Protocol List Olfeo

Secure / Optimize / Analyze

Internet usage
List of protocols
ANTIVIRUS
Sophos update
ZoneAlarm Updates

Sophos antivirus update protocol.
This protocol plug-in classifies the web traffic to the hosts 'zonealarm.com' and 'zonelabs.com', or associated to the SSL Common Name
'cm1.zonealarm.com'.

APPLICATION SERVICE
Apple App Store
Apple Push Notification Service
Dictionary Server Protocol
End Point Mapper
Google Play
iCloud
ios_ota_update
Lighweight Directory Access
Protocol
Name Service Provider Interface
Perforce Protocol
Port Mapper
Samsung Apps
Secure LDAP
Service Location Protocol
Simple Service Discovery Protocol
Syslog
Websphere Message Queue
series

The Apple App Store is a digital application distribution platform for iOS developed and maintained by Apple Inc.
APNS (Apple Push Notification Service) is an Apple service which forwards notifications from the servers of third party applications to iOS
devices.
The DICT protocol is a TCP transaction based query/response protocol that enables a client to access dictionary definitions from a set
of natural language dictionary databases.
End Point Mapper is a protocol used by Exchange to determine the ports used by various services.
Google Play (formerly Android Market) is an online software store developed by Google for Android OS devices.
iCloud is a cloud computing service developed by Apple Inc. which allows to store and share data, from an iOS mobile (iPhone, iPad,
iPod Touch) or a Macintosh.
iOS OTA Update is the protocol used for iOS updates Over The Air.
LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this
protocol to send queries to Active Directory.
Name Service Provider Interface is a protocol used by Exchange.
Perforce is a commercial, proprietary, centralized revision control system developed by Perforce Software, Inc.
Port Mapper protocol maps RPC program and version numbers to port numbers. This program makes dynamic binding of remote
programs possible.
Samsung Apps is an application store for Samsung mobile and TV users.
Secure LDAP is the Secure version of the LDAP protocol.
Service Location Protocol is a decentralized, lightweight, scalable and extensible protocol for service discovery within a local area
network.
Simple Service Discovery Protocol (SSDP) provides a mechanism whereby network clients can discover desired network services.
Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.
Mq (IBM Websphere MQ) is an inter-application communication protocol.
Page 1

Windows Phone Marketplace
X Font Server protocol

Windows Phone Marketplace is a service by Microsoft for its Windows Phone 7 platform that allows users to browse and download
applications that have been developed by third-parties.
X Font Server is a standard communication protocol between an X server and a font renderer.

AUDIO/VIDEO
050 plus
adobe_connect
Apple FaceTime
Babelgum
BBC Player
Blip.tv TV Series
Blockbuster
Cisco MeetingPlace
CNET TV
Flash Media Playback
fring - Peer to Peer Mobile VOIP
gotomeeting - online meeting
service (Citrix)
grooveshark
H225
H245
h248 Protocol (Megaco) in binary
mode
h248 Protocol (Megaco) in text
mode
HBO GO
Howcast
Hulu
icall
Icecast
iHeartRadio
Inter Asterisk eXchange
ISO Base Media File Format
iTunes
Jajah
Livestream (formerly Mogulus)
Media Gateway Control Protocol
Metacafe
Microsoft Multimedia Streaming

050 plus is a Japanese embedded smartphone application dedicated to audio-conferencing.
Adobe Connect is a web communication system for the training, the marketing, the conferences and the online collaboration.
FaceTime is an Apple video calling software which runs on iOS based mobile devices.
This protocol plug-in classifies the web traffic to the host 'babelgum.com'.
BBC Player is an in-browser live video streaming service.
This protocol plug-in classifies the web traffic to the host 'blip.tv', and the RTMP audio/video streams originating from the host 'blip.tv'.
This protocol plug-in classifies the web traffic to the host '.blockbuster.com'.
MeetingPlace is a protocol used by the Cisco Unified MeetingPlace suite of voice, web, and video conferencing products.
This protocol plug-in classifies the web traffic to the host 'cnettv.cnet.com', and the RTMP audio/video streams originating from the host
'cnettv.cnet.com'.
Adobe Flash Media Playback is a dynamic HTTP streaming protocol used to access video contents from a smart client application.
Fring is a peer-to-peer Mobile VoIP based Internet telephony network.
GoToMeeting is an online meeting service developed by Citrix.
Grooveshark is an online unlimited service for music.
The H225 Protocol is a VoIP protocol, used for call signaling and RAS (Registration, Admission and Status).
H245 is a VoIP protocol, used for call signaling codec negotiation.
h248 Protocol (Megaco) in binary mode.
h248 Protocol (Megaco) in text mode.
This protocol plug-in classifies the web traffic to the host '.hbogo.com'.
This protocol plug-in classifies the web traffic to the host '.howcast.com'.
This protocol plug-in classifies the web traffic to the host '.hulu.com'.
icall is proprietary voice/video over IP protocol.
Icecast is a protocol used to stream audio files over HTTP.
This protocol plug-in classifies the web traffic to the hosts 'iheartradio.com' and 'iheart.com', and the RTMP audio/video streams
originating from the host 'iheart.com'.
Inter Asterisk eXchange (IAX2) is a data exchange protocol between Asterisk servers.
The ISO Base Media File Format, as described in ISO/IEC 14496-12:2008 (MPEG-4 Part 12).
iTunes is an Apple proprietary digital media player application, used for playing and organizing digital music and video files.
Jajah is a VoIP provider owned by Telefonica Europe.
This protocol plug-in classifies the web traffic to the hosts 'livestream.com' and 'a749.g.akamai.net', or associated to the SSL Common
Name 'livestream.com', and the RTMP audio/video streams originating from the host 'livestream.com'.
MGCP protocol is used as signaling protocol for voice IP applications.
This protocol plug-in classifies the web traffic to the hosts '.metacafe.com', 'v.mccont.com' and '.mcstatic.com'.
MMS protocol is used extensively nowadays by Microsoft video streaming servers. It enables to stream a file in real time to many
Page 2

Mpeg 2 Transmission
MSN Video
Netflix
Paltalk audio chat
Paltalk video
PPlive
ppStream - P2P based Streamed
Media
Q931

QQLive Network Player
QVOD Player
Real Data Transport
Real Time Control Protocol
Real Time Protocol
Real Time Streaming Protocol
Rhapsody
Session Initiation Protocol
ShoutCast
Silverlight
Skinny Client Control Protocol
Sky Player
Slacker Personal Radio
Slingbox
Sopcast
SoundCloud
Spotify
Tango Video Calls
The Message Session Relay
Protocol (MSRP)
TuneIn
TVAnts Protocol

simultaneous viewers.
MPEG-Transport Stream is a protocol used for MPEG flows transmission
This protocol is used by MSN Messenger for video conversations (is not used anymore since MSN version 8.X).
NetFlix is a site using Silverlight protocol to stream videos.
Proprietary protocol used by Paltalk in audio chats.
Proprietary protocol used by Paltalk in video.
PPLIVE is an application intended to watch TV in peer-to-peer. The PPLIVE application has two main functions : live TV(streaming) and
on-demand TV (VOD). These are two different protocols. This protocol plug-in handles both.
The ppstream protocol provides audio and video streaming. It is based on bittorent (peer-to-peer) technology. It is mainly used in
China.
The Q.931 protocol enables the use of voice and image on networks for video conferencing. It provides no flow control, however, or
retransmission, since the underlying layers are assumed to be reliable and the circuit-oriented nature of ISDN allocates bandwidth in
fixed increments of 64 kbps. Q.931 does manage connection setup and close. Like TCP, Q.931 documents both the protocol itself and a
state machine.
QQLive is an application intended to watch TV in Peer-to-Peer mode.
QVOD is a peer-to-peer based Video-On-Demand player.
This protocol is used to transport audio/video data.
The real-time transport Control protocol RTP allows monitoring of the data delivery in a manner scalable to large multicast networks,
and to provide minimal control and identification functionality.
RTP is the real-time transport protocol used to transmit real-time data, such as audio, video or simulation data, over multicast or unicast
network services.
The Real Time Streaming Protocol (RTSP) is an application-level protocol for control over the delivery of data with real-time properties.
RTSP provides an extensible framework to enable controlled, on-demand delivery of real-time data, such as audio and video.
Rhapsody is a subcription based music streaming service.
Session Initiation Protocol (SIP) is the Internet Engineering Task Force's (IETF's) standard for multimedia conferencing over IP. Like other
VoIP protocols, SIP is designed to address the functions of signaling and session management within a packet telephony network.
Shoutcast is a protocol used to stream audio files over HTTP.
Silverlight is a Microsoft web browser plugin designed to render programable animations and to stream videos. It quite similar with
Adobe Flash: animated vector graphics, H264 video streaming
Skinny Client Control Protocol (SCCP) is a Cisco proprietary protocol used between Cisco Call Manager and Cisco VOIP phones. It is
also supported by some other vendors.
This protocol plug-in classifies the web traffic to the host 'skyplayer.sky.com'.
This protocol plug-in classifies the web traffic to the host '.slacker.com', and the RTMP audio/video streams originating from the host
'slacker.com'.
Slingbox is a streaming protocol over the Internet used to watch and control TV shows received from your home devices.
Sopcast is a video streaming service based on a peer-to-peer protocol : SOP (Streaming Over Peer-to-peer).
This protocol plug-in classifies the web traffic to the hosts 'soundcloud.com' and 'sndcdn.com', or associated to the SSL Common
Names 'api.soundcloud.com' and 'sndcdn.com'.
Spotify is an application of musical streaming.
Tango is an embedded smartphone application dedicated to audio/video-conference.
Message Session Relay Protocol (MSRP) is a protocol for transmitting instant messages, defined by RFC 4975.
This protocol plug-in classifies the web traffic to the hosts 'tunein.com' and 'radiotime.com'.
TVAnts is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable
and satellite as well as WebTV.
Page 3

TVU network player
UUSee Protocol
VeohTV
VEVO
Viber
voddler
WebEx
X25
Yahoo Screen
YMSG Video
Zattoo

TVUPlayer is an application intended to watch TV in peer_to-peer.
Uusee is a peer-to-peer TV software, using the BitTorrent peer-to-peer technology. It provides a way to watch on the PC most cable and
satellite TV as well as WebTV on PC. It uses the network coding technology.
VeohTV is a VOD streaming service which includes both client software and a website with embedded flash videos.
This protocol plug-in classifies the web traffic to the host '.vevo.com', and the RTMP audio/video streams originating from the host
'vevo.com'.
Viber is a free embedded voice over-ip application, for smartphones.
Voddler is a streaming client application distributing movies and television programming using a patented hybrid peer-to-peer
distribution system.
WebEx is an online meeting, videoconferencing and collaborative application
X.25 is a packet switched data network protocol which defines an international recommendation for the exchange of data as well as
control information between a user device (host), called Data Terminal Equipment (DTE) and a network node, called Data Circuit
Terminating Equipment (DCE).
This protocol plug-in classifies the web traffic to the host 'screen.yahoo.com', and the RTMP audio/video streams originating from the
host 'screen.yahoo.com'.
(versions prior to 10.0.0.270) This protocol is used by Yahoo Messenger for video conversations.
Zattoo is website and a set of peer-to-peer TV applications.

AUTHENTICATION
Diameter
Identification Protocol
Kerberos
Remote Authentication Dial-In
User Service
TACACS+
Yellow Page Passwd
Yellow Pages Server

Diameter is an AAA (authentication, authorization and accounting) protocol for computer networks and an alternative to RADIUS.
The Identification Protocol provides a means to determine the identity of a user of a specific TCP connection.
Kerberos provides a means to verify the identities of the different workstations on an open (unprotected) network.
RADIUS (Remote Authentication Dial-In User Service) is a client/server protocol that enables remote access servers to communicate
with a central server to authenticate dial-in users and authorize their access to the requested system or service.
TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco Systems proprietary protocol which provides access control
for routers, network access servers and other networked computing devices via one or more centralized servers.
The Yellow Page Password protocol enables the modification of logins and passwords in Network Interface System cards.
Yellow Pages Server is a protocol used to distribute NIS databases to client systems within an NIS domain.

