App Signature (Ozyman DNS Tunneling)
Use IDP, AppID is relatively ineffective for this purpose.
These are your primary signatures;
DNS:TUNNEL:DNS2TCP
DNS:TUNNEL:I2P-DNS-QUERY
DNS:TUNNEL:IODINE
DNS:TUNNEL:NULL-RECORD
DNS:TUNNEL:OZYMANDNS
DNS:TUNNEL:SHORT-TTL