nDPI Protocols List ################### This page provides the list of the protocols/applications supported by nDPI. For each protocol there is a brief description, some links to further, more detailed information and, optionally, some notes that might be useful when handling such a protocol (from the application/integrator point of view) Work in progress! .. _Proto_1: `NDPI_PROTOCOL_FTP_CONTROL` =========================== FTP Control protocol used for managing file transfers between client and server. References: `RFC959: `_ .. _Proto_2: `NDPI_PROTOCOL_MAIL_POP` ======================== POP (Post Office Protocol) is used by email clients to retrieve messages from a mail server. References: `RFC1939: `_ .. _Proto_3: `NDPI_PROTOCOL_MAIL_SMTP` ========================= SMTP (Simple Mail Transfer Protocol) is the standard protocol for sending email across the Internet. References: `RFC5321: `_ .. _Proto_4: `NDPI_PROTOCOL_MAIL_IMAP` ========================= IMAP (Internet Message Access Protocol) allows email clients to access and manipulate messages on a mail server. References: `RFC3501: `_ .. _Proto_5: `NDPI_PROTOCOL_DNS` ==================== DNS (Domain Name System) translates human-friendly domain names to IP addresses. References: `RFC1035: `_ .. _Proto_6: `NDPI_PROTOCOL_IPP` =================== IPP (Internet Printing Protocol) is used for managing print jobs and queues over a network. References: `RFC8010: `_ .. _Proto_7: `NDPI_PROTOCOL_HTTP` ==================== HTTP (Hypertext Transfer Protocol) is the foundation of data communication for the World Wide Web. References: `RFC2616: `_, `RFC7230: `_ .. _Proto_8: `NDPI_PROTOCOL_MDNS` ==================== mDNS (Multicast DNS) resolves hostnames to IP addresses within small networks without a local DNS server. References: `RFC6762: `_ .. _Proto_9: `NDPI_PROTOCOL_NTP` =================== NTP (Network Time Protocol) synchronizes clocks of computer systems over packet-switched datalinks. References: `RFC5905: `_ .. _Proto_10: `NDPI_PROTOCOL_NETBIOS` ======================= NetBIOS (Network Basic Input/Output System) provides services related to the session layer allowing applications on separate computers to communicate. References: `Microsoft NetBIOS documentation: `_ .. _Proto_11: `NDPI_PROTOCOL_NFS` =================== NFS (Network File System) allows a user on a client computer to access files over a network much like local storage. References: `RFC7530: `_ .. _Proto_12: `NDPI_PROTOCOL_SSDP` ==================== SSDP (Simple Service Discovery Protocol) is used for advertising and discovering network services and presence information. References: `RFC4861: `_ .. _Proto_13: `NDPI_PROTOCOL_BGP` =================== BGP (Border Gateway Protocol) manages how packets are routed across the internet through the exchange of routing information. References: `RFC4271: `_ .. _Proto_14: `NDPI_PROTOCOL_SNMP` ==================== SNMP (Simple Network Management Protocol) is used for collecting and organizing information about managed devices on IP networks. References: `RFC1157: `_ .. _Proto_15: `NDPI_PROTOCOL_XDMCP` ===================== XDMCP (X Display Manager Control Protocol) enables remote graphical logins to Unix/Linux systems. References: `RFC1076: `_ .. _Proto_16: `NDPI_PROTOCOL_SMBV1` ===================== SMBv1 (Server Message Block version 1) is a network file sharing protocol used for providing shared access to files and printers. References: `Protocol Specs: `_ .. _Proto_17: `NDPI_PROTOCOL_SYSLOG` ====================== Syslog is a standard protocol used for message logging in an IP network. References: `RFC5424: `_ .. _Proto_18: `NDPI_PROTOCOL_DHCP` ==================== DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses to devices in a network. References: `RFC2131: `_ .. _Proto_19: `NDPI_PROTOCOL_POSTGRES` ======================== PostgreSQL is an advanced open-source relational database management system. References: `PostgreSQL official site: `_ .. _Proto_20: `NDPI_PROTOCOL_MYSQL` ===================== MySQL is a popular open-source relational database management system. References: `MySQL official site: `_ .. _Proto_21: `NDPI_PROTOCOL_MS_OUTLOOK` ========================== Microsoft Outlook is an email client and personal information manager by Microsoft. References: `Outlook official site: `_ .. _Proto_22: `NDPI_PROTOCOL_VK` ================== VK (VKontakte) is a Russian online social media and social networking service. References: `VK official site: `_ .. _Proto_23: `NDPI_PROTOCOL_MAIL_POPS` ========================= POPS (POP Secure) is POP protocol used over SSL/TLS for secure email retrieval. References: `RFC2595: `_ .. _Proto_24: `NDPI_PROTOCOL_TAILSCALE` ========================= Tailscale is a zero-config VPN based on WireGuard, simplifying secure network connectivity. References: `Tailscale official site: `_ .. _Proto_25: `NDPI_PROTOCOL_YANDEX` ======================= Yandex is a Russian internet company providing multiple online services including search. References: `Yandex official site: `_ .. _Proto_26: `NDPI_PROTOCOL_NTOP` ==================== ntop is a network traffic probe that shows network usage. References: `ntop official site: `_ .. _Proto_27: `NDPI_PROTOCOL_COAP` ==================== CoAP (Constrained Application Protocol) is a specialized web transfer protocol for use with constrained devices. References: `RFC7252: `_ .. _Proto_28: `NDPI_PROTOCOL_VMWARE` ====================== VMware protocol used for management and data exchange in VMware virtualization platforms. References: `VMware official site: `_ .. _Proto_29: `NDPI_PROTOCOL_MAIL_SMTPS` ========================== SMTPS (SMTP Secure) is SMTP protocol for sending emails over SSL/TLS encrypted connections. References: `RFC2487: `_ .. _Proto_30: `NDPI_PROTOCOL_DTLS` ==================== DTLS (Datagram Transport Layer Security) provides communications privacy for datagram protocols. References: `RFC6347: `_ .. _Proto_31: `NDPI_PROTOCOL_UBNTAC2` ======================= AirControl network management application by Ubiquiti Networks. References: `Ubiquiti AirControl community post: `_ .. _Proto_32: `NDPI_PROTOCOL_BFCP` ==================== BFCP (Binary Floor Control Protocol) is used for controlling and coordinating real-time data sharing and collaboration during video conferencing sessions. References: `RFC8855: `_ .. _Proto_33: `NDPI_PROTOCOL_YANDEX_MAIL` =========================== Yandex.Mail is a free email service provided by the Russian internet company Yandex. References: `Yandex.Mail official site: `_ .. _Proto_34: `NDPI_PROTOCOL_YANDEX_MUSIC` ============================ Yandex.Music is a music streaming service offering a large library of tracks and personalized recommendations. References: `Yandex.Music official site: `_ .. _Proto_35: `NDPI_PROTOCOL_GNUTELLA` ======================== Gnutella is a decentralized peer-to-peer network protocol used for file sharing. References: `Gnutella Wikipedia article: `_ .. _Proto_36: `NDPI_PROTOCOL_EDONKEY` ======================= eDonkey is a peer-to-peer file sharing network popular in the early 2000s, supporting large file transfers. References: `eDonkey Wikipedia article: `_ .. _Proto_37: `NDPI_PROTOCOL_BITTORRENT` ========================== BitTorrent is a widely used peer-to-peer protocol for distributing large amounts of data efficiently. References: `BitTorrent Wikipedia article: `_ .. _Proto_38: `NDPI_PROTOCOL_MSTEAMS_CALL` ============================ Audio/video calls made by Microsoft applications, mainly MS Teams and Skype. References: `Microsoft Teams official site: `_ .. _Proto_39: `NDPI_PROTOCOL_SIGNAL` ====================== Signal is a secure messaging protocol known for end-to-end encryption of texts and calls. References: `Signal: `_ .. _Proto_40: `NDPI_PROTOCOL_MEMCACHED` ========================= Memcached is a distributed memory caching system used to speed up dynamic web applications. References: `Memcached official site: `_ .. _Proto_41: `NDPI_PROTOCOL_SMBV23` ====================== SMB version 2 and 3 are protocols for shared access to files, printers, and serial ports over a network. References: `Server Message Block Wikipedia article: `_ .. _Proto_42: `NDPI_PROTOCOL_MINING` ====================== Mining protocols enable communication with blockchain networks like Ethereum, ZCash, and Monero during cryptocurrency mining. References: `Cryptocurrency Wikipedia article: `_ .. _Proto_43: `NDPI_PROTOCOL_NEST_LOG_SINK` ============================= Nest Log Sink protocol used by Nest Protect and other Nest devices (particularly smoke detectors) to send logging data. References: `Nest Protect overview: `_ .. _Proto_44: `NDPI_PROTOCOL_MODBUS` ======================= Modbus is a serial communication protocol for connecting industrial electronic devices. References: `Modbus Wikipedia article: `_ .. _Proto_45: `NDPI_PROTOCOL_WHATSAPP_CALL` ============================= WhatsApp Call protocol handles both audio and video calls within the WhatsApp messaging app. References: `WhatsApp official site: `_ .. _Proto_46: `NDPI_PROTOCOL_DATASAVER` ========================= Data Saver (Lite Mode) is a Google Chrome feature designed to reduce mobile data usage by compressing web traffic. References: `Google Chromium Blog: `_ .. _Proto_47: `NDPI_PROTOCOL_XBOX` ==================== Xbox protocol covers network traffic associated with Microsoft’s Xbox gaming consoles. References: `Xbox official site: `_ .. _Proto_48: `NDPI_PROTOCOL_QQ` ================== QQ is an instant messaging platform developed by Tencent popular in China. References: `QQ official site: `_ .. _Proto_49: `NDPI_PROTOCOL_TIKTOK` ====================== TikTok is a video-sharing social networking service for short-format videos. References: `TikTok official site: `_ .. _Proto_50: `NDPI_PROTOCOL_RTSP` ==================== RTSP (Real Time Streaming Protocol) controls streaming media servers. References: `RFC2326: `_ .. _Proto_51: `NDPI_PROTOCOL_MAIL_IMAPS` ========================== IMAPS (IMAP over SSL) is the secure version of the Internet Message Access Protocol for email retrieval. References: `RFC3501: `_ and `RFC8314 (IMAPS): `_ .. _Proto_52: `NDPI_PROTOCOL_ICECAST` ======================= Icecast is a streaming media project that supports audio/video streaming and broadcast. References: `Icecast official site: `_ .. _Proto_53: `NDPI_PROTOCOL_CPHA` ==================== Check Point High Availability (CPHA) Protocol provides firewall redundancy and failover. References: `Check Point HA: `_ .. _Proto_54: `NDPI_PROTOCOL_IQIYI` ===================== iQIYI is a Chinese online video platform with original and licensed movies, dramas, variety shows, and anime. References: `iQIYI official site: `_ .. _Proto_55: `NDPI_PROTOCOL_ZATTOO` ====================== Zattoo is a TV streaming service providing live and on-demand television content over the Internet. References: `Zattoo official site `_ .. _Proto_56: `NDPI_PROTOCOL_YANDEX_MARKET` ============================= Yandex.Market is a Russian e-commerce platform for price comparison and online shopping operated by Yandex. References: `Yandex.Market official site `_ .. _Proto_57: `NDPI_PROTOCOL_YANDEX_DISK` =========================== Yandex.Disk is a cloud storage service provided by Yandex, offering file synchronization and sharing. References: `Yandex.Disk official site `_ .. _Proto_58: `NDPI_PROTOCOL_DISCORD` ======================= Discord is a VoIP, instant messaging and digital distribution platform designed for creating communities. Popular among gamers but also used for business and education. References: `Discord official site `_, `Protocol info `_ .. _Proto_59: `NDPI_PROTOCOL_ADOBE_CONNECT` ============================= Adobe Connect is a web conferencing platform for online meetings, webinars, and virtual classrooms. References: `Adobe Connect official site: `_ .. _Proto_60: `NDPI_PROTOCOL_MONGODB` ======================= MongoDB is a popular NoSQL database system designed for scalability and flexibility. References: `MongoDB official site: `_ .. _Proto_61: `NDPI_PROTOCOL_PLURALSIGHT` =========================== Pluralsight is an online education platform offering tech skill development courses. References: `Pluralsight official site: `_ .. _Proto_62: `NDPI_PROTOCOL_YANDEX_CLOUD` ============================ Yandex.Cloud is a public cloud platform providing computing and storage services. References: `Yandex.Cloud official site: `_ .. _Proto_63: `NDPI_PROTOCOL_OCSP` ==================== OCSP (Online Certificate Status Protocol) checks the revocation status of digital certificates in real-time. References: `RFC6960: `_ .. _Proto_64: `NDPI_PROTOCOL_VXLAN` ===================== VXLAN (Virtual Extensible LAN) extends layer 2 networks over layer 3 infrastructure. References: `RFC7348: `_ .. _Proto_65: `NDPI_PROTOCOL_IRC` =================== IRC (Internet Relay Chat) is a text-based chat system for instant messaging. References: `IRC Wikipedia article: `_ and `IRC statistics: `_ .. _Proto_66: `NDPI_PROTOCOL_MERAKI_CLOUD` ============================ Meraki Cloud is a cloud-based network management platform by Cisco Meraki. References: `Meraki official site: `_ .. _Proto_67: `NDPI_PROTOCOL_JABBER` ====================== Jabber is an open instant messaging protocol based on XMPP for real-time communication. References: `XMPP standards: `_ .. _Proto_68: `NDPI_PROTOCOL_NATS` ==================== NATS is a high-performance messaging system for cloud-native applications and IoT. References: `NATS official site: `_ .. _Proto_69: `NDPI_PROTOCOL_AMONG_US` ======================== Among Us is a multiplayer social deduction game developed by InnerSloth. References: `InnerSloth official site: `_ .. _Proto_70: `NDPI_PROTOCOL_YAHOO` ===================== Yahoo is a web services provider known for its email, news, and search engine products. References: `Yahoo official site: `_ .. _Proto_71: `NDPI_PROTOCOL_DISNEYPLUS` ========================== Disney+ is a streaming service offering movies and TV series from Disney franchises. References: `Disney+ official site: `_ .. _Proto_72: `NDPI_PROTOCOL_HART_IP` ======================= Highway Addressable Remote Transducer over IP. References: `HART-IP Protocol Specs: `_, `HART Communication Foundation `_ .. _Proto_73: `NDPI_PROTOCOL_IP_VRRP` ======================= Virtual Router Redundancy Protocol (VRRP) provides automatic assignment of available IP routers to hosts. References: `RFC5798: `_ .. _Proto_74: `NDPI_PROTOCOL_STEAM` ===================== Steam is a digital distribution platform developed by Valve Corporation for games. References: `Steam official site: `_ .. _Proto_75: `NDPI_PROTOCOL_MELSEC` ====================== MELSEC is a proprietary industrial protocol used by Mitsubishi Electric PLCs for communication and control. References: `MELSEC Communication Protocol Manual: `_ .. _Proto_76: `NDPI_PROTOCOL_WORLDOFWARCRAFT` =============================== World of Warcraft (WoW) is a massively multiplayer online role-playing game (MMORPG). References: `WoW official site: `_ .. _Proto_77: `NDPI_PROTOCOL_TELNET` ======================= Telnet is a network protocol for interactive text communication. References: `RFC854: `_ .. _Proto_78: `NDPI_PROTOCOL_STUN` ==================== STUN (Session Traversal Utilities for NAT) helps devices discover public IP addresses. References: `RFC5389: `_ .. _Proto_79: `NDPI_PROTOCOL_IPSEC` ====================== IPsec authenticates and encrypts IP packets for secure communication over IP networks. References: `RFC4301: `_ .. _Proto_80: `NDPI_PROTOCOL_IP_GRE` ====================== GRE (Generic Routing Encapsulation) tunnels packets to encapsulate various network protocols. References: `RFC2784: `_ .. _Proto_81: `NDPI_PROTOCOL_IP_ICMP` ======================= ICMP (Internet Control Message Protocol) sends error messages and operational information. References: `RFC792: `_ .. _Proto_82: `NDPI_PROTOCOL_IP_IGMP` ======================= IGMP (Internet Group Management Protocol) manages membership of IP multicast groups. References: `RFC2236: `_ .. _Proto_83: `NDPI_PROTOCOL_IP_EGP` ====================== EGP (Exterior Gateway Protocol) is an obsolete protocol for exchanging routing info. References: `RFC904: `_ .. _Proto_84: `NDPI_PROTOCOL_IP_SCTP` ======================= SCTP (Stream Control Transmission Protocol) is a reliable transport layer protocol. References: `RFC4960: `_ .. _Proto_85: `NDPI_PROTOCOL_IP_OSPF` ======================= OSPF (Open Shortest Path First) is a routing protocol for IP networks. References: `RFC2328: `_ .. _Proto_86: `NDPI_PROTOCOL_IP_IP_IN_IP` =========================== IP-in-IP encapsulation allows an IP packet to be wrapped inside another IP packet. References: `RFC2003: `_ .. _Proto_87: `NDPI_PROTOCOL_RTP` =================== RTP (Real-time Transport Protocol) provides end-to-end delivery services for real-time data. References: `RFC3550: `_ .. _Proto_88: `NDPI_PROTOCOL_RDP` =================== RDP (Remote Desktop Protocol) is Microsoft's protocol for remote graphical desktop access. References: `Remote Desktop Protocol Wikipedia article: `_ .. _Proto_89: `NDPI_PROTOCOL_VNC` =================== VNC (Virtual Network Computing) allows remote control of other computers' desktops. References: `VNC Wikipedia article: `_ .. _Proto_90: `NDPI_PROTOCOL_TUMBLR` ====================== Tumblr is a microblogging and social networking platform. References: `Tumblr official site: `_ .. _Proto_91: `NDPI_PROTOCOL_TLS` =================== TLS (Transport Layer Security) provides encryption for network communications. References: `RFC8446: `_ .. _Proto_92: `NDPI_PROTOCOL_SSH` =================== SSH (Secure Shell) is a protocol for secure remote login and other network services. References: `RFC4251: `_ .. _Proto_93: `NDPI_PROTOCOL_USENET` ====================== Usenet is a distributed discussion system for newsgroups. References: `Usenet Wikipedia article: `_ .. _Proto_94: `NDPI_PROTOCOL_MGCP` ==================== MGCP (Media Gateway Control Protocol) controls media gateways on IP networks. References: `RFC3435: `_ .. _Proto_95: `NDPI_PROTOCOL_IAX` =================== IAX (Inter-Asterisk eXchange protocol) is used for VoIP sessions, originally for Asterisk PBX. References: `RFC5456: `_ .. _Proto_96: `NDPI_PROTOCOL_TFTP` ====================== TFTP (Trivial File Transfer Protocol) is a simple file transfer protocol. References: `RFC1350: `_, `RFC2347: `_, `RFC2349: `_ .. _Proto_97: `NDPI_PROTOCOL_AFP` ==================== AFP (Apple Filing Protocol) is a network protocol for file services on macOS. References: `AFP Wikipedia article: `_ .. _Proto_98: `NDPI_PROTOCOL_YANDEX_METRIKA` ================================ Yandex Metrika is a web analytics service by Yandex to track website traffic. References: `Yandex Metrika official site: `_ .. _Proto_99: `NDPI_PROTOCOL_YANDEX_DIRECT` ============================== Yandex.Direct is an online advertising platform for contextual ads. References: `Yandex.Direct official site: `_ .. _Proto_100: `NDPI_PROTOCOL_SIP` ==================== SIP (Session Initiation Protocol) is used for real-time communication session control. References: `RFC3261: `_ .. _Proto_101: `NDPI_PROTOCOL_TRUPHONE` ========================= Truphone is a global mobile network provider using eSIM and VoIP. References: `Truphone official site: `_ .. _Proto_102: `NDPI_PROTOCOL_IP_ICMPV6` ========================== ICMPv6 is integral to IPv6 for diagnostics and error reporting. References: `RFC4443: `_ .. _Proto_103: `NDPI_PROTOCOL_DHCPV6` ======================= DHCPv6 dynamically assigns IPv6 addresses and settings. References: `RFC8415: `_ .. _Proto_104: `NDPI_PROTOCOL_ARMAGETRON` =========================== Armagetron Advanced is a 3D multiplayer game inspired by Tron light cycles. References: `Armagetron official site: `_ .. _Proto_105: `NDPI_PROTOCOL_CROSSFIRE` ========================= Crossfire is an online FPS game with team combat and various modes. References: `Crossfire official site: `_ .. _Proto_106: `NDPI_PROTOCOL_DOFUS` ======================= Dofus is a tactical MMORPG with turn-based combat. References: `Dofus official site: `_ .. _Proto_107: `NDPI_PROTOCOL_BLACKNUT` ======================== Blacknut is a cloud gaming platform offering access to a catalog of games streamed over the internet. References: `Blacknut official site `_ .. _Proto_108: `NDPI_PROTOCOL_BOOSTEROID` ========================== Boosteroid is a cloud gaming service that enables users to play PC games on various devices via game streaming technology. References: `Boosteroid official site `_ .. _Proto_109: `NDPI_PROTOCOL_GUILDWARS2` ========================== Guild Wars is an online RPG known for dynamic events and PvP. References: `Guild Wars 2 official site: `_ .. _Proto_110: `NDPI_PROTOCOL_AMAZON_ALEXA` ============================ Amazon Alexa voice service protocol for smart devices. References: `Amazon Alexa developer site: `_ .. _Proto_111: `NDPI_PROTOCOL_KERBEROS` ========================= Kerberos is a protocol for secure network authentication. References: `RFC4120: `_ .. _Proto_112: `NDPI_PROTOCOL_LDAP` ===================== LDAP is a protocol for accessing directory services. References: `RFC4510: `_ .. _Proto_113: `NDPI_PROTOCOL_NEXON` ======================= Nexon is a South Korean video game developer and publisher. References: `Nexon official site: `_ .. _Proto_114: `NDPI_PROTOCOL_MSSQL_TDS` ========================= TDS (Tabular Data Stream) is the protocol used