DATABASE
db2 protocol
Distributed Relational Database
Architecture
FileMaker Pro
informix protocol
Mobilink
MySQL Protocol
Postgres

DB2 is a relational model database server from IBM which has its roots in the early 1980s. It runs on IBM mainframes and is also available
for Linux/Unix/Windows.
DRDA is a protocol for carrying out SQL queries and commands.
FileMaker Pro is a relational database application from FileMaker Inc and which runs on Microsoft Windows as well as Mac OS.
Informix is a family of relational database management systems developed by IBM. IBM acquired the Informix technology in 2001 but it
dates back to 1981.It runs on IBM mainframes and is also available for Linux/Unix/Windows.
Mobilink is a proprietary, binary, TCP based protocol which is used to synchronize the contents of multiple mobile client databases with
a central SQL Server. The clients can run on smartphones, Java applets, etc., in addition to PC computers.
MySQL is an open source relational database management system (RDBMS) that uses Structured Query Language (SQL), the most
popular language for adding, accessing, and processing data in a database.
PostgreSQL is a sophisticated Object-Relational DBMS, supporting almost all SQL constructs, including subselects, transactions, and userdefined types and functions.
Page 4

Sqli
Sybase
Tabular Data Stream
Transparent Network Service
(Oracle)

The SQLI protocol (Structured Query Language Interface) is a proprietary protocol seemingly used exclusively in IBM Informix servers.
Sybase protocols are used to exchange messages (namely authentication and SQL queries) between database clients and servers
developed by the Sybase Company.
TDS protocol is used to communicate between SQL applications and a SQL Server.
Transparent Network Service (TNS) is the Oracle (version 8 or higher) networking technology that provides a single application interface
to all industry-standard networking protocols. To connect to a database, users initiate a connect request by passing information
(username and password) along with a short name for the database service they wish to connect to.

ENCRYPTED
Internet Security Association and
Key Management Protocol
IP secure
Online Certificate Status Protocol
Secure Shell
Secure Socket Layer
Tor

The Internet Security Association and Key Management Protocol (ISAKMP) defines procedures and packet formats to establish,
negotiate, modify and delete Security Associations (SA).
IPSec protocol provides services for securing hosts communications. IPsec provides two security services: Authentication Header (AH),
which allows authentication of the sender and Encapsulating Security Payload (ESP), which allows both authentication of the sender
and encryption of data.
This network protocol is used for validating certificates.
Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and a protocol for obtaining secure
access to a remote computer.
Secure Sockets Layer (SSL) is a commonly-used protocol for managing the security of a message transmission on the Internet. SSL has
recently been succeeded by Transport Layer Security (TLS), which is based on SSL.
Tor is an application that intends to provide online anonymity.

ERP
SAP

SAP is both a protocol and the name of an ERP application used by most companies.

FILE SERVEUR
aimini
Cross File Transfer
File Transfer Protocol
File Transfer Protocol Data
FTP over SSL
Gmail drive
HotLine
ibackup - online files backup
protocol
Mount
Netbios
Network File System
Network Lock Manager

Aimini is an online solution to store, send and share files.
CFT (Cross File Transfer) is a file transfer software developed by Axway
The FTP protocol is used for reliable data transfer between a client and a server.
This protocol is used to transport data in data connection of FTP communication.
Secure version of the FTP protocol.
GMAIL Drive is a Shell Namespace Extension that creates a virtual file system around a Google Mail account, allowing Gmail as a
storage medium. GMAIL Drive is only classified over http and not over https.
The Hotline protocol is used to upload/download files, to chat and to get news about chatters (it is not a peer-to-peer protocol)
ibackup is an online file backup protocol.
The Mount protocol is related to the NFS protocol. It provides operating system specific services to launch the NFS protocol -- looking up
server path names, validating user identity, and checking access permissions.
NetBIOS defines a software interface and standard methods providing a communication interface between the application program
and the attached medium. NetBIOS is used in various LAN (Ethernet, Token Ring etc) as well as WAN environments such TCP/IP, PPP and
X.25 networks.
The NFS protocol provides transparent remote access to shared file systems across networks as described in RFC 1813.
The network lock manager is a facility that works in cooperation with the Network File System (NFS) to provide a System V style of
Page 5

Remote synchronous (file transfer)
Rquota
Rstat
Rusers
Server Message Block (Windows
File Server)
Sync
Trivial File Transfer Protocol
Yellow Pages Update

advisory file and record locking over the network.
Rsync is a protocol used by various services performing updates. It greatly speeds up the update process since only the differences
between two sets of files are transfered, instead of the whole new file.
The RQuota protocol enables the implementation of quotas on remote machines. It is used in conjunction with the NFS protocol.
The RStat protocol is used in the Sun NFS family to exchange statistics on network activity.
The RUser's protocol provides a service that lists users currently logged on a remote server.
The Server Message Block Protocol (SMB/SMB2) provides a method for client applications to read and write to files and to request
services from server programs in a computers network.
The Sync protocol is an RPC service allowing data synchronisation.
Trivial File Transfer Protocol (TFTP) is a file transfer protocol that is simpler to use than the File Transfer Protocol (FTP) but that proposes less
features. TFTP uses the User Datagram Protocol (UDP) rather than the Transmission Control Protocol (TCP).
The Yellow Pages Update protocol enables information updates in Network Information Services (NIS) cards.

FILE TRANSFER
AIM Transfer Protocol
IRC File Transfer Data
Jabber File Transfer
PalTalk Transfer Protocol
QQ transfer Protocol
Ymsg Transfer Protocol

AIM is an instant messaging protocol
This protocol is used to transport data in IRC file transfer.
Jabber transfer is an open standard to transfer file between two Jabber clients.
Paltalk is an instant messaging protocol
File transfer over QQ
Ce protocole gère les transferts de fichiers sur ymsg.

FORUM
Google groups
Internet Relay Chat
LinkedIn website
Mibbit
MSN groups
Network News Transport Protocol
odnoklassniki
Secure IRC
Secure NNTP
vkontakte
Windows Live groups
Yahoo groups

Google groups
IRC (Internet Relay Chat) is an instant messaging protocol.
LinkedIn is professional social network.
This protocol plug-in classifies the web traffic to the host '02.chat.mibbit.com', or associated to the SSL Common Names
'web2.mibbit.com' and 'chat.mibbit.com'.
MSN Groups was a website part of the MSN network which hosted online communities, and which contained Web pages, hosted
images, and contained a message board. MSN Groups was shut down on February 2009 as part of a migration of online applications
and services to the Windows Live brand, and later renovated as Windows Live Groups.
The Network News Transport Protocol (NNTP) is used for the distribution, inquiry, retrieval and posting of net news articles using a reliable
stream-based mechanism.
Odnoklassniki is a Russian social network.
IRCs is the secure version of the IRC protocol.
Secure version of the NNTP protocol.
vkontakte is an European social network service popular among Russian-Speaking users. It is quite similar to Facebook.
Windows Live Groups is an online service by Microsoft that enables users to create their social groups for sharing, discussion and
coordination.
Yahoo! Groups offers free mailing lists, photo and file sharing, group calendars and more.

GAME
Page 6

All Slots Casino
CounterStrike
EVE Online
EverQuest II
Half-Life and Half-Life 2
IMVU
Lineage II
Nintendo Wi-Fi Connection
Playstation Network
Poker Stars
Quake
RuneScape
Steam
WiiConnect24
World of Warcraft
Xbox Live
Steam

This protocol plug-in classifies the web traffic to the host 'setup.realgaming.com'.
Cstrike is a protocol used by CounterStrike game, by Steam.
Eve Online is a multiplayer online game edited by CCP.
Everquest is a 3D fantasy massively multiplayer online role-playing game (MMORPG), for Windows platforms, developed by Sony Online
Entertainment(SOE).
Half-Life and Half-Life 2 are two first-person shooter video games developed by Valve Corporation and provide on-line gaming
features.
This protocol plug-in classifies the web traffic to the host 'imvu.com'.
Lineage2 is a MMORPG developed by NCSoft.
Wi-Fi Connection (WFC) is the Nintendo on-line gaming service for the Wii and DS videogame systems.
PlayStation Network (PSN) is the on-line gaming service for consoles made by Sony.
Pocker Stars is an online poker cardroom.
Quake is a protocol allowing communication between Quake Clients and Quake servers.
Massively Multiplayer Online Role Playing Game published by Jadex.
Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.
WiiConnect24 is an asynchronous communication protocol implemented on the Nintendo Wii gaming system. It used by some
information channels and services embedded in the console, and by some games too.
WOW is an online role-playing game.
Online multiplayer gaming and digital media delivery service created and operated by Microsoft Corporation.
Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.

INSTANT MESSAGING
AIM express
AirAIM
AOL Instant Messenger
Badoo
Ebuddy
FriendVox
Gadu Gadu
Gizmo Protocol
Google Chat
Hands On Video Relay Services
Inc
IBM Lotus Sametime
ICQ2Go
IloveIM
Jabber Protocol
Kaixin Chat
KakaoTalk

AOL Instant Messaging Express supports many of the standard features included in AIM, but does not provide advanced features like
file transfer, audio chat or video conferencing
This protocol plug-in classifies the web traffic to the host 'airaim.com', or associated to the SSL Common Name 'airaim.com'.
AIM is an instant messaging protocol. Originally, it meant 'AOL Instant Messenger'.
Badoo is a dating oriented social networking website.
eBuddy is a web and mobile messenger which supports various instant messaging.
This protocol plug-in classifies the web traffic to the host 'friendvox.com'.
Gadu Gadu is a Polish instant messaging protocol.
Gizmo is an instant messaging protocol.
Google chat is an online Webmessenger from Google.
This protocol plug-in classifies the web traffic to the hosts 'i711.com', 'hovrs.com' and 'purple.us', or associated to the SSL Common
Name 'hovrs.com'.
IBM Lotus Sametime is a client–server application and middleware platform that provides real-time, unified communications and
collaboration for enterprises.
This protocol plug-in classifies the web traffic to the hosts 'c.icq.com' and 'api.icq.net'.
This protocol plug-in classifies the web traffic to the host 'iloveim.com'.
Jabber is an open standard instant messaging and presence system.
This protocol plug-in classifies the web traffic to the host 'kaixin001.com'.
KakaoTalk is an instant messenging platform for mobile devices; users or group of users can send messages, share photos, videos and
contact information.
Page 7

KoolIM
Line
MessengerFX
MS Communicator
MSN live for Mobile
MSN Messenger
Mxit
netmeeting ils protocol
OICQ
oovoo
PalTalk Protocol
Phweet
QQ
RadiusIM
Secure AIM
sina
Skype
Teamspeak v2
TeamSpeak v3
WhatsApp Messenger
Yahoo Messenger
Yahoo Messenger conference
service
Yahoo messenger on web
Yoono
Zoho IM

This protocol plug-in classifies the web traffic to the host 'koolim.com'.
Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Call metadata is no more extracted from line, but
can be raised from the SIP layer.
This protocol plug-in classifies the web traffic to the host 'messengerfx.com'.
Microsoft Office Communicator is a client software launched in October 2007 for conferences which aims to communicate between
collaborators using instant messaging, VoIP and videoconference.
MSNMobile is the MSN instant messenger for mobile.
The MSN protocol allows the exchange of instant messages. The MSN protocol is used by the Microsoft software Microsoft Messenger
MXit (pronounced 'mix it') is a free instant messaging software application developed by MXit Lifestyle in South Africa that runs on
GPRS/3G mobile phones and on PCs.
Netmeeting ILS is the protocol used between Netmeeting and Internet Locator Servers (ILS). Netmeeting is a VoIP and multi-point
videoconferencing client included in many versions of Microsoft Window. A Internet Locator Server (ILS) is a directory used to find other
users and facilitate rendezvous.
Oicq is a proprietary messaging protocol developed by Tencent, at the origin of the qq protocol.
oovoo is an instant messenger application, with audio/video support.
Paltalk is an instant messaging protocol.
This protocol plug-in classifies the web traffic to the host 'blog.phweet.com'.
QQ is the most popular free instant messaging computer program in China.
This protocol plug-in classifies the web traffic to the host 'radiusim.com'.
AIMS is the secure version of AIM.
UCSina is a Chinese chat client similar to MSN Messenger or ICQ. It contains several features like: chat, news portal, micro blogging,
music player, online storage (files, photos, etc..)
Skype is a widely used voice over IP protocol.
The proprietary TeamSpeak2 protocol is used by gamers and oriented TeamSpeak2 VoIP software.
TeamSpeak 3 continues the legacy of the original TeamSpeak communication system. TeamSpeak 3 is not merely an extension of its
predecessors but rather a complete rewrite in C++ of its proprietary protocol and core technology.
WhatsApp Messenger is a cross-platform, instant, mobile messaging application which allows the users to exchange messages without
having to pay for SMS. WhatsApp Messenger is available for iPhone, BlackBerry, Android and Nokia and yes, those phones can all
message each other.
Yahoo Messenger is used by the Yahoo Instant Messenger application to send instant messages, files and emails between users.
This protocol is used in signaling part in a conference.
Yahoo webmessenger.
This protocol plug-in classifies the web traffic to the hosts 'api.yoono.com' and 'cdn.yoono.com'.
This protocol plug-in classifies the web traffic to the host 'wms.zoho.com', or associated to the SSL Common Name 'wms0.zoho.com'.

MAIL
Internet Message Access Protocol
version 4
Lotus Notes
MS Exchange Message API
Post Office Protocol

The IMAP protocol (Internet Message Access Protocol Version 4) enables a client to access and manipulate electronic mail messages
on a server.
Lotus Notes is a groupware knowledge management system which integrates various services such as web browsing, calendaring and
mailing.
MS Exchange Message API is a protocol used by Exchange clients to retrieve their emails.
Post Office Protocol - Version 3 (POP3) allows a workstation to simply and dynamically access a mail stored on a mail server.
Page 8

Secure IMAP
Secure POP3
Secure SMTP
Simple Mail Transfer Protocol

IMAPS is the secure version of the IMAP protocol.
Secure version of the POP3 protocol.
Secure version of the SMTP protocol.
The Simple Mail Transfer Protocol (SMTP) is a protocol used for transfering mail reliably and efficiently.

