juniper networks deep packet inspection-decoder

Recent Release History

Table 1 on page 2 summarizes the features and resolved issues in recent releases. You can use this tableto help you decide to update the JDPI-Decoder version in your deployment.

Table 1: JDPI-Decoder Features and Resolved Issues by Release

Features and Resolved IssuesEngineVersion 5

EngineVersion 4

JDPIDecoderVersion

SignaturePack Version

ReleaseDate

This JDPI-Decoder version issupported only on the Junos OS12.3X48-D80 and later releases,15.1X49-D140 and laterreleases, and Junos OS 17.4R1and later releases on allsupported SRX Series platforms.

Starting in Junos OS release20.1R1, enhancements tocustom applications are includedin the JDPI-Decoder release.

5.3.0-614.20.0-1111.460.2-43The relevantsignaturepackageversion is 3313.

September04, 2020

Overview

The JDPI-Decoder is a dynamically loadable module that mainly provides application classificationfunctionality and associated protocol attributes. It is hosted on an external server and can be downloadedas a package and installed on the device. The package also includes XML files that contain additional detailsof the list of applications and groups. The list of applications can be viewed on the device using the CLIcommand show services application-identification application summary. Additional details of any particularapplication can be viewed on the device using the CLI command show services application-identificationapplication detail <application>. For additional details, see Application Signature.

NOTE: This upgrade is only supported for Junos OS 12.3X48-D80 and later releases,15.1X49-D140 and later releases, and 17.4R1 and later releases. This is because the older Junosreleases have an engine which is incompatible with the 1.380.0 major protobundle version. Sothe older Junos releases will remain on JDPI-Decoder version 1.340.0-73.005 and there will beno more updates for these releases.

2

http://signatures.juniper.net/documentation/applications/index.html

New Features and Enhancements

IN THIS SECTION

New Software Features and Enhancements Introduced in JDPI-Decoder Release 3313 | 3

New Applications | 3

Updated Applications | 30

Custom Applications | 38

The following sections describe new features and enhancements available in the JDPI-Decoder releases:

New Software Features and Enhancements Introduced in JDPI-DecoderRelease 3313

The following sections describe new features and enhancements available in JDPI-Decoder Release 3313.

New Applications

Table 2 on page 3 Shows the applications that this release of JDPI-Decoder is introducing.

Table 2: New Applications

DescriptionReported OverApplicationType

ApplicationName

9GAG is a Hong Kong–based onlineplatform and social media website.9GAG allows its users to upload andshare content or other content fromexternal social media websites

HTTP/HTTP2/HTTPS/QUIC

SPDY/SSL

Web9GAG

24SevenOffice is a web-basedEnterprise resource planning (ERP)systems.

HTTP/HTTP2/HTTPS/SPDY/SSLWeb24SEVENOFFICE

3

Table 2: New Applications (continued)


ApplicationName

4Sync is a cloud storage service.HTTP/HTTP2/HTTPS/SPDY/SSLWeb4SYNC

Acronis products including AcronisBackup use Acronis Cloud.

ACRONISWebACRONIS-

CLOUD

Acronis Backup is a backup platformthat use cloud or local storage, andcan save multiple hosts using agents.

ACRONISInfrastructureACRONIS-

BACKUP

This plug-in classifies flows related toAcronis products.

HTTP/HTTP2/HTTPS

SPDY/SSH/SSL/TCP

WebACRONIS

AWSConsole is a web application formanaging Amazon Web Services.

AMAZON-AWS/DNS/SSLWebAWS-CONSOLE

Cognito is an Amazon AWS serverthat allows you to keep track of user.

SSL/SIP/STUN/QUIC/RTSP

SPDY/HTTP2/HTTP-PROXY

AMAZON-AWS

WebAMAZON-

COGNITO

Alibaba Group Holding Limited is aChinese multinational conglomeratespecializing in e-commerce, retail,Internet, AI and technology. Thisplug-in is the default classification ofdomain names owned by AlibabaGroup.


SPDY/SSL

WebALIBABA-GROUP

AnchorFree is an anonymous VPNsoftware from Betternet (formerlyvpnintouch) company.

DNS/HTTP/HTTP2/HTTPS

SPDY/SSL/TCP/UDP

InfrastructureANCHORFREE

AnonyTun is an android VPN clientto customize a fewparameters relatedto tunnel.

HTTP/HTTP2/HTTP-PROXY/

HTTPS/QUIC/SPDY/SSL/TCP

WebANONYTUN-VPN

4



ApplicationName

AnywhereUSB Remote I/OConcentrator is a remote networkingsolution that utilizes USB over IPtechnology to enable you to connectUSB devices over a network. ThisAppID classifies traffic fromTCP/3422 related data from thedevices connected to AnywhereUSB.

TCPInfrastructureANYWHEREUSB

Age of Magic is a single player videogame for mobile platforms.

AKAMAI-SSL/SSL/SIP/STUN

QUIC/RTSP/SPDY/HTTP2

HTTP-PROXY/DNS/PLAYKOT/TCP

GamingAGE-OF-MAGIC

Account Kit is a product of Facebook.Account Kit uses your phone numberor email address to let you quicklyregister to a registered app without apassword.


SPDY/SSL

WebACCOUNTKIT

Arte TV is a Franco-German televisionchannel. This plug-in classifies trafficthat the website generates.

AKAMAI-SSL/AKAMAI-VIDEO/HTTP

HTTP2/HTTPS/SPDY/SSL

WebARTE-TV

Apple News is a mobile app and newsaggregator from Apple Inc.

HTTP/HTTP2/HTTPS/SPDY/SSLWebAPPLE-NEWS

Alibaba Cloud, also known as Aliyun,is a Chinese cloud computingcompany. Alibaba Cloud is asubsidiary of Alibaba Group.

BMFF/HTTP/HTTP2/HTTPS

QUIC/SPDY/SSL/TCP

WebALIBABA-

CLOUD

Appnext is mobile monetization, appmarketing and re-engagementplatform.

AKAMAI-SSL/HTTP/HTTP2/HTTPS

LLNWD/QUIC/SPDY/SSL

WebAPPNEXT

Apple Remote Desktop allows you tomanage Mac computers remotely.

VNC/UDPRemote-accessARD

5



ApplicationName

Alicall is an application that providesInternational Voice over InternetProtocol (VoIP) call feature.

HTTP/HTTP2/HTTPS

SPDY/SSL/UDP

MessagingALICALL

Air Watch is a Mobile DeviceManagement solution (MDM). Thisplug-in classifies the traffic that cloudsolution generates.

HTTP/HTTP2/HTTPS/SPDY/SSLWebAIR-WATCH

BIGO social media company. BIGOallows you to watch live videos,broadcast your life and video chatwith your friends.

HTTP/HTTP2/HTTPS/SPDY/SSLWebBIGO

This plug-in classifies TINA protocol.Barracuda VPN protocol TINAprovides VPN services.

TCP/UDPInfrastructureBARRACUDA-

VPN

Barracuda Networks, Inc. is acompany that provides security,networking and storage productsbased on network appliances andcloud services. This plug-in classifiestraffic related to Barracuda web siteand Could Control service.

HTTP/HTTP2/HTTPS/SPDY/SSLWebBARRACUDA

Big Big Channel is an online videoplatform. TVB operates Big BigChannel.

TVBWebBIGBIGCHANNEL

Bluehost is a website hostingprovider. This plug-in classifies website management traffic.

SSL/SIP/STUN/QUIC/RTSP/SPDY

HTTP2/HTTP-PROXY/HTTPS

WebBLUEHOST

Brawlhalla is a free to play battlearena on-line multiplayer game. BlueMammoth is the developer andUbisoft is the publisher of Brawlhalla.

UBISOFTGamingBRAWLHALLA

6



ApplicationName

ByteDance is publishes severalapplications including TikTok,BuzzVideo and Vigo Video. Thisplug-in classifies traffic fromweb site.


SPDY/SSL

WebBYTEDANCE

Call of Duty (COD) is a video gameFirst Personal Shooter (FPS) availableon Xbox, PS4, Microsoft windows.Activision publishes COD. This plug-inclassifies the World War II edition.


HTTP2/HTTP-PROXY

DEMONWARE/HTTP/UDP

GamingCALL-OF-DUTY

Wibu Codemeter is a license server(Software Asset Management). Thisplug-in classifies Wibu Codemeter asused in FactoryTalk ActivationManager.

HTTP/HTTP2/HTTPS/SPDY/SSL/TCPInfrastructureCODEMETER

Cisco smart probe sends packets fromCisco PfRv3 enabled routers to ensurelink quality.

RTPInfrastructureCISCO-

SMARTPROBE

Cisco Software-Defined AVC(SD-AVC) is a component of CiscoApplication Visibility and Control(AVC). This plug-in works as acentralized network service andoperates with specific participatingdevices in a network.

UDPInfrastructureCISCO-SDAVC

Couchbase Server is a distributed,open sourceNoSQL database engine.Couchbase Server stores key/valuesor JSON documents.

