nDPI Protocols List

This page provides the list of the protocols/applications supported by nDPI. For each protocol there is a brief description, some links to further, more detailed information and, optionally, some notes that might be useful when handling such a protocol (from the application/integrator point of view)

Work in progress!

NDPI_PROTOCOL_SRTP: SRTP (Secure Real-time Transport Protocol)

The Secure Real-time Transport Protocol (SRTP) is a profile for Real-time Transport Protocol (RTP) intended to provide encryption, message authentication, integrity, and replay attack protection to the RTP data.

References: RFC3711.

Notes:

  • You can think of SRTP simply as the “encrypted” version of RTP, something like HTTPS vs HTTP;
  • It is not usually possible to tell RTP from SRTP. nDPI generally uses the former and it uses the latter only when it is really sure that the media stream has been encrypted.

NDPI_PROTOCOL_EPICGAMES

Epic Games is a video game company developing the Unreal Engine and some successful games as Fortnite and Gears of War.

References: Main site Fortnite.

NDPI_PROTOCOL_GEFORCENOW

GeForce Now is the brand used by Nvidia for its cloud gaming service.

References: Main site.

NDPI_PROTOCOL_NVIDIA

Generic web traffic from Nvidia sites.

References: Main site.

NDPI_PROTOCOL_BITCOIN

Bitcoin is one of the most common crypto currencies.

References: Main site.

Notes:

  • Not each crypto exchange is a mining, it could be a normal transaction, sending or receving.
  • Bitcoin network protocol covers the broader set of rules that govern how all nodes in the network communicate and sync with each others blocks and transactions.
  • On the other hand mining protocols are more specific and deal directly with how miners interact with the network and participate in the mining process.

NDPI_PROTOCOL_PROTONVPN

Proton VPN is a VPN service operated by the Swiss company Proton AG, the company behind the email service Proton Mail

References: Main site https://protonvpn.com/