
index dfb6dfbd9..6c09a93c3 100644
--- a/tests/result/bot.pcap.out
+++ b/tests/result/bot.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/2 (search/found)
+Patricia protocols: 2/1 (search/found)
Azure 402 431124 1
diff --git a/tests/result/bt_search.pcap.out b/tests/result/bt_search.pcap.out
index 1fb648dae..6056faa9a 100644
--- a/tests/result/bt_search.pcap.out
+++ b/tests/result/bt_search.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
BitTorrent 2 322 1
diff --git a/tests/result/cachefly.pcapng.out b/tests/result/cachefly.pcapng.out
index 55ce194aa..416742f1c 100644
--- a/tests/result/cachefly.pcapng.out
+++ b/tests/result/cachefly.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Cachefly 6 6163 1
diff --git a/tests/result/capwap.pcap.out b/tests/result/capwap.pcap.out
index 653f4ec8b..9434a4244 100644
--- a/tests/result/capwap.pcap.out
+++ b/tests/result/capwap.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 24/0 (search/found)
+Patricia protocols: 12/0 (search/found)
DNS 2 166 1
DHCP 5 2090 1
diff --git a/tests/result/cassandra.pcap.out b/tests/result/cassandra.pcap.out
index 2f1c0d600..cf37e44f7 100644
--- a/tests/result/cassandra.pcap.out
+++ b/tests/result/cassandra.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Cassandra 286 126016 2
diff --git a/tests/result/check_mk_new.pcap.out b/tests/result/check_mk_new.pcap.out
index a0338770a..27994f8c2 100644
--- a/tests/result/check_mk_new.pcap.out
+++ b/tests/result/check_mk_new.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
CHECKMK 98 20242 1
diff --git a/tests/result/chrome.pcap.out b/tests/result/chrome.pcap.out
index 40323f170..52471b677 100644
--- a/tests/result/chrome.pcap.out
+++ b/tests/result/chrome.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/0 (search/found)
+Patricia protocols: 12/0 (search/found)
TLS 5633 4985157 6
diff --git a/tests/result/citrix.pcap.out b/tests/result/citrix.pcap.out
index 5ca51c9dc..72459c318 100644
--- a/tests/result/citrix.pcap.out
+++ b/tests/result/citrix.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Citrix 100 11332 1
diff --git a/tests/result/cloudflare-warp.pcap.out b/tests/result/cloudflare-warp.pcap.out
index 8a2ec2624..92ffaff70 100644
--- a/tests/result/cloudflare-warp.pcap.out
+++ b/tests/result/cloudflare-warp.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 20/14 (search/found)
+Patricia protocols: 11/7 (search/found)
Jabber 11 890 1
Google 8 476 3
diff --git a/tests/result/coap_mqtt.pcap.out b/tests/result/coap_mqtt.pcap.out
index 973208f38..f045bea6c 100644
--- a/tests/result/coap_mqtt.pcap.out
+++ b/tests/result/coap_mqtt.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 32/0 (search/found)
+Patricia protocols: 16/0 (search/found)
COAP 19 1614 8
Dropbox 800 80676 4
diff --git a/tests/result/collectd.pcap.out b/tests/result/collectd.pcap.out
index 2ba4e9a5f..a1a7fd518 100644
--- a/tests/result/collectd.pcap.out
+++ b/tests/result/collectd.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 38/0 (search/found)
+Patricia protocols: 22/0 (search/found)
collectd 81 109386 8
diff --git a/tests/result/corba.pcap.out b/tests/result/corba.pcap.out
index 546f5761b..200a67362 100644
--- a/tests/result/corba.pcap.out
+++ b/tests/result/corba.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 6/0 (search/found)
Corba 22 3681 3
diff --git a/tests/result/cpha.pcap.out b/tests/result/cpha.pcap.out
index c65ab3614..23a2b6949 100644
--- a/tests/result/cpha.pcap.out
+++ b/tests/result/cpha.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
CPHA 1 96 1
diff --git a/tests/result/dazn.pcapng.out b/tests/result/dazn.pcapng.out
index 0eef01539..1b885c292 100644
--- a/tests/result/dazn.pcapng.out
+++ b/tests/result/dazn.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 3/3 (search/found)
Dazn 12 6675 3
diff --git a/tests/result/dcerpc.pcap.out b/tests/result/dcerpc.pcap.out
index f1071801f..8fa3b97fb 100644
--- a/tests/result/dcerpc.pcap.out
+++ b/tests/result/dcerpc.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
RPC 16 6866 4
diff --git a/tests/result/dhcp-fuzz.pcapng.out b/tests/result/dhcp-fuzz.pcapng.out
index 004ad145f..cb7de5ec3 100644
--- a/tests/result/dhcp-fuzz.pcapng.out
+++ b/tests/result/dhcp-fuzz.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
DHCP 1 342 1
diff --git a/tests/result/diameter.pcap.out b/tests/result/diameter.pcap.out
index 6a4e885e7..bb36370d6 100644
--- a/tests/result/diameter.pcap.out
+++ b/tests/result/diameter.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Diameter 6 1980 1
diff --git a/tests/result/discord.pcap.out b/tests/result/discord.pcap.out
index 40c2a2445..0b22792d2 100644
--- a/tests/result/discord.pcap.out
+++ b/tests/result/discord.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 68/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 122/95 (search/found)
+Patricia protocols: 88/61 (search/found)
Discord 411 98410 34
diff --git a/tests/result/dlt_ppp.pcap.out b/tests/result/dlt_ppp.pcap.out
index 0bafa8427..0184e19ad 100644
--- a/tests/result/dlt_ppp.pcap.out
+++ b/tests/result/dlt_ppp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 1 1230 1
diff --git a/tests/result/dnp3.pcap.out b/tests/result/dnp3.pcap.out
index 15fd5012e..5321f05f5 100644
--- a/tests/result/dnp3.pcap.out
+++ b/tests/result/dnp3.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 48/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 96/0 (search/found)
+Patricia protocols: 48/0 (search/found)
DNP3 543 38754 8
diff --git a/tests/result/dns-invalid-chars.pcap.out b/tests/result/dns-invalid-chars.pcap.out
index 7600ae365..d6a7c6235 100644
--- a/tests/result/dns-invalid-chars.pcap.out
+++ b/tests/result/dns-invalid-chars.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DNS 2 196 1
diff --git a/tests/result/dns-tunnel-iodine.pcap.out b/tests/result/dns-tunnel-iodine.pcap.out
index bb0d6ac31..3ad03a03d 100644
--- a/tests/result/dns-tunnel-iodine.pcap.out
+++ b/tests/result/dns-tunnel-iodine.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DNS 434 70252 1
diff --git a/tests/result/dns_ambiguous_names.pcap.out b/tests/result/dns_ambiguous_names.pcap.out
index b97f7c87d..78116c26b 100644
--- a/tests/result/dns_ambiguous_names.pcap.out
+++ b/tests/result/dns_ambiguous_names.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 20/20 (search/found)
+Patricia protocols: 10/10 (search/found)
QQ 2 212 1
Google 2 208 1
diff --git a/tests/result/dns_doh.pcap.out b/tests/result/dns_doh.pcap.out
index 0d5a1479c..e42184c3b 100644
--- a/tests/result/dns_doh.pcap.out
+++ b/tests/result/dns_doh.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
DoH_DoT 142 20362 1
diff --git a/tests/result/dns_dot.pcap.out b/tests/result/dns_dot.pcap.out
index 4a63e029f..6330bc8ad 100644
--- a/tests/result/dns_dot.pcap.out
+++ b/tests/result/dns_dot.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
DoH_DoT 24 5869 1
diff --git a/tests/result/dns_exfiltration.pcap.out b/tests/result/dns_exfiltration.pcap.out
index 93225b4e5..d2156195d 100644
--- a/tests/result/dns_exfiltration.pcap.out
+++ b/tests/result/dns_exfiltration.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DNS 300 73545 1
diff --git a/tests/result/dns_fragmented.pcap.out b/tests/result/dns_fragmented.pcap.out
index 9f7ba2bf0..4c97c1a6b 100644
--- a/tests/result/dns_fragmented.pcap.out
+++ b/tests/result/dns_fragmented.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 10/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 10/0 (search/found)
-Patricia protocols: 20/6 (search/found)
+Patricia protocols: 10/3 (search/found)
DNS 53 16888 18
Google 6 4807 3
diff --git a/tests/result/dns_invert_query.pcapng.out b/tests/result/dns_invert_query.pcapng.out
index 164645965..04261ecf6 100644
--- a/tests/result/dns_invert_query.pcapng.out
+++ b/tests/result/dns_invert_query.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DNS 2 134 1
diff --git a/tests/result/dns_long_domainname.pcap.out b/tests/result/dns_long_domainname.pcap.out
index c261f9078..9ab9b8131 100644
--- a/tests/result/dns_long_domainname.pcap.out
+++ b/tests/result/dns_long_domainname.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Google 2 262 1
diff --git a/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out b/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out
index 143ad57f6..f2cd750b8 100644
--- a/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out
+++ b/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 490/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 1458/18 (search/found)
+Patricia protocols: 974/12 (search/found)
DNScrypt 488 309562 245
diff --git a/tests/result/dnscrypt-v2-doh.pcap.out b/tests/result/dnscrypt-v2-doh.pcap.out
index 02fb98872..b39cb6f87 100644
--- a/tests/result/dnscrypt-v2-doh.pcap.out
+++ b/tests/result/dnscrypt-v2-doh.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 6/0 (search/found)
Automa common alpns: 6/6 (search/found)
Patricia risk mask: 66/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 136/0 (search/found)
+Patricia protocols: 68/0 (search/found)
DoH_DoT 577 216583 34
diff --git a/tests/result/dnscrypt-v2.pcap.out b/tests/result/dnscrypt-v2.pcap.out
index 9c3bd78cd..c813664f6 100644
--- a/tests/result/dnscrypt-v2.pcap.out
+++ b/tests/result/dnscrypt-v2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 18/0 (search/found)
+Patricia protocols: 12/0 (search/found)
DNScrypt 6 4300 3
diff --git a/tests/result/dnscrypt_skype_false_positive.pcapng.out b/tests/result/dnscrypt_skype_false_positive.pcapng.out
index 36cb96d6a..661a4c862 100644
--- a/tests/result/dnscrypt_skype_false_positive.pcapng.out
+++ b/tests/result/dnscrypt_skype_false_positive.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
DNScrypt 6 2380 1
diff --git a/tests/result/doq_adguard.pcapng.out b/tests/result/doq_adguard.pcapng.out
index 0e98dc063..18dea385d 100644
--- a/tests/result/doq_adguard.pcapng.out
+++ b/tests/result/doq_adguard.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DoH_DoT 296 44445 1
diff --git a/tests/result/dos_win98_smb_netbeui.pcap.out b/tests/result/dos_win98_smb_netbeui.pcap.out
index e110425de..e5f02d21c 100644
--- a/tests/result/dos_win98_smb_netbeui.pcap.out
+++ b/tests/result/dos_win98_smb_netbeui.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
NetBIOS 46 5060 2
SMBv1 15 3447 1
diff --git a/tests/result/drda_db2.pcap.out b/tests/result/drda_db2.pcap.out
index 8be052737..54a40720e 100644
--- a/tests/result/drda_db2.pcap.out
+++ b/tests/result/drda_db2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
DRDA 38 6691 1
diff --git a/tests/result/dropbox.pcap.out b/tests/result/dropbox.pcap.out
index e7edb0631..2ab74e735 100644
--- a/tests/result/dropbox.pcap.out
+++ b/tests/result/dropbox.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 18/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 60/0 (search/found)
+Patricia protocols: 30/0 (search/found)
Dropbox 848 90532 15
diff --git a/tests/result/dtls.pcap.out b/tests/result/dtls.pcap.out
index e2ec3a7b9..e59d0fc62 100644
--- a/tests/result/dtls.pcap.out
+++ b/tests/result/dtls.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DTLS 2 394 1
diff --git a/tests/result/dtls2.pcap.out b/tests/result/dtls2.pcap.out
index 9b15cb1b6..e989a0b62 100644
--- a/tests/result/dtls2.pcap.out
+++ b/tests/result/dtls2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DTLS 30 4991 1
diff --git a/tests/result/dtls_certificate.pcapng.out b/tests/result/dtls_certificate.pcapng.out
index 0437a2c59..0f50bb5c8 100644
--- a/tests/result/dtls_certificate.pcapng.out
+++ b/tests/result/dtls_certificate.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
WindowsUpdate 1 1486 1