AMAZON/AMAZON-AWS

ERLANG-DISTRIBUTION

GOLANG/HTTP/HTTP2/HTTPS

SPDY/SSL/TCP/ZENDESK

InfrastructureCOUCHBASE

7



ApplicationName

Cisco ConnectedMobile Experiences(CMX) Cloud is a cloud-deliveredversion of the on-premises CMX 10software. Use CMX Cloud for thedelivery of wireless services. CMXCloud integrates with the Ciscowireless infrastructure and createsout-of-the-box capabilities.

CISCOWebCISCO-CMX-

CLOUD

Cisco Unified CommunicationManager is an IP PBX for enterprises.This plug-in classifies Cisco specificprotocols between Cisco UnifiedCommunication components anddevices, and the administration webinterface

CISCO/FTP/FTP-DATA/H225RAS/HTTP

HTTP2/HTTPS/INFORMIX/JAVA-RMI

MGCP/RTP/SCCP/SIP/SOAP/SPDY

SRTP/SSL/TFTP-DATA

MessagingCISCO-UCM

This plug-in classifies the websitebrowsing traffic from CISCO..

HTTP/HTTP2/HTTPS/QUIC/SPDY

SSL/STUN/UDP

WebCISCO

This plug-in classifies the protocol ofCUCAM (Cisco UnifiedCommunications Alert Manager andCollector). This service is used byCUC(Cisco Unified Communications) orthe RTMT (Real-Time MonitoringTool) to provide performancemonitoring, data collection, logging,and alerting.

CISCO-UCMInfrastructureCISCO-AMC

This plug-in classifies the trafficrelated to cryptocurrency Monero(XMR) mining and web traffic.

CLOUDFLARE/HTTP/HTTP2/HTTPS

SPDY/SSL/

WebCOINIMP

Monero-pool.fr is the mining pool forMonero cryptocurrency.

HTTP/HTTP2/HTTPS/MONERO

SPDY/SSL

WebCRYPTO-POOL-

FR

8



ApplicationName

CyberGhost is a VPN service. You canuse this to unblock sites and browseprivately and anonymously.

HTTP/HTTP2/HTTPS/SPDY/SSLInfrastructureCYBERGHOST

CodePen is an online community fortesting and showcasing user-createdHTML, CSS and JavaScript codesnippets. This plug-in classifies onlythe free plan traffic.



AMAZON/AMAZON-AWS/DISQUS

HTTP/HTTPS

WebCODEPEN-IO

Coco is an instant messagingapplication with VoIP feature.


SSL/STUN

MessagingCOCO

C More is a television company thatprovides paid videos on demand.


SPDY/SSL

MultimediaCMORE

China International BroadcastingNetwork (CIBN) is an internet TVplatform. This plug-in classifieswebsite traffic.

APPLE-HLS/BMFF/HTTP/HTTP2

HTTPS/SPDY/SSL

WebCIBN

Cisco Corporate TV is an interactiveweb streaming, and live studio showsplatform.

CISCOWebCISCO-CORP-TV

Cisco IP SLA uses active traffic tomonitor IP applications.

UDPInfrastructureCISCO-IP-SLA

This plug-in exchanges data betweenthe Cisco Mobility Service Engine(MSE) and the Cisco Wireless LANController (WLC).

HTTP2/HTTPS/SPDY/SSLInfrastructureCISCO-NMSP

CakeHR is an online HRmanagementsoftware.


HTTP2/HTTP-PROXY/AMAZON-AWS

CLOUDFLARE/HTTPS

WebCAKE-HR

9



ApplicationName

DAZN is a video streaming service forsports.

AKAMAI-SSL/AMAZON

AMAZON-AWS

HTTP/HTTP2/HTTP-PROXY

HTTPS/LLNWD/SPDY/SSL

MultimediaDAZN

Discourse is an open source Internetforum and mailing list managementsoftware application.


SPDY/HTTP2/HTTP-PROXY/HTTP/HTTPS

WebDISCOURSE

Didi is a shared transport application.This plug-in adds classification oftraffic from Android and iOSplatforms.

DNS/HTTP/HTTP2/HTTPS/SPDY

SSL/TCP/UDP

WebDIDI

DemonWare is a softwaredevelopment company and asubsidiary of Activision Blizzard, Inc.

HTTP/HTTP2/HTTPS/SPDY

SSL/TCP/UDP

GamingDEMONWARE

Discord is a chat, audio and video callapplication for gaming.


HTTP2/HTTP-PROXY/CLOUDFLARE

DTLS/HTTPS/RTCP/RTP/UDP

MessagingDISCORD

The DNScrypt protocol translatesFullyQualifiedDomainName (FQDN)into IP address and IP address toFQDN with encryptedcommunication.

TCP/UDPInfrastructureDNS-CRYPT

This plug-in classifies traffic fromDRAGONBALL FighterZ video game.


HTTP2/HTTP-PROXY/HTTPS

TCP/UDP

GamingDRAGON-BALL

Evozi is an apk downloader websiteand also amobile apps developer. Thisplug-in classifies website traffic.


SPDY/SSH/SSL

WebEVOZI

10



ApplicationName

ExpressVPN is a provider of VPNtunnels with servers located in over140 countries and several standardsor obfuscated protocols. This plug-inclassifies the website, software, andmanual setups using the ExpressVPNprovided configuration file.

AMAZON/AMAZON-AWS/HTTP2

HTTPS/ESP-OVER-UDP/IKE

SPDY/SSL/TCP/UDP

InfrastructureEXPRESSVPN

Eproxy is a VPN for forward proxieswith custom payload and optional sshsupport. This plug-in classifiesautomatically generated fake HTTPheaders and the embedded SSHclients.

SSHInfrastructureEPROXY

Erlang distribution protocol allowsseveral nodes to communicatetogether and exchange information.

TCPInfrastructureERLANG-

DISTRIBUTION

FTP is a communication protocol toshare files in the network TCP/IP.

SSLInfrastructureFTPS-DATA

Fox Plus is a streaming platform thatlets people watch latest TV series,documentaries, Hollywood andAsianmovies of Fox Networks.

FOXNETWORKSWebFOXPLUS

Fuze provides cloud-based UnifiedCommunications Service.


HTTP2/HTTP-PROXY

AMAZON-AWS/HTTP

HTTPS/RTCP/RTP/SPLUNK-CLOUD

MultimediaFUZE

DuckDuckGo is an Internet searchengine and a web browser for mobiledevices.


HTTP2/HTTP-PROXY/CLOUDFLARE

HTTPS

WebDUCKDUCKGO

11



ApplicationName

Digital Imaging and CommunicationsinMedicine (DICOM) supports trafficon usual TCP port 104 and 11112.

TCPInfrastructureDICOM

Dwarf Pool is a mining pool forMonero cryptocurrency.


MONERO/SPDY

WebDWARFPOOL-

COM

C'Me is a mobile application, whichoffers voice and video calls alongwithinstant messaging. Etisalat developedC'Me.

HTTP2/HTTPS/RTCP/RTP/SPDY/SSL

TCP/UDP

MessagingETISALAT-C-ME

Firefox Private Network is a Firefoxextension which provides a secureand encrypted tunnel.

HTTP/MOZILLA/SSLInfrastructureFIREFOX-VPN

This plug-in classifies the trafficcoming from WLAN between a userequipment (UE) and the evolvedPacket Data Gateway (ePDG) in orderto access the IPMultimedia Subsytem(IMS).

ESP-OVER-UDP/IKEInfrastructureEPDG-TUNNEL

Easy Anti-Cheat is an anti-cheatservice for multiplayer PC games.

HTTP/HTTP2/HTTPS/SPDY/SSL/TCPWebEASY-ANTI-CHEAT

FreePP is an instant messagingapplication, which provides domesticand international calls feature. Thisplug-in only classifies the instantmessaging traffic.

HTTP/HTTP2/HTTPS/SPDY/SSLMessagingFREEPP

Fandom is a freeWiki website hostingservice.

HTTP/HTTP2/HTTPS

QUIC/SPDY/SSL

WebFANDOM

Fast is a web service which allows toassess Internet throughput. Netflixprovides this service.

NETFLIX-STREAMWebFAST-COM

12



ApplicationName

Fox Networks Group is a subsidiaryof Fox Entertainment Group fortelevision and cable.

ADOBE/AKAMAI-SSL

AKAMAI-VIDEO

SSL/SIP/STUN/QUIC/RTSP/


AMAZON-AWS/HTTP/HTTPS

UPLYNK

WebFOXNETWORKS

Future Plc is a British publisher mediacompany.

HTTP/HTTP2/HTTPS/SPDY/SSLWebFUTURE-PLC

FaceApp is a mobile application totransform faces in photographs. Thisplug-in classifies traffic from freeversion.

HTTP/HTTP2/HTTP-PROXY/HTTPS

QUIC/SPDY/SSL

WebFACE-APP

Grammarly is a cloud-basedEnglish-languagewriting-enhancement platform.