MICROSOFT OFFICE
Microsoft Office Groove

Microsoft Office Groove is a desktop application designed for document collaboration in teams with members who are regularly offline or who do not share the same network security clearance.

MIDDLEWARE
Advance Message Queuing
Protocol
Datagram Inter-ORB Protocol
Distributed Computing
Environment Remote Procedure
Call
General Inter-ORB Protocol
(Corba)
Internet Inter-ORB Protocol
Microsoft Remote Procedure Call
Remote Procedure Call
RMI over IIOP
Secure General Inter-ORB
Protocol
Simple Object Access Protocol

AMQP (Advanced Message Queuing Protocol) is an open standard application layer protocol for message-oriented middleware
DIOP is a GIOP implementation over UDP which aims to be more efficient than the TCP one.
The DCERPC protocol is an RPC implementation used in Distributed Computing Environments. This protocol is used by many software
applications including Microsft Exchange.
The General Inter-Orb protocol (GIOP) is used to make requests or return replies between ORBs in a Corba environment.
IIOP is the GIOP implementation over TCP.
Microsoft Remote Procedure Call (MSRPC) is the Microsoft implementation of the DCE RPC mechanism.
RPC (Remote Procedure Call) is an easy and popular paradigm for implementing the client-server model of distributed computing. A
request is sent to a remote system to execute a designated procedure, using arguments supplied, and the result is returned to the
caller.
RMI-IIOP (Remote Method Invocation over Internet Inter-ORB Protocol) delivers CORBA distributed architecture to Java 2 platform, using
both remote method invocation system RMI and IIOP protocol.
This protocol is the secure version of the GIOP protocol.
SOAP is a lightweight protocol intended for exchanging structured information in a decentralized, distributed environment. It defines,
using XML technologies, an extensible messaging framework containing a message construct that can be exchanged over a variety of
underlying protocols.

NETWORK ERRORS
Incomplete
Malformed
TCP Syn flood

Incomplete is used when the protocol signature is too long.
A packet belongs to the protocol 'malformed' if the protocol announced by the lower level protocol does not correspond to the one
determined by the system.
The synflood protocol detects syn flood attacks.

NETWORK MANAGEMENT
Altiris
Cisco Netflow Protocol

Altiris provides service-oriented management solutions which allow managing IT infrastructures.
NetFlow is a Cisco protocol that provides nearly real-time traffic monitoring, aggregation and statistic evaluation, multicriteria data flow
selection, using source/destination IP addresses, protocols, etc.
Page 9

Simple Network Management
Protocol
Zabbix agent

SNMP is a request/response protocol that communicates management information between two types of SNMP software entities:
SNMP applications (also called SNMP managers) and SNMP agents.
Agent for Zabbix monitoring server. Uses TCP port 10050.

NETWORK SERVICE
802.11 Protocol
CGI Proxy
Concurrent Versions System
Connection Oriented Transfer
Protocol (ISO)
Domain Name Service
DTLS Protocol
Dynamic Host Configuration
Protocol
Echo Protocol
Group 3 facsimile communication
over IP
Inter-Control Center
Communications Protocol
Internet Control Message
Protocol for IP6
Internet Protocol V6
ISO 8327 Session Protocol
ISO 8650-1 Association Control
Service
ISO 8823 Presentation Protocol
ISO 9506 Manufacturing Message
Specification
Mobile IPv6
Multipoint Communication
Service
Netbios Name Service
Netware Core Protocol
Network Time Protocol
PHProxy

The 802.11 protocol is used to carry data (at MAC level) on IEEE 802.11 Wireless Local Area Networks.
CGIProxy is a proxy software package. A CGI (Common Gateway Interface) Proxy is a proxy that appears as a web page allowing the
user access to all sites through it.
The Concurrent Versions System keeps track of all work and all changes in a set of files, typically the implementation of a software
project, and allows several developers to collaborate.
COTP (Connection Oriented Transport Protocol) is a protocol ensuring the transport service in the OSI model.
The DNS protocol is used to translate internet names (www.site.com) into IP addresses and vice versa.
DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents
eavesdropping, tampering, or message forgery.
The DHCP protocol is used to configure automatically the network parameters of a station.
The echo service simply sends back to the originating source any data it receives.
This protocol is used to exchanges FAXes on top on TCP/IP.
IEC 60870-6/TASE.2. Inter-Control Center Communications Protocol (ICCP) provides data exchange over Wide Area Networks (WANs)
between utility control centers, utilities, power pools, regional control centers, and Non-Utility Generators.
ICMPv6 is the diagnostic protocol used in IPv6 networks.
IPv6 is the 'next generation' protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 ('IPv4').
ISO 8327-1/X.225 OSI Session Protocol (SP).
ISO 8650-1/X.227 OSI Association Control SErvice (ACSE).
ISO 8823/X.226 OSI PRESENTATION PROTOCOL (PP).
ISO 9506 Manufacturing Message Specification (MMS).
Mobile IP is a proposed standard protocol that builds on the Internet Protocol by making mobility transparent to applications and
higher level protocols like TCP.
Multipoint Communication Service (MCS) is a multipoint data delivery service for use in multimedia and audiovisual conferencing
service. It provides the mechanism for multipoint aware applications to send data to all or a subset of the group with a single send
primitive and to force, if desired, a uniformly sequenced reception of data for all users.
NetBios Name Service (NBNS) is a protocol resulting from NetBios, and which makes it possible to manage the names in a Microsoft
NetBios network. NetBios names are human readable and NBNS serves the same purpose as the DNS system in IP environments.
The NetWare Core Protocol (NCP) is a network protocol used to access file, print, directory, clock synchronization, messaging, remote
command execution and other network service functions.
Network Time Protocol (NTP) is a time synchronization system for computer clocks through the Internet network. It provides mechanisms
to synchronize time and coordinate time distribution in a large network.
PHProxy is a web HTTP proxy programmed in PHP meant to bypass firewalls and access otherwise inaccessible resources.
Page 10

Protocol Independant Multicast
Real Time Messaging Protocol
Resource Location Protocol
Simple Network Paging Protocol
Simple Traversal of UDP through
NATs
Subversion version control system
TIBCO RendezVous Protocol
Time Protocol
Transport Control Protocol
User Datagram Protocol
Whois Protocol
Windows Live File Storage
WINS Replication protocol

The PIM Protocol provides an efficient routing of multicast groups that may span wide-area Internet zones.
Real Time Messaging Protocol (RTMP) is a proprietary protocol developed by Adobe Systems for streaming audio, video and data over
the Internet, between a Flash player and a server.
Resource Location Protocol (RLP) is a protocol used to discover the location of resources present in a network.
This protocol defines a method by which a pager can receive a message over the Internet
STUN (Session Traversal Utilities for NAT) allows a client behind a NAT to establish UDP tunnels between two hosts.
Subversion, version control system.
This protocol is used in the bank sector.
This protocol provides a site-independent, machine readable date and time.
TCP is a protocol providing a connection-oriented and reliable transfer service. It is used by most TCP/IP applications today.
The User Datagram Protocol is a transport protocol providing a simple but non-reliable message transfer service in IP networks. It is used
by most applications that do not require a reliable delivery transmission service.
WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an
Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other
information.
Windows Live File Storage is a Microsoft web service designed to be used by other Microsoft web services that may need storage, for
example msn, skydrive, etc.
WINS (Windows Internet Naming Service) is Microsoft's implementation of NetBIOS Name Service (NBNS), which is a name server and
service for NetBIOS computer names. This plug-in classifies replication flows between servers. Client-to-Server flows are handled by the
nbns plug-in.

PEER TO PEER
AppleJuice
Ares Protocol
Bittorrent Protocol
Blubster
Clip2Net
Diino
DirectConnect
Edonkey
Filetopia
Foxy
GNUnet protocol
Gnutella
GoBoogy Protocol
Imesh
Kazaa
Kugou/Kugoo
Live Mesh

AppleJuice is a peer-to-peer file exchange protocol similar to E-Donkey.
Ares is a peer-to-peer protocol.
BitTorrent is a peer-to-peer protocol.
Blubster is a peer-to-peer music file sharing software. Blubster uses the Manolito protocol, therefore a part of its traffic is classified as
Manolito.
This protocol plug-in classifies the web traffic to the host 'clip2net.com'.
This protocol plug-in classifies the web traffic associated to the SSL Common Name 'diino.com'.
DirectConnect is a peer-to-peer protocol.
Edonkey is a peer-to-peer protocol.
Filetopia is a free, proprietary peer-to-peer client software for Windows. It uses an encrypted protocol for all its communications. In
addition to the usual peer-to-peer features, Filetopia provides a chat, a buddy search and a message board.
Foxy is a peer-to-peer protocol based on GnucDNA.
GNUnet is a framework for secure peer-to-peer networking mainly used for anonymous file sharing. It is part of the GNU project.
Gnutella is a peer-to-peer protocol.
Goboogy is a peer-to-peer protocol.
iMesh is a peer-to-peer protocol.
KaZaA is a peer-to-peer protocol.
Kugou is a multimedia peer-to-peer application providing file sharing, chat or broadcasting services.
This protocol plug-in classifies the web traffic associated to the SSL Common Names 'accounts.mesh.com', 'storage.mesh.com' and
'enclosure.mesh.com'.
Page 11

manolito
Mute Protocol
OpenFT Protocol
Pando protocol
QQMusic
QQStream
Soribada
SoulSeek
uTP (Micro Transport Protocol)
Vakaka
Winmx
Xunlei/Thunder protocol

Manolito is a peer-to-peer file sharing software.
Mute is a peer-to-peer protocol.
OpenFT is a peer-to-peer protocol.
pando is a peer-to-peer protocol.
QQMusic is a Chinese peer-to-peer file sharing software. Its purpose is to download/stream audio files.
QQStream is a Chinese peer-to-peer file sharing software. QQstream is a meta protocol which contains data stream of QQLive and
QQMusic.
This protocol plug-in classifies the web traffic to the host 'kpop.soribada.com'.
Soulseek is a peer-to-peer protocol.
BitTorrent transport layer.
This protocol plug-in classifies the web traffic to the host 'vakaka.com'.
WinMX is a freeware peer-to-peer file sharing program authored by Frontcode Technologies that runs on Microsoft Windows operating
systems, and created in 2000.
Xunlei/Thunder is a Chinese multi-protocol download manager.

PRINTER
Common Unix Printer System
HP Printer Job Language
Internet Printing Protocol
Line Printer Daemon

The Common Unix Printer System (CUPS) protocol is a cross-platform printing solution for UNIX environments. It is based on the 'Internet
Printing Protocol' and it is compatible with Microsoft operating systems since Windows 2000.
The Jetdirect protocol is used by HP network printers.
Internet Printing Protocol (IPP) is a standard used for remote printing using Internet tools and technologies.
LPR is a protocol providing printing services and used in Berkeley distributions of the Unix operating system.

ROUTING
Border Gateway Protocol
Cisco Hot Standby Router
Protocol(HSRP)
Open Short Path First
Routing Information Protocol V1
Routing Information Protocol V2
Routing Internet Protocol ng1

Border Gateway Protocol (BGP) is an inter Autonomous Systems routing protocol used by most ISPs.
The Cisco Hot Standby Router Protocol (HSRP) enables you to manage router redundancy in a network.
OSPF (Open Short Path First) is a link state routing protocol used within large autonomous system networks. It is is considered to be the
best Inter Routing protocol today and it is use it strongly encouraged.
RIP1 (Routing Information Protocol Version 1) is a Distance Vector routing protocol used in Inter Autonomous Systems.
RIP2 (Routing Information Protocol Version 2) is an enhancement of the Version 1 of the protocol. The main differences are the use of
multicast instead of broadcast, and the support of variable length subnet mask networks since subnets are now sent inside the updates.
RIPng (RIP New Generation) is intended to allow routers to exchange information for computing routes through an IPv6-based network.
RIPng is a distance vector protocol. RIPng should be implemented only in routers since IPv6 provides other mechanisms for router
discovery.

SÉCURITY SERVICE
GhostSurf Protocol
McAfee Client update

GhostSurf is an internet privacy application.
McAfee is one of the leaders in intrusion prevention and security risk management on the web.

TERMINAL
Page 12

Remote Login
Remote Shell
Secure TELNET
Telnet
Tnvip

The Rlogin protocol is used to establish a bidirectional communication to distant terminals.
The RSH protocol allows a user to establish a secure connection to a remote host and to obtain a shell allowing commands to be sent
to the remote machine to be executed.
Secure version of the Telnet.
Telnet provides a fairly general, bi-directional, eight-bit byte oriented communications facility. Its primary aim is to provide a standard
method of interfacing between terminal devices and terminal-oriented processes.
Telnet VIP is an emulation of the Telnet protocol for VIP (Visual Information Projection) terminals.