diff --git a/tests/result/dtls_certificate_fragments.pcap.out b/tests/result/dtls_certificate_fragments.pcap.out
index 61e6d0e99..ec6b13101 100644
--- a/tests/result/dtls_certificate_fragments.pcap.out
+++ b/tests/result/dtls_certificate_fragments.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
GoogleCloud 20 5978 1
diff --git a/tests/result/dtls_mid_sessions.pcapng.out b/tests/result/dtls_mid_sessions.pcapng.out
index ce7591b51..eb4cf4bda 100644
--- a/tests/result/dtls_mid_sessions.pcapng.out
+++ b/tests/result/dtls_mid_sessions.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 8/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
DTLS 91 37868 4
diff --git a/tests/result/dtls_old_version.pcapng.out b/tests/result/dtls_old_version.pcapng.out
index 54486d58d..faeb83642 100644
--- a/tests/result/dtls_old_version.pcapng.out
+++ b/tests/result/dtls_old_version.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DTLS 7 994 1
diff --git a/tests/result/dtls_session_id_and_coockie_both.pcap.out b/tests/result/dtls_session_id_and_coockie_both.pcap.out
index 87b5ea8cf..29f959d63 100644
--- a/tests/result/dtls_session_id_and_coockie_both.pcap.out
+++ b/tests/result/dtls_session_id_and_coockie_both.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DTLS 4 604 1
diff --git a/tests/result/emotet.pcap.out b/tests/result/emotet.pcap.out
index 0b8856c57..dd869ae2b 100644
--- a/tests/result/emotet.pcap.out
+++ b/tests/result/emotet.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 26/0 (search/found)
+Patricia protocols: 14/0 (search/found)
SMTP 626 438465 1
HTTP 1601 1581542 3
diff --git a/tests/result/encrypted_sni.pcap.out b/tests/result/encrypted_sni.pcap.out
index b36a36af3..e7c8a5556 100644
--- a/tests/result/encrypted_sni.pcap.out
+++ b/tests/result/encrypted_sni.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 3/3 (search/found)
Cloudflare 3 2310 3
diff --git a/tests/result/esp.pcapng.out b/tests/result/esp.pcapng.out
index a59e0c14d..e405aac99 100644
--- a/tests/result/esp.pcapng.out
+++ b/tests/result/esp.pcapng.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
IPSec 6 1856 2
diff --git a/tests/result/ethereum.pcap.out b/tests/result/ethereum.pcap.out
index 915d91596..26bc33d2a 100644
--- a/tests/result/ethereum.pcap.out
+++ b/tests/result/ethereum.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 152/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 248/58 (search/found)
+Patricia protocols: 124/29 (search/found)
Mining 1997 215877 72
AmazonAWS 1 78 1
diff --git a/tests/result/ethernetIP.pcap.out b/tests/result/ethernetIP.pcap.out
index dea5aabf3..874a40f8a 100644
--- a/tests/result/ethernetIP.pcap.out
+++ b/tests/result/ethernetIP.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 8/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
EthernetIP 100 17384 4
diff --git a/tests/result/exe_download.pcap.out b/tests/result/exe_download.pcap.out
index f06299738..25150c0f2 100644
--- a/tests/result/exe_download.pcap.out
+++ b/tests/result/exe_download.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 703 717463 1
diff --git a/tests/result/exe_download_as_png.pcap.out b/tests/result/exe_download_as_png.pcap.out
index ea9ecf4b7..d054caeac 100644
--- a/tests/result/exe_download_as_png.pcap.out
+++ b/tests/result/exe_download_as_png.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 534 529449 1
diff --git a/tests/result/facebook.pcap.out b/tests/result/facebook.pcap.out
index 298891b0a..9028ae109 100644
--- a/tests/result/facebook.pcap.out
+++ b/tests/result/facebook.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 6/6 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/4 (search/found)
+Patricia protocols: 2/2 (search/found)
Facebook 60 30511 2
diff --git a/tests/result/fastcgi.pcap.out b/tests/result/fastcgi.pcap.out
index c61b86238..009e990f6 100644
--- a/tests/result/fastcgi.pcap.out
+++ b/tests/result/fastcgi.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
FastCGI 102 72243 1
diff --git a/tests/result/firefox.pcap.out b/tests/result/firefox.pcap.out
index 2332acf90..cd48d76cc 100644
--- a/tests/result/firefox.pcap.out
+++ b/tests/result/firefox.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/0 (search/found)
+Patricia protocols: 12/0 (search/found)
TLS 5441 4952732 6
diff --git a/tests/result/fix.pcap.out b/tests/result/fix.pcap.out
index c4daa013b..5a5fad8a7 100644
--- a/tests/result/fix.pcap.out
+++ b/tests/result/fix.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 24/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 72/0 (search/found)
+Patricia protocols: 48/0 (search/found)
FIX 1261 115514 12
diff --git a/tests/result/fix2.pcap.out b/tests/result/fix2.pcap.out
index 4012cb781..2c98f98ea 100644
--- a/tests/result/fix2.pcap.out
+++ b/tests/result/fix2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 8/0 (search/found)
FIX 3046 246540 2
diff --git a/tests/result/forticlient.pcap.out b/tests/result/forticlient.pcap.out
index 92fa7adb8..53c64718f 100644
--- a/tests/result/forticlient.pcap.out
+++ b/tests/result/forticlient.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 5/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 20/0 (search/found)
+Patricia protocols: 10/0 (search/found)
FortiClient 2000 430931 5
diff --git a/tests/result/ftp-start-tls.pcap.out b/tests/result/ftp-start-tls.pcap.out
index 5ba77ec48..4bbd54606 100644
--- a/tests/result/ftp-start-tls.pcap.out
+++ b/tests/result/ftp-start-tls.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
FTPS 51 7510 1
diff --git a/tests/result/ftp.pcap.out b/tests/result/ftp.pcap.out
index 9655f9af3..8727177bf 100644
--- a/tests/result/ftp.pcap.out
+++ b/tests/result/ftp.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 14/0 (search/found)
+Patricia protocols: 8/0 (search/found)
Unknown 1115 1122198 1
FTP_CONTROL 68 5571 1
diff --git a/tests/result/fuzz-2006-06-26-2594.pcap.out b/tests/result/fuzz-2006-06-26-2594.pcap.out
index 040327c43..ea9276842 100644
--- a/tests/result/fuzz-2006-06-26-2594.pcap.out
+++ b/tests/result/fuzz-2006-06-26-2594.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 38/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 458/0 (search/found)
Patricia risk: 26/0 (search/found)
-Patricia protocols: 1074/0 (search/found)
+Patricia protocols: 572/0 (search/found)
Unknown 30 3356 30
FTP_CONTROL 36 2569 12
diff --git a/tests/result/fuzz-2006-09-29-28586.pcap.out b/tests/result/fuzz-2006-09-29-28586.pcap.out
index 293042169..fa9b7aed5 100644
--- a/tests/result/fuzz-2006-09-29-28586.pcap.out
+++ b/tests/result/fuzz-2006-09-29-28586.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 74/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 158/6 (search/found)
+Patricia protocols: 85/4 (search/found)
Unknown 3 655 3
HTTP 116 27378 35
diff --git a/tests/result/fuzz-2020-02-16-11740.pcap.out b/tests/result/fuzz-2020-02-16-11740.pcap.out
index 7ae76973a..56c7a4e7a 100644
--- a/tests/result/fuzz-2020-02-16-11740.pcap.out
+++ b/tests/result/fuzz-2020-02-16-11740.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 148/0 (search/found)
Patricia risk: 18/0 (search/found)
-Patricia protocols: 340/0 (search/found)
+Patricia protocols: 186/0 (search/found)
Unknown 19 6603 19
VRRP 1 725 1
diff --git a/tests/result/genshin-impact.pcap.out b/tests/result/genshin-impact.pcap.out
index 6cb479fb9..2aba05558 100644
--- a/tests/result/genshin-impact.pcap.out
+++ b/tests/result/genshin-impact.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/9 (search/found)
+Patricia protocols: 15/6 (search/found)
GenshinImpact 90 18405 6
diff --git a/tests/result/git.pcap.out b/tests/result/git.pcap.out
index 3c3d710fb..587e6317f 100644
--- a/tests/result/git.pcap.out
+++ b/tests/result/git.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Git 90 74005 1
diff --git a/tests/result/gnutella.pcap.out b/tests/result/gnutella.pcap.out
index 72314d0b1..5c3233b67 100644
--- a/tests/result/gnutella.pcap.out
+++ b/tests/result/gnutella.pcap.out
@@ -22,7 +22,7 @@ Automa risk mask: 4/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 1768/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4380/3 (search/found)
+Patricia protocols: 2577/2 (search/found)
Unknown 1423 119577 595
MDNS 18 1632 2
diff --git a/tests/result/google_ssl.pcap.out b/tests/result/google_ssl.pcap.out
index 4692f9caa..41d56290e 100644
--- a/tests/result/google_ssl.pcap.out
+++ b/tests/result/google_ssl.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/3 (search/found)
+Patricia protocols: 3/2 (search/found)
Google 28 9108 1
diff --git a/tests/result/googledns_android10.pcap.out b/tests/result/googledns_android10.pcap.out
index ee469ab55..de34195b7 100644
--- a/tests/result/googledns_android10.pcap.out
+++ b/tests/result/googledns_android10.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 5/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/16 (search/found)
+Patricia protocols: 8/8 (search/found)
ICMP 4 392 1
Google 8 504 2
diff --git a/tests/result/gquic.pcap.out b/tests/result/gquic.pcap.out
index 22473dd71..921f3135a 100644
--- a/tests/result/gquic.pcap.out
+++ b/tests/result/gquic.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Google 1 1392 1
diff --git a/tests/result/gre_no_options.pcapng.out b/tests/result/gre_no_options.pcapng.out
index 4a28c6f43..25e5b36a3 100644
--- a/tests/result/gre_no_options.pcapng.out
+++ b/tests/result/gre_no_options.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
GRE 2 276 1
diff --git a/tests/result/gtp_c.pcap.out b/tests/result/gtp_c.pcap.out
index 5a4a24116..08ea0bb07 100644
--- a/tests/result/gtp_c.pcap.out
+++ b/tests/result/gtp_c.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
GTP_C 4 684 1
diff --git a/tests/result/gtp_false_positive.pcapng.out b/tests/result/gtp_false_positive.pcapng.out
index e8d365027..fd869e65b 100644
--- a/tests/result/gtp_false_positive.pcapng.out
+++ b/tests/result/gtp_false_positive.pcapng.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 6/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 10/0 (search/found)
Unknown 5 428 1
GTP 2 424 2
diff --git a/tests/result/gtp_prime.pcapng.out b/tests/result/gtp_prime.pcapng.out
index a65f2ea46..34395f882 100644
--- a/tests/result/gtp_prime.pcapng.out
+++ b/tests/result/gtp_prime.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
GTP_PRIME 1 300 1
diff --git a/tests/result/h323-overflow.pcap.out b/tests/result/h323-overflow.pcap.out
index 373e39d91..d2affb175 100644
--- a/tests/result/h323-overflow.pcap.out
+++ b/tests/result/h323-overflow.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 1 58 1
diff --git a/tests/result/h323.pcap.out b/tests/result/h323.pcap.out
index 2f072d2e5..c6f179f13 100644
--- a/tests/result/h323.pcap.out
+++ b/tests/result/h323.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 4/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 4/4 (search/found)
H323 12 1825 2
diff --git a/tests/result/hangout.pcap.out b/tests/result/hangout.pcap.out
index 15f00e373..291fc5057 100644
--- a/tests/result/hangout.pcap.out
+++ b/tests/result/hangout.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 5/3 (search/found)
+Patricia protocols: 3/2 (search/found)
GoogleHangoutDuo 19 2774 1
diff --git a/tests/result/hpvirtgrp.pcap.out b/tests/result/hpvirtgrp.pcap.out
index 196b468b3..f06f31596 100644
--- a/tests/result/hpvirtgrp.pcap.out
+++ b/tests/result/hpvirtgrp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 58/0 (search/found)
+Patricia protocols: 38/0 (search/found)
HP_VIRTGRP 135 12739 9
diff --git a/tests/result/hsrp0.pcap.out b/tests/result/hsrp0.pcap.out
index d767acda3..93fe64acc 100644
--- a/tests/result/hsrp0.pcap.out
+++ b/tests/result/hsrp0.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
HSRP 4 264 4