HTTP/HTTP2/HTTPS/SPDY/SSLWebGRAMMARLY

Google One is a service for managingthe storage paid plan for Googleapplications.

GOOGLE-GEN/HTTP/HTTP2/QUIC

SPDY/SSL

WebGOOGLE-ONE

Google Books is an online file storageand sharingweb-service fromGoogle.


HTTP2/HTTP-PROXY

GOOGLE-API/GOOGLE-GEN

ANDROID-MARKETPLACE-

DOWNLOAD

GOOGLE-STATIC/HTTP

WebGOOGLE-BOOKS

Gov.sg is theweb portal for SingaporeGovernment. This plug-in classifiesthe traffic from Gov.sg.


HTTP2/HTTP-PROXY/HTTP/HTTPS

WebGOV-SG

13



ApplicationName

Gaode Map is an online mappingservice. Gaode Map belongs toAlibaba Group.

ALIBABA-GROUP/HTTP/HTTP2

HTTPS/SPDY/SSL

WebGAODE-MAP

Google News is a news aggregatorand application. Google News is aproduct of Google.

GOOGLE-GENWebGOOGLE-NEWS

Google Blog is a public blog ofGoogle.

GOOGLE-GEN/HTTP/SSLWebGOOGLE-BLOG

This AppID detects SSL access toDoubeClick. DoubleClick is anadvertisement service. Google boughtDoubleClick in 2007.

GOOGLE-GEN/HTTP/HTTP2

HTTPS/QUIC/SPDY/SSL

WebGOOGLE-ADS

Grab Taxi is a company offering ridehailing service in South East of Asia.

AMAZON/AMAZON-AWS/HTTP/


WebGRAB

GoogleVideo hosting service providesvideo streaming to Google Youtubeapplications.

GOOGLE-GENWebGOOGLE-VIDEO

Google Takeout allows users ofGoogle products to export their datato a downloadable archive file. Theclassification of the download isgstatic.


HTTP2/HTTP-PROXY

GOOGLE-GEN

WebGOOGLE-

TAKEOUT

Google APIs is a set of applicationprogramming interfaces (APIs). GoogleAPI is a product of Google. GoogleAPI allows communication betweenGoogle services and their integrationto other services.


HTTP-PROXY/SPDY/SSL

WebGOOGLE-API

14



ApplicationName

Give Vision Control Protocol is astandard for industrial cameras(GVCP). Several companies supportthis standard. This plug-in classifiesGVCP traffic related to control anddiscovery.

UDPMultimediaGVCP

Gaana is an application of musicalstreaming.

AKAMAI-SSL/AKAMAI-VIDEO

SSL/SIP/STUN


HTTP-PROXY/HTTP/HTTPS

MultimediaGAANA

Globe Telecom is a provider oftelecommunications services in thePhilippines. The plug-in classifieswebsite traffic of Globe Telecom.


HTTP2/HTTP-PROXY

AMAZON-AWS

CLOUDFLARE/HTTP/HTTPS

WebGLOBE-TELCO

Gcash is a mobile paymentapplication. The plug-in classifieswebsite traffic of Gcash.


HTTP2/HTTP-PROXY

GLOBE-TELCO/HTTP/ZENDESK

WebGCASH

Hadoop uses this plug-in to store andexchange data across a cluster.

HADOOPInfrastructureHDFS

HTTP Injector is a VPN tool. Thisplug-in classifies the ssh tunneling.

EVOZI/SSH/TCPInfrastructureHTTP-INJECTOR

Hike Messenger is an instantmessaging application.

HTTP/HTTP2/HTTPS/SPDY/SSL/UDPMessagingHIKE-

MESSENGER

Hypers is a cloud platform. Thisplug-in classifies only websitebrowsing.

HTTP/HTTP2/HTTPS/SPDY/SSLWebHYPERS

15



ApplicationName

Hexatech is a VPN to unblock anyweb site or application.



ANCHORFREE/HTTP/UDP

InfrastructureHEXATECH

Harry Potter Wizards Unite is anonline mobile game developed fromNiantic Labs.

HTTP/NIANTIC/SSLGamingHARRY-

POTTER-WU

Hoxx VPN is a popular anonymizingweb proxy. You can use Hoxx VPN tounblock websites and encryptconnection.

DNS/SSL/VPN1-COMWebHOXX-VPN

HOOQ is a video on demandstreaming service for Asia.

AKAMAI-SSL/AMAZON

AMAZON-AWS

HTTP/HTTP2/HTTPS

/QUICKPLAY/SPDY/SSL

MultimediaHOOQ

Home Box Office (or HBO) is anAmerican pay TV channel. This plug-inclassifies website traffic of HBO.


SPDY/HTTP2

HTTP-PROXY/FASTLY

HTTP/HTTPS

WebHBO

HPRC is used between client andNameNode machine.

HDFSInfrastructureHRPC

Iflix is a video streaming applicationbased on the Akamai cloud service.

ADOBE/AKAMAI-SSL

AMAZON-AWS

HTTP/HTTP2/HTTPS

SPDY/SSL

MultimediaIFLIX

16



ApplicationName

IWant TV is an over-the-top content(OTT) platform exclusively availablein the Philippines.

AKAMAI-VIDEO/SSL/SIP

STUN/QUIC

RTSP/SPDY/HTTP2/HTTP-PROXY

HTTP/HTTPS

MultimediaI-WANT-TV

iBooks is a standard iOS applicationto buy, read and manage books andaudio books.

APPLE-IOS-UPDATE-SSL

APPSTORE/ITUNES

WebIBOOKS

IronSource is a digital contentcompany.


SPDY/SSL

WebIRONSOURCE

International Business MachinesCorporation (IBM) is an Americanmultinational technology company.

HTTP/HTTP2/HTTPS/SPDY/SSLWebIBM

Inmoji provides advertising emojis.This plug-in classifies the traffic fromthe Inmoji web site

HTTP/HTTP2/HTTPS/SPDY/SSLWebINMOJI

Inskin is amedia advertising company.HTTP/HTTP2/HTTPS/SPDY/SSLWebINSKIN

This plug-in classifies Injustice-2 website. Injustice 2 is an online game.NetherRealm is the editor andWarnerBros is the publisher of Injustice 2.

HTTP/HTTP2/HTTPS/SPDY/SSLGamingINJUSTICE-2

IEC 61850 SampledMeasured Values(SMV or SV) is a protocol thatelectrical substations useIEC61850-SV to share data betweenIntelligent Electronic Device (IED)under hard real time constraints (IEC61850-9-2).

8021Q/ETHInfrastructureIEC61850-SV

17



ApplicationName

Jibe Cloud is a platform implementingRich Communication Services (RCS).Google distributes this service totelecom operators integrating RCS.

HTTP2/HTTPS/SPDY/SSLWebJIBE-CLOUD

Jibe Cloud is a platform implementingRich Communication Services (RCS).Google provides Jibe Cloud. Thisplug-in only handles traffic related toweb page promoting Jibe Cloud.

HTTP/HTTP2/HTTPS/SPDY/SSLWebJIBE

Jumpshare is a file sharing service.This plug-in classifies traffic from thebasic offer.

AMAZON-AWS/DNS/HTTP/HTTP2

HTTPS/SPDY/SSL

WebJUMPSHARE

JsCount is a real-time websitemonitoring service for web serverperformance measurement. Thisplug-in classifies website traffic ofJsCount.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2


WebJSCOUNT

JSFiddle is an online web toolsdevelopment.

HTTP/HTTP2/HTTPS/SPDY/SSLWebJSFIDDLE

KeKu provides virtual phone numbersto make and receive calls, and sendand receive SMS.

AMAZON-AWS/HTTP

HTTP2/HTTPS

QUIC/SIP/SPDY/SSL/STUN

MessagingKEKU

Kodi (formerly XBoxMedia Center) isa free media player sofwareapplication.

HEROKU/HTTP/HTTP2

HTTPS/SPDY/SSL

InfrastructureKODI

Kafka is a high throughput distributedmessaging system.

TCPInfrastructureKAFKA

Learnet2.ns.sg is an online trainingwebsite for Singaporean soldiers. Thisplug-in classifies only the SSL trafficon learnet2.ns.sg.

NS-SGWebLEARNET

18



ApplicationName

Libon is an application that providesinternational audio call feature.Orange owns Libon.

HTTP/HTTP2/HTTPS

QUIC/RTCP/RTP

SPDY/SSL/STUN

MessagingLIBON

Line2 is a telecommunicationcompany that provides a secondphone number for USA or Canada.

HTTP/HTTP2/HTTPS/SPDY/SSL

TCP/UDP/WINDOWS-AZURE

MessagingLINE2-COM

This plug-in classifies traffic that LitresAudio and Listres Listen generate.Litres Audio and Listres Listen aree-book reader applications.

HTTP/HTTP2/HTTPS/SPDY/SSLWebLITRES-RU

Lifesize is a video and audiotelecommunications company. Thisplug-in classifies the traffic fromAndroid and Chrome platforms.