THIN CLIENT
Citrix GoToMyPC Remote Access
Citrix JEDI
ClearCase
GotoDevice
Independant Computing
Architecture (Citrix)
PCAnywhere
Radmin
Remote Desktop Protocol
(Windows Terminal Server)
Remote Frame Buffer (VNC)
ShowMyPc
TeamViewer
VMWare
X Display Manager Control
Protocol
X-Window

Citrix GoToMyPC is a secured web-based remote access solution, enabling to take control of a PC/MAC from a web browser.
JEDI is the name of the CITRIX streaming connection protocol.
ClearCase is a source control / configuration management tool from IBM's 'Rational' division
GoToDevice is a remote control and administration tool.
ICA (Independent Computing Architecture) is a communication protocol and a property of the Citrix Company.
PCAnywhere is a remote control solution. It can manage both Windows and Linux systems. Enhanced video performance and built-in
AES 256-bit encryption help make communications fast and secure. PCAnywhere also features powerful file-transfer capabilities.
Radmin is a control software which is able to establish a remote secure connection between computers.
A key component of Terminal Server is the Remote Desktop Protocol which allows a thin client to communicate with the Terminal Server
over the network. This protocol is based on International Telecommunications Union's (ITU) T.120 protocol, an international, standard
multichannel conferencing protocol currently used in the Microsoft NetMeeting conferencing software product. It is tuned for highbandwidth enterprise environments and will also support encrypted sessions.
RFB (Remote Frame Buffer) is a simple protocol for remote access to graphical user interfaces.
This protocol plug-in classifies the web traffic to the host 'showmypc.com', or associated to the SSL Common Name 'showmypc.com'.
TeamViewer is an application that enables a connection to a remote computer in order to perform maintenance operations. It is also
possible to show the current display to a remote computer, to transfer files, and to create a VPN tunnel.
VMWare is a protocol used by the VMWare application, allowing it to have network interfaces and remote access to a virtual machine.
XDMCP is an extension of the X11 protocol that addresses the issue of discovering and authenticating available X servers on the LAN.
X11 is designed to communicate all the information necessary to operate a window system over a single asynchronous bi-directional
stream of 8-bit bytes. The X protocol specifies four types of messages but named extensions can also be defined to extend the system.

TUNNELING
AnalogBit tcp-over-dns
Control And Provisioning of
Wireless Access Points (CAPWAP)
GPRS Tunneling Protocol version 2
HTTP Tunnel
Level 2 Tunneling Protocol

Tcp-over-dns contains a special dns server and a special dns client. The client and server work in tandem to provide a TCP and UDP
tunnel through the standard DNS protocol.
CAPWAP stands for Control And Provisioning of Wireless Access Points. It is a standard, interoperable protocol that enables a controller
to manage a collection of wireless access points.
The GPRS Tunneling Protocol (GTP) version 2 is used in G4 mobile networks (LTE). Its purpose is to exchange control message between
the MME, the SGW et the PGW. These messages lead to the création of an IP data tunnel between the eNodeB, the SGW and the
PGW, thus allowing mobile station data to be transmited.
HTTP Tunnel protocol is used to tunnel protocols inside an HTTP stream.
Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider
(ISP) to enable the operation of a virtual private network (VPN) over the Internet.
Page 13

Mobile IP
OpenVPN
Point-to-Point Tunneling Protocol
socks2http
SOCKSv4
SOCKSv5
Teredo
Ultrasurf
XOT (X25 over TCP)

Mobile IP is an IETF standard communications protocol that is designed to allow mobile device users to move from one network to
another while maintaining a permanent IP address.
OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure pointto-point or site-to-site connections in routed or bridged configurations and remote access facilities.
Point-to-Point Tunneling Protocol allows the Point to Point Protocol (PPP) to be tunnelled through an IP network.
Socks2http is a client software aiming to make a tunnel.
Socks 4 is an authentication protocol.
SOCKS5(SOCKet Secure v5) routes network packets between a client and server through a proxy server with authentication.
The Teredo protocol enables IPv6 tunnelling over UDP, traversing NATs, and with minimum over-head.
Ultrasurf is a tunneling protocol used by the Ultrasurf software for Windows. The classification is based on an IP address range analysis.
Protocol used to transport x25 data over TCP in IP network.

WAP
MMS Encapsulation
Short message peer-to-peer
protocol
Universal Computer Protocol
WAP Binary XML
Wireless Session Protocol
Wireless Transaction Protocol
Wireless Transport layer Security

The MultiMedia Messages Encapsulation protocol (MMSE) is used by mobile stations to send multimedia messages.
SMPP is a telecommunications industry protocol for exchanging SMS messages between SMS peer entities.
Universal Computer Protocol is used by some mobile phones to send SMS.
The WAP Binary XML protocol defines an encoding scheme for the binary data used in WAP environments.
Wireless Session Protocol (WSP) is an application layer protocol present in the WAP stack. It is used by mobile stations to send SMS for
example.
Wireless Transaction Protocol (WTP) is a transport layer protocol which belongs to the WAP stack. It provides a reliable transmission of
network packets and is very similar to TCP.
Wireless Transport Layer Security (WTLS) is a security protocol, part of the WAP stack. It sits between the WTP and WDP layers in the WAP
communications stack.

WEB
51
56
58
163
360
4399
01net
0zz0
10086cn
114la
115com
118114cn
11st
123people
2Shared
360buy

This protocol plug-in classifies the web traffic to the host '51.la'.
This protocol plug-in classifies the web traffic to the host '56.com'.
This protocol plug-in classifies the web traffic to the host '58.com'.
This protocol plug-in classifies the web traffic to the host '163.com'.
This protocol plug-in classifies the web traffic to the host '360.cn'.
This protocol plug-in classifies the web traffic to the host '4399.com'.
This protocol plug-in classifies the web traffic to the host '01net.com'.
0zz0 is an online solution to store, send and share files
This protocol plug-in classifies the web traffic to the host '10086.cn', or associated to the SSL Common Name '10086.cn'.
This protocol plug-in classifies the web traffic to the host '114la.com'.
This protocol plug-in classifies the web traffic to the host '115.com', or associated to the SSL Common Name '115.com'.
This protocol plug-in classifies the web traffic to the host '118114.cn'.
This protocol plug-in classifies the web traffic to the host '11st.co.kr'.
This protocol plug-in classifies the web traffic to the host '123people.com'.
2shared is an online space for sharing and storage.
This protocol plug-in classifies the web traffic to the host '360buy.com'.
Page 14

4Shared
51job
abcnews
about
accuweather
acer
acrobat
Activesync
addictinggames
ADNStream
Adobe Flash-Plugin Update
Adobe Meeting Remote Control
Adobe Update Manager
Adrive
adultadworld
adultfriendfinder
Advogato
agame
aiaigame
Aizhan
Akamai Technologies CDN
alexa
Alibaba
Alimama
Alipay
aljazeera
allocine
amazon
Amazon MP3
Amazon Video
Amazon Web Services/Cloudfront
CDN
americanexpress
Amie street
aNobii
answers
Apple

4shared is an online space for sharing and storage.
This protocol plug-in classifies the web traffic to the host '51job.com'.
This protocol plug-in classifies the web traffic to the hosts 'abcnews.com' and 'abcnews.go.com'.
This protocol plug-in classifies the web traffic to the host 'about.com'.
This protocol plug-in classifies the web traffic to the host 'accuweather.com'.
This protocol plug-in classifies the web traffic to the host 'acer.com'.
This protocol plug-in classifies the web traffic to the host 'www.acrobat.com', or associated to the SSL Common Name
'www.acrobat.com'.
Microsoft ActiveSync is a mobile data synchronization technology and protocol developed by Microsoft, originally released in 1996.
This protocol plug-in classifies the web traffic to the host 'addictinggames.com'.
This protocol plug-in classifies the web traffic associated to the SSL Common Name 'adnstream.tv'.
Flash exchanges plug-in version numbers with Adobe servers.
This protocol plug-in classifies the web traffic to the hosts 'connectpro97286496.emea.acrobat.com',
'connectpro97286496.adobeconnect.com' and 'www.emea.acrobat.com', or associated to the SSL Common Name
'emea.acrobat.com'.
The Adobe Update Manager is a program which maintains up-to-date versions of some Adobe software.
This protocol plug-in classifies the web traffic to the host 'adrive.com', or associated to the SSL Common Name 'adrive.com'.
This protocol plug-in classifies the web traffic to the host 'adultadworld.com'.
This protocol plug-in classifies the web traffic to the host 'adultfriendfinder.com'.
This protocol plug-in classifies the web traffic to the host 'advogato.org'.
This protocol plug-in classifies the web traffic to the host 'agame.com'.
This protocol plug-in classifies the web traffic to the host 'aiaigame.com'.
This protocol plug-in classifies the web traffic to the host 'aizhan.com'.
This protocol plug-in classifies the web traffic to the hosts 'akamai.net', 'akamaihd.net', 'akamaiedge.net', 'edgesuite.net', 'edgekey.net'
and 'srip.net', or associated to the SSL Common Names 'akamai.net' and 'akamaihd.net'.
This protocol plug-in classifies the web traffic to the host 'alexa.com'.
This protocol plug-in classifies the web traffic to the host 'alibaba.com'.
This protocol plug-in classifies the web traffic to the host 'alimama.com'.
This protocol plug-in classifies the web traffic to the host 'alipay.com', or associated to the SSL Common Name 'alipay.com'.
This protocol plug-in classifies the web traffic to the host 'aljazeera.net'.
This protocol plug-in classifies the web traffic to the host 'allocine.fr'.
This protocol plug-in classifies the web traffic to the hosts 'amazon.cn', 'amazon.co.jp', 'amazon.co.uk', 'amazon.com', 'amazon.de' and
'amazon.fr'.
Amazon MP3 is an online music store owned and operated by Amazon.com.
Amazon Video is an online video on demand service owned and operated by Amazon.com.
This protocol plug-in classifies the web traffic to the hosts 'amazonaws.com' and 'cloudfront.net', or associated to the SSL Common
Name 'amazonaws.com'.
This protocol plug-in classifies the web traffic to the host 'americanexpress.com', or associated to the SSL Common Name
'americanexpress.com'.
This protocol plug-in classifies the web traffic to the host 'amiestreet.com'.
This protocol plug-in classifies the web traffic to the host 'anobii.com'.
This protocol plug-in classifies the web traffic to the host 'answers.com'.
This protocol plug-in classifies the web traffic to the host 'www.apple.com', or associated to the SSL Common Name 'apple.com'.
Page 15

Apple Airport
Apple Update
Archive
armorgames
Asiae
Ask
ASmallWorld
Athlinks
att
Auction
aufeminin
Avatars united
Avg Update
Avira Update
Avoidr
Babycenter
badongo
Baidu
Bca.co
Bebo
Berniaga
Bigadda
BigTent
Bigupload
Biip
Bing
BitDefender Update
BlackBerry
BlackPlanet
Blogdetik
blogger
blogspot
Blogster
Blokus
Bloomberg
bluejayfilms
Bolt
Bonpoo
Books iRead
Box.net

Apple Airport is a protocol aiming to configure a wireless device.
Apple_update is the protocol used for apple softwares updates.
Archive.org is building a digital library of Internet sites and other cultural artifacts in digital form. Like a paper library, Archive.org
provides free access to researchers, historians, scholars, and the general audience.
This protocol plug-in classifies the web traffic to the host 'armorgames.com'.
This protocol plug-in classifies the web traffic to the host 'asiae.co.kr'.
This protocol plug-in classifies the web traffic to the hosts 'ask.com' and 'fr.ask.com'.
This protocol plug-in classifies the web traffic to the host 'asmallworld.net'.
This protocol plug-in classifies the web traffic to the host 'athlinks.com'.
This protocol plug-in classifies the web traffic to the host 'att.com'.
This protocol plug-in classifies the web traffic to the host 'www.auction.co.kr'.
This protocol plug-in classifies the web traffic to the host 'aufeminin.com'.
This protocol plug-in classifies the web traffic to the host 'avatarsunited.com'.
Avg_update is the protocol used for AVG softwares updates.
Avira_update is the protocol used for Avira softwares updates.
This protocol plug-in classifies the web traffic to the host 'avoidr.com'.
This protocol plug-in classifies the web traffic to the host 'babycenter.com'.
Badongo is an online solution to store, send and share files
Baidu is a Chinese search engine for websites, audio files and images. Baidu means 'One hundred degrees' in English.
This protocol plug-in classifies the web traffic to the host 'bca.co.id'.
Bebo is a social networking website, enabling users to connect to relatives, friends, or unknown people.
This protocol plug-in classifies the web traffic to the host 'berniaga.com'.
This protocol plug-in classifies the web traffic to the host 'bigadda.com'.
This protocol plug-in classifies the web traffic to the host 'bigtent.com'.
This protocol plug-in classifies the web traffic to the host 'bigupload.com', or associated to the SSL Common Name
'www3.bigupload.com'.
This protocol plug-in classifies the web traffic to the host 'biip.no'.
This protocol is used for sending user queries to the Bing search engine.
BitDefender_update is the protocol used for BitDefender softwares updates.
This protocol refers to all Blackberry mobile device communications over wifi.
This protocol plug-in classifies the web traffic to the host 'blackplanet.com'.
This protocol plug-in classifies the web traffic to the host 'Blogdetik.com'.
This protocol plug-in classifies the web traffic to the host 'blogger.com'.
This protocol plug-in classifies the web traffic to the host 'blogspot.com'.
This protocol plug-in classifies the web traffic to the host 'blogster.com'.
This protocol plug-in classifies the web traffic to the host 'blokus.fr'.
Bloomberg is a website about business and financial news.
This protocol plug-in classifies the web traffic to the host 'bluejayfilms.webs.com'.
This protocol plug-in classifies the web traffic to the hosts 'bolt.com' and 'bolt3.com'.
This protocol plug-in classifies the web traffic to the host 'bonpoo.com'.
This protocol plug-in classifies the web traffic to the host 'weread.com'.
This protocol plug-in classifies the web traffic to the host 'box.net', or associated to the SSL Common Names 'box.net' and 'box.com'.
Page 16