diff --git a/tests/result/hsrp2.pcap.out b/tests/result/hsrp2.pcap.out
index 08dbbd831..71940144c 100644
--- a/tests/result/hsrp2.pcap.out
+++ b/tests/result/hsrp2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
HSRP 2 188 2
diff --git a/tests/result/http-crash-content-disposition.pcap.out b/tests/result/http-crash-content-disposition.pcap.out
index 81a97f93b..7e39ff155 100644
--- a/tests/result/http-crash-content-disposition.pcap.out
+++ b/tests/result/http-crash-content-disposition.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
AmazonAWS 9 3328 1
diff --git a/tests/result/http-lines-split.pcap.out b/tests/result/http-lines-split.pcap.out
index dab0a6411..ea0ceee7f 100644
--- a/tests/result/http-lines-split.pcap.out
+++ b/tests/result/http-lines-split.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 14 2503 1
diff --git a/tests/result/http-manipulated.pcap.out b/tests/result/http-manipulated.pcap.out
index 4ecc05e06..a1abacbb0 100644
--- a/tests/result/http-manipulated.pcap.out
+++ b/tests/result/http-manipulated.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
HTTP 328 959347 2
diff --git a/tests/result/http-proxy.pcapng.out b/tests/result/http-proxy.pcapng.out
index 22bab1139..aba9c6c76 100644
--- a/tests/result/http-proxy.pcapng.out
+++ b/tests/result/http-proxy.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP_Proxy 11 1652 1
diff --git a/tests/result/http_auth.pcap.out b/tests/result/http_auth.pcap.out
index 84c59e7b1..6c410aab2 100644
--- a/tests/result/http_auth.pcap.out
+++ b/tests/result/http_auth.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 33 20574 1
diff --git a/tests/result/http_connect.pcap.out b/tests/result/http_connect.pcap.out
index 604fb388a..0e50ba787 100644
--- a/tests/result/http_connect.pcap.out
+++ b/tests/result/http_connect.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 6/0 (search/found)
DNS 2 178 1
TLS 58 36496 1
diff --git a/tests/result/http_guessed_host_and_guessed.pcapng.out b/tests/result/http_guessed_host_and_guessed.pcapng.out
index ca0436e21..4e5728015 100644
--- a/tests/result/http_guessed_host_and_guessed.pcapng.out
+++ b/tests/result/http_guessed_host_and_guessed.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Alibaba 1 123 1
diff --git a/tests/result/http_on_sip_port.pcap.out b/tests/result/http_on_sip_port.pcap.out
index b6eba1bc2..1fa19e3d0 100644
--- a/tests/result/http_on_sip_port.pcap.out
+++ b/tests/result/http_on_sip_port.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 4 1831 1
diff --git a/tests/result/i3d.pcap.out b/tests/result/i3d.pcap.out
index 2847acf65..072d23e69 100644
--- a/tests/result/i3d.pcap.out
+++ b/tests/result/i3d.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/12 (search/found)
+Patricia protocols: 12/8 (search/found)
i3D 60 36502 4
diff --git a/tests/result/iax.pcap.out b/tests/result/iax.pcap.out
index 58ecef046..5f87387e9 100644
--- a/tests/result/iax.pcap.out
+++ b/tests/result/iax.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
IAX 50 9172 1
diff --git a/tests/result/icmp-tunnel.pcap.out b/tests/result/icmp-tunnel.pcap.out
index aece6289f..db0e87baa 100644
--- a/tests/result/icmp-tunnel.pcap.out
+++ b/tests/result/icmp-tunnel.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ICMP 863 190810 1
diff --git a/tests/result/iec60780-5-104.pcap.out b/tests/result/iec60780-5-104.pcap.out
index 94caa8a9f..ae48b4fb0 100644
--- a/tests/result/iec60780-5-104.pcap.out
+++ b/tests/result/iec60780-5-104.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/0 (search/found)
+Patricia protocols: 12/0 (search/found)
IEC60870 147 9033 6
diff --git a/tests/result/imap-starttls.pcap.out b/tests/result/imap-starttls.pcap.out
index f54f8635f..4f5215757 100644
--- a/tests/result/imap-starttls.pcap.out
+++ b/tests/result/imap-starttls.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
IMAPS 32 7975 1
diff --git a/tests/result/imap.pcap.out b/tests/result/imap.pcap.out
index 8e4c02b32..4556fe916 100644
--- a/tests/result/imap.pcap.out
+++ b/tests/result/imap.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
IMAP 33 3774 1
diff --git a/tests/result/imaps.pcap.out b/tests/result/imaps.pcap.out
index f8849b92a..3771e15a0 100644
--- a/tests/result/imaps.pcap.out
+++ b/tests/result/imaps.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 6/0 (search/found)
ntop 20 5196 1
IMAPS 8 4378 1
diff --git a/tests/result/imo.pcap.out b/tests/result/imo.pcap.out
index 482d412f0..109fe467e 100644
--- a/tests/result/imo.pcap.out
+++ b/tests/result/imo.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 10/0 (search/found)
+Patricia protocols: 6/0 (search/found)
IMO 100 35380 2
diff --git a/tests/result/instagram.pcap.out b/tests/result/instagram.pcap.out
index 6cae4ebca..216784bb1 100644
--- a/tests/result/instagram.pcap.out
+++ b/tests/result/instagram.pcap.out
@@ -22,7 +22,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 70/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 128/33 (search/found)
+Patricia protocols: 68/17 (search/found)
Unknown 1 66 1
HTTP 116 91784 6
diff --git a/tests/result/iphone.pcap.out b/tests/result/iphone.pcap.out
index 7a0ac1d07..c54304770 100644
--- a/tests/result/iphone.pcap.out
+++ b/tests/result/iphone.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 3/3 (search/found)
Automa common alpns: 13/13 (search/found)
Patricia risk mask: 76/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 164/20 (search/found)
+Patricia protocols: 82/10 (search/found)
Unknown 2 120 1
MDNS 17 7012 5
diff --git a/tests/result/ipp.pcap.out b/tests/result/ipp.pcap.out
index 6502b58b4..1f8848f14 100644
--- a/tests/result/ipp.pcap.out
+++ b/tests/result/ipp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 6/0 (search/found)
IPP 277 248554 3
diff --git a/tests/result/ipsec_isakmp_esp.pcap.out b/tests/result/ipsec_isakmp_esp.pcap.out
index bbecaf5cf..9638f89b7 100644
--- a/tests/result/ipsec_isakmp_esp.pcap.out
+++ b/tests/result/ipsec_isakmp_esp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 48/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 96/0 (search/found)
+Patricia protocols: 48/0 (search/found)
IPSec 1080 580682 24
diff --git a/tests/result/irc.pcap.out b/tests/result/irc.pcap.out
index 507c13047..b25a1d7d0 100644
--- a/tests/result/irc.pcap.out
+++ b/tests/result/irc.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
IRC 29 8945 1
diff --git a/tests/result/ja3_lots_of_cipher_suites.pcap.out b/tests/result/ja3_lots_of_cipher_suites.pcap.out
index 752577133..03f3e9648 100644
--- a/tests/result/ja3_lots_of_cipher_suites.pcap.out
+++ b/tests/result/ja3_lots_of_cipher_suites.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
TLS 11 5132 1
diff --git a/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out b/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out
index 8b8644fc5..67f441518 100644
--- a/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out
+++ b/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
TLS 27 6966 1
diff --git a/tests/result/jabber.pcap.out b/tests/result/jabber.pcap.out
index aa12bf143..0da5c65ea 100644
--- a/tests/result/jabber.pcap.out
+++ b/tests/result/jabber.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 24/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 58/0 (search/found)
+Patricia protocols: 34/0 (search/found)
Jabber 358 61304 12
diff --git a/tests/result/kerberos-error.pcap.out b/tests/result/kerberos-error.pcap.out
index e778b66f8..433366040 100644
--- a/tests/result/kerberos-error.pcap.out
+++ b/tests/result/kerberos-error.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Kerberos 2 481 1
diff --git a/tests/result/kerberos-login.pcap.out b/tests/result/kerberos-login.pcap.out
index 101b44ce4..a82c34061 100644
--- a/tests/result/kerberos-login.pcap.out
+++ b/tests/result/kerberos-login.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 28/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 56/0 (search/found)
+Patricia protocols: 28/0 (search/found)
Kerberos 39 37272 13
diff --git a/tests/result/kerberos.pcap.out b/tests/result/kerberos.pcap.out
index fa238a906..3c842f783 100644
--- a/tests/result/kerberos.pcap.out
+++ b/tests/result/kerberos.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 72/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 194/0 (search/found)
+Patricia protocols: 122/0 (search/found)
Unknown 9 3031 2
SMBv23 6 1914 3
diff --git a/tests/result/kerberos_fuzz.pcapng.out b/tests/result/kerberos_fuzz.pcapng.out
index b5fd227ae..c1213f0dd 100644
--- a/tests/result/kerberos_fuzz.pcapng.out
+++ b/tests/result/kerberos_fuzz.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Kerberos 1 288 1
diff --git a/tests/result/kismet.pcap.out b/tests/result/kismet.pcap.out
index 52118b611..79aa0f356 100644
--- a/tests/result/kismet.pcap.out
+++ b/tests/result/kismet.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Kismet 35 4871 1
diff --git a/tests/result/kontiki.pcap.out b/tests/result/kontiki.pcap.out
index 360967dad..41be124c9 100644
--- a/tests/result/kontiki.pcap.out
+++ b/tests/result/kontiki.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 14/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 36/0 (search/found)
+Patricia protocols: 20/0 (search/found)
Unknown 4 1696 2
Kontiki 3278 3852324 2
diff --git a/tests/result/lisp_registration.pcap.out b/tests/result/lisp_registration.pcap.out
index c8d684964..89c70c349 100644
--- a/tests/result/lisp_registration.pcap.out
+++ b/tests/result/lisp_registration.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
LISP 30 5266 4
diff --git a/tests/result/log4j-webapp-exploit.pcap.out b/tests/result/log4j-webapp-exploit.pcap.out
index 6a20b2ecf..9a67f6716 100644
--- a/tests/result/log4j-webapp-exploit.pcap.out
+++ b/tests/result/log4j-webapp-exploit.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 14/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 28/0 (search/found)
+Patricia protocols: 14/0 (search/found)
Unknown 356 25081 2
HTTP 34 6741 3
diff --git a/tests/result/long_tls_certificate.pcap.out b/tests/result/long_tls_certificate.pcap.out
index d527c9137..9ec06bcfb 100644
--- a/tests/result/long_tls_certificate.pcap.out
+++ b/tests/result/long_tls_certificate.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Alibaba 47 14812 1
diff --git a/tests/result/malformed_dns.pcap.out b/tests/result/malformed_dns.pcap.out
index 77b0cb14d..86f90f387 100644
--- a/tests/result/malformed_dns.pcap.out
+++ b/tests/result/malformed_dns.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DNS 6 5860 1
diff --git a/tests/result/malformed_icmp.pcap.out b/tests/result/malformed_icmp.pcap.out
index 5807777af..60bfb13e6 100644
--- a/tests/result/malformed_icmp.pcap.out
+++ b/tests/result/malformed_icmp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ICMP 1 42 1
diff --git a/tests/result/malware.pcap.out b/tests/result/malware.pcap.out
index c0fc29668..ae6fecf4a 100644
--- a/tests/result/malware.pcap.out
+++ b/tests/result/malware.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/4 (search/found)
+Patricia protocols: 8/2 (search/found)
DNS 2 216 1
HTTP 1 66 1
diff --git a/tests/result/memcached.cap.out b/tests/result/memcached.cap.out
index 5097b76dd..85314ac0d 100644
--- a/tests/result/memcached.cap.out
+++ b/tests/result/memcached.cap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Memcached 10 1711 1
diff --git a/tests/result/mgcp.pcapng.out b/tests/result/mgcp.pcapng.out
index 440caac7a..b12517218 100644
--- a/tests/result/mgcp.pcapng.out
+++ b/tests/result/mgcp.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
MGCP 20 2437 2
diff --git a/tests/result/modbus.pcap.out b/tests/result/modbus.pcap.out
index cd7bbb4ba..bb7be4e29 100644
--- a/tests/result/modbus.pcap.out
