LoadableTrafficIdentificationPackage, Release 13.08.01

Transcription

Loadable Traffic Identification Package,
Release 13.08.01
05-00070-B47
2013-8-22
Notices
The most current version of this document is available on the Sandvine Customer Support web site at https://support.sandvine.com.
This document and the products described within are subject to copyright. Under copyright laws, neither this document nor the
product may be reproduced, translated, or reduced to any electronic medium or machine readable or other form without prior
written authorization from Sandvine.
Copyright 2013, Sandvine Incorporated ULC. All rights reserved. Sandvine™ is a trademark of Sandvine Incorporated ULC. All
other product names mentioned herein are trademarks of their respective owners.
Sandvine is committed to ensuring the accuracy of our documentation and to continuous improvement. If you encounter errors
or omissions in this user guide, or have comments, questions, or ideas, we welcome your feedback. Please send your comments
to Sandvine via email at https://support.sandvine.com.
Contacting Sandvine
To view the latest Sandvine documentation or to contact Sandvine Customer Support, register for an account at
https://support.sandvine.com.
For a list of Sandvine Sales and Support offices, see http://www.sandvine.com/about_us/contact.asp.
2
Loadable Traffic Identification Package, Release 13.08.01
05-00070-B47
Contents
1 About this Document....................................................................................................................................................5
2 About this Package......................................................................................................................................................7
2.1 New Protocols.......................................................................................................................................................8
2.2 Changed Protocols..............................................................................................................................................11
2.3 Deprecated Protocols..........................................................................................................................................16
2.4 Caveats...............................................................................................................................................................16
2.5 Resolved Issues..................................................................................................................................................21
2.6 Compatibility Matrix.............................................................................................................................................21
3 Install and Update......................................................................................................................................................23
3.1 Installation Overview...........................................................................................................................................24
3.1.1 Impact to Service..........................................................................................................................................24
3.2 Installing the Loadable Traffic Identification Package with Internet Access .......................................................25
3.3 For Elements without Internet Access.................................................................................................................28
3.3.1 Requesting a Sandvine Customer Support Account....................................................................................28
3.3.2 Downloading Tarballs from Sandvine Customer Support.............................................................................28
3.3.3 Using Tarballs...............................................................................................................................................29
3.3.4 Command Line Options for svupdate...........................................................................................................29
3.4 Incompatible Packages.......................................................................................................................................30
4 Protocols.....................................................................................................................................................................33
4.1 Protocols Overview.............................................................................................................................................34
4.1.1 Traffic classifications (OSI Model)................................................................................................................34
4.1.2 Multi-protocol Applications...........................................................................................................................34
4.1.3 Clients..........................................................................................................................................................35
4.1.4 Voice-over-IP (VoIP).....................................................................................................................................35
4.1.5 Additional Notes...........................................................................................................................................35
4.2 Protocol Keywords..............................................................................................................................................39
4.2.1 Analyzers......................................................................................................................................................39
4.2.2 Peer-to-Peer (P2P).......................................................................................................................................40
4.2.3 Peercasting..................................................................................................................................................43
4.2.4 Anonymity.....................................................................................................................................................45
4.2.5 News Groups................................................................................................................................................45
4.2.6 Web Browsing..............................................................................................................................................45
4.2.7 Instant Messaging........................................................................................................................................48
4.2.8 Email.............................................................................................................................................................51
4.2.9 Database......................................................................................................................................................52
4.2.10 Streaming...................................................................................................................................................52
05-00070-B47
3
4 | Sandvine | TOC
4.2.11 Web Video..................................................................................................................................................61
4.2.12 Tunneling....................................................................................................................................................65
4.2.13 VoIP............................................................................................................................................................66
4.2.14 Remote Connectivity..................................................................................................................................71
4.2.15 Network Administration..............................................................................................................................71
4.2.16 File Access.................................................................................................................................................72
4.2.17 Network Storage.........................................................................................................................................72
4.2.18 Software Update.........................................................................................................................................75
4.2.19 Wireless......................................................................................................................................................76
4.2.20 Other Protocols..........................................................................................................................................76
4.2.21 User-Defined Protocols..............................................................................................................................77
4.2.22 Gaming.......................................................................................................................................................77
4.3 Application Types................................................................................................................................................81
4.3.1 Bulk transfer.................................................................................................................................................83
4.3.2 Email.............................................................................................................................................................83
4.3.3 Gaming.........................................................................................................................................................83
4.3.4 Miscellaneous...............................................................................................................................................86
4.3.5 Network Storage...........................................................................................................................................87
4.3.6 Peer to Peer.................................................................................................................................................88
4.3.7 Real-Time Communication...........................................................................................................................90
4.3.8 Real-Time Entertainment..............................................................................................................................92
4.3.9 Social Networking.........................................................................................................................................97
4.3.10 Tunneling....................................................................................................................................................97
4.3.11 Web Browsing.............................................................................................................................................98
5 Changed Protocol Names........................................................................................................................................101
6 Client Devices..........................................................................................................................................................103
6.1 Supported Client Devices..................................................................................................................................104
7 Protocol Changes.....................................................................................................................................................105
7.1 Protocol Changes..............................................................................................................................................106
8 Glossary...................................................................................................................................................................125
8.1 Glossary of Terms.............................................................................................................................................126
4
05-00070-B47
1
About this Document
The Loadable Traffic Identification Package (LTIP) guide is a point of reference to the release update. This is the 13.08.01 version
for the LTIP guide. The information added, modified, and deprecated in the LTIP guide is summarized in this table.
Updates
Section Updated
Document Issue Number
New protocols added
New Protocols on page 8
13.08.01
Changed protocols
Changed Protocols on page 11
13.08.01
Deprecated protocols
Deprecated Protocols on page 16
13.08.01
New analyzer added
WAP1 Analyzer on page 40
13.08.01
Note:
This table lists the delta between the current release and the previous release.
Conventions used
This table lists the documentation conventions used in this document.
Symbol
Description
...
Means in continuity. For example: User 1, User 2 ... User 15,
means from User 1 to User 15.
About this Document
6
05-00070-B47
2
About this Package
• "New Protocols" on page 8
• "Changed Protocols" on page 11
• "Deprecated Protocols" on page 16
• "Caveats" on page 16
• "Resolved Issues" on page 21
• "Compatibility Matrix" on page 21
About this Package
New Protocols
2.1 New Protocols
New protocols introduced in LTIP 13.08.01 are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Amazon Games Downloads
Blinkx
Imgur
LiveVault
Nexon Games Downloads
PC: Aion
PC: FireFall
Skout
SHAZAM
Snapchat
SoundCloud
SoundHound
Stage2Data
T freemium
WB Archive Instant
Yandex Disk
Zoosk
Reference
Description
Type
Amazon Games Downloads traffic accounts for games downloaded from the Amazon
website.
Ticket ID
reqst00391031
Recognized by
Amazon Games Downloads traffic is recognized by HTTP flows.
Traffic identification impact
Amazon Games Downloads traffic increases with the incoming HTTP requests.
Blinkx
Reference
Description
Type
Blinkx is a search engine for Internet video and audio content.
Ticket ID
reqst00397877
Recognized by
Blinkx traffic is recognized by HTTP flows.
Blinkx traffic increases with the incoming HTTP requests.
Imgur
Reference
Description
Type
Imgur is an image sharing site.
Ticket ID
reqst00400947
Recognized by
Imgur traffic is recognized by HTTP and SSL flows.
Imgur traffic increases with the incoming HTTP and SSL requests.
8
05-00070-B47
About this Package
New Protocols
LiveVault
Reference
Description
Type
LiveVault is a cloud-based storage service.
Ticket ID
reqst00389890
Recognized by
LiveVault traffic is recognized by SSL flows.
LiveVault traffic increases with the incoming SSL requests.
Reference
Description
Type
Nexon Games Downloads is a protocol for the flows related to game downloads from the
nexon web site.
Ticket ID
reqst00401247
Recognized by
Nexon Games Downloads traffic is recognized by HTTP flows.
Nexon Games Downloads traffic increases with the incoming HTTP requests.
PC: Aion
Reference
Description
Type
PC: Aion is an online PC-based game.
Ticket ID
reqst00401974
Recognized by
PC: Aion traffic is recognized by HTTP and TCP flows.
PC: Aion traffic increases and HTTP and TCP traffic decreases.
PC: FireFall
Reference
Description
Type
PC: FireFall is an online PC-based game.
Ticket ID
reqst00401972
Recognized by
PC: FireFall traffic is recognized by HTTP and UDP flows.
PC: FireFall traffic increases and HTTP and UDP traffic decreases.
Skout
Reference
Description
Type
Skout is a social networking application available for iOS, Android, and PC platforms.
Ticket ID
reqst00397767
Recognized by
Skout traffic is recognized by HTTP and SSL flows.
Skout traffic increases with the incoming HTTP and SSL requests.
SHAZAM
Reference
Description
Type
SHAZAM is a music identification and sharing service.
05-00070-B47
9
About this Package
New Protocols
Ticket ID
reqst00397745
Recognized by
SHAZAM traffic is recognized by HTTP and SSL flows.
SHAZAM traffic increases with the incoming HTTP and SSL requests.
Snapchat
Reference
Description
Type
Snapchat is a photo messaging application.
Ticket ID
reqst00396169
Recognized by
Snapchat traffic is recognized by SSL flows.
Snapchat traffic increases with the incoming SSL requests.
SoundCloud
Reference
Description
Type
SoundCloud is an audio distribution platform that enables users to upload, record, and
promote content.
Ticket ID
reqst00398331
Recognized by
SoundCloud traffic is recognized by HTTP and SSL flows.
SoundCloud traffic increases with the incoming HTTP and SSL requests.
SoundHound
Reference
Description
Type
SoundHound is an an audio distribution platform.
Ticket ID
reqst00398332
Recognized by
SoundHound traffic is recognized by HTTP and SSL flows.
SoundHound traffic increases with the incoming HTTP and SSL requests.
Stage2Data
Reference
Description
Type
Stage2Data is a cloud-based storage service.
Ticket ID
reqst00389536
Recognized by
Stage2Data traffic is recognized by SSL flows.
Stage2Data traffic increases with the incoming SSL requests.
T freemium
Reference
Description
Type
T freemium is a premium video-on-demand service provided by SK Telecom.
Ticket ID
reqst00400586
Recognized by
T freemium traffic is recognized by HTTP flows.
T freemium traffic increases with the incoming HTTP requests.
10
05-00070-B47
About this Package
Changed Protocols
WB Archive Instant
Reference
Description
Type
WB Archive Instant is a streaming application for old movies, etc.
Ticket ID
reqst00389432
Recognized by
WB Archive Instant traffic is recognized by HTTP flows.
WB Archive Instant traffic increases with the incoming HTTP requests.
Yandex Disk
Reference
Description
Type
Yandex Disk is a network storage service provided by Yandex.
Ticket ID
reqst00400283
Recognized by
Yandex Disk traffic is recognized by SSL flows.
Yandex Disk traffic increases with the incoming SSL requests.
Zoosk
Reference
Description
Type
Zoosk is a social network with online dating service that integrates with other social
networks.
Ticket ID
reqst00401970
Recognized by
Zoosk traffic is recognized by SSL flows.
Zoosk traffic increases and SSL traffic decreases.
2.2 Changed Protocols
Changed protcols in LTIP 13.08.01 are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Aol. On
BitTorrent UTP
Daum TV Pot Live
deposit files
Facebook
Fring
Google Drive
Google Talk
iTunes
iTunes Media Download
Nate
NATE hoppin
OOYALA
Sina UC
T store VOD
Tango
Trion Worlds Games Downloads
tving
Wedisk Streaming
YouTube Live
05-00070-B47
11
About this Package
Changed Protocols
Aol. On
Reference
Description
Type
Aol. On is a video-sharing site that provides streaming and uploading of video content.
Ticket ID
reqst00400965
Recognized by
Aol. On traffic is recognized by HTTP flows.
Aol. On traffic increases and 5min traffic decreases accordingly.
Reason for change
Some Aol. On traffic was identified as 5min traffic.
BitTorrent UTP
Reference
Description
Type
BitTorrent UTP is an open UDP-based variant of the BitTorrent peer-to-peer file sharing
protocol intended to mitigate poor latency and other congestion control issues found in
conventional BitTorrent over TCP, while providing reliable, ordered delivery.
Ticket ID
reqst00401800
Recognized by
BitTorrent UTP traffic is recognized by UDP flows.
UDP traffic decreases and BitTorrent UTP traffic increases with the bytes coming from UDP.
Reason for change
Recognition added for missing BitTorrent UTP signature.
Daum TV Pot Live
Reference
Description
Type
Daum TV Pot Live is a live streaming service.
Ticket ID
reqst00400350
Recognized by
Daum TV Pot Live traffic is recognized by HTTP flows.
Daum TV Pot Live traffic increases with the incoming HTTP requests.
Reason for change
Recognition added for Daum TV Pot Live traffic on iPhone.
deposit files
Reference
Description
Type
deposit files is a cloud-based storage service.
Ticket ID
reqst00385754
Recognized by
deposit files is recognized by FTP Data and HTTP flows.
deposit files traffic increases with the incoming FTP Data and HTTP requests.
Reason for change
Recognition added for FTP uploads. New policy keyword "depositfiles_control" added.
Facebook
Reference
Description
Type
Facebook is a social networking website.
Ticket ID
reqst00402910
Recognized by
Facebook traffic is recognized by TCP flows.
Facebook traffic increases with the bytes coming from TCP.
12
05-00070-B47
About this Package
Changed Protocols
Reason for change
Recognition added for flows from older Java operating system based smartphones using
Snaptu platform for running Facebook.
Fring
Reference
Description
Type
Fring is a mobile VoIP application.
Ticket ID
reqst00400770
Recognized by
Fring traffic is recognized by UDP flows.
Fring Voice traffic increases with the bytes coming from Fring.
Reason for change
Fring Voice traffic was being recognized as Fring.
Google Drive
Reference
Description
Type
Google Drive is a network storage application.
Ticket ID
reqst00403128
Recognized by
Google Drive traffic is recognized by SSL flows.
Google Drive traffic increases with the bytes coming from SSL.
Reason for change
Internal testing revealed new SSL flows.
Google Talk
Reference
Description
Type
Google Talk is an instant messaging application.
Ticket ID
reqst00393043
Recognized by
Google Talk traffic is recognized by HTTP flows; subsequent flows are tracked.
Google Talk traffic decreases as it identified all STUN flows with specific attributes. These
STUN flows are now identified as Google Talk FTP.
Reason for change
Google Talk FTP traffic was identified as Google Talk.
iTunes
Reference
Description
Type
iTunes is Apple's online marketplace for digital audio and video.
Ticket ID
reqst00398941
Recognized by
iTunes is recognized using a pattern in the SSL server certificate information.
iTunes traffic increases slightly with bytes coming from SSL.
Reason for change
Reference
Description
Type
iTunes Media Download allows users to play, download, and organize digital audio and
video on any device platform.
05-00070-B47
13
About this Package
Changed Protocols
Ticket ID
reqst00404003
Recognized by
iTunes Media Download is recognized using a combination of host and cookie value in the
HTTP header.
iTunes Media Download traffic increases with bytes coming from iTunes Streaming.
Reason for change
Some iTunes Media Download flows were recognized as iTunes Streaming.
Nate
Reference
Description
Type
Nate is a portal service.
Ticket ID
reqst00401780
Recognized by
Nate is recognized by HTTP flows.
Nate traffic increases with the incoming HTTP requests.
Reason for change
Included Nate Map traffic in Nate protocol.
NATE hoppin
Reference
Description
Type
NATE hoppin is a Korean streaming video service.
Ticket ID
reqst00400354
Recognized by
NATE hoppin is recognized by HTTP flows.
NATE hoppin VOD traffic increases with the incoming HTTP requests. NATE hoppin VOD
traffic is divided into hoppinnate_vod and hoppinnate_mediadownload.
Reason for change
Recognition added for missing VOD traffic. Separated streaming and downloading by
subprotocols. New policy keywords "hoppinnate_vod" and "hoppinnate_mediadownload"
added.
OOYALA
Reference
Description
Type
OOYALA is an online video provider.
Ticket ID
reqst00401020
Recognized by
OOYALA is recognized by HTTP flows.
OOYALA traffic increases with a matching decrease in HTTP traffic.
Reason for change
Internal testing revealed new flows.
Sina UC
Reference
Description
Type
Sina UC is an instant messaging client.
Ticket ID
reqst00398187
Recognized by
Sina UC is recognized by HTTP flows.
Sina UC traffic decreases slightly and HTTP traffic increases accordingly.
Reason for change
A small amount of HTTP traffic was identified as Sina UC.
14
05-00070-B47
About this Package
Changed Protocols
T store VOD
Reference
Description
Type
T store VOD is a video-on-demand service from T store owned by SK Planet.
Ticket ID
reqst00400584
Recognized by
T store VOD traffic is recognized by HTTP flows.
T store VOD traffic increases with the incoming HTTP requests.
Reason for change
Internal testing revealed new flows.
Tango
Reference
Description
Type
Tango is a popular VoIP application found on Android phones, iPhones, and desktop
computers.
Ticket ID
reqst00400349
Recognized by
Tango traffic is recognized by UDP flows.
Tango traffic increases with the incoming UDP requests.
Reason for change
New policy keyword "tango_voice" added.
Reference
Description
Type
Trion World is a publisher and developer of premium online games.
Ticket ID
reqst00401240
Recognized by
Trion Worlds Games Downloads traffic is recognized by HTTP flows.
Trion Worlds Games Downloads traffic increases with the incoming HTTP requests.
Reason for change
Added recognition for RIFT game download.
tving
Reference
Description
Type
tving is a Korean online video provider.
Ticket ID
reqst00396931
Recognized by
tving traffic is recognized by RTMP Encrypted flows.
tving traffic increases with bytes coming from RTMP Encrypted.
Reason for change
Wedisk Streaming
Reference
Description
Type
Wedisk Streaming is an online streaming service.
Ticket ID
reqst00400772
Recognized by
Wedisk Streaming traffic is recognized by the HTTP initial header and then using a tracker
based on the client and server IP address.
Wedisk Streaming traffic increases and MPEG traffic decreases accordingly.
05-00070-B47
15
About this Package
Deprecated Protocols
Reason for change
Added recognition for Wedisk Streaming HTTP traffic. New policy keyword
"wediskstreaming_http_control" added.
YouTube Live
Reference
Description
Type
YouTube Live is a subsidiary of YouTube designed to stream video of live events.
Ticket ID
reqst00400382
Recognized by
YouTube Live is recognized by HTTP flows.
YouTube Live traffic increases and HTTP decreases accordingly.
Reason for change
YouTube Live traffic is now recognized separately from regular YouTube traffic.
2.3 Deprecated Protocols
Deprecated protocols are no longer in use and the system will not recognize or report the traffic for these protocols. Protocols
deprecated in 13.08.01 are:
HotDisk
Reference
Description
Type
An online storage service.
Ticket ID
reqst00395784
Reason for deprecating
The hotdisk.co.kr website now points to netfolder.co.kr. All traffic
previously identified as HotDisk will now be identified as
NETFOLDER.
Note:
Sandvine recommends reviewing any existing SandScript and removing the associated keywords. Even though the review
is not mandatory, and will cause no negative impact to the platform, it is recommended to remove these protocols as a
general house-keeping exercise to reduce any potential for an error in the future.
2.4 Caveats
Caveats are the known issues.
PTS might stop inspecting traffic under high SIP traffic
Caveat
Description
Summary
PTS might stop inspecting traffic if LTIP 13.04.XX and above package is downgraded to any LTIP
version between 12.12.XX to 13.03.XX under high SIP traffic.
Ticket ID
Not Applicable
Identified in
LTIP 13.04.01
Impact
The PTS system might be interrupted.
Workaround
Stop PTSD before downgrading the LTIP, and start it after the downgrade is complete.
16
05-00070-B47
About this Package
Caveats
Caveat
Description
Stop and start commands are:
0004.svptsd.sh stop
0004.svptsd.sh start
Missing MBC VOD traffic on RTMP
Caveat
Description
Summary
MBC VOD is an online streaming video service. The first flow from MBC VOD is recognized as
RTMP, and later flows are recognized as MBC VOD.
Ticket ID
reqst00381016
Identified in
LTIP 13.04.02
Impact
None
Workaround
None
Error in counting picture messages transmitted from Windows phone
Caveat
Description
Summary
SandScript counts twice for every picture messages transmitted from Window phone.
This behavior is specific to Windows phones only.
Ticket ID
reqst00386951
Identified in
LTIP 13.04.02
Impact
SandScript action Flow.Application.IM.Tx.MultimediaMessages increases twice instead of once
for every single picture message transmitted. Hence the measurements for multimedia messages
vary the actual value.
Workaround
None
Messages received on an Android phone are considered as messages transmitted
Caveat
Description
Summary
When text messages are sent from an Android phone to a Windows phone, the text messages
received on an Android phone are considered as messages transmitted. Hence, SandScript action
Flow.Application.IM.Tx.Messages is incremented instead of Flow.Application.IM.Rx.Messages.
Ticket ID
reqst00386952
Identified in
LTIP 13.04.02
Impact
Measurement for these messages varies the actual value as the received text messages are
counted as transmitted messages.
Workaround
None
Incorrect identity for myTV RTSP or RTP traffic flows
Caveat
Description
Summary
Traffic flows for myTV RTSP or RTP are recognized as RTSP data traffic.
Ticket ID
•
reqst00386406
•
reqst00386404
05-00070-B47
17
About this Package
Caveats
Caveat
Description
Identified in
LTIP 13.04.02
Impact
For these flows to be recognized as myTV RTSP or RTP, some changes are required in PTS.
Workaround
None
Error message on protocol upgrade or downgrade
Caveat
Description
Summary
During the downgrade or upgrade of LTIP, an error message appears
"Protocol already installed'.
This error does not cause any protocol recognition discrepancies, and this issue will be corrected
in the upcoming LTIP release.
Ticket ID
•
reqst00381046
•
reqst00386404
Identified in
LTIP 13.02.01
Impact
None
Workaround
None
Upgrade or downgrade : No stats bin allocated error
Caveat
Description
Summary
In a scenario where PTS is loaded with LTIP 12.12 and PTSM is restarted, and LTIP is then
downgraded to 12.10 or earlier, this svlog error message appears:
An unexpected error has occurred:
`ProcessAction: No stats bin allocated for transport mcd code.
This error message does not affect traffic recognition or reporting, and this error does not appear
during normal upgrades or downgrades.
Ticket ID
•
reqst00372042
•
reqst00385645
Identified in
LTIP 12.11.01
Impact
None
Workaround
None
Network Demographics Server does not report about Malformed DNS
Caveat
Description
Summary
Support and Report functions for Malformed DNS are stopped from LTIP 12.08.01 onward.
Ticket ID
reqst00356009
Identified in
LTIP 12.08.01
Impact
Malformed DNS queries pass through PTS during reporting.
Workaround
Using LTIP 12.07 or earlier will not have this issue.
18
05-00070-B47
About this Package
Caveats
ICQ flows from ICQ server are recognized as HTTP
Caveat
Description
Summary
ICQ Messenger uses these methods for sending files between clients:
• Direct transfer—Transfers files only when both the clients are online.
• Offline file transfer —Uploads file to a server and sends a notification link to the receiving client
when it comes online.
Ticket ID
reqst00327035
Identified in
LTIP 12.05.01
Impact
In ICQ offline file transfer mode, the receiver download flows are marked as HTTP.
Workaround
None
Ficall timeout value is 20 seconds by default
Caveat
Description
Summary
Ficall traffic is identified only when calls are made within 20 seconds after logging into the
application. The timeout value is configurable.
Ticket ID
reqst00236266
Identified in
LTIP 10.07.01
Impact
Ficall is not identified if the call time exceeds the default timeout value (20 seconds).
Workaround
In order to extend the initial timeout for Ficall traffic, set this variable in
/usr/local/sandvine/etc/rc.conf on PTS:
ficallControlFlowTimeout=x
Where x is the required timeout value in seconds.
Ficall traffic is identified for two hours only as a default behavior
Caveat
Description
Summary
Ficall traffic is identified for two hours only by default; this traffic identification period is configurable.
Ticket ID
reqst00236266
Identified in
LTIP 10.07.01
Impact
Traffic for Ficall (audio or video) is not identified after two hours.
Workaround
In order to extend the initial timeout for Ficall, set this variable in
/usr/local/sandvine/etc/rc.conf on PTS:
ficallFlowTimeout=x
Where x is required timeout value in seconds.
SandScript action attempts to apply heavy shaping or blocking to BitTorrent traffic degrade BitTorrent recognition
Caveat
Description
Summary
SandScript actions attempt to shape or block BitTorrent traffic causing the flows to adapt such
that the recognition of BitTorrent degrades. If this happens, the PTS does not apply shape or block
SandScript actions to BitTorrent flows.
Ticket ID
reqst00213567
Identified in
•
•
PTS 5.51.11
PTS 5.40.11
05-00070-B47
19
About this Package
Caveats
Caveat
Description
Impact
Decrease in the amount of BitTorrent traffic reported due the shape or block SandScript actions,
and an approximately equal increase in the Other TCP traffic.
Workaround
None
Rapidly reloading SandScripts or rapidly changing LTIP can lead to reload failures
Caveat
Description
Summary
Loading LTIP can fail under these conditions:
• Changing LTIP multiple times over a short interval (10 minutes).
•
Rapidly reloading PTS with a SandScript action that includes user-defined regexes (regular expressions)
or disabled protocols.
The error message is:
Feb 23 9:22:40 PTS14521-3 ptsd[2-4,7,8,10]: svlog01;0000006467;0000006348:Failed
to load protocol library
`/usr/local/sandvine/lib/protocols/libptsd_protocols-9.09.0132.so`
Ticket ID
Not Applicable
Identified in
PTS 5.60.00
Impact
This affects the PTS14000, as the memory disk space to store the libraries is limited.
When a protocol library is switched, the older library is held open until all of the old flows using the library
have finished inspection.
If the protocol library is swapped several times, and older flows live for a long period of time, then the disk
space can be filled.
Workaround
Wait for a period of time to let the older flows expire. If possible, remove the SandScript action that affects
protocol recognition to stop the protocol libraries from swapping.
No differentiation between Skype PC to PC calls and Skype chat
Caveat
Description
Summary
PTS is unable to differentiate Skype PC to PC calls and Skype online chat functionality.
Ticket ID
reqst00189803
Identified in
PTS 5.40.10
Impact
All Skype traffic appears as Skype in reports.
Workaround
None
Certain flows may not be diverted completely
Caveat
Description
Summary
When flows are diverted based on protocol, the first packet of the flow might not be diverted for
complex protocols like, Ares UDP and Thunder UDP. This occurs because, recognition of these
protocols require two or more packets to be inspected by the PTS.
Ticket ID
reqst00184448
Identified in
PTS 5.40.08
Impact
Protocol-based divert function is incomplete.
Workaround
None
20
05-00070-B47
About this Package
Resolved Issues
2.5 Resolved Issues
There are no resolved issues in this release.
2.6 Compatibility Matrix
The functionality introduced in this LTIP release is available only on these PTS releases:
PTS Release Number
Loadable Traffic Identification Package
6.20.03
Full Support
6.20.02
Full Support
6.20.01
Full Support
6.20.00
Full Support
6.15.04
Full Support
6.15.03
Full Support
6.15.02
Full Support
6.15.01
Full Support
6.15.00_2
Full Support
6.15.00
Full Support
6.10.00
Full Support
6.00.00_2
Full Support
6.00.00_1
Full Support
6.00.00
Full Support
5.60.10
Full Support
5.60.11_2
Full Support
5.60.11
Full Support
5.60.09
Full Support
5.60.08_2
Full Support
5.60.08_1
Full Support
5.60.08
Full Support
5.60.07
Full Support
05-00070-B47
21
About this Package
Compatibility Matrix
22
05-00070-B47
3
Install and Update
• "Installation Overview" on page 24
• "Installing the Loadable Traffic Identification Package with Internet Access " on page 25
• "For Elements without Internet Access" on page 28
• "Incompatible Packages" on page 30
Install and Update
Installation Overview
3.1 Installation Overview
Install the Loadable Traffic Identification Package (LTIP) on the PTS and the SPB. The installation procedure is the same for
both the elements.
Note:
You can install LTIP with or without the Internet access.
When you upgrade to the latest PTS release, the latest released protocol package is automatically fetched and installed. You
must upgrade the SPB as well in order to see the new protocols in the NDS reports.
See the PTS Release Notes for more information about upgrading the PTS.
If you downgrade a PTS release, the released protocol package compatible with the PTS release is automatically fetched and
installed. You must downgrade the SPB as well in order to see protocols in NDS report.
Installation Packages
File name
Installed on PTS
Installed on SPB
svmcdtext-BSD-13.08.0010
yes
yes
svprotocols-BSD-13.08.1510
yes
yes
svprotocols-version-BSD-13.08.1510
no
yes
3.1.1 Impact to Service
You can update the LTIP at any time with no expected impact to traffic. However, best practices suggest that upgrading during
a regularly scheduled maintenance window reduces the impact of any unexpected interruption. It can take approximately 15
minutes to download latest LTIP version. Installation on a single PTS takes approximately 10 minutes. Contact Sandvine Customer
Support or its authorized partner if you cannot download the desired LTIP version.
Note:
Traffic is temporarily shunted during the installation of a new protocols package. This means that you should verify that
SandScript polices applied to this traffic is active.
During the installation, new and previous recognizers are kept in system memory. Previous flows continue to use the previous
recognizers, while new flows use the new recognizers. When all old flows are recognized, or have timed out, the old recognizers
are unloaded. During this transition period, no out-of-memory issue is expected.
Sandvine intends to preserve SandScript keywords for protocols across package releases. Any changes to the protocol keywords
are reported as changed protocols. Installing a new package has no impact on customers using your services.
Note:
Run svupdate to downgrade your deployment to an earlier LTIP version. This automatically performs the downgrade
based on the options you select with the svupdate command.
24
05-00070-B47
Install and Update
Installing the Loadable Traffic Identification Package with Internet Access
3.2 Installing the Loadable Traffic Identification
Package with Internet Access
You can upgrade the Loadable Traffic Identification Package (LTIP) anytime. However, Sandvine recommends that you upgrade
during a pre-planned maintenance window.
Install the LTIP on the SPB first, then on the PTS. Make sure you install the same LTIP on both the platforms.
1.
Run this command and record the current Loadable Traffic Identification Package, and package number:
cli> show system version
2.
Perform svupdate.
If you get this message, enter y to update to a new version of svupdate.
***
There is a newer version of svupdate available: X.XX.XXXX.
You must upgrade that first before continuing with the upgrade.
***
Upgrade (y/q)?
Once this update is completed, you can continue with the normal LTIP installation process by performing svupdate.
3.
Select GENERAL from the Family menu.
4.
Select Protocols from the Product menu.
The svupdate command lists the available packages and mentions whether they are supported or unsupported with the
current version of the PTS.
See Incompatible Packages on page 30 for additional infomation on incompatible packages and their impact.
For example:
Release
------16. 11.02.01
17. 11.03.01
18. 11.03.02
19 11.04.01
20. 11.05.01
21. 11.06.01
22. 11.07.01
23. 11.09.01
24. 11.10.01
25. 11.11.01
26. 11.12.01
27. 12.01.01
28. 12.02.01
29. 12.03.01
30. 12.04.01
31. 12.05.01
32. 12.06.01
33. 12.07.01
34. 12.08.01
35. 12.09.01
36. 12.10.01
37. 12.11.01
38. 12.12.01
39. 13.01.01
40. 13.02.01
- February, 2011 (Unsupported)
- March, 2011 (Unsupported)
- March, 2011 (Unsupported)
- April, 2011 (Unsupported)
- May, 2011 (Unsupported)
- June, 2011 (Unsupported)
- July, 2011 (Unsupported)
- September, 2011 (Unsupported)
- October, 2011 (Unsupported)
- November, 2011
- December, 2011
- January, 2012
<CA> - February, 2012
- March, 2012
- April, 2012
- May, 2012
- June, 2012
- July, 2012
- August, 2012
- September, 2012
- October, 2012
- November, 2012
- December, 2012
- January, 2013
- February, 2013
05-00070-B47
25
Install and Update
41.
42.
43.
44.
45.
46.
47
13.02.02
13.03.01
13.04.02
13.05.01
13.06.02
13.07.01
13.08.01
-
February, 2013
March, 2013
April, 2013
May, 2013
June, 2013
July, 2013
August, 2013
Select (b/q 1-47) :
5.
Select a LTIP to install from the Product menu.
For example:
Select (b/q 1-47) : 47
Selected: <13.08.01 - August, 2013 >
The Operation menu appears:
Operation
--------1. Install Images
2. Install Images, Fetch Documentation
3. Fetch Change Images
4. Fetch Documentation
5. List Images
6. List Documentation
7. Compare Images
8. Fetch All Images
9. Compatibility
10. Exit
6.
Select Compatibility from the Operation menu to verify if the packages are compatible.
Sample PTS Screen:
5.40.10 <OBSOLETE>
5.40.11 <OBSOLETE>
6.00.00(Currently Installed Version)
The Operation menu appears:
Operation
--------1. Install Images
2. Install Images, Fetch Documentation
3. Fetch Change Images
4. Fetch Documentation
5. List Images
6. List Documentation
7. Compare Images
8. Fetch All Images
9. Compatibility
10. Exit
7.
