Guess

High-performance zero-copy network protocol detection with version awareness.

guess is designed for scenarios where you need to identify the application-layer protocol of a new connection as quickly as possible, typically by inspecting only the first 64 bytes of data. It supports version extraction and refined filtering for modern network stacks.

Features

• Zero-Copy Detection: Inspects data without any heap allocation or copying, maximizing performance.
• Version Awareness: Extracts protocol versions for HTTP (1.0, 1.1, 2.0), SSH, TLS, and Redis (RESP2/3).
• Customizable Priority: Define your own detection chain order to optimize for your specific traffic patterns.
• Refined Filtering: Configure detectors to only match specific protocol versions (e.g., "accept only HTTP/2.0").
• Transport Aware: Type-safe builders tailored for TCP or UDP protocol sets.
• No-std Support: Core detection logic works in no-std environments for embedded use.

Usage Examples

Check the examples directory for runnable code:

• Single Protocol: examples/single_protocol.rs - Simple check for a specific protocol.
• TCP Detection: examples/tcp_detect.rs - Using the TCP-specific detector for common services.
• Custom Chain: examples/custom_chain.rs - Defining a specific order for protocol identification.
• Tracing: examples/with_tracing.rs - Protocol detection with detailed tracing logs.

Installation

[dependencies]
guess = { version = "0.1", features = ["full"] }

Feature Flags

License

Released under the MIT License © 2026 Canmi