Brighttalk
BuddyBuddy
Bugs
businessweek
Buzznet
BypassThat
Cafemom
cam4
Campfire
camzap
capitalone
Care2
cartoonnetwork
cdiscount
Cellufun
Channel4
china.com
china.com.cn
Chinaz
Chosun
Chosun Daily
Chrome Update
CJ mall
Classmates
Cloob
clubic
cnet
cnn
cntv
Cnzz
College Blender
comcast
Concur
CoralCDN user
Couch surfing
Coupang
Csdn
Daily booth
Daily strengh
dailymail

This protocol plug-in classifies the web traffic to the host 'brighttalk.com'.
This protocol plug-in classifies the web traffic to the host 'buddybuddy.co.kr'.
This protocol plug-in classifies the web traffic to the host 'bugs.co.kr'.
This protocol plug-in classifies the web traffic to the host 'businessweek.com'.
This protocol plug-in classifies the web traffic to the host 'buzznet.com'.
This protocol plug-in classifies the web traffic to the host 'bypassthat.com'.
This protocol plug-in classifies the web traffic to the host 'cafemom.com'.
This protocol plug-in classifies the web traffic to the host 'cam4.com'.
This protocol plug-in classifies the web traffic to the host 'campfirenow.com', or associated to the SSL Common Name
'campfirenow.com'.
This protocol plug-in classifies the web traffic to the host 'camzap.com'.
This protocol plug-in classifies the web traffic to the host 'capitalone.com', or associated to the SSL Common Name 'capitalone.com'.
This protocol plug-in classifies the web traffic to the host 'care2.com'.
This protocol plug-in classifies the web traffic to the host 'cartoonnetwork.com'.
This protocol plug-in classifies the web traffic to the host 'cdiscount.com'.
This protocol plug-in classifies the web traffic to the host 'm.cellufun.com'.
This protocol plug-in classifies the web traffic to the host 'channel4.com'.
This protocol plug-in classifies the web traffic to the host 'china.com'.
This protocol plug-in classifies the web traffic to the host 'china.com.cn'.
This protocol plug-in classifies the web traffic to the host 'chinaz.com'.
This protocol plug-in classifies the web traffic to the host 'chosun.com'.
This protocol plug-in classifies the web traffic to the host 'www.chosun.com'.
Chrome Update is the protocol for the updates of the Google chrome browser.
This protocol plug-in classifies the web traffic to the host 'cjmall.com'.
This protocol plug-in classifies the web traffic to the host 'classmates.com'.
This protocol plug-in classifies the web traffic to the host 'cloob.com'.
This protocol plug-in classifies the web traffic to the host 'clubic.com'.
This protocol plug-in classifies the web traffic to the host 'cnet.com'.
This protocol plug-in classifies the web traffic to the hosts 'cnn.co.uk' and 'cnn.com'.
This protocol plug-in classifies the web traffic to the hosts 'cntv.cn' and 'cctv.com'.
This protocol plug-in classifies the web traffic to the hosts 'cnzz.com' and 'cnzz.net'.
This protocol plug-in classifies the web traffic to the host 'collegeblender.com'.
This protocol plug-in classifies the web traffic to the hosts 'comcast.com' and 'comcast.net'.
This protocol plug-in classifies the web traffic to the hosts 'concur.com' and 'concursolutions.com', or associated to the SSL Common
Names 'concursolutions.com' and '.concur.com'.
This protocol plug-in classifies the web traffic to the host 'nyud.net'.
This protocol plug-in classifies the web traffic to the host 'couchsurfing.org'.
This protocol plug-in classifies the web traffic to the host 'coupang.com'.
This protocol plug-in classifies the web traffic to the host 'csdn.net'.
This protocol plug-in classifies the web traffic to the host 'dailybooth.com'.
This protocol plug-in classifies the web traffic to the host 'dailystrength.org'.
This protocol plug-in classifies the web traffic to the host 'dailymail.co.uk'.
Page 17

Dailymotion
daum
davidov
Debian/Ubuntu Update
Decayenne
Deezer
Delicious Update
DepositFiles
Detik
Detiknews
Deviant Art
digg
DigitalVerse

DirectDownload Links
directv
Disaboom
DivShare
Dnshop
Docstoc
Dol2day
Donga
DontStayIn
Douban
Doubleclick ads
Draugiem
Dreamwiz
Dropbox
drupal
Dynamic Intranet
EarthCam
Ebay
Elftown
Emaps
Eons
Epernicus

Dailymotion is a website where users can send or watch videos.
This protocol plug-in classifies the web traffic to the host 'daum.net'.
This protocol plug-in classifies the web traffic to the host 'davidov.do.am'.
Update protocol of APT, the Debian/Ubuntu packet manager.
This protocol plug-in classifies the web traffic to the host 'decayenne.com'.
This protocol plug-in classifies the web traffic to the host 'deezer.com'.
Delicious (formerly del.icio.us, pronounced 'delicious') is a social bookmarking web service for storing, sharing, and discovering web
bookmarks.
This protocol plug-in classifies the web traffic to the host 'depositfiles.com'.
This protocol plug-in classifies the web traffic to the host 'Detik.com'.
This protocol plug-in classifies the web traffic to the hosts 'Detiknews.com' and 'news.detik.com'.
This protocol plug-in classifies the web traffic to the host 'deviantart.com'.
This protocol plug-in classifies the web traffic to the host 'digg.com'.
This protocol plug-in classifies the web traffic to the host 'digitalverse.org'.
This protocol plug-in classifies the web traffic to the hosts 'data.hu', 'filearchiv.ru', 'filepost.ru', 'ifolder.ru', 'filehost.tv', 'sharebase.to',
'load.to', 'uploaded.to', 'leteckaposta.cz', 'yourfiles.biz', 'yourfiles.to', 'rapidshare.de', 'ultrashare.de', 'uploadyourfiles.de',
'speedshare.org', 'files-upload.com', 'rapidupload.com', 'turboupload.com', 'fileho.com', 'bestsharing.com', 'quicksharing.com',
'sharebig.com', 'chinamofile.com', 'hotfile.com', 'savefile.com', 'sendmefile.com', 'sharebigfile.com', 'up-file.com', 'easy-share.com', 'fastshare.com', 'live-share.com', 'ftp2share.com', 'gigeshare.com', 'megashare.com', 'gigasize.com', 'sharebee.com', 'megashares.com',
'fileupyours.com', 'filefactory.com', 'filefront.com', 'uploadingit.com', 'uploadpower.com', 'file-upload.net', 'simpleupload.net',
'wiiupload.net', 'filesend.net', 'filer.net', 'livedepot.net' and 'odsiebie.najlepsze.net'.
This protocol plug-in classifies the web traffic to the host 'directv.com'.
This protocol plug-in classifies the web traffic to the host 'disaboom.com'.
This protocol plug-in classifies the web traffic to the host 'divshare.com', or associated to the SSL Common Name 'divshare.com'.
This protocol plug-in classifies the web traffic to the host 'dnshop.com'.
This protocol plug-in classifies the web traffic to the hosts 'docstoccdn.com' and 'docstoc.com'.
This protocol plug-in classifies the web traffic to the host 'dol2day.com'.
This protocol plug-in classifies the web traffic to the host 'donga.com'.
This protocol plug-in classifies the web traffic to the host 'dontstayin.com'.
This protocol plug-in classifies the web traffic to the host 'douban.com'.
Doubleclick ads
This protocol plug-in classifies the web traffic to the host 'draugiem.lv'.
This protocol plug-in classifies the web traffic to the host 'dreamwiz.com'.
This protocol plug-in classifies the web traffic to the host 'dropbox.com', or associated to the SSL Common Name 'dropbox.com'.
This protocol plug-in classifies the web traffic to the host 'drupal.org'.
This protocol plug-in classifies the web traffic to the host 'dynamicintranet.com', or associated to the SSL Common Name
'dynamicintranet.com'.
This protocol plug-in classifies the web traffic to the host 'earthcam.com'.
Ebay is a famous online auction and shopping website.
This protocol plug-in classifies the web traffic to the host 'elftown.com'.
This protocol plug-in classifies the web traffic to the host 'empas.com'.
This protocol plug-in classifies the web traffic to the host 'eons.com'.
This protocol plug-in classifies the web traffic to the host 'epernicus.com', or associated to the SSL Common Name 'epernicus.com'.
Page 18

eRoom.net
ESET NOD32 Antivirus Updates
eSnips
Evony
Expedia
Experience Project
Exploroo
Eyejot
Facebook
Facebook Apps
Faceparty
Faces
Fetlife
File Dropper
File Host
Fileflyer
Filer.cx
Files.to
Filestube
Fillos de Galicia
FilmAffinity
firefox_update
FledgeWing
Flickr
Flixster
Flumotion
Fluxiom
Fly Proxy
Fogbugz
Fotki
Fotolog
Foursquare
foxmovies
foxnews
foxsports
FreeBSD Updates
FreeeTV
Friends Reunited
Friendster
Fruhstuckstreff

This protocol plug-in classifies the web traffic associated to the SSL Common Name 'project1.eroom.net'.
Virus definitions and engine updates for the ESET NOD32 anti-virus.
This protocol plug-in classifies the web traffic to the host 'esnips.com'.
This protocol plug-in classifies the web traffic to the host 'evony.com'.
This protocol plug-in classifies the web traffic to the hosts 'expedia.com' and 'expedia.fr'.
This protocol plug-in classifies the web traffic to the host 'experienceproject.com'.
This protocol plug-in classifies the web traffic to the host 'exploroo.com'.
This protocol plug-in classifies the web traffic to the hosts 'eyejot.com', 'eyejot.typepad.com' and 'eyejot.uservoice.com'.
Facebook is a social network.
Facebook Applications.
This protocol plug-in classifies the web traffic to the host 'faceparty.com'.
This protocol plug-in classifies the web traffic to the host 'faces.com'.
This protocol plug-in classifies the web traffic to the host 'fetlife.com', or associated to the SSL Common Name 'fetlife.com'.
This protocol plug-in classifies the web traffic to the host 'filedropper.com'.
This protocol plug-in classifies the web traffic to the host 'filehost.ro'.
FileFlyer is an online solution to store, send and share files
This protocol plug-in classifies the web traffic to the host 'filer.cx'.
This protocol plug-in classifies the web traffic to the host 'files.to'.
This protocol plug-in classifies the web traffic to the host 'filestube.com'.
This protocol plug-in classifies the web traffic to the host 'fillos.org'.
This protocol plug-in classifies the web traffic to the host 'filmaffinity.com'.
Mozilla Firefox update protocol for the browser and its plugins. This only applies to updates made from the browser and not those
manually downloaded.
This protocol plug-in classifies the web traffic to the host 'fledgewing.com'.
This protocol plug-in classifies the web traffic to the host 'flickr.com'.
This protocol plug-in classifies the web traffic to the host 'flixster.com'.
This protocol plug-in classifies the web traffic to the host 'flumotion.com'.
This protocol plug-in classifies the web traffic to the host 'fluxiom.com', or associated to the SSL Common Name 'fluxiom.com'.
This protocol plug-in classifies the web traffic to the host 'flyproxy.com', or associated to the SSL Common Names 'flyproxy.com' and
'SD259.slicebox.net'.
This protocol plug-in classifies the web traffic to the host 'fogbugz.com', or associated to the SSL Common Name 'fogbugz.com'.
This protocol plug-in classifies the web traffic to the host 'fotki.com'.
This protocol plug-in classifies the web traffic to the host 'fotolog.com'.
This protocol plug-in classifies the web traffic to the host 'foursquare.com', or associated to the SSL Common Name 'foursquare.com'.
This protocol plug-in classifies the web traffic to the host 'foxmovies.jp'.
This protocol plug-in classifies the web traffic to the host 'foxnews.com'.
This protocol plug-in classifies the web traffic to the host 'foxsports.com'.
This protocol is used for FreeBSD updates.
This protocol plug-in classifies the web traffic to the host 'freeetv.com'.
This protocol plug-in classifies the web traffic to the host 'friendsreunited.com'.
Friendster is a social networking website, enabling users to connect to relatives, friends, or unknown people.
This protocol plug-in classifies the web traffic to the host 'fruehstueckstreff.de'.
Page 19

