docs(10-01): complete classification-layer constants and rules plan

- 21 new TrafficClass constants (IMAP, POP3, SMTP-sub, FTP, SMB, TFTP, RDP, Telnet, VNC, MySQL, PostgreSQL, Redis, MongoDB, mDNS, SSDP, SNMP, SIP, QUIC, LDAP, Kerberos, Syslog)
- 30 new port-matching rules in DefaultRules (42 total, catch-alls last)
- AllClasses() returns 32 classes (LDAP/Kerberos/Syslog deferred to Phase 11)
- PROTO-01 through PROTO-08 requirements marked complete
This commit is contained in:
2026-03-27 15:56:01 +01:00
parent cd8593eef5
commit 472849379d
4 changed files with 128 additions and 26 deletions
+16 -16
View File
@@ -13,14 +13,14 @@ Requirements for extended protocol coverage milestone. Each maps to roadmap phas
### Protocol Coverage
- [ ] **PROTO-01**: Add Mail family protocols: IMAP (143/993), POP3 (110/995), SMTP-submission (587)
- [ ] **PROTO-02**: Add File Transfer family protocols: FTP (20-21), SMB/CIFS (445), TFTP (69)
- [ ] **PROTO-03**: Add Remote Access family protocols: RDP (3389), Telnet (23), VNC (5900)
- [ ] **PROTO-04**: Add Database family protocols: MySQL (3306), PostgreSQL (5432), Redis (6379), MongoDB (27017)
- [ ] **PROTO-05**: Add Discovery family protocols: mDNS (5353), SSDP/UPnP (1900), SNMP (161-162)
- [ ] **PROTO-06**: Add VoIP family: SIP (5060/5061)
- [ ] **PROTO-07**: Add Web family extension: QUIC/HTTP3 (UDP 443)
- [ ] **PROTO-08**: Add Infrastructure family protocols: LDAP (389/636), Kerberos (88), Syslog (514)
- [x] **PROTO-01**: Add Mail family protocols: IMAP (143/993), POP3 (110/995), SMTP-submission (587)
- [x] **PROTO-02**: Add File Transfer family protocols: FTP (20-21), SMB/CIFS (445), TFTP (69)
- [x] **PROTO-03**: Add Remote Access family protocols: RDP (3389), Telnet (23), VNC (5900)
- [x] **PROTO-04**: Add Database family protocols: MySQL (3306), PostgreSQL (5432), Redis (6379), MongoDB (27017)
- [x] **PROTO-05**: Add Discovery family protocols: mDNS (5353), SSDP/UPnP (1900), SNMP (161-162)
- [x] **PROTO-06**: Add VoIP family: SIP (5060/5061)
- [x] **PROTO-07**: Add Web family extension: QUIC/HTTP3 (UDP 443)
- [x] **PROTO-08**: Add Infrastructure family protocols: LDAP (389/636), Kerberos (88), Syslog (514)
- [ ] **PROTO-09**: Existing 10 protocol classifications remain unchanged — no regression in rule matching behavior
### Frequency Design
@@ -74,14 +74,14 @@ Which phases cover which requirements. Updated during roadmap creation.
| FREQ-04 | Phase 9 | Complete |
| GRP-01 | Phase 9 | Pending |
| GRP-04 | Phase 9 | Pending |
| PROTO-01 | Phase 10 | Pending |
| PROTO-02 | Phase 10 | Pending |
| PROTO-03 | Phase 10 | Pending |
| PROTO-04 | Phase 10 | Pending |
| PROTO-05 | Phase 10 | Pending |
| PROTO-06 | Phase 10 | Pending |
| PROTO-07 | Phase 10 | Pending |
| PROTO-08 | Phase 10 | Pending |
| PROTO-01 | Phase 10 | Complete |
| PROTO-02 | Phase 10 | Complete |
| PROTO-03 | Phase 10 | Complete |
| PROTO-04 | Phase 10 | Complete |
| PROTO-05 | Phase 10 | Complete |
| PROTO-06 | Phase 10 | Complete |
| PROTO-07 | Phase 10 | Complete |
| PROTO-08 | Phase 10 | Complete |
| PROTO-09 | Phase 10 | Pending |
| GRP-02 | Phase 11 | Pending |
| GRP-03 | Phase 11 | Pending |