by Microsoft SQL Server for client-server communication. It handles database queries, responses, and stored procedure calls. References: `TDS Protocol Documentation `_, `Wikipedia `_ .. _Proto_115: `NDPI_PROTOCOL_PPTP` ==================== PPTP (Point-to-Point Tunneling Protocol) is a VPN protocol that creates secure tunnels for remote access. Note: PPTP is considered obsolete due to security vulnerabilities. References: `RFC 2637 `_ .. _Proto_116: `NDPI_PROTOCOL_IP_AH` ===================== An Authentication Header (AH) is a security protocol in IPSec that ensures the integrity of packet headers and data, provides user authentication, and offers optional replay protection and access protection. It does not encrypt any part of the packets. References: `RFC4302: `_ .. _Proto_117: `NDPI_PROTOCOL_IP_ESP` ====================== Encapsulating Security Payload (ESP) is a crucial protocol within the IPsec framework, designed to protect the confidentiality, integrity, and authentication of IP packets. It achieves this by encrypting the payload (the data being transmitted) and potentially authenticating the sender and validating the data's integrityencrypt any part of the packets. References: `RFC4303: `_ .. _Proto_118: `NDPI_PROTOCOL_SLACK` ===================== Slack is a business communication platform offering chat, file sharing, and integrations. Widely used for team collaboration and project management. References: `Slack official site `_, `Slack API `_ .. _Proto_119: `NDPI_PROTOCOL_FACEBOOK` ======================== Facebook (Meta) is a social networking service and platform. Traffic includes web browsing, mobile app usage, and various Meta services. References: `Facebook official site `_, `Meta for Developers `_ .. _Proto_120: `NDPI_PROTOCOL_TWITTER` ======================= Twitter (now X) is a microblogging and social networking service. Traffic includes tweets, direct messages, media uploads, and API access. References: `X (Twitter) official site `_, `X API Documentation `_ .. _Proto_121: `NDPI_PROTOCOL_DROPBOX` ======================= Dropbox is a cloud storage and file synchronization service. Provides file hosting, sharing, and collaboration features. References: `Dropbox official site `_, `Dropbox API `_ .. _Proto_122: `NDPI_PROTOCOL_GMAIL` ===================== Gmail is Google's email service. Traffic includes webmail access, IMAP/SMTP for email clients, and mobile app communication. References: `Gmail official site `_, `Gmail API `_ .. _Proto_123: `NDPI_PROTOCOL_GOOGLE_MAPS` =========================== Google Maps is a web mapping platform offering satellite imagery, street maps, real-time traffic, and route planning. References: `Google Maps `_, `Maps Platform `_ .. _Proto_124: `NDPI_PROTOCOL_YOUTUBE` ======================= YouTube is a video sharing and streaming platform owned by Google. Handles video playback, uploads, live streams, and user interactions. References: `YouTube official site `_, `YouTube API `_ .. _Proto_125: `NDPI_PROTOCOL_MOZILLA` ======================== Mozilla-related traffic, especially Firefox browser. References: `Mozilla official site: `_ .. _Proto_126: `NDPI_PROTOCOL_GOOGLE` ====================== Google's internet services and products traffic. References: `Google official site: `_ .. _Proto_127: `NDPI_PROTOCOL_MS_RPCH` ======================= MS-RPCH (Microsoft RPC over HTTP) is a protocol that tunnels RPC traffic over HTTP/HTTPS, commonly used by Microsoft Exchange and Outlook for email access through firewalls. References: `Microsoft RPCH specs: `_ .. _Proto_128: `NDPI_PROTOCOL_NETFLOW` ======================= NetFlow is a network protocol developed by Cisco for collecting IP traffic information and monitoring network traffic flow. References: `RFC3954: `_ .. _Proto_129: `NDPI_PROTOCOL_SFLOW` ===================== sFlow is a packet sampling technology for monitoring traffic in data networks in real time. References: `sFlow Wikipedia article: `_ .. _Proto_130: `NDPI_PROTOCOL_HTTP_CONNECT` ============================ HTTP CONNECT method is used to establish a tunnel to the server, typically for SSL traffic through proxies. References: `RFC7231: `_ .. _Proto_131: `NDPI_PROTOCOL_HTTP_PROXY` ========================== HTTP PROXY traffic represents connections through HTTP proxy servers, used for web content caching, filtering, and anonymization. References: `RFC 7230 (HTTP Proxy) `_ .. _Proto_132: `NDPI_PROTOCOL_CITRIX` ====================== Citrix provides remote access and virtualization solutions for secure delivery of applications and desktops. References: `Citrix official site: `_ .. _Proto_133: `NDPI_PROTOCOL_NETFLIX` ======================= Netflix is a leading streaming entertainment service delivering movies, TV shows, and original content. References: `Netflix official site: `_ .. _Proto_134: `NDPI_PROTOCOL_LASTFM` ======================= Last.fm is a music recommendation and streaming service that provides personalized music charts and discovery. References: `Last.fm official site: `_ .. _Proto_135: `NDPI_PROTOCOL_WAZE` ==================== Waze is a GPS navigation app providing real-time traffic and road info. References: `Waze official site: `_ .. _Proto_136: `NDPI_PROTOCOL_YOUTUBE_UPLOAD` ============================== YouTube upload traffic specifically identifies video and content uploads to YouTube platform, distinct from normal viewing traffic. References: `YouTube Upload Guide `_ .. _Proto_137: `NDPI_PROTOCOL_HULU` ==================== Hulu is a streaming platform offering live and on-demand TV and movies. References: `Hulu official site: `_ .. _Proto_138: `NDPI_PROTOCOL_CHECKMK` ======================= Checkmk is an IT monitoring system for servers, apps, networks, and cloud. References: `Checkmk official site: `_ .. _Proto_139: `NDPI_PROTOCOL_AJP` =================== Apache JServ Protocol (AJP) proxies web server requests to application servers. References: `AJP Protocol Specs: `_ .. _Proto_140: `NDPI_PROTOCOL_APPLE` ===================== Apple protocol includes various services related to Apple devices and ecosystem. References: `Apple official site: `_ .. _Proto_141: `NDPI_PROTOCOL_WEBEX` ====================== Webex is a video conferencing and online meeting application by Cisco. References: `Webex official site: `_ .. _Proto_142: `NDPI_PROTOCOL_WHATSAPP` ========================= WhatsApp is a messaging app by Meta, offering encrypted messaging and calls. References: `WhatsApp official site: `_ .. _Proto_143: `NDPI_PROTOCOL_APPLE_ICLOUD` ============================= iCloud is Apple’s cloud storage and computing service. References: `iCloud official site: `_ .. _Proto_144: `NDPI_PROTOCOL_VIBER` ====================== Viber is a cross-platform messaging and VoIP app. References: `Viber official site: `_ .. _Proto_145: `NDPI_PROTOCOL_APPLE_ITUNES` ============================= Apple iTunes is a media player and content store. References: `iTunes official site: `_ .. _Proto_146: `NDPI_PROTOCOL_RADIUS` ======================= RADIUS protocol provides centralized Authentication, Authorization, and Accounting. References: `RFC2865: `_ .. _Proto_147: `NDPI_PROTOCOL_WINDOWS_UPDATE` ============================== Windows Update service traffic used by Microsoft Windows to deliver OS updates, security patches, and driver updates. References: `Windows Update FAQ `_ .. _Proto_148: `NDPI_PROTOCOL_TEAMVIEWER` ============================ TeamViewer is remote access software for desktop sharing and file transfer. References: `TeamViewer official site: `_ .. _Proto_149: `NDPI_PROTOCOL_EGD` ========================= Ethernet Global Data (EGD) protocol for real-time data exchange in industrial automation. References: `EGD Wikipedia article: `_ Notes: - This dissector only works for data packets, not configuration commands. - IPv6 is not supported. .. _Proto_150: `NDPI_PROTOCOL_HCL_NOTES` =========================== HCL Notes (formerly Lotus Notes) is a collaborative client-server application. References: `HCL Notes official site: `_ .. _Proto_151: `NDPI_PROTOCOL_SAP` ===================== Session Announcement Protocol (SAP) announces multicast session info. References: `RFC2974: `_ .. _Proto_152: `NDPI_PROTOCOL_GTP` ===================== GPRS Tunneling Protocol (GTP) carries mobile data within GSM and UMTS. References: `GTP Wikipedia article: `_ .. _Proto_153: `NDPI_PROTOCOL_WSD` ===================== Web Services Dynamic Discovery (WS-Discovery) locates services on local networks. References: `WS-Discovery Wikipedia article: `_ .. _Proto_154: `NDPI_PROTOCOL_LLMNR` ====================== Link-Local Multicast Name Resolution (LLMNR) resolves names on local links. References: `RFC4795: `_ .. _Proto_155: `NDPI_PROTOCOL_TOCA_BOCA` ========================== Toca Boca produces creative mobile games for children. References: `Toca Boca official site: `_ .. _Proto_156: `NDPI_PROTOCOL_SPOTIFY` ======================== Spotify is a music streaming service offering millions of tracks and podcasts. References: `Spotify official site: `_ .. _Proto_157: `NDPI_PROTOCOL_FACEBOOK_MESSENGER` =================================== Facebook Messenger is an instant messaging service by Meta. References: `Messenger official site: `_ .. _Proto_158: `NDPI_PROTOCOL_H323` ===================== H.323 is a standard for real-time voice, video, and data communications. References: `ITU-T H.323: `_ .. _Proto_159: `NDPI_PROTOCOL_OPENVPN` ======================== OpenVPN is an open-source VPN protocol for secure connections. References: `OpenVPN official site: `_ .. _Proto_160: `NDPI_PROTOCOL_NOE` ==================== NOE is a VoIP protocol for Alcatel-Lucent compatible telephone systems. References: `Teldat Manual: `_ .. _Proto_161: `NDPI_PROTOCOL_CISCOVPN` ========================= Cisco VPN protocols secure virtual private network connections. References: `Cisco VPN site: `_ .. _Proto_162: `NDPI_PROTOCOL_TEAMSPEAK` ========================== TeamSpeak is a voice-over-IP app for gamer communication. References: `TeamSpeak official site: `_ .. _Proto_163: `NDPI_PROTOCOL_TOR` ==================== Tor enables anonymous communication via onion routing. References: `Tor Project site: `_ .. _Proto_164: `NDPI_PROTOCOL_SKINNY` ======================= Skinny Client Control Protocol (SCCP) is a Cisco VoIP signaling protocol. References: `SCCP Wikipedia article: `_ .. _Proto_165: `NDPI_PROTOCOL_RTCP` ===================== RTCP (Real-time Transport Control Protocol) works alongside RTP. References: `RFC3550 Section 6: `_ .. _Proto_166: `NDPI_PROTOCOL_RSYNC` ====================== Rsync is a fast incremental file transfer utility. References: `Rsync homepage: `_ .. _Proto_167: `NDPI_PROTOCOL_ORACLE` ======================= Oracle database communication protocol. References: `Oracle Net Services docs: `_, `Oracle Documentation `_ .. _Proto_168: `NDPI_PROTOCOL_CORBA` ====================== CORBA enables software components to communicate over a network. References: `OMG CORBA: `_ .. _Proto_169: `NDPI_PROTOCOL_CANONICAL` =========================== Canonical Ltd., developer of Ubuntu Linux and related services. References: `Canonical official site: `_ .. _Proto_170: `NDPI_PROTOCOL_WHOIS_DAS` =========================== WHOIS DAS queries databases storing Internet resource assignments. References: `WHOIS Wikipedia article: `_ .. _Proto_171: `NDPI_PROTOCOL_SD_RTN` ======================== Agora SD-RTN is a global, private, secure real-time network for low-latency streaming. References: `Agora platform info: `_ .. _Proto_172: `NDPI_PROTOCOL_SOCKS` ====================== SOCKS routes network packets through proxy servers. References: `RFC1928: `_ .. _Proto_173: `NDPI_PROTOCOL_NINTENDO` ========================= Nintendo network communication protocols for consoles and services. References: `Nintendo official site: `_ .. _Proto_174: `NDPI_PROTOCOL_RTMP` ===================== RTMP (Real-Time Messaging Protocol) streams audio, video, and data. References: `RTMP Wikipedia article: `_ .. _Proto_175: `NDPI_PROTOCOL_FTP_DATA` ========================= FTP Data Protocol transfers data separately from control connections. References: `FTP Wikipedia article: `_ .. _Proto_176: `NDPI_PROTOCOL_WIKIPEDIA` ========================== Wikipedia is a free, collaborative, multilingual online encyclopedia. References: `Wikipedia official site: `_ .. _Proto_177: `NDPI_PROTOCOL_ZMQ` ==================== ZeroMQ (ZMQ) is a high-performance asynchronous messaging library. References: `ZeroMQ official site: `_ .. _Proto_178: `NDPI_PROTOCOL_AMAZON` ====================== Amazon generic network traffic including retail, AWS, and content delivery. References: `Amazon official site: `_ .. _Proto_179: `NDPI_PROTOCOL_EBAY` ===================== eBay is an online marketplace for quality goods and services. References: `eBay official site: `_ .. _Proto_180: `NDPI_PROTOCOL_CNN` ==================== CNN is an American news television channel providing 24-hour news coverage. References: `CNN official site: `_ .. _Proto_181: `NDPI_PROTOCOL_MEGACO` ====================== Megaco (H.248) protocol for controlling media gateways in VoIP. References: `ITU-T H.248: `_ .. _Proto_182: `NDPI_PROTOCOL_RESP` ======================= RESP (REdis Serialization Protocol) is the wire protocol used by Redis clients to communicate with Redis servers. It's a simple, text-based protocol designed for high performance. References: `Redis Protocol Specs: `_ .. _Proto_183: `NDPI_PROTOCOL_PINTEREST` ========================== Pinterest is a social media platform for sharing images and ideas. References: `Pinterest official site: `_ .. _Proto_184: `NDPI_PROTOCOL_OSPF` ======================= OSPF (Open Shortest Path First) is a routing protocol for IP networks. References: `RFC2328: `_ .. _Proto_185: `NDPI_PROTOCOL_TELEGRAM` ========================= Telegram is a cloud-based instant messaging app focusing on speed and security. References: `Telegram official site: `_ .. _Proto_186: `NDPI_PROTOCOL_COD_MOBILE` =========================== Call of Duty: Mobile is a popular shooter game for iOS and Android. References: `COD Mobile official site: `_ .. _Proto_187: `NDPI_PROTOCOL_PANDORA` ======================== Pandora is an Internet radio and streaming music service. References: `Pandora official site: `_ .. _Proto_188: `NDPI_PROTOCOL_QUIC` ===================== QUIC is a transport layer protocol by Google improving web app performance. References: `RFC9000: `_ .. _Proto_189: `NDPI_PROTOCOL_ZOOM` ===================== Zoom is a popular video conferencing platform. References: `Zoom official site: `_ .. _Proto_190: `NDPI_PROTOCOL_EAQ` ==================== EAQ is a Brazilian organization measuring broadband quality. References: `EAQ official site: `_ .. _Proto_191: `NDPI_PROTOCOL_OOKLA` ====================== Ookla operates Speedtest.net for network performance testing. References: `Speedtest.net: `_ .. _Proto_192: `NDPI_PROTOCOL_AMQP` ===================== AMQP is an open standard application layer protocol for messaging middleware. References: `AMQP official site: `_ .. _Proto_193: `NDPI_PROTOCOL_KAKAOTALK` ========================== KakaoTalk is a South Korean mobile messaging app (text only). References: `Kakao official site: `_ .. _Proto_194: `NDPI_PROTOCOL_KAKAOTALK_VOICE` ================================ KakaoTalk Voice adds voice call functionality within KakaoTalk. References: `Kakao official site: `_ .. _Proto_195: `NDPI_PROTOCOL_TWITCH` ======================= Twitch is a live streaming platform for gaming and esports. References: `Twitch official site: `_ .. _Proto_196: `NDPI_PROTOCOL_DOH_DOT` ======================== DNS over HTTPS (DoH), DNS over TLS (DoT), and DNS over QUIC (DoQ) encrypt DNS queries. References: `DoH RFC8484: `_, `DoT RFC7858: `_ .. _Proto_197: `NDPI_PROTOCOL_WECHAT` ======================= WeChat is a Chinese messaging, social media, and payment app. References: `WeChat official site: `_ .. _Proto_198: `NDPI_PROTOCOL_MPEGTS` ======================= MPEG Transport Stream (TS) is a standard for transmission/storage of audio, video, data. References: `MPEG-TS Wikipedia article: `_ .. _Proto_199: `NDPI_PROTOCOL_SNAPCHAT` ========================= Snapchat is a multimedia messaging app known for ephemeral messages. References: `Snapchat official site: `_ .. _Proto_200: `NDPI_PROTOCOL_SINA` ===================== Sina is a Chinese company operating web services including Sina Weibo. References: `Sina official site: `_ .. _Proto_201: `NDPI_PROTOCOL_GOOGLE_MEET` =========================== Google Meet is Google’s video conferencing service. References: `Google Meet official site: `_ .. _Proto_202: `NDPI_PROTOCOL_IFLIX` ===================== iflix is a video on demand service for emerging markets. References: `iflix official site: `_ .. _Proto_203: `NDPI_PROTOCOL_GITHUB` ======================= GitHub is a platform for version control and collaborative development. References: `GitHub official site: `_ .. _Proto_204: `NDPI_PROTOCOL_BJNP` ===================== BJNP is a proprietary USB-over-IP network printing discovery protocol by Canon. References: Canon proprietary, no public specs available. .. _Proto_205: `NDPI_PROTOCOL_REDDIT` ======================= Reddit is a social news and discussion website. References: `Reddit official site: `_ .. _Proto_206: `NDPI_PROTOCOL_WIREGUARD` =========================== WireGuard is a modern VPN protocol noted for simplicity and speed. References: `WireGuard official site: `_ .. _Proto_207: `NDPI_PROTOCOL_SMPP` ===================== SMPP is a protocol for exchanging SMS messages. References: `SMPP official site: `_ .. _Proto_208: `NDPI_PROTOCOL_DNSCRYPT` ========================= DNSCrypt authenticates and encrypts DNS traffic. References: `DNSCrypt official site: `_ .. _Proto_209: `NDPI_PROTOCOL_TINC` ===================== Tinc is an open-source VPN daemon creating secure private networks. References: `Tinc official site: `_ .. _Proto_210: `NDPI_PROTOCOL_DEEZER` ======================= Deezer is a music streaming service. References: `Deezer official site: `_ .. _Proto_211: `NDPI_PROTOCOL_INSTAGRAM` ========================== Instagram is a social app for photo and video sharing. References: `Instagram official site: `_ .. _Proto_212: `NDPI_PROTOCOL_MICROSOFT` ========================= Microsoft protocol includes various proprietary communications. References: `Microsoft official site: `_ .. _Proto_213: `NDPI_PROTOCOL_BLIZZARD` ======================== Blizzard Entertainment is a game developer known for WoW, Diablo, StarCraft. References: `Blizzard official site: `_ .. _Proto_214: `NDPI_PROTOCOL_TEREDO` ====================== Teredo is an IPv6 transition technology that provides IPv6 connectivity through IPv4 NAT. Uses UDP tunneling over port 3544. References: `RFC 4380 `_, `Wikipedia `_ .. _Proto_215: `NDPI_PROTOCOL_HOTSPOT_SHIELD` ============================== Hotspot Shield is a VPN service providing encrypted internet connections and privacy protection. References: `Hotspot Shield official site `_ .. _Proto_216: `NDPI_PROTOCOL_IMO` =================== imo is a free video calling and instant messaging application. Popular in regions with expensive mobile data. References: `imo official site `_ .. _Proto_217: `NDPI_PROTOCOL_GOOGLE_DRIVE` ============================ Google Drive is a cloud storage and file synchronization service. Provides file backup, sharing, and collaborative editing. References: `Google Drive `_, `Drive API `_ .. _Proto_218: `NDPI_PROTOCOL_OCS` =================== OCS (Office Communications Server) is Microsoft's enterprise instant messaging and conferencing platform, predecessor to Lync and Skype for Business. References: `Microsoft OCS Documentation `_ .. _Proto_219: `NDPI_PROTOCOL_MICROSOFT_365` ============================= Microsoft 365 (formerly Office 365) is a cloud-based subscription service combining Office apps, cloud storage, and collaboration tools. References: `Microsoft 365 official site `_, `M365 Network Connectivity `_ .. _Proto_220: `NDPI_PROTOCOL_CLOUDFLARE` ========================== Cloudflare is a web infrastructure and security company providing CDN, DDoS protection, DNS services, and security solutions. References: `Cloudflare official site `_, `Cloudflare API `_ .. _Proto_221: `NDPI_PROTOCOL_MS_ONE_DRIVE` ============================ Microsoft OneDrive is a cloud storage service integrated with Microsoft 365, providing file hosting, synchronization, and sharing. References: `OneDrive official site `_, `OneDrive Dev Center `_ .. _Proto_222: `NDPI_PROTOCOL_MQTT` ==================== MQTT (Message Queuing Telemetry Transport) is a lightweight publish-subscribe messaging protocol widely used in IoT applications for device communication. References: `MQTT official site `_, `MQTT v3.1.1 `_, `MQTT v5.0 `_ .. _Proto_223: `NDPI_PROTOCOL_RX` ================== RX (Remote Execution) is a remote procedure call protocol developed by Carnegie Mellon University, used by AFS (Andrew File System). References: `RX Protocol Specification `_ .. _Proto_224: `NDPI_PROTOCOL_APPLESTORE` ========================== Apple App Store traffic includes app downloads, updates, in-app purchases, and related Apple services communication. References: `Apple App Store `_ .. _Proto_225: `NDPI_PROTOCOL_OPENDNS` ======================= OpenDNS (now part of Cisco Umbrella) provides DNS resolution services with security filtering, phishing protection, and content filtering. References: `Cisco Umbrella (OpenDNS) `_, `Umbrella Documentation `_ .. _Proto_226: `NDPI_PROTOCOL_GIT` =================== Git protocol traffic for distributed version control operations including clone, fetch, push, and pull operations. References: `Git Protocol Documentation `_, `Git official site `_ .. _Proto_227: `NDPI_PROTOCOL_DRDA` ==================== DRDA (Distributed Relational Database Architecture) is a protocol for distributed database communication, primarily used by IBM DB2 and other database systems. References: `DRDA Specification `_, `Wikipedia `_ .. _Proto_228: `NDPI_PROTOCOL_PLAYSTORE` ========================= Google Play Store traffic for Android app downloads, updates, in-app purchases, and Google Play services communication. References: `Google Play Store `_, `Play Console `_ .. _Proto_229: `NDPI_PROTOCOL_SOMEIP` ====================== SOME/IP (Scalable service-Oriented MiddlewarE over IP) is an automotive middleware solution for service-oriented communication in vehicles (ECU-to-ECU). References: `AUTOSAR SOME/IP Specification `_ .. _Proto_230: `NDPI_PROTOCOL_FIX` =================== FIX (Financial Information eXchange) protocol is an industry-standard messaging protocol for real-time electronic securities trading and market data. References: `FIX Trading Community `_, `FIX Protocol Specification `_ .. _Proto_231: `NDPI_PROTOCOL_PLAYSTATION` =========================== PlayStation Network (PSN) traffic for Sony's gaming platform, including game downloads, multiplayer gaming, streaming, and store access. References: `PlayStation Network `_ .. _Proto_232: `NDPI_PROTOCOL_PASTEBIN` ======================== Pastebin is a web application for storing and sharing text content. Often used by developers for code sharing and by security researchers. References: `Pastebin official site `_, `Pastebin API `_ .. _Proto_233: `NDPI_PROTOCOL_LINKEDIN` ======================== LinkedIn is a professional networking platform owned by Microsoft, used for career development, job searching, and business networking. References: `LinkedIn official site `_, `LinkedIn API `_ .. _Proto_234: `NDPI_PROTOCOL_SOUNDCLOUD` ========================== SoundCloud is an audio streaming and distribution platform popular with musicians for sharing and discovering music. References: `SoundCloud official site `_, `SoundCloud API `_ .. _Proto_235: `NDPI_PROTOCOL_VALVE_SDR` =========================== Steam Datagram Relay (SDR) is Valve's virtual private gaming network. References: `Steamworks partner doc: `_ .. _Proto_236: `NDPI_PROTOCOL_LISP` ====================== LISP separates IP addresses into Endpoint IDs and Routing Locators. References: `RFC6830: `_ .. _Proto_237: `NDPI_PROTOCOL_DIAMETER` ========================= Diameter is an AAA network protocol, successor to RADIUS. References: `RFC6733: `_ .. _Proto_238: `NDPI_PROTOCOL_APPLE_PUSH` ============================ Apple Push Notification Service (APNs) delivers notifications to Apple devices. References: `Apple Developer APNs: `_ .. _Proto_239: `NDPI_PROTOCOL_GOOGLE_SERVICES` ================================ Google Services cover various APIs and endpoints used by Google. References: No single official site; includes googleapis.com, googletagmanager.com. .. _Proto_240: `NDPI_PROTOCOL_AMAZON_VIDEO` ============================= Amazon Video is Amazon's video streaming service. References: `Amazon Video site: `_, `Prime Video official site `_ .. _Proto_241: `NDPI_PROTOCOL_GOOGLE_DOCS` ============================ Google Docs allows collaborative online document editing. References: `Google Docs official site: `_ .. _Proto_242: `NDPI_PROTOCOL_WHATSAPP_FILES` ================================ WhatsApp media files such as videos, pictures, and voice messages. References: `WhatsApp FAQ: `_ .. _Proto_243: `NDPI_PROTOCOL_TARGUS_GETDATA` ================================ Targus GetData is a proprietary protocol for Targus device data transfer. References: Proprietary, no public documentation. .. _Proto_244: `NDPI_PROTOCOL_DNP3` ===================== DNP3 is a communication protocol for process automation systems. References: `DNP3 Wikipedia article: `_ .. _Proto_245: `NDPI_PROTOCOL_IEC60870` ========================= IEC 60870-5-104 network protocol used in power system telecontrol and supervision. References: `IEC 60870 Wikipedia: `_ .. _Proto_246: `NDPI_PROTOCOL_BLOOMBERG` ========================== Bloomberg services traffic identified by domains and ASN registrations. References: `Bloomberg official site: `_ .. _Proto_247: `NDPI_PROTOCOL_CAPWAP` ======================== CAPWAP protocol manages wireless access points centrally. References: `RFC5415: `_ .. _Proto_248: `NDPI_PROTOCOL_ZABBIX` ======================== Zabbix protocol supports agent-server communication for monitoring. References: `Zabbix Documentation: `_ .. _Proto_249: `NDPI_PROTOCOL_S7COMM` ======================= S7comm (S7 Communication) is a Siemens proprietary protocol used for PLC (Programmable Logic Controller) communication in industrial automation systems, particularly with SIMATIC S7 PLCs. References: `Wireshark S7comm wiki: `_ .. _Proto_250: `NDPI_PROTOCOL_MSTEAMS` ======================== Microsoft Teams collaboration app protocol. References: `Microsoft Teams official site: `_ Notes: - This ID is also used for Skype traffic. .. _Proto_251: `NDPI_PROTOCOL_WEBSOCKET` =========================== WebSocket provides full-duplex communication channels over TCP. References: `RFC6455: `_ .. _Proto_252: `NDPI_PROTOCOL_ANYDESK` ======================== AnyDesk is a platform-independent remote desktop app. References: `AnyDesk official site: `_ .. _Proto_253: `NDPI_PROTOCOL_SOAP` ===================== SOAP is a protocol for exchanging structured info in web services using XML. References: `W3C SOAP spec: `_ .. _Proto_254: `NDPI_PROTOCOL_APPLE_SIRI` =========================== Apple Siri is a voice assistant integrated into Apple devices. References: `Apple Siri official: `_ .. _Proto_255: `NDPI_PROTOCOL_SNAPCHAT_CALL` =============================== Snapchat Call provides voice and video communication between users. References: `Snapchat official site: `_ .. _Proto_256: `NDPI_PROTOCOL_HPVIRTGRP` ========================== HP Virtual Group is HP's proprietary virtualization protocol. References: Proprietary, no public documentation. .. _Proto_257: `NDPI_PROTOCOL_GENSHIN_IMPACT` ================================ Genshin Impact is an action RPG game with live data exchanges. References: `Genshin Impact official site: `_ .. _Proto_258: `NDPI_PROTOCOL_ACTIVISION` ============================ Activision network traffic, including Call of Duty games. References: `Activision official site: `_ .. _Proto_259: `NDPI_PROTOCOL_FORTICLIENT` ============================= FortiClient security suite with VPN and endpoint protection. References: `FortiClient official site: `_ .. _Proto_260: `NDPI_PROTOCOL_Z3950` ======================= Z39.50 protocol for searching and retrieving info from remote databases, often library systems. References: `Library of Congress Z39.50: `_ .. _Proto_261: `NDPI_PROTOCOL_LIKEE` ====================== Likee is a short-video creation and sharing platform. References: `Likee official site: `_ .. _Proto_262: `NDPI_PROTOCOL_GITLAB` ======================== GitLab is a DevOps platform with Git repository management and CI/CD. References: `GitLab official site: `_ .. _Proto_263: `NDPI_PROTOCOL_AVAST_SECUREDNS` ================================= Avast Secure DNS provides safer browsing by blocking unsafe websites. References: `Avast Secure DNS site: `_ .. _Proto_264: `NDPI_PROTOCOL_CASSANDRA` ========================== Apache Cassandra is a distributed NoSQL database system for big data. References: `Cassandra official site: `_ .. _Proto_265: `NDPI_PROTOCOL_AMAZON_AWS` ========================== Generic traffic from Amazon Web Services (AWS) cloud computing platform. References: `AWS official site: `_ .. _Proto_266: `NDPI_PROTOCOL_SALESFORCE` =========================== Salesforce is a cloud-based CRM platform. References: `Salesforce official site: `_ .. _Proto_267: `NDPI_PROTOCOL_VIMEO` ====================== Vimeo is a video hosting and sharing platform. References: `Vimeo official site: `_ .. _Proto_268: `NDPI_PROTOCOL_FACEBOOK_VOIP` ============================== Facebook’s voice over IP communications within Messenger. References: `Facebook Messenger: `_ .. _Proto_269: `NDPI_PROTOCOL_SIGNAL_VOIP` ============================= Signal’s encrypted voice calling feature. References: `Signal official site: `_ .. _Proto_270: `NDPI_PROTOCOL_FUZE` ===================== Fuze is a unified communications platform. References: `Fuze official site: `_ .. _Proto_271: `NDPI_PROTOCOL_GTP_U` ======================== GTP-U carries user data within mobile networks. References: `3GPP TS 29.060: `_, `3GPP TS 29.281 `_ .. _Proto_272: `NDPI_PROTOCOL_GTP_C` ======================= GTP-C controls tunnel establishment in mobile networks. References: `3GPP TS 29.060: `_ .. _Proto_273: `NDPI_PROTOCOL_GTP_PRIME` =========================== GTP Prime is a signaling protocol used in LTE for billing and charging. References: `3GPP TS 32.295: `_ .. _Proto_274: `NDPI_PROTOCOL_ALIBABA` ======================== Alibaba is a major Chinese conglomerate specializing in e-commerce and technology. References: `Alibaba official site: `_ .. _Proto_275: `NDPI_PROTOCOL_CRASHLYSTICS` ============================== Crashlytics is a crash reporting tool by Google Firebase. References: `Crashlytics on Firebase: `_ .. _Proto_276: `NDPI_PROTOCOL_MICROSOFT_AZURE` ================================ Microsoft Azure cloud computing platform. References: `Azure official site: `_ .. _Proto_277: `NDPI_PROTOCOL_ICLOUD_PRIVATE_RELAY` ===================================== iCloud Private Relay increases privacy by routing traffic through multiple relays. References: `Apple iCloud Private Relay: `_ .. _Proto_278: `NDPI_PROTOCOL_ETHERNET_IP` ============================= Ethernet/IP adapts the Common Industrial Protocol to Ethernet. References: `ODVA Ethernet/IP: `_ .. _Proto_279: `NDPI_PROTOCOL_BADOO` ====================== Badoo is a social networking and dating service. References: `Badoo official site: `_ .. _Proto_280: `NDPI_PROTOCOL_ACCUWEATHER` ============================= AccuWeather provides real-time weather forecasts and alerts. References: `AccuWeather official site: `_ .. _Proto_281: `NDPI_PROTOCOL_GOOGLE_CLASSROOM` ================================= Google Classroom simplifies school assignment management. References: `Google Classroom: `_ .. _Proto_282: `NDPI_PROTOCOL_HSRP` ===================== HSRP provides IP network failover and redundancy. References: `Cisco HSRP guide: `_, `Cisco HSRP Configuration Guide `_ .. _Proto_283: `NDPI_PROTOCOL_CYBERSECURITY` ============================= Traffic