+++ b/tests/result/modbus.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Modbus 102 6681 1
diff --git a/tests/result/monero.pcap.out b/tests/result/monero.pcap.out
index 3eba6a7a4..b765be1f3 100644
--- a/tests/result/monero.pcap.out
+++ b/tests/result/monero.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Mining 319 166676 2
diff --git a/tests/result/mongo_false_positive.pcapng.out b/tests/result/mongo_false_positive.pcapng.out
index 13dd4780f..0ae1476d7 100644
--- a/tests/result/mongo_false_positive.pcapng.out
+++ b/tests/result/mongo_false_positive.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
TLS 26 12163 1
diff --git a/tests/result/mongodb.pcap.out b/tests/result/mongodb.pcap.out
index 53a59227c..b36b8c98a 100644
--- a/tests/result/mongodb.pcap.out
+++ b/tests/result/mongodb.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 34/0 (search/found)
+Patricia protocols: 18/0 (search/found)
Unknown 3 230 1
MongoDB 24 2510 7
diff --git a/tests/result/mpeg-dash.pcap.out b/tests/result/mpeg-dash.pcap.out
index 67abd250e..6ac0e9a2c 100644
--- a/tests/result/mpeg-dash.pcap.out
+++ b/tests/result/mpeg-dash.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 10/6 (search/found)
+Patricia protocols: 5/3 (search/found)
MpegDash 13 4669 4
diff --git a/tests/result/mpeg.pcap.out b/tests/result/mpeg.pcap.out
index 8f5369e36..b7ee20592 100644
--- a/tests/result/mpeg.pcap.out
+++ b/tests/result/mpeg.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ntop 19 10643 1
diff --git a/tests/result/mpegts.pcap.out b/tests/result/mpegts.pcap.out
index c54c09684..de23a1096 100644
--- a/tests/result/mpegts.pcap.out
+++ b/tests/result/mpegts.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
MPEG_TS 1 1362 1
diff --git a/tests/result/mqtt.pcap.out b/tests/result/mqtt.pcap.out
index 99995cc39..89091a1a8 100644
--- a/tests/result/mqtt.pcap.out
+++ b/tests/result/mqtt.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 6/2 (search/found)
+Patricia protocols: 3/1 (search/found)
MQTT 9 1481 2
diff --git a/tests/result/mssql_tds.pcap.out b/tests/result/mssql_tds.pcap.out
index a975fbfef..cb172dac0 100644
--- a/tests/result/mssql_tds.pcap.out
+++ b/tests/result/mssql_tds.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 24/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 50/0 (search/found)
+Patricia protocols: 26/0 (search/found)
MsSQL-TDS 38 16260 12
diff --git a/tests/result/mysql-8.pcap.out b/tests/result/mysql-8.pcap.out
index e8fa6d5ff..506fbd528 100644
--- a/tests/result/mysql-8.pcap.out
+++ b/tests/result/mysql-8.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
MySQL 4 367 1
diff --git a/tests/result/nats.pcap.out b/tests/result/nats.pcap.out
index d2a83201d..47afb0f81 100644
--- a/tests/result/nats.pcap.out
+++ b/tests/result/nats.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Nats 27 2460 2
diff --git a/tests/result/ndpi_match_string_subprotocol__error.pcapng.out b/tests/result/ndpi_match_string_subprotocol__error.pcapng.out
index 0d06804e3..ba881b050 100644
--- a/tests/result/ndpi_match_string_subprotocol__error.pcapng.out
+++ b/tests/result/ndpi_match_string_subprotocol__error.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SOAP 13 2935 1
diff --git a/tests/result/nest_log_sink.pcap.out b/tests/result/nest_log_sink.pcap.out
index a37136a5c..74502f2ae 100644
--- a/tests/result/nest_log_sink.pcap.out
+++ b/tests/result/nest_log_sink.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 28/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 54/38 (search/found)
+Patricia protocols: 39/25 (search/found)
DNS 15 1612 1
NestLogSink 676 112058 12
diff --git a/tests/result/netbios.pcap.out b/tests/result/netbios.pcap.out
index 49910808d..e468af0d8 100644
--- a/tests/result/netbios.pcap.out
+++ b/tests/result/netbios.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 60/0 (search/found)
+Patricia protocols: 30/0 (search/found)
NetBIOS 258 24196 13
SMBv1 2 486 2
diff --git a/tests/result/netbios_wildcard_dns_query.pcap.out b/tests/result/netbios_wildcard_dns_query.pcap.out
index cbaea83bf..e35d931f9 100644
--- a/tests/result/netbios_wildcard_dns_query.pcap.out
+++ b/tests/result/netbios_wildcard_dns_query.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
DNS 1 92 1
diff --git a/tests/result/netflix.pcap.out b/tests/result/netflix.pcap.out
index 0952ca97d..e64603f63 100644
--- a/tests/result/netflix.pcap.out
+++ b/tests/result/netflix.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 13/0 (search/found)
Automa common alpns: 7/7 (search/found)
Patricia risk mask: 118/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 164/80 (search/found)
+Patricia protocols: 82/40 (search/found)
DNS 4 386 2
SSDP 16 2648 1
diff --git a/tests/result/netflow-fritz.pcap.out b/tests/result/netflow-fritz.pcap.out
index 17133b6e9..267e2f37c 100644
--- a/tests/result/netflow-fritz.pcap.out
+++ b/tests/result/netflow-fritz.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
NetFlow 1 222 1
diff --git a/tests/result/netflowv9.pcap.out b/tests/result/netflowv9.pcap.out
index 39bbb16a2..0b9bf6db4 100644
--- a/tests/result/netflowv9.pcap.out
+++ b/tests/result/netflowv9.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
NetFlow 10 13888 1
diff --git a/tests/result/nfsv2.pcap.out b/tests/result/nfsv2.pcap.out
index 642434c5f..4b73c6041 100644
--- a/tests/result/nfsv2.pcap.out
+++ b/tests/result/nfsv2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 14/0 (search/found)
Patricia risk: 14/0 (search/found)
-Patricia protocols: 28/0 (search/found)
+Patricia protocols: 14/0 (search/found)
NFS 156 23144 7
diff --git a/tests/result/nfsv3.pcap.out b/tests/result/nfsv3.pcap.out
index 34a9c7f20..33a204152 100644
--- a/tests/result/nfsv3.pcap.out
+++ b/tests/result/nfsv3.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 16/0 (search/found)
-Patricia protocols: 32/0 (search/found)
+Patricia protocols: 16/0 (search/found)
NFS 128 22816 8
diff --git a/tests/result/nintendo.pcap.out b/tests/result/nintendo.pcap.out
index dc5c6839b..208fdf25d 100644
--- a/tests/result/nintendo.pcap.out
+++ b/tests/result/nintendo.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 42/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 84/24 (search/found)
+Patricia protocols: 52/14 (search/found)
ICMP 30 2100 2
Nintendo 890 320242 12
diff --git a/tests/result/nntp.pcap.out b/tests/result/nntp.pcap.out
index a37e35edd..f8df3ba65 100644
--- a/tests/result/nntp.pcap.out
+++ b/tests/result/nntp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Usenet 32 7037 1
diff --git a/tests/result/no_sni.pcap.out b/tests/result/no_sni.pcap.out
index a1d7ac14f..7dda24ecc 100644
--- a/tests/result/no_sni.pcap.out
+++ b/tests/result/no_sni.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/16 (search/found)
+Patricia protocols: 8/8 (search/found)
DoH_DoT 268 31882 1
Cloudflare 917 562254 7
diff --git a/tests/result/ocs.pcap.out b/tests/result/ocs.pcap.out
index 3fa3304dc..f132e71ea 100644
--- a/tests/result/ocs.pcap.out
+++ b/tests/result/ocs.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 54/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 54/54 (search/found)
+Patricia protocols: 27/27 (search/found)
Google 29 3320 5
OCS 863 57552 7
diff --git a/tests/result/ocsp.pcapng.out b/tests/result/ocsp.pcapng.out
index 3d018a425..d813880d8 100644
--- a/tests/result/ocsp.pcapng.out
+++ b/tests/result/ocsp.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 34/6 (search/found)
+Patricia protocols: 17/3 (search/found)
HTTP 23 10871 1
OCSP 321 62776 9
diff --git a/tests/result/ookla.pcap.out b/tests/result/ookla.pcap.out
index 639db6587..dfc0e682a 100644
--- a/tests/result/ookla.pcap.out
+++ b/tests/result/ookla.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Ookla 5086 4689745 2
diff --git a/tests/result/openvpn.pcap.out b/tests/result/openvpn.pcap.out
index 51824e6a9..0b70932c2 100644
--- a/tests/result/openvpn.pcap.out
+++ b/tests/result/openvpn.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 18/0 (search/found)
+Patricia protocols: 12/0 (search/found)
OpenVPN 298 57111 3
diff --git a/tests/result/oracle12.pcapng.out b/tests/result/oracle12.pcapng.out
index aa1492c60..c9f2e8c44 100644
--- a/tests/result/oracle12.pcapng.out
+++ b/tests/result/oracle12.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Oracle 20 2518 1
diff --git a/tests/result/os_detected.pcapng.out b/tests/result/os_detected.pcapng.out
index 3d60cdda0..384005181 100644
--- a/tests/result/os_detected.pcapng.out
+++ b/tests/result/os_detected.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Google 1 1294 1
diff --git a/tests/result/ospfv2_add_new_prefix.pcap.out b/tests/result/ospfv2_add_new_prefix.pcap.out
index e454fddd5..81b34ec35 100644
--- a/tests/result/ospfv2_add_new_prefix.pcap.out
+++ b/tests/result/ospfv2_add_new_prefix.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
OSPF 2 200 1
diff --git a/tests/result/pgm.pcap.out b/tests/result/pgm.pcap.out
index 46dbce41c..561ac320b 100644
--- a/tests/result/pgm.pcap.out
+++ b/tests/result/pgm.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
PGM 1000 196302 1
diff --git a/tests/result/pgsql.pcap.out b/tests/result/pgsql.pcap.out
index 5b5ae5003..4e6d873c5 100644
--- a/tests/result/pgsql.pcap.out
+++ b/tests/result/pgsql.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 8/0 (search/found)
PostgreSQL 39 4709 2
diff --git a/tests/result/pim.pcap.out b/tests/result/pim.pcap.out
index 39c498201..bb07333d1 100644
--- a/tests/result/pim.pcap.out
+++ b/tests/result/pim.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
IP_PIM 10 920 1
diff --git a/tests/result/pluralsight.pcap.out b/tests/result/pluralsight.pcap.out
index 4a2eab03b..53748cadd 100644
--- a/tests/result/pluralsight.pcap.out
+++ b/tests/result/pluralsight.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 8/8 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/8 (search/found)
+Patricia protocols: 8/4 (search/found)
Pluralsight 44 29652 6
diff --git a/tests/result/pop3.pcap.out b/tests/result/pop3.pcap.out
index 2c2dc81ac..4bf8f75a4 100644
--- a/tests/result/pop3.pcap.out
+++ b/tests/result/pop3.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
POP3 31 3915 1
diff --git a/tests/result/pop3_stls.pcap.out b/tests/result/pop3_stls.pcap.out
index f5a4ec6f5..ae7205079 100644
--- a/tests/result/pop3_stls.pcap.out
+++ b/tests/result/pop3_stls.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
POPS 53 11189 1
diff --git a/tests/result/pops.pcapng.out b/tests/result/pops.pcapng.out
index b56732b72..4488faf45 100644
--- a/tests/result/pops.pcapng.out
+++ b/tests/result/pops.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
POPS 5 2998 1
diff --git a/tests/result/pps.pcap.out b/tests/result/pps.pcap.out
index f41869f0d..6b9ae9d42 100644
--- a/tests/result/pps.pcap.out
+++ b/tests/result/pps.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 194/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 452/4 (search/found)
+Patricia protocols: 240/2 (search/found)
Unknown 990 378832 34
HTTP 372 399367 45
diff --git a/tests/result/pptp.pcap.out b/tests/result/pptp.pcap.out
index 7e2d67837..951828e30 100644
--- a/tests/result/pptp.pcap.out
+++ b/tests/result/pptp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
PPTP 24 2328 1
diff --git a/tests/result/psiphon3.pcap.out b/tests/result/psiphon3.pcap.out
index 8a7613744..719a91c44 100644
--- a/tests/result/psiphon3.pcap.out
+++ b/tests/result/psiphon3.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/4 (search/found)
+Patricia protocols: 2/2 (search/found)
Psiphon 62 11818 1
diff --git a/tests/result/punycode-idn.pcap.out b/tests/result/punycode-idn.pcap.out
index 0f56c9639..cc0974a5a 100644