Select the Install Images from the Operation menu to continue with installation.
Note:
If you get this message during LTIP installation on a SPB machine, enter yes, as it is recommended to perform a
health checkup to ensure that the SPB machine is in good condition.
26
05-00070-B47
Install and Update
It is recommended that you verify your system state by using the health check
process. Type 'yes' to continue with health check, 'no' to skip.
Run health check? [yes/no, default to no in 30 seconds]
Sample PTS screen information:
-----------------------------------------------------------------------------Package /d2/tmp/svupdate/svmcdtext-BSD-13.08.0010
downloaded
Package /d2/tmp/svupdate/svprotocols-BSD-13.08.1510 downloaded
-----------------------------------------------------------------------------Sandvine MCD code to text mapping
Copyright (c) 2002-2013 Sandvine Incorporated. All rights reserved.
INSTALLED
Sandvine PTS Protocol Definitions
INSTALLED
-----------------------------------------------------------------------------Validate Install Summary
-----------------------exists
svmcdtext-BSD
exists
svprotocols-BSD
Sample SPB screen information
-----------------------------------------------------------------------------Package /var/tmp/svupdate/svmcdtext-BSD-13.08.0010 downloaded
Package /var/tmp/svupdate/svprotocols-BSD-13.08.1510 downloaded
Package /var/tmp/svupdate/svprotocols-version-BSD-13.08.1510 downloaded
-----------------------------------------------------------------------------Sandvine MCD code to text mapping
INSTALLED
Sandvine PTS Protocol Definitions
INSTALLED
Sandvine PTS Protocol Version
INSTALLED svprotocols-version-BSD-13.08.1510
-----------------------------------------------------------------------------Validate Install Summary
-----------------------exists
svmcdtext-BSD
exists
svprotocols-version-BSD
exists
svprotocols-version-BSD
8.
Run this command to verify that the desired LTIP is installed.
cli> show system version
05-00070-B47
27
Install and Update
For Elements without Internet Access
3.3 For Elements without Internet Access
In order to upgrade an element without internet access, you need to download the install files (tarball) from the Sandvine Customer
Support website from a machine with an internet access, and then perform upgrade.
Tarball is a standard file format (example tar, pax, cpio, zip, jar, and ar) which contains install files in a compressed form. In order
to perform upgrade using tarball ensure that an online machine and an offline element are on the same network.
See
To
Requesting a Sandvine Customer Support Account on page
28
Obtain Sandvine Support Account.
Downloading Tarballs from Sandvine Customer Support on
page 28
Download the release tarball.
3.3.1 Requesting a Sandvine Customer Support Account
Sandvine Customer Support Account gives you an access to software releases, product documentation, and other support.
1.
Go to http://support.sandvine.com.
2.
Enter your email address in the Don't have an account? dialog, and then click Submit.
You will receive an email acknowledgment shortly after confirming your account activation. In some cases account activation
can take as long as 2 business days.
3.3.2 Downloading Tarballs from Sandvine Customer Support
In order to upgrade Sandvine elements that are offline, download a tarball using this procedure:
Pre-requisite:
You must have an active Sandvine Customer Support Account. See Requesting a Sandvine Customer Support
Account on page 28.
1.
Log in to the Sandvine Customer Support at https://support.sandvine.com
2.
To access the release link for the first time:
a.
Click Update Portal User Settings.
b.
Enter a password in the FTP Password dialog.
c.
Enter the same password into the Verify FTP Password dialog.
It can take up-to 10 minutes to activate your password.
3.
Click Document/Release.
4.
Enter your user name and FTP password into the Authentication Required dialog.
28
05-00070-B47
Install and Update
For Elements without Internet Access
The file directory opens.
5.
Select the Product directory.
6.
Select the model, and then the software version of the tarball you require.
7.
Click on a tarball file to download it.
3.3.3 Using Tarballs
Once the tarball in downloaded on an online machine, you need to transfer it to the an offline element, to upgrade it.
The procedure to transfer tarball from an online machine to an offline element is:
1.
Download the tarball. See Downloading Tarballs from Sandvine Customer Support on page 28.
2.
Copy the tarball to /d2/tmp on an offline element.
To transfer a tarball from an online machine to an offline element:
•
Use the scp command on online machine to copy the tarball on to an offline element.
Note:
scp is a remote file copy program that copies files between hosts on a network.
•
3.
Use the fetch command on an offline element to transfer files from online machine.
Verify that the file is transferred to the offline element and that it exists in /d2/tmp.
Tip:
For svupdate 6.15 or higher, you can install the tarball using the command svupdate -I <tarball> where
<tarball> is the file downloaded in step 1. See also Command Line Options for svupdate on page 29.
3.3.4 Command Line Options for svupdate
Sandvine has developed the svupdate script to install or upgrade Sandvine product packages. This script encapsulates only
standard Linux commands. Enter svupdate -h to display the list of options.
Option
Description
-C
Compares the available packages with those that are installed on the system and provides a list of
what is currently installed and what you need to install.
This option shows what will happen if you upgrade the element to the selected release without taking
any action. It is the equivalent to selecting Compare Image from the interactive mode menu.
-d
Fetch documents only or fetch documents and install images. You can choose one of these options.
The available options include:
-f
•
1 = documents in addition to installing images
•
2 = documents only
Fetches packages but does not install them. The available options include:
05-00070-B47
29
Install and Update
Incompatible Packages
Option
Description
•
1 = places all modified packages in the same root directory. Does not maintain the FTP directory
hierarchy.
•
2 = places all modified packages in the same root directory while maintaining their directory
hierarchy.
•
3 = places all packages for the selected version in the same root directory while maintaining their
directory hierarchy.
The root directory is determined by the environment variable $TMPDIR. If this variable is not set, the
default is /d2/tmp
-F value
Family of products. This option is used in conjunction with the -V and -P options to provide a method
to specify an exact release from the command line. The value that is specified must match a specific
value located in the Family sub-menu.
-l
Selects the latest release automatically. Use this option in conjunction with the -P and -F options.
-L
Lists the packages that are available for the selected release. You can choose one of these options.
The available options include:
•
1=list packages with their directory hierarchy
•
2=list packages without their directory hierarchy
The -L 2 option is equivalent to selecting List Images from the interactive mode menu.
-o
Operating system override if different from uname. This option lets you specify which packages to
download for the specified Operating System version, instead of the current devices. You can use
this when downloading packages for a different system.
-p value
Identifies the clear text password for a non-interactive logon to the FTP server.
-P value
Identifies the specific product to use. Use this option in conjunction with the -V and -F options to
specify an exact release from the command line. The release specified must match an entry on the
Product sub-menu.
-R
Automatically reboot after an upgrade (if required) rather than prompting the user to reboot.
-s
Runs svupdate in silent mode, which outputs as little information as possible.
-u value
Identifies the clear-text user name for a non-interactive logon to the FTP server.
-U value
Identifies the URI to fetch files. This allows you to specify a non-standard URI from which to fetch files.
This option is incompatible with the -u and -p options.
-V value
Identifies the specific version to get. Use this option in conjunction with the -P and -F options to
specify an exact release from the command line. The version specified must match an entry on the
Release sub-menu.
-Z
Upgrade licenses. Check for product license upgrades and then exit.
3.4 Incompatible Packages
It is recommended to install the packages compatible with the currently installed PTS.
Incompatible packages are flagged as “Unsupported”.
30
05-00070-B47
Install and Update
Sample PTS screen:
Release
------1. 9.09.0132 - September, 2009 (Unsupported)
2. 9.12.0205 - December, 2009 (Unsupported)
This warning appears if you select an incompatible package to install:
WARNING: Protocol Pack 9.12.0205 not compatible with installed PTS ()
05-00070-B47
31
Install and Update
32
05-00070-B47
4
Protocols
• "Protocols Overview" on page 34
• "Protocol Keywords" on page 39
• "Application Types" on page 81
Protocols
Protocols Overview
4.1 Protocols Overview
Sandvine continuously monitors new applications as they are released and adopted in market, to allow the refinement of future
Loadable Traffic Identification Package (LTIP) releases, to support new and emerging protocols.
Customer feedback about how prevalent new and unsupported protocols/applications are in the field, is an important consideration
in how we prioritize items for new releases.
When implementing traffic recognition, the top priority is accuracy, to prevent false positives (incorrectly identifying traffic) and
limit false negatives (failing to identify traffic). Management SandScripts assume that identifications are accurate, and if they are
not, can result in severe consequences.
Sandvine uses the most precise recognition techniques available, reducing false positives to near-zero. And, by coupling multiple
techniques together, we are able to practically eliminate false negatives.
This approach allows Sandvine to maintain the most accurate recognition in the industry, giving customers the freedom to apply
management SandScripts confidently.
4.1.1 Traffic classifications (OSI Model)
The Open Systems Interconnection (OSI) model is a way of sub-dividing a communications system into smaller parts called
layers. Traffic classification typically extends across several OSI layers.
While most identification is performed at a lower level than the application, in some cases it is possible to further refine identification
to indicate the particular client or application in use, or the website of origin.
For example, “MySpace” traffic is largely HTTP, although it is reported based on the content provider - in this case MySpace.
Consider instant messaging clients that use the Jabber protocol as another example. In some cases, like Google Talk, it is
possible to identify the client and report on it, but not in all cases. Similarly, VoIP providers are often identified individually even
if they all use SIP to enable communications.
Key definitions:
•
application/client: software running on a subscriber's PC. For this guide, "application" can be thought of as being the same
as "client" (an application that accesses a remote service, typically a server or network).
•
protocol: a convention or standard that enables communication and data transfer between two or more endpoints. In computer
networks, different protocols exist at different layers of the OSI stack. For example, HTTP is built on top of TCP. For this
guide, "protocol" is used more generally to refer to OSI protocols, web providers, and applications/clients.
4.1.2 Multi-protocol Applications
Many software applications connect to a number of different networks using a range of protocols, such as peer-to-peer (P2P)
applications or instant messaging (IM) applications.
For example, the Pidgin client can use six different instant messaging protocols to connect to clients on these networks. In this
case, when it is not possible to identify the software application being used, traffic is counted against the underlying protocol.
Many P2P applications use several different mechanisms for file transfers, depending on network conditions. It is not uncommon
to encounter clients that use TCP, UDP, and even HTTP to facilitate file downloads. In this case, traffic is counted against the
application (the specific P2P application) only if/when it can be identified.
34
05-00070-B47
Protocols
Protocols Overview
4.1.3 Clients
Many different software clients and applications may use the same protocol. As a result, traffic may be logged against the protocol
and not specific clients.
For example, Azureus, BitComet, and, BitSpirit are all BitTorrent clients. Because it is rarely possible to identify which client is
used, traffic is logged against the underlying protocol (“BitTorrent” and its derivatives).
Online gaming traffic is similar. Often, many games from the same publisher or for a particular console rely on a common protocol.
Again, where a particular game or console cannot be identified, traffic is logged against the protocol.
For example, Diablo II, Starcraft, and Warcraft III all use Blizzard's Battle.net service to facilitate online play.
4.1.4 Voice-over-IP (VoIP)
Several techniques are used to gain maximum visibility of Voice-over-IP (VoIP) traffic (clients, applications, and protocols).
For instance, many proprietary VoIP applications are identifiable through the unique characteristics of their call traffic. In these
cases, traffic is reported based on protocol. While reporting by protocol is the best approach, extracting individual call data, such
as minutes and other data records, is often not possible.
If VoIP providers use accepted standards (SIP, for example), it is often possible to extract the “provider” name from the control
traffic associated with individual calls. The best reports for control traffic are “by provider” VoIP reports. Sandvine can extract call
data, such as minutes, from these standards-based calls.
Standards-based calls for which a provider is extractable, but for which the provider is unrecognized, are logged as having an
“unknown” provider. However; even with standards-based VoIP protocols, it is not always possible to extract provider information
from the call traffic. When this happens, traffic is logged on a protocol basis, typically as SIP or MGCP.
Sandvine updates the list of recognized VoIP providers regularly based on customer requests, and by pro-actively reviewing
“unknown provider” tables on PTS.
Review the /usr/local/sandvine/etc/rc.conf.default.providers file to view the list of recognized VoIP providers.
4.1.5 Additional Notes
Protocol recognition and some product specific notes.
4.1.5.1 iPhox
The only time iPhox is identified as iPhox rather than GizmoProject is for VoIP traffic.
These flows have a different User Agent for the SIP packets. Otherwise, the two clients are the same.
4.1.5.2 No Protocol Detail
There is a listing in Network Demographics reports called “No Protocol Detail”.
This classification is used for the collection of subscriber basic statistics (general bandwidth) and not for protocol-specific bandwidth.
“No Protocol Detail” does not have a keyword as no actions can be applied against it.
4.1.5.3 Missing Protocol Information
If “Missing Protocol Info” appears in a regular Network Bandwidth by Protocol report, there are statistics in the database that the
SPB is unable to associate with a protocol.
05-00070-B47
35
Protocols
Protocols Overview
This usually indicates that there are different LTIP versions installed on the SPB and the PTS servers that are logging to it.
4.1.5.4 Protocols Disabled by Default
The following protocols are disabled by default for better performance at the risk of reduced recognition.
To enable a protocol, add the protocol recognition variable to the rc.conf file and set to a value of “1”. To disable a protocol, set
the variable to “0”.
Protocol
Variable to enable
EarthStation 5 UDP
es5_inspect_quick
WinMX UDP
winmx_inspect_quick
4.1.5.5 DSCP Marking for Protocols
If an application has only UDP flows, then Differentiated Services Code Point (DSCP) marking based on protocol is possible.
However; if the application has only TCP flows or a mixture of TCP and UDP flows, DSCP marking based on protocol is not valid
and leads to connection reset.
4.1.5.6 Xunlei Web Thunder
To properly shape Xunlei Web Thunder traffic, increase the default UDP flow timeout.
A flow timeout of 25 seconds has proved most effective.
To increase the default flow timeout, enter these shell commands:
8210: sysctl svpts.timeouts.udp_end=25
14K: ppus
"sysctl svpts.timeouts.udp_end=25"
22K: ppus
24K: ppus
Alternatively you can add the following line to /etc/sysctl.conf.local and reboot the PTS:
svpts.timeout.udp_end=25
Note:
If this value is changed, UDP flows persist longer and consume more PTSM flows (approximately 2.5x when using a value
of 25 seconds). Check the number of free flows before changing the default flow timeout to make sure the system can
handle the additional number of flows. Run the show system resources CLI command to check the number of flows.
4.1.5.7 Kankan
Kankan uses part of the Thunder protocol to function. At this time, only the HTTP flows are shaped with the Kankan protocol.
In order to properly shape Kankan, Thunder must also be shaped.
4.1.5.8 Flash Get
Flash Get is a file download manager that provides a common user interface to manage file downloads using BitTorrent and
other HTTP file download protocols.
There are no unique flows attributed to the front end application. As a result, the PTS detects all Flash Get traffic as either
BitTorrent or HTTP traffic flows depending on how each particular file is downloaded.
36
05-00070-B47
Protocols
Protocols Overview
4.1.5.9 Vagaa
Vagaa is a P2P client that uses the eDonkey and BitTorrent protocols for file sharing.
The control flows are marked as:
•
Vagaa
•
eDonkey
•
eDonkey UDP
•
eDonkey encrypted UDP
•
BitTorrent
•
Namipan
All file download traffic is entirely reported as Namipan. All of these protocols must be managed in order to shape Vagaa traffic.
4.1.5.10 Korean Network Storage
The Korean Network Storage protocol tracks compiled traffic from sites such as:
•
AtomFile
•
BigFile
•
Clubnex,
•
DiyHard
•
Downs
•
Enppy
•
Exfile
•
Fdisk
•
File City
•
FileGuri
•
FileNori
•
Hidisk
•
Kdisk
•
MegaFile
•
Neodisk
•
Ondisk
•
PDBox
•
PDPop
•
SoDisk
•
Diskpop
•
Gonflie
•
Totodisk
•
Totorosa
•
UsaDisk
•
Wawadisk
•
Wedisk
05-00070-B47
37
Protocols
Protocols Overview
•
Alibaba
•
Cooldisk
•
Jjangfile
•
Sharebox
•
QDown
•
YesFile
•
SuperDown
•
Filei
•
Mfile
•
Zfile
•
Airfile
•
Tple
•
Dinofile
•
Filefarm
•
Multipotplus
•
Gaz
•
Clubfos
4.1.5.11 Yahoo Voice PC to Phone
Yahoo Voice uses a proprietary protocol for making a voice call recognized as ymsg_voice. When ymsg_voice is blocked, the
Yahoo client uses SIP/RTCP/RTP for the voice call. Therefore, blocking “ymsg_voice” alone or “sip_data” alone is not enough
to stop service, you must block both to prevent the call.
To block this service:
if protocol "sip_data" and provider "Yahoo Voice PC to Phone" then block
if protocol "ymsg_voice" then block
4.1.5.12 Yahoo Voice PC to PC
To block Yahoo Voice from PC to PC:
if protocol "ymsg_voice" then block
if protocol "sip_data" and
provider "Yahoo Voice PC to PC" then block
4.1.5.13 Peer Portal
Peer Portal is a music P2P application that is currently indistinguishable from Windows Media Player. Therefore all Peer Portal
traffic is logged as Windows Media Player in reports.
4.1.5.14 Boxee
If video traffic coming through Boxee is from a source, the PTS independently recognizes that traffic (such as YouTube) will be
marked as the source provider (YouTube).
If the video traffic comes from a source that is not independently recognized, it is reported as Boxee.
38
05-00070-B47
Protocols
Protocol Keywords
4.1.5.15 Gnutella (Asymmetric)
For Gnutella asymmetric detection, the value should be greater than/equal to 50:
/iso/org/dod/internet/private/enterprises/sandvine/devices/protocols/1/protocolRecognizers/config/asymmetricProtocolDetection.
4.1.5.16 Advertisement Traffic
Advertisement traffic is identified as the protocol (for example, Flash Video) rather than website traffic.
4.1.5.17 VPN
VPN traffic cannot be decrypted at this time. VPN usage cannot be tracked nor can any traffic sent or received over the VPN
connection.
4.1.5.18 Tunneling
PTS 6.0 (or later) can read the data carried inside the tunneled packet and classify them to the right protocol. Hence, in case of
upgrade to 6.0 or later versions some tunneling protocols traffic will drop.
For example: 6to4, teredo.
4.2 Protocol Keywords
Once a protocol is identified, there are a number of actions to perform.
For more information, see PTS SandScript Configuration Guide and PTS SandScript Reference Guide.
Sandvine protocols classification uses a two-level tree.
In the protocol keyword tables:
•
“Protocol” represents each parent protocol. Example, Amazon.
•
“SandScript Keyword” represents the keyword that refers to the parent or child protocol of a parent, respectively, regardless
of location in the tree. Example, amazon.
•
“Network Demographics” displays the names used in Sandvine Network Demographics report for a protocol. Example,
Amazon.
Protocol keywords are not case sensitive. Supported protocols are organized into categories. Some protocols includes a control
keyword for example, ares_control. The control keyword identifies signaling traffic that is important to some customers. Control
(signaling) traffic is usually a small percentage of total traffic and the majority of our customers make use of the higher level
keyword that includes "control" traffic.
4.2.1 Analyzers
Analyzers are developed to enable customers to perform deep inspection about a specific type of traffic.
Note:
See the latest PTS SandScript Reference Guide for information on Analyzers and other SandScript fields like streaming.
4.2.1.1 SSL Analyzer
Secured Socket Layer (SSL) Analyzer is used to expose SSL specific handshake packet contents for writing SandScript actions.
05-00070-B47
39
Protocols
Protocol Keywords
SSL Analyzer is introduced in 13.04.02 protocols pack and requires PTS 6.20 or newer version.
Note:
See PTS SandScript Reference Guide for more information on SSL Analyzers.
4.2.1.2 WhatsApp Analyzer
WhatsApp Analyzer is used to report the traffic information about the messages transmitted, bytes sent and received, byte counts,
message formats (Text or Multimedia), and the device type used for WhatsApp.
WhatsApp Analyzer is introduced in 13.04.02 protocols pack and requires PTS 6.20 or newer version.
Note:
See PTS SandScript Reference Guide for more information on WhatsApp Analyzer.
4.2.1.3 SIP Analyzer
Session Initiation Protocol (SIP) analyzer is used for detecting a device based on subscribers user agent during a VoIP call.
SIP analyzer is also used to count the bytes excahnged between a calling and called party during a VoIP call.
SIP Analyzer is introduced in 13.07.01 protocols pack and requires PTS 6.20 or newer version.
Note:
See PTS SandScript Reference Guide for more information on SIP analyzers.
4.2.1.4 Viber Analyzer
Viber analyzer is used to report the traffic information about the messages transmitted, bytes sent and received, byte counts,
message formats (Text or Multimedia), device type used, and number of voice calls performed using viber application in both
directions (calling and called party).
Viber Analyzer is introduced in 13.07.01 protocols pack and requires PTS 6.20 or newer version.
Note:
See PTS SandScript Reference Guide for more information on Viber Analyzer.
4.2.1.5 WAP1 Analyzer
Wireless Application Protocol (WAP) is a technical standard for accessing information over a mobile wireless network. A WAP
browser is a web browser for mobile devices, such as mobile phones, that use the protocol. WAP1 analyzer is used to expose
the WAP1 browsed URLs.
WAP1 Analyzer is introduced in 13.08.01 protocols pack and requires PTS 6.20 or newer version.
Note:
See PTS SandScript Reference Guide for more information on WAP1 Analyzer.
4.2.2 Peer-to-Peer (P2P)
Applications that use a communications model, in which each party has the same capabilities and either of the party can initiate
a communication session. These protocols are typically used for file transfer.
The P2P protocols are:
Protocol
SandScript Keyword
Network Demographics
aimini
aimini
aimini
40
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
AppleJuice
applejuice
Applejuice
Ares
ares
Ares
ares_control
Ares Control
ares_download
Ares
ares_udp
Ares UDP
BaiBao
baibao
BaiBao P2P
BaiduX
baidux
BaiduX
BearShare
bearshare
BearShare
BitTorrent Probable
suspectedbittorrent
BitTorrent Probable
BitTorrent
bittorrent
BitTorrent
bittorrent_dht
BitTorrent DHT
bittorrent_encrypted
BitTorrent Encrypted
bittorrent_udp
BitTorrent UDP
bittorrent_udpencrypted
bittorrent_dna
BitTorrent DNA
bittorrent_utp
BitTorrent UTP
bittorrent_tracker
BitTorrent
bittorrent_udptracker
BitTorrent UDP
bittorrent_live
BitTorrent Live JukeBox
bittorrent_streaming
BitTorrent Streaming
bittorrent_sync
BitTorrent Sync
blubster
blubster
blubster
CCcam
cccam
CCcam
Direct Connect
directconnect
Direct Connect
directconnect_control
Direct Connect
directconnect_data
Direct Connect
edonkey
eDonkey
edonkey_control
eDonkey
edonkey_data
eDonkey
edonkey_udp
eDonkey UDP
edonkey_encrypted_control
eDonkey Encrypted
edonkey_encrypted_data
eDonkey Encrypted
edonkey_encrypted_udp
eDonkey Encrypted
edonkey_encrypted
eDonkey Encrypted
edonkey_highspeed
eDonkey High Speed
Ezpeer
ezpeer
ezPeer
FastTrack
fasttrack
FastTrack
fasttrack_browse_host
FastTrack
eDonkey
05-00070-B47
41
Protocols
Protocol Keywords
Protocol
SandScript Keyword
fasttrack_data
FastTrack
fasttrack_udp
FastTrack UDP
peerenabler_data
FastTrack
FileGuri
fileguri
Fileguri
FileTopia
filetopia
FileTopia
FlashGet
flashget
FlashGet
flashget_ftpcontrol
FlashGet
Foxy
foxy
Foxy
FurthurNet
furthernet
FurthurNet
GigaTribe
gigatribe
GigaTribe
gigatribe_control
GigaTribe
gnutella
Gnutella
gnutella_get
Gnutella
gnutella_udp
Gnutella UDP
gnutella_encrypted
Gnutella Encrypted
gnutella_simpp
Gnutella UDP
Gnutella2
gnutella2
Gnutella2
Goboogy
goboogy
Goboogy
goboogy_get
Goboogy
guruguru
GuruGuru
guruguru_get
GuruGuru
Hotline
hotline
Hotline
iMesh
imesh
iMesh
IRC File Transfer
ircft
IRC File Transfer
iVisit
ivisit
iVisit
konspire2b
konspire2b
konspire2b
kugoo
kugoo
KuGou
Maze
maze
Maze
Mgcamd
mgcamd
Mgcamd
MUTE
mute
MUTE
Namipan
namipan
Namipan
Newcamd
newcamd
Newcamd
Open FastTrack
openft
Open FT
pando
pando
pando
Perfect Dark
perfectdarkp2p
Perfect Dark
POCO
poco
POCO
poco_control
POCO
poco_data
POCO Data
Gnutella
GuruGuru
42
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
PP2008
pp2008
PP2008
PPMule
ppmule
PPMule
Pruna
pruna
Pruna
Red Swoosh
redswoosh
Red Swoosh
RTMFP
rtmfp
RTMFP
rtmfp_control
RTMFP
share
Share
share_tcp
Share TCP
share_udp
Share UDP
SID
sid
SID
Soribada
soribada
Soribada
soribada_audio
Soribada
soribada_vod
Soribada
soribada_udp
Soribada
SoulSeek
soulseek
Soulseek
StealthNet
stealthnet
StealthNet
Thunder
thunder
Thunder
Tribler
tribler
Tribler
Tuotu
tuotu
Tuotu
Vagaa
vagaa
Vagaa
vShare
vshare
vShare
vshare_get
vShare
vshare_udp
vShare
waste
waste
waste
WinMX
winmx
WinMX
Winny
winny
Winny
Zultrax
zultrax
Zultrax
Share
4.2.3 Peercasting
Peercasting is a method of multicasting streams (audio, video or both) to the Internet via peer-to-peer technology.
The peercasting protocols are:
Protocol
SandScript Keyword
Abacast
abacast
Abacast
Afreeca
afreeca
Afreeca
afreeca_livestreaming
Afreeca
05-00070-B47
43
Protocols
Protocol Keywords
Protocol
SandScript Keyword
afreeca_vod
Afreeca
afreeca_rtspcontrol
Afreeca
Babelgum
babelgum
Babelgum
CCIPTV
cciptv
CCIP TV
Coolstreaming
coolstreaming
COOLSTREAMING
coolstreaming_control
COOLSTREAMING
Dopool
dopool
Dopool
Einyplayer
einyplayer
Einy Player
Feidian
feidian
Feidian
Funshion
funshion
Funshion
iShoot
ishoot
iShoot
Kankan
kankan
Thunder Kankan
kankan_rtmfpcontrol
Thunder Kankan
miro
Miro
miro_control
Miro
miro_data
Miro
octoshape
Octoshape
octoshape_tracker
Octoshape
PeerCast
peercast
PeerCast
PPLive
pplive
PPLive
pplive_control
PPLive
PPMate
ppmate
PPMate
PPStream
ppstream
PPS.tv
ppstream_control
PPStream Control
ppstream_tracker_control
PPStream Control
ppstream_data
PPStream Data
PPVOD
ppvod
PPVOD
QQLive
qqlive
QQLive
qqlive_control
QQLive
Skeed
skeed
SkeedCast
SopCast
sopcast
SopCast
Totorosa
totorosa
Totorosa
TVKoo
tvkoo
Tvkoo
TVUPlayer
tvuplayer
TVUPlayer
Miro
Octoshape
44
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Uglive
uglive
UG live
UUSee
uusee
UUSee
VGO Live
vgolive
VGO Live
vgolive_control
VGO Live
zattoo
ZATTOO
zattoo_rtmpecontrol
ZATTOO
zimtv
Zimtv
Zattoo
Zimtv
4.2.4 Anonymity
Anonymity represents the tools that make activity on the Internet untraceable.
The anonymity protocols are:
Protocol
SandScript Keyword
JAP
jap
JAP
Tor
tor
Tor
4.2.5 News Groups
News Groups are repositories for messages posted by multiple users from different locations.
The news groups protocols are:
Protocol
SandScript Keyword
Giganews
giganews
Giganews
giganews_control
Giganews
NNTP
nntp
NNTP
NNTP SSL
nntpssl
NNTP SSL
4.2.6 Web Browsing
Web Browsing represents software applications for retrieving, presenting, and traversing information resources on the World
Wide Web.
The Web browsing protocols are:
Protocol
SandScript Keyword
Amazon
amazon
Amazon
05-00070-B47
45
Protocols
Protocol Keywords
Protocol
SandScript Keyword
AmazonKindle
amazonkindle
Amazon Kindle
Ameba
amebajp
Ameba
Android Upload
android_upload_traffic
Android Upload
applemaps
applemaps
Apple Maps
Badoo
badoo
Badoo
Baidu
baidu
Baidu
Benchbee Speedtest
speedtest_benchbee
BENCHBEE SpeedTest
speedtest_benchbee_control
BENCHBEE SpeedTest
CBC Sports
cbcsports
CBC Sports
Chumby
chumby
chumby
Cisco Webex
webex
webex
DuDu
dudu
dudu
Daum
daum
Daum
daum_control
Daum
eBay
ebay
eBay
ESPN STAR
espnstar
ESPNSTAR
Facebook
facebook
Facebook
facebook_rtmpecontrol
Facebook
Flickr
flickr
Flickr
Foursquare
foursquare
Foursquare
Friendster
friendster
Friendster
Google Earth
googleearth
Google Earth
GoogleMap1
googlemap
Google Map
Google Plus
googleplus
Google+
googleplus_control
Google+
Google Web Accelerator
googaccel
Gougou
gougou
Gougou
Gree
gree
GREE
HABBO
habbo
HABBO
habbo_control
HABBO
HiFive
hifive
hi5
HTTP
http
HTTP
1
46
GoogleMap is supported only on PC.
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
http_proxy
HTTP Proxy
http_get
HTTP
Imgur
imgur
Imgur
Kaixin001
kaixin001
Kaixin
Linkedin
linkedin
Linkedin
Milliyet
milliyet
Milliyet
Minus
minus
minus
Mixi
mixi
mixi
mgoon
mgoon
mgoon
mgoon_control
mgoon
Mocospace
mocospace
MocoSpace
MobileMe
mobileme
MobileMe
Mynet
mynet
mynet
MySpace
myspace
myspace
myspace_rtmpecontrol
myspace
Naver
naver
Naver
Nate
nate
Nate
NextGuide
nextguide
NextGuide
netlog
netlog
NETLOG
netlog_gaming
NETLOG
Ning
ning
NING
Numberbook
numberbook
Numberbook
Odnoklassniki
odnoklassniki
Odnoklassniki
odnoklassniki_control
Odnoklassniki
odnoklassniki_httpcontrol
Odnoklassniki
odnoklassniki_rtmfpcontrol
Odnoklassniki
Orkut
orkut
orkut
Paypal
paypal
PayPal
Photobucket
photobucket
photobucket
Picasa
picasa
Picasa
picasa_control
Picasa
Pinterest
pinterest
Pinterest
Qook
speedtest_qook
Qook
Qriocity
qriocity
Qriocity
05-00070-B47
47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
qriocity_rtmpecontrol
Qriocity
qriocity_rtmptcontrol
Qriocity
SHAZAM
shazam
SHAZAM
Sina
sina
Sina
Skout
skout
Skout
Skyrock
skyrock
Skyrock
Snapfish
snapfish
snapfish
SocialTalk
socialtalk
SocialTalk
Socl
socl
Microsoft socl
Sonica
sonico
Sonico
SPDY
spdy
SPDY
Speedtest
speedtest_nia
NIA
Shutterfly
shutterfly
Shutterfly
Time Warner Cable
timewarnercable
Time Warner Cable
T storeT store
tstore
T store
tstore_control
T store
Twitter
twitter
Twitter
TencentQQ
tencentgeneric
Tencent
Tumblr
tumblr
tumblr
Tuenti
tuenti
tuenti
Vkontakte
vkontakte
Vkontakte
Vine
vine
Vine
Windows Live
windowslive
Windows Live
Woopie
woopie
Woopie
XML
xml
XML
Yuwie
yuwie
Yuwie
Yahoo
yahoo_generic
Yahoo
Zoosk
zoosk
Zoosk
4.2.7 Instant Messaging
Instant Messaging represents real-time direct text-based communication.
