I want to judge media protocol

 

With Flash video (RTMP), you won't be able to use the HTTP events (since you can't use an HTTP profile on this traffic). I would collect and search the TCP payload for 'rtmp', then apply your rateclass.

 

 

There is a lot of garbage that comes across before you ever see the RTMP connection string, so you'll want to make sure you have a big enough collection buffer (maybe 300?).

 

 

-Mike