to/from cybersecurity companies and services, including threat intelligence feeds, security software updates, and malware analysis services. References: Various cybersecurity vendors and threat intelligence platforms .. _Proto_284: `NDPI_PROTOCOL_GOOGLE_CLOUD` ============================== Google Cloud provides cloud computing services. References: `Google Cloud official site: `_ .. _Proto_285: `NDPI_PROTOCOL_TENCENT` ========================= Tencent network services and applications. References: `Tencent official site: `_ .. _Proto_286: `NDPI_PROTOCOL_RAKNET` ======================== RakNet is a C++ game networking engine. References: `RakNet on GitHub: `_, `RakNet (archived) `_ .. _Proto_287: `NDPI_PROTOCOL_XIAOMI` ======================== Xiaomi communication protocols for devices and IoT. References: `Xiaomi official site: `_ .. _Proto_288: `NDPI_PROTOCOL_EDGECAST` ======================== EdgeCast (now part of Edgio/Verizon Media) is a CDN (Content Delivery Network) providing global content acceleration and delivery services. References: `Edgio Platform `_ .. _Proto_289: `NDPI_PROTOCOL_CACHEFLY` ========================= CacheFly is a content delivery network focused on video streaming. References: `CacheFly official site: `_ .. _Proto_290: `NDPI_PROTOCOL_SOFTETHER` ========================== SoftEther VPN supports multiple protocols including SSL-VPN and L2TP. References: `SoftEther official site: `_ .. _Proto_291: `NDPI_PROTOCOL_MPEGDASH` ========================= MPEG-DASH enables adaptive bitrate streaming over the Internet. References: `MPEG-DASH specs: `_ .. _Proto_292: `NDPI_PROTOCOL_DAZN` ==================== DAZN is a sports subscription video streaming service. References: `DAZN official site: `_ .. _Proto_293: `NDPI_PROTOCOL_GOTO` ===================== GoTo includes services like GoToMeeting for online collaboration. References: `GoTo official site: `_ .. _Proto_294: `NDPI_PROTOCOL_RSH` =================== Remote Shell (rsh) executes shell commands remotely. References: `rsh man page: `_ .. _Proto_295: `NDPI_PROTOCOL_1KXUN` ====================== 1Kxun is a Chinese internet company offering web services. References: `1Kxun official site: `_ .. _Proto_296: `NDPI_PROTOCOL_IP_PGM` ======================= PGM is a reliable multicast transport protocol. References: `RFC3208: `_, `RFC 3208 `_ .. _Proto_297: `NDPI_PROTOCOL_IP_PIM` ======================= PIM is a multicast routing protocol family for IP packets. References: `RFC7761: `_ .. _Proto_298: `NDPI_PROTOCOL_COLLECTD` ========================= Collectd gathers system and application metrics periodically. References: `Collectd official site: `_ .. _Proto_299: `NDPI_PROTOCOL_TUNNELBEAR` =========================== TunnelBear is a consumer VPN service. References: `TunnelBear official site: `_ .. _Proto_300: `NDPI_PROTOCOL_CLOUDFLARE_WARP` ================================ Cloudflare Warp offers secure VPN and DNS resolution. References: `Cloudflare Warp: `_ .. _Proto_301: `NDPI_PROTOCOL_I3D` ==================== i3d.net provides dedicated and cloud game servers. References: `i3d.net official site: `_ .. _Proto_302: `NDPI_PROTOCOL_RIOTGAMES` ========================= Riot Games develops games like League of Legends and Valorant. References: `Riot Games official site: `_ .. _Proto_303: `NDPI_PROTOCOL_PSIPHON` ======================== Psiphon circumvents internet censorship using VPN and proxy tech. References: `Psiphon official site: `_ .. _Proto_304: `NDPI_PROTOCOL_ULTRASURF` ========================= UltraSurf bypasses firewalls and protects privacy via proxy. References: `UltraSurf official site: `_ .. _Proto_305: `NDPI_PROTOCOL_THREEMA` ======================== Threema is a privacy-focused instant messaging app. References: `Threema official site: `_ .. _Proto_306: `NDPI_PROTOCOL_ALICLOUD` ========================= Alibaba Cloud offers cloud computing services. References: `Alibaba Cloud official site: `_ .. _Proto_307: `NDPI_PROTOCOL_AVAST` ====================== Avast provides antivirus and internet security software. References: `Avast official site: `_ .. _Proto_308: `NDPI_PROTOCOL_TIVOCONNECT` ============================ TiVo Connect enables streaming to TiVo set-top boxes. References: `TiVo official site: `_ .. _Proto_309: `NDPI_PROTOCOL_KISMET` ======================= Kismet detects and monitors wireless networks. References: `Kismet official site: `_ .. _Proto_310: `NDPI_PROTOCOL_FASTCGI` ======================== FastCGI interfaces programs with web servers to boost dynamic web app performance. References: `FastCGI Archives: `_ .. _Proto_311: `NDPI_PROTOCOL_FTPS` ===================== FTPS extends FTP with TLS/SSL for security. References: `RFC4217: `_ .. _Proto_312: `NDPI_PROTOCOL_NATPMP` ======================= NAT-PMP auto-configures port forwarding on NAT gateways. References: `RFC6886: `_ .. _Proto_313: `NDPI_PROTOCOL_SYNCTHING` ========================== Syncthing synchronizes files continuously between devices. References: `Syncthing official site: `_ .. _Proto_314: `NDPI_PROTOCOL_CRYNET` ======================= CryNetwork is CryEngine 5’s proprietary multiplayer protocol. References: `CryEngine docs: `_ .. _Proto_315: `NDPI_PROTOCOL_LINE` ===================== LINE is a messaging app with voice/video calls and social features. References: `LINE official site: `_ .. _Proto_316: `NDPI_PROTOCOL_LINE_CALL` ========================== LINE Call offers free voice calls within LINE app. References: `LINE official site: `_ .. _Proto_317: `NDPI_PROTOCOL_APPLETVPLUS` ============================ Apple TV+ streams original shows and movies. References: `Apple TV+ official site: `_ .. _Proto_318: `NDPI_PROTOCOL_DIRECTV` ======================== DirecTV offers satellite TV and interactive services. References: `DirecTV official site: `_ .. _Proto_319: `NDPI_PROTOCOL_HBO` ==================== HBO provides premium TV series, movies, and docs. References: `HBO official site: `_ .. _Proto_320: `NDPI_PROTOCOL_VUDU` ===================== Vudu offers digital movies and TV rentals/purchases. References: `Vudu official site: `_ .. _Proto_321: `NDPI_PROTOCOL_SHOWTIME` ========================= Showtime offers original series, movies, and sports programming. References: `Showtime official site: `_ .. _Proto_322: `NDPI_PROTOCOL_DAILYMOTION` ============================ Dailymotion is a video-sharing platform. References: `Dailymotion official site: `_ .. _Proto_323: `NDPI_PROTOCOL_LIVESTREAM` =========================== Livestream enables live event broadcasting. References: `Livestream official site: `_ .. _Proto_324: `NDPI_PROTOCOL_TENCENTVIDEO` ============================= Tencent Video streams movies, TV, and variety shows. References: `Tencent Video official site: `_ .. _Proto_325: `NDPI_PROTOCOL_IHEARTRADIO` ============================= iHeartRadio streams music and radio stations. References: `iHeartRadio official site: `_ .. _Proto_326: `NDPI_PROTOCOL_TIDAL` ====================== Tidal offers high-fidelity music streaming. References: `Tidal official site: `_ .. _Proto_327: `NDPI_PROTOCOL_TUNEIN` ======================= TuneIn streams live news, radio, and podcasts. References: `TuneIn official site: `_ .. _Proto_328: `NDPI_PROTOCOL_SIRIUSXMRADIO` ============================== SiriusXM offers satellite and online radio services. References: `SiriusXM official site: `_ .. _Proto_329: `NDPI_PROTOCOL_MUNIN` ===================== Munin visualizes network and system resource metrics. References: `Munin official site: `_ .. _Proto_330: `NDPI_PROTOCOL_ELASTICSEARCH` ============================== Elasticsearch is a distributed search and analytics engine. References: `Elastic official site: `_ .. _Proto_331: `NDPI_PROTOCOL_TUYA_LP` ======================== TUYA LAN Protocol enables local IoT device communication. References: `GitHub - Tuya SDK: `_ .. _Proto_332: `NDPI_PROTOCOL_TPLINK_SHP` =========================== TP-LINK Smart Home Protocol for local device control. References: `Home Assistant TP-Link Integration: `_ .. _Proto_333: `NDPI_PROTOCOL_SOURCE_ENGINE` ============================== Source Engine protocol (A2S) is Valve's UDP-based game server query protocol. References: `Valve Developer Wiki: `_ Notes: - Modern Valve games use Steam Datagram Relay (SDR) instead. .. _Proto_334: `NDPI_PROTOCOL_BACNET` ======================= BACnet provides building automation and control communications. References: `ASHRAE Standard 135-2016: `_ .. _Proto_335: `NDPI_PROTOCOL_OICQ` ==================== OICQ is an early name for Tencent’s QQ instant messaging protocol. References: `Tencent QQ Wikipedia: `_ .. _Proto_336: `NDPI_PROTOCOL_HOTS` ==================== Heroes of the Storm (HOTS) is a MOBA game by Blizzard. References: `HOTS official site: `_ .. _Proto_337: `NDPI_PROTOCOL_FACEBOOK_REEL_STORY` ==================================== Facebook Reel Story relates to story clip streaming on Facebook. References: `Facebook help: `_ .. _Proto_338: `NDPI_PROTOCOL_SRTP` ===================== SRTP provides encryption and authentication for RTP streams. References: `RFC3711: `_ Notes: - SRTP is essentially "encrypted RTP", similar to HTTPS vs HTTP. - Differentiating RTP from SRTP is often difficult; nDPI uses SRTP only when confident. .. _Proto_339: `NDPI_PROTOCOL_OPERA_VPN` ========================== Opera VPN is a free VPN bundled with Opera Browser. References: `Opera VPN feature: `_ .. _Proto_340: `NDPI_PROTOCOL_EPICGAMES` ========================== Epic Games develops Unreal Engine and games like Fortnite. References: `Epic Games Store: `_, `Fortnite: `_ .. _Proto_341: `NDPI_PROTOCOL_GEFORCENOW` =========================== GeForce Now is Nvidia’s cloud gaming service. References: `GeForce Now official site: `_ .. _Proto_342: `NDPI_PROTOCOL_NVIDIA` ======================= Generic traffic from Nvidia sites. References: `Nvidia official site: `_ .. _Proto_343: `NDPI_PROTOCOL_BITCOIN` ======================== Bitcoin is a prominent cryptocurrency. References: `Bitcoin Protocol documentation: `_ Notes: - Crypto exchanges are not always mining; could be transactions or blockchain exploration. - Bitcoin protocol governs node communication and block synchronization. .. _Proto_344: `NDPI_PROTOCOL_PROTONVPN` ========================== Proton VPN is a VPN service by Proton AG. References: `ProtonVPN official site: `_ .. _Proto_345: `NDPI_PROTOCOL_THRIFT` ======================= Apache Thrift is a cross-language data interchange framework. References: `Thrift official site: `_, `Thrift Github: `_ .. _Proto_346: `NDPI_PROTOCOL_ROBLOX` ======================= Roblox is an online game platform and creation system. References: `Roblox official site: `_ Notes: - Roblox traffic may appear as RakNet since it uses a custom