The instant messaging protocols are:
48
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Apple iMessage
appleimessage
Apple iMessage
appleimessage_control
Apple iMessage
Apple Push Notification Service
applepushnotification
Aim
aim
AOL Instant Messenger
Airtime
airtime
airtime
Baidu Hi
baidu_hi
Baidu hi
bobsled
bobsled
bobsled
ChatON
chaton
ChatON
Citrix Online
citrixonline
Citrix Online
ebuddy
ebuddy
ebuddy chat
Fetion
fetion
Fetion
fetion_filetransfer
Fetion File Transfer
Fetion Web IM
fetionwebim
Fetion Web IM
Gadu Gadu
gadugadu
Gadu Gadu
gadugadu_control
Gadu Gadu
gadugadu_rtmfpcontrol
Gadu Gadu
GeeVee
geevee
GeeVee
GizmoProject
gizmoprojectchat
Gizmo Project Chat
Google Talk
googletalk
Google Talk
googletalk_control
Google Talk
googletalk_data
Google Talk Data
googletalk_pushnotification
Google Talk Push Notification
googletalk_video
Google Talk Video
googletalk_videocontrol
Google Talk
googletalk_voicecontrol
Google Talk
googletalk_ssl
Google Talk
hookt
hookt
hookt
ICQ
icq
ICQ
icq_control
ICQ
icq_data
ICQ
IRC
irc
IRC
Jabber
jabber
Jabber
jabber_ssl
Jabber IM SSL
kakaotalk
KakaoTalk
KakaoTalk
05-00070-B47
49
Protocols
Protocol Keywords
Protocol
SandScript Keyword
kakaotalk_control
KakaoTalk
kakaotalk_keepalive
KakaoTalk Keepalive
kakaotalk_voice
KakaoTalk Voice
kik
kik
kik_control
kik
Libon
libon
Libon
LiveProfile
liveprofile
LiveProfile
liveprofile_control
LiveProfile
mplus
M+ Messenger
mplus_data
M+ Messenger
MNTalk
mntalk
MnTalk
MessageMe
messageme
MessageMe
messageme_chat
MessageMe
MSN Messenger Media Data
msnp_passportssl
Windows Live Messenger
MSNP
msnp
msnp_appshare
msnp_ftpdata
msnp_sessioncontrol
msnp_webcam
msnp_remoteassist
nateon
NateOn
nate_out
NateOn Out
nate_pc2pc
NateOn Pc2Pc
OlivePhone
olivephone_chat
OlivePhone Chat
NHN
nhn
NHN
Pal Talk
paltalk
paltalk
paltalk_control
paltalk
PingChat
pingchat
Ping Chat
SAPO Messenger
sapomessenger
SAPO Messenger
Simple
simple
SIMPLE
Sina UC
sina_uc
Sina UC
sina_uc_control
Sina UC
Snapchat
snapchat
Snapchat
Tachy
tachy
Tachy
Kik
M+ Messenger
Nateon
50
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
TT talk
tttalk
TT talk
TUMe
tume
TU me
tume_ssl
TU me
tume_sslcontrol
TU me
TinyChat
tinychat
tinychat
TencentQQ
tencentqq
TencentQQ
tencentqq_im
TencentQQ
tencentqq_mail
TencentQQ
tencentqq_music
TencentQQ
vbuzzer
VBUZZER
vbuzzer_data
Vbuzzer File Transfer
vbuzzer_mobilecontrol
VBUZZER
vbuzzer_control
VBUZZER
Voxer
voxer
voxer
WeChat
wechat
WeChat
wechat_data
WeChat
wechat_voice
WeChat
whatsapp
WhatsApp
whatsapp_control
WhatsApp
whatsapp_ssl
WhatsApp
ymsg
Yahoo Messenger
Vbuzzer
WhatsApp
Yahoo Messenger
4.2.8 Email
Email is a method of exchanging digital messages.
The Email protocols are:
Protocol
SandScript Keyword
Gmail
gmail
Gmail
gmail_control
Gmail
gmail_notification
Gmail Push Notification
gmail_mobile
Gmail
IMAP
imap
IMAP
IMAPS
imaps
IMAPS
05-00070-B47
51
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Lotus Notes
lotusnotes
Lotus Notes
Microsoft Exchange
exchange
Microsoft Exchange
POP3
pop3
POP3
POP3S
pop3s
POP3S
SMTP
smtp
SMTP
Yahoo Mail
yahoomail
Yahoo Mail
Zimbra
zimbra
Zimbra
zimbra_desktop
Zimbra Desktop
4.2.9 Database
Database is an application protocol for querying and modifying data.
The database protocols are:
Protocol
SandScript Keyword
CDDB
cddb
CDDB
LDAP
ldap
LDAP
MSSQL
mssql
Microsoft SQL
PostgreSQL
postgresql
PostgreSQL
4.2.10 Streaming
Streaming is a process where a stream of packets are interpreted and rendered in real-time by a software application as the
packets arrive.
The streaming protocols are:
Protocol
SandScript Keyword
Channel4 4oD
fourondemand
Channel 4 4oD
fourondemand_control
Channel 4 4oD
fourondemand_httpcontrol
Channel 4 4oD
fiveondemand
Channel5 Demand 5
fiveondemand_control
Channel5 Demand 5
fiveondemand_rtmp
Channel5 Demand 5
fiveondemand_rtmpecontrol
Channel5 Demand 5
fiveondemand_rtsp
Channel5 Demand 5
Channel5 Demand 5
52
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
8tracks
eighttracks
8tracks
ABC Australia
abcau
ABC Australia
abcau_iview
ABC Australia iview
ABC Streaming
abc
ABC Streaming
ABC Live
abc_live
ABC Live
abc_livecontrol
ABC Live
abc_vod
ABC Vod
abc_vodcontrol
ABC Vod
acTVila
actvila
acTVila
audiogalaxy
audiogalaxy
audiogalaxy
audiogalaxy_control
audiogalaxy
Amazon Cloud Player
amazoncloudplayer
Amazon Cloud Player
Amazon Instant Video
amazonvideo
amazonvideo_control
amazonvideo_rtmpecontrol
AOL
aol
AOL
Aereo
aereo
Aereo
BBC SPORT
bbcsport
BBC SPORT
bbcsport_control
BBC SPORT
bbciplayer
BBC iPlayer
bbciplayer_control
BBC iPlayer
bbciplayer_rtmp
BBC iPlayer
bbciplayer_rtsp
BBC iPlayer
beyondtv
BeyondTV
beyondtv_remote
BeyondTV Remote Access
beyondtv_ssldata
BeyondTV SSL
beyondtv_streaming
BeyondTV Streaming
Blinkx
blinkx
Blinkx
Blockbuster
blockbuster
Blockbuster
BTV
btv
BTV
btv_live
BTV
btv_livecontrol
BTV
btv_vod
BTV
btv_vodcontrol
BTV
ABC Vod
BBC iPlayer
BeyondTV
05-00070-B47
53
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Bugs Music
bugsmusic
Bugs! Music
bugsmusic_audio
Bugs! Music
bugsmusic_vod
Bugs! Music
bugsmusic_rtmpecontrol
Bugs! Music
CartoonNetwork
cartoonnetwork
Cartoon Network
CBS
cbs
CBS
cbs_rtmpecontrol
CBS
CCTV
cctv
CCTV
CFOX
cfox
99.3 the FOX
Cine21
cine21
Cine21
CNLive.com
cnlive
CNLive.com
CNN
cnn
CNN
Comcast Columbus
columbus
comcast columbus
Cuptv
cuptv
cuptv
The CW TV
cwtv
The CW TV
cwtv_rtmpecontrol
The CW TV
Dailymotion
dailymotion
Dailymotion
Daum TV Pot
daum_tvpot
Daum tv Pot
daum_tvpotvod
Daum tv Pot VOD
daum_tvpotlive
Daum tv Pot Live
Deezer
deezer
DEEZER
DirecTV
directv
DirecTV
DISH NetworkVOD
dishnetworkvod
DISH Network VOD
dishnetworkvod_rtmpecontrol
DISH Network VOD
ebs
EBS
ebs_livestreaming
EBS
ebs_livestreamingcontrol
EBS
ebs_iptv
EBS
ebs_vod
EBS
epix
ePix
epix_rtmpecontrol
ePix
ESPN Player
espnplayer
ESPN Player
EVERYONTV
everyontv
EVERYONTV
everyontv_rtsp
EVERYONTV
EBS
ePix
54
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Explore 3D TV
explorethreed
Explore 3D TV
Fancast
fancast
XfinityTV
fancast_control
XfinityTV
fancast_hulu
XfinityTV
fancast_
movenetworks
XfinityTV
fancast_rtmp
XfinityTV
Fiji
fiji
Fiji
Flash Video
flashvideo
Flash Video
Flickme
flickme
Flickme
Fox
fox
FOX
fox_rtmpecontrol
FOX
Gametrailers
gametrailers
Game Trailers
Gogoyoko
gogoyoko
gogoyoko
GOMTV
gomtv
GOMTV
gomtv_control
GOMTV
googlemusic
Google Music
googlemusic_control
Google Music
Graboid
graboid
Graboid
Grooveshark
grooveshark
Grooveshark
HotTV
hottv
HOTtv
hottv_control
HOTtv
Httplivestreaming
httplivestreaming
HTTP Live Streaming (HLS)
HBO GO
hbogo
HBO GO
hbogo_rtmpecontrol
HBO GO
HiNet
hinet
HiNet
iHeartradio
iheartradio
iHeartRadio
Ionair
ionairtv
Ionair
Ipla
ipla
ipla
iTunes Streaming
itunes_mediastreaming
iTunes Streaming
itv
itv
itv
itv_rtmpecontrol
itv
itv_ssl
itv
iyoucc
iYOUCC
Google Music
iYOUCC
05-00070-B47
55
Protocols
Protocol Keywords
Protocol
SandScript Keyword
jango
jango
jango
jjANG LIVE
jjanglive
jjANG LIVE
jjanglive_control
jjANG LIVE
jumptv
Jumptv
jumptv_rtsp
Jumptv
kazaa
Kazaa
kazaa_rtmpecontrol
Kazaa
kbslive
KBS Live
kbslive_livestreaming
KBS Live
kbslive_vod
KBS Live
kbslive_rtsp
KBS Live
Keek
keek
Keek
KidsVision
kidsvision
Kids Vision
KONTIKI
kontiki
KONTIKI
Kuwo Music
kuwo
Kuwo Music
KyLanTV
kylintv
KyLinTV
last.fm
lastfm
last.fm
LG IPTV
lgiptv
LG IPTV
Livestation
livestation
Livestation
livestation_control
Livestation
LOVEFiLM
lovefilm
LOVEFiLM
MaxGO
maxgo
MAX GO
maxgo_rtmpecontrol
MAX GO
mbc
MBC
mbclive
MBC Live
mbcvod
MBC VOD
melon
MelOn
melon_audio
MelOn
melon_control
MelOn
melon_vod
MelOn
Microsoft ASF
asf
Microsoft ASF
Microsoft Media Server
mms
Mnet
mnet
Mnet
move networks
movenetworks
move networks
Jumptv
Kazaa
KBS Live
MBC
MelOn
56
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
movenetworks_control
move networks
MPEG
mpeg
MPEG
MusicBox
musicbox
MusicBox
musicbox_ssl
MusicBox
musicovery
Musicovery
musicovery_control
Musicovery
muveMusic
muvemusic
muveMusic
muzutv
muzutv
MUZU TV
myTV
mytv
myTV
mytv_live
myTV
mytv_rtmpecontrol
myTV
mytv_rtsp
myTV
mycat
my c-@t
mycat_control
my c-@t
mycat_rtsp
my c-@t
NAVER Cast
navercast
NAVER Cast
NAVER Sports
naverlivesports
NAVER Sports
naverlivesports_rtmpecontrol
NAVER Sports
naver_streaming
Naver Streaming
naver_livestreaming
Naver Streaming Live
naver_music
Naver Streaming Music
naver_vod
Naver Streaming VOD
hoppinnate
NATE hoppin
hoppinnate_vod
NATE hoppin
hoppinnate_mediadownload
NATE hoppin
nate_vod
Nate Streaming
nate_vod_control
Nate Streaming
NBA League Pass
nba
NBA League Pass
NBC Streaming
nbc
NBC Streaming
Netflix
netflix
Netflix
NetMovies
netmovies
NetMovies
netmovies_rtmpecontrol
NetMovies
NFL Gamepass
nflgamepass
NFL Game Pass
NFL SUNDAY TICKET
nflsundayticket
NFL SUNDAY TICKET
Musicovery
my c-@t
Naver Streaming
NATE hoppin
Nate Streaming
05-00070-B47
57
Protocols
Protocol Keywords
Protocol
SandScript Keyword
NNHL GAMECENTER LIVE
nhlgamecenter
NHL GAMECENTER LIVE
niconico
nicovideo
niconico
nicovideo_live
niconico
nicovideo_ssl
niconico
NintendoTVii
nintendotvii
Nintendo TVii
Nlive TV
nlivetv
Nlive TV
Optimum TV
optimumtv
Optimum TV
OOYALA
ooyala
OOYALA
ooyala_rtmpecontrol
OOYALA
ollehtv
olleh tv
ollehtv_vod
olleh tv
ollehtv_live
olleh tv
ollehtv_audio
olleh tv
ollehtv_control
olleh tv
ollehtv_ftp_control
olleh tv
ollehtv_rtspcontrol
olleh tv
PANDORA Radio
pandoraradio
PANDORA Radio
PANDORA TV
pandoratv
PANDORA TV
pandoratv_live
Pandora TV Live Player Client
pandoratv_mini
Pandora TV Mini Client
pandoratv_web
Pandora TV Web Video
pandoratv_livestreaming
PANDORA TV
pandoratv_livestreamingcontrol
PANDORA TV
pandoratv_vod
PANDORA TV
Paranplayy
paranplayy
Paran Playy
PCast
pcast
Pcast
Plex
plex
Plex
pooq
pooq
pooq
pooq_livestreaming
pooq
pooq_vod
pooq
pooq_control
pooq
ppfilm
PPFilm
ppfilm_tracker
PPFilm
quicktime
QuickTime
olleh tv
PPFilm
Quicktime
58
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Quickflix
quickflix
Quickflix
QVOD
qvod
QVOD
qvod_control
QVOD
rdio
rdio
rdio_rtmpecontrol
rdio
realplayer
realPlayer
realplayer_rtmpecontrol
realPlayer
Redboxinstant
redboxinstant
redboxinstant
Rhapsody
rhapsody
Rhapsody
rhapsody_rtsp
Rhapsody
rteplayer
RTE Player
rteplayer_rtmpecontrol
RTE Player
rtmp
RTMP
rtmp_encrypted
RTMP Encrypted
rtmp_tunnelled
RTMP Tunnelled
rtp
RTP
rtp_mp2t
RTP MP2T
rtsp
RTSP
rtsp_tunnelled
RTSP Tunnelled
rtsp_data
RTSP
sagetv
SageTV
sagetv_locator
SageTV
sagetv_placeshifter
SageTV Placeshifter Streaming
sagetv_regular
SageTV Regular Streaming
sbsgorealra
SBS Gorealra
sbsgorealra_vod
SBS Gorealra
sbsgorealra_rtsp
SBS Gorealra
sbsgorealra_livestreaming
SBS Gorealra
Shockwave Flash
shockwaveflash
Shockwave Flash
SHOUTcast
shoutcast
SHOUTCast
shoutcast_control
SHOUTCast
Sky Anytime+
skyanytimeplus
Sky Anytime+
SkyGo
skygo
SkyGo
Sky On Demand
skyondemand
Sky On Demand
rdio
realPlayer
RTEPlayer
RTMP (Adobe)
RTP
RTSP Data
SageTV
SBS Gorealra
05-00070-B47
59
Protocols
Protocol Keywords
Protocol
SandScript Keyword
skyondemand_control
Sky On Demand
Skynowtv
skynowtv
NOW TV
Slacker Radio
slackerradio
Slacker Radio
slingbox
slingbox
slingbox
slingbox_data
Slingbox Data
slingbox_control
slingbox
SoundCloud
soundcloud
SoundCloud
SoundHound
soundhound
SoundHound
SonyTV
sonytv
SonyTV
SPB TV
spbtv
SPB TV
spbtv_http
SPB TV
spotify
Spotify
spotify_ssl
Spotify
T freemium
tfreemium
T freemium
T store
tstore_vod
T store VOD
TuneIn Radio
tuneinradio
TuneIn Radio
tuneinradio_control
TuneIn Radio
turkcelltv
Turkcell TV
turkcelltv_rtmpecontrol
Turkcell TV
TvGuide
tvguide
TvGuide
tving
tving
tving
tving_live
tving
tving_vod
tving
tving_rtmpecontrol
tving
tving_ssl_control
tving
tvnplayer
tvnplayer
tvn player
TV over streamyx (TVOS)
tvos
TV over streamyx
tvos_vod
TV over streamyx
USTREAM
ustreamtv
USTREAM
Amazon Unbox
unbox
Amazon Unbox
unbox_control
Amazon Unbox
uplusbox_music
U+ Box LiveStreaming
uplusbox_vod
uplusbox_livestreaming
Spotify
Turkcelltv
U+ Box
60
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
uplusbox_livestreamingcontrol
veetle
Veetle
veetle_control
Veetle
VEVO
vevo
VEVO
VideoInsight
videoinsight
VideoInsight
vTuner
vtuner
vTuner
Vudu
vudu
Vudu
WB Archive Instant
wbarchiveinstant
WB Archive Instant
WE7
we7
WE7
WealthTV
wealthtv
WealthTV
Windows Media Center
windowsmediacentre
Windows Media Player
wmplayer
wmplayer_rtsp
Witv
witv
wiTV
WediskStreaming
wediskstreaming
Wedisk Streaming
wediskstreaming_http_control
Wedisk Streaming
Wowtv
wowtv
WOWtv
wowza
wowza
wowza
Xbox LIVE Video
xboxlivevideo
Xbox LIVE Video
Xbox LIVE Music
xboxlivemusic
Xbox LIVE Music
Xfinity Streampix
streampix
XFINITY Streampix
YTN Live TV
ytnlivetv
YTN
ytnlivetv_rtsp
YTN
ytnlivetv_livestreaming
YTN
ytnlivetv_vod
YTN
veetle
4.2.11 Web Video
Web Video delivers videos in a web browser.
The Web video protocols are:
Protocol
SandScript Keyword
6.cn
sixdotcn
6.cn
sixdotcn_control
6.cn
05-00070-B47
61
Protocols
Protocol Keywords
Protocol
SandScript Keyword
AOL Video
aolvideo
Aol. On
aolvideo_rtmpecontrol
Aol. On
Bebo
bebo
bebo
Blinkbox
blinkbox
blinkbox
blinkbox_rtmpecontrol
blinkbox
blip
bliptv
blip
Boxee
boxee
Boxee
Breakvideos
breakvideos
Break Videos
Brightcove
brightcove
Brightcove
BT Nevis
btnevis
BT Nevis
CBC Sports Video
cbcsports_video
CBC Sports Video
ChannelFilms
channelfilms
CHANNEL FILMS
Cinema Now
cinemanow
Cinema Now
Comcast
comcast
comcast
CozmoTV
cozmotv
CozmoTV
Crackle
crackle
CRACKLE
crackle_rtmpecontrol
CRACKLE
Dropshots
dropshots
DropShots
Disney Junior
disneyjunior
Disney Junior
disneyjunior_control
Disney Junior
disneyxd
Disney XD
disneyxd_control
Disney XD
disneychannel
Disney Channel
disneychannel_control
Disney Channel
eyeVio
eyevio
eyeVio
ESPN
espn
ESPN
ESPN2
espn2
ESPN2
ESPN3
espn3
ESPN3
ESPNSTAR Video
espnstar_video
ESPNSTAR Video
Freechal QTV
freechalqtv
freechal
GodTube
godtube
GodTube
Google Video
googlevideo
Google Video
Hulu
hulu
Hulu
hulu_control
Hulu
Disney XD
Disney Channel
62
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
hulu_rtmpecontrol
Hulu
hulu_plus
Hulu Plus
hulu_plus_control
Hulu Plus
hulu_data
Hulu
hulu_httpcontrol
Hulu
iFilm
ifilm
iFilm
IKU
iku
IKU
IMBPlus
imbplus
IMB+
imbplus_control
IMB+
iTunesMediaDownload
itunes_mediadownload
Jaman
jaman
Jaman
jaman_rtmpecontrol
Jaman
JibJab
jibjab
JIBJAB
Justin TV
justintv
Justin.tv
justintv_control
Justin.tv
MePlayer
httpmeplayer
MePlayer
Metacafe
metacafe
metacafe
mgoon
mgoon_video_upload_control
mgoon Video Upload
MLB TV
mlbtv
MLB.TV
mlbtv_control
MLB.TV
mtvmusic
MTV Music
mtvmusic_rtmpecontrol
MTV Music
msnvideo
MSN Video
msnvideo_rtsp
MSN Video
mgoon_video
mgoon Streaming
mgoon_video_upload
mgoon Video Upload
Music Choice
musicchoice
Music Choice
MyHeavy
myheavy
HEAVY
NCAA
ncaa
NCAA
ncaa_rtmpecontrol
NCAA
Neulion IPTV
neulion
NeuLion IPTV
own3D TV
own3dtv
own3D tv
Revver
revver
Revver
Rogers on Demand
rogersondemand
ROGERS anyplace tv
MTV Music
MSN Video
mgoon
05-00070-B47
63
Protocols
Protocol Keywords
Protocol
SandScript Keyword
rogersondemand_rtmpecontrol
ROGERS anyplace tv
RuTube
rutube
Rutube
SAPO Video
sapovideo
SAPO Video
SBS
sbs
SBS Streaming
SinaVideo
sina_video
Sina Video
sina_video_control
Sina Video
skyplayer
Sky Go
skyplayer_ssl
Sky Go
tbs
TBS
tbs_control
TBS
TeacherTube
teachertube
Teacher Tube
TNT TV
tnttv
TNT TV
tnttv_control
TNT TV
TruTV
trutv
tru TV
Tudou
tudou
tudou
tudou_control
tudou
TV Catchup
tvcatchup
TVCatchup
Twitchtv
twitchtv
Twitch
VDONext
vdonext
VDONext
Veoh
veoh
veoh
Viddler
viddler
viddler
VideoJug
videojug
videojug
Vidmax
vidmax
VIDMAX
Vimeo
vimeo
vimeo
WATCHESPN
watchespn
WATCHESPN
WTV
wtv
WTV
wtv_control
WTV
Milliyet
milliyetvideo
Milliyet Video
Stupid Videos
stupidvideos
Stupid Videos
Nate Pann
nate_pann
Nate Pann
nate_pann_control
Nate Pann
Yahoo Video
yahoo_video
Yahoo Video
Youku
youku
youku
YouTube
youtube
YouTube
Sky Go
TBS
64
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
youtube_hd
YouTube HD
youtube_live
YouTube Live
youtube_web
YouTube Web
youtube_rtmpecontrol
YouTube
youtube_rtsp
YouTube
youtube_sd
YouTube
4.2.12 Tunneling
Tunneling is a process used to encapsulate a protocol.
The tunneling protocols are:
Protocol
SandScript Keyword
6to4
6to4
6to4
Aol2
aol2
AOL2
BT Fon
btfon
BT FON
btfon_control
BT FON
CAPWAP
capwap
CAPWAP
Fishbone
fishbone
Fishbone Line Bonder
GoogleProxy
googleproxy
Google Data Compression Proxy
GRE
gre
GRE
Hamachi
hamachi
Hamachi
Hotspot Shield
hotspotshield
Hotspot Shield
hotspotshield_control
Hotspot Shield
iodine
iodine
iodine
IPoverUDP
ipoverudp
IP over UDP
IPsec
ipsec
IPsec
IPv6 in IPv4
ipv4_ipv6
IPv6 in IPv4
IPv6 in IPv6
ipv6_ipv6
IPv6 in IPv6
IPv6 over GRE
gre_ipv6
IPv6 over GRE
ISAKMP
isakmp
ISAKMP
isakmpvpn
ISAKMP followed VPN
isakmpvpn_control
ISAKMP followed VPN
ciscovpn
Cisco VPN
05-00070-B47
65
Protocols
Protocol Keywords
Protocol
SandScript Keyword
ciscovpn_isakmp
Cisco VPN
L2TP
l2tp
L2TP
LWAPP
lwapp
LWAPP
OpenVPN
openvpn
OpenVPN
openvpn_control
OpenVPN
Opera Mini
operamini
Opera Mini
PPTP
pptp
PPTP
pdproxy
pdproxy
PD-Proxy
Puffinbrowser
puffinbrowser
Puffin Browser
PrivateTunnel
privatetunnel
PrivateTunnel
SOCKSv5
socksv5
SOCKS v5
SoftEther
softether
SoftEther
SSH
ssh
SSH
SSL
ssl
SSL
SSL VPN
sslvpn
SSL VPN Over UDP
Teredo
teredo
Teredo
teredo_legacy
Legacy Teredo
Virtual Tunnel
vtun
Vtun
YOUR-FREEDOM
yourfreedom
YOUR-FREEDOM
FON2
fon
Fon
4.2.13 VoIP
Voice over IP (VoIP), as the name suggests, VoIP delivers voice communication and multimedia sessions over Internet Protocol
(IP).
The VoIP protocols are:
Protocol
SandScript Keyword
050 plus
fiftyplus
050 plus
1LegCall
onelegcall
1Legcall
onelegcall_control
1Legcall
bababoo
Bababoo
bababoo_control
Bababoo
Bababoo
2
66
FON is identified by recognizing the SSL login flows. Use the FON keyword to block FON or count users. FON traffic can’t be shaped and the amount of traffic
can’t be counted.
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
BANSBERRY
bansberry
BANSBERRY
bansberry_control
BANSBERRY
bansberry_data
BANSBERRY
betamax
Betamax
betamax_pc2pc
Betamax PC to PC
betamax_pc2phone
Betamax PC to Phone
betamax_voice
Betamax
blackberryvoice
BlackBerry Messenger Voice
comm
Comm Chat
comm_call
Comm Call
daum_mypeople
Daum MyPeople
daum_mypeoplechat
Daum MyPeople Chat
daum_mypeoplevoice
Daum MyPeople Voice
daum_mypeopleudp
Daum MyPeople Voice
daum_mypeoplevoicedata
Daum MyPeople Voice
Ezzy VoIP
ezzy
Ezzy VoIP
Apple FaceTime
facetime
FaceTime
Facebook Voice
facebookvoice
Facebook Voice
FONE 2 CALL
fone2call
FONE2CALL
FonoSIP
fonosip
FonoSip
Fring
fring
Fring
fring_voice
Fring Voice
fring_control
Fring
gplex
Gplex
gplex_control
Gplex control
gplex_data
Gplex Data
gplexpc
Gplex PC
Google Talk
googletalk_voice
Google Talk Voice
H.323
h323
H.323
h323_h225
H.225
h323_h245
H.245
h323_data
H.323 Data
halavoice
Halavoice
halavoice_control
Halavoice Control
Betamax
Comm
Daum Mypeople
Gplex
HalaVoice
05-00070-B47
67
Protocols
Protocol Keywords
Protocol
SandScript Keyword
halavoice_data
Halavoice Data
HeadCall
headcall
HeadCall
IAX2
iax2
IAX2
Itel
itel
iTel VOIP
itel_control
iTel VOIP
Jajah
jajah
Jajah
Libon
libon_call
Libon Call
libon_callcontrol
Libon Call
line
LINE
line_call
LINE Call
line_callcontrol
LINE Call
line_callsipcontrol
LINE Call
line_sslcontrol
LINE Call
mohawkvoice
Mohawkvoice
mohawkvoice_control
Mohawkvoice
mgcp
MGCP
mgcp_control
MGCP
mgcp_rtcp
MGCP RTCP
mgcp_data
MGCP Data
msnp_mediadata
msnp_pc2phone
Windows Live Pc2Phone Control
msnp_pc2phonedata
Windows Live Pc2Phone
Mumble
mumble
Mumble
Net2Phone
net2phone
Net2Phone
net2phone_control
Net2Phone
net2phone_data
Net2Phone Data
nimbuzz_voip
Nimbuzz VoIP
nimbuzz_googletalk_voice
Nimbuzz GoogleTalk Voice
nimbuzz_voipcontrol
Nimbuzz VoIP
Nindino
nintino
Nindino
Nymgo
nymgo
Nymgo
nymgo_call
Nymgo
nymgo_callcontrol
Nymgo
Line
Mohawkvoice
MGCP
Nimbuzz
68
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
ObfuscatedVoip
obfuscatedvoip
ObfuscatedVoip
obfuscatedvoip_control
ObfuscatedVoip
olivephone
OlivePhone
olivephone_voice
OlivePhone Voice
olivephone_control
OlivePhone
oovoo
ooVoo
oovoo_audiovideo
ooVoo Audio Video
oovoo_chat
ooVoo
oovoo_login
ooVoo
oovoo_out
ooVoo
prontodialer
Pronto Dialer
prontodialer_control
Pronto Dialer Control
prontodialer_encrypted_control
prontodialer_data
Pronto Dialer Data
prontopcdialer
Pronto PC Dialer
prontopcdialer_control
Pronto PC Dialer
prontopcdialer_voip
Pronto PC Dialer
qik
qik
qik
REBTEL
rebtel
Rebtel
rebtel_control
Rebtel
ringomax
Ringomax
ringomax_control
Ringomax
ringomax_primed
Ringomax
seed
Seed
seed_control
Seed
sip
SIP
sip_control
SIP
sip_rtcp
SIP RTCP
SIP Data
sip_data
SIP Data
SIPLink
siplink
SIPLink
Skype
skype
Skype
skype_generic
Skype Generic
skype_in
SkypeIn
skype_out
SkypeOut
OlivePhone
ooVoo
Pronto Dialer
Pronto PC Dialer
Ringomax
Seed
SIP
05-00070-B47
69
Protocols
Protocol Keywords
Protocol
SandScript Keyword
skype_login
Skype Login
skype_pc2pc
Skype PC to PC
skype_pc2pcaudiovideo
Skype PC2PC AudioVideo
SpeedVoip
speedvoip
SpeedVoip
Tango
tango
Tango
tango_voice
Tango
TeamSpeak
teamspeak
Team Speak
Telefone
telefone
Telefone
telefone_control
Telefone Dialer Control
telefone_data
Telefone Data
touchtotalk
TouchToTalk
touchtotalk_control
TouchToTalk
Tribair
tribair
Tribair
trueCaller
truecaller
truecaller
truphone
truphone
truphone
TU me Call
tume_call
TU me Call
Vbuzzer
vbuzzer_voice
Vbuzzer Voice
vbuzzer_pc2phone
Vbuzzer PC to Phone Voice
vbuzzer_pc2pc
Vbuzzer PC to PC Voice
Ventrilo
ventrilo
Ventrilo
Viber
viber
Viber
viber_control
Viber
viber_call
Viber Call
viber_chat
Viber
viber_media
Viber
vippie
Vippie
vippie_pc
Vippie Pc Client
Voxofon
voxofon
Voxofon
Voxox
voxox
Voxox
voxox_control
Voxox
voxvalley
Voxvalley
voxvalley_control
Voxvalley Control
voxvalley_data
Voxvalley Data
vykemobile
VykeMobile
TouchToTalk
Vippie
Voxvalley
VykeMobile
70
05-00070-B47
Protocols
Protocol Keywords
Protocol
Vyke PC
SandScript Keyword
vykemobile_control
VykeMobile
vykepc
Vyke PC
vykepc_control
Vyke PC Control
vykepc_data
Vyke PC Data
4.2.14 Remote Connectivity
Remote connectivity provides remote access to a computer.
The remote connectivity protocols are:
Protocol
SandScript Keyword
DCERPC
dcerpc
DCE RPC
LogMeIn
logmein
LogMeIn
logmein_ssl
LogMeIn
PC Anywhere
pcanywhere
PC Anywhere
PGSH
pgsh
PGSH
RDP
rdp
RDP
TeamViewer
teamviewer
TeamViewer
Telnet
telnet
Telnet
VNC
vnc
VNC
4.2.15 Network Administration
Network administration describes about the protocols used to administer private or public networks.
The network administration protocols are:
Protocol
SandScript Keyword
BFD
bfd
BFD
BOOTP
bootp
BOOTP
BT Speed Tester
btspeedtester
BT Speed Tester
DHCPv6
dhcpv6
DHCPv6
DNS
dns
DNS
ICMP
icmp
ICMP
Identd
identd
identd
Kerberos
kerberos
Kerberos
05-00070-B47
71
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Microsoft NetSend
msnetsend
Microsoft NetSend
Microsoft Office 365
office365
NTP
ntp
NTP
RADIUS
radius
RADIUS
radius_accounting
RADIUS Accounting
radius_
authentication
RADIUS Authentication
SamKnows
samknows
Sam Knows
Speedtest
speedtest
Speedtest
SNMP
snmp
SNMP
STUN
stun
STUN
Syslog
syslog
Syslog
4.2.16 File Access
File access process allows files transfer over the network using a client-server model.
The file access protocols are:
Protocol
SandScript Keyword
FTP
ftp
FTP
ftp_data
FTP
ftp_control
FTP
NetBIOS
netbios
NetBIOS
FacebookPipe
facebook_pipe
Facebook Pipe
QQ Tornado
qqtornado
QQ Tornado
TFTP
tftp
TFTP
4.2.17 Network Storage
Network storage is a service that provides users with a system for backing up and storing computer files.