HTTP/HTTP2/HTTPS

QUIC/SPDY/SSL/STUN

MultimediaLIFESIZE

League of Legends is a popularMultiplayerOnline Battle Arena videogame. Riot Games developed Leagueof Legends.

AKAMAI-SSL/SSL/SIP

STUN/QUIC

RTSP/SPDY/HTTP2

HTTP-PROXY/HTTP

HTTPS/UDP/VIVOX

GamingLOL-GAME

Mynt is a FinTech startup. GlobeTelecom owns Mynt. The plug-inclassifies website traffic.

GLOBE-TELCOWebMYNT

MOJO Marketplace offers themes,plug-ins and professional services forwebsite creation on wordpress.

AMAZON-AWS/HTTP/HTTP2

HTTPS/SPDY/SSL

WebMOJO

MARKETPLACE

Moonton is a video game editor.HTTP/HTTP2/HTTPS/SPDY/SSL/TCPGamingMOONTON

This plug-in classifies traffic relatedto cryptocurrency Monero (XMR)mining and web traffic fromweb site.

CLOUDFLARE/HTTP/HTTP2

HTTPS/SPDY/SSL/TCP

WebMONERO

19



ApplicationName

Mojang is a video game and softwaredevelopment corporation.

HTTP/HTTP2/HTTPS/SPDY/SSLGamingMOJANG

Monerohash.com is a mining pool forMonero cryptocurrency.

HTTP/HTTP2/HTTPS

MONERO/SPDY/SSL

WebMONEROHASH

-COM

Megaphone provides podcasttechnology for publishers andadvertisers. This plug-in classifies onlywebsite traffic of Megaphone.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2

HTTP-PROXY/FASTLY

HTTP/HTTPS

WebMEGAPHONE-

FM

Minexmr.com is a mining pool forMonero cryptocurrency.

HTTP/HTTP2/HTTPS

MONERO/SPDY/SSL

WebMINEXMR-COM

Mtalk is an instant messagingapplication that can provide a landlinephone number.

HTTP/HTTP2/HTTPS/SIP/SPDY/SSLMessagingMTALK

Mobile_legends provides in-appcommunication cloud services forgames.

HTTP/MOONTON/SSL/YOUMEGamingMOBILE-

LEGENDS

Moodle is an open-source learningplatform (MOOC). This plug-inclassifies Moodle website, Moodlecloud instances and HTTP localinstances.

AMAZON/AMAZON-AWS/HTTP


WebMOODLE

Mondia Media is a content andentertainment services provider. Thisplug-in classifies website browsingtraffic of Mondia Media.

HTTP/HTTP2/HTTPS/SPDY/SSLWebMONDIA-MEDIÀ

Medium is an online publishingplatform.


HTTP2/HTTP-PROXY

HTTPS/ZENDESK

WebMEDIUM

20



ApplicationName

Modbus is a serial communicationsprotocol. Programmable LogicControllers (PLCs) commonly useModbus to communicate.

TCP/UDPInfrastructureMODBUS-RTU

Monday.com is a collaborationsolution for enterprise.

HTTP/HTTP2/HTTPS/SPDY/SSLWebMONDAY-COM

Netflix Video classifies traffic relatedto Netflix Streaming service.

AKAMAI-SSL/HTTP2/HTTPS

SPDY/SSL

MultimediaNETFLIX-VIDEO

Netigate is an enterprise feedbackmanagement platform. This plug-inclassifies website traffic of Netigate.

HTTP/HTTP2/HTTPS/MAXCDN

SPDY/SSL

WebNETIGATE

Ns.sg is the web portal for theNational Service in Singapore. Thisplug-in classifies the website trafficof Ns.sg.


HTTP2/HTTP-PROXY

HTTP/HTTPS

WebNS-SG

Mumble is an open source,low-latency, high quality voice chatsoftware. You can use Mumble whileplaying online games.

HTTP/HTTP2/HTTPS

SPDY/SSL/UDP

MessagingMUMBLE

OTO Global is an instant messagingapplication that provides feature tomake landline or international calls.

HTTP/HTTP2/HTTPS/SPDY/SSLMessagingOTO-GLOBAL

Openload is a file-hosting andfile-sharing service.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2

HTTP-PROXY/DISQUS

HTTP/HTTPS

WebOPENLOAD

Opera Web Browser provides OperaVPN. Opera VPN provides VPNfonctionalities.

HTTP2/HTTPS/SPDY/SSLInfrastructureOPERA-VPN

21



ApplicationName

OpenSignal is a company thatspecializes in wireless coveragemapping. This plug-in classifies trafficof OpenSignal traffic on iOS andAndroid platform.

AKAMAI-SSL/AMAZON

AMAZON-AWS/CLOUDFLARE

GOOGLE-API/HTTP/HTTP2

HTTPS/SPDY/SSL

WebOPEN-SIGNAL

PubNub is a global Data StreamNetwork. This plug-in classifies onlyPubNub website traffic.

HTTP/HTTP2/HTTPS/SPDY/SSLWebPUBNUB

Patreon is a crowdfunding platform.SSL/SIP/STUN/QUIC/RTSP/

SPDYHTTP2/HTTP-PROXY

AMAZON-AWS/HTTP/HTTPS

ZENDESK

WebPATREON

Use Programmable ControllerCommunication Commands (PCCC)to control software running inProgrammable Logic Controler (PLC).This plug-in classifies traffic fromRockwell/Allen-Bradley tocommunicate with SLC5, PLC5E andMicroLogix PLC for service.

CIP/ENIPInfrastructurePCCC

This plug-in classifies ProtonMailwebsite, webmail and mailapplications.

HTTP/HTTP2/HTTPS

SPDY/SSL/TCP/UDP

WebPROTONMAIL

Playkot Ltd. is a mobile applicationdeveloper company.

AKAMAI-SSL/HELPSHIFT

HTTP/HTTP2/HTTPS

SPDY/SSL

GamingPLAYKOT

Quickplay is a video service providerfor IP connected devices.

AMAZON-AWS/BMFF/HTTP/HTTP2

HTTPS/MPEGTS/SPDY/SSL

MultimediaQUICKPLAY

22



ApplicationName

Qualtrics is a major online surveyplatform. This plug-in classifies website browsing traffic of

AKAMAI-SSL/SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2


WebQUALTRICS

RealVNC is a company that providesremote access software. This plug-inclassifies website browsing traffic ofRealVNC.


SSL/STUN/TCP/UDP

GamingREALVNC

Redis is a data structure server. Redisis an in-memory data structureproject.

TCPInfrastructureREDIS

RockYou is a full-serviceentertainment and media company.

HTTP/HTTP2/HTTPS/SPDY/SSLWebROCKYOU

Rockwell NetworkApplications (RNA)is Rockwell implementation ofWindows DNA-M. Rockwell FactoryTalk products use Rockwell tocommunicate.

TCPInfrastructureROCKWELL-RNA

Rakuten Video hosting serviceprovides video streaming to RakutenTV application.

AKAMAI-SSL/AMAZON-AWS

HTTP/HTTP2

HTTPS/LLNWD/SPDY/VERIZON

MultimediaRAKUTEN-VIDEO

Rakuten TV is a video-on-demand(VOD) streaming service. This plug-inclassifies traffic from Rakuten TV forEurope and Japan.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2


RAKUTEN-VIDEO/ZENDESK

MultimediaRAKUTEN-TV

23



ApplicationName

This plug-in classifies website trafficof RingCentral. RingCentral is anapplication for video/audioconferencing.

ADOBE/AMAZON-AWS

HTTP/HTTP2

HTTPS/SALESFORCE/SPDY

SSL/ZOOM

MessagingRING-CENTRAL

This plug-in classifies online gamesusing Valve's Source engine, such asHalfLife, CounterStrike, andTeamFortress.

HTTP/HTTP2/HTTPS/SPDY/UDPGamingSOURCE-ENGINE

StreamCo Media, Ltd is a streamingmedia solutions company.

AKAMAI-SSL/HTTP/HTTP2

HTTP-PROXY

HTTPS/QUIC/SPDY/SSL

MultimediaSTREAMCO-

MEDIA

Splunk Cloud is the data collection,indexing, and visualization service foroperational intelligence.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2

HTTP-PROXY/SPLUNK

SPLUNK-UFWD

InfrastructureSPLUNK-CLOUD

Stan is an subscription-based videoon demand streaming company. Stanis subsidiary of StreamCo.

AMAZON-AWS/HTTP

HTTP2/HTTP-PROXY

HTTPS/QUIC/SPDY/SSL

MultimediaSTAN

Storebuff tests and analyzes networktraffic from a given URL. This plug-inclassifies traffic from web site.

HTTP/HTTP2/HTTPS/SPDY/SSLWebSTOREBUFF

Symantec Endpoint Protection is asecurity software suite, which consistsof anti-malware, intrusion preventionand firewall features for servers anddesktops. Symantec developedSymantec Endpoint Protection.

DCERPC/HTTP/HTTP2

HTTPS/SPDY/SSL

InfrastructureSYMANTEC-SEP

24



ApplicationName

Starz is an American cable andsatellite television network. Thisplug-in classifies traffic from Starz.