Fsecure Update
Fubar
Funshion video player
GaiaOnline
GamerDNA
Games_co
Ganji
Gather
Gays
Geni
Gigaup
Glide
Gmarket
Gogoyoko
Goodreads
Google
Google ads
Google Analytics
Google App Engine
Google Cache
Google Desktop
Google Earth
Google Generic
Google GStatic
Google Maps
Google Picasa
Google Plus
Google Skymap
Google Toolbar
Google Translate
Gougou Search Engine
Gratisindo
Grono
groupon
Groupwise
Gsshop
Gudanglagu
Gyao
Habbo

Fsecure_update is the protocol used for fsecure softwares updates.
This protocol plug-in classifies the web traffic to the host 'fubar.com'.
Funshion player is a Chinese service for downloading and streaming movies.
This protocol plug-in classifies the web traffic to the host 'gaiaonline.com'.
This protocol plug-in classifies the web traffic to the host 'gamerdna.com'.
This protocol plug-in classifies the web traffic to the host 'games.co.id'.
This protocol plug-in classifies the web traffic to the host 'ganji.com'.
This protocol plug-in classifies the web traffic to the host 'gather.com'.
This protocol plug-in classifies the web traffic to the host 'gays.com'.
This protocol plug-in classifies the web traffic to the host 'geni.com'.
This protocol plug-in classifies the web traffic to the host 'gigaup.fr', or associated to the SSL Common Name 'gigaup.fr'.
This protocol plug-in classifies the web traffic to the host 'desktop.glidesociety.com', or associated to the SSL Common Name
'glidesociety.com'.
This protocol plug-in classifies the web traffic to the host 'gmarket.co.kr'.
This protocol plug-in classifies the web traffic to the host 'gogoyoko.com'.
This protocol plug-in classifies the web traffic to the host 'goodreads.com'.
This protocol is used for sending user queries to the Google search engine.
Google Ads is the online ad service from Google.
Google Analytics is the enterprise-class web analytics solution that gives you rich insights into your website traffic and marketing
effectiveness.
Google App Engine is a platform as a service (PaaS) cloud computing platform for developing and hosting web applications in
Google-managed data centers.
Google Cache saves a copy of the webpages which were found by the Google search engine.
Google Desktop is a desktop search software made by Google, with indexed document metadata.
Google Earth is a program used to view a virtual Earth in 3D.
This protocol is a generic layer used as a base for all the Google protocols.
GStatic is a download server providing static resources (like CSS or scripts) for Google web applications.
Google Maps can be used to calculate routes and to look at maps.
Google Picasa is a digital photo and video organizer used to edit and synchronize pictures or videos over the web.
Google Plus is a social network.
Google Sky Map is an outer space viewer Android mobile application.
The Google Toolbar is an extension for Internet Explorer and Mozilla Firefox which provides a search box, a pop-up blocker, a translator,
etc..
Google Translate is the Google translation tool.
Gougou is a chinese web search engine.
This protocol plug-in classifies the web traffic to the host 'gratisindo.co.id'.
This protocol plug-in classifies the web traffic to the host 'grono.net'.
This protocol plug-in classifies the web traffic to the hosts 'groupon.com', 'groupon.com.br', 'groupon.fr' and 'groupon.jp'.
Novell Groupwise is a groupware, instant-messaging and mail-application.
This protocol plug-in classifies the web traffic to the host 'gsshop.com'.
This protocol plug-in classifies the web traffic to the host 'Gudanglagu.com'.
This protocol plug-in classifies the web traffic to the host 'gyao.yahoo.co.jp'.
This protocol plug-in classifies the web traffic to the hosts 'habbo.fr' and 'habbo.com'.
Page 20

Hangame
Hankooki
Hankyung
Hao123
hardsextube
Heraldm
hgtv
Hi5
Hospitality Club
howstuffworks
Hudong
HyperText Transfer Protocol
Hyves
Ibibo
ICAP
Ifeng
ifile.it
ikea
Imeem
Indaba Music
Indonetwork
Indowebster
Inilah.com
Instagram
InterNations
InterPark
intuit
Iqiyi
IRC Galleria
Italki
Itsmy
Iwiw
Jaiku
JammerDirect
Jango
Java Update
Jira
Jne.co
Jobstreet

This protocol plug-in classifies the web traffic to the host 'hangame.com'.
This protocol plug-in classifies the web traffic to the host 'hankooki.com'.
This protocol plug-in classifies the web traffic to the host 'hankyung.com'.
This protocol plug-in classifies the web traffic to the host 'hao123.com'.
This protocol plug-in classifies the web traffic to the host 'hardsextube.com'.
This protocol plug-in classifies the web traffic to the host 'heraldm.com'.
This protocol plug-in classifies the web traffic to the host 'hgtv.com'.
Hi5 is a social networking website, enabling users to connect to relatives, friends, or unknown people.
This protocol plug-in classifies the web traffic to the host 'hospitalityclub.org'.
This protocol plug-in classifies the web traffic to the host 'howstuffworks.com'.
This protocol plug-in classifies the web traffic to the host 'hudong.com'.
The Hypertext Transfer Protocol (HTTP) is used for browsing the web.
This protocol plug-in classifies the web traffic to the host 'hyves.nl'.
This protocol plug-in classifies the web traffic to the host 'ibibo.com'.
The Internet Content Adaptation Protocol (ICAP) is a lightweight HTTP-like protocol which is used to extend transparent proxy servers,
thereby freeing up resources and standardizing the way in which new features are implemented. ICAP is generally used to implement
virus scanning and content filters (including censorware) in transparent HTTP proxy caches.
This protocol plug-in classifies the web traffic to the host 'ifeng.com'.
This protocol plug-in classifies the web traffic to the host 'ifile.it'.
This protocol plug-in classifies the web traffic to the host 'ikea.com'.
This protocol plug-in classifies the web traffic to the host 'imeem.com'.
This protocol plug-in classifies the web traffic to the host 'indabamusic.com'.
This protocol plug-in classifies the web traffic to the host 'Indonetwork.co.id'.
This protocol plug-in classifies the web traffic to the host 'Indowebster.com'.
This protocol plug-in classifies the web traffic to the host 'Inilah.com'.
This protocol plug-in classifies the web traffic to the hosts 'instagr.am' and 'instagram.com', or associated to the SSL Common Name
'instagram.com'.
This protocol plug-in classifies the web traffic to the host 'internations.org'.
This protocol plug-in classifies the web traffic to the host 'www.interpark.com'.
This protocol plug-in classifies the web traffic to the host 'intuit.com'.
This protocol plug-in classifies the web traffic to the host 'iqiyi.com'.
This protocol plug-in classifies the web traffic to the host 'irc-galleria.net'.
This protocol plug-in classifies the web traffic to the host 'italki.com'.
This protocol plug-in classifies the web traffic to the host 'mobile.itsmy.com'.
This protocol plug-in classifies the web traffic to the host 'iwiw.hu'.
This protocol plug-in classifies the web traffic to the host 'jaiku.com'.
This protocol plug-in classifies the web traffic to the host 'jammerdirect.com'.
This protocol plug-in classifies the web traffic to the host 'jango.com'.
Java Update is the protocol for the update of the java virtual machines, also called JVM.
This protocol plug-in classifies the web traffic to the host 'onjira.com', or associated to the SSL Common Name 'onjira.com'.
This protocol plug-in classifies the web traffic to the host 'jne.co.id'.
This protocol plug-in classifies the web traffic to the host 'jobstreet.co.id'.
Page 21

Joongang Daily
Jubii
Justin.tv
Kaioo
Kapanlagi
karosgame
Kaskus
kaspersky
Kaspersky Update
KB Bank
KBS
Kbstar
keezmovies
Kemenkumham
Khan
Kino
Kiwibox
KlikBCA
Kompas
Kompasiana
Kproxy
Ku6
laredoute
Last.Fm
Leapfile
leboncoin
letv
Level 3 Communications CDN
LG eshop
Libero Video
LibraryThing
Lifeknot
Limelight Networks CDN
LintasBerita
Lionair
Listografy
livedoor
liveinternet
LiveJournal
Livemocha

This protocol plug-in classifies the web traffic to the host 'www.joins.com'.
This protocol plug-in classifies the web traffic to the host 'jubii.dk'.
This protocol plug-in classifies the web traffic to the host 'justin.tv', or associated to the SSL Common Name '.justin.tv'.
This protocol plug-in classifies the web traffic to the host 'kaioo.com'.
This protocol plug-in classifies the web traffic to the host 'Kapanlagi.com'.
This protocol plug-in classifies the web traffic to the host 'karosgame.ru'.
This protocol plug-in classifies the web traffic to the hosts 'Kaskus.us' and 'selapa.com'.
This protocol plug-in classifies the web traffic to the host 'kaspersky.com'.
Kaspersky_update is the protocol used for Kaspersky softwares updates.
This protocol plug-in classifies the web traffic to the host 'www.kbstar.com', or associated to the SSL Common Name 'www.kbstar.com'.
This protocol plug-in classifies the web traffic to the host 'www.kbs.co.kr'.
This protocol plug-in classifies the web traffic to the host 'kbstar.com'.
This protocol plug-in classifies the web traffic to the host 'keezmovies.com'.
This protocol plug-in classifies the web traffic to the host 'kemenkumham.go.id'.
This protocol plug-in classifies the web traffic to the host 'khan.co.kr'.
This protocol plug-in classifies the web traffic to the host 'kino.to'.
This protocol plug-in classifies the web traffic to the host 'kiwibox.com'.
This protocol plug-in classifies the web traffic to the host 'KlikBCA.com'.
This protocol plug-in classifies the web traffic to the host 'Kompas.com'.
This protocol plug-in classifies the web traffic to the host 'Kompasiana.com'.
This protocol plug-in classifies the web traffic to the host 'kproxy.com'.
This protocol plug-in classifies the web traffic to the host 'ku6.com'.
This protocol plug-in classifies the web traffic to the host 'laredoute.fr'.
This protocol plug-in classifies the web traffic to the hosts 'lastfm.com', 'ws.audioscrobbler.com' and 'last.fm'.
This protocol plug-in classifies the web traffic to the host 'secure.leapfile.com', or associated to the SSL Common Name
'secure.leapfile.com'.
This protocol plug-in classifies the web traffic to the host 'leboncoin.fr'.
This protocol plug-in classifies the web traffic to the host 'letv.com'.
This protocol plug-in classifies the web traffic to the hosts 'l3.net', 'level3.net' and 'level3.com'.
This protocol plug-in classifies the web traffic to the host 'lgeshop.com'.
This protocol plug-in classifies the web traffic to the hosts 'libero.it' and 'video.libero.it'.
This protocol plug-in classifies the web traffic to the host 'librarything.com'.
This protocol plug-in classifies the web traffic to the host 'lifeknot.com'.
This protocol plug-in classifies the web traffic to the host 'llnwd.net'.
This protocol plug-in classifies the web traffic to the hosts 'LintasBerita.com' and 'lintas.me', or associated to the SSL Common Name
'lintas.me'.
This protocol plug-in classifies the web traffic to the host 'lionair.co.id'.
This protocol plug-in classifies the web traffic to the host 'listography.com'.
This protocol plug-in classifies the web traffic to the hosts 'livedoor.com' and 'livedoor.jp'.
This protocol plug-in classifies the web traffic to the host 'liveinternet.ru'.
This protocol plug-in classifies the web traffic to the host 'livejournal.com'.
This protocol plug-in classifies the web traffic to the host 'livemocha.com'.
Page 22

Livingsocial
Lotte
Lunarstorm
Mandriva Update
mashable
mashare
match
MBC
mbn
MediaFire
MEETin
Meettheboss
Meetup
MeeVee
Megaproxy
Megaupload
Megavideo
Microsoft Office Live Meeting
Microsoft SharePoint
Microsoft SharePoint
Administration Application
Microsoft SharePoint Blog
Management Application
Microsoft SharePoint Calendar
Management Application
Microsoft SharePoint Document
Management Application
Mixi
Mk
Mobile Me
MocoSpace
MOG
monster
Mop
MouthShut
mozilla
Mpquest
Msn_search