version. .. _Proto_347: `NDPI_PROTOCOL_SERVICE_LOCATION` ================================= Service Location Protocol enables device service discovery on local networks. References: `SLPv1: `_, `SLPv2: `_ .. _Proto_348: `NDPI_PROTOCOL_MULLVAD` ======================== Mullvad VPN service operated by Mullvad VPN AB, Sweden. References: `Mullvad official site: `_ .. _Proto_349: `NDPI_PROTOCOL_HTTP2` ====================== HTTP/2 is a major revision of the HTTP protocol. References: `RFC9113: `_ Notes: - HTTP/2 is almost always transported over TLS (encrypted). .. _Proto_350: `NDPI_PROTOCOL_HAPROXY` ======================== HAProxy is a high availability load balancer and reverse proxy. References: `HAProxy official site: `_ .. _Proto_351: `NDPI_PROTOCOL_RMCP` ===================== Intelligent Platform Management Interface (IPMI) RMCP protocol. References: `IPMI specs: `_ .. _Proto_352: `NDPI_PROTOCOL_CAN` ==================== Controller Area Network (CAN) for automotive applications. References: `ISO CAN standard: `_ .. _Proto_353: `NDPI_PROTOCOL_PROTOBUF` ========================= Protocol Buffers is a structured data serialization format. References: `Protobuf encoding guide: `_ .. _Proto_354: `NDPI_PROTOCOL_ETHEREUM` ========================= Ethereum is a decentralized blockchain with smart contract support. References: `Ethereum docs: `_ Notes: - Similar to Bitcoin, not all exchanges represent mining; may be transactions or blockchain queries. .. _Proto_355: `NDPI_PROTOCOL_TELEGRAM_VOIP` ============================== Telegram audio/video call protocol. References: `Telegram Wikipedia: `_ .. _Proto_356: `NDPI_PROTOCOL_SINA_WEIBO` ============================ Chinese microblogging site Sina Weibo. References: `Sina Weibo Wikipedia: `_ .. _Proto_357: `NDPI_PROTOCOL_TESLA_SERVICES` ============================== Tesla services traffic including vehicle telemetry, over-the-air software updates, navigation data, and mobile app communication. References: `Tesla official site `_, `Tesla API (unofficial) `_ .. _Proto_358: `NDPI_PROTOCOL_PTPV2` ============================ IEEE 1588-2008 Precision Time Protocol Version 2. References: `IEEE PTP specs: `_ .. _Proto_359: `NDPI_PROTOCOL_RTPS` ============================ Real-Time Publish Subscribe Protocol. References: `RTPS specs: `_ .. _Proto_360: `NDPI_PROTOCOL_OPC_UA` ============================ IEC62541 OPC Unified Architecture protocol. References: `OPC Foundation: `_ .. _Proto_361: `NDPI_PROTOCOL_S7COMM_PLUS` ============================ Siemens proprietary protocol for PLC data exchange (different from classic S7Comm). References: `Protocol description: `_ .. _Proto_362: `NDPI_PROTOCOL_FINS` ============================ Factory Interface Network Service (FINS) protocol used by Omron PLCs. References: `Omron FINS docs: `_ .. _Proto_363: `NDPI_PROTOCOL_ETHERSIO` ============================ Ether-S-I/O protocol used by Saia-Burgess PLCs. References: `Wireshark EtherSIO wiki: `_ .. _Proto_364: `NDPI_PROTOCOL_UMAS` ============================ UMAS is Schneider Electric's proprietary protocol based on Modbus. References: `Analysis: `_ .. _Proto_365: `NDPI_PROTOCOL_BECKHOFF_ADS` ============================= Automation Device Specification protocol for Beckhoff PLCs. References: `Beckhoff ADS docs: `_ .. _Proto_366: `NDPI_PROTOCOL_ISO9506_1_MMS` ============================== Manufacturing Message Specification (MMS) protocol for device remote control. References: `ISO 9506-1:2003 standard (paid): `_ .. _Proto_367: `NDPI_PROTOCOL_IEEE_C37118` ============================ IEEE standard for Synchrophasor Data Transfer. References: `IEEE C37.118.1-2011 standard (paid): `_ .. _Proto_368: `NDPI_PROTOCOL_ETHERSBUS` ============================ Ether-S-Bus protocol for Saia-Burgess PLC communication. References: `Wireshark EtherSBus wiki: `_ .. _Proto_369: `NDPI_PROTOCOL_MONERO` ====================== Monero is a privacy-focused cryptocurrency. (No references) .. _Proto_370: `NDPI_PROTOCOL_DCERPC` ====================== DCE/RPC is a remote procedure call mechanism specification. References: `Wireshark DCE/RPC wiki: `_ .. _Proto_371: `NDPI_PROTOCOL_PROFINET_IO` ============================ PROFINET/IO is a field bus protocol based on connectionless DCE/RPC. References: `PROFINET specs: `_ .. _Proto_372: `NDPI_PROTOCOL_HISLIP` ======================= HiSLIP is for remote control of LAN-based test and measurement instruments. References: `HiSLIP specs: `_ .. _Proto_373: `NDPI_PROTOCOL_UFTP` ===================== Encrypted UDP based FTP with multicast. References: `UFTP protocol: `_ .. _Proto_374: `NDPI_PROTOCOL_OPENFLOW` ========================= OpenFlow is a network protocol associated with Software-Defined Networking. References: `OpenFlow specs: `_ .. _Proto_375: `NDPI_PROTOCOL_JSON_RPC` ========================= JSON-RPC is a remote procedure call protocol encoded in JSON. References: `JSON-RPC specs: `_ .. _Proto_376: `NDPI_PROTOCOL_WEBDAV` ====================== WebDAV extends HTTP to collaboratively edit and manage files on Web servers. References: `RFC4918: `_ Notes: - WebDAV is mostly transported over TLS (encrypted). .. _Proto_377: `NDPI_PROTOCOL_APACHE_KAFKA` ============================ Apache Kafka is a distributed event streaming platform. References: `Kafka official site: `_, `Kafka Github: `_ .. _Proto_378: `NDPI_PROTOCOL_NOMACHINE` ========================== NoMachine is a proprietary remote desktop software. References: `NoMachine official site: `_ .. _Proto_379: `NDPI_PROTOCOL_IEC62056` ============================ IEC 62056-4-7 DLMS/COSEM transport layer for IP. References: `IEC paid specs: `_ Notes: - Wireshark does not support this protocol; some old code available at: ``, `` .. _Proto_380: `NDPI_PROTOCOL_HL7` ========================= HL7 standards for clinical and administrative health data exchange. References: `HL7 official site: `_ .. _Proto_381: `NDPI_PROTOCOL_CEPH` ========================= Ceph is a scalable distributed storage system. References: `Ceph official site: `_ .. _Proto_382: `NDPI_PROTOCOL_GOOGLE_CHAT` ============================ Google Chat is Google’s instant messaging service, successor to Hangouts. References: `Google Chat official site: `_ .. _Proto_383: `NDPI_PROTOCOL_ROUGHTIME` ========================= Protocol for rough time sync with cryptographic server verification. References: `IETF Draft: `_ .. _Proto_384: `NDPI_PROTOCOL_PIA` ========================= Private Internet Access (PIA) VPN service. References: `PIA official site: `_ .. _Proto_385: `NDPI_PROTOCOL_KCP` =================== KCP is a fast, reliable protocol supporting TCP-like streams with low latency. References: `KCP protocol spec: `_ .. _Proto_386: `NDPI_PROTOCOL_DOTA2` ========================= Dota 2 is a popular multiplayer MOBA game by Valve. References: `Dota 2 official site: `_ .. _Proto_387: `NDPI_PROTOCOL_MUMBLE` ========================= Mumble is a free, low-latency, high-quality voice chat app. References: `Mumble official site: `_ .. _Proto_388: `NDPI_PROTOCOL_YOJIMBO` ======================== Yojimbo is a secure client/server UDP-based protocol. References: `Protocol spec: `_ .. _Proto_389: `NDPI_PROTOCOL_ELECTRONICARTS` =============================== Electronic Arts is a major game publisher and producer. References: `EA official site: `_ Notes: - Much of the traffic relates to EA Origin game store. .. _Proto_390: `NDPI_PROTOCOL_STOMP` ======================== STOMP is an interoperable protocol for asynchronous message passing. References: `STOMP specification: `_ .. _Proto_391: `NDPI_PROTOCOL_RADMIN` ========================= Radmin is remote access software for Windows. References: `Radmin official site: `_ .. _Proto_392: `NDPI_PROTOCOL_RAFT` ===================== Raft is a consensus protocol for distributed logs. References: `Raft C implementation: `_, `Raft paper: `_ .. _Proto_393: `NDPI_PROTOCOL_CIP` =================== CIP (Common Industrial Protocol) is an industrial protocol used in automation and control systems, particularly in Ethernet/IP and DeviceNet networks. References: `ODVA CIP Specification `_, `Wikipedia `_ .. _Proto_394: `NDPI_PROTOCOL_GEARMAN` ======================== Gearman is a network job-queuing system. References: `Gearman official site: `_ .. _Proto_395: `NDPI_PROTOCOL_TENCENTGAMES` ============================= Protocol used by Tencent's various games (mostly mobile). References: `Tencent Games official site: `_ .. _Proto_396: `NDPI_PROTOCOL_GAIJIN` ======================= Gaijin Entertainment games protocols. References: `Gaijin official site: `_ .. _Proto_397: `NDPI_PROTOCOL_C1222` ===================== ANSI C12.22 protocol for communication with electric meters. References: `NEMA standard (paid): `_ .. _Proto_398: `NDPI_PROTOCOL_HUAWEI` ====================== Generic traffic related to Huawei. References: `Huawei official site: `_ .. _Proto_399: `NDPI_PROTOCOL_HUAWEI_CLOUD` ============================ Huawei Mobile Cloud services. References: `Huawei Cloud: `_ .. _Proto_400: `NDPI_PROTOCOL_DLEP` ===================== Dynamic Link Exchange Protocol (DLEP) supports radio-aware routing. References: `RFC8175: `_ .. _Proto_401: `NDPI_PROTOCOL_BFD` ===================== Bidirectional Forwarding Detection detects faults between routers or switches. References: `RFC5880: `_ .. _Proto_402: `NDPI_PROTOCOL_NETEASE_GAMES` ============================= Traffic from NetEase games. References: `NetEase Games official site: `_ .. _Proto_403: `NDPI_PROTOCOL_PATHOFEXILE` ============================ Path of Exile is a free online action RPG. References: `Path of Exile official site: `_ .. _Proto_404: `NDPI_PROTOCOL_GOOGLE_CALL` ============================ Google audio/video call applications (e.g., Google Meet). References: `Google Meet official site: `_ Notes: - nDPI uses different IDs for generic and realtime traffic (e.g., NDPI_PROTOCOL_MEET vs NDPI_PROTOCOL_GOOGLE_CALL). .. _Proto_405: `NDPI_PROTOCOL_PFCP` ===================== PFCP protocol communicates between control and user planes in 4G/5G. References: `PFCP specs: `_ .. _Proto_406: `NDPI_PROTOCOL_FLUTE` ====================== File Delivery over Unidirectional Transport protocol. References: `RFC6726: `_ .. _Proto_407: `NDPI_PROTOCOL_LOLWILDRIFT` ============================ League of Legends: Wild Rift mobile MOBA game. References: `Wild Rift official site: `_ .. _Proto_408: `NDPI_PROTOCOL_TESO` ============================ The Elder Scrolls Online MMORPG. References: `ESO official site: `_ .. _Proto_409: `NDPI_PROTOCOL_LDP` ===================== Label Distribution Protocol establishes label paths in MPLS. References: `RFC5036: `_ .. _Proto_410: `NDPI_PROTOCOL_KNXNET_IP` ========================= KNXnet/IP extends KNX home/building