HTTP2/HTTP-PROXY

AMAZON/BMFF/FASTLY

HTTP/HTTPS/MPEGTS

MultimediaSTARZ

This plug-in classifies traffic fromSpringTech VPN services.


TCP/UDP

InfrastructureSPRINGTECH-

VPN

Media Shuttle is a cloud based filesharing solution from Signianttargeting high volume transfers.


HTTP2/HTTP-PROXY/HTTP

HTTPS/TCP/UDP

InfrastructureSIGNIANT

This protocol plug-in classifies LiveRailwhich is an online video advertisingplatform.

SPDY/SSLWebSIMPLI-FI

TalkBox is a mobile group chatapplication from Hong Kong withsupport for voice messages.

HTTP/HTTP2/HTTPS/SPDY

SSL/TCP/UDP

MessagingTALKBOX

Target Corporation is the departmentstore retailer in the United States.This plug-in classifies traffic fromTarget website and Androidapplication.

ADOBE/SSL/SIP/STUN/QUIC/RTSP


HELPSHIFT/HTTP

HTTPS/SALESFORCE

WebTARGET-COM

Trello is list making application.SSL/SIP/STUN/QUIC/RTSP/SPDY

HTTP2/HTTP-PROXY/AMAZON

AMAZON-AWS/HEROKU

HTTP/HTTPS/ZOHO-SSL

WebTRELLO

25



ApplicationName

Tesla, Inc. is an automotive andenergy company. This plug-inclassifies website traffic of Tesla Inc.


HTTP2/HTTP-PROXY/HTTP/

HTTPS/QUALTRICS/SALESFORCE

WebTESLA

TextPlus is an instant messagingapplication for the US and Canada.

HTTP/HTTP2/HTTPS/RTCP/RTP

SPDY/SSL/STUN

MessagingTEXTPLUS

Tiange 9158 is a social network thatprovides streaming and broadcast livevideo feature. This plug-in does notsupport the traffic of broadcast of livevideo workflow.

HTTP/HTTP2/HTTPS

SPDY/SSL/TCP/UDP

WebTIANGE-9158

Tweakware is a VPN application.HTTP/HTTP2/HTTPS/SPDY/TCPInfrastructureTWEAKWARE

Tim Vision is a smart phoneapplication and web application. TimVision is a product of TIM.

TIMWebTIM-VISION

Tim is an telecommunicationcompany. This plug-in classifies thewebsite browsing.

ADOBE/SSL/SIP/STUN/QUIC/RTSP


APPLE-HLS/HTTP/HTTPS

MONDIA-MEDIA/SILVERLIGHT

WebTIM

Tikl is a simple Voice over InternetProtocol (VoIP) communicationapplication.

AMAZON-AWS/FLURRY/HTTP

HTTP2/HTTPS/SPDY/SSL/TCP/UDP

MessagingTIKL

Tanium is an Endpoint Detection andResponse (EDR) solution. It isEndpoint Management System toprotect enterprise against cyberthreats. This plug-in classifies TaniumClient traffic.

TCPInfrastructureTANIUM

26



ApplicationName

Television Broadcasts Limited is aHong Kong based audio-visual group.This plug-in classifies only websitebrowsing traffic of TVB.


HTTP2/HTTP-PROXY/AMAZON-AWS

HTTP/HTTPS

WebTVB

Tibbr is a social network for work.This plug-in classifies traffic of Tibber.

TIBCOWebTIBBR

TunnelBear VPN is a desktopapplication and browser extensionthat provide VPN.

AMAZON-AWS/DNS/HTTP


TCP/UDP/ZENDESK

InfrastructureTUNNELBEAR

This protocol is a generic layer. All theTibco protocols use this protocol asa base.

HTTP/HTTP2/HTTPS/SPDY/SSLWebTIBCO

This layer classifies only a limitednumber of protocols that Toyohardware (PLC) uses.

TCPInfrastructureTOYO-

PROTOCOL

Tribair is an Voice over InternetProtocol (VoIP) application fornational and international audio calls.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2

HTTP-PROXY/HTTP

HTTPS/IAX2

MessagingTRIBAIR

TimMusic is a smartphone applicationand web application. TIM providesTim Music.

TIMWebTIM-MUSIC

Unity is a 3D engine supported bymore than 25 platforms. This plug-infocuses on the video game services.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2

HTTP-PROXY/GOOGLE-API

HTTP/HTTPS

QUALTRICS

GamingUNITY

27



ApplicationName

This plug-in supports fourth versionof UDT over UDP. It is a protocol forhigh performance data transfer withmultiplexing and session control.

UDPInfrastructureUDT

Ventrilo is a low-latency, encryptedvoice chat software. You can useVentrilo while playing online games.

HTTP/HTTP2/HTTPS

SPDY/TCP/UDP

MessagingVENTRILO

vpn1.com is a website hosts twopopular proxies, Hoxx VPN andsetupvpn.

DNS/HTTP/HTTP2

HTTPS/SPDY/SSL/

TCP/VPN1-COM

WebVPN1-COM

Vyke is an InstantMessaging allowingto buy phone number from countriessuch US, UK, Canada and do VoIP,text messaging (SMS), and usual chat.

HTTP/HTTP2/HTTPS

RTCP/RTP/SPDY/SSL

MessagingVYKE

Voxer is an instant messagingapplication that provides voice, text,photo, and video with walkie talkiemessaging (Push-to-talk PTT) featuresin a secure messaging application.

HTTP/HTTP2/HTTPS/SPDY/SSLMessagingVOXER

Visual IQ is a marketing solutionprovider.

HTTP/HTTP2/HTTPS/SPDY/SSLWebVISUAL-IQ

Vungle is a mobile advertisingplatform.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2


WebVUNGLE

Viu is an Asian streaming application.AMAZON/AMAZON-AWS

HTTP/HTTP2

HTTPS/SPDY/SSL

MultimediaVIU

28



ApplicationName

W3Schools is an educational websitefor learning web technologies online.

SSL/SIP/STUN/QUIC

RTSP/SPDY/HTTP2


WebW3SCHOOLS

Windscribe is a desktop applicationand browser extension that providesVPN and Ad blocker features.

CLOUDFLARE/HTTP2/HTTPS

ESP-OVER-UDP/IKE/SPDY/SSL

InfrastructureWINDSCRIBE

Wish is an e-commerce website andapplication.

HTTP/HTTP2/HTTPS/SPDY/SSLWebWISH-COM

This protocol plug-in classifies trafficrelated to Warner Bros InteractiveEntertainment. Warner Bros.Interactive Entertainment (also knownas WB Games) is the video gameproduction arm of Warner Bros.

HTTP/HTTP2/HTTPS/SPDY/SSLGamingWB-GAMES

WebRtc is a free, open-source projectthat provides real-timecommunication (RTC) API for webbrowsers and mobile applications.

DTLS/STUNWebWEBRTC

Xmrpool EU is mining pool forMonero cryptocurrency.


SPDY/SSL

WebXMRPOOL-EU

X-VPN is a VPN service. You can usethis to unblock sites and browseprivately and anonymously on yourAndroid devices.

FTP/FTP-DATA/HTTP/HTTP2/HTTPS

SMTP/SPDY/SSL/TCP/UDP

InfrastructureX-VPN

Yahoo Together is a groupmessagingapplication.

HTTP/HTTP2/HTTPS/SPDY/SSLMessagingYAHOO-

TOGETHER

Youme provides in-Appcommunication cloud services forgames.


SPDY/SSL/TCP/UDP

MessagingYOUME

29



ApplicationName

Yandex Taxi is a Russian onlinetransportation network companywhich connects smartphone usereslooking for a trip with drivers.


QUIC/SPDY/SSL/YANDEX

WebYANDEX-TAXI

Yolo is an application to sendquestions and answers to Snapchatusers. Currently, Yolo is only availableon iOS.

AMAZON/AMAZON-AWS


WebYOLO

Updated Applications

Table 3 on page 30 shows the applications that this release of JDPI-Decoder is updating.

Table 3: Updated Applications


ApplicationName

Fusion 360 is a SaaS CAM and CADapplication from Autodesk. Thissignature classifies traffic from boththeWeb andDesktop versions of theapplication. This application alsoclassifies generic web access toAutodesk's website.

AMAZON-AWS/HTTP/HTTP2

HTTP-PROXY/HTTPS/QUIC

SPDY/SSL

InfrastructureAUTODESK

This signature detects the networkconnections of different BitTorrentclients. This signature, along withothers signatures, can preventBitTorrent file sharing.


QUIC/SOAP/SOCKS4SOCKS5/SPDY

SPID/SSL/TCP/UDP/UTP

P2PBITTORRENT

30

Table 3: Updated Applications (continued)


ApplicationName

Cisco Wireless LAN controllercoordinates a set of Cisco wirelessLAN access points. This plug-inclassifies the Neighbor DiscoveryPacket (NDP) packets and theprotocol used between wireless LANcontroller (WLC) instances for theradio resource managementfunctionality. The WLC alsocommunicates with the access pointsusing CAPWAP tunnels and classifiesthe protocols.