--- a/tests/result/punycode-idn.pcap.out
+++ b/tests/result/punycode-idn.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 10/2 (search/found)
+Patricia protocols: 5/1 (search/found)
DNS 2 162 1
Spotify 2 197 1
diff --git a/tests/result/quic-24.pcap.out b/tests/result/quic-24.pcap.out
index 4815bc387..36fbde400 100644
--- a/tests/result/quic-24.pcap.out
+++ b/tests/result/quic-24.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 15 8000 1
diff --git a/tests/result/quic-28.pcap.out b/tests/result/quic-28.pcap.out
index 3e22246cc..0f346a811 100644
--- a/tests/result/quic-28.pcap.out
+++ b/tests/result/quic-28.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Cloudflare 253 246793 1
diff --git a/tests/result/quic-29.pcap.out b/tests/result/quic-29.pcap.out
index c9e930594..71862887b 100644
--- a/tests/result/quic-29.pcap.out
+++ b/tests/result/quic-29.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 15 9386 1
diff --git a/tests/result/quic-34.pcap.out b/tests/result/quic-34.pcap.out
index 3b71f9441..210d1fc87 100644
--- a/tests/result/quic-34.pcap.out
+++ b/tests/result/quic-34.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 4 4836 1
diff --git a/tests/result/quic-fuzz-overflow.pcapng.out b/tests/result/quic-fuzz-overflow.pcapng.out
index 978925321..d3c7cb138 100644
--- a/tests/result/quic-fuzz-overflow.pcapng.out
+++ b/tests/result/quic-fuzz-overflow.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 1 1280 1
diff --git a/tests/result/quic-mvfst-22.pcap.out b/tests/result/quic-mvfst-22.pcap.out
index 5f612c149..c71c7713c 100644
--- a/tests/result/quic-mvfst-22.pcap.out
+++ b/tests/result/quic-mvfst-22.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Facebook 490 288303 1
diff --git a/tests/result/quic-mvfst-22_decryption_error.pcap.out b/tests/result/quic-mvfst-22_decryption_error.pcap.out
index b0df85d13..c7694b6ef 100644
--- a/tests/result/quic-mvfst-22_decryption_error.pcap.out
+++ b/tests/result/quic-mvfst-22_decryption_error.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 353 400490 1
diff --git a/tests/result/quic-mvfst-27.pcapng.out b/tests/result/quic-mvfst-27.pcapng.out
index 52f15129f..c6b0b123d 100644
--- a/tests/result/quic-mvfst-27.pcapng.out
+++ b/tests/result/quic-mvfst-27.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Facebook 20 11399 1
diff --git a/tests/result/quic-v2-01.pcapng.out b/tests/result/quic-v2-01.pcapng.out
index 0e85e5155..89743d76e 100644
--- a/tests/result/quic-v2-01.pcapng.out
+++ b/tests/result/quic-v2-01.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
QUIC 923 1311986 1
diff --git a/tests/result/quic.pcap.out b/tests/result/quic.pcap.out
index d7b695300..ef173538c 100644
--- a/tests/result/quic.pcap.out
+++ b/tests/result/quic.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/19 (search/found)
+Patricia protocols: 13/10 (search/found)
GMail 413 254874 1
YouTube 85 76193 5
diff --git a/tests/result/quic046.pcap.out b/tests/result/quic046.pcap.out
index 3a7eac661..86f40fef6 100644
--- a/tests/result/quic046.pcap.out
+++ b/tests/result/quic046.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
YouTube 100 91297 1
diff --git a/tests/result/quic_0RTT.pcap.out b/tests/result/quic_0RTT.pcap.out
index 87f26aaf5..af85ea96a 100644
--- a/tests/result/quic_0RTT.pcap.out
+++ b/tests/result/quic_0RTT.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/3 (search/found)
+Patricia protocols: 3/2 (search/found)
Google 15 5178 1
QUIC 2 2588 1
diff --git a/tests/result/quic_crypto_aes_auth_size.pcap.out b/tests/result/quic_crypto_aes_auth_size.pcap.out
index 9b98ac184..f97acac7b 100644
--- a/tests/result/quic_crypto_aes_auth_size.pcap.out
+++ b/tests/result/quic_crypto_aes_auth_size.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 4/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Snapchat 2 2784 2
diff --git a/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out b/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
index 1b599110b..80b08d95c 100644
--- a/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
+++ b/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 218/0 (search/found)
Patricia risk: 206/0 (search/found)
-Patricia protocols: 442/32 (search/found)
+Patricia protocols: 221/16 (search/found)
DataSaver 1 1392 1
YouTube 21 29232 21
diff --git a/tests/result/quic_interop_V.pcapng.out b/tests/result/quic_interop_V.pcapng.out
index 03939e75b..fb9aebcdb 100644
--- a/tests/result/quic_interop_V.pcapng.out
+++ b/tests/result/quic_interop_V.pcapng.out
@@ -18,7 +18,7 @@ Automa risk mask: 42/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 84/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 140/32 (search/found)
+Patricia protocols: 70/16 (search/found)
ICMP 21 7436 9
ICMPV6 10 10642 5
diff --git a/tests/result/quic_q39.pcap.out b/tests/result/quic_q39.pcap.out
index e6b37dd9d..559f4a6c5 100644
--- a/tests/result/quic_q39.pcap.out
+++ b/tests/result/quic_q39.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
YouTube 60 24185 1
diff --git a/tests/result/quic_q43.pcap.out b/tests/result/quic_q43.pcap.out
index 843ae62de..acb8502f4 100644
--- a/tests/result/quic_q43.pcap.out
+++ b/tests/result/quic_q43.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/2 (search/found)
+Patricia protocols: 2/1 (search/found)
DoH_DoT 2 1464 1
diff --git a/tests/result/quic_q46.pcap.out b/tests/result/quic_q46.pcap.out
index 54ce92b24..436e93ffd 100644
--- a/tests/result/quic_q46.pcap.out
+++ b/tests/result/quic_q46.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Google 20 21241 1
diff --git a/tests/result/quic_q46_b.pcap.out b/tests/result/quic_q46_b.pcap.out
index c732b7cf9..88badc6b4 100644
--- a/tests/result/quic_q46_b.pcap.out
+++ b/tests/result/quic_q46_b.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
YouTubeUpload 20 7020 1
diff --git a/tests/result/quic_q50.pcap.out b/tests/result/quic_q50.pcap.out
index 282f449c0..71eec05f1 100644
--- a/tests/result/quic_q50.pcap.out
+++ b/tests/result/quic_q50.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
GoogleServices 20 20434 1
diff --git a/tests/result/quic_t50.pcap.out b/tests/result/quic_t50.pcap.out
index 232c26308..092d76d42 100644
--- a/tests/result/quic_t50.pcap.out
+++ b/tests/result/quic_t50.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
GoogleServices 12 8420 1
diff --git a/tests/result/quic_t51.pcap.out b/tests/result/quic_t51.pcap.out
index 371220ba9..9b7027355 100644
--- a/tests/result/quic_t51.pcap.out
+++ b/tests/result/quic_t51.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Google 642 573718 1
diff --git a/tests/result/quickplay.pcap.out b/tests/result/quickplay.pcap.out
index 5a1025638..b639ec187 100644
--- a/tests/result/quickplay.pcap.out
+++ b/tests/result/quickplay.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 5/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 42/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 70/14 (search/found)
+Patricia protocols: 35/7 (search/found)
HTTP 133 96179 11
QQ 12 4781 5
diff --git a/tests/result/raknet.pcap.out b/tests/result/raknet.pcap.out
index 8fc8e6561..24ce0649d 100644
--- a/tests/result/raknet.pcap.out
+++ b/tests/result/raknet.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 24/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 66/0 (search/found)
+Patricia protocols: 42/0 (search/found)
RakNet 66 9600 12
diff --git a/tests/result/rdp.pcap.out b/tests/result/rdp.pcap.out
index d0cfb1a4f..161abb519 100644
--- a/tests/result/rdp.pcap.out
+++ b/tests/result/rdp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
RDP 2010 622743 1
diff --git a/tests/result/reasm_crash_anon.pcapng.out b/tests/result/reasm_crash_anon.pcapng.out
index 8b29f5f63..28581aa1e 100644
--- a/tests/result/reasm_crash_anon.pcapng.out
+++ b/tests/result/reasm_crash_anon.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Unknown 200 20067 1
diff --git a/tests/result/reasm_segv_anon.pcapng.out b/tests/result/reasm_segv_anon.pcapng.out
index c96f9bc9a..0c4b1f6ba 100644
--- a/tests/result/reasm_segv_anon.pcapng.out
+++ b/tests/result/reasm_segv_anon.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
HTTP 82 77940 1
diff --git a/tests/result/riotgames.pcap.out b/tests/result/riotgames.pcap.out
index 4f81abc1b..d10c2a04e 100644
--- a/tests/result/riotgames.pcap.out
+++ b/tests/result/riotgames.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 18/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 32/25 (search/found)
+Patricia protocols: 23/16 (search/found)
Discord 4 220 2
RiotGames 40 3733 7
diff --git a/tests/result/rsh-syslog-false-positive.pcap.out b/tests/result/rsh-syslog-false-positive.pcap.out
index eb023a656..0b8f2e063 100644
--- a/tests/result/rsh-syslog-false-positive.pcap.out
+++ b/tests/result/rsh-syslog-false-positive.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Syslog 6 3335 1
diff --git a/tests/result/rsh.pcap.out b/tests/result/rsh.pcap.out
index f291c6fe3..990ae9833 100644
--- a/tests/result/rsh.pcap.out
+++ b/tests/result/rsh.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
RSH 24 1721 2
diff --git a/tests/result/rsync.pcap.out b/tests/result/rsync.pcap.out
index 9b67ca3ce..3b50edd61 100644
--- a/tests/result/rsync.pcap.out
+++ b/tests/result/rsync.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
RSYNC 30 2493 1
diff --git a/tests/result/rtmp.pcap.out b/tests/result/rtmp.pcap.out
index 9934edb5e..e5493680f 100644
--- a/tests/result/rtmp.pcap.out
+++ b/tests/result/rtmp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
RTMP 26 8368 1
diff --git a/tests/result/rtsp.pcap.out b/tests/result/rtsp.pcap.out
index 8c41b7f42..8e7144e18 100644
--- a/tests/result/rtsp.pcap.out
+++ b/tests/result/rtsp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 58/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 116/0 (search/found)
+Patricia protocols: 58/0 (search/found)
RTSP 568 100872 7
diff --git a/tests/result/rtsp_setup_http.pcapng.out b/tests/result/rtsp_setup_http.pcapng.out
index a0f5a7a46..d1c0cc70b 100644
--- a/tests/result/rtsp_setup_http.pcapng.out
+++ b/tests/result/rtsp_setup_http.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
RTSP 1 233 1
diff --git a/tests/result/rx.pcap.out b/tests/result/rx.pcap.out
index fa885266d..fdc933c29 100644
--- a/tests/result/rx.pcap.out
+++ b/tests/result/rx.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 10/0 (search/found)
-Patricia protocols: 30/0 (search/found)
+Patricia protocols: 20/0 (search/found)
RX 132 26475 5
diff --git a/tests/result/s7comm.pcap.out b/tests/result/s7comm.pcap.out
index 9cbb29183..3934d6830 100644
--- a/tests/result/s7comm.pcap.out
+++ b/tests/result/s7comm.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
s7comm 55 5260 1
diff --git a/tests/result/safari.pcap.out b/tests/result/safari.pcap.out
index c5ac693b5..a419bcf4f 100644
--- a/tests/result/safari.pcap.out
+++ b/tests/result/safari.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 5/0 (search/found)
Automa common alpns: 14/14 (search/found)
Patricia risk mask: 14/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 28/0 (search/found)
+Patricia protocols: 14/0 (search/found)
TLS 6019 5570309 7
diff --git a/tests/result/salesforce.pcap.out b/tests/result/salesforce.pcap.out
index d1f323fb7..eaef98d68 100644
--- a/tests/result/salesforce.pcap.out
+++ b/tests/result/salesforce.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 7/7 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Salesforce 15 5205 1
diff --git a/tests/result/sccp_hw_conf_register.pcapng.out b/tests/result/sccp_hw_conf_register.pcapng.out
index 26b1ee6b2..3368d0cae 100644
--- a/tests/result/sccp_hw_conf_register.pcapng.out