The network storage protocols are:
Protocol
SandScript Keyword
4shared
fourshared
4shared
Alibaba
alibaba
Alibaba
72
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Amazon Cloud Drive
amazonclouddrive
Amazon Cloud Drive
Apple Photo Stream
icloud_photostream
Apple Photo Stream
Backblaze
backblaze
Backblaze
Badongo
badongo
Badongo
BitShare
bitshare
bitshare.com
BT Digital Vault
btdigitalvault
BT Digital Vault
Carbonite
carbonite
Carbonite
Clubbox
clubbox
Clubbox
Crashplan
crashplan
CRASHPLAN
Dacom
dacom
LG Dacom
Daum Cloud
daum_cloud
Daum Cloud
deposit files
depositfiles
deposit files
depositfiles_control
deposit files
Diskpop
diskpop
Diskpop
Dropbox
dropbox
Dropbox
Evernote
evernote
Evernote
FilePost
filepost
FilePost
FileServe
fileserve
FileServe
fileserve_control
FileServe
FileSonic
filesonic
FileSonic
Freakshare
freakshare
FREAKSHARE
Folderplus
folderplus
FolderPlus
Gonfile
gonfile
Gonfile
Google Drive
googledrive
Google Drive
Hotfile
hotfile
hotfile
Hulkshare
hulkshare
hulkshare
IBackup
ibackup
IBackup
iCloud
icloud
iCloud
icloud_control
iCloud
iDisk
idisk
iDisk
iFolder
ifolder
iFolder
Kpeer
kpeer
Kpeer
kpeer_control
Kpeer
koreannetstore
Korean Network Storage
05-00070-B47
73
Protocols
Protocol Keywords
Protocol
SandScript Keyword
koreannetstore_control
koreannetstore_p2p
Korean Network Storage P2P
koreannetstore_p2pcontrol
koreannetstore_p2pkeepalive
koreannetstore_p2p_kgrid
koreannetstore_p2p_gdown
koreannetstore_p2p_wincloud
koreannetstore_ftpcontrol
koreannetstore_httpcontrol
koreannetstore_p2pneogridhttpcontrol
koreannetstore_tcpcontrol
LiveVault
livevault
LiveVault
Mega
mega
Mega
Mozy
mozy
mozy
Muve
muve
muve
Naver Ndrive
naver_ndrive
Naver Ndrive
Neo Folder
neofolder
Neo Folder
NETFOLDER
netfolder
NETFOLDER
Netload
netload
NETLOAD
netload_control
NETLOAD
PDBOX
pdbox
PDBOX
Pop Folder
popfolder
Pop Folder
PutLocker
putlocker
PutLocker
putlocker_ftpcontrol
PutLocker
RapidShare
rapidshare
RapidShare
rayfile
rayfile
rayfile
Spare Backup
sparebackup
Spare Backup
Stage2Data
stage2data
Stage2Data
T cloud
tcloud
T cloud
tcloud_control
T cloud
TotoDisk
totodisk
TotoDisk
Olleh Ucloud
ucloud
Olleh Ucloud
Uploaded
uploadedto
Uploaded
uploadedto_control
Uploaded
74
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Uploading
uploading
Uploading
uploading_control
Uploading
uplusbox
U+ Box
uplusbox_cloud
U+ Box
Windows Live Skydrive
windowslive_skydrive
Windows Live Skydrive
Yandex Disk
yandex_disk
Yandex Disk
youSENDit
yousendit
youSENDit
zSHARE
zshare
zSHARE
U+ Box
4.2.18 Software Update
Software update describes the protocols used for updating a software.
The software update protocols are:
Protocol
SandScript Keyword
Apple Updates
appleupdates
Apple Updates
Avast Update
avastupdate
avast! Antivirus Update
AVG Update
avgupdate
AVG Antivirus Update
Avira Update
aviraupdate
Avira Update
Google Play
googlemarket
Google Play
FSecure Update
fsecureupdate
F-Secure Update
iTunes
itunes
iTunes
iTunes App Store
itunes_store
iTunes App Store
Java Update
javaupdate
Java Update
McAfee Update
mcafeeupdate
McAfee Update
NewCS
newcs
NewCS
Symantec Live Update
symantec
Trend Micro Update
trendmicro
Trend Micro AntiVirus Update
T store
tstore_apps
T store Apps
tstore_appscontrol
T store Apps
windowsupdate
Windows Update
Windows Update
05-00070-B47
75
Protocols
Protocol Keywords
4.2.19 Wireless
Wireless communication transfers information between two or more points that are not connected by a medium. Wireless operations
permit long-range communications, that are impractical to implement with the use of wires.
The wireless communication protocols are:
Protocol
SandScript Keyword
Apple Siri
applesiri
Apple Siri
BlackBerry
blackberry
BlackBerry
BlackBerry App World Store
blackberryappworldstore
BlackBerry App World
blackberryappworldstore_ssl
ficall
FiCall
ficall_control
FiCall
gtp0
GTPv0
gtp0_control
GTPv0
gtp0_data
GTPv0
gtp1
GTPv1
gtp1_control
GTPv1
gtp1_data
GTPv1
Instagram
instagram
Instagram
iSkoot
iskoot
iskoot
iskoot_skype
iskoot Skype
mBit
mbit
mBit
Nimbuzz
nimbuzz
Nimbuzz
nimbuzz_control
Nimbuzz
SyncML
syncml
SyncML
Vodafone Femto
vodafonefemto
Vodafone Femto
WAP version 1.0
wap1
WAP Version 1.0
WAP version 2.0
wap2
WAP Version 2.0
WAP MMS
wapmms
WAP MMS
Whozcalling
whozcalling
WhozCalling
FiCall
GTPv0
GTPv1
4.2.20 Other Protocols
Other protocols describes about the protocols that are not classified into any category.
The unclassified protocols are:
76
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
Existing or Unmanaged Session
existing
Existing or Unmanaged Session
Other IP Protocol
otherip
Other IP Protocol
SCTP
sctp
SCTP
Other TCP Protocol3
unknowntcp
Other TCP Protocol
UDP4
unknownudp
UDP
4.2.21 User-Defined Protocols
User-Defined protocols are the protocols that an administrator defines to monitor an activity (protocol traffic).
The user-defined protocols are:
Protocol
SandScript Keyword
User Defined Protocol 1
…
user1
…
user32
…
4.2.22 Gaming
Gaming describes about the online games that can be played on a single or multi-user mode on various platforms.
The gaming protocols are:
Protocol
SandScript Keyword
amazongamesdownloads
BATTLEFIELD 3
battlefield3
BATTLEFIELD 3
BestBuy Games Downloads
bestbuygamesdownloads
Call of Duty
callofduty
Call of Duty
GameFly Games Downloads
gameflygamesdownloads
GameStop Games Downloads
gamestopgamesdownloads
nexongamesdownloads
Nintendo Gaming
nintendogaming
Nintendo Gaming
pcgames_civilizationv
pcgames_civilizationv
PC: Civilization V
PC Games5
pcgames
PC: Unclassified PC Game Traffic
pcgames_ageofconan
PC: Age Of Conan
3
4
5
The “Other TCP Protocol” includes all TCP-based protocols that are not otherwise uniquely identified.
The “UDP” protocol includes all UDP-based protocols that are not otherwise uniquely identified.
PC gaming traffic that is unclassified will be reported as “PC: Unclassified PC Game Traffic”. There is no option in Network Demographics to select all PC
game traffic at once, however the “pcgames” keyword does apply to all traffic identified as a PC game.
05-00070-B47
77
Protocols
Protocol Keywords
Protocol
SandScript Keyword
pcgames_aion
PC: Aion
pcgames_americas_army
PC: Americas Army
pcgames_americas_army_control
PC: Americas Army
pcgames_anarchy
PC: Anarchy
pcgames_battlefield1942
PC: Battlefield 1942
pcgames_battlefield2
PC: Battlefield 2
pcgames_battlenet
PC: Blizzard Battle.net Games
pcgames_borderlands2
PC: Borderlands 2
pcgames_cartoonnetwork
PC: Cartoon Network
pcgames_cityofheroes
PC: City Of Heroes
pcgames_command_and_conquer
PC: Command And Conquer Tiberium
Alliances
pcgames_command_and_conquer_control PC: Command And Conquer Tiberium
Alliances
78
pcgames_counterstrike
PC: Counter-Strike
pcgames_counterstrikesource
PC: Counter-Strike Source
pcgames_counterstrikeconditionzero
PC: Counter-Strike Condition Zero
pcgames_counterstrikeglobaloffensive
PC: Counter-Strike Global Offensive
pcgames_crysis
PC: Crysis
pcgames_crysis2
PC: Crysis 2
pcgames_darkagesofcamelot
PC: Dark Age Of Camelot
pcgames_darkregion
PC: Dark Region
pcgames_dayofdefeat
PC: Day of Defeat
pcgames_deltaforce
PC: Delta Force
pcgames_diablo3
PC: Diablo III
pcgames_dofus
PC: Dofus
pcgames_dota2
PC: DOTA 2
pcgames_eveonline
PC: Eve Online
pcgames_ea_games
PC: Electronic Arts Games
pcgames_eveonline_ssl
PC: Eve Online
pcgames_fifa12
FIFA 12
pcgames_fifa13
FIFA 13
pcgames_footballmanager2013
PC: FootballManager 2013
finalfantasyxi
Final Fantasy XI
05-00070-B47
Protocols
Protocol Keywords
Protocol
SandScript Keyword
pcgames_firefall
PC: FireFall
pcgames_fortressclassic
PC: Fortress Classic
pcgames_gamespy
PC: Game Spy
pcgames_garrysmod
PC: Garry's Mod
globalagenda
PC: Global Agenda
pcgames_granadoespada
PC: Granado Espada
pcgames_guildwars
PC: Guild Wars
pcgames_guildwars2
PC: Guild Wars 2
pcgames_halflife2
PC: Half-Life 2 Deathmatch
pcgames_halo
PC: Halo
pcgames_hero
PC: Hero Online
pcgames_heroesofnewerth
PC: Heroes Of Newerth
pcgames_heroesofnewerth_control
PC: Heroes Of Newerth
pcgames_kohan
PC: Kohan
pcgames_lbpoker
PC: Ladbrokes Poker
pcgames_league_of_legends
PC: League Of Legends
pcgames_left4dead2
PC: Left4Dead2
lineage
PC: Lineage
lineage_ver2
PC: Lineage 2
msnp_games
MSN Games
maplestory
PC: MapleStory
pcgames_maxpayne3
PC: MaxPayne3
minecraft
PC: Minecraft
minecraft_control
PC: Minecraft
pcgames_myth
PC: Myth
pcgames_needforspeed
PC: Need For Speed
onlive
OnLive
pcgames_operation_flashpoint
PC: Operation Flashpoint
pcgames_origin
PC: Origin
pcgames_origin_control
PC: Origin
pcgames_origin_data
PC: Origin
pcgames_origin_download
PC: Origin Download
pcgames_outlaw
PC: Outlaw
pcgames_planetside2
PC: PlanetSide2
05-00070-B47
79
Protocols
Protocol Keywords
Protocol
Playstation 3 Online Games6
PSP
SmartFoxServer
Sony Online
6
7
80
Games7
SandScript Keyword
pcgames_point_blank
PC: Point Blank
quake
PC: Quake
quake_quake4
PC: Quake 4
pcgames_ragnarok
PC: Ragnarok
riftgame
PC: RIFT
pcgames_runescape
PC: RuneScape
pcgames_secondlife
PC: Second Life
pcgames_spiralknights
PC: Spiral Knights
pcgames_starcraft2
PC: Star Craft 2
pcgames_starwars_tor
PC: Star Wars The Old Republic
pcgames_starwars_tor_primed
pcgames_starwars_tor_download
Download
pcgames_swat3
PC: S.W.A.T. 3
pcgames_tantra
PC: Tantra Online
pcgames_terraria
PC: Terraria
pcgames_ultima
PC: Ultima Online
pcgames_ultimacontrol
PC: Ultima Online
pcgames_unreal
PC: Unreal
pcgames_ut3
PC: Unreal Tournament 3
pcgames_valve_source
PC: Valve Source Engine
pcgames_steam
PC: Valve's Steam Service
pcgames_steam_download
PC: Valve's Steam Download
pcgames_wow
PC: World Of Warcraft
pcgames_xfire
PC: Xfire Game
pcgames_yahoo
PC: Yahoo Games
ps3
PS3: Other
ps3_madden07
PS3: Madden NFL 07
ps3_resistancefom
PS3: Resistance: Fall of Man
psp
PlayStation Portable
smartfoxserver
SmartFoxServer
sonyonline
Sony Online Games
Playstation 3 traffic that is unclassified will be reported as “Playstation 3 Unclassified”. There is no option in Network Demographics to select all Playstation
3 traffic all at once; however, the “ps3” keyword does apply to all traffic identified as Playstation 3.
A number of games are recognized by this protocol.
05-00070-B47
Protocols
Application Types
Protocol
SandScript Keyword
trionworldsgamesdownloads
Xbox
xbox
XBOX Games
xbox_callofdutyblackops2
Xbox: Call Of Duty Black Ops 2
xbox_halo4
Xbox: Halo 4
xbox_haloreach
Xbox: Halo Reach
xbox_madden_nfl
Xbox: Madden NFL
xbox_nba2k13
Xbox: NBA 2K13
xbox_other
XBOX Games
Xbox Live Video Marketplace
xboxlvm
XBOX LIVE Video Marketplace
Zentia
zentia
PC: Zentia
Zynga
zynga_games
Zynga Games
zynga_games_cafeworld
Zynga: Cafe World
zynga_games_castleville
Zynga: CastleVille
zynga_games_cityville
Zynga: CityVille
zynga_games_empiresandallies
Zynga: Empires & Allies
zynga_games_farmville
Zynga: FarmVille
zynga_games_farmville2
Zynga: FarmVille 2
zynga_games_hiddenchronicles
Zynga: Hidden Chronicles
zynga_games_mafiawars2
Zynga: Mafia Wars 2
zynga_games_poker
Zynga: Texas HoldEm Poker
zynga_games_poker_control
Zynga: Texas HoldEm Poker
zynga_games_slingo
Zynga: Zynga Slingo
zynga_games_wordswithfriends
Zynga: Words With Friends
zynga_games_yoville
Zynga: YoVille
8
4.3 Application Types
This section provides a list of all protocols classified based on application type. Sandvine defines these application types which
are used to measure traffic on a per subscriber basis.
LTIP, Network Demographics server (NDS) and Network Business Intelligence (NBI) work in collaboration to report the protocol
traffic on a NDS. LTIP defines the application type and NBI uses this information to classify reports on NDS.
Note:
See Protocol Keywords on page 39 to know about the NDS and SandScript keyword associated with each protocol.
8
Any Zynga game not listed in the table will be recognized as “Zynga Games”.
05-00070-B47
81
Protocols
Application Types
Application Type
Description
SandScript Keyword
Bulk Transfer
Data transfer using file transfer, file hosting, software
updates, newsgroups and so on.
Example:
WindowsUpdate, FTP.
BulkTransfer
Email
Service-provider and webmail email services.
Example:
SMTP, POP3, webmail (Gmail).
Email
Gaming
Console and PC gaming, console download traffic,
Gaming
game updates.
Example:
Nintendo Gaming, Xbox Live, Playstation 2, Playstation
3, World of Warcraft.
Peer to Peer
File-sharing applications that use a peer-to-peer
distribution model.
Example:
BitTorrent, eDonkey, Gnutella, Ares, Winny, Share,
Foxy.
RealTime Communication
Applications and protocols that allow interactive chat, RealTimeCommunication
voice, and video communication.
Example:
Skype, MSN Messenger, ICQ, SIP, MGCP, AIM, IRC,
ooVoo, Jabber, Gadu-Gadu.
RealTime Entertainment
Applications and protocols that allow on-demand
RealTimeEntertainment
entertainment that is consumed (viewed or heard) as
it arrives.
Example:
Streamed or buffered audio and video (RTSP, RTP,
RTMP, Flash), peercasting (PPStream, Octoshape),
placeshifting (Slingbox).
Tunneling
Applications tunneled in other protocols or encrypted
traffic.
Example:
SSL, Teredo, GRE, IPsec.
Tunneling
Web Browsing
Web protocols and specific websites.
Example:
HTTP, websites.
WebBrowsing
Social Networking
Social networking applications.
Example:
MySpace, Facebook, Twitter.
SocialNetworking
Network Storage
Services that allow users to upload and download
content from the internet.
Example:
RapidShare.
NetworkStorage
Miscellaneous
Everything else
Example:
DNS, ICMP.
Miscellaneous
82
PeerToPeer
05-00070-B47
Protocols
Application Types
4.3.1 Bulk transfer
Bulk transfer is method for transferring huge chunks of data from one machine to another or multiple machine at the same time
on different networks.
The bulk transfer protocols are:
•
AmazonCloudFront
•
Apple Updates
•
Avast Update
•
AVG Update
•
Avira Update
•
FacebookPipe
•
FSecure Update
•
FTP
•
Giganews
•
Google Play
•
iTunes
•
Java Update
•
NetBT
•
NewCS
•
NNTP
•
NNTP SSL
•
McAfee Update
•
QQ Tornado
•
•
TFTP
•
Trend Micro AntiVirus
•
T store
•
Windows Update
4.3.2 Email
Electronic mail (Email), is a method of exchanging digital messages. Email systems are based on a store-and-forward model
where Email servers accept, forward, deliver, and store messages. Users are not required to be online all the time; they need to
connect an email server briefly for the period of time required to send or receive messages.
The Email protocols are:
•
Gmail
•
IMAP
•
IMAPS
•
Lotus Notes
•
Microsoft Exchange
•
POP3
•
POP3S
•
SMTP
•
Yahoo Mail
•
Zimbra
•
Zimbra Desktop
4.3.3 Gaming
Gaming protocols applicable for various platforms are covered in this section.
4.3.3.1 PC Games
PC games, also known as computer games, are video games played on a general-purpose personal computer rather than a
dedicated video game console or arcade machine.
05-00070-B47
83
Protocols
Application Types
The PC game protocols are:
•
Age of Conan
•
Aion
•
•
America's Army
•
Anarchy
•
Blizzard Battle.net Games
•
Battlefield 1942
•
Battlefield 2
•
Command and Conquer
•
Counter Strike
•
Cartoon Network
•
City of Heroes
•
Counter Strike: Source
•
Counterstrikeconditionzero
•
Crysis 2
•
Crysis
•
Counter-Strike Global Offensive
•
Day of Defeat
•
Dark Age of Camelot
•
Dark Region
•
Dofus
•
Diablo III
•
Delta Force
•
Doom
•
Dota 2
•
Eve Online
•
F16
•
F22
•
FIFA 12
•
Fortress Classic
•
FIFA 13
•
Final Fantasy XI
•
FireFall
•
Game Spy
•
Global Agenda
•
Granadoespada
•
•
Guildwars2
•
Garry's Mod
•
•
Halo
•
Heroes of Newerth
•
Half-Life 2
•
Hero Online
•
Hexen
•
Heretic
•
Kohan
•
Kali
84
05-00070-B47
Protocols
Application Types
•
Ladbrokes Poker
•
Left4Dead2
•
Lineage
•
League of Legends
•
MaxPayne3
•
MSN Games
•
Myth
•
Maple Story
•
Motorhead
•
Minecraft
•
•
Nintendo Gaming
•
Need for Speed
•
OnLive
•
Outlaw
•
Origin
•
Operation Flashpoint
•
Point Blank
•
Planetside2
•
PS3 Unclassified
•
PcGamesOriginDownload
•
Quake
•
Quake 3 Arena
•
Quake 4
•
Ragnarok
•
RuneScape
•
Riftgame
•
Second Life
•
Smart Fox Server
•
Spiral Knights
•
Starcraft 2
•
Sony Online Games
•
Star Wars: The Old Republic Download
•
S.W.A.T. 3
•
Star Wars: The Old Republic
•
Terraria
•
Trion Worlds Games Download
•
Unclassified
•
Tantra Online
•
Unreal
•
Ultima Online
•
Unreal Tournament
•
Valve’s SteamService Control
•
Valve’s Steam Service
•
West Wood Games
•
World of Warcraft
•
Xfire Games
•
Yahoo Games
05-00070-B47
85
Protocols
Application Types
•
Zynga
•
Zynga: CityVille
•
Zynga: CastleVille
•
Zynga: Cafe World
•
Zynga: Mafia Wars 2
•
Zynga: FarmVille
•
Zynga: Empires & Allies
•
Zynga: Hidden Chronicles
•
Zynga: Poker
•
Zynga: Slingo
•
Zynga: YoVille
•
Zynga: Words With Friends
•
Zynga: FarmVille 2
•
Zentia
4.3.3.2 PS3 Games
The Play Station 3 is a home video game console produced by Sony Computer Entertainment.
The PS3 game protocols are:
•
Battlefield 3
•
Call of Duty
•
BestBuy Games
Downloads
•
Madden NFL 07
•
Resistance: Fall of Man
4.3.3.3 Xbox Games
The Xbox is a video gaming brand created by Microsoft. It includes a series of video game consoles developed by Microsoft,
with consoles in the sixth to eighth generations, as well as applications, streaming services and an online service, Xbox Live
The Xbox game protocols are:
•
XBOX LIVE
•
Xbox Live Video Market
•
Madden NFL 13
•
Madden NFL 12
•
halo4
•
Call Of Duty Black Ops 2
•
Halo Reach
•
Halo 4
•
NBA 2K13
4.3.4 Miscellaneous
Miscellaneous protocols are Sandvine specific multi-use protocols.
86
05-00070-B47
Protocols
Application Types
The miscellaneous protocols are:
•
BFD
•
BlackBerry App World Store
•
BOOTP
•
CDDB
•
DCE RPC
•
DNS
•
DHCPv6
•
Existing or Unmanaged
•
Identd
•
Instagram
•
Kerberos
•
LDAP
•
Microsoft SQL
•
Microsoft NetSend
•
•
NTP
•
Other TCP Protocol
•
Other IP Protocol
•
PostgreSQL
•
PC Anywhere
•
PGSH
•
RDP
•
RADIUS Accounting
•
RADIUS Authentication
•
STUN
•
SamKnows
•
SCTP
•
SNMP
•
Syslog
•
Telnet
•
UDP
•
Vodafone Femto
•
VNC
•
XML
4.3.5 Network Storage
Network storage protocols allow you to store files on a network like Cloud, Clustered file system, Distributed file system, File
hosting service, or File server. These protocols are associated with the netowrking servers on a network layer in OSI stack.
•
4Shared
•
Alibaba
•
BitShare
•
BT Digital Vault
•
Carbonite
•
Clubbox
•
Crashplan
•
Dacom
•
Daum Cloud
•
Dropbox
•
deposit files
•
Diskpop
•
Evernote
•
FilePost
•
FileServe
•
FileSonic
•
Folderplus
•
Gonfile
•
Google Drive
•
Hotfile
•
Hulkshare
•
IBackup
•
iCloud
•
iDisk
05-00070-B47
87
Protocols
Application Types
•
iFolder
•
•
Kpeer
•
LiveVault
•
LogMeIn
•
Mozy
•
Mega
•
Mega Upload
•
Naver Ndrive
•
Neo Folder
•
Net Folder
•
Naver Ndrive
•
Pop Folder
•
PutLocker
•
PDBOX
•
RapidShare
•
Rayfile
•
Spare Backup
•
Stage2Data
•
T cloud
•
Totodisk
•
U+ Box
•
Uploadedto
•
Uploading
•
UCloud
•
Windows Live Skydive
•
Wedisk
•
Yandex Disk
•
Yousendit
•
Zshare
4.3.6 Peer to Peer
Peer-to-peer (P2P) computing or networking is a distributed application architecture that partitions tasks or workloads between
peers. Peers are equally privileged, equipotent participants in the process.
88
05-00070-B47
Protocols
Application Types
The P2P protocols are:
•
aimini
•
Apple Juice
•
Ares
•
Ares Control
•
Ares UDP
•
BearShare
•
blubster
•
BaiBao
•
Baidux
•
•
BitTorrent
•
BitTorrent DNA
•
BitTorrent Live
•
BitTorrent Suspected
•
BitTorrent UDP
•
BitTorrent UTP
•
BitTorrent Sync
•
CCcam
•
Dudu
•
Direct Connect
•
eDonkey
•
EarthStation 5
•
eDonkey High Speed
•
eDonkey Encrypted UDP
•
Ezpeer
•
eDonkey UDP
•
FastTrack
•
FastTrack Browse Host
•
FastTrack UDP
•
Fileguri
•
FastTrack Data
•
FlashGet
•
FileTopia
•
FurtherNet
•
Foxy
•
Gnutella
•
Gnutella2
•
Gnutella Encrypted
•
Goboogy
•
GigaTribe
•
Gnutella UDP
•
Guru Guru
•
Hotline
•
iMesh
•
iShoot
•
iVisit
•
IRC File Transfer
•
konspire2B
•
Maze
•
Mgcamd
•
MUTE
•
Namipan
•
Open FastTrack
•
Perfect Dark
•
pando
•
POCO
•
POCO Control
•
PP2008
•
PPMule
•
Pruna
•
POCO Data
•
Red Swoosh
•
RTMFP
•
Share UDP
•
Soribada
•
Share TCP
•
SID
•
SoulSeek
•
StealthNet
05-00070-B47
89
Protocols
Application Types
•
Thunder
•
Tribler
•
Tuotu
•
Vagaa
•
vShare
•
Waste
•
WinMX
•
Winny
•
Zultrax
4.3.7 Real-Time Communication
Real-time communication (RTC) is a new integrated communication medium. It will permit computer users to exchange multimedia
and audio content in real time.
90
05-00070-B47
Protocols
Application Types
The real-time communication protocols are:
•
050 plus
•
1Legcall
•
Aim
•
Airtime
•
•
Bababoo
•
Baidu Hi
•
Bansberry
•
Betamax
•
BlackBerry
•
d
BlackBerry App Worl
•
BlackBerry Voice
•
bobsled
•
ChatON
•
Citrix Online
•
Comm
•
Daum
•
Daum Mypeople
•
ebuddy
•
Ezzy
•
Fetion
•
Fetion File Transfer
•
Fetion Web IM
•
Ficall
•
Fonosip
•
Fring
•
Fring Voice
•
Gadu Gadu
•
GeeVee
•
GizmoProject Chat Control
•
GizmoProject Chat Control SSL
•
Gmail
•
GoogleTalk
•
GoogleTalk Data
•
GoogleTalk Push Notification
•
GoogleTalk Voice
•
Gplex
•
Gplex Control
•
Gplex Data
•
GTPv0
•
GTPv1
•
H.225
•
H.245
•
H.323
•
H.323 Data
•
HeadCall
•
hookt
•
ICQ
•
IRC
•
iSkoot
•
iSkoot Skype
•
Itel
•
Jabber
•
Jabber SSL
•
Jajah
•
Just VoIP
•
Kik
•
lax2
•
LINE
•
Line Free Calls
•
LiveProfile
•
M+ Messenger
•
mBit
•
MessageMe
•
MGCP
•
MGCP Data
•
MNTalk
•
Mohawkvoice
•
MSN Messenger
•
MSN Pc2Phone
•
MSN PC2Phone Control
•
Mumble
•
myTV
•
Nate
•
Nate Out
•
Nate PC2PC
•
Net 2 Phone
•
Net 2 Phone Data
05-00070-B47
91
Protocols
Application Types
•
Nimbuzz
•
Nimbuzz GoogleTalk Voice
•
Nimbuzz VoIP
•
Nintino
•
NintendoTVii
•
Nymgo
•
Obfuscated VoIP
•
OlivePhone
•
ooVoo
•
PalTalk
•
PingChat
•
Pronto Dialer
•
•
Pronto Dialer Data
•
Pronto PC Dialer
•
Qik
•
RebTel
•
Ringomax
•
Sapo Voice
•
Seed
•
Sina UC
•
SIP
•
SIP RTP
•
Skype
•
Skype Generic
•
SkypeIn
•
Skype Login
•
SkypeOut
•
Skype PC2PC
•
Snapchat
•
SyncML
•
Tachy
•
Team Speak
•
TeamViewer
•
TencentQQ
•
TouchToTalk
•
Tribair
•
TrueCaller
•
TT talk
•
TUMe
•
Unique Fone
•
Vbuzzer
•
Vbuzzer File Transfer
•
Vbuzzer PC to PC Voice
•
Vbuzzer PC to Phone Voice
•
Vbuzzer Voice
•
Ventrilo
•
Vippie
•
Vippie PC Client
•
Voxer
•
Voxox
•
Voxofon
•
Vyke PC
•
WAP MMS
•
Whozcalling
•
WAP Version 1.0
•
WAP Version 2.0
•
Yahoo Messenger
•
Yahoo Messenger Control
•
Yahoo Messenger File Transfer
•
Yahoo Messenger Voice
•
Yahoo Messenger Webcam
4.3.8 Real-Time Entertainment
Real-Time Entertainment provides online streaming for music, video, movies, news, sports and various other programs.
92
05-00070-B47
Protocols
Application Types
The real-time entertainment protocols are:
•
4 on Demand
•
5min
•
5 on Demand
•
6.cn
•
8tracks
•
Abacast
•
ABC Australia
•
ABC iView
•
ABC Live
•
ABC Streaming
•
ABC Vod
•
acTVila
•
Aereo
•
Afreeca
•
Amazon
•
Amazon Cloud Drive
•
Amazon Cloud Player
•
•
Aniboom
•
Android Upload Traffic
•
AOL
•
AOL Video
•
ApnaTube
•
Apple iMessage
•
Apple Photo Stream
•
Apple Siri
•
Apple TV
•
Audiogalaxy
•
Babelgum
•
BBC iPlayer
•
BBCSport
•
Bebo
•
Beyond TV
•
Beyond TV Remote Access
•
Beyond TV SSL
•
Beyond TV Streaming
•
Blinkbox
•
Blinkx
•
blip
•
Blockbuster
•
Boxee
•
Breakvideo
•
Brightcove
•
BT Nevis
•
BTV
•
Bugs Music
•
CartoonNetwork
•
CBC Sports Video
•
CBS Streaming
•
CCIP TV
•
CCTV
•
Cfox
•
ChannelFilms
•
Cine21
•
Cinema Now
•
CNLive
•
CNN
•
Columbus
•
Comcast
•
Coolstreaming
•
Cozmo TV
•
Crackle
•
CupTV
•
CwTv
•
DailyMotion
•
Daum Tv Pot
•
Deezer
•
DirecTV
•
Dish Network VOD
•
Disney Channel
•
Disney Junior
•
Disney XD
05-00070-B47
93
Protocols
Application Types
•
Dopool
•
Dropshots
•
EBS
•
EinyPlayer
•
Epix
•
ESPN
•
ESPN3
•
ESPN Player
•
ESPNSTAR
•
EveryonTV
•
Explore3D
•
Eyespot
•
EyeVio
•
Fancast
•
Feidian
•
Fiji
•
Flash Video
•
Flickme
•
Fox
•
Freechal QTV
•
Funshion
•
Gametrailers
•
GodTube
•
Gogoyoko
•
GOM TV
•
Google Music
•
Google Video
•
Graboid
•
Grooveshark
•
HBOgo
•
Hinet
•
HotTV
•
Hulu
•
iFilm
•
iHeartRadio
•
Iku
•
IMBPlus
•
IonairTV
•
IPLA
•
iTunes Store
•
iTunesMediaDownload
•
iTunesMediaStreaming
•
iTV
•
iYOUCC
•
Jaman
•
Jango
•
JibJab
•
Jjang Live
•
Jumpcut
•
Justin TV
•
Kazaa
•
KBSLive
•
Keek
•
Kids Vision
•
Kontiki
•
Kuwo Music
•
KyLanTV
•
LG IPTV
•
Livestation
•
LoveFilm
•
MaxGO
•
MBC
•
Melon
•
Metacafe
•
MePlayer
•
mgoon
•
Microsoft ASF
•
•
Microsoft Soapbox
•
Miro
•
Mixi
•
MLB.TV
94
05-00070-B47
Protocols
Application Types
•
Mnet
•
Move Networks
•
Mpeg
•
MSN Video
•
Mtv Music
•
Musicbox
•
MusicChoice
•
Musicovery
•
Muve Music
•
Muve
•
muzutv
•
MYCat
•
MyHeavy
•
NATE Hoppin
•
Nate Pann
•
Nate Streaming
•
Naver Cast
•
Naver Streaming
•
Naver Streaming Music
•
Naver Streaming VOD
•
NBA
•
NBC Streaming
•
NCAA
•
Netflix
•
NetMovies
•
Neulion IPTV
•
NFL Gamepass
•
Nhlgamecenter
•
Nicovideo
•
Nlive TV
•
Octoshape
•
olleh tv
•
Ooyala
•
OptimumTV
•
own3D TV
•
Pandora
•
Pandora TV Live Player
•
Pandora TV Mini Client
•
Pandora TV Web Video
•
Paranplayy
•
Pcast
•
Peercast
•
Plex
•
Pooq
•
PPFilm
•
PPMate
•
PPStream
•
PPStream Data
•
PPStream Control
•
PPVOD
•
PSP
•
QQLive
•
Qriocity
•
Quickflix
•
QuickTime Player
•
QVOD
•
Real Player
•
Recool
•
Redboxinstant
•
Revver
•
Rdio
•
Rhapsody
•
Rogers on Demand
•
RTMP
•
RTMP Encrypted
•
RTP
•
RTEPlayer
•
RTP MP2T
•
RTSP
•
RTSP Tunnelled
•
rutube
•
Sage TV
05-00070-B47
95
Protocols
Application Types
•
Sage TV Placeshifter Streaming
•
Sage TV Regular Streaming
•
Sapo Video
•
SBS
•
SBS Gorealra
•
Shockwave Flash
•
SHOUTcast
•
Sina Video
•
SIP Data
•
Skeed
•
SkyGo
•
Sky Anytime+
•
Sky On Demand
•
SlackerRadio
•
Slingbox
•
Slingbox Data
•
SocialTalk
•
Sony TV
•
SopCast
•
Spotify
•
SPB TV
•
Stupid Videos
•
SoundCloud
•
SoundHound
•
T freemium
•
TBS
•
TeacherTube
•
Thunder Kankan
•
Time Warner Cable
•
TNT TV
•
Totorosa
•
TruTV
•
Tudou
•
TuneInRadio
•
Tudou Streaming
•
Tudou Upload
•
Turkcelltv
•
TV Ants
•
TV Catchup
•
TvGuide
•
Tving
•
TVKoo
•
Tvnplayer
•
TVOS
•
TVUPlayer
•
Twitch
•
Uglive
•
Unbox
•
Ustream
•
UUSee
•
Veoh
•
Vevo
•
VideoInsight
•
VideoJug
•
Viddler
•
Vidmax
•
VGO Live
•
Vimeo
•
Vudu
•
vTuner
•
WATCHESPN
•
WB Archive Instant
•
We7
•
WealthTV
•
Wedisk Streaming
•
•
•
Xbox LIVE Music
•
Xbox LIVE Video
•
Xfinity Streampix
•
Yahoo Video
•
YouTube
96
05-00070-B47
Protocols
Application Types
•
YouTube HD
•
YouTube Web
•
Youku
•
YTN Live TV
•
Zattoo
•
ZimTV
4.3.9 Social Networking
Social networking enables an actor (a person or an organization or a group) to interact.