UDPInfrastructureCISCO-RRM

The DCERPC protocol is an RPCimplementation. DistributedComputing Environments USESDCERPCprotocol.Microsft Exchangeandmany other software applicationsuse DCERPC protocol.

HTTP/SMB/TCP/UDPInfrastructureDCERPC

This signature detects Domain NameSystem (DNS), which is used forInternet mail and host addresssupport.

CLOUDFLARE/GOOGLE


HTTPS/MOZILLA/SPDY/SSL

TCP/UDP

InfrastructureDNS

Clariion is a SAN product line fromEMC. NaviSphere is the remoteconfiguration interface of Clarion.This plug-in classifies the internalcommunication protocols and webinterface of NaviSphere.

TCPInfrastructureEMC-

NAVISPHERE

FullStory is a digital analyticsplatform. This plug-in classifieswebsite traffic of FullStory.


HTTP2/HTTP-PROXY/HTTP/HTTPS

WebFULLSTORY

31



ApplicationName

This plug-in classifies FLEXNet licenseservers and Flexera website.

ADOBE/SSL/SIP/STUN



TCP

InfrastructureFLEXERA

Proficy is a General Electric productfor industrial environment. Proficymonitors and do data managementfrom SCADA network. This plug-inclassifies traffic related to ProficyGateway service (PR Gateway) andProficy Licensing server (PRLicensing).

TCPInfrastructureGE-PROFICY

Apache Hadoop is an open sourcetool that enables distributed parallelprocessing of huge amounts of dataacross servers that both store andprocess the data.

TCPInfrastructureHADOOP

Hbase is a distributed database basedon Google Bigtable.

HDFSInfrastructureHBASE

IMO is a Web-basedinstant-messaging service thatprovides unified access to manypopular messaging protocols. ThisAppID detects Imo.im.


HTTPS/QUIC/SPDY/SSL

TCP/UDP

MessagingIMO

ICF Technology is a provider ofhigh-definition video streaming andcredit card processing services.Numerous adult content serviceshave icf_technology as a subflow.

HTTP/HTTP2/HTTPS/SPDY/SSLWebICF-

TECHNOLOGY

Self-titled tool for networkperformancemeasures uses the iPerfprotocol.

TCP/UDPInfrastructureIPERF

32



ApplicationName

HPnetwork printers use the Jetdirectprotocol.

TCPInfrastructureJETDIRECT

This signature detects LightweightDirectory Access Protocol (LDAP),which is a networking protocol forquerying and modifying directoryservices running over TCP/IP. Thedefault port for LDAP is TCP/UDP389.

TCP/UDPInfrastructureLDAP

Milestone Systems is an IP videomanagement software platform. Thisplug-in classifies only website traffic.


SPDY/SSL

MultimediaMILESTONE-

SYSTEMS

This plug-in classifies ASPP (AsyncServer Proprietary Protocol) fromMoxa (NPort devices) withoutactivating encryption.

HTTP2/HTTPS/SPDY

SSL/TCP

InfrastructureMOXA-ASPP

Microsoft SQL Server AnalysisServices (MS-SSAS) is optionalcomponent of SQL Server for OnLineAnalytical Processing (OLAP). Thisplug-in classifies XMLA (XML forAnalysis), which is a SOAP protocolfor accessing those databases.

SOAPInfrastructureMS-SSAS

Direct Internet MessageEncapsulation (DIME) is a lightweightbinary format to encapsulate a binarypayload along with its type. Thisplug-in handles version 1 of Dime.

TCPInfrastructureMS-DIME

This siganture detectsMicrosoft SQLServer database which uses TDS(Tabular Data Stream). TDS is aprotocol or a set of rules to transmitdata between two computers. Bydefault,MS SQL Server uses TCP port1433.

TCPInfrastructureMSSQL

33



ApplicationName

MyTV SUPER is an online videoplatform. TVB operates MyTVSUPER. This plug-in classifies onlywebsite browsing.

TVBWebMYTV-SUPER

Minergate.com is a mining pool forMonero cryptocurrency.


SPDY/SSL

WebMINERGATE-

COM

Microsoft Teams is a chat-basedworkspace in Office 365.Most of theapplication traffic is classified asskype or office365.

HTTP/MICROSOFT

OFFICE365-CREATE-CONVERSATION

SSL

MessagingMS-TEAMS

NDMP (Network Data ManagementProtocol) is an open protocol forenterprise-wide network basedbackup over TCP.

TCPInfrastructureNDMP

This AppID detects a new email inOffice365.Office365 is the corporatecloud based office suite. Thissignature may require SSL ForwardProxy configuration.

AKAMAI-SSL/HTTP/HTTP2

HTTP-PROXY/HTTPS/QUIC/SPDY

SSL/WINDOWS-AZURE

WebOFFICE365

This module classifies the traffic fromORACLE OEMManagement. OracleOEM (Oracle Enterprise Manager /EnterpriseManager Cloud Control) isan orchestrator for the IT and cloudinstances. It deploys and configureOracle products, including OracleLinux from PXE.

HTTP2/HTTPS/SPDY/SSLInfrastructureORACLE-OEM

OptimiCDN pilots multiple CDNs isan All-in-One Multi CDN service foroptimized web performances andenhanced User Experience.

HTTP/HTTP2/HTTPS/SPDY/SSLWebOPTIMICDN

34



ApplicationName

Prezi is a presentation software. Thisplug-in classifies traffic fromIndividual Premium features of Prezi.

AKAMAI-SSL/AMAZON

AMAZON-AWS/HTTP


WebPREZI

This is an OSI PI DataArchive andServer SCADA protocol.

TCPInfrastructurePI-DATA

QUIC is an open networking protocoldeveloped primarily at Google fortransporting web content.

UDPWebQUIC

Rockwell NetworkApplications (RNA)is Rockwell implementation ofWindows DNA-M. RNA establishescommunication between RockwellFactoryTalk products.

TCPInfrastructureROCKWELL-

RNA

This plug-in classifies the RockwellAutomationwebsites and relatedAPI.

ADOBE/AKAMAI-SSL/HTTP/HTTP2

HTTPS/ORACLE

SPDY/SSL/WINDOWS-AZURE

WebROCKWELL

Ripple is a cryptocurrency but unlikeother cryptocurrencies it is not basedon a block chain. RippleNet design ismore centralized.

AMAZON/FASTLY/HTTP/HTTP2

HTTPS/SPDY/SSL

WebRIPPLE

This signature detects SSL access toany of the Skype domains. Skype is aVoice Over Internet Protocol (VOIP)and popular instant messenger fromMicrosoft.


MICROSOFT/MS-TEAMS/SIP/SPDY

SSL/STUN/TCP/UDP

WINDOWS-AZURE

InfrastructureSKYPE

Speed test is aWeb site and a mobileapplication to test both bandwidthand latency of any internetconnection.

FTP/HTTP/HTTP2/HTTPS

SPDY/SSL/TCP/UDP

WebSPEEDTEST

35



ApplicationName

Spotify is a music streaming service.AKAMAI-SSL/AMAZON-AWS

FASTLY

GOOGLE-ANALYTICS-TRACKING

HTTP/HTTP2

HTTP-PROXY/HTTPS/RTMP

SOCKS4/SOCKS5/SPDY/SSL

TCP/TWITTER/UDP

MultimediaSPOTIFY

This AppID detects the Skinny CallControl Protocol, which is alightweight protocol for sessionsignaling with Cisco CallManager.

TCPInfrastructureSCCP

Telegram is an instant messagingprotocol such as Whatsapp.


TCP/UDP

MessagingTELEGRAM

TikTok is a social network application.TikTok allows its users to share livestream video content.

BYTEDANCEMessagingTIKTOK

Text Me is an instant messagingapplication which can make textingand calling to any phone and makenational and international calls.

AMAZON-AWS/HTTP

HTTP2/HTTPS

ITUNES/RTP/SPDY/SSL

ZENDESK

MessagingTEXTME

This AppID detects Taobao, which isa non-stop online platform forshopping, socializing, and informationsharing for consumers in China.

ALIBABA-CLOUD/HTTP

HTTP2/HTTPS

SPDY/SSL/TCP

WebTAOBAO

Talkray is an instant messagingapplication.

AMAZON-AWS/FLURRY/HTTP

HTTP2/HTTPS/SPDY/TCP/UDP

MessagingTALKRAY

36



ApplicationName

TechRadar is a technology news website.

HTTP/HTTP2/HTTPS/SPDY/SSLWebTECH-RADAR

Tenor is a Graphics InterchangeFormat (GIF) search engine.

HTTP/HTTP2/HTTPS/SPDY/SSLWebTENOR

This signature detects Telnet, whichis an remote text-based loginprotocol. Telnet usually runs on TCPport 23.

TCPRemote-accessTELNET

Ubisoft is an online Game softwareeditor and publisher.