+++ b/tests/result/sccp_hw_conf_register.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
CiscoSkinny 17 1522 1
diff --git a/tests/result/sctp.cap.out b/tests/result/sctp.cap.out
index a6d3e8f60..f8eb0d7d2 100644
--- a/tests/result/sctp.cap.out
+++ b/tests/result/sctp.cap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SCTP 4 340 2
diff --git a/tests/result/selfsigned.pcap.out b/tests/result/selfsigned.pcap.out
index e9dcfc48a..16c205c45 100644
--- a/tests/result/selfsigned.pcap.out
+++ b/tests/result/selfsigned.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
ntop 20 3766 1
diff --git a/tests/result/sflow.pcap.out b/tests/result/sflow.pcap.out
index 3daa5dca3..9c7bba3db 100644
--- a/tests/result/sflow.pcap.out
+++ b/tests/result/sflow.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
sFlow 9 1702 1
diff --git a/tests/result/signal.pcap.out b/tests/result/signal.pcap.out
index 4e48c8616..49f20a09d 100644
--- a/tests/result/signal.pcap.out
+++ b/tests/result/signal.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 16/16 (search/found)
Patricia risk mask: 36/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 54/22 (search/found)
+Patricia protocols: 27/11 (search/found)
DNS 2 186 1
DHCP 4 1368 1
diff --git a/tests/result/simple-dnscrypt.pcap.out b/tests/result/simple-dnscrypt.pcap.out
index f9494c498..811c0f4a4 100644
--- a/tests/result/simple-dnscrypt.pcap.out
+++ b/tests/result/simple-dnscrypt.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 4/0 (search/found)
Automa common alpns: 8/8 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
DNScrypt 111 44676 4
diff --git a/tests/result/sip.pcap.out b/tests/result/sip.pcap.out
index fd2960bea..d06a21769 100644
--- a/tests/result/sip.pcap.out
+++ b/tests/result/sip.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
RTP 9 1926 1
SIP 102 47087 2
diff --git a/tests/result/sip_hello.pcapng.out b/tests/result/sip_hello.pcapng.out
index 33cf22c4f..9aaf6c2c0 100644
--- a/tests/result/sip_hello.pcapng.out
+++ b/tests/result/sip_hello.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SIP 30 5592 1
diff --git a/tests/result/sites.pcapng.out b/tests/result/sites.pcapng.out
index 6588f0a2d..c51f7844a 100644
--- a/tests/result/sites.pcapng.out
+++ b/tests/result/sites.pcapng.out
@@ -20,7 +20,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 24/24 (search/found)
Patricia risk mask: 106/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 146/66 (search/found)
+Patricia protocols: 73/33 (search/found)
HTTP 2 148 1
Xbox 4 2245 1
diff --git a/tests/result/skinny.pcap.out b/tests/result/skinny.pcap.out
index 371f91f9d..888e077c0 100644
--- a/tests/result/skinny.pcap.out
+++ b/tests/result/skinny.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 18/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 36/0 (search/found)
+Patricia protocols: 18/0 (search/found)
ICMP 2 140 1
RTP 2871 614394 5
diff --git a/tests/result/skype-conference-call.pcap.out b/tests/result/skype-conference-call.pcap.out
index 51556af10..23c762e2c 100644
--- a/tests/result/skype-conference-call.pcap.out
+++ b/tests/result/skype-conference-call.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
Skype_TeamsCall 200 39687 1
diff --git a/tests/result/skype.pcap.out b/tests/result/skype.pcap.out
index 573398679..df2377929 100644
--- a/tests/result/skype.pcap.out
+++ b/tests/result/skype.pcap.out
@@ -22,7 +22,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 580/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 1608/10 (search/found)
+Patricia protocols: 1000/5 (search/found)
Unknown 1575 272476 61
DNS 2 267 1
diff --git a/tests/result/skype_no_unknown.pcap.out b/tests/result/skype_no_unknown.pcap.out
index 7bb12a5e7..77ce7c4e2 100644
--- a/tests/result/skype_no_unknown.pcap.out
+++ b/tests/result/skype_no_unknown.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 4/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 536/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 1482/6 (search/found)
+Patricia protocols: 918/3 (search/found)
Unknown 850 152468 45
DNS 2 267 1
diff --git a/tests/result/skype_udp.pcap.out b/tests/result/skype_udp.pcap.out
index 133006ef6..68bac5b4e 100644
--- a/tests/result/skype_udp.pcap.out
+++ b/tests/result/skype_udp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Skype_Teams 5 339 1
diff --git a/tests/result/smb_deletefile.pcap.out b/tests/result/smb_deletefile.pcap.out
index a8baf4052..8f7541a93 100644
--- a/tests/result/smb_deletefile.pcap.out
+++ b/tests/result/smb_deletefile.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SMBv23 101 30748 1
diff --git a/tests/result/smb_frags.pcap.out b/tests/result/smb_frags.pcap.out
index 2abc72d6d..7266ba2d7 100644
--- a/tests/result/smb_frags.pcap.out
+++ b/tests/result/smb_frags.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SMBv1 8 2763 1
diff --git a/tests/result/smbv1.pcap.out b/tests/result/smbv1.pcap.out
index ba6c677ea..1bb0e8523 100644
--- a/tests/result/smbv1.pcap.out
+++ b/tests/result/smbv1.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SMBv1 7 1197 1
diff --git a/tests/result/smpp_in_general.pcap.out b/tests/result/smpp_in_general.pcap.out
index f45478d53..fa0fd1d77 100644
--- a/tests/result/smpp_in_general.pcap.out
+++ b/tests/result/smpp_in_general.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SMPP 17 1144 1
diff --git a/tests/result/smtp-starttls.pcap.out b/tests/result/smtp-starttls.pcap.out
index 2365e20e6..98904bd8a 100644
--- a/tests/result/smtp-starttls.pcap.out
+++ b/tests/result/smtp-starttls.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
SMTPS 33 6429 1
Google 36 8403 1
diff --git a/tests/result/smtp.pcap.out b/tests/result/smtp.pcap.out
index 5c529e573..a64aa31d6 100644
--- a/tests/result/smtp.pcap.out
+++ b/tests/result/smtp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SMTP 95 23157 1
diff --git a/tests/result/smtps.pcapng.out b/tests/result/smtps.pcapng.out
index 4f927c988..0c1832a39 100644
--- a/tests/result/smtps.pcapng.out
+++ b/tests/result/smtps.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SMTPS 4 936 1
diff --git a/tests/result/snapchat.pcap.out b/tests/result/snapchat.pcap.out
index f3567e916..8c7a297e8 100644
--- a/tests/result/snapchat.pcap.out
+++ b/tests/result/snapchat.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 3/3 (search/found)
Google 22 2879 1
Snapchat 34 7320 2
diff --git a/tests/result/snapchat_call.pcapng.out b/tests/result/snapchat_call.pcapng.out
index 6c2a3e547..48d1df006 100644
--- a/tests/result/snapchat_call.pcapng.out
+++ b/tests/result/snapchat_call.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
SnapchatCall 50 12772 1
diff --git a/tests/result/snmp.pcap.out b/tests/result/snmp.pcap.out
index 3eb91aa44..548445a9e 100644
--- a/tests/result/snmp.pcap.out
+++ b/tests/result/snmp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 26/0 (search/found)
Patricia risk: 30/0 (search/found)
-Patricia protocols: 68/8 (search/found)
+Patricia protocols: 34/4 (search/found)
SNMP 72 14435 17
diff --git a/tests/result/soap.pcap.out b/tests/result/soap.pcap.out
index 325046967..f11a345bb 100644
--- a/tests/result/soap.pcap.out
+++ b/tests/result/soap.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 10/0 (search/found)
HTTP 14 5498 1
SOAP 6 5450 2
diff --git a/tests/result/socks-http-example.pcap.out b/tests/result/socks-http-example.pcap.out
index 203f4d2be..672fd80fb 100644
--- a/tests/result/socks-http-example.pcap.out
+++ b/tests/result/socks-http-example.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 14/0 (search/found)
+Patricia protocols: 8/0 (search/found)
SOCKS 46 8383 3
diff --git a/tests/result/softether.pcap.out b/tests/result/softether.pcap.out
index 7212d1e7b..cf420c07b 100644
--- a/tests/result/softether.pcap.out
+++ b/tests/result/softether.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 18/0 (search/found)
+Patricia protocols: 10/0 (search/found)
Softether 177 21287 4
diff --git a/tests/result/someip-tp.pcap.out b/tests/result/someip-tp.pcap.out
index cbbe38d13..586f9ec68 100644
--- a/tests/result/someip-tp.pcap.out
+++ b/tests/result/someip-tp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SOMEIP 9 12850 1
diff --git a/tests/result/someip-udp-method-call.pcapng.out b/tests/result/someip-udp-method-call.pcapng.out
index 0d26110d3..8dbe0a8d0 100644
--- a/tests/result/someip-udp-method-call.pcapng.out
+++ b/tests/result/someip-udp-method-call.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SOMEIP 3 504 2
diff --git a/tests/result/someip_sd_sample.pcap.out b/tests/result/someip_sd_sample.pcap.out
index 38271c447..5ba0d7bbe 100644
--- a/tests/result/someip_sd_sample.pcap.out
+++ b/tests/result/someip_sd_sample.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
SOMEIP 6 660 2
diff --git a/tests/result/sql_injection.pcap.out b/tests/result/sql_injection.pcap.out
index 09fdcb735..63a128429 100644
--- a/tests/result/sql_injection.pcap.out
+++ b/tests/result/sql_injection.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 5 2748 1
diff --git a/tests/result/ssdp-m-search-ua.pcap.out b/tests/result/ssdp-m-search-ua.pcap.out
index 1e2659462..525907235 100644
--- a/tests/result/ssdp-m-search-ua.pcap.out
+++ b/tests/result/ssdp-m-search-ua.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SSDP 4 864 1
diff --git a/tests/result/ssdp-m-search.pcap.out b/tests/result/ssdp-m-search.pcap.out
index d2e335bbb..772d7696d 100644
--- a/tests/result/ssdp-m-search.pcap.out
+++ b/tests/result/ssdp-m-search.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SSDP 19 1197 1
diff --git a/tests/result/ssh.pcap.out b/tests/result/ssh.pcap.out
index 4a97e2c2b..0fe7f10ee 100644
--- a/tests/result/ssh.pcap.out
+++ b/tests/result/ssh.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
SSH 258 35546 1
diff --git a/tests/result/ssl-cert-name-mismatch.pcap.out b/tests/result/ssl-cert-name-mismatch.pcap.out
index adb1dfada..5862f675b 100644
--- a/tests/result/ssl-cert-name-mismatch.pcap.out
+++ b/tests/result/ssl-cert-name-mismatch.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 1/1 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 2/2 (search/found)
+Patricia protocols: 1/1 (search/found)
GoogleCloud 21 5412 1
diff --git a/tests/result/starcraft_battle.pcap.out b/tests/result/starcraft_battle.pcap.out
index ec1731658..a4993fe24 100644
--- a/tests/result/starcraft_battle.pcap.out
+++ b/tests/result/starcraft_battle.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 4/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 100/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 195/15 (search/found)
+Patricia protocols: 98/8 (search/found)
DNS 26 2848 7
HTTP 450 294880 19
diff --git a/tests/result/steam.pcap.out b/tests/result/steam.pcap.out
index 46f856e15..3036f1f3d 100644
--- a/tests/result/steam.pcap.out
+++ b/tests/result/steam.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 110/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 196/24 (search/found)
+Patricia protocols: 98/12 (search/found)
Steam 104 9020 55
diff --git a/tests/result/steam_datagram_relay_ping.pcapng.out b/tests/result/steam_datagram_relay_ping.pcapng.out
index ccd3bae0d..a5c9c6d21 100644
--- a/tests/result/steam_datagram_relay_ping.pcapng.out
+++ b/tests/result/steam_datagram_relay_ping.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Steam 2 2684 1
diff --git a/tests/result/stun.pcap.out b/tests/result/stun.pcap.out
index 94691ea1b..c384417e5 100644
--- a/tests/result/stun.pcap.out
+++ b/tests/result/stun.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 14/6 (search/found)
+Patricia protocols: 10/4 (search/found)
STUN 62 7620 2
GoogleHangoutDuo 33 6292 1
diff --git a/tests/result/stun_signal.pcapng.out b/tests/result/stun_signal.pcapng.out