automation over IP. References: `Standard docs (paid): `_ .. _Proto_411: `NDPI_PROTOCOL_BLUESKY` ======================= Bluesky decentralized microblogging platform. References: `Bluesky official site: `_ .. _Proto_412: `NDPI_PROTOCOL_MASTODON` ======================== Mastodon is open-source software for self-hosted social networking. References: `Mastodon official site: `_ .. _Proto_413: `NDPI_PROTOCOL_THREADS` ======================== Threads is a social media service by Meta. References: `Threads official site: `_ .. _Proto_414: `NDPI_PROTOCOL_VIBER_VOIP` =========================== Viber audio/video call protocol. References: `Viber Wikipedia: `_ .. _Proto_415: `NDPI_PROTOCOL_ZUG` ========================= ZUG protocol is part of Casper 2.0 blockchain consensus. References: `Casper Labs site: `, `Casper blog: `_ .. _Proto_416: `NDPI_PROTOCOL_JRMI` ========================= Java Remote Method Invocation protocol. References: `Oracle JRMI docs: `_ .. _Proto_417: `NDPI_PROTOCOL_RIPE_ATLAS` ========================== RIPE Atlas probe protocol for Internet measurement. References: `RIPE Atlas site: `_, `RIPE Atlas docs: `_ .. _Proto_418: `NDPI_PROTOCOL_HLS` ===================== HTTP Live Streaming (HLS) segments media for adaptive streaming. References: `RFC8216: `_ .. _Proto_419: `NDPI_PROTOCOL_CLICKHOUSE` =========================== ClickHouse is a columnar database for OLAP. References: `ClickHouse official site: `_ .. _Proto_420: `NDPI_PROTOCOL_NANO` ====================== Nano is a fast, fee-less, eco-friendly cryptocurrency. References: `Nano official site: `_ .. _Proto_421: `NDPI_PROTOCOL_OPENWIRE` ======================== OpenWire is Apache ActiveMQ’s wire protocol. References: `OpenWire docs: `_ .. _Proto_422: `NDPI_PROTOCOL_CNP_IP` ====================== Encapsulation of LonWorks control network over IP. References: `ISO/IEC 14908-4:2012 standard (paid): `_ .. _Proto_423: `NDPI_PROTOCOL_ATG` =================== Automatic Tank Gauge system data transfer protocol. References: `ATG protocol specs: `_ .. _Proto_424: `NDPI_PROTOCOL_TRDP` ==================== Train Real Time Data Protocol standardized by IEC. References: `TRDP specs: `_ .. _Proto_425: `NDPI_PROTOCOL_LUSTRE` ====================== Lustre is a parallel distributed file system for supercomputing. References: `Lustre official site: `_ .. _Proto_426: `NDPI_PROTOCOL_NORDVPN` ======================= NordVPN is a VPN service. References: `NordVPN official site: `_ .. _Proto_427: `NDPI_PROTOCOL_SURFSHARK` ========================= Surfshark VPN service. References: `Surfshark official site: `_ .. _Proto_428: `NDPI_PROTOCOL_CACTUSVPN` ========================= CactusVPN service. References: `CactusVPN official site: `_ .. _Proto_429: `NDPI_PROTOCOL_WINDSCRIBE` ========================== Windscribe VPN service. References: `Windscribe official site: `_ .. _Proto_430: `NDPI_PROTOCOL_SONOS` ========================= Sonos provides high-quality wireless sound systems. References: `Sonos official site: `_ .. _Proto_431: `NDPI_PROTOCOL_DINGTALK` ========================= DingTalk is a collaboration platform by Alibaba. References: `DingTalk official site: `_ .. _Proto_432: `NDPI_PROTOCOL_PALTALK` ========================= Paltalk is a video chat and messaging app. References: `Paltalk official site: `_ .. _Proto_433: `NDPI_PROTOCOL_NAVER` ========================= Naver is South Korea's top search engine and platform. References: `Naver official site: `_ .. _Proto_434: `NDPI_PROTOCOL_SHEIN` ===================== Shein is a fast fashion retailer. References: `Shein official site: `_ .. _Proto_435: `NDPI_PROTOCOL_TEMU` ==================== Temu is an online marketplace by PDD Holdings. References: `Temu official site: `_ .. _Proto_436: `NDPI_PROTOCOL_TAOBAO` ====================== Taobao is a Chinese online shopping platform. References: `Taobao official site: `_ .. _Proto_437: `NDPI_PROTOCOL_MIKROTIK` ======================== MikroTik Neighbor Discovery Protocol (MNDP) finds compatible neighbor routers/switches. References: `MikroTik official docs: `_ .. _Proto_438: `NDPI_PROTOCOL_DICOM` ===================== DICOM is a standard for medical image storage and transmission. References: `DICOM Wikipedia article: `_ .. _Proto_439: `NDPI_PROTOCOL_PARAMOUNTPLUS` ============================= Paramount+ is a subscription video streaming service. References: `Paramount+ official site: `_ .. _Proto_440: `NDPI_PROTOCOL_YANDEX_ALICE` ============================ Yandex Alice voice assistant, similar to Alexa. References: `Yandex Alice protocol: `_ .. _Proto_441: `NDPI_PROTOCOL_VIVOX` ===================== Vivox provides real-time voice and text chat for games. References: `Vivox official site: `_ .. _Proto_442: `NDPI_PROTOCOL_DIGITALOCEAN` ============================ DigitalOcean cloud service provider. References: `DigitalOcean official site: `_ .. _Proto_443: `NDPI_PROTOCOL_RUTUBE` ============================ RUTUBE is a Russian video streaming platform. References: `Rutube official site: `_ .. _Proto_444: `NDPI_PROTOCOL_LAGOFAST` ======================== LagoFast Game Booster improves gaming performance by reducing lag. References: `LagoFast official site: `_ .. _Proto_445: `NDPI_PROTOCOL_GEARUP_BOOSTER` ============================== GearUp Booster reduces game lag. References: `GearUp Booster official site: `_ .. _Proto_446: `NDPI_PROTOCOL_RUMBLE` ====================== Rumble is a video sharing and streaming platform known for hosting live streams and video content. References: `Rumble official site `_ .. _Proto_447: `NDPI_PROTOCOL_UBIQUITY` ======================== Traffic from Ubiquity sites and services. References: `Ubiquity official site: `_ .. _Proto_448: `NDPI_PROTOCOL_MSDO` ======================== Microsoft Delivery Optimization distributes Windows updates and content. References: `Microsoft DO docs: `_ .. _Proto_449: `NDPI_PROTOCOL_ROCKSTAR_GAMES` =============================== Traffic related to Rockstar Games services and launcher. References: `Rockstar Games official site: `_ .. _Proto_450: `NDPI_PROTOCOL_KICK` ======================== Kick.com live streaming platform. References: `Kick official site: `_ .. _Proto_451: `NDPI_PROTOCOL_HAMACHI` =============================== LogMeIn Hamachi VPN service (primarily used for gaming and remote access). Unlike anonymity VPNs, Hamachi creates virtual LAN networks between devices. References: `LogMeIn Hamachi official site: `_ .. _Proto_452: `NDPI_PROTOCOL_GLBP` ===================== Gateway Load Balancing Protocol (GLBP) - Cisco proprietary protocol that provides first-hop redundancy and load balancing for IPv4 and IPv6 networks. References: `Cisco GLBP Configuration Guide `_ .. _Proto_453: `NDPI_PROTOCOL_EASYWEATHER` =========================== The EasyWeather protocol is a proprietary UDP based protocool used by some weather stations to announce and export weather data over a network. .. _Proto_454: `NDPI_PROTOCOL_MUDFISH` ======================= Mudfish is a VPN dedicated for games to reduce lag and improve connection quality. References: `Mudfish official site: `_ .. _Proto_455: `NDPI_PROTOCOL_TRISTATION` ========================== Proprietary, industrial grade, Safety Instrumented Systems (SIS) protocol for safety-shutdown technologies. References: `Triconex Honeypot: https://github.com/NozomiNetworks/tricotools`_ .. _Proto_456: `NDPI_PROTOCOL_SAMSUNG_SDP` =========================== Proprietary service discovery protocol used by Samsung devices i.e. TVs, Soundbars or Smartphones. .. _Proto_457: `NDPI_PROTOCOL_MATTER` ====================== Matter is an open-source, royalty-free connectivity standard for smart home devices. It is designed to improve interoperability between IoT ecosystems, enabling secure and reliable communication primarily over IPv6 using UDP. References: `Matter official site `_ .. _Proto_458: `NDPI_PROTOCOL_AWS_COGNITO` =========================== Amazon Cognito is an identity platform for web and mobile apps. It’s a user directory, an authentication server, and an authorization service for OAuth 2.0 access tokens and AWS credentials. References: `Official site `_ .. _Proto_459: `NDPI_PROTOCOL_AWS_API_GATEWAY` =============================== Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale. References: `Official site `_ .. _Proto_460: `NDPI_PROTOCOL_AWS_KINESIS` =========================== Amazon Kinesis is a family of services provided by Amazon Web Services (AWS) for processing and analyzing real-time streaming data at a large scale. References: `Official site `_ .. _Proto_461: `NDPI_PROTOCOL_AWS_EC2` ======================= Amazon Elastic Compute Cloud (EC2) is a part of Amazon's cloud-computing platform, Amazon Web Services (AWS), that allows users to rent virtual computers on which to run their own computer applications. References: `Official site `_ .. _Proto_462: `NDPI_PROTOCOL_AWS_EMR` ======================= Amazon EMR, which was previously called Amazon Elastic MapReduce, is a managed cluster platform that simplifies running big data frameworks, such as Apache Hadoop and Apache Spark, on AWS to process and analyze vast amounts of data. References: `Official site `_ .. _Proto_463: `NDPI_PROTOCOL_AWS_S3` ====================== Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance. References: `Official site `_ .. _Proto_464: `NDPI_PROTOCOL_AWS_CLOUDFRONT` ============================== Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. CloudFront delivers your content through a worldwide network of data centers called edge locations. References: `Official site `_ .. _Proto_465: `NDPI_PROTOCOL_AWS_DYNAMODB` ============================ Amazon DynamoDB is a fully managed NoSQL database service from Amazon Web Services that offers high-performance, serverless, and infinitely scalable storage for both key-value and document data. References: `Official site `_ .. _Proto_466: `NDPI_PROTOCOL_ESPN` ==================== Visit ESPN to get up-to-the-minute sports news coverage, scores, highlights and commentary for NHL, NFL, MLB, NBA, College Football, NCAA Basketball and more. References: `Official site `_ .. _Proto_467: `NDPI_PROTOCOL_AKAMAI` ====================== Akamai Technologies, Inc. is an American company specialized in content delivery network (CDN), cybersecurity, DDoS mitigation, and cloud services. References: `Official site `_ .. _Proto_468: `NDPI_PROTOCOL_JSON` ==================== JSON (JavaScript Object Notation) is an open standard file format and data interchange format that uses human-readable text. .. _Proto_469: `NDPI_PROTOCOL_MSGPACK` ======================= MessagePack is an extremely efficient object serialization library. It's like JSON, but very fast and small. References: `MessagePack Protocol Specs `_