This protocol plug-in classifies the web traffic to the host 'livingsocial.co.id'.
This protocol plug-in classifies the web traffic to the host 'lotte.com'.
This protocol plug-in classifies the web traffic to the host 'lunarstorm.se'.
This protocol manages the mandriva update operations. It allows identifying package name, package version, package architecture
and distribution, thanks to the HTTP User Agent, the HTTP Uri and the HTTP method used. The HTTP User Agent must be the Aria2
download manager, the HTTP URI must be finished with RPM extension and the HTTP method must be a GET request.
This protocol plug-in classifies the web traffic to the host 'mashable.com'.
mashare is an online solution to store, send and share files
This protocol plug-in classifies the web traffic to the host 'match.com'.
This protocol plug-in classifies the web traffic to the host 'www.imbc.com'.
This protocol plug-in classifies the web traffic to the host 'mbn.co.kr'.
This protocol plug-in classifies the web traffic to the hosts 'a.1521.x.akamai.net' and 'mediafire.com', or associated to the SSL Common
Name 'mediafire.com'.
This protocol plug-in classifies the web traffic to the host 'meetin.org'.
This protocol plug-in classifies the web traffic to the host 'meettheboss.tv'.
This protocol plug-in classifies the web traffic to the host 'meetup.com'.
This protocol plug-in classifies the web traffic to the host 'ip-204-145-65-216.static.atlanticmetro.net'.
This protocol plug-in classifies the web traffic to the hosts 'megaproxy.fr' and 'megaproxy.com'.
Megaupload was an online solution to store, send and share files. Megaupload was shut in January 2012.
This protocol plug-in classifies the web traffic to the host 'megavideo.com'.
Microsoft Office Live Meeting is a commercial subscription-based web conferencing service operated by Microsoft.
SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content
management and document management systems.
SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content
management and document management systems. This plug-in classifies the administration back-end of SharePoint.
SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content
management and document management systems. This plug-in classifies the blog management module of SharePoint.
SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content
management and document management systems. This plug-in classifies the calendar management module of SharePoint.
SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content
management and document management systems. This plug-in classifies the document management module of SharePoint.
This protocol plug-in classifies the web traffic to the host 'mixi.jp'.
This protocol plug-in classifies the web traffic to the host 'mk.co.kr'.
This protocol plug-in classifies the web traffic associated to the SSL Common Name 'auth.me.com'.
This protocol plug-in classifies the web traffic to the host 'mocospace.com'.
This protocol plug-in classifies the web traffic to the host 'mog.com', or associated to the SSL Common Name 'mog.com'.
This protocol plug-in classifies the web traffic to the hosts 'monster.com' and 'monster.fr'.
This protocol plug-in classifies the web traffic to the host 'mop.com'.
This protocol plug-in classifies the web traffic to the host 'mouthshut.com'.
This protocol plug-in classifies the web traffic to the hosts 'mozilla.com' and 'mozilla.org', or associated to the SSL Common Name
'mozilla.org'.
This protocol plug-in classifies the web traffic to the hosts 'mapquest.com' and 'mapquest.fr'.
This protocol is used for sending user queries to the MSN Live search engine.
Page 23

Mt
mtv
Mubi (formerly The Auteurs)
Multiply
multiupload
musica
Muxlim
My Opera
My Space
my_yahoo
MyAnimeList
MyChurch
MyHeritage
MyLife
Myspace Video
myvideo
mywebsearch
MyYearBook
Napster
nasa
Nasza Klasa
NateCyworld
nationalgeographic
national-lottery
naver
nba
NetBSD Updates
Netload
Netlog
NetMarble
Nettby
Nexian
Nexon
Nexopia
nfl
NGO Post
NicoNico Douga
nike
Ning
Nokia Ovi

This protocol plug-in classifies the web traffic to the host 'mt.co.kr'.
This protocol plug-in classifies the web traffic to the host 'mtv.com'.
This protocol plug-in classifies the web traffic to the hosts 'mubi.com' and 'theauteurs.com'.
This protocol plug-in classifies the web traffic to the host 'multiply.com'.
This protocol plug-in classifies the web traffic to the host 'multiupload.com'.
This protocol plug-in classifies the web traffic to the host 'musica.com'.
This protocol plug-in classifies the web traffic to the host 'muxlim.com'.
This protocol plug-in classifies the web traffic to the host 'my.opera.com'.
MySpace is one of most popular social networking sites on the Web.
A customizable web page with news, weather, etc., for Yahoo users.
This protocol plug-in classifies the web traffic to the host 'myanimelist.net'.
This protocol plug-in classifies the web traffic to the host 'mychurch.org'.
This protocol plug-in classifies the web traffic to the hosts 'myheritage.fr' and 'myheritage.com'.
This protocol plug-in classifies the web traffic to the host 'mylife.com'.
This protocol plug-in classifies the web traffic to the host 'videos.myspacecdn.com'.
This protocol plug-in classifies the web traffic to the host 'myvideo.de'.
This protocol plug-in classifies the web traffic to the host 'mywebsearch.com'.
This protocol plug-in classifies the web traffic to the host 'myyearbook.com'.
This protocol plug-in classifies the web traffic to the hosts 'napster.com', 'napsterinc.tt.omtrdc.net', 'a1082.b.akamai.net' and
'a1702.b.akamai.net', or associated to the SSL Common Name 'sms.napster.com'.
This protocol plug-in classifies the web traffic to the host 'nasa.gov'.
This protocol plug-in classifies the web traffic to the host 'nasza-klasa.pl'.
This protocol plug-in classifies the web traffic to the hosts 'nate.com' and 'cyworld.com'.
This protocol plug-in classifies the web traffic to the host 'nationalgeographic.com'.
This protocol plug-in classifies the web traffic to the host 'national-lottery.co.uk'.
This protocol plug-in classifies the web traffic to the hosts 'naver.com', 'naver.jp' and 'navercorp.jp'.
This protocol plug-in classifies the web traffic to the host 'nba.com'.
NetBSD update manages the updates for NetBSD. NetBSD is a Unix-like Open Source operating system.
This protocol plug-in classifies the web traffic to the host 'netload.in'.
Netlog is a social networking website, enabling users to connect to relatives, friends, or unknown people.
This protocol plug-in classifies the web traffic to the host 'netmarble.com'.
This protocol plug-in classifies the web traffic to the host 'nettby.no'.
This protocol plug-in classifies the web traffic to the hosts 'nexian.co.id' and 'nexian.us.to'.
This protocol plug-in classifies the web traffic to the host 'www.nexon.com'.
This protocol plug-in classifies the web traffic to the host 'nexopia.com'.
This protocol plug-in classifies the web traffic to the host 'nfl.com'.
This protocol plug-in classifies the web traffic to the host 'ngopost.org'.
This protocol plug-in classifies the web traffic to the hosts 'nicovideo.jp', 'nicoseiga.jp' and 'nicovideo.com'.
This protocol plug-in classifies the web traffic to the host 'nike.com'.
This protocol plug-in classifies the web traffic to the host 'ning.com'.
Nokia Ovi is a protocol used by customers to synchronize their personal data with their Nokia mobile phone (contacts, mail, calendar,
music).
Page 24

Nonghyup Bank
ntv
nydailynews
nytimes
Octopz
Officedepot
Okezone
OneClimate
OneWorldTV
onlinedown
Ooyala
Open Diary
OpenBSD Updates
Opera Update
orb
Orkut
OUTeverywhere
Paipai
Panda Update
Pandora
Pandora Tv
Paran
PartnerUp
Party Poker
PassportStamp
Pconline
Pengyou
People
Perfspot
Photobucket
Pimang
Pingsta
PIPI Film
Plaxo
Playahead
playstation
Plurk
Pogo
pps
pptv

This protocol plug-in classifies the web traffic to the host 'nohyup.com'.
This protocol plug-in classifies the web traffic to the host 'ntv.co.jp'.
This protocol plug-in classifies the web traffic to the host 'nydailynews.com'.
This protocol plug-in classifies the web traffic to the host 'nytimes.com'.
This protocol plug-in classifies the web traffic to the host 'octopz.net', or associated to the SSL Common Name 'cfs1.octopz.net'.
This protocol plug-in classifies the web traffic to the hosts 'officedepot.com' and 'officedepot.fr'.
This protocol plug-in classifies the web traffic to the host 'Okezone.com'.
This protocol plug-in classifies the web traffic to the host 'oneclimate.net'.
This protocol plug-in classifies the web traffic to the host 'tv.oneworld.net'.
This protocol plug-in classifies the web traffic to the host 'onlinedown.net'.
This protocol plug-in classifies the web traffic to the hosts 'l.player.ooyala.com' and 'ooyala.jp', or associated to the SSL Common Name
'ooyala.jp'.
This protocol plug-in classifies the web traffic to the host 'opendiary.com'.
This protocol manages OpenBSD updates.
Opera Update is the protocol used for the update of the Opera browser.
ORB is a streaming software that enables users to remotely access all their personal digital media files.
Orkut is a social networking website competing with Facebook or Twitter, popular in Brazil and now owned and operated by Google
Inc.
This protocol plug-in classifies the web traffic to the host 'outeverywhere.com'.
This protocol plug-in classifies the web traffic to the host 'paipai.com'.
Panda_update is the protocol used for panda softwares updates.
This protocol plug-in classifies the web traffic to the host 'pandora.com'.
This protocol plug-in classifies the web traffic to the host 'pandora.tv'.
This protocol plug-in classifies the web traffic to the host 'praran.com'.
This protocol plug-in classifies the web traffic to the host 'partnerup.com'.
This protocol plug-in classifies the web traffic associated to the SSL Common Names 'partyaccount.com' and 'partypoker.com'.
This protocol plug-in classifies the web traffic to the host 'passportstamp.com'.
This protocol plug-in classifies the web traffic to the host 'pconline.com.cn'.
This protocol plug-in classifies the web traffic to the host 'pengyou.com'.
This protocol plug-in classifies the web traffic to the host 'people.com.cn'.
Perfspot is a social networking website, enabling users to connect to relatives, friends, or unknown people and to share files.
This protocol plug-in classifies the web traffic to the hosts 'photobucket.com' and 'register.photobucket.com'.
This protocol plug-in classifies the web traffic to the host 'pimang.com'.
This protocol plug-in classifies the web traffic to the host 'pingsta.com'.
PP Film (aka PIPI.cn or PIPI Player) is a Chinese peer-to-peer and VOD service.
This protocol plug-in classifies the web traffic to the host 'plaxo.com'.
This protocol plug-in classifies the web traffic to the host 'playahead.se'.
This protocol plug-in classifies the web traffic to the host 'playstation.com'.
This protocol plug-in classifies the web traffic to the host 'plurk.com'.
This protocol plug-in classifies the web traffic to the host 'pogo.com'.
This protocol plug-in classifies the web traffic to the host 'pps.tv'.
This protocol plug-in classifies the web traffic to the host 'pptv.com'.
Page 25

Present
priceminister
PriceRunner
Privax
Proxeasy
Proxono
Psiphon
Qapacity
QQ.com portal
QQDownload
Quarterlife
Qzone
Rambler
Rapidshare
Ravelry
Realtor
RedHat Update
redtube
Renren
Republika
ResearchGATE
reuters
ReverbNation
reverso
RSS
rtl
ryanair
Ryze
Saberindo
Salesforce
SayClub
sbs
ScienceStage
Scispace
Scribd
Second Life
Secure HTTP
Seeqpod
Seesmic
Segye
SendSpace

This protocol plug-in classifies the web traffic to the host 'presentlyapp.com'.
This protocol plug-in classifies the web traffic to the host 'priceminister.com'.
pricerunner is a price comparison service
This protocol plug-in classifies the web traffic to the host 'privax.us'.
This protocol plug-in classifies the web traffic to the host 'proxeasy.com'.
This protocol plug-in classifies the web traffic to the hosts 'proxono.org' and 'proxono.info'.
This protocol plug-in classifies the web traffic to the host 'psiphon.ca'.
This protocol plug-in classifies the web traffic to the host 'qapacity.com'.
QQ.com is a multi-service Chinese web portal hosted by Tencent.
QQDownload is a Chinese download manager. Its purpose is to download files quickly using HTTP or the BitTorrent protocol.
This protocol plug-in classifies the web traffic to the host 'quarterlife.com'.
This protocol plug-in classifies the web traffic to the host 'qzone.qq.com'.
Rambler is a Russian information internet portal.
RapidShare is an online solution to store, send and share files
This protocol plug-in classifies the web traffic to the host 'www.ravelry.com'.
This protocol plug-in classifies the web traffic to the host 'realtor.com'.
This protocol is used for Red Hat updates.
This protocol plug-in classifies the web traffic to the host 'redtube.com'.
This protocol plug-in classifies the web traffic to the host 'renren.com'.
This protocol plug-in classifies the web traffic to the host 'republika.co.id'.
This protocol plug-in classifies the web traffic to the host 'researchgate.net'.
This protocol plug-in classifies the web traffic to the host 'reuters.com'.
This protocol plug-in classifies the web traffic to the host 'reverbnation.com'.
This protocol plug-in classifies the web traffic to the host 'reverso.net'.
RSS is a family of web feed formats used to publish frequently updated works in a standardized format.
This protocol plug-in classifies the web traffic to the host 'rtl.de'.
This protocol plug-in classifies the web traffic to the host 'ryanair.com'.
This protocol plug-in classifies the web traffic to the host 'ryze.com'.
This protocol plug-in classifies the web traffic to the host 'saberindo.co.id'.
This protocol plug-in classifies the web traffic associated to the SSL Common Names 'login.salesforce.com', 'www.salesforce.com',
'omtr2.partners.salesforce.com' and 'emea.salesforce.com'.
This protocol plug-in classifies the web traffic to the host 'sayclub.com'.
This protocol plug-in classifies the web traffic to the host 'sbs.co.kr'.
This protocol plug-in classifies the web traffic to the host 'sciencestage.com'.
This protocol plug-in classifies the web traffic to the host 'scispace.com'.
This protocol plug-in classifies the web traffic to the host 'scribd.com'.
Secondlife is is an Internet-based virtual world which enables its users to interact with each other through motional avatars.
HTTPS is the secure version of HTTP.
This protocol plug-in classifies the web traffic to the host 'intertrust.com'.
This protocol plug-in classifies the web traffic to the host 'seesmic.com'.
This protocol plug-in classifies the web traffic to the host 'segye.com'.
This protocol plug-in classifies the web traffic to the host 'sendspace.com'.
Page 26