index 589b59c00..1a26f8fc7 100644
--- a/tests/result/stun_signal.pcapng.out
+++ b/tests/result/stun_signal.pcapng.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 46/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 54/48 (search/found)
+Patricia protocols: 29/25 (search/found)
ICMP 53 5186 2
GoogleHangoutDuo 40 2720 4
diff --git a/tests/result/synscan.pcap.out b/tests/result/synscan.pcap.out
index 917778735..1d50192f9 100644
--- a/tests/result/synscan.pcap.out
+++ b/tests/result/synscan.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 3988/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 7960/0 (search/found)
+Patricia protocols: 3988/0 (search/found)
Unknown 1870 108468 1866
FTP_CONTROL 2 116 2
diff --git a/tests/result/syslog.pcap.out b/tests/result/syslog.pcap.out
index b8e7e719b..d2ee1e870 100644
--- a/tests/result/syslog.pcap.out
+++ b/tests/result/syslog.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 56/0 (search/found)
Patricia risk: 6/0 (search/found)
-Patricia protocols: 112/0 (search/found)
+Patricia protocols: 56/0 (search/found)
Unknown 1 78 1
Syslog 93 20321 21
diff --git a/tests/result/targusdataspeed_false_positives.pcap.out b/tests/result/targusdataspeed_false_positives.pcap.out
index b5dc225d8..659182686 100644
--- a/tests/result/targusdataspeed_false_positives.pcap.out
+++ b/tests/result/targusdataspeed_false_positives.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 8/0 (search/found)
BitTorrent 4 939 2
diff --git a/tests/result/teams.pcap.out b/tests/result/teams.pcap.out
index df857d4c3..b9a4a17ae 100644
--- a/tests/result/teams.pcap.out
+++ b/tests/result/teams.pcap.out
@@ -22,7 +22,7 @@ Automa risk mask: 21/0 (search/found)
Automa common alpns: 12/12 (search/found)
Patricia risk mask: 156/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 246/95 (search/found)
+Patricia protocols: 125/48 (search/found)
Unknown 4 456 1
DNS 10 1357 5
diff --git a/tests/result/teamspeak3.pcap.out b/tests/result/teamspeak3.pcap.out
index 92e19a4b4..40a8bc89e 100644
--- a/tests/result/teamspeak3.pcap.out
+++ b/tests/result/teamspeak3.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
TeamSpeak 13 1911 1
diff --git a/tests/result/teamviewer.pcap.out b/tests/result/teamviewer.pcap.out
index d8c1f847f..a30872e18 100644
--- a/tests/result/teamviewer.pcap.out
+++ b/tests/result/teamviewer.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 10/0 (search/found)
+Patricia protocols: 6/0 (search/found)
TeamViewer 1298 704218 2
diff --git a/tests/result/telegram.pcap.out b/tests/result/telegram.pcap.out
index a50b7a4ce..81abeed5f 100644
--- a/tests/result/telegram.pcap.out
+++ b/tests/result/telegram.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 4/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 58/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 156/28 (search/found)
+Patricia protocols: 80/14 (search/found)
Unknown 304 72496 2
DNS 8 716 4
diff --git a/tests/result/telnet.pcap.out b/tests/result/telnet.pcap.out
index 2c011590d..33ef38cf4 100644
--- a/tests/result/telnet.pcap.out
+++ b/tests/result/telnet.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Telnet 87 7418 1
diff --git a/tests/result/teredo.pcap.out b/tests/result/teredo.pcap.out
index 2f306cb76..06b56e977 100644
--- a/tests/result/teredo.pcap.out
+++ b/tests/result/teredo.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 20/0 (search/found)
+Patricia protocols: 10/0 (search/found)
Teredo 24 2574 5
diff --git a/tests/result/tftp.pcap.out b/tests/result/tftp.pcap.out
index 151bde946..e3e3c36c5 100644
--- a/tests/result/tftp.pcap.out
+++ b/tests/result/tftp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 14/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 30/0 (search/found)
+Patricia protocols: 16/0 (search/found)
TFTP 107 31296 7
diff --git a/tests/result/threema.pcap.out b/tests/result/threema.pcap.out
index fe1af29d8..c46567036 100644
--- a/tests/result/threema.pcap.out
+++ b/tests/result/threema.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 12/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 24/18 (search/found)
+Patricia protocols: 18/12 (search/found)
Threema 83 11578 6
diff --git a/tests/result/tinc.pcap.out b/tests/result/tinc.pcap.out
index ef79d20f0..e789156e7 100644
--- a/tests/result/tinc.pcap.out
+++ b/tests/result/tinc.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 8/0 (search/found)
-Patricia protocols: 20/0 (search/found)
+Patricia protocols: 12/0 (search/found)
TINC 317 352291 4
diff --git a/tests/result/tk.pcap.out b/tests/result/tk.pcap.out
index f19c9b140..c5cb94d5c 100644
--- a/tests/result/tk.pcap.out
+++ b/tests/result/tk.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 6/0 (search/found)
DNS 6 566 3
diff --git a/tests/result/tls-appdata.pcap.out b/tests/result/tls-appdata.pcap.out
index e3e8ad90a..9f8da7a9c 100644
--- a/tests/result/tls-appdata.pcap.out
+++ b/tests/result/tls-appdata.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/5 (search/found)
+Patricia protocols: 4/3 (search/found)
Facebook 6 789 1
Twitch 114 119156 1
diff --git a/tests/result/tls-esni-fuzzed.pcap.out b/tests/result/tls-esni-fuzzed.pcap.out
index d4c04483e..6933c8fe2 100644
--- a/tests/result/tls-esni-fuzzed.pcap.out
+++ b/tests/result/tls-esni-fuzzed.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 3/3 (search/found)
Cloudflare 3 2310 3
diff --git a/tests/result/tls-rdn-extract.pcap.out b/tests/result/tls-rdn-extract.pcap.out
index 1243b34b2..8b8be6d36 100644
--- a/tests/result/tls-rdn-extract.pcap.out
+++ b/tests/result/tls-rdn-extract.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Microsoft 6 7205 1
diff --git a/tests/result/tls_2_reasms.pcapng.out b/tests/result/tls_2_reasms.pcapng.out
index 45ea046a0..5d479eb8d 100644
--- a/tests/result/tls_2_reasms.pcapng.out
+++ b/tests/result/tls_2_reasms.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Instagram 14 6907 1
diff --git a/tests/result/tls_2_reasms_b.pcapng.out b/tests/result/tls_2_reasms_b.pcapng.out
index d75c992e4..267aa894c 100644
--- a/tests/result/tls_2_reasms_b.pcapng.out
+++ b/tests/result/tls_2_reasms_b.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Facebook 15 13455 1
diff --git a/tests/result/tls_alert.pcap.out b/tests/result/tls_alert.pcap.out
index feabfc531..0172aa958 100644
--- a/tests/result/tls_alert.pcap.out
+++ b/tests/result/tls_alert.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
TLS 7 533 1
Google 11 952 1
diff --git a/tests/result/tls_certificate_too_long.pcap.out b/tests/result/tls_certificate_too_long.pcap.out
index f6ec0338b..cbe1e0a77 100644
--- a/tests/result/tls_certificate_too_long.pcap.out
+++ b/tests/result/tls_certificate_too_long.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 11/0 (search/found)
Automa common alpns: 16/16 (search/found)
Patricia risk mask: 62/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 88/56 (search/found)
+Patricia protocols: 47/29 (search/found)
Unknown 13 5582 1
MDNS 5 983 3
diff --git a/tests/result/tls_cipher_lens.pcap.out b/tests/result/tls_cipher_lens.pcap.out
index 2ea56d3b3..b5f31a8c8 100644
--- a/tests/result/tls_cipher_lens.pcap.out
+++ b/tests/result/tls_cipher_lens.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 10/10 (search/found)
+Patricia protocols: 5/5 (search/found)
Google 5 1165 5
diff --git a/tests/result/tls_esni_sni_both.pcap.out b/tests/result/tls_esni_sni_both.pcap.out
index b2bc163f2..0ed1dccc2 100644
--- a/tests/result/tls_esni_sni_both.pcap.out
+++ b/tests/result/tls_esni_sni_both.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/4 (search/found)
+Patricia protocols: 2/2 (search/found)
Cloudflare 38 15899 2
diff --git a/tests/result/tls_false_positives.pcapng.out b/tests/result/tls_false_positives.pcapng.out
index 03d95edde..7e9d8976e 100644
--- a/tests/result/tls_false_positives.pcapng.out
+++ b/tests/result/tls_false_positives.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Unknown 30 37313 1
diff --git a/tests/result/tls_invalid_reads.pcap.out b/tests/result/tls_invalid_reads.pcap.out
index cf4cfa36f..fa08b61d0 100644
--- a/tests/result/tls_invalid_reads.pcap.out
+++ b/tests/result/tls_invalid_reads.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 8/4 (search/found)
+Patricia protocols: 4/2 (search/found)
TLS 7 1827 1
Crashlytics 3 560 1
diff --git a/tests/result/tls_long_cert.pcap.out b/tests/result/tls_long_cert.pcap.out
index 474cbe557..44c40b85d 100644
--- a/tests/result/tls_long_cert.pcap.out
+++ b/tests/result/tls_long_cert.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
TLS 182 117601 1
diff --git a/tests/result/tls_missing_ch_frag.pcap.out b/tests/result/tls_missing_ch_frag.pcap.out
index a358b36af..7ca511a2d 100644
--- a/tests/result/tls_missing_ch_frag.pcap.out
+++ b/tests/result/tls_missing_ch_frag.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
TLS 14 10082 1
diff --git a/tests/result/tls_multiple_synack_different_seq.pcapng.out b/tests/result/tls_multiple_synack_different_seq.pcapng.out
index a1c3dea4e..9ceb9b621 100644
--- a/tests/result/tls_multiple_synack_different_seq.pcapng.out
+++ b/tests/result/tls_multiple_synack_different_seq.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
AmazonAWS 10 6532 1
diff --git a/tests/result/tls_port_80.pcapng.out b/tests/result/tls_port_80.pcapng.out
index acf0f8225..5833c24b7 100644
--- a/tests/result/tls_port_80.pcapng.out
+++ b/tests/result/tls_port_80.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 8/0 (search/found)
-Patricia protocols: 16/0 (search/found)
+Patricia protocols: 8/0 (search/found)
TLS 13 2439 1
diff --git a/tests/result/tls_torrent.pcapng.out b/tests/result/tls_torrent.pcapng.out
index ec08af7fe..e2af89725 100644
--- a/tests/result/tls_torrent.pcapng.out
+++ b/tests/result/tls_torrent.pcapng.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
BitTorrent 7 6308 1
diff --git a/tests/result/tls_verylong_certificate.pcap.out b/tests/result/tls_verylong_certificate.pcap.out
index 40fb8536c..bbbe20f9a 100644
--- a/tests/result/tls_verylong_certificate.pcap.out
+++ b/tests/result/tls_verylong_certificate.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 1/1 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
TLS 48 22229 1
diff --git a/tests/result/toca-boca.pcap.out b/tests/result/toca-boca.pcap.out
index 5db1f4d75..f672f7521 100644
--- a/tests/result/toca-boca.pcap.out
+++ b/tests/result/toca-boca.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 42/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 92/0 (search/found)
+Patricia protocols: 50/0 (search/found)
TocaBoca 77 15576 21
diff --git a/tests/result/tor.pcap.out b/tests/result/tor.pcap.out
index 60255cc81..7fee92f74 100644
--- a/tests/result/tor.pcap.out
+++ b/tests/result/tor.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 6/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 18/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 38/2 (search/found)
+Patricia protocols: 19/1 (search/found)
SMBv1 1 252 1
TLS 2028 1601908 4
diff --git a/tests/result/trickbot.pcap.out b/tests/result/trickbot.pcap.out
index 61ebaa93c..3c818b12a 100644
--- a/tests/result/trickbot.pcap.out
+++ b/tests/result/trickbot.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
HTTP 74 62002 1
diff --git a/tests/result/tunnelbear.pcap.out b/tests/result/tunnelbear.pcap.out
index a1001e99c..0e4f3dc89 100644
--- a/tests/result/tunnelbear.pcap.out
+++ b/tests/result/tunnelbear.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 28/28 (search/found)
Patricia risk mask: 42/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 46/38 (search/found)
+Patricia protocols: 23/19 (search/found)
TLS 34 13737 2
Google 5 306 1