The social networking protocols are:
•
Facebook
•
Friendster
•
Google Plus
•
HiFive
•
Kaixin001
•
Mocospace
•
Myspace
•
Netlog
•
Ning
•
Odnoklassniki
•
Orkut
•
Skout
•
Skyrock
•
Sonica
•
Tencent Generic
•
TinyChat
•
Twitter
•
Tuenti
•
Tumblr
•
Vine
•
Vkontakte
•
Zoosk
4.3.10 Tunneling
Computer networks use a tunneling protocol when one network protocol (the delivery protocol) encapsulates a different payload
protocol. By using tunneling one can (for example) carry a payload over an incompatible delivery-network, or provide a secure
path through an untrusted network.
05-00070-B47
97
Protocols
Application Types
The tunneling protocols are:
•
6to4
•
AOL2
•
BT Fon
•
CAPWAP
•
Fon
•
GoogleProxy
•
GRE
•
Hamachi
•
Iodine
•
IPv6 over GRE
•
IP over UDP
•
ISAKMP
•
IPsec
•
IPv6 in IPv4
•
JAP
•
L2TP
•
Legacy Teredo
•
LWAPP
•
Opera Mini
•
OpenVPN
•
PPTP
•
pdproxy
•
PrivateTunnel
•
Puffinbrowser
•
Socks V5
•
SSL
•
SoftEther
•
SSL VPN Over UDP
•
SPDY
•
SSH
•
Teredo
•
Tor
•
Virtual Tunnel
•
Yourfreedom
4.3.11 Web Browsing
A web browser (commonly referred to as a browser) is a software application for retrieving, presenting and traversing information
resources on the World Wide Web.
98
05-00070-B47
Protocols
Application Types
The Web browsing protocols are:
•
Ameba
•
Amazon Kindle
•
Applemaps
•
Badongo
•
Badoo
•
Baidu
•
Speed Test: Benchbee
•
BT Speed Tester
•
CBC Sports
•
Chumby
•
Daum
•
eBay
•
ESPN STAR
•
Flickr
•
Foursquare
•
Google Earth
•
GoogleMap
•
Google Wave
•
•
Gree
•
HABBO
•
HTTP
•
HTTP Proxy
•
Imgur
•
linkedin
•
Milliyet
•
MobileMe
•
Mynet
•
Naver
•
Nate
•
Numberbook
•
NextGuide
•
Pinterest
•
PayPal
•
Picasa
•
Photobucket
•
SHAZAM
•
Speed Test
•
Socl
•
Snapfish
•
Sina
•
Shutterfly
•
Woopie
•
Webex
•
Windows Live
05-00070-B47
99
Protocols
Application Types
100
05-00070-B47
5
Changed Protocol Names
There are no changed protocol names in this release.
Changed Protocol Names
102
05-00070-B47
6
Client Devices
• "Supported Client Devices" on page 104
Client Devices
Supported Client Devices
6.1 Supported Client Devices
The PTS performs traffic inspection to determine the types of client devices in use. Support for these client devices commenced
with LTIP release 12.08.01.
•
AirTies IPTV
•
Android Device
•
Apple TV
•
Bada Device
•
BlackBerry Device
•
Boxee
•
Bravia
•
DSi
•
DaumTV
•
DirecTV
•
Dune HD
•
Google TV
•
iOS Device
•
iPad
•
iPhone
•
iPod
•
Kindle
•
Kibot
•
Kobo Reader
•
LG Smart TV
•
Macintosh
•
Netgear Streaming Player
•
Nook
•
PC
•
PS Vita
•
PSP
•
Panasonic TV
•
PlayBook
•
PlayStation 3
•
Polycom VoIP
•
Roku
•
Samsung Galaxy Tab
•
Samsung TV
•
Sharp TV
•
Sharp BluRay
•
Sky+HD box
•
Sony BluRay
•
Sony Device
•
Sony Digital TV
•
Syabas PopBox
•
Symbian Device
•
SmartHomePad
•
TiVo
•
TouchPad
•
Unknown
•
Vizio
•
WD Media Player
•
Wii
•
Wii U
•
Windows Mobile Device
•
Windows RT Device
•
Xbox
•
YouView
•
webOS Device
104
05-00070-B47
7
Protocol Changes
• "Protocol Changes" on page 106
Protocol Changes
Protocol Changes
7.1 Protocol Changes
This table lists the most recent release in which a protocol was changed, added or deprecated.
Protocol
Action
LTIP Release
050 plus
added
12.07.01
1Legcall
changed
11.11.01
5min
added
12.02.01
4 on Demand
changed
12.04.01
5 on Demand
changed
11.12.01
6.cn
changed
11.02.01
8tracksapp
added
12.03.01
Abacast
changed
10.10.01
ABC Australia
changed
12.11.01
ABC Streaming
changed
12.04.01
ABC Vod
added
13.07.01
ABC Live
added
13.07.01
acTVila
added
12.05.01
Aereo
changed
13.03.01
Afreeca
changed
13.06.02
AFCP
deprecated
12.01.01 or older
Aim
added
12.12.01
Airtime
added
13.02.01
Akamai
deprecated
10.12.01
Amazon
changed
13.07.01
Amazon Cloud Drive
changed
12.08.01
AmazonCloudFront
deprecated
13.03.01
Amazon Cloud Player
added
11.09.01
added
13.08.01
Amazon Kindle
changed
13.07.01
changed
13.07.01
Amazon Video
changed
13.01.01
Ameba
added
12.12.01
Android Upload Traffic
added
12.03.01
AniBOOM
deprecated
11.02.01
AOL
changed
12.03.01
AOL Video
changed
13.08.01
AOL Uncut
deprecated
12.08.01
ApnaTube
deprecated
11.02.01
106
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Apple iMessage
changed
13.05.01
Apple maps
added
12.12.01
Apple Photo Stream
added
12.01.01
added
11.11.01
Apple Siri
added
12.01.01
Apple TV
deprecated
13.07.01
Apple Updates
added
13.02.01
Ares
changed
10.06.01
Audiogalaxy
added
12.10.01
Avast Update
changed
13.01.01
AVG Update
changed
11.12.01
Avira Update
added
13.03.01
added
13.07.01
Bababoo
changed
11.12.01
Babelgum
changed
11.02.01
Backblaze
added
11.02.01
Badoo
changed
13.02.01
Baidu Hi
changed
13.03.01
Baidux
changed
13.04.02
Bansberry
changed
12.03.01
Battlefield 2
changed
11.07.01
Battlefield 3
changed
12.07.01
BBC iPlayer
changed
13.06.02
BBC SPORT
added
13.07.01
Bebo
changed
11.06.01
BearShare
changed
12.08.01
BenchBee SpeedTest
changed
12.06.01
Betamax
changed
12.04.01
BFD
added
12.07.01
BitShare
added
12.06.01
BitTorrent
changed
13.08.01
BitTorrent Sync
added
13.07.01
Blackberry
changed
13.05.01
Blackberry Voice
changed
13.06.02
Blackberry App World Store
changed
13.07.01
Blinkbox
added
11.06.01
Blinkx
added
13.08.01
Blockbuster
changed
11.06.01
05-00070-B47
107
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
bobsled
added
12.07.01
BOOTP
changed
12.05.01
Boxee
changed
12.04.01
Brightcove
changed
13.06.02
BT Digital Vault
added
12.06.01
BT Fon
added
12.06.01
BT Nevis
added
12.06.01
BT Speed Tester
added
12.06.01
BTV
added
13.07.01
BuddyBuddy
deprecated
13.02.01
Bugs! Music
changed
12.11.01
Callserve
deprecated
13.04.02
Call Of Duty
changed
12.08.01
CAPWAP
added
10.12.01
Casero
deprecated
13.04.02
Castpost
deprecated
12.08.01
CartoonNetwork
added
12.08.01
CBC Sports
added
13.01.01
CBC Sports Video
added
12.07.01
CBS
changed
13.02.01
CCcam
changed
10.09.01
CDDB
changed
12.06.01
CFOX
changed
12.04.01
ChannelFilms
added
11.05.01
ChatON
added
12.09.01
Chatphone
deprecated
13.04.02
Cine21
added
12.03.01
Cinema Now
changed
11.07.01
Citrix Online
added
12.03.01
ClubBox
changed
12.03.01
CNLive
added
11.06.01
CNN
changed
13.07.01
Columbus
added
13.01.01
Comm
added
13.02.01
Comcast
changed
13.03.01
Coolstreaming
changed
11.12.01
Crackle
changed
11.02.01
Crashplan
changed
13.03.01
108
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Crysis 2
added
12.07.01
CupTV
added
12.03.01
CwTv
added
11.10.01
Dacom
changed
12.12.01
DailyMotion
changed
13.02.01
Dark Age of Camelot
changed
11.12.01
Daum
changed
13.03.01
Daum Mypeople
changed
13.03.01
Daum Tv Pot
changed
13.08.01
DCERPC
changed
12.09.01
deposit files
changed
13.08.01
DHCPv6
added
12.05.01
Es5
deprecated
13.04.02
DirecTV
changed
12.02.01
DISH Network VOD
added
11.11.01
DNS
changed
12.06.01
Doom
deprecated
11.02.01
Dopool
changed
12.09.01
Dovetail
deprecated
11.02.01
Dropbox
changed
11.09.01
Dudu
changed
12.12.01
Disney Junior
added
13.06.02
Disney Channel
added
13.06.02
Disney XD
added
13.06.02
Earthstation5
deprecated
13.04.01
eBay
changed
13.05.01
EBSi IPTV
changed
13.02.01
EBS
added
13.05.01
eDonkey
changed
12.05.01
ebuddy
changed
13.02.01
Einyplayer
added
10.04.01
Epix
added
12.01.01
ESPN
changed
12.12.01
ESPN3
added
11.11.01
ESPN Player
added
12.02.01
ESPNSTAR
added
12.07.01
ESPNSTAR Video
added
12.07.01
Eve Online
changed
12.03.01
05-00070-B47
109
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Evernote
added
12.12.01
EveryonTV
changed
12.03.01
Excalibur
deprecated
12.04.01
Exchange
changed
12.02.01
Explore3D
added
12.03.01
Eyespot
deprecated
11.02.01
eyeVio
added
12.11.01
EZPeer
changed
11.05.01
Ezzy
changed
12.06.01
Facebook
changed
13.08.01
Facebook Voice
changed
13.07.01
FacebookPipe
added
12.09.01
FaceTime
changed
12.09.01
Fancast
changed
13.05.01
FileGuri
changed
11.11.01
Fishbone
added
13.06.02
Fetion
changed
12.06.01
Fetion Web IM
added
10.12.01
Ficall
added
10.07.01
FIFA 12
added
12.12.01
FIFA13
added
13.06.02
Fiji
added
12.04.01
FilePost
added
12.03.01
FileServe
added
12.05.01
FileSonic
added
12.06.01
Firefly
changed
11.02.01
FlashGet
changed
10.10.01
FlashVideo
changed
11.03.01
Flickme
added
11.12.01
Flickr
changed
10.07.01
Fone2Call
added
11.02.01
Fonosip
added
11.10.01
Fox
changed
12.09.01
Freechal QTV
added
12.08.01
FriendsGoogle Talkter
changed
12.03.01
Fring
changed
13.08.01
FSecure Update
added
13.03.01
FTP
changed
12.04.01
110
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Funshion
changed
12.06.01
Foursquare
added
13.06.02
added
13.07.01
added
13.07.01
Gadu Gadu
changed
13.02.01
GeeVee
changed
13.03.01
Giganews
changed
13.03.01
GigaTribe
changed
12.12.01
Gizmo Project Chat
changed
11.04.01
Global Agenda
added
11.06.01
Globaltv
deprecated
11.03.01
Gmail
changed
12.12.01
Gnutella
changed
12.06.01
GodTube
changed
11.10.01
Gogoyoko
changed
11.10.01
Google Drive
changed
13.08.01
GoogleMap
changed
13.02.01
Google Music
changed
13.06.02
Google Play
changed
11.04.01
Google Plus
added
11.09.01
GoogleProxy
added
13.03.01
Google Talk
changed
13.08.01
Googletalk Data
changed
10.08.01
Google Video
changed
10.08.01
Google Wave
deprecated
11.02.01
GomTV
changed
13.06.02
Gougou
added
11.02.01
Gplex
changed
12.08.01
Graboid
changed
11.05.01
Gree
added
11.12.01
Grooveshark
added
11.06.01
GTPv1
changed
10.05.01
HABBO
changed
12.08.01
Halavoice
changed
13.05.01
Hamachi
changed
12.04.01
HBOgo
changed
12.03.01
HD Video Call
deprecated
13.01.01
Headcall
changed
11.06.01
05-00070-B47
111
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Heroes of Newerth (HoN)
added
11.06.01
HiFive (Hi5)
changed
11.09.01
hookt
added
12.06.01
HotDisk
deprecated
13.08.01
Hotfile
added
10.11.01
Hotspot Shield
changed
13.04.02
HotTV
added
12.03.01
Hotmail
deprecated
13.07.01
HTTP Live Streaming (HLS)
added
12.01.01
Hulkshare
added
12.03.01
Hulu
changed
13.04.02
IBackup
added
11.12.01
iCloud
changed
13.07.01
ICQ
changed
13.05.01
iFilm
changed
11.07.01
iHeartRadio
added
13.04.02
IKU
changed
12.04.01
IMBPlus
added
12.02.01
Imgur
added
13.08.01
iodine
added
12.07.01
IPoverUDP
added
10.12.01
IMAPS
added
11.02.01
iMesh
changed
11.04.01
Instagram
changed
13.02.01
IonairTV
changed
12.09.01
Ipla
added
13.03.01
IPv6 over GRE
added
10.09.01
iShoot
changed
12.09.01
iSkoot
added
10.04.01
Itel
changed
13.05.01
iTunes
changed
13.08.01
iTunesMediaDownload
changed
13.08.01
iTunesMediaStreaming
added
12.01.01
iTunes App Store
added
12.01.01
ITV
changed
13.02.01
iYOUCC
added
12.08.01
Jajah
changed
11.03.01
Jaman
changed
12.04.01
112
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Jango
changed
10.12.01
Javaupdate
changed
12.12.01
JIbJab
changed
10.03.01
Jjang Live
changed
12.07.01
Joost
deprecated
12.08.01
jumpcut
deprecated
10.07.01
Jump TV
changed
12.05.01
Justin TV
changed
13.03.01
JustVoIP
deprecated
10.12.01
KakaoTalk
changed
13.01.01
Kaixin001
added
11.10.01
Kankan
changed
12.12.01
Kazaa
added
11.09.01
KBSLive
changed
13.05.01
Keek
added
13.03.01
Kik
added
12.01.01
KplayerLiveTV
deprecated
12.02.01
changed
12.09.01
changed
13.05.01
KuGou
changed
12.11.01
Kuwo Music
changed
12.08.01
KyLinTV
added
11.07.01
L2TP
changed
12.12.01
Last.fm
changed
12.10.01
Lego Universe
deprecated
13.04.02
Libon
added
13.04.02
line
changed
13.03.01
LiveVault
added
13.08.01
Lineage
deprecated
12.06.01
LineAppsChat
deprecated
13.03.01
linkedin
changed
13.03.01
LiveProfile
added
12.01.01
Livestation
changed
12.01.01
LogMeIn
added
11.12.01
LoveFilm
changed
12.04.01
LWAPP
added
10.12.01
M+ Messenger
added
13.02.01
Maddern NFL 12
changed
12.12.01
05-00070-B47
113
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Manolito
deprecated
12.08.01
meinVZ
deprecated
11.03.01
MaxGO
added
13.05.01
MaxPanye3
added
12.12.01
MBC
changed
13.06.02
MBCmini
deprecated
13.06.02
McAfeeUpdate
changed
12.10.01
Mega
added
13.02.01
MessageMe
added
13.05.01
MegaPorn
deprecated
12.08.01
MegaUpload
deprecated
12.08.01
MegaVideo
deprecated
12.08.01
MelOn
changed
12.11.01
MePlayer
added
12.02.01
MetaCafe
changed
13.01.01
Meevee TV
deprecated
13.02.01
Mgcamd
added
11.06.01
MGCP
changed
11.06.01
mgoon
added
12.03.01
Milliyet
added
12.04.01
mIRC
changed
11.02.01
Miro
changed
11.03.01
Microsoft ASF
changed
11.12.01
Microsoft SQL
changed
12.06.01
Minus
added
13.07.01
mIRC
changed
12.03.01
Mixi
added
11.11.01
MLB.TV
changed
11.07.01
Mnet
changed
13.05.01
MNTalk
added
11.05.01
Mocospace
changed
12.04.01
Mohawkvoice
added
12.11.01
Mozy
added
10.04.01
MSN Games
changed
12.03.01
MSN Messenger
changed
12.06.01
MSN Pc2Phone
added
10.04.01
MSN Pc2Phone control
added
10.04.01
MSN Video
changed
13.03.01
114
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Mtv Music
changed
13.06.02
Mumble
changed
13.02.01
Munja Atti
deprecated
11.06.01
Musicbox
changed
13.03.01
Musicovery
added
13.01.01
Muve
added
11.09.01
Muve Music
added
12.04.01
Muzutv
added
12.12.01
MYCat
added
12.03.01
Mynet
added
12.04.01
MySpace
changed
11.12.01
Mytv
added
13.04.02
MyUbo
deprecated
11.02.01
Namipan
changed
11.06.01
napster
deprecated
13.04.02
Nate
changed
13.08.01
NATE hoppin
changed
13.08.01
NateOn Talk
deprecated
13.01.01
Nate Pann
added
12.06.01
Nate VOD
added
13.01.01
Naver
changed
13.05.01
Naver Cast
added
12.06.01
Naver Live Sports
changed
12.11.01
NaverVOD
changed
13.05.01
NaverTalk
deprecated
13.02.01
NBA
changed
13.01.01
NBC
changed
12.07.01
NCAA
changed
12.02.01
NetBIOS
changed
12.09.01
Netflix via Xbox
deprecated
12.01.01 or older
Netflix Over Tivo
deprecated
12.01.01 or older
Netflix
changed
13.01.01
Netlog
added
12.12.01
NetMovies
added
12.02.01
NeuLion IPTV
added
12.03.01
added
13.08.01
NextGuide
changed
13.02.01
NFL Gamepass
added
12.11.01
05-00070-B47
115
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
NFL Sunday Ticket
added
11.12.01
Nhlgamecenter
added
11.11.01
Nicovideo
changed
13.04.02
Nimbuzz
changed
12.03.01
Nimbuzz VoIP
changed
12.12.01
Ning
added
11.10.01
Nintendo Gaming
added
13.06.02
Nintendo DS
deprecated
13.07.01
Nintendo Wii Web Browsing
deprecated
13.07.01
Nintendo Wii Data
deprecated
13.07.01
Nintendo Wii Control
deprecated
13.07.01
Nintendo Wii
deprecated
13.07.01
Nintendotvii
added
13.04.02
Nintino
changed
11.09.01
Nlive TV
added
12.03.01
NNTP SSL
changed
13.07.01
Numberbook
changed
13.05.01
Nymgo
added
13.04.02
Obfuscated VoIP
changed
13.05.01
Octoshape
changed
13.01.01
Odnoklassniki
changed
12.02.01
olleh tv
changed
13.06.02
OlivePhone
changed
11.12.01
Onlive
changed
12.03.01
ooVoo
changed
13.01.01
OOYALA
changed
13.08.01
OptimumTV
added
13.07.01
OpenVPN
added
13.04.02
Orkut
added
10.08.01
own3D TV
added
12.08.01
PC: Aion
added
13.08.01
PC: America's Army
added
12.04.01
PC: Asheron’s Call
deprecated
12.10.01
PC: Battlefield 3
deprecated
12.07.01
PC: Battlefield 1942
changed
12.10.01
PC: pcgames_blackandwhite
deprecated
12.10.01
PC: Blizzard Battle.net
changed
11.11.01
PC: Civilization V
added
13.02.01
116
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
PC: Call of Duty
deprecated
12.08.01
PC: Cartoon Network
added
12.09.01
PC: City of Heroes
changed
11.07.01
PC: Command and Conquer
changed
12.07.01
PC:Counter-Strike Condition Zero
added
12.12.01
PC:Counter-Strike Global Offensive
added
13.01.01
PC: Diablo III
added
12.06.01
PC: Dofus
added
12.06.01
PC: Dota 2
added
12.08.01
PC: Elite Force
deprecated
12.10.01
PC:FIFA12
added
12.12.01
PC: Fighter Ace II
deprecated
12.10.01
PC: FireFall
added
13.08.01
PC: GameSpy
changed
11.11.01
PC: Garry's Mod
added
12.09.01
PC: Granado Espada
changed
11.12.01
PC: GUILDWARS 2
added
12.12.01
PC: Kali
deprecated
12.12.01
Kpeer
added
13.07.01
PC: League of Legends
added
12.07.01
PC:Left4Dead2
added
13.03.01
PC: MapleStory
changed
11.05.01
PC: maxpayne3 game
added
12.12.01
added
13.04.02
PC: Minecraft
added
11.09.01
PC: Need for Speed
changed
11.06.01
PC: Origin
added
12.07.01
PC: Point Blank
added
12.06.01
PC: Runescape
changed
12.06.01
PC: SecondLife
changed
12.01.01
PC: Soldier of Fortune
deprecated
12.10.01
PC: Spiral Knights
added
11.09.01
PC: Starcraft2
added
11.09.01
added
12.09.01
PC: Tantra
changed
13.01.01
PC: Terraria
added
12.08.01
timewarnercable
added
12.10.01
PC: World of Warcraft
changed
12.03.01
05-00070-B47
117
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
PC: F16
deprecated
11.02.01
PC: F22
deprecated
11.02.01
PC: Heretic
deprecated
11.02.01
PC: Hexan
deprecated
11.02.01
PC: Motorhead
deprecated
11.02.01
PC: Valve's Steam Service Control
deprecated
11.04.01
PC: West Wood Games
deprecated
11.02.01
PC: Quake
deprecated
12.12.01
PC: Quake 3
deprecated
11.02.01
Paltalk
changed
12.10.01
pando
changed
10.12.01
PandoraRadio
changed
13.01.01
Pandora TV
changed
13.06.02
Paranplayy
added
12.07.01
Paypal
added
12.12.01
Pcgames_planetside2
changed
13.05.01
Pcgames_borderlands2
added
13.05.01
Pcgames_footballmanager2013
added
13.05.01
added
13.06.02
Perfect Dark
changed
10.04.01
Pdproxy
added
13.04.02
Picasa
changed
12.08.01
Pinterest
added
12.09.01
Photobucket
changed
12.04.01
PingChat
added
12.01.01
Planetside2
added
13.03.01
Playstation 2
deprecated
11.02.01
Plex
added
13.03.01
Poco
changed
11.07.01
Pooq
changed
13.07.01
POP3S
added
11.02.01
PPFilm
changed
12.04.01
PPLive
changed
13.07.01
PPMule
changed
12.04.01
PPStream
changed
13.02.01
PPVOD
changed
10.06.01
Pronto Dialer
changed
13.04.02
Pronto PC Dialer
added
10.12.01
118
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
PrivateTunnel
added
13.04.02
PS3: Unclassified
changed
11.12.01
PSP
added
12.01.01
Puffinbrowser
added
12.12.01
PutLocker
added
13.03.01
Quickflix
added
12.02.01
Qik
changed
12.04.01
QQLive
changed
11.06.01
QQ Tornado
added
10.04.01
Qriocity
added
11.09.01
QVOD
changed
11.12.01
Ragnarok
changed
12.01.01
RapidShare
changed
10.04.01
Rawflow
deprecated
12.08.01
Rdio
changed
12.12.01
Real Player
changed
12.06.01
Rebtel
added
12.08.01
Recool
deprecated
10.06.01
Redboxinstant
changed
13.04.02
Rhapsody
changed
11.06.01
Rift
added
13.01.01
Ringomax
changed
12.01.01
Rogers on Demand
changed
11.09.01
pcgames_roguespear
deprecated
12.10.01
RTEPlayer
added
13.02.01
RTMFP
added
11.02.01
RTMP
changed
11.07.01
RTMPE
changed
11.11.01
RTSP
changed
10.12.01
Runescape
changed
11.07.01
RuTube
changed
12.01.01
SamKnows
added
12.05.01
SapoMessenger
changed
11.05.01
SAPO Video
changed
11.04.01
SBS
added
11.10.01
SBS Gorealra
changed
12.11.01
Seed
changed
13.07.01
Seesaw
deprecated
12.08.01
05-00070-B47
119
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
SHAZAM
added
13.08.01
SHOUTcast
changed
12.08.01
Sina UC
changed
13.08.01
SinaVideo
changed
12.06.01
SIP
changed
12.06.01
SIP Data
added
13.03.01
SIPLink
changed
12.06.01
Skeed
added
10.04.01
Skout
added
13.08.01
Sky Anytime+
added
12.06.01
Sky Go
changed
12.04.01
Skynowtv
added
12.12.01
Sky On Demand
added
13.07.01
Skype
changed
13.05.01
Skype PC2PC
changed
13.03.01
Skyplayer
changed
11.06.01
Skyrock
changed
11.02.01
SlackerRadio
changed
12.10.01
SMTP
changed
11.06.01
Snapchat
added
13.08.01
Snapfish
changed
11.10.01
SNMP
changed
12.08.01
Soapbox
deprecated
10.08.01
SocialTalk
added
11.09.01
Socl
added
12.11.01
Sonica
added
11.06.01
SopCast
changed
12.10.01
Soribada
changed
13.07.01
SoulSeek
changed
12.05.01
SoundCloud
added
13.08.01
SoundHound
added
13.08.01
SPB TV
added
12.02.01
SPDY
changed
13.04.02
SpeedVoip
changed
11.06.01
Speedtest
changed
12.11.01
Spotify
changed
13.03.01
SSL
changed
13.04.02
SSL VPN
changed
10.12.01
120
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Stage2Data
added
13.08.01
Star Wars Battlefront
deprecated
11.02.01
StealthNet
added
11.11.01
studiVZ
deprecated
11.03.01
Symantec
changed
11.04.01
Syphon Filter
deprecated
11.02.01
Shutterfly
added
13.06.02
T freemium
added
13.08.01
Tachy
added
11.05.01
Tango
changed
13.08.01
TBS
changed
11.05.01
T cloud
added
12.07.01
TeamSpeak
changed
10.09.01
TeamViewer
changed
12.07.01
Telefone
changed
11.05.01
TencentQQ
changed
13.02.01
Teredo
changed
11.06.01
TFTP
changed
11.02.01
Thunder
changed
12.12.01
Time Warner Cable
changed
11.07.01
TinyChat
added
11.07.01
TNT TV
changed
10.07.01
Tony Hawk Proskater 3
deprecated
11.02.01
Tor
changed
12.06.01
Torrent Relay
deprecated
13.04.02
Totodisk
changed
10.10.01
TouchToTalk
changed
13.01.01
TrendMicro
changed
12.10.01
Tribair
changed
11.10.01
Tribler
changed
12.07.01
changed
13.08.01
TrueCaller
added
12.05.01
Truphone
added
11.02.01
TruTV
added
11.06.01
T store
changed
12.12.01
TT talk
added
11.09.01
Tudou
changed
11.04.01
Tumblr
changed
13.07.01
05-00070-B47
121
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Tuenti
added
13.05.01
TUMe
changed
13.05.01
TuneInRadio
changed
13.05.01
Turkcelltv
added
13.01.01
TV Catchup
added
11.05.01
Tudou
changed
12.11.01
Tving
changed
13.08.01
TvGuide
added
12.11.01
Tvnplayer
added
13.03.01
TVOS
changed
13.05.01
TVUPlayer
changed
10.06.01
Tvants
deprecated
11.02.01
Tvking
deprecated
11.02.01
Twitter
changed
13.04.02
Twitch
changed
13.07.01
Ucloud
added
11.09.01
Uglive
added
10.06.01
Ultima
changed
11.06.01
UniqueFone
deprecated
10.04.01
Uploaded
added
12.04.01
Uploading
added
12.04.01
U+ Box
changed
12.11.01
Unreal Tournament 3
changed
11.05.01
UStream
changed
13.01.01
UUSee
changed
12.04.01
Valve’s Steam Service
changed
12.02.01
Valve's Steam Service Download
added
11.12.01
Vagaa
changed
10.06.01
Vbuzzer
changed
10.07.01
Veetle
added
13.02.01
Veoh
changed
11.02.01
Vevo
changed
13.06.02
VDONext
changed
11.06.01
VGO Live
changed
11.11.01
Viber
changed
13.05.01
Viddler
changed
11.07.01
VideoCrawler
deprecated
12.08.01
VideoJug
added
11.05.01
122
05-00070-B47
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
VideoInsight
changed
11.02.01
Vidmax
added
11.05.01
Vimeo
changed
13.06.02
Vine
changed
13.07.01
Vippie
changed
12.08.01
Vippie PC
added
10.10.01
Vkontakte
added
12.09.01
Vodafone Femto
added
12.06.01
Vongo
deprecated
11.01.01
Voxer
changed
13.05.01
Voxofon
added
11.11.01
Voxox
added
11.06.01
VoxValley
changed
12.02.01
vTuner
added
12.05.01
Vudu
changed
12.08.01
VykeMobile
added
11.03.01
Vyke PC
changed
11.11.01
WATCHESPN
changed
12.03.01
Waste
changed
12.12.01
WB Archive Instant
added
13.08.01
We7
added
12.01.01
WeChat
changed
13.06.02
Wedisk Streaming
changed
13.08.01
Wedisk
deprecated
12.08.015
WealthTV
changed
12.04.01
WhatsApp
changed
13.04.02
whozcalling
added
12.10.01
WindowsLive
changed
13.02.01
changed
13.07.01
Windows Live SkyDrive
changed
13.07.01
Windows Live
changed
13.07.01
Witv
added
12.03.01
Woopie
added
13.0.01
WTV
added
11.04.01
Xbox
changed
13.06.02
Xbox Call Of Duty Black Ops 2
added
13.02.01
Xbox: Halo 4
added
13.02.01
Xbox: Halo Reach
added
13.02.01
05-00070-B47
123
Protocol Changes
Protocol Changes
Protocol
Action
LTIP Release
Xbox Live
changed
11.07.01
Xbox LIVE Music
changed
13.05.01
Xbox LIVE Video
added
13.02.01
Xbox: NBA 2K13
added
13.02.01
Halo 4
added
13.02.01
Xfinity Streampix
added
12.04.01
Yahoo Games
changed
12.04.01
Yahoo Mail
changed
12.06.01
Yahoo Messenger
changed
13.06.02
Yahoo Video
changed
13.07.01
Yandex Disk
added
13.08.01
Youku
changed
11.07.01
Yourfreedom
added
11.12.01
Yousendit
added
12.10.01
YouTube
changed
13.08.01
YouTube Web
changed
12.11.01
YTN Live TV
changed
13.05.01
Yuwie
added
11.02.01
Zattoo
changed
11.06.01
Zentia
added
11.06.01
zSHARE
changed
13.07.01
Zimbra
changed
11.09.01
ZimTV
changed
13.01.01
Zoosk
added
13.08.01
Zultrax
changed
12.11.01
Zune
deprecated
13.06.02
Zynga
changed
12.06.01
Zynga: FarmVille 2
added
13.07.01
124
05-00070-B47
8
Glossary
• "Glossary of Terms" on page 126
Glossary
Glossary of Terms
8.1 Glossary of Terms
050 plus
050 plus is a VoIP application used on Android smart-phones. This application is used
primarily in Japan.
1LegCall
1LegCall is a leading Symbian mobile VoIP application. As a mobile application, it lets users
make affordable, high quality VoIP calls from their Android phones.
Channel4 4oD is an online streaming television application that originates in the UK. Data
flows are recognized, or refined, using information from the HTTP control flow.