AKAMAI-SSL/HTTP

HTTP2/HTTPS/SPDY

SSL/TCP/UDP

GamingUBISOFT

Vonage Mobile is an instantmessaging application that providesfeatures to make landline orinternational calls.

HTTP/HTTP2/HTTPS/SIP

SPDY/SSL/STUN/TCP/UDP

MessagingVONAGE-

MOBILE

Xprotect is a professional videosurveillance system from MilestoneSystems. This plug-in only supportsthe demonstration version onmobiledevices.

HTTP/HTTP2/HTTPS

MILESTONE-SYSTEMS

SOAP/SPDY/TCP

MultimediaXPROTECT

YOPmail is a disposable emailplatform. YOPmail provides a faketemporary and anonymous emailaddress.

HTTP/HTTP2/HTTPS/SPDYWebYOPMAIL

Zendesk is a cloud-based customerservice platform that includesticketing, self-service options, andcustomer support features.

AMAZON-AWS/CLOUDFLARE/DNS


SSL/TCP/UDP

WebZENDESK

37



ApplicationName

Zoom Video Conferencing is alsoknown as Zoom by users. Thisapplication combines videoconferencing, online meetings, andmobile collaboration into oneplatform.


HTTP2/HTTP-PROXY/HTTP

HTTPS/TCP/UDP

MessagingZOOM

Custom Applications

This release of JDPI-Decoder is not introducing any enhancements to the custom applications.

New or Modified Application Groups

Table 4 on page 38 shows the application groups and the applications that this release of JDPI-Decoderis adding or modifying.

Table 4: Modified Application Groups

Applications DetailsApplication Group Name

Added AGE-OF-MAGIC, BRAWLHALLA, CALL-OF-DUTY, DEMONWARE,DRAGON-BALL, HARRY-POTTER-WU, INJUSTICE-2, LOL-GAME,MOONTON, MOJANG, MOBILE-LEGENDS, PLAYKOT, REALVNC,SOURCE-ENGINE, UNITY, and WB-GAMES applications to the applicationgroup.

applications:gaming

38

Table 4: Modified Application Groups (continued)


AddedACRONICS-BACKUP,AUTODESK,ANCHORFREE, ANYWHEREUSB,BARRACUDA-VPN, CODEMETER, CISCO-SMARTPROBE, CISCO-SDAVC,COUCHBASE, CISCO-AMC, CYBERGHOST, DNS, FLEXERA, PCCC,CISCO-IP-SLA, CISCO-NMSP, DNS-CRYPT, EXPRESSVPN, EPROXY,ERLANG-DISTRIBUTION, FTPS-DATA, DICOM, FIREFOX-VPN,EPDG-TUNNEL,HDFS,HTTP-INJECTOR,HEXATECH,HRPC, IEC61850-SV,KODI, KAFKA, LDAP,MODBUS-RTU,OPERA-VPN,REDIS, ROCKWELL-RNA,SPLUNK-CLOUD, SYMANTEC-SEP, SPRINGTECH-VPN, SIGNIANT, SKYPE,TWEAKWARE, TANIUM, TOYO-PROTOCOL, TUNNELBEAR, UDT,VPN-MASTERPRO, VPN-MONSTER,WINDSCRIBE, and X-VPN applicationsto the application group.

applications:infrastructure

AddedALICALL, CISCO-UCM,COCO,DISCORD, ETISALAT-C-ME, FREEPP,HIKE-MESSENGER, KEKU, LIBON, LINE2-COM, MTALK, MUMBLE,OTO-GLOBAL, RING-CENTRAL, TALKBOX, TEXTPLUS, TIKL, TRIBAIR,VENTRILO, VYKE, VOXER, YAHOO-TOGETHER, and YOUME applicationsto the application group.

applications:messaging

Added CMORE, DAZN, FUZE, GVCP, GAANA, HOOQ, IFLIX, I-WANT-TV,LIFESIZE, MS-TEAMS, NETFLIX-VIDEO, QUICKPLAY, RAKUTEN-VIDEO,RAKUTEN-TV, STREAMCO-MEDIA, STAN, STARZ, VIU, and ZOOMapplications to the application group.

applications:multimedia

Added ARD, TELNET applications to the application group.applications:remote-access

39

Table 4: Modified Application Groups (continued)


Added 9GAG, 24SEVENOFFICE, 4SYNC, ACRONICS-CLOUD, ACRONICS,AWS-CONSOLE,AMAZON-COGNITO,ALIBABA-GROUP,ANONYTUN-VPN,ACCOUNTKIT, ARTE-TV, APPLE-NEWS, ALIBABA-CLOUD, APPNEXT,AIR-WATCH, BIGO, BARRACUDA, BLUEHOST, BYTEDANCE,CISCO-CMX-CLOUD, CISCO, COINIMP, CRYPTO-POOL-FR, CODEPEN-IO,CIBN, CISCO-CORP-TV, CAKE-HR, DISCOURSE, DIDI,EVOZI,BIGBIGCHANNEL,DWARFPOOL-COM, FOXPLUS,DUCKDUCKGO,EASY-ANTI-CHEAT, FANDOM,FAST-COM,FOXNETWORKS, FUTURE-PLC,FACE-APP, GRAMMARLY, GOOGLE-ONE, GOOGLE-BOOKS, GOV-SG,GAODE-MAP, GOOGLE-NEWS, GOOGLE-BLOG, GOOGLE-ADS, GRAB,HBO,GOOGLE-VIDEO,GOOGLE-TAKEOUT,GOOGLE-API,GLOBE-TELCO,GCASH, HYPERS, HOXX-VPN, IRONSOURCE, IBM, INMOJI, INSKIN,JIBE-CLOUD, JIBE, JUMPSHARE, JSCOUNT, JSFIDDLE, LITRES-RU,MYNT,MOJOMARKETPLACE,MONERO,MONEROHASH-COM,MEGAPHONE-FM,MINEXMR-COM,MOODLE,MONDIA-MEDIÀ,MEDIUM,MONDAY-COM,NETIGATE, NS-SG, OPENLOAD, OPEN-SIGNAL, PUBNUB, PATREON,PROTONMAIL, QUIC, QUALTRICS, ROCKYOU, STOREBUFF, SIMPLI-FI,TARGET-COM, TRELLO, LEARNET, TESLA, TIANGE-9158, TIM-VISION,TIM, TVB, TIBBR, TIBCO, TIM-MUSIC, VPN1-COM, VISUAL-IQ, VUNGLE,IBOOKS, W3SCHOOLS, WISH-COM, WEBRTC, XMRPOOL-EU,YANDEX-TAXI, and YOLO applications to the application group.

applications:web

Obsolete Applications

Table 5 on page 41 shows the applications that are now obsolete either because they are no longer in usein the field or they have been replaced with more recent applications. While configuration commit will notfail if these obsolete applications are already configured, the recommendation is to remove these applicationsfrom configurations of AppSecure modules (AppFW, AppQoS, APBR, AppQoE and Unified Policy), as theywill no longer be classified or reported. The applications which have been replaced are added as an aliasunder a related application which are provided in the specific reason column. You cannot configure a newpolicy with these obsolete applications, instead you can use the related applications mentioned in thespecific reason column where available.

40

Table 5: Obsolete Applications

DescriptionSpecific ReasonApplication Name

This signature detects AIM Express, which isa Web-based instant messaging and e-mailsystem used to communicate with othersusing a Web browser.

Not applicableAIMEXPRESS

This signature detects Babelgum, which is aWeb-basedmultimedia portal. Use Babelgumto stream music, movies, and televisionprograms over the Internet.

Not applicableBABELGUM

BIGADDA is an Indian e-commerce website,and a subsidiary of Reliance Entertainment.

Not applicableBIGADDA

Bonpoo provides a free, email-basedfile-sharing service.

Not applicableBONPOO

This signature detects video streaming fromblip.tv

Not applicableBLIP-TV-STREAM

This plug-in is a Bittorrent tracker searchengine.

Not applicableBT-WRZRU

This signature detects any Web clientattempting to retrieve content that Coralnetwork caches.

Not applicableCORALCDN

Circle of Moms is a parenting social networkfor mothers to share stories, problems, andtips of motherhood.

FACEBOOK-CIRCLEOFMOMS replacedCIRCLEOFMOMS.

CIRCLEOF

MOMS

CounterStrike game uses Cstrike protocol.SOURCE-ENGINE replaced CSTRIKE.CSTRIKE

This signature detects access to the AppleMobileMe product.

Not applicableDOTME

This signature detects access to Doubleclick,which is an internet advertising and trackingservice.

GOOGLE-ADS REPLACED DOUBLECLICK.DOUBLECLICK

This signature detects and can block usage ofthe Facebook mail functionality.

FACEBOOK-MAIL is now a part of FacebookMessenger.

FACEBOOK-MAIL

41

Table 5: Obsolete Applications (continued)


FledgeWing is an online community aimed atentrepreneurial university students.

Not applicableFEDGEWING

This signature detects Filetubes, which is aWeb-based file sharing application that isused to share files with people over theInternet.