diff --git a/tests/result/ubntac2.pcap.out b/tests/result/ubntac2.pcap.out
index 6763f8301..516886cc7 100644
--- a/tests/result/ubntac2.pcap.out
+++ b/tests/result/ubntac2.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 32/0 (search/found)
+Patricia protocols: 16/0 (search/found)
UBNTAC2 8 1736 8
diff --git a/tests/result/ultrasurf.pcap.out b/tests/result/ultrasurf.pcap.out
index 5c9d30954..3dc3723cb 100644
--- a/tests/result/ultrasurf.pcap.out
+++ b/tests/result/ultrasurf.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 14/0 (search/found)
+Patricia protocols: 8/0 (search/found)
TLS 5171 5127023 2
UltraSurf 2971 2991918 1
diff --git a/tests/result/upnp.pcap.out b/tests/result/upnp.pcap.out
index ee0b336b3..4889112e1 100644
--- a/tests/result/upnp.pcap.out
+++ b/tests/result/upnp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
WSD 14 9912 2
diff --git a/tests/result/viber.pcap.out b/tests/result/viber.pcap.out
index 2e8656c04..f85e6b89e 100644
--- a/tests/result/viber.pcap.out
+++ b/tests/result/viber.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 7/7 (search/found)
Patricia risk mask: 54/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 80/35 (search/found)
+Patricia protocols: 41/18 (search/found)
DNS 8 1267 4
MDNS 4 412 1
diff --git a/tests/result/vnc.pcap.out b/tests/result/vnc.pcap.out
index 47439842c..224a0290f 100644
--- a/tests/result/vnc.pcap.out
+++ b/tests/result/vnc.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
VNC 4551 329158 2
diff --git a/tests/result/vxlan.pcap.out b/tests/result/vxlan.pcap.out
index b39f82c3f..c2dccb5c5 100644
--- a/tests/result/vxlan.pcap.out
+++ b/tests/result/vxlan.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 18/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 36/0 (search/found)
+Patricia protocols: 18/0 (search/found)
VXLAN 127 85322 9
diff --git a/tests/result/wa_video.pcap.out b/tests/result/wa_video.pcap.out
index 0a572a30f..33712ab0a 100644
--- a/tests/result/wa_video.pcap.out
+++ b/tests/result/wa_video.pcap.out
@@ -19,7 +19,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 16/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 46/13 (search/found)
+Patricia protocols: 24/7 (search/found)
SSDP 8 1377 3
DHCP 2 684 1
diff --git a/tests/result/wa_voice.pcap.out b/tests/result/wa_voice.pcap.out
index 1a66d6585..a221210cd 100644
--- a/tests/result/wa_voice.pcap.out
+++ b/tests/result/wa_voice.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 36/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 90/21 (search/found)
+Patricia protocols: 46/11 (search/found)
Unknown 2 120 1
MDNS 10 1188 2
diff --git a/tests/result/waze.pcap.out b/tests/result/waze.pcap.out
index 663e9b6dc..ff93089bf 100644
--- a/tests/result/waze.pcap.out
+++ b/tests/result/waze.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 66/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 96/40 (search/found)
+Patricia protocols: 50/20 (search/found)
Unknown 10 786 1
HTTP 65 64777 8
diff --git a/tests/result/webex.pcap.out b/tests/result/webex.pcap.out
index 9d1cead9b..b6da2ead7 100644
--- a/tests/result/webex.pcap.out
+++ b/tests/result/webex.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 5/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 132/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 156/108 (search/found)
+Patricia protocols: 78/54 (search/found)
HTTP 22 3182 2
TLS 106 11841 8
diff --git a/tests/result/websocket.pcap.out b/tests/result/websocket.pcap.out
index 4414763a5..405677df3 100644
--- a/tests/result/websocket.pcap.out
+++ b/tests/result/websocket.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
WebSocket 5 441 1
diff --git a/tests/result/wechat.pcap.out b/tests/result/wechat.pcap.out
index 1347dace2..4a2dc7493 100644
--- a/tests/result/wechat.pcap.out
+++ b/tests/result/wechat.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 29/0 (search/found)
Automa common alpns: 4/4 (search/found)
Patricia risk mask: 168/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 340/42 (search/found)
+Patricia protocols: 171/21 (search/found)
DNS 13 1075 8
HTTP 70 4620 8
diff --git a/tests/result/weibo.pcap.out b/tests/result/weibo.pcap.out
index f95ccb417..c578a8691 100644
--- a/tests/result/weibo.pcap.out
+++ b/tests/result/weibo.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 2/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 88/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 163/18 (search/found)
+Patricia protocols: 83/10 (search/found)
DNS 6 630 3
HTTP 19 2275 5
diff --git a/tests/result/whatsapp.pcap.out b/tests/result/whatsapp.pcap.out
index 608a88251..0c038649e 100644
--- a/tests/result/whatsapp.pcap.out
+++ b/tests/result/whatsapp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 172/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 172/172 (search/found)
+Patricia protocols: 86/86 (search/found)
WhatsApp 679 96293 86
diff --git a/tests/result/whatsapp_login_call.pcap.out b/tests/result/whatsapp_login_call.pcap.out
index 81e175d8b..179d94746 100644
--- a/tests/result/whatsapp_login_call.pcap.out
+++ b/tests/result/whatsapp_login_call.pcap.out
@@ -21,7 +21,7 @@ Automa risk mask: 3/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 100/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 148/74 (search/found)
+Patricia protocols: 75/37 (search/found)
HTTP 11 726 3
MDNS 8 952 4
diff --git a/tests/result/whatsapp_login_chat.pcap.out b/tests/result/whatsapp_login_chat.pcap.out
index 3936fac49..fcd1f3d53 100644
--- a/tests/result/whatsapp_login_chat.pcap.out
+++ b/tests/result/whatsapp_login_chat.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 2/0 (search/found)
-Patricia protocols: 34/5 (search/found)
+Patricia protocols: 19/3 (search/found)
MDNS 2 202 2
DHCP 6 2052 1
diff --git a/tests/result/whatsapp_voice_and_message.pcap.out b/tests/result/whatsapp_voice_and_message.pcap.out
index a660a68ae..54c2b783d 100644
--- a/tests/result/whatsapp_voice_and_message.pcap.out
+++ b/tests/result/whatsapp_voice_and_message.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 26/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 46/16 (search/found)
+Patricia protocols: 28/8 (search/found)
WhatsAppCall 44 5916 8
WhatsApp 217 22139 5
diff --git a/tests/result/whatsappfiles.pcap.out b/tests/result/whatsappfiles.pcap.out
index 605b641ac..129ae245a 100644
--- a/tests/result/whatsappfiles.pcap.out
+++ b/tests/result/whatsappfiles.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 14/14 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/4 (search/found)
+Patricia protocols: 2/2 (search/found)
WhatsAppFiles 620 452233 2
diff --git a/tests/result/whois.pcapng.out b/tests/result/whois.pcapng.out
index 7783a8d03..acc5326ff 100644
--- a/tests/result/whois.pcapng.out
+++ b/tests/result/whois.pcapng.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 8/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 18/0 (search/found)
+Patricia protocols: 10/0 (search/found)
TLS 7 2046 1
Whois-DAS 16 4294 2
diff --git a/tests/result/windowsupdate_over_http.pcap.out b/tests/result/windowsupdate_over_http.pcap.out
index bd3491343..72e5ab680 100644
--- a/tests/result/windowsupdate_over_http.pcap.out
+++ b/tests/result/windowsupdate_over_http.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
WindowsUpdate 20 15975 1
diff --git a/tests/result/wireguard.pcap.out b/tests/result/wireguard.pcap.out
index d1b731626..db8603210 100644
--- a/tests/result/wireguard.pcap.out
+++ b/tests/result/wireguard.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/0 (search/found)
+Patricia protocols: 4/0 (search/found)
WireGuard 2399 734182 1
diff --git a/tests/result/wow.pcap.out b/tests/result/wow.pcap.out
index e59622961..cac022844 100644
--- a/tests/result/wow.pcap.out
+++ b/tests/result/wow.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 20/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 36/4 (search/found)
+Patricia protocols: 18/2 (search/found)
WorldOfWarcraft 95 10688 5
diff --git a/tests/result/xdmcp.pcap.out b/tests/result/xdmcp.pcap.out
index 069cef7d8..30341d921 100644
--- a/tests/result/xdmcp.pcap.out
+++ b/tests/result/xdmcp.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
XDMCP 6 598 1
diff --git a/tests/result/xiaomi.pcap.out b/tests/result/xiaomi.pcap.out
index 91eabb504..d735aa15e 100644
--- a/tests/result/xiaomi.pcap.out
+++ b/tests/result/xiaomi.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 14/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 36/6 (search/found)
+Patricia protocols: 24/4 (search/found)
Xiaomi 52 11467 7
diff --git a/tests/result/xss.pcap.out b/tests/result/xss.pcap.out
index 322de9a3b..00f0cec2b 100644
--- a/tests/result/xss.pcap.out
+++ b/tests/result/xss.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
HTTP 11 3209 2
diff --git a/tests/result/youtube_quic.pcap.out b/tests/result/youtube_quic.pcap.out
index 20479b7e5..ab0d1404a 100644
--- a/tests/result/youtube_quic.pcap.out
+++ b/tests/result/youtube_quic.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 3/3 (search/found)
YouTube 258 178495 1
Google 31 13144 2
diff --git a/tests/result/youtubeupload.pcap.out b/tests/result/youtubeupload.pcap.out
index 18f70cd17..45e3e5f3c 100644
--- a/tests/result/youtubeupload.pcap.out
+++ b/tests/result/youtubeupload.pcap.out
@@ -18,7 +18,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 2/2 (search/found)
Patricia risk mask: 6/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 6/6 (search/found)
+Patricia protocols: 3/3 (search/found)
YouTubeUpload 137 127038 3
diff --git a/tests/result/z3950.pcapng.out b/tests/result/z3950.pcapng.out
index 8cf600c66..1b4d878de 100644
--- a/tests/result/z3950.pcapng.out
+++ b/tests/result/z3950.pcapng.out
@@ -18,7 +18,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 12/0 (search/found)
+Patricia protocols: 8/0 (search/found)
Z3950 31 6308 2
diff --git a/tests/result/zabbix.pcap.out b/tests/result/zabbix.pcap.out
index 23e51ac4f..8ea343f84 100644
--- a/tests/result/zabbix.pcap.out
+++ b/tests/result/zabbix.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Zabbix 10 715 1
diff --git a/tests/result/zattoo.pcap.out b/tests/result/zattoo.pcap.out
index 5cc8c5695..ce68f46ed 100644
--- a/tests/result/zattoo.pcap.out
+++ b/tests/result/zattoo.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 4/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 8/0 (search/found)
+Patricia protocols: 4/0 (search/found)
Zattoo 32 13467 2
diff --git a/tests/result/zcash.pcap.out b/tests/result/zcash.pcap.out
index 249a2c9cc..ac76bd535 100644
--- a/tests/result/zcash.pcap.out
+++ b/tests/result/zcash.pcap.out
@@ -17,7 +17,7 @@ Automa risk mask: 0/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 2/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 4/0 (search/found)
+Patricia protocols: 2/0 (search/found)
Mining 145 20644 1
diff --git a/tests/result/zoom.pcap.out b/tests/result/zoom.pcap.out
index af7eccfe5..2e4611569 100644
--- a/tests/result/zoom.pcap.out
+++ b/tests/result/zoom.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 7/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 56/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 114/33 (search/found)
+Patricia protocols: 63/18 (search/found)
DNS 2 205 1
MDNS 1 87 1
diff --git a/tests/result/zoom2.pcap.out b/tests/result/zoom2.pcap.out
index 08a05c018..ea2294c2e 100644
--- a/tests/result/zoom2.pcap.out
+++ b/tests/result/zoom2.pcap.out
@@ -20,7 +20,7 @@ Automa risk mask: 1/0 (search/found)
Automa common alpns: 0/0 (search/found)
Patricia risk mask: 10/0 (search/found)
Patricia risk: 0/0 (search/found)
-Patricia protocols: 16/13 (search/found)
+Patricia protocols: 11/8 (search/found)
ICMP 27 1890 1
Zoom 11950 9004950 4