Channel4 4oD
4shared
5min
Channel5 Demand 5
An online file storage application.
A streaming video service.
An online TV streaming application originating from the UK region. Data flows are recognized
or refined using information from the control flows.
6.cn
6.cn is a video sharing website that can be viewed with Adobe Flash Player.
Recognized by a fixed pattern signature refined from HTTP. Data flows are recognized or
refined using information from the control flow.
6to4
ABC Live
A protocol that allows IPv6 packets to be transmitted over an IPv4 network without
configuration of explicit tunnels.
A streaming media website.
A peer-to-peer audio and video streaming application.
Online streaming video provided by the Australian Broadcasting Company.
An online video streaming application provided by the American Broadcasting Corporation
to deliver video.
ABC Live is an online streaming application from ABC.
ABC Vod
ABC Vod is an online streaming application from ABC.
acTVila
Aereo
Afreeca
A Japanese streaming application.
Aereo is a streaming application.
A peer-to-peer video streaming application. Supported features include streaming live videos
for iOS- and Android-based applications, and streaming video from Afreeca player.
An online video game.
Refer to AOL Instant Messenger.
A peer-to-peer file sharing protocol.
Online video chat service
Amazon Web Services provide online services for other websites or client-side applications.
Most of these services are not exposed directly to end users, but instead offer functionality
that other developers can use.
Securely stores music, videos and documents online for from anywhere.
A content delivery network (CDN) offered by Amazon Web Services.
Plays media stored in Amazon Cloud Drive.
Amazon Games Downloads traffic accounts for games downloaded from the Amazon website.
The Amazon Kindle is a mobile electronic device that is designed for reading digital e-books
by Amazon website. Amazon Kindle devices enable users to shop for, download, browse,
and read e-books, newspapers, magazines, blogs, and other digital media through wireless
networking.
Amazon Instant Video is an Internet video-on-demand service, only available in the United
States, offered by Amazon.com which offers television shows and films for rental and
purchase.
Popular Japanese blogging and social networking website.
An online multiplayer game.
An instant-messaging application that uses the MSN Messenger protocol.
8tracks
Abacast
ABC iview
ABC Streaming
Age of Conan
AIM
aimini
Airtime
Alibaba
Amazon
Amazon Cloud Drive
AmazonCloudFront
Amazon Cloud Player
Amazon Kindle
Ameba
America's Army
aMSN
126
05-00070-B47
Glossary
Glossary of Terms
Anarchy
Android Upload
AOL2
AOL Instant Messenger
AOL
Aol. On
AppleIMessage
Applejuice
Apple Maps
Apple Siri
Apple Updates
AppShare
Ares
A massively multiplayer online role-playing game (MMORPG).
Android upload flows.
A tunneling protocol used in Zimbra desktop.
An instant-messaging application that uses the ICQ protocol.
A streaming music site provided by AOL.
A video-sharing site that provides streaming and uploading of video content.
Apple’s instant messaging service.
A peer-to-peer file-sharing client, network, and protocol.
Maps application provided by Apple
An instant messaging service. It uses push technology through a constantly-open IP
connection to forward notifications from the servers of third party applications to the Apple
devices; such notifications may include badges, sounds or custom text alerts.
Apple's intelligent software assistant and knowledge navigator.
Update traffic for all Apple products and its OS
Pc2pc application sharing feature is detected under this sub protocol of msnp.
A peer-to-peer file-sharing client and network.
Recognized by a fixed pattern signature within one or more packets.
Audiogalaxy
Avira Update
Azureus
Bababoo
Babelgum
BACKBLAZE
Badoo
Badongo
BaiBao P2P
Baidu
Baidu hi
BaiduX
BANSBERRY
Battlefield 1942
Battlefield 2
BATTLEFIELD 3
BBC iPlayer
BBC SPORT
BearShare
bebo
BENCHBEE SpeedTest
Betamax
A p2p streaming application
Anti-virus software.
A BitTorrent client that provides encryption and obfuscation support.
A VoIP application for iPhone used to make free calls between Bababoo users.
A peer-to-peer video streaming application.
An online backup service.
Asocial networking service in Europe
A free file hosting site that enables to upload and download an unlimited amount of files,
photos, video and music and share it with other users.
A peer-to-peer file-sharing application and protocol.
A popular Chinese portal.
A popular Chinese Instant Messaging Client that is accessed from the Baidu Chinese portal.
A peer-to-peer file-sharing application and protocol that is accessed from within the Baidu
Chinese portal.
A VoIP application used for making video calls, mostly used in Middle East Countries.
An online video game. This detection is limited to the PC version of the game.
A video game.
A streaming application provided by the British Broadcasting Corporation to deliver video
content.
BBC SPORT is an application which provides sport news, live scores, and video streaming
streaming service.
A peer-to-peer application used to share and download music and videos. Bear Share is an
imesh client and Bear Share version 6.1 and higher does not support the gnutella protocol.
A social networking site.
An internet speed test website.
A VoIP provider.
Recognized by a fixed pattern signature refined from UDP and HTTP. Data voice flows are
primed using client IP and client port.
BeyondTV
A digital video recorder and streaming application.
BestBuy is website for purchasing games online.
BFD
Refer to Bidirectional Forwarding Detection.
Bidirectional Forwarding DetectionA network protocol used to detect faults between two forwarding engines connected by a
link.
BitComet
bitshare.com
A file storage and sharing website.
BitSpirit
05-00070-B47
127
Glossary
Glossary of Terms
BitTorrent
A peer-to-peer file-sharing client and protocol. There are many peer-to-peer clients that use
this protocol, the first of which is known as “Mainline BitTorrent” or simply “BitTorrent”.
Recognized by a fixed pattern signature refined from HTTP, TCP and UDP.
BitTorrent Sync
BitTorrent Sync is a proprietary peer-to-peer file synchronization tool available for Windows,
Mac, and Linux. It can sync files between devices on a local network, or between remote
devices over the Internet through secure, and distributed P2P technology.
BlackBerry
BlackBerry is a line of mobile e-mail and smartphone devices developed and designed by
Research In Motion.
An application distribution service and application by Research In Motion (RIM) for majority
of BlackBerry devices. The service provides BlackBerry users with an environment to browse,
download, and update third-party applications.
A UK-based video-on-demand (VoD) website that allows users to legally preview, buy and
rent over premium movies and TV shows online.
A search engine for Internet video and audio content.
An online video sharing service focused on video blogging and podcasting.
Streams video on TV through a 2wire box.
A peer-to-peer file-sharing client that uses the MANOLITO protocol.
A VoIP application.
Refer to Bootstrap Protocol.
A UDP-based protocol used by a client to obtain an IP address automatically.
The core routing protocol of the Internet, BGP maintains a table of IP networks which
designate network reachability among autonomous systems (AS).
A client that integrates various social networking applications.
An online video streaming application.
An internet TV service that provides web publishers with syndicated video programming.
blinkbox
Blinkx
blip
Blockbuster
blubster
bobsled
BOOTP
Bootstrap Protocol
Border Gateway Protocol
Boxee
BREAK
Brightcove
Recognized by a fixed pattern signature refined from HTTP.
BT Digital Vault
An online file and photo storage application.
BT Fon
A WiFi service provider in the UK.
BT Nevis
A video-on-demand service. Also known as BT Vision.
BT Speed Tester
An internet speed test website.
BTV
BTV is an IPTV service in South Korea provided by SK Broadband. It provides a variety of
VOD (Video On Demand) TV content and Value Added Services (VAS) using an IPTV Set
top box connected to a Broadband Connection also provided by SK Broadband.
A music and video streaming service.
A first-person and third-person shooter video game series franchise.
Xbox game
A standard protocol that enables a controller to manage a collection of wireless access points.
Bugs! Music
CALLofDUTY
Call Of Duty Black Ops 2
CAPWAP
Recognized by a specific pattern refined from UDP.
CARBONITE
CartoonNetwork
CBC Sports
CBC Sports Video
CBS
CCcam
An online file back-up service.
A streaming application for Cartoon Network's television programs; also recognizes flash
games played on the site.
A Canada-based website focusing on sports-related programs.
CBC Sports' video streaming service that provides sports news, live sports results and
information on sporting events.
Online video streaming provided by the CBS television network.
A satellite DVB card-sharing emulator. Peers are PCs which are connected to internet. PCs
are either locally connected to a set-top-box or the PC itself has special hardware (DVB
card).
Flow is decrypted and then recognized by a fixed pattern signature refined from TCP.
128
05-00070-B47
Glossary
Glossary of Terms
CCIPTV
CCTV
CDDB
CenterICQ
99.3 the FOX
Champions of Norrath
Champions: Return to Arms
CHANNEL FILMS
ChatOn
chumby
Cine21
Cinema Now
Cisco Webex
Citrix Online
City of Heroes
Clubbox
CNLive
CNN
Coccinella
comcast
comcast columbus
Comm
Fiji
Command and Conquer
Compact Disc Database
Control And Provisioning of
Wireless Access Points
COOLSTREAMING
Closed Circuit Television: the use of video cameras to transmit a signal to a specific and
limited set of monitors.
Refer to Compact Disc Database.
A multi-protocol instant-messaging application.
The FOX Networks streaming radio application.
An online video game published by Sony.
A video streaming and download site.
Samsung's chat application.
An internet application that shows personal widgets.
A video streaming service dedicated to movies in Korea.
A web-based video download service.
An online meeting, web conferencing and video application.
GoToMeeting's instant messaging service.
A video streaming site popular in China.
Cable News Network (CNN) is a U.S. cable news channel that provides 24-hour television
news coverage.
An instant-messaging application that uses the Jabber protocol.
A video streaming website.
A streaming application provided by Comcast.
Japan based VOIP and IM application
An IPTV service.
A video game.
A database queried by software clients that look up audio CD information.
Refer to CAPWAP.
An online TV application. It supports watching movies, sports, news and listening to Radio
online.
Cosmic Rift
Counter Strike
Counter-Strike Condition Zero
Counter-Strike Global Offensive An online video game.
CozmoTV
CRACKLE
A digital network offering commercial-supported streaming movies, television, and original
web productions.
CRASHPLAN
A data backup service.
Crysis
An online, multiplayer first-person shooter game.
Crysis 2
An online, multiplayer first-person shooter game. This is a sequel to the Crysis video game.
cuptv
A streaming television service.
CW TV
An online streaming service.
LG Dacom
DailyMotion
An online video website
Dark Region
Dark Age of Camelot
Daum
A popular web portal in South Korea. Daum offers many Internet services to web users,
including a popular free web-based e-mail, messaging service, forums, shopping and news.
Daum IM
An instant messaging client.
Daum Mypeople
An instant messaging client.
Daum tv Pot
A streaming media application.
Day of Defeat
DC++
A peer-to-peer file-sharing client that uses the DirectConnect protocol.
DCERPC
Refer to Distributed Computing Environment Remote Procedure Call.
05-00070-B47
129
Glossary
Glossary of Terms
DEEZER
Delta Force
deposit files
An online music streaming service.
A tactical first-person shooter computer game.
A network storage application for hosting static files.
DHCPv6
Diablo II
Diablo III
DirectConnect
DirecTV
A protocol that supports Dynamic Host Configuration Protocol (DHCP) for IPv6 networks.
An online video game that uses Blizzard's Battle.net service.
A peer-to-peer file-sharing protocol.
A direct broadcast satellite service provider and broadcaster. DirecTV provides television
and audio services to subscribers through satellite transmissions. Services include the
equivalent of many local television stations, broadcast television networks, subscription
television services, satellite radio services, and private video services.
Diskpop
Dish Network VOD
An online streaming service.
Distributed Computing
Technology that allows a computer program to cause a subroutine or procedure to execute
Environment Remote Procedure in another address space, commonly on another computer on a shared network.
Call
DNS
The Domain Name Systems (DNS) protocol is used to translate domain names into IP
addresses.
Dofus
Dopool
A peer-to-peer video application.
PC: Dota 2
An online role-playing video game.
Dragons of Norrath
Dropbox
A file storage service.
DropShots
DuDu Speed
A peer-to-per file-sharing application and protocol.
Disney Junior
Disney Junior is an online television.
Disney Channel
Disney Channel is an online television.
Disney XD
Disney XD is an online television.
eBay
A Web-based application that provides an interface for buying and selling things.
EBSi IPTV
EBS
EBS is a Korean streaming service.
ebuddy chat
An instant messaging service available on various platforms.
eDonkey
A peer-to-peer file-sharing network and protocol.
Recognized by dynamic structural pattern within one or more packets.
eDonkey2000
Einy Player
A peer-to-peer file-sharing client that predominantly relies on the eDonkey protocol. Plug-ins
are available that allows eDonkey2000 to use the BitTorrent protocol.
Provides web-based peercasting.
eMule
ESPN
ESPN3
ESPN Player
ESPNSTAR
ESPNSTAR Video
Evernote
Eve Online
130
A peer-to-peer file-sharing client that uses the eDonkey network.
An American cable television network focusing on sports-related programming including live
and pre-taped event telecasts, sports talk shows, and other original programming.
An online streaming service for WatchESPN to deliver both live streams and replays of global
sports.ESPN3 is only available to Internet providers who pay fees to ESPN.
ESPN's broadcast portal that is open to everyone.
A sports news website operated by ESPN Star Sports. It is a joint venture between ESPN
Inc. and STAR TV that broadcasts to audiences in China, Hong Kong, Taiwan, India and
Southeast Asia. In addition to news, it contains columns and blogs by the network's leading
personalities.
ESPN STAR's video streaming service that provides sports news, live sports results and
information on sporting events.
Notes sharing application across different platform
An online game.
05-00070-B47
Glossary
Glossary of Terms
Recognized by a fixed pattern signature refined from SSL. Voice traffic while using Eve
Online will be recognized as SIP and SIP RTP.
EverQuest II
EverQuest Online Adventures
EVERYONTV
Explore 3D TV
eyeVio
ezPeer
Ezzy VoIP
Facebook
FacebookPipe
Facebook Voice
Apple FaceTime
Fancast
A streaming audio and video service.
Samsung's 3-D television service.
Sony’s eyeVio is an Internet and mobile service in Japan that provides a high quality
video-sharing platform.
A peer-to-peer music download service.
A VoIP application.
A social networking website that allows uploading of photographic content.
A Facebook app. Will let users transfer large files through a peer-to-peer service.
Online video chat service.
Video calling software application and related protocol developed by Apple for iPhone.
A streaming video application.
Identified by looking for specific pattern in the Host fields of HTTP packet.
FastTrack
Feidian
Fetion
An instant messaging (IM) client that allows users to send and receive SMS free of charge
between PCs and mobile phones.
Fetion Web IM
An instant messaging (IM) client; the PC to PC version of Fetion.
Recognized by a specific pattern signature refined from HTTP and SSL.
Ficall
A mobile and PC VoIP application.
Foursquare
Foursquare is a location based social networking website.
Foursquare provides apps for Android and IOS devices.
Online PC game.
A protocol used to transfer data across the Internet or through another network.
An online file hosting service.
A multi-function software client that includes peer-to-peer file-sharing capabilities.
FIFA
File Transfer Protocol
FileGuri
FileServe
FileSonic
FileTopia
FINAL FANTASY XI
Recognized by a fixed pattern signature refined from UDP, TCP, and HTTP.
FlashGet
A download manager that uses BitTorrent, HTTP, and FTP along with the Flashget UDP.
Flow is decrypted and then recognized by a fixed pattern signature refined from UDP.
Flashpoint
Flash Video
Flickme
Flickr
A tactical shooter and battlefield simulator video game.
A streaming format used for online video.
A video website.
An image hosting and video hosting website, web services suite, and online community.
Folderplus
FON
FONE 2 CALL
FonoSIP
An application installed on a router that allows WiFi networks to be shared. This presence
of FON is determined using SSL log-in flows, but after a user has logged in there is nothing
to differentiate the traffic and the remainder is reported as whatever protocol the subscriber
is using.
A PC dialer for making VoIP calls from PCs to phones.
An application which is an interface for making VoIP calls. It does not support any direct
dialers. However, the geographic location of a phone number and country codes can be
obtained. The SMS can be sent and calls can be made through other redirected dialers.
05-00070-B47
131
Glossary
Glossary of Terms
Fortress Classic
FourShared
Fox
Foxy
freechal
Friendster
Fring
Frostwire
FSecure Update
FTP
FtpData
Funshion
FurthurNet
Fishbone
Gadu Gadu
Refer to 4shared.
An online streaming application featuring “Shows” and “Community”.
A peer-to-peer file-sharing client that uses the Gnutella network.
A video service in Korea.
A mobile VoIP application.
A Gnutella and BitTorrent peer-to-peer client, and a form of Limewire. Frostwire traffic is
recognized as BitTorrent and Gnutella.
Anti-Virus, Firewall, Backup and Content Cloud solutions for both Home and Business
customers.
Refer to File Transfer Protocol.
A sub protocol of msnp, which detects pc2pc file transfers.
A peer casting application.
A peer-to-peer file-sharing client based on the Gnutella network.
Fishbone Line Bonder enables bonding of multiple point-to-point links offering a completely
redundant, supplier-agnostic access solution
An instant messaging client and protocol originating from the region of Poland.
Games
GameSpy
Garry's Mod
Gates of Discord
General Packet Radio Service
Generic Routing Encapsulation
GeeVee
GG
giFT
GGIGANEWS
GigaTribe
Gizmo Project
GLOBAL AGENDA
Gmail
A sub protocol of MSNP. It detects a pc2pc gaming feature.
GameFly is an American online video game rental subscription service that specializes in
providing games for game consoles and handheld game consoles. GameFly offers different
plans, depending on how many games are rented at a time. All plans are charged on monthly
basis.
The GameStop is an American video game and entertainment software retailer.
Operates a network of video game websites and provides online video game-related services
and software.
A video game.
A mobile data service available to users of GSM and IS-136 mobile devices.
A tunneling protocol designed to encapsulate network layer packets within IP tunneling
packets.
A chat application used worldwide on iPhone and Android
Refer to Gadu Gadu.
A peer-to-peer software client that natively uses the OpenFT protocol.
A Usenet service, which also provides online storage services.
A peer-to-peer file sharing application
A multi-function client and network that uses SIP for voice calls and Jabber for instant
messaging.
A video game.
An email application.
Gnutella2
Goboogy
GodTube
gogoyoko
GOMTV
GonFile
Google Drive
Google Earth
GoogleMap
Google Market
132
An online music store where users can listen to, buy and rate songs.
The video streaming component of the Gretech Online Movie (GOM) Player.
A cloud file storage application.
Software used to see cities and landmarks all over the world.
A web mapping service.
An online third-party application store for Android mobile phones. Also known as Google
Play.
05-00070-B47
Glossary
Glossary of Terms
Google Music
Google Play
A streaming music service.
An online third-party application store for Android mobile phones. Also known as Google
Market.
Google Plus
GoogleProxy
Google Talk
GoogleProxy is a tunneling protocol by Google on their latest chome beta for Android to
allow compression of internet traffic via thier proxy servers to reduce internet cost for
customers.
A multi-function client that provides voice-over-IP and instant messaging capabilities.
Google Video
A search engine for videos.
Gougou
Gplex
GPRS
Graboid
Granado Espada
GREE
Gree
Grokster
Grooveshark
GPRS Tunneling Protocol
GTP
GTPv0
GTPv1
A web accelerator application produced by Google that uses client software and data caching
to speed up page load times by means of data compression, pre fetching of content, and
sharing cached data between users.
A multimedia search engine; the Chinese equivalent of Google.
Gplex is an application used for making VoIP calls.
Refer to General Packet Radio Service.
A video streaming and downloading client.
An online PC gaming application.
Refer to Generic Routing Encapsulation.
A Japanese social networking service.
A peer-to-peer file-sharing client that uses the FastTrack network.
A music search engine and streaming service.
A protocol used with GSM (Global System for Mobile communications - the most popular
standard for mobile phones) and UMTS (Universal Mobile Telecommunications Systems)
networks.
Refer to GPRS Tunneling Protocol.
Identified by looking for a pattern in the first packet.
GUILDWARS 2
GuruGuru
H.225
H.245
H.323
HABBO
An online game.
A protocol used within the signalling channel of H.323 communications sessions.
A protocol used within the control channel of H.323 communications sessions.
An umbrella recommendation from the ITU-T that defines the protocols to provide audio and
visual communication sessions on any packet network. While originally created to perform
in a LAN environment, it has evolved to address the growing needs of voice-over-IP networks.
H.323 references many other ITU-T protocols, including H.225 and H.245.
A virtual community and a multiplayer online game, where teenagers create their own virtual
characters and interact with other characters in the community. Generally, the chatrooms
are called 'Habbo Hotel', which are large, computer-generated graphics that use isometric
projections.
Recognized by a fixed pattern signature refined from HTTP and SSL.
Halavoice
Half-Life 2
Halo
Halo 4
Halo Reach
Hamachi
HBOgo
Tworld HD Video Call
HeadCall
Hero Online
A VoIP provider.
An online video game
An online video game
A VPN client.
A streaming video service provided by the HBO television service.
A video calling client.
A video and voice-over-IP application.
05-00070-B47
133
Glossary
Glossary of Terms
Heroes of Newerth (HoN)
hi5
Heroes of Newerth (HoN) is a science fantasy, action real-time strategy game developed by
S2 Games for Microsoft Windows, Mac OS X and Linux.
A free social networking service, that allows its users to send and read other users’ messages,
create albums and upload files, create groups, start discussions and play games.
Recognized by a fixed pattern signature refined from HTTP and SSL.
HiNet
hookt
hotfile
Hotline Connect
Hotspot Shield
An online streaming application.
A cross-platform messaging application.
A file-hosting website that allows users to upload and download files.
A multi-function software client that includes peer-to-peer file-sharing capabilities.
A free web-based VPN application.
HOT tv
HTTP
Hulu
Refer to Hypertext Transfer Protocol.
Recognized by a fixed pattern signature refined from RTMP and RTMPe flows.
Hypertext Transfer Protocol
IAX
IAX2
IBackup
iCloud
iCloud PhotoStream
ICMP
ICQ, ICQ Control
Ident
identd
iDisk
iFilm
iFolder
iHeartradio
IKU
A communications protocol used predominantly to facilitate publishing and retrieval of HTML
web-pages.
Refer to Inter-Asterisk eXchange Protocol.
Refer to Inter-Asterisk eXchange Protocol.
An online utility backup/restore storage application.
iCloud is a cloud storage and cloud computing service. This service allows users to store
data such as music and iOS applications on remote computer servers for download to multiple
devices such as iOS-based devices running iOS 5 or later, and personal computers running
OS X 10.7.2 Lion or later, or Microsoft Windows (Windows Vista service pack 2 or later).
Apple's cloud photo storage and sharing application.
Refer to Internet Control Message Protocol.
A multi-function client that provides voice-over-IP and instant messaging capabilities.
A protocol that helps identify the user of a particular TCP connection.
An application that provides the Ident service.
An online archive of short films, movie trailers and other video clips.
A cross platform file sharing protocol developed by Novel.
iHeartRadio is an internet radio platform.
A video sharing site based in China.
Recognized with specific pattern refined from TCP.
IMAP
IMAP4
IMAPS
IMBPlus
iMesh
Imgur
Infantry
Infinity Online
Instagram
Refer to Internet Message Access Protocol.
A peer-to-peer application.
An image sharing site.
A free photo sharing application that allows users to take photos, apply a filter, and share it
on the service or a variety of other social networking services.
Interactive Mail Access Protocol Obsolete - Refer to Internet Message Access Protocol.
Inter-Asterisk eXchange Protocol A protocol used by Asterisk, a PBX used to enable voice-over-IP systems. The protocol is
also known as IAX2 and more commonly simply as “IAX”, as IAX1 is obsolete.
Interim Mail Access Protocol
Obsolete - Refer to Internet Message Access Protocol.
Internet Control Message ProtocolA protocol used by the operating systems of networked computers to send messages.
Internet Mail Access Protocol
Obsolete - Refer to Internet Message Access Protocol.
Internet Message Access ProtocolAn application layer protocol that allows a local client to access email on a remote server.
134
05-00070-B47
Glossary
Glossary of Terms
Internet Message Access ProtocolAn Internet standard protocol for e-mail retrieval.
over SSL
Internet Relay Chat
A protocol used for real-time Internet chat, synchronous conferencing, and file transfers.
iodine
A tunneling protocol over DNS port, which may use DNS protocol mode or raw UDP mode
to send data.
IonairTV
IPLA
Online streaming application.
IP over UDP
An IP tunneling protocol that encapsulates one IP packet in a UDP packet.
Recognized with specific pattern refined from UDP.
IPsec
IP Security
IPv6 over GRE
Refer to IP Security.
A suite of protocols for securing IP communication through authentication and encryption.
A transition technology to enable IPv6 using Generic Routing Encapsulation (GRE) over
IPv4.
Recognized by a fixed pattern signature refined from GRE.
IRC
ISAKMP
iShoot
iSkoot
Refer to Internet Relay Chat.
ISAKMP (Internet Security Association and Key Management Protocol) is a protocol for
establishing Security Associations (SA) and cryptographic keys in an Internet environment.
The protocol is defined by RFC 2408.
A peer-to-peer file-sharing application for movies.
iSkoot for Skype is a mobile VoIP application, where Skype is run over the iSkoot protocol.
Recognized by a fixed pattern signature refined from HTTP or SSL.
iTel VOIP
Provides a soft phone or dialer to make VoIP calls from mobile phones.
Recognized by a fixed pattern signature refined from STUN.
iTunes
iTunes Streaming
iTunes App Store
itv
iYOUCC
iVisit
Jabber
Jajah
Jaman
jango
Java Anonymity Proxy
Java Update
JIBJAB
jjANG LIVE
Jumptv
Justin TV
Kadu
KakaoTalk
Kankan
An online marketplace for digital audio and video owned and operated by Apple. All audio
and video downloads from the iTunes website is recognized as “iTunes”, although the transfers
take place over HTTP.
iTunes media download allows users to play, download, and organize digital audio and video
on any device platform (iOS-based iPod, iPhone, iPad , and Microsoft Windows.)
iTunes streaming allows you to access the content in your iTunes library from your computer
is streamed to any iPhone or iPad that has the same Apple ID and is on the same network.
The service allows users to browse and download applications from the iTunes Store that
were developed with the iOS SDK published through Apple Inc.
An online streaming application for viewing videos
A video service in Korea.
A peer-to-peer video conferencing application.
A protocol predominantly used for instant messaging and voice-over-IP applications.
A web-based voice-over-IP provider.
A video-on-demand service. It allows viewing on a variety of platforms via a downloadable
P2P client.
An online streaming radio application.
A proxy system designed to allow anonymous web browsing.
Java software update.
A website hosting video and e-cards and other content.
A free application that broadcasts videos.
A website that provides online streaming of hundreds of television channels from around the
globe.
A video broadcasting and streaming application.
An instant-messaging application that uses the Gadu-Gadu protocol.
KakaoTalk is a downloadable software application for mobile devices that allows its users
to send and receive messages including photos, videos, and contact information, both on
one-to-one basis and in groups.
A peer-to-peer streaming application; a form of Thunder.
05-00070-B47
135
Glossary
Glossary of Terms
kast
Kaixin
Kazaa
KBSLive
A software client used to participate in Konspire2b file transfers.
A Chinese social networking website.
A peer-to-peer file-sharing client that uses the FastTrack network prominently used to
exchange MP3 files.
Note:
Kplayer LiveTV traffic is now recognized as KBS Live.
Keek
Kerberos
KidsVision
kik
Kohan
konspire2b
KONTIKI
Kopete
Free online social networking service that enables its users to upload video status updates.
A computer network authentication protocol
An application that allows parents to view their children at participating childcare centers.
A cross-platform mobile messaging application which allows you to exchange messages
without having to pay for SMS.
A real-time strategy computer game.
A peer-to-peer file distribution system.
A digital media distribution protocol.
A network storage protocol encompassing traffic from the following sites: Downs, Exfile,
Kdisk, Neodisk, MFile, Ondisk, Cooldisk, PDPop, 1004disk, Wawadisk. It originates from the
region of Korea.
Recognized by a fixed pattern signature refined from TCP and Alibaba.
Kpeer
Kugoo
Kuwo Music
KyLinTV
L2TP
Ladbrokes Poker
Last.fm
Online file storing and distributing service
Kpeer is a peer-to-peer solution engine for downloading services, like streaming, games
update.
A Chinese streaming music service.
A streaming television service intended for a Chinese audience.
Refer to Layer 2 Tunneling Protocol.
An online poker service provided by Ladbrokes.
An Internet radio service that provides streamed music.
Recognized by fixed pattern signature refined from SSL.
Layer 2 Tunneling Protocol
A tunneling protocol used to support virtual private networks.
LDAP
Refer to Lightweight Directory Access Protocol.
League of Legends
An online strategy action video game.
Left4Dead2
Online multiplayer game.
LG IPTV
Iptv by LG which uses set-top box.
Licq
An instant-messaging application that uses the same protocol as ICQ and AIM.
Lightweight Access Point ProtocolRefer to LWAPP.
Lightweight Directory Access
An application protocol used to query and modify directory services running over TCP/IP.
Protocol
Lineage version 2
A massive multiplayer online role-playing game (MMORPG) for the PC.
Line Naver
A messaging protocol used by the LINE service provided by the Naver portal.
Linkedin
A social networking platform for professionals
LiveProfile
Livestation
An online streaming application.
Libon
Libon is a VoIP and instant messaging application developed for Apple.
LiveVault
A cloud-based storage service.
LogMeIn
A public company that provides software as a service-based remote connectivity, collaboration,
and support solutions to businesses and consumers.
Lords of EverQuest
Lotus Notes
A client-server collaborative application used for managing applications on a Lotus Domino
server.
LWAPP
Used to control multiple Wi-Fi wireless access points at one time.
136
05-00070-B47
Glossary
Glossary of Terms
M+ Messenger
M2TP
Madden 07
Madden NFL 12
Magic Jack
MANOLITO
MapleStory
MaxPanye3
MaxGO
Maze
MBC VOD
mBit
MediaData
Media Gateway Control Protocol
Mega
MelOn
MePlayer
MessageMe
Mercury
Metacafe
Mgcamd
MGCP
mgoon
mICQ
Microsoft ASF
Microsoft Exchange
Microsoft Net Send
Microsoft SQL
Online file storing and distributing service
Refer to MANOLITO.
An online Playstation 3 game.
An Xbox Live video game.
A computer peripheral that provides VoIP telephone services.
MaxGO is a streaming application.
A peer-to-peer file-sharing application.
A mobile peer-to-peer application.
A sub protocol of msnp, which detects pc2pc voice/video chat feature
A protocol used within a distributed voice-over-IP system.
Mega is a file sharing & network storage service (relaunch of what was earlier known as
megaupload)
SK Telecom's music service, which allows users to download or stream music over the
internet. The music can be played on mobile phones, digital audio players, portable media
players and digital cameras. Users can also create their own ring tones.
A streaming media service.
MessageMe is a free messenger.
An instant-messaging application that uses the MSN Messenger protocol.
A video-sharing site that provides streaming and uploading of video content.
A DVB card sharing client that allows several people to share access to satellite television
simultaneously.
Refer to Media Gateway Control Protocol.
A video streaming service.
An instant-messaging application that uses the same protocol as ICQ and AIM.
Refer to Windows Media - Advanced Systems Format.
A client-server collaborative application used for managing applications on a Microsoft
Exchange server.
A protocol used by Microsoft's streaming server “Microsoft Media Services” to transfer unicast
data.
A command within Microsoft's Windows operating systems that provides a network-based
system notification service.
A relational model database server produced by Microsoft.
Recognized by a fixed pattern signature refined from UDP and Other TCP.
Milliyet
MINECRAFT
Minus
Miranda IM
Miro
mixi
MLB.TV
MMS
A subscription-based service which offers access to various services and software built
around the Microsoft Office platform.
A popular Turkish news website.
A video game.
Minus is a location-based chat and photo sharing application supported in Android and
iPhone.
An Internet TV application that downloads episodes of podcasts and other online videos
such as YouTube and Google Video (which are recognized by their respective providers as
before) content using RSS feeds. It also has a BitTorrent back end (which are recognized
as BitTorrent flows).
One of several social networking websites in Japan. As is typical of social networking sites,
users can send and receive messages, write in a diary, read and comment on others' diaries,
organize and join communities, and invite their friends.
Audio and video streaming services provided by the Major League Baseball Association.
Refer to Microsoft Media Server or Multimedia Messaging Service.
05-00070-B47
137
Glossary
Glossary of Terms
Mnet
MNTalk
MobileMe
Mocospace
Mohawkvoice
Move Networks
mozy
MPEG
Multimedia Messaging Service
MSNP
MSN Games
MSN Video
A video streaming application that provides entertainment programs as part of
video-on-demand services.
A free messenger service including chat, group chat and broadcasting.
A subscription-based collection of online services provided by Apple.
A social networking website for mobile applications.
A VoIP application used for multi player gaming and conferencing.
A provider of video streaming technology and services. It streams video for several television
publishers.
An online backup tool.
An ISO/ITU standard for compressing digital video.
A standard for telephony messaging systems that allows the sending of rich multi-media
messages including images, audio, and video in addition to text.