Not applicableFILESTUBE

This signature detects Friendster, which is amembership-based online gaming service.

Not applicableFRIENDSTER

Proficy is a General Electric product forindustrial environment allowing monitoringand datamanagement from SCADAnetwork.This plug-in classifies traffic related to ProficyGateway service and Proficy Licensing server.

Replaced with GE-PROFICYGE-PROCIFY

This signature detects requests for streamingmusic from Grooveshark.com.

Not applicableGROOVESHARK-

STREAMING

This signature detects Graboid. Graboid is anapplication that searches the internet forvideos and makes it simple to view them as astreaming video.

GRABOID replaced GRABOID-SSL.GRABOID-SSL

This signature detects SSL access to GooglePlus, which is an social network from Google.

GOOGLE-PLUSreplacedGOOGLE-PLUS-SSL.GOOGLE-

PLUS-SSL

This signature detects SSL access toDoubeClick. DoubleClick is an advertisementservice from Google.

GOOGLE-ADS replacedGOOGLE-ADSERVICES-SSL.

GOOGLE-

ADSERVICES-

SSL

Google Videos is a video search engine.YOUTUBE replaced GOOGLE-VIDEOS.GOOGLE-

VIDEOS

42



Half-Life is a real time gaming protocol.Manydifferent games such as Half-Life, Half-Life 2,Counter-Strike, Counter-Strike: Source, Callof Duty 4 use Half-Life.

SOURCE-ENGINE replaced HALF-LIFE.HALF-LIFE

HotVPN helps you to access blockedapplications and websites.

Not applicableHOT-VPN

IPP Type 51 - IPP-AH - is an authenticationHeader

Not applicableIPP-AH

This signature detects IWIW, which is aHungarian social networking Web site.

Not applicableIWIW

IPP Type 50 - IPP-ESP - is Encap SecurityPayload

Not applicableIPP-ESP

This signature detects Jajah as service thatconnects existing traditional landlines ormobile phones with calls initiated from thecloud.

Not applicableJAJAH-WEB

This signature detects Justin.tv, a YouTubelike Web site that allows users to produce orwatch live streaming video.

Not applicableJUSTIN-TV

Kingdom xxx is a Bittorrent tracker searchengine.

Not applicableKINGDOMXXX

Khmer News is a Cambodian news portal.Not applicableKHMER-NEWS

This signature detects access to Skydrive overSSL. Skydrive is part of the Live suite ofapplications and is responsible for cloudstorage.

LIVE-STORAGEmoved toONEDRIVEplug-in.LIVE-STORAGE

Classifies web browsing on themegashares.com Direct DownLoad linksservice.

Not applicableMEGASHARES-COM

43



This signature detects MegaUpload, which isa Web-based file uploading portal used tohost files for sharing.

Not applicableMEGAUPLOAD

MSN2GO is a Web-based MicrosoftMessenger client.

LIVE-STORAGE replaced MSN.MSN

This signature detects MegaUpload, which isa Web-based file uploading portal used tohost files for sharing.

Not applicableMEGAUPLOAD

This signature detects Megavideo, which isan online video streaming application similarto YouTube.

Not applicableMEGAVIDEO

Minecraft Pocket is a game about placingblocks and going on adventures.

Not applicableMINECRAFT-POCKET

Mxit is a free instant messaging applicationdeveloped by Mxit Lifestyle Ltd. in SouthAfrica that runs on multiple mobile andcomputing platforms.

Not applicableMXIT

This signature detects Multiupload, which isa Web-based file sharing application that isused to share files with people over theInternet.

Not applicableMULTIUPLOAD

This signature detects Netlog, which is aBelgian social networkingWeb site specificallytargeted at the European youth demographic.

Not applicableNETLOG

Pando provides free file-sharing services andpaid content-delivery for enterprises.

Not applicablePANDO

Savefile.com classifies web browsing on thesavefile.com Direct DownLoad links service.

Not applicableSAVEFILE-COM

This protocol plug-in classifies the http trafficto the host sciencestage.com.

Not applicableSCIENCESTAGE

44



SnapVPN helps you to access blockedapplications and websites.

SPRINGTECH-VPN replaced SNAP-VPN.SNAP-VPN

This signature detects Skyrock, a socialnetwork that is targeted towards musicians.

Not applicableSKYROCK

Turbo VPN helps you to access blockedapplications and websites.

SPRINGTECH-VPN replaced TURBO-VPN.TURBO-VPN

This plug-in classifies web browsing on theuploadingit.com Direct DownLoad linksservice.

Not applicableUPLOADINGIT-COM

VPN Master helps you to access blockedapplications and websites.

SPRINGTECH-VPN replaced VPN-MASTER.VPN-MASTER

VPN Monster helps you to access blockedapplications and websites.

SPRINGTECH-VPNreplacedVPN-MONSTER.VPN-MONSTER

VPN Robot helps you to access blockedapplications and websites.

SPRINGTECH-VPN replaced VPN-ROBOT.VPN-ROBOT

VPNMaster Pro helps you to access blockedapplications and websites.

SPRINGTECH-VPN replacedVPN-MASTERPRO.

VPN-MASTERPRO

This signature detects Wikia, which is a freewiki hosting service.

FANDOM replacedWIKIA.WIKIA

This signature detects Yahoo!WebMessenger,which lets users use the Yahoo! Messengerservice without downloading the application.

YAHOO-TOGETHER replacedYAHOO-WEBMESSENGER.

YAHOO-WEBMESSENGER

This signature detects YourFileHost, which isa Web-based file sharing portal.

Not applicableYOURFILEHOST

This signature detects YMSG contactinformation. YMSG is the protocol that Yahoo!Messenger uses for standard operations.

Not applicableYMSG

Yahoo Messenger uses this protocol toconvert videos.

Not applicableYMSG-VIDEO

45



This protocol is used for file tranfers overymsg.

Not applicableYMSG-TRANSFER

This protocol is used in signaling part in aconference.

Not applicableYMSG-CONF

Resolved Issues

Table 6 on page 46 describes the issues that this release of JDPI-Decoder is resolving.

Table 6: Resolved Issues

DescriptionPR

JDPI–Decoder

Need support to detect Google API applications.1279801

SRX4100 cluster is unable to handle JetDirect Application.1475961

SRX4100 cluster is unable to handle NaviSphere Application.1483136

AppID labeling port 9389 as PI-Data, but it Active Directory (AD).1500692

AppID is unable to detect customized applicationHTTP:USERAPP and traffic hit wrongpolicy.

1501418

AppID is unable to detect O365 auth traffic as O365 application.1507754

AppID is unable to detect AWS/MS-SQL application traffic andmarking the applicationsas unknown or inconclusive.

1515793

AppID is unable to detect Zoom and ms-teams-voice. SD-WAN for these applicationsare not routing correctly.

1519690

AppID is unable to detect Telnet.1522139

AppID is unable to detect latest gQUIC implementation.1528365

46

Requesting Technical Support

Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).If you are a customer with an active J-Care or Partner Support Service support contract, or are coveredunder warranty, and need post-sales technical support, you can access our tools and resources online oropen a case with JTAC.

• JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTACUserGuide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.

• Product warranties—For product warranty information, visit http://www.juniper.net/support/warranty/.

• JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,365 days a year.

Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online self-service portal calledthe Customer Support Center (CSC) that provides you with the following features:

• Find CSC offerings: https://www.juniper.net/customers/support/

• Search for known bugs: https://prsearch.juniper.net/

• Find product documentation: https://www.juniper.net/documentation/

• Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/

• Download the latest versions of software and review release notes:https://www.juniper.net/customers/csc/software/

• Search technical bulletins for relevant hardware and software notifications:https://kb.juniper.net/InfoCenter/

• Join and participate in the Juniper Networks Community Forum:https://www.juniper.net/company/communities/

• Create a service request online: https://myjuniper.juniper.net

To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:https://entitlementsearch.juniper.net/entitlementsearch/

47

https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf

https://www.juniper.net/support/warranty/

https://www.juniper.net/customers/support/

https://prsearch.juniper.net/

https://www.juniper.net/documentation/

https://kb.juniper.net/

https://www.juniper.net/customers/csc/software/

https://kb.juniper.net/InfoCenter/

https://www.juniper.net/company/communities/

https://myjuniper.juniper.net

https://entitlementsearch.juniper.net/entitlementsearch/

Creating a Service Request with JTAC

You can create a service request with JTAC on the Web or by telephone.

• Visit https://myjuniper.juniper.net.

• Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

For international or direct-dial options in countries without toll-free numbers, seehttps://support.juniper.net/support/requesting-support/.

48

https://myjuniper.juniper.net

https://support.juniper.net/support/requesting-support/

Revision History

September 04, 2020—Revision 1, JDPI Release Notes

Copyright © 2020, Juniper Networks, Inc. All rights reserved.

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks,Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks ofJuniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are theproperty of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the rightto change, modify, transfer, or otherwise revise this publication without notice.

49

juniper networks deep packet inspection-decoder

Documents