A Survey of Automatic Protocol Reverse Engineering Approaches, Methods, and Tools on the Inputs and Outputs View

Table 9

Classification of analyzed or reverse engineered protocols based on the 7-layer OSI Model.

OSI-layer	Analyzed/reverse engineered protocols	Related approach, method, or tool
7-application	HTTP, HTTPS, DNS, SIP, FTP, TFTP, IMAP, SSH, IRC, XMPP, SMTP, BitTorrent, MIME, SNMP, MSNP, POP3, DHCP, SMB, CIFS, Samba, XunLei, BitSpirit, QQLive, eMule, ICQ, SopCast, PPLIVE, PPTV, KAD, ISAKMP, SSDP, WeChat, Kugoo	[3–11, 13, 14, 16–22, 24–26, 28–30, 32–37, 39, 41, 42]
6-presentation	SMB, WMF, BMP, JPG, PNG, TIF, MIME, SSL	[8–11, 29, 39]
5-session	RPC, NetBIOS, NFS, SSL	[8, 14, 29, 30, 39, 40]
4-transport	TCP, UDP, SrvLoc	[17, 23, 31, 38]
3-network	ICMP, OSPF, RIP	[7, 12, 40]
2-data link	ARP, STP	[12, 15, 17, 23]
1-physical	none	[15]