Microsoft Notification Protocol (MSNP) provides the following features:
• chat
• pc2pc voice chat
• pc2phone VoIP
• file transfer
• pc2pc gaming
• pc2pc video chat
• application sharing
• remote assistance
• webcam
An online games site primarily devoted to casual games. MSN Games is part of the MSN
portal owned by Microsoft Networks.
A web-based application used for finding, uploading, and playing video.
Recognized by a fixed pattern signature refined from HTTP. Data flows are recognized or
MTV Music
Mumble
Musicbox
Music Choice
Musicovery
MUTE
muve
muveMusic
my c-@t
Muzutv
HEAVY
Mynet
myspace
Myth
myTV
Namipan
NATE Hoppin
Nate Pann
NateOn Talk
Nate VOD
Naver
NAVER Cast
138
An online music streaming application.
A VOIP application used primarily while gaming.
A music streaming and download service.
A digital music service.
A mobile live streaming radio service.
A music service.
A streaming music application.
A streaming application.
Is an interactive music website featuring free music content and legal video sharing website.
A Turkish Internet portal.
A social networking website that hosts a wide array of music and video content. The majority
of traffic associated with MySpace is due to audio and video streaming.
A an online computer game.
An online TV service of TVB Limited in HongKong.
A Korean streaming video service.
A Korea-based video service from Nate.
An instant messaging client and protocol, which supports chat and file transfers.
Streaming service from Nate portal
A search engine portal site (similar to Google and Yahoo) that also has various media, social
and electronic communication services. Sandvine currently identifies the video streaming
service for music and sports aspects of the website as Naver.
A video collection streaming protocol serviced by the Naver portal.
05-00070-B47
Glossary
Glossary of Terms
NAVER Sports
A video streaming protocol serviced by the Naver portal and dedicated to broadcasting sports
events.
NBA
The National Basketball Association's (NBA) streaming video service.
NBA 2K13
Online Xbox game
NBC
Streaming video provided by the NBC network. This protocol is now recognized as RTMP.
NBT
Refer to NetBIOS over TCP/IP.
NCAA
A live video streaming site for sports.
Need for Speed
A racing video game.
NeoFolder
Net Send
Refer to Microsoft Net Send.
Net2Phone
A voice-over-IP application.
NetBIOS over TCP/IP
A protocol that allows legacy computer applications relying on the NetBIOS API to be used
on modern TCP/IP networks.
NetBT
Refer to NetBIOS over TCP/IP.
Netflix Watch Now
An online movie streaming website.
NETFOLDER
An online network storage service based in Korea
Netlog
Social networking application which allows users to chat, blog, share videos online and play
multiplayer games.
NetMovies
A Brazilian streaming movie service.
Network News Transfer Protocol An Internet application protocol used primarily for reading and posting Usenet articles and
transferring news among news servers. The protocol is also used extensively for large file
transfers. A number of NNTP providers now offer NNTP transfers over an SSL connection
as a mechanism to encrypt content
Network Time Protocol
A protocol used for synchronizing the clocks of computer systems over packet-switched,
variable-latency networks.
NeuLion
An IPTV provider.
NewCS
A satellite DVB card sharing emulator. Peers are PCs which are connected to internet. PCs
will be either locally connected to a set-top-box or the PC itself will have special hardware
(DVB card).
A protocol for the flows related to game downloads from the nexon web site.
NextGuide
NextGuide is a “hyper-personalized” guide for streaming and live TV.
NFL Gamepass
Online game by NFL
Nico Video
A video streaming application.
Nimbuzz
A mobile instant message application.
NING
A popular social networking site. Ning provides the ability to create a community website
with a customized appearance and feel, feature sets such as photos, videos, forums and
blogs.
Nintendo Gaming
Nintendo Gaming is an online gaming application.
Nindino
A VoIP client.
Nlive TV
A streaming media website.
NNTP
Refer to Network News Transfer Protocol.
NNTP SSL
Refer to NNTP.
NTP
Refer to Network Time Protocol.
Numberbook
A service for looking up phone numbers.
Nymgo
A software application that makes calls from computers to landlines and mobile phones over
the Internet through VoIP.
Obfuscated VoIP
Calling card-based VoIP calls. This kind of card-based VoIP is most prevalent in the Middle
East.
Octoshape
A proprietary streaming media platform.
Odnoklassniki
A Russian social networking site.
OlivePhone
A VoIP application.
olleh TV
Omens of War
Onion Router, The
Refer to Tor.
OnLive
A cloud computing, gaming-on-demand platform: the games are synchronized, rendered,
and stored on remote servers and delivered via the Internet.
05-00070-B47
139
Glossary
Glossary of Terms
Recognized by a fixed pattern signature refined from SSL, UDP and RTP over UDP.
OptimumTV
OptimumTV is a digital cable service by Cablevision.
ooVoo
OOYALA
An online VoIP/IM/Video conferencing application.
An online video provider. It provides an end-to-end solution for content-owners to transcode,
manage, deliver, analyze and monetize their video assets.
Refer to OpenFT.
A web browser designed primarily for mobile phones, but also for smartphones and personal
digital assistants. Opera Mini fetches all content through a proxy server that reformats web
pages into a format more suitable for small screens. A page is compressed and delivered
to the phone in a markup language called OBML (Opera Binary Markup Language).
Offers private path to access network resources and services securely.
An online game distribution service.
A social networking website that allows uploading of photographic content.
Open FastTrack
OpenFT
Opera Mini
OpenVPN
Origin
orkut
Outlaw
own3D tv
paltalk
pando
An online multiplayer game.
A video service to post live gamings.
An internet chat service for text, voice, and video.
A managed P2P Content Delivery Network protocol that enables media sharing for personal,
corporate and commercial use.
PANDORA Radio
An automated music recommendation service that is available in the United States only.
PANDORA TV
A video-sharing website that allows users to upload and stream videos. There is also an
installable mini client that can be used to stream videos.
Paranplayy
PayPal
Global e-commerce business allowing payments and money transfers to be made through
the Internet.
PC Anywhere
An application that allows users to connect to remote PCs.
PC: Aion
An online PC-based game.
PC: FireFall
An online PC-based game.
PcGamesOriginDownload is an online service for EA game downloads.
PCast
A peer-to-peer video streaming application
Pcgames_borderlands2
Pcgames_borderlands2 is an online multiplayer game.
Pcgames_footballmanager2013 Pcgames_footballmanager2013 is an online multiplayer game.
PDBox
pdproxy
A TCP/UDP/ICMP based tunneling application that sends proxy HTTP requests through a
secure tunnel.
PGSH
A parallel-tasking remote shell runner.
PeerCast
A multicasting video streaming application.
Perfect Dark
A peer-to-peer file-sharing application.
Picasa
An image organizer and image viewer for organizing and editing digital photos, plus an
integrated photo-sharing website.
photobucket
A web-based photo sharing and photo printing service.
PingChat
Pinterest
A photo sharing website.
PlanetSide
PlanetSide2
Plex
Plex is an online streaming application.
Poco
Point Blank
An online game.
Point-to-Point Tunneling Protocol A protocol used in the implementation of virtual private networks.
pooq
POP3
Refer to Post Office Protocol.
POP3S
Refer to Post Office Protocol (Secure).
140
05-00070-B47
Glossary
Glossary of Terms
PopFolder
PostgreSQL
Post Office Protocol
Post Office Protocol (Secure)
Post Office Protocol over SSL
PPFilm
PPLive
An object-relational database management system (ORDBMS).
An application layer protocol used to retrieve email from a remote server.
The secure version of an application layer protocol used to retrieve email from a remote
server.
An application layer protocol used to retrieve email from a remote server over SSL.
An instant messaging and video chatting service.
A peer-to-peer video streaming application originating from the region of China.
Note:
Advertisement flows (HTTP flows) are not refined as PPLive.
PPMate
PPMule
PPS.tv
PPTP
PutLocker
PPVOD
A peer-to-peer video streaming management application that utilizes a number of underlying
popular P2P protocols in order to transfer file content.
A peer-to-peer resource sharing software.
A peer-to-peer video streaming application that is popular in China for watching TV shows.
It uses HTTP/TCP for control flows and UDP flows during the video streaming.
Refer to Point-to-Point Tunneling Protocol.
PutLocker is a online network storage site.
Free peer-to-peer online streaming media software.
Recognized by a fixed pattern signature.
Prime Gateway
Private Tunnel
Pronto Dialer
A payment gateway processing company.
Connects your computer to a VPN server using an encrypted tunnel, protecting your data
from interception and spoofing.
A mobile and PC VoIP application specific to the Middle East region.
Control flows are recognized by a fixed pattern signature refined from UDP. Data flows are
recognized or refined using information from the control flow.
Pronto PC Dialer
A PC-based VoIP application specific to the Middle East.
Pruna
Psi
Puffinbrowser
qik
QQ
QQLive
QQ Tornado
A peer-to-peer Korean-language client based on eMule.
Mobile web browser available on Apple and Android devices.
An audio and video chat application.
Refer to Tencent QQ.
A download manager application.
Recognized by a fixed pattern signature refined from HTTP, UDP or TCP.
Qriocity
Quake 4
Quasi Video on Demand
Quickflix
QuickTime
QVOD
RADIUS
Ragnarok
RapidShare
rdio
RDP
realPlayer
A streaming music, games, e-books and video on demand service.
A video streaming and peercasting application originating in the region of China.
An Australian streaming movie service similar to Netflix.
A media player.
Refer to Quasi Video on Demand.
Refer to Remote Authentication Dial-In User Service.
An online storage website that allows users to upload and download large video files.
An ad-free music subscription service. It is available as a website and also has clients for
the iPhone, iPod Touch & iPad, Android, BlackBerry and Windows Phone mobile devices,
which can play streaming music or cache songs for offline playback.
Refer to Remote Desktop Protocol.
A media player (formerly Real One Player)
05-00070-B47
141
Glossary
Glossary of Terms
Real Time Streaming Protocol
Real Time Streaming Protocol
Tunnelled
Real Time Transport Protocol
REBTEL
Redboxinstant
Red Swoosh
RemoteAssist
Remote Authentication Dial-In
User Service
Remote Desktop Protocol
Resistance: Fall of Man
Revver
Rhapsody
RIFT
Ringomax
ROGERS anyplace tv
RPC
RTCP
RTEPlayer
RTMP (Adobe)
RTMP Encrypted
RTP
RTP Control Protocol
RTSP
RTMP
RuneScape
A protocol used in streaming media to initialize and control streaming traffic data (typically
carried on separate RTP and RTCP flows).
A tunnelled version of RTSP.
A protocol used to deliver audio and video data. The RTP flow is initialized by an RTSP or
SIP control plane and is usually associated with an RTCP flow that provides meta information.
A VoIP provider that provides applications supported on PCs and mobile devices.
Video Streaming Service from Verizon
A peer-to-peer networking client.
The pc2pc remote assistance feature is detected under this sub protocol of msnp.
An authentication, authorization, and accounting protocol used for applications such as
network access and IP mobility.
A protocol that allows a user to connect to a computer running Microsoft Terminal Services.
An online Playstation 3 game.
A video sharing website that hosts user-created videos.
An audio-video streaming site.
A multi-player role-playing video game.
A client software which is used for making VoIP calls between the users.
A Canadian video-on-demand service provided by Rogers.
Refer to Distributed Computing Environment Remote Procedure Call.
Refer to RTP Control Protocol.
A streaming application, popular in Ireland.
A streaming protocol used by a number of online video sites (including the BBC iPlayer).
Encrypted RTMP.
Refer to Real Time Transport Protocol.
A protocol used to provide meta information for an associated RTP flow.
RTSP is a Real Time Streaming Protocol.
RTMP is a Real Time Messaging Protocol for streaming audio, video and data over the
Internet, between a Flash player and a server.
Rutube
SageTV
Sam Knows
SAPO Messenger
SAPO Video
SBS
SBS Gorealra
SCTP
SecondLife
Secure Shell
Seed
Secure Sockets Layer
SessionControl
Session Initiation Protocol
Share
SHAZAM
142
Rutube is a web based streaming application. It is the Russian clone of YouTube.
A place-shifting application that allows video content to be streamed one-to-one over the
Internet.
A company that measures broadband performance using a special enterprise-grade intelligent
router.
An IM application that supports text chatting, voice chatting, and file transfers.
An Australian web video service.
A Korean audio and video streaming service.
Refer to Stream Control Transmission Protocol.
A protocol that allows data to be exchanged over a secure channel between two computers.
VOIP application used to make voice or video calls.
A protocol that provides secure Internet communication, typically for such activities as web
browsing, email, instant messaging, and data transfers.
A sub-protocol of MSNP. The MSN chat feature is detected under this sub-protocol and the
statistics are reported under the main protocol MSNP.
An application-layer control protocol used to create, modify, and terminate sessions with one
or more participants. SIP is widely used as a signalling protocol for voice-over-IP applications.
The actual data is transferred using RTP.
A music identification and sharing service. Users use their smartphones to capture music
playing around them. SHAZAM attempts to identify the music. Users can then share the
songs they like.
05-00070-B47
Glossary
Glossary of Terms
Shockwave Flash
SHOUTcast
Shockwave is a proprietary variety of the Flash video format.
An Internet radio application used primarily with the Winamp media player.
SID
SIMPLE
Simple Mail Transfer Protocol
An instant message service that carries the message in plain text form.
A text-based protocol used for the transmission of email.
Simple Network Management
A protocol used by network management systems to monitor networked devices.
Protocol
Simple Traversal of UDP through A protocol allowing a client behind a Network Address Translator (NAT) to determine its
NATs
public IP address, the type of NAT it is behind, and the Internet-side port associated by the
NAT with a particular local port.
Sina
The largest Chinese-language infotainment web portal. It provides free streaming videos
under various categories such as music, movies, sports, news, and so on. This site streams
video in HTTP and can be viewed in browsers with Adobe Flash Player.
Sina UC
A popular Chinese Instant Messaging Client.
SIP
Refer to Session Initiation Protocol.
SIPLink
A SIP-based soft phone used for making VoIP calls.
SIP Data
Session Initiation Protocol data.
SpeedVoip
An encrypted voice-over-IP application, popular in the Middle East. Speedtest An internet
speed test website that measures the speed of broadband connections
SkeedCast
Provides web-based peercasting.
Skout
Sky Anytime+
Sky Go
Sky On Demand
A social networking application available for iOS, Android, and PC platforms.
A video-on-demand extension to the Sky Anytime service. Sky Anytime+ requires a Sky TV
subscription, Sky + or Sky+HD box, and an Internet connection. A user can download videos
using the Sky Anytime+ feature and watch the video any time.
Sky On Demand offers video on demand services. On Demand is available in various forms
including:
•
A PC version using peer-to-peer platform over broadband Internet connection.
•
A version for 3G mobile users.
•
A push video on demand service for subscribers equipped with a Sky+ HD set-top box
or the PVR3 version of the Sky+ set top box.
•
A pull video-on-demand service.
Skype
A peer-to-peer voice-over-IP application that uses a proprietary protocol for encryption and
communication. In addition to communication between PC users, Skype allows users to send
and receive calls to and from the PSTN (services called SkypeOut and SkypeIn, respectively).
All SkypeOut/SkypeIn phone calls are reported as SkypeOut.
Skynowtv
Skyrock
Skynowtv is a streaming application.
A social networking site offering its members a free web space where they can create a blog,
add a profile, and exchange messages with other registered members. This social network
service is available in many languages.
SlackerRadio
slingbox
SmartFoxServer
SMTP
Snapchat
An interactive radio service available only in the United States and Canada.
A place-shifting application that allows video content to be streamed one-to-one over the
Internet.
SmartFoxServer is a comprehensive and powerful platform for rapidly developing multi-user
applications and games with Adobe Flash/Flex/Air, Java,.Net, Unity3D, Apple iPhone, and
so on. SmartFoxServer uses XML format for all its messages.
Refer to Simple Mail Transfer Protocol.
A photo messaging application.
05-00070-B47
143
Glossary
Glossary of Terms
Snapfish
SNMP
SocialTalk
SOCKS v5
Socl
SoftEther
Sonica
SonyTV
SopCast
Soribada
SoulSeek
SoundCloud
SoundHound
Spare Backup
SPB TV
SPDY
Speedtest
Spiral Knights
Spotify
A web-based photo sharing and photo printing service.
Refer to Simple Network Management Protocol.
An application to manage several social media accounts.
A protocol that allows client-server applications to transparently use the services of a network
firewall.
A social networking service from Microsoft
A virtual private network application.
A social networking site popular in Latin America.
A multi-function Internet-based device used to stream digital content. It can also be used in
conjunction with Sony's PSP hand-held gaming product.
A peer-to-peer file music sharing and streaming services.
An audio distribution platform that enables users to upload, record, and promote content.
An audio distribution platform.
An automated, completely secure online backup service.
A mobile television application.
An application layer protocol enabled on the latest version of Google Chrome browser and
helps to reduce the latency of Web pages.
An internet speed test website that measures the speed of broadband connections.
A video game.
A peer-to-peer music streaming application.
Recognized by dynamic structural pattern between or in the packets.
SSH
SSL
SSL Analyzer
SSL VPN
Refer to Secure Shell.
Refer to Secure Sockets Layer.
SSL Analyzer is used to expose SSL specific handshake packet contents for writing
SandScripts.
A Secure Sockets Layer virtual private network (SSL VPN) is a form of VPN that can be used
with a standard Web browser and it does not require the installation of specialized client
software on the end user's computer.
Recognized by a fixed pattern signature refined from UDP and TCP, and by dynamic structural
pattern within one or more packets.
Stage2Data
Star Wars Galaxies
Star Wars: The Old Republic
Starcraft
Starcraft 2
StealthNet
Stream Control Transmission
Protocol
STUN
StupidVideos
S.W.A.T. 3
SyncML
Syslog
Shutterfly
T freemium
Tachy
Tanarus
Tango
Tantra
TCP
144
A cloud-based storage service.
A video game.
The sequel game to Starcraft.
A peer-to-peer file sharing software.
A transport protocol designed to transport multiple message streams.
Refer to Simple Traversal of UDP through NATs.
An online game.
Live update for Norton anti virus application.
A wireless protocol used to synchronize data between mobile users.
A standard for forwarding log messages on an IP network.
Shutterfly is an Internet-based social expression and personal publishing service
A streaming video service provided by SK Telecom. It is available for SKT LTE users using
specific data plans.
A Korean instant messaging service.
A VoIP application for video calls that is used mainly in the Middle East.
A peer-to-peer multiplayer online role playing game.
Refer to Transmission Control Protocol.
05-00070-B47
Glossary
Glossary of Terms
Teacher Tube
TeamSpeak
TeamSpeak is a VoIP application that allows users to speak on a chat channel with other
users, much like a telephone conference call.
Recognized by a fixed pattern signature refined from UDP.
Trion Worlds Games Downloads Trion Worlds Games Downloads is meant to download games from Trion Worlds.
TBS
An on-demand streaming video application for the TBS television channel.
Recognized by a fixed pattern signature refined from DNS. Data flows are recognized or
T cloud
Team Fortress 2
TeamViewer
Telefone
Telnet
TencentQQ
Teredo
A Korean data storage service.
A team-based mulitplayer video game.
A computer software package for remote control, desktop sharing, and file transfer between
computers. The software operates with the Microsoft Windows, Mac OS X, Linux, iOS, and
Android operating systems. It is possible to access a machine running TeamViewer with a
web browser.
A VoIP service popular in the Middle East.
A network protocol used to connect to remote systems.
An instant messaging application which supports file transfer, voice calls, email and music.
A protocol that allows IPv6 connectivity to network nodes that are located behind IPv6-unaware
NAT devices.
Terraria
TFTP
The Legacy of Ykesha
The Planes of Power
The Ruins of Kunark
The Scars of Velious
The Shadows of Luclin
Thunder
An online action-adventure multiplayer game.
Refer to Trivial File Transfer Protocol.
A peer-to-peer file-sharing client, network, and protocol that is also capable of conducting
file transfers over HTTP.
Recognized by a fixed pattern signature refined from UDP or TCP and recognized by dynamic
structural pattern within one or more packets.
Time Warner Cable
tinychat
Tkabber
TNT TV
A streaming service by Time Warner Cable
A social networking site that features video chat rooms.
On-demand streaming video application for content from the TNT television channel.
Recognized by a fixed pattern signature refined from DNS, HTTP, RTMP or RTMPe. Data
flows are recognized or refined using information from the control flow.
Tor
Totodisk
A software client that uses onion routing to enable anonymous Internet communication.
Recognized by a fixed pattern signature refined from TCP.
Totorosa
TouchToTalk
Transmission Control Protocol
Trend Micro
A streaming protocol.
A VoIP application that resembles walkie-talkie experience over touch phones. It allows
traditional push-to-talk technology between cellular networks via the application and the
Internet, without any dedicated hardware.
A transport protocol used for connections between network hosts. Unlike UDP, TCP
guarantees reliable and in-order delivery of data from sender to receiver. TCP traffic that is
not distinguishable as belonging to a particular application or service is reported as “Other
TCP Protocol”.
An anti-virus application.
05-00070-B47
145
Glossary
Glossary of Terms
Tribair
Tribler
Trivial File Transfer Protocol
truecaller
tru TV
T store
TT Talk
tudou
TU me
Tumblr
Tuenti
TuneInRadio
Turkcelltv
Tuotu
TV Catchup
Tvguide
tving
TVOS
TVUPlayer
A VoIP application for iPhone.
A peer-to-peer file sharing client.
A protocol used to implement a very simple implementation of FTP.
A VoIP application that provides online directory service.
An American cable television network owned by Turner Broadcasting, a subsidiary of Time
Warner.
A mobile market for smartphone applications on SKTelecom.
A walkie-talkie communication application.
A video-sharing website that allows users to upload and stream videos.
A mobile application that can be used for calling, instant messaging, voice messaging, picture
messaging and location sharing.
Tumblr is a microblogging platform and social networking website. This service allows users
to post multimedia and other content in a short-form blog. Users can follow other users' blogs,
and as well as create their own blogs and make them private.
Tuenti is a social networking website.
A streaming radio service.
Turkell subscribers can watch turkcell TV channels and video on demand streaming
An internet television service for viewing certain UK channels live from free-to-air digital
terrestrial and satellite broadcasters without the use of a television receiver.
TV Guide is an application which lists the TV shows.
A Korean HQ video service that provides live TV channels and Video-On-Demand titles.
A Malaysian streaming television service.
A freeware application for watching online TV programs. It uses P2P technology.
Recognized by a fixed pattern signature refined from UDP. Data flows are recognized or
Tvnplayer
Twitter
Twitch
Olleh Ucloud
UDP
UG live
Streaming application used in Poland.
A social messaging utility.
Twitch is a live streaming video platform oriented towards video gaming. Twitch is designed
to be a platform for electronic sports, widely known as eSports, in which video game players
can watch other players in real-time. This platform has become a popular way for gamers
to watch tournaments and learn strategies from other gamers.
A cloud data storage service from olleh KT in Korea.
Refer to User Datagram Protocol.
Provides web-based peercasting originating from the region of Japan.
Recognized by a fixed pattern signature refined from unknown TCP.
Ultima Online
Amazon Unbox
Universal Datagram Protocol
Unreal
Unreal Tournament 3
Untold Legends
Uploaded
Uploading
U+ Box
User Datagram Protocol
Ustream TV
uTP
UUSee
An application provided by Amazon to stream files.
Used synonymously with User Datagram Protocol.
A file storage, transfer and sharing website.
A network storage service.
A transport protocol used to send short messages (sometimes referred to “datagrams”) to
one another. UDP traffic that is not distinguishable as belonging to a particular application
or service is reported as “UDP”.
An online video streaming protocol.
A sub-protocol of the BitTorrent peer-to-peer protocol. BitTorrent UDP file transfer protocol.
A P2P TV application that provides users with content to watch and record in real time.
Recognized by dynamic structural pattern refined from HTTP.
146
05-00070-B47
Glossary
Glossary of Terms
Vagaa
A peer-to-peer client that uses the BitTorrent and Gnutella protocols to allow their users to
download; originating from the region of China.
VBUZZER
An instant messaging client that supports voice calls and file transfer.
Recognized by a fixed pattern signature refined from HTTP, SSL or Jabber. Data flows are
recognized or refined using information from the control flow.
VDONext
Veetle
Ventrilo
veoh
VeryCD
Vevo
VGO Live
Viber
viddler
Video Insight
videojug
VIDMAX
vimeo
Vine
Vippie
An iPhone application used to stream video.
Live video streaming, viewing and broadcasting application that allows you to quickly broadcast
and share your videos
A voice-over-IP application.
Peer casting for video clip distribution.
A derivative of the eMule/eDonkey peer-to-peer family.
A music video website.
Peer-to-peer software that streams audio and video.
A voice-over-IP application mainly used in Middle Eastern countries for making voice calls
between iPhone clients.
Video Insight provides software for recording Digital Videos. Its products include IP video
surveillance software, IP video encoder, IP Camera server, and more.
A streaming video website.
A streaming video website.
A video-sharing website.
Vine is a mobile application by Twitter that enables its users to create and post video clips.
Video clips created with Vine have a maximum length of 7 seconds and can be shared or
embedded with social networking sites (Facebook or Twitter). Vine application is avaiable
on Android and iOS devices.
A VoIP application for PCs and mobile devices.
Virtual Tunnel
Vkontakte
A tunneling application.
A social network service for Russia, Ukraine, Belarus and Kazakhstan.
VNC
Vodafone Femto
VONGO
voxer
Voxofon
Voxox
VoxValley
vShare
Vsoft Phone
Vtun
vTuner
Vudu
Vyke Mobile
Vyke PC
WAP
A graphical desktop sharing system that uses the RFB protocol to remotely control another
computer.
A wireless service provided by Vodafone to transfer mobile network traffic over the Internet.
A video-on-demand service.
A Walkie Talkie application for smartphones.
A telephony service for making and receiving international phone calls. Voxofon blends earlier
VoIP technology with newer technology so callers can use a land line, a computer, cell phone
or smart phone.
An application which provides an interface for different IM applications such as Google Talk,
and so on.
VoxValley is a Symbian VoIP client for Quick4talk.
A voice-over IP application.
Refer to Virtual Tunnel.
An application that provides links to different media streaming sites. Note that since the actual
media streams do not belong to vTuner, they are not recognized as vTuner. This signature
only identifies the vTuner related flows.
An online video-on-demand service.
A Voice-Over-IP application.
A VoIP application used for making voice calls.
Refer to Wireless Application Protocol.
05-00070-B47
147
Glossary
Glossary of Terms
WAP MMS
Warcraft III
waste
WATCHESPN
WB Archive Instant
WeChat
Wedisk Streaming
Whozcalling
Windows Live
WindowsLive Messenger
Windows Live SkyDrive
Windows Media - Advanced
Systems Format
Multimedia Messaging Service (MMS) is a standard for telephone messaging systems that
allow sending messages that include multimedia objects (images, audio, video, rich text)
and not just text messages as in Short message service (SMS). It uses the Wireless
Application Protocol. This implementation only supports WAP2.0 on top of the HTTP flows.
An anonymous, secure, and encrypted collaboration tool that allows users to both share
ideas through the chat interface and share data through the download stream.
Streaming sports video from ESPN.
A streaming video service provided by Warner Brothers for rare and older films.
WeChat provides multimedia communication flexibility and convenience with text messaging,
hold-to-talk voice messaging, broadcast (one-to-many) messaging, photo and video sharing,
location sharing, and contact information exchange.
WediskStreaming is an online streaming service.
A phone directory application, identifies the numbers which are not listed in the phone contacts
A collective brand name for a set of services and software products from Microsoft. The
majority of these services are Web applications, accessible from a browser, but there are
applications that need installing as well. There are three ways in which Windows Live services
are offered: Windows Live Essentials applications, web services, and mobile services.
A multi-function client that provides voice-over-IP and instant messaging capabilities and
uses the MSN Messenger protocol.
Windows Live SkyDrive is a file hosting service that allows users to upload and synchronize
files to a cloud storage and then access them from a Web browser or a local device. It is
part of the Windows Live range of online services and allows users to keep their files private,
share files with their contacts, or make the files public. Publicly shared files do not require a
Microsoft account to access.
The file format used by Windows Media audio and video, popular with online streaming.
Windows-based internet assorted media application specifically for television use.
Windows Media Player is a media player and media library application developed by Microsoft
that is used for playing audio, video and viewing images on personal computers running the
Microsoft Windows operating system, as well as on Pocket PC and Windows Mobile-based
devices.
In addition to being a media player, Windows Media Player includes the ability to rip music
from and copy music to compact discs, burn recordable discs in Audio CD format or as data
discs with playlists such as an MP3 CD, synchronize content with a digital audio player (MP3
player) or other mobile devices, and enable users to purchase or rent music from a number
of online music stores.
Windows Media Player RTSP
Windows Messenger
Windows Update
WinMX
Winny
Wireless Application Protocol
Woopie
World of Warcraft
Windows Media Player using real-time streaming protocol.
A multi-function client that provides voice-over-IP and instant messaging capabilities and
uses the MSN Messenger protocol.
Traffic associated with updates for Microsoft's Windows operating system.
A peer-to-peer file-sharing client, network, and protocol. Also known as WinNY.
An open international standard for applications that use wireless communication, for example
to use the Internet from a mobile phone or similar device
Video search engine
Wowza
WhatsApp Analyzer
148
Wowza is a media streaming server.MB
Instant message analyzer.
WhatsApp Analyzer is used to report the traffic information about the messages transmitted,
bytes sent and received, byte counts, message formats (Text or Multimedia), and device
type used.
05-00070-B47
Glossary
Glossary of Terms
WTV
Xbox
Xbox LIVE Music
Xbox LIVE Video
XBOX LIVE Video Marketplace
XFINITY Streampix
Xfire
XML
Yahoo Games
Yahoo! Messenger
Yahoo Video
Yandex Disk
youku
YOUR-FREEDOM
YouTube
An iPhone application used to watch Chinese TV channels, TV Series and Hollywood movies.
Xbox online gaming website.
Application that provides live music streaming services
Application that provides live streaming services
A content marketplace that allows Xbox 360 owners to download additional game content
and high- and standard-definition video content directly to the console.
A network gaming client.
Used to structure, store and transport information. Various applications transmit XML data
as it is in the network.
A collection of online games provided by Yahoo!.
A multi-function client that provides voice-over-IP (using SIP) and instant messaging
capabilities.
Yahoo Video is internet-wide video search engine and added the ability to upload and share
video clips.
A Russia-based network storage service provided by Yandex.
A video sharing site where users can register and watch online TV and video.
A VPN tunnel application which provides interface for different IM applications.
A video-sharing website that allows users to upload and stream videos. YouTube uses HTTP
to deliver its video content.
YouTube HD
YouTube SD
YouTube Web
Yousendit
YTN
Yuwie
ZATTOO
Zentia
Zfile
Zimbra
Zimtv
Zoosk
zSHARE
Zultrax
Zynga
High-definition streaming video from the YouTube website.
Standard-definition streaming video from the YouTube website for PCs, mobile devices and
some gaming platforms.
Protocol for all other, non-video, traffic from YouTube used on PCs, mobile devices and
some gaming platforms.
An application for storing and sharing files.
An online social networking site that pays members for referrals and page views.
An online provider of television content.
A video game.
A KoreanNetStore application
An open source mail and calendar application that can be used either online or in a desktop
application. Email sent through many providers can be managed with Zimbra.
Unique social network that helps promote members by their favorite videos and entertainment.
A social network with online dating service that integrates with other social networks.
zSHARE allows users to upload files (data, audio, and video) that are accessible over the
internet from computer, tablet, smart phone or other networking device.
A peer-to-peer file sharing application.
A provider of social game services. Zynga's games are available on a number of global
platforms, including Facebook.
