Software identification and extraction for MySQL traffic.
policy/protocols/rdp/indicate_ssl.bro
policy/protocols/modbus/track-memmap.bro