05-00070-B47
149
Glossary
Glossary of Terms
150
05-00070-B47
Index
050 plus 66, 91, 106
1Legcall 91, 106
1LegCall 66
4 on Demand 93, 106
4shared 72
4Shared 87
5 on Demand 93, 106
5min 93, 106
6.cn 61, 93, 106
6to4 65, 98
8tracks 53, 93, 106
A
Abacast 43, 93, 106
ABC Australia 53, 93, 106
ABC iView 93
ABC Live 53, 93, 106
ABC Streaming 53, 93, 106
ABC Vod 53, 93, 106
acTVila 53, 93, 106
Aereo 53, 93, 106
AFCP 106
Afreeca 43, 93, 106
Age of Conan 84
Aim 49, 91, 106
aimini 40, 89
Aion 84, 116
Airtime 49, 91, 106
Akamai 106
Alibaba 72, 87
Amazon 45, 93, 106
Amazon Cloud Drive 73, 93, 106
Amazon Cloud Player 53, 93, 106
Amazon Games Downloads 77, 84, 106
Amazon Instant Video 53, 93, 106
Amazon Kindle 46, 99, 106
Amazon Unbox 60
Amazon Video 106
AmazonCloudFront 83, 106
Ameba 46, 99, 106
America's Army 84, 116
Anarchy 84
Android Upload 46
Android Upload Traffic 93, 106
Aniboom 93
AniBOOM 106
AOL 53, 93, 106
AOL Uncut 106
AOL Video 93, 106
AOL2 65, 98
ApnaTube 93, 106
05-00070-B47
Apple iMessage 49, 93
Apple Juice 89
Apple Photo Stream 73, 93, 107
Apple Push Notification Service 49, 91, 107
Apple Siri 93, 107
Apple TV 93, 107
Apple Updates 83, 107
Apple Updates 75
AppleIMessage 107
AppleJuice 41
applemaps 46
Applemaps 99, 107
applications using multiple protocols 34
Ares 41, 89, 107
Ares Control 89
Ares UDP 89
Asheron’s Call 116
audiogalaxy 53
Audiogalaxy 93, 107
Avast 75, 107
Avast Update 83
AVG 75, 107
AVG Update 83
Avira Update 75, 83, 107
B
Bababoo 66, 91, 107
Babelgum 44, 93, 107
Backblaze 73, 107
Badongo 73, 99
Badoo 46, 99, 107
Baibao 89
BaiBao 41
Baidu 46, 99
Baidu Hi 49, 91, 107
Baidux 89, 107
BaiduX 41
Bansberry 91, 107
BANSBERRY 67
Battlefield 1942 84, 116
Battlefield 2 84, 107
Battlefield 3 86, 107, 116
BATTLEFIELD 3 77
Battlenet 116
BBC iPlayer 53, 93, 107
BBC SPORT 53, 107
BBCSport 93
Bear Share 89
BearShare 41, 107
Bebo 62, 93, 107
BestBuy Games Downloads 77, 86, 107
151
152 | Sandvine | Index
Betamax 67, 91, 107
Beyond TV 93
Remote Access 93
SSL 93
Streaming 93
BeyondTV 53
BFD 71, 87, 107
BitShare 73, 87, 107
BitTorrent 19, 41, 89, 107
BitTorrent DNA 89
BitTorrent Encrypted 89
BitTorrent Live 89
BitTorrent Probable 41
BitTorrent suspected 89
BitTorrent Sync 107
BitTorrent UDP 89
BitTorrent UTP 89
Blackberry 107
BlackBerry 76, 91
BlackBerry App World 91
Blackberry App World Store 107
BlackBerry App World Store 76, 87
Blackberry Voice 67, 107
BlackBerry Voice 91
Blinkbox 62, 93, 107
Blinkx 53, 93, 107
blip 62, 93
Blizzard Battle.net Games 84
Blockbuster 53, 93, 107
blubster 41, 89
bobsled 49, 91, 108
BOOTP 71, 87, 108
Boxee 38, 62, 93, 108
Breakvideo 93
Breakvideos 62
Brightcove 62, 93, 108
BT Digital Vault 73, 87, 108
BT Fon 65, 98, 108
BT Nevis 62, 93, 108
BT Speed Tester 71, 99, 108
BTV 53, 93, 108
BuddyBuddy 108
Bugs Music 54, 93
Bugs! Music 108
C
Call of Duty 77, 86, 117
Call Of Duty 108
Call Of Duty Black Ops 2 86, 123
Callserve 108
CAPWAP 65, 98, 108
Carbonite 73, 87
Cartoon Network 84
CartoonNetwork 54, 93, 108, 117
Casero 108
152
Castpost 108
CBC Sports 46, 99, 108
CBC Sports Video 62, 93, 108
CBS 54, 108
CBS Streaming 93
CCcam 41, 89, 108
CCIP TV 93
CCIPTV 44
CCTV 54, 93
CDDB 52, 87, 108
Cfox 93
CFOX 54, 108
Channel4 4oD 52
Channel5 Demand 5 52
ChannelFilms 62, 93, 108
ChatON 49, 91, 108
Chatphone 108
Chumby 46, 99
Cine21 54, 93, 108
Cinema Now 62, 93, 108
Cisco Webex 46
Citrix Online 49, 91, 108
City of Heroes 84, 117
Civilization V 116
Clubbox 73, 87
ClubBox 108
CNLive 93, 108
CNLive.com 54
CNN 54, 93, 108
Columbus 93, 108
Comcast 62, 93, 108
comcast columbus 54
Comm 67, 91, 108
Command and Conquer 84, 117
Coolstreaming 44, 93, 108
Counter-Strike Condition Zero 117
Counter-Strike Global Offensive 84, 117
Counterstrike 84
Source 84
Counterstrikeconditionzero 84
Cozmo TV 93
CozmoTV 62
Crackle 62, 93, 108
Crashplan 73, 87, 108
Crysis 84
Crysis 2 84, 109
cuptv 54
CupTV 93, 109
CwTv 93, 109
D
Dacom 73, 87, 109
Dailymotion 54
DailyMotion 93, 109
Dark Age of Camelot 84, 109
05-00070-B47
Sandvine | Index | 153
Dark Region 84
Daum 46, 67, 91, 99, 109
Daum Cloud 73, 87
Daum Mypeople 91, 109
Daum Tv Pot 54
Daum TV Pot 93, 109
Day of Defeat 84
DCE RPC 87
DCERPC 71, 109
Deezer 54, 93
Delta Force 84
deposit files 73, 87, 109
DHCPv6 71, 87, 109
Diablo III 84, 117
Direct Connect 41, 89
DirecTV 54, 93, 109
disabled protocols, default configuration 36
Dish Network VOD 93
DISH Network VOD 109
DishnetworkVOD 54
Diskpop 73, 87
Disney Channel 62, 93, 109
Disney Junior 62, 93, 109
Disney XD 62, 93, 109
DNS 71, 87, 109
Dofus 84, 117
Doom 84, 109
Dopool 44, 94, 109
Dota 2 84, 117
Dovetail 109
Dropbox 73, 87, 109
Dropshots 62, 94
Dudu 89, 109
E
EarthStation 5 89
Earthstation5 109
eBay 46, 99, 109
EBS 54, 94, 109
EBSi IPTV 109
ebuddy 49, 91, 109
eDonkey 41, 89, 109
eDonkey Encrypted UDP 89
eDonkey High Speed 89
eDonkey UDP 89
Einyplayer 44, 109
EinyPlayer 94
Elite Force 117
ePix 54
Epix 94, 109
Es5 109
ESPN 62, 94, 109
ESPN Player 54, 94, 109
ESPN STAR 99
ESPN2 62
05-00070-B47
ESPN3 62, 94, 109
ESPNSTAR 46, 62, 94, 109
ESPNSTAR Video 109
Eve Online 84, 109
Evernote 73, 87, 110
EveryonTV 94, 110
EVERYONTV 54
Excalibur 110
Exchange 110
Existing or Unmanaged 87
Existing or Unmanaged Session 77
Explore 3D TV 55
Explore3D 94, 110
Eyespot 94, 110
eyeVio 62, 110
EyeVio 94
Ezpeer 41, 89
EZPeer 110
Ezzy 91, 110
Ezzy VoIP 67
F
F16 84
F22 84
Facebook 46, 97, 110
Facebook Voice 67, 110
FacebookPipe 72, 83, 110
FaceTime 67, 110
Fancast 55, 94, 110
FastTrack 41, 89
FastTrack Browse Host 89
FastTrack Data 89
FastTrack UDP 89
Feidian 44, 94
Felguri 110
Fetion 49, 91, 110
Fetion File Transfer 91
Fetion Web IM 49, 91, 110
Ficall 19, 91, 110
FiCall 76
FIFA 12 84, 110
FIFA 13 84
fifa12 117
FIFA13 110
Fighter Ace II 117
Fiji 55, 94, 110
Fileguri 89
FileGuri 42
FilePost 73, 87, 110
FileServe 73, 87, 110
FileSonic 73, 87, 110
FileTopia 42, 89
Final Fantasy XI 84
FireFall 84
Firefly 110
153
Fishbone 65, 110
Flash 36, 42
Get 36, 42
Flash Video 55, 94
FlashGet 89, 110
FlashVideo 110
Flickme 55, 94, 110
Flickr 46, 99, 110
Folderplus 73, 87
Fon 98
FONE 2 CALL 67
Fone2Call 110
Fonosip 91, 110
FonoSIP 67
Fortress Classic 84
Foursquare 46, 99, 111
Fox 55, 94, 110
Foxy 42, 89
Freakshare 73
Freechal QTV 62, 94, 110
Friendster 46, 97, 110
Fring 91, 110
Fring Voice 91
FSecure Update 75, 83, 110
FTP 72, 83, 110
Funshion 44, 94, 111
FurtherNet 89
FurthurNet 42
G
Gadu Gadu 49, 91, 111
Game Spy 84
GameFly Games Downloads 77, 111
GameSpy 117
GameStop Games Downloads 77, 84, 111
Gametrailers 55, 94
Garry's Mod 84, 117
GeeVee 49, 91, 111
Giganews 45, 83, 111
Gigatribe 42
GigaTribe 89, 111
Gizmo Project Chat 111
GizmoProject 49
GizmoProject Chat Control 91
GizmoProject Chat Control SSL 91
Global Agenda 84, 111
Globaltv 111
Gmail 51, 83, 91, 111
Gnutella 42, 89, 111
Gnutella asymmetric 39
Gnutella Encrypted 89
Gnutella UDP 89
Gnutella2 42, 89
Goboogy 42, 89
GodTube 62, 94, 111
154
gogoyoko 55
Gogoyoko 94, 111
GOM TV 94
GomTV 111
GOMTV 55
Gonfile 73, 87
Google 46, 49, 67, 83, 99, 111
Earth 46, 99
Map 99
Play 83
Talk 49, 67
Video 111
Wave 99
Web Accelerator 46, 99
Google Drive 73, 87, 111
Google Music 55, 94, 111
Google Play 75, 111
Google Plus 46, 97, 111
Google Talk 111
Google Video 62, 94
Google Wave 111
GoogleMap 46, 111
GoogleProxy 65, 98, 111
Googletalk 111
Data 111
GoogleTalk 91
GoogleTalk Data 91
GoogleTalk Push Notification 91
GoogleTalk Voice 91
Gougou 46, 111
Gplex 67, 91, 111
Gplex Control 91
Gplex Data 91
Graboid 55, 94, 111
Granado Espada 117
Granadoespada 84
GRE 65, 98
Gree 46, 99, 111
Grooveshark 55, 94, 111
GTP 1 111
GTPv0 76, 91
GTPv1 76, 91
GUILDWARS 2 117
Guildwars2 84
Guru Guru 89
Guruguru 42
H
H.225 91
H.245 91
H.323 67, 91
H.323 Data 91
HABBO 46, 99, 111
Halavoice 111
HalaVoice 67
05-00070-B47
Half-Life 2 84
Halo 84
Halo 4 86, 124
Halo Reach 86
halo4 86
Hamachi 65, 98, 111
HBO GO 55
HBOgo 94, 111
HD Video Call 111
Headcall 111
HeadCall 68, 91
Heretic 84
Hero Online 84
Heroes of Newerth 84, 112
Hexen 84
HiFive 46, 97
HiFive (Hi5) 112
HiNet 55, 94
hookt 49, 91, 112
HotDisk 112
Hotfile 73, 87, 112
Hotline 42, 89
Hotmail 112
Hotspot Shield 65, 112
HotTV 55, 94, 112
HTTP 46, 99
HTTP Live Streaming 112
HTTP Proxy 99
Httplivestreaming 55
Hulkshare 73, 87, 112
Hulu 62, 94, 112
I
IAX2 68
IBackup 73, 87, 112
iCloud 73, 87, 112
ICMP 71
ICQ 49, 91, 112
Identd 71, 87
iDisk 73, 87
iFilm 63, 94, 112
iFolder 73, 88
iHeartradio 55
iHeartRadio 94, 112
Iku 94
IKU 63, 112
IMAP 51, 83
IMAPS 51, 83, 112
IMBPlus 63, 94, 112
iMesh 42, 89, 112
Imgur 47, 99, 112
Instagram 76, 87, 112
installation 24, 30
compatibility 30
service impact 24
05-00070-B47
iodine 65, 112
Iodine 98
Ionair 55
IonairTV 94, 112
IP over UDP 98
iPhox 35
Ipla 55, 112
IPLA 94
IPoverUDP 65, 112
IPsec 65, 98
IPv6 in IPv4 65, 98
IPv6 over GRE 65, 98, 112
ipv6_ipv6 65
IRC 49, 91
IRC File Transfer 42, 89
ISAKMP 65, 98
iShoot 44, 89, 112
iSkoot 76, 91, 112
iSkoot Skype 91
Itel 68, 91, 112
iTunes 63, 75, 83, 94, 112
iTunes Streaming 55
itv 55
iTV 94
ITV 112
iVisit 42, 89
iYOUCC 55, 94, 112
J
Jabber 49, 91
Jabber SSL 91
Jajah 68, 91, 112
Jaman 63, 94, 112
jango 56
Jango 94, 113
JAP 45, 98
Java Update 75, 83
Javaupdate 113
JibJab 63, 94, 113
jjANG LIVE 56
Jjang Live 94, 113
Joost 113
Jump TV 113
jumpcut 113
Jumpcut 94
Jumptv 56
Just VoIP 91
Justin TV 63, 94, 113
JustVoIP 113
K
Kaixin001 47, 97, 113
KakaoTalk 49, 113
155
Kali 84, 117
Kankan 36, 44, 113
Kazaa 56, 94, 113
KBS Live 56
KBSLive 94, 113
Keek 56, 94, 113
Kerberos 71, 87
Kids Vision 94
KidsVision 56
Kik 50, 91, 113
Kohan 84
konspire2b 42
konspire2B 89
Kontiki 94
KONTIKI 56
Korean Network Storage 37, 73, 88, 113
Korean Network Storage P2P 113
Kpeer 73, 88, 117
KplayerLiveTV 113
kugoo 42
KuGou 113
Kuwo Music 56, 94, 113
KyLanTV 56, 94
KyLinTV 113
L
L2TP 66, 98, 113
Ladbrokes Poker 85
last.fm 56
Last.fm 113
lax2 91
LDAP 52, 87
League of Legends 85, 117
Left4Dead2 85, 117
Legacy Teredo 98
Lego Universe 113
LG IP TV 94
LG IPTV 56
Libon 113
line 113
Line 68
LINE 91
Line Free Calls 91
Lineage 85
LineApps 113
linkedin 99, 113
Linkedin 47
LiveProfile 50, 91, 113
Livestation 56, 94, 113
LiveVault 74, 88, 113
LogMeIn 71, 88, 113
Lotus Notes 83
LoveFilm 94, 113
LOVEFiLM 56
LWAPP 66, 98, 113
156
M
M+ Messenger 50, 91, 113
Madden NFL 07 86
Madden NFL 12 86, 113
Madden NFL 13 86
Manolito 114
Maple Story 85
MapleStory 117
MaxGO 56, 94, 114
MaxPanye3 114
maxpayne3 85
maxpayne3 game 117
Maze 42, 89
MBC 56, 94, 114
MBCmini 114
mBit 76, 91
McAfee Update 75, 83
McAfeeUpdate 114
Meevee TV 114
Mega 74, 88, 114
Mega Porn 114
Mega Upload 88
MegaUpload 114
MegaVideo 114
meinVZ 114
Melon 94
MelOn 56, 114
MePlayer 63, 94, 114
MessageMe 50, 91, 114
Metacafe 63, 94
MetaCafe 114
Mgcamd 42, 89, 114
MGCP 68, 91, 114
MGCP Data 91
mgoon 47, 63, 94, 114
Microsoft 52, 56, 72
ASF 56
Exchange 52
NetSend 72
Microsoft ASF 94, 114
Microsoft Exchange 83
Microsoft Media Server 56, 94
Microsoft NetSend 87
Microsoft Office 365 72, 87, 117
Microsoft Soapbox 94
Microsoft SQL 87, 114
Milliyet 47, 64, 99, 114
Minecraft 85, 117
Minus 47, 114
mIRC 114
Miro 44, 94, 114
Missing Protocol Info 35
Mixi 47, 94, 114
MLB TV 63
MLB.TV 94, 114
05-00070-B47
Mnet 56, 95, 114
MNTalk 50, 91, 114
MobileMe 47, 99
Mocospace 47, 97, 114
Mohawkvoice 114
Mohawkvoice 68, 91
Motorhead 85
move networks 56
Move Networks 95
Mozy 74, 88, 114
Mpeg 95
MPEG 57
MSN 114
Games 114
MSN Games 85
MSN Messenger 91, 114
MSN Messenger Media Data 50, 68
MSN Pc2Phone 91, 114
control 114
MSN PC2Phone Control 91
MSN Video 63, 95, 114
MSNP 50, 114
MSSQL 52
Mtv Music 115
MTV Music 63, 95
Mumble 68, 91, 115
Munja Atti 115
Music Choice 63, 95
Musicbox 95, 115
MusicBox 57
Musiccovery 115
Musicovery 57, 95
MUTE 89
Muve 74, 95, 115
Muve Music 95, 115
muveMusic 57
muzutv 57, 95, 115
my c-@t 57
MYCat 95, 115
MyHeavy 63, 95
Mynet 47, 99, 115
Myspace 97
MySpace 47, 115
Myth 85
myTV 57, 91
Mytv 115
MyUbo 115
N
Namipan 42, 89, 115
napster 115
Nate 47, 91, 99, 115
NATE hoppin 57, 115
NATE Hoppin 95
Nate Out 91
05-00070-B47
Nate Pann 64, 95, 115
Nate PC2PC 91
Nate Streaming 57, 95
Nate VOD 115
Nateon 50
NateOn Talk 115
Naver 47, 99, 115
Naver Cast 95, 115
NAVER Cast 57
Naver Live Sports 115
Naver Ndrive 74, 88
NAVER Sportss 57
Naver Streaming 57, 95
Naver Streaming Music 95
Naver Streaming VOD 95
NaverTalk 115
NaverVOD 115
NBA 95, 115
NBA 2K13 86
NBA League Pass 57
NBC 115
NBC Streaming 57, 95
NCAA 63, 95, 115
NDS does not report on MCD_DNS_MALFORMED_REQ 18
Need for Speed 85, 117
Neo Folder 74, 88
Net 2 Phone 91
Net 2 Phone Data 91
Net Folder 88
Net2Phone 68
NetBios 115
NetBT 72, 83
Netflix 57, 95, 115
via Xbox 115
Netflix Over Tivo 115
NETFOLDER 74
Netload 74
netlog 47
Netlog 97, 115
NetMovies 57, 95, 115
NeuLion 115
NeuLion IPTV 63, 95
Newcamd 42
NewCS 75, 83
Nexon Games Downloads 77, 85, 115
NextGuide 47, 99, 115
NFL Gamepass 57, 95, 115
NFL Sunday Ticket 116
NFL SUNDAY TICKET 57
NHL GAMECENTER LIVE 58
Nhlgamecenter 95, 116
NHN 50
niconico 58
Nicovideo 95, 116
Nimbuzz 68, 76, 92, 116
Nimbuzz GoogleTalk Voice 92
157
Nimbuzz VoIP 92, 116
Nindino 68
Ning 47, 97, 116
Nintendo DS 116
Nintendo Gaming 77, 85, 116
Nintendo Wii 116
Nintendo Wii Control 116
Nintendo Wii Data 116
Nintendo Wii Web Browsing 116
Nintendotvii 116
NintendoTVii 58, 92
Nintino 92, 116
Nlive TV 58, 95, 116
NNTP 45, 83
NNTP SSL 45, 83, 116
No Protocol Detail 35
NTP 72, 87
Numberbook 47, 99, 116
Nymgo 68, 92, 116
O
Obfuscated VoIP 92, 116
ObfuscatedVoip 69
Octoshape 44, 95, 116
Odnoklassniki 47, 97, 116
OlivePhone 50, 69, 92, 116
olleh tv 58, 95, 116
Olleh Ucloud 74
Onlive 116
OnLive 85
ooVoo 69, 92, 116
Ooyala 95
OOYALA 58, 116
Open FastTrack 42, 89
OpenVPN 66, 98, 116
Opera Mini 66, 98
Operation Flashpoint 85
Optimum TV 58
OptimumTV 95, 116
Origin 85, 117
Orkut 47, 97, 116
Other IP Protocol 77, 87
Other TCP Protocol 77, 87
Outlaw 85
own3D TV 63, 95, 116
P
Pal Talk 50
Paltalk 118
PalTalk 92
pando 42, 89
Pando 118
PANDORA Radio 58
158
Pandora TV 95, 118
PANDORA TV 58
Pandora TV Live Player 95
Pandora TV Mini Client 95
Pandora TV Web Video 95
PandoraRadio 118
Paranplayy 58, 95, 118
Paypal 47, 118
PayPal 99
PC 113, 117
FireFall 117
Lineage 113
PC Anywhere 71, 87
PC Games 77, 124
Yahoo 124
Pcast 95
PCast 58
pcgames_blackandwhite 116
pcgames_roguespear 119
PcGamesOriginDownload 85, 118
PDBOX 74, 88
pdproxy 98
Pdproxy 118
Peer Portal 38
Peercast 95
PeerCast 44
Perfect Dark 42, 89, 118
PGSH 71, 87
Photobucket 47, 99, 118
Picasa 47, 99, 118
PingChat 50, 92, 118
Pinterest 47, 99, 118
Planetside2 85, 118
Playstation 2 118
Plex 58, 95, 118
Poco 118
POCO 89
POCO Control 89
POCO Data 89
Point Blank 85, 117
pooq 58
Pooq 95, 118
Pop Folder 74, 88
POP3 52, 83
POP3S 52, 83, 118
PostgreSQL 52, 87
PP2008 43, 89
PPFilm 58, 95, 118
PPLive 44, 118
PPMate 44, 95
PPMule 89, 118
PPStream 44, 95, 118
PPStream Control 95
PPStream Data 95
PPTP 66, 98
PPVOD 44, 95, 118
05-00070-B47
PrivateTunnel 66, 98, 119
Pronto Dialer 69, 92, 118
Pronto Dialer Control 92
Pronto Dialer Data 92
Pronto PC Dialer 69, 92, 118
protocol keywords 39
Pruna 43, 89
PS3 119
Unclassified 119
PS3 Unclassified 85
PSP 95, 119
Puffinbrowser 66, 98, 119
PutLocker 74, 88, 119
Q
qik 69
Qik 92, 119
Qook 47
QQ Tornado 72, 83, 119
QQLive 44, 95, 119
Qriocity 47, 95, 119
Quake 85
Quake 3 Arena 85
Quake 4 85
Quickflix 59, 95, 119
Quicktime 58
QuickTime Player 95
QVOD 59, 95, 119
R
RADIUS Accounting 87
RADIUS Authentication 87
Ragnarok 85, 119
RapidShare 74, 88, 119
Rawflow 119
rayfile 74
Rayfile 88
rdio 59
Rdio 95, 119
RDP 71, 87
Real Player 95, 119
realPlayer 59
Rebtel 119
RebTel 92
REBTEL 69
Recool 95, 119
Red Swoosh 43, 89
Redboxinstant 59, 95, 119
Resistance 86
Fall of Man 86
Revver 63, 95
Rhapsody 59, 95, 119
Rift game 119
05-00070-B47
Riftgame 85
Ringomax 69, 92, 119
Rogers on Demand 63, 95, 119
RTEPlayer 59, 95, 119
RTMFP 43, 89, 119
RTMP 59, 95, 119
RTMP Encrypted 95
RTMPE 119
RTP 59, 95
RTP MP2T 95
RTSP 95, 119
RTSP Data 59
RTSP Tunnelled 95
Runescape 117, 119
RuneScape 85
rutube 95
RuTube 64, 119
S
S.W.A.T. 3 85
Sage TV 95, 96
Placeshifter Streaming 96
Regular Streaming 96
SageTV 59
SamKnows 72, 87, 119
SAPO Messenger 50
Sapo Video 96
SAPO Video 64, 119
Sapo Voice 92
SapoMessenger 119
SBS 64, 96, 119
SBS Gorealra 59, 96, 119
SCTP 77, 87
SecondLife 85, 117
Seed 69, 92, 119
Seesaw 119
Share 43
Share TCP 89
Share UDP 89
SHAZAM 48, 99, 120
Shockwave Flash 59, 96
SHOUTcast 59, 96, 120
Shutterfly 48, 99, 121
SID 43, 89
Simple 50
Sina 48, 50, 99
UC 50
Sina UC 92, 120
Sina Video 96
SinaVideo 64, 120
SIP 69, 92, 120
SIP Data 69, 96, 120
SIP RTP 92
SIPLink 69, 120
Skeed 44, 96, 120
159
Skout 48, 97, 120
Sky Anytime+ 59, 96, 120
Sky Go 64, 120
Sky On Demand 59, 96, 120
SkyGo 59, 96
skynowtv 60
Skynowtv 120
Skype 20, 69, 92, 120
Skype Generic 92
Skype Login 92
Skype PC2PC 92
Skype PC2PC 120
SkypeIn 92
SkypeOut 92
Skyplayer 120
Skyrock 48, 97, 120
Slacker Radio 60
SlackerRadio 96, 120
slingbox 60
Slingbox 96
Slingbox Data 96
Smart Fox Server 85
SmartFoxServer 80
SMTP 52, 83, 120
Snapchat 50, 92, 120
Snapfish 48, 99, 120
SNMP 72, 87, 120
Soapbox 120
SocialTalk 48, 96, 120
Socks V5 98
SOCKSv5 66
Socl 48, 99, 120
SoftEther 66, 98
Soldier of Fortune 117
Sonica 48, 97, 120
Sony 80
Online games 80
Sony Online Games 85
Sony TV 96
SonyTV 60
SopCast 44, 96, 120
Soribada 43, 89, 120
SoulSeek 43, 89, 120
SoundCloud 60, 96, 120
SoundHound 60, 96, 120
Spare Backup 74, 88
SPB TV 60, 96, 120
SPDY 48, 98, 120
Speed Test 46, 99
Benchbee 46, 99
Speedtest 72, 107, 120
BenchBee 107
speedtest_nia 48
SpeedVoip 70, 120
Spiral Knights 85, 117
Spotify 60, 96, 120
160
SSH 98
SSL 66, 98, 120
SSL VPN 66, 120
SSL VPN Over UDP 98
Stage2Data 74, 88, 121
Star Wars 85, 117
The Old Republic 85, 117
The Old Republic Download 85
Star Wars Battlefront 121
Starcraft 2 85
Starcraft2 117
StealthNet 43, 89, 121
Steam 122
studiVZ 121
STUN 72, 87
Stupid Videos 64, 96
Symantec 121
Symantec Live Update 83
SyncML 76, 92
Syphon Filter 121
Syslog 72, 87
T
T cloud 74, 88, 121
T freemium 60, 96, 121
T store 48, 60, 75, 83, 121
Tachy 50, 92, 121
Tango 70, 121
Tantra 117
Tantra Online 85
TBS 64, 96, 121
TeacherTube 64, 96
Team Speak 92
TeamSpeak 70, 121
TeamViewer 71, 92, 121
Telefone 70, 121
Telnet 71, 87
Tencent Generic 97
TencentQQ 48, 51, 92, 121
Teredo 66, 98, 121
Terraria 85, 117
TFTP 72, 83, 121
The CW TV 54
Thunder 43, 90, 121
Thunder Kankan 96
Time Warner Cable 48, 96, 121
timewarnercable 117
TinyChat 51, 97, 121
TNT TV 64, 96, 121
Tony Hawk Proskater 3 121
Tor 45, 98, 121
Torrent Relay 121
Totodisk 88, 121
TotoDisk 74
Totorosa 44, 96
05-00070-B47
TouchToTalk 70, 92, 121
Trend Micro Antivirus Update 83
Trend Micro Update 75
TrendMicro 121
Tribair 70, 92, 121
Tribler 43, 90, 121
Trion Worlds Games Download 85
Trion Worlds Games Downloads 81, 121
trueCaller 70
TrueCaller 92, 121
truphone 70
Truphone 121
TruTV 64, 96, 121
TT talk 51, 92, 121
TU me Call 70
Tudou 64, 96, 121, 122
Streaming 96
Upload 96
tuenti 97
Tuenti 48, 122
Tumblr 48, 97, 121
TUMe 51, 92, 122
TuneIn Radio 60
TuneInRadio 96, 122
Tuotu 43, 90
turkcelltv 96
Turkcelltv 60, 122
TV Ants 96
TV Catchup 64, 96, 122
TV over streamyx (TVOS) 60
Tvants 122
TvGuide 122
TvGuide 60, 96
tving 60
Tving 96, 122
Tvking 122
TVKoo 44, 96
tvnplayer 60
Tvnplayer 122
Tvnplayer 96
TVOS 96, 122
TVUPlayer 44, 96, 122
Twitch 96, 122
Twitchtv 64
Twitter 48, 97, 122
U
U+ Box 60, 75, 88, 122
Ucloud 122
UCloud 88
UDP 77, 87
Uglive 45, 96, 122
Ultima 122
Ultima Online 85
Unbox 96
05-00070-B47
Unclassified 85
Unique Fone 92
UniqueFone 122
Unreal 85
Unreal Tournament 85, 122
Uploaded 74, 122
Uploadedto 88
Uploading 75, 88, 122
Ustream 96
UStream 122
USTREAM 60
UUSee 45, 96, 122
V
Vagaa 37, 43, 90, 122
Valve’s Steam Service 85
Valve’s Steam Service Control 85
Valve’s Steam Service Download 122
Vbuzzer 51, 70, 92, 122
Vbuzzer File Transfer 92
Vbuzzer PC to PC Voice 92
Vbuzzer PC to Phone Voice 92
Vbuzzer Voice 92
VDONext 64, 122
veetle 61
Veetle 122
Ventrilo 70, 92
Veoh 64, 96, 122
Vevo 96
VEVO 61
VGO Live 45, 96, 122
Viber 70, 122
Viddler 64, 96, 122
Video Crawler 122
VideoInsight 61, 96, 123
VideoJug 64, 96, 122
Vidmax 64, 96, 123
Vimeo 64, 96, 123
Vine 48, 97, 123
Vippie 70, 92, 123
Vippie PC 123
Vippie PC Client 92
Virtual Tunnel 66, 98
Vkontakte 48, 97, 123
VNC 71, 87
Vodafone Femto 76, 87, 123
Vongo 123
Voxer 51, 92, 123
Voxofon 70, 92, 123
Voxox 70, 92, 123
Voxvalley 70
VoxValley 123
vShare 43, 90
vTuner 61, 96, 123
Vudu 61, 96, 123
161
Vyke PC 71, 92, 123
VykeMobile 70, 123
W
WAP 76
WAP MMS 92
WAP Version 1.0 92
WAP Version 2.0 92
waste 43
Waste 90, 123
WATCHESPN 64, 96, 123
WB Archive Instant 61, 96, 123
We7 96, 123
WE7 61
WealthTV 61, 96, 123
Webex 99
WeChat 51, 123
Wedisk 88, 123
Wedisk Streaming 96, 123
WediskStreaming 61
West Wood Games 85
WhatsApp 51, 123
whozcalling 123
Whozcalling 92
Windows 123
Live 123
Windows Live 48, 99, 123
Windows Live Skydive 88
Windows Live SkyDrive 123
Windows Media Center 61, 96
Windows Media Player 61, 96, 123
Windows Update 83
WindowsLive Skydrive 75
WinMX 43, 90
Winny 43, 90
Witv 61, 123
Woopie 48, 99, 123
World of Warcraft 85, 117
Wowtv 61
wowza 61
WTV 64, 123
X
Xbox 81, 123, 124
Halo 4 123
Halo Reach 123
Live 81
Live Marketplace 81
NBA 2K13 124
XBOX LIVE 86
Xbox LIVE Music 61, 96, 124
Xbox LIVE Video 61, 96, 124
Xbox Live Video Market 86
162
Xfinity Streampix 61, 96, 124
Xfire Games 85
XML 48, 87
Xunlei Web Thunder 36
Y
Yahoo 48, 51, 52, 124
Mail 52
Messenger 51
Yahoo Games 85
Yahoo Mail 83, 124
Yahoo Messenger 92
Yahoo Messenger Control 92
Yahoo Messenger File Transfer 92
Yahoo Messenger Voice 92
Yahoo Messenger Webcam 92
Yahoo Video 64, 96, 124
Yahoo Voice 38
PC to PC 38
PC to Phone 38
Yandex Disk 75, 88, 124
Youku 64, 97, 124
YOUR-FREEDOM 66
Yourfreedom 124
youSENDit 75
Yousendit 88, 124
YouTube 64, 96, 97, 124
HD 97
Web 97, 124
YouTube HD 97
YouTube Web 97
YTN Live TV 61, 97, 124
Yuwie 48, 124
Z
Zattoo 45, 97, 124
Zentia 81, 86, 124
Zimbra 52, 83, 124
Zimbra Desktop 83
Zimtv 45
ZimTV 97, 124
Zoosk 48, 97, 124
zSHARE 75, 124
Zshare 88
Zultrax 43, 90, 124
Zune 124
Zynga 81, 86, 124
Cafe World 86
CastleVille 86
CityVille 86
Empires & Allies 86
FarmVille 86
FarmVille 2 86, 124
05-00070-B47
Zynga (continued)
Hidden Chronicles 86
Mafia Wars 2 86
Poker 86
05-00070-B47
Zynga (continued)
Slingo 86
Words With Friends 86
YoVille 86
163
164
05-00070-B47

LoadableTrafficIdentificationPackage, Release 13.08.01

Transcription

Similar documents

Playing the Best Variety of the 60`s and 70`s

SCE 093 Twentieth Century Fox

Adaptive Streaming - a brief tutorial

- Discovery Education

Kaity Conner – Jacob Corrigan – Isaiah Griffin Kaitor Kposowa

Ilpuguasigm presentation

connect - AcuRite

Case Study for the Audobon Society`s Starr Ranch