Seoul News
sfr
ShareTheMusic
Shazam
Shelfari
Shinhan
Shutterfly
Siebel CRM
Sina Weibo
SiriusXm Radio (formerly XM
Radio)
sky
Skyblog
skycn
SkyDrive
Skyrock
slideshare
Socialtv
SocialVibe
Sogou
Sohu
Soku
Sonico
Soso
Soufun
Southwest
spiegel
Sportchosun
sportsillustrated
Sportsseoul
sprint
Stafaband
Stagevu
stayfriends
Stickam
StreamAudio
StudiVZ
StumbleUpon
Sugar CRM
Suppersoccer

This protocol plug-in classifies the web traffic to the host 'seoul.co.kr'.
This protocol plug-in classifies the web traffic to the host 'sfr.fr'.
This protocol plug-in classifies the web traffic to the host 'sharethemusic.com'.
This protocol plug-in classifies the web traffic to the hosts 'shazamid.com' and 'cdn.shazam.com', or associated to the SSL Common
Name 'beacon.shazam.com'.
This protocol plug-in classifies the web traffic to the host 'shelfari.com'.
This protocol plug-in classifies the web traffic to the host 'shinhan.com'.
This protocol plug-in classifies the web traffic to the host 'shutterfly.com', or associated to the SSL Common Name 'shutterfly.com'.
A customer relationship management (CRMs) solution by Siebel Systems.
Sina Weibo is a Chinese microblogging website.
This protocol plug-in classifies the web traffic to the hosts 'xmradio.com' and 'siriusxm.com'.
This protocol plug-in classifies the web traffic to the host 'www.sky.com'.
SkyBlog is a website where users can have blogs.
This protocol plug-in classifies the web traffic to the host 'skycn.com'.
This protocol plug-in classifies the web traffic associated to the SSL Common Names 'live.com.nsatc.net',
'gateway.edge.messenger.live.com', 'skydrive.live.com' and 'skyapi.live.net'.
This protocol plug-in classifies the web traffic to the host 'www.skyrock.com'.
This protocol plug-in classifies the web traffic to the host 'slideshare.net'.
This protocol plug-in classifies the web traffic to the host 'srv.sixdegs.com'.
This protocol plug-in classifies the web traffic to the host 'socialvibe.com'.
This protocol plug-in classifies the web traffic to the host 'sogou.com'.
This protocol plug-in classifies the web traffic to the hosts 'itc.cn' and 'sohu.com'.
This protocol plug-in classifies the web traffic to the host 'soku.com'.
This protocol plug-in classifies the web traffic to the host 'sonico.com'.
This protocol plug-in classifies the web traffic to the host 'soso.com'.
This protocol plug-in classifies the web traffic to the host 'soufun.com'.
This protocol plug-in classifies the web traffic to the host 'southwest.com'.
This protocol plug-in classifies the web traffic to the host 'spiegel.de'.
This protocol plug-in classifies the web traffic to the host 'sportschosun.com'.
This protocol plug-in classifies the web traffic to the hosts 'sportsillustrated.cnn.com' and 'sportsillustrated.com'.
This protocol plug-in classifies the web traffic to the host 'sportsseoul.com'.
This protocol plug-in classifies the web traffic to the host 'sprint.com'.
This protocol plug-in classifies the web traffic to the host 'Stafaband.info'.
This protocol plug-in classifies the web traffic to the host 'stagevu.com'.
This protocol plug-in classifies the web traffic to the host 'stayfriends.de'.
This protocol plug-in classifies the web traffic to the host 'stickam.com'.
This protocol plug-in classifies the web traffic to the host 'streamaudio.com'.
This protocol plug-in classifies the web traffic to the host 'studivz.net'.
This protocol plug-in classifies the web traffic to the host 'stumbleupon.com'.
Sugar CRM, a client relationship management solution.
This protocol plug-in classifies the web traffic to the host 'm.supersoccer.co.id'.
Page 27

Surrogafier
surveymonkey
SVT Play
Symantec Norton AntiVirus
Updates
Tagged
Tagoo
Taku File Bin
TalentTrove
Talkbiznow
Taltopia
taobao
Taringa
Tchatche
TeacherTube
TeachStreet
Techinline
TempoInteraktif
Tencent (QQ) WeiBo
tf1
Three.co
Tianya
Ticketmonster
TidalTV
Tistory
Tmall
Tokbox
Tokobagus
torrentdownloads
torrentz
TravBuddy
Travellerspoint
Travelocity
Travian
Trendmicro Update
Tribe
Tribunnews
Trombi
tu
tube8

This protocol plug-in classifies the web traffic to the hosts 'surrogafier.info' and 'go.vfserver.com'.
This protocol plug-in classifies the web traffic to the host 'surveymonkey.com'.
This protocol plug-in classifies the web traffic to the hosts 'svt.se' and 'ld-svt-se.sitestat.com'.
Virus definitions and engine updates for the Symantec Norton anti-virus.
Tagged is a social networking website, enabling users to connect to relatives, friends, or unknown people.
This protocol plug-in classifies the web traffic to the host 'tagoo.ru', or associated to the SSL Common Name 'tagoo.ru'.
This protocol plug-in classifies the web traffic to the hosts 'wwwa.filesend.to', 'wwwe.filesend.to', 'web11.filesend.to' and
'search.filesend.to', or associated to the SSL Common Name '.filesend.to'.
This protocol plug-in classifies the web traffic to the host 'lafango.com'.
This protocol plug-in classifies the web traffic to the host 'talkbiznow.com'.
This protocol plug-in classifies the web traffic to the host 'taltopia.com'.
This protocol plug-in classifies the web traffic to the hosts 'taobaocdn.com' and 'taobao.com', or associated to the SSL Common Name
'login.taobao.com'.
This protocol plug-in classifies the web traffic to the host 'taringa.net'.
Tchatche is an instant messaging website.
This protocol plug-in classifies the web traffic to the hosts 'teachertube.com' and 'teachertube.biz'.
This protocol plug-in classifies the web traffic to the host 'teachstreet.com'.
This protocol plug-in classifies the web traffic to the host 'techinline.com', or associated to the SSL Common Name 'techinline.com'.
This protocol plug-in classifies the web traffic to the hosts 'TempoInteraktif.com' and 'tempo.co'.
QQ WeiBo is a Chinese Twitter-like micro-blogging website. It is part of Tencent's QQ.
This protocol plug-in classifies the web traffic to the host 'tf1.fr'.
This protocol plug-in classifies the web traffic to the hosts 'three.co.id' and 'tri.co.id'.
This protocol plug-in classifies the web traffic to the host 'tianya.cn'.
This protocol plug-in classifies the web traffic to the host 'ticketmonster.co.kr'.
This protocol plug-in classifies the web traffic to the host 'portal.tidaltv.com'.
This protocol plug-in classifies the web traffic to the host 'tistory.com'.
This protocol plug-in classifies the web traffic to the host 'tmall.com'.
This protocol plug-in classifies the web traffic to the host 'tokbox.com', or associated to the SSL Common Name 'cm.tokbox.com'.
This protocol plug-in classifies the web traffic to the host 'Tokobagus.com'.
This protocol plug-in classifies the web traffic to the host 'torrentdownloads.net'.
This protocol plug-in classifies the web traffic to the hosts 'torrentz.com' and 'torrentz.eu'.
This protocol plug-in classifies the web traffic to the host 'travbuddy.com'.
This protocol plug-in classifies the web traffic to the host 'travellerspoint.com'.
This protocol plug-in classifies the web traffic to the host 'travelocity.com'.
This protocol plug-in classifies the web traffic to the host 'Travian.co.id'.
Trendmicro_update is the protocol used for trendmicro softwares updates.
This protocol plug-in classifies the web traffic to the host 'tribe.net'.
This protocol plug-in classifies the web traffic to the host 'tribunnews.com'.
This protocol plug-in classifies the web traffic to the host 'trombi.com'.
This protocol plug-in classifies the web traffic to the host 'tu.tv'.
This protocol plug-in classifies the web traffic to the host 'tube8.com'.
Page 28

Tudou
Tuenti
Tumblr
tv
Tv4Play
Twitpic
Twitter
univision
uploading
usatoday
Usejump
Ustream
VampireFreaks
Veetle
Viadeo
videobash
videosurf
vietbao
vimeo
Vivanews
Vox
Vtunnel
Vyew
Wakoopa
Wasabi
washingtonpost
wat
Wayn
weather
Web Crawler
WebBiographies
WeOurFamily
WerKenntWen
Wikipedia
Windows Azure CDN
Windows Live
Windows Update
WindowsLiveSpace
windowsmedia
WiserEarth
Wixi

This protocol plug-in classifies the web traffic to the hosts 'tudou.com' and 'at-img4.tdimg.com'.
This protocol plug-in classifies the web traffic to the host 'tuenti.com'.
This protocol plug-in classifies the web traffic to the host 'tumblr.com', or associated to the SSL Common Name 'TUMBLR.COM'.
This protocol plug-in classifies the web traffic to the host 'tv.com'.
This protocol plug-in classifies the web traffic to the hosts 'tv4play.se' and 'cdn01.tv4.se', or associated to the SSL Common Name 'ec2184-73-252-58.compute-1.amazonaws.com'.
This protocol plug-in classifies the web traffic to the host 'twitpic.com', or associated to the SSL Common Name 'twitpic.com'.
Online microblogging service that enables its users to read and send text-based short messages.
This protocol plug-in classifies the web traffic to the host 'univision.com'.
This protocol plug-in classifies the web traffic to the host 'uploading.com'.
This protocol plug-in classifies the web traffic to the host 'usatoday.com'.
This protocol plug-in classifies the web traffic to the host 'usejump.com', or associated to the SSL Common Name 'beta.usejump.com'.
This protocol plug-in classifies the web traffic to the host 'ustream.tv'.
This protocol plug-in classifies the web traffic to the host 'vampirefreaks.com'.
This protocol plug-in classifies the web traffic to the host 'veetle.com'.
Viadeo is a web site designed to manage professional contacts.
This protocol plug-in classifies the web traffic to the host 'videobash.com'.
This protocol plug-in classifies the web traffic to the host 'videosurf.com'.
This protocol plug-in classifies the web traffic to the host 'vietbao.vn'.
This protocol plug-in classifies the web traffic to the host 'vimeo.com'.
This protocol plug-in classifies the web traffic to the hosts 'Vivanews.com' and 'viva.co.id'.
This protocol plug-in classifies the web traffic to the host 'vox.com'.
This protocol plug-in classifies the web traffic to the hosts 'vtunnel.com' and 'vtunnel.info'.
This protocol plug-in classifies the web traffic to the host 'vyew.com', or associated to the SSL Common Name 'vyew.com'.
This protocol plug-in classifies the web traffic to the host 'wakoopa.com'.
This protocol plug-in classifies the web traffic to the host 'wasabi.com'.
This protocol plug-in classifies the web traffic to the host 'washingtonpost.com'.
This protocol plug-in classifies the web traffic to the host 'wat.tv'.
This protocol plug-in classifies the web traffic to the host 'wayn.com'.
This protocol plug-in classifies the web traffic to the hosts 'weather.com' and 'weather.com.cn'.
This protocol plug-in classifies the web traffic to the host 'webcrawler.com'.
This protocol plug-in classifies the web traffic to the host 'webbiographies.com'.
This protocol plug-in classifies the web traffic to the host 'weourfamily.com'.
This protocol plug-in classifies the web traffic to the host 'wer-kennt-wen.de'.
Wikipedia is the biggest multilingual free-content encyclopedia on the Internet.
This protocol plug-in classifies the web traffic associated to the SSL Common Name 'msecnd.net'.
WindowsLive is a pseudo-protocol which classifies generic web services related to the Microsoft 'Live' platform.
Windows_update is the protocol used for windows system updates.
This protocol plug-in classifies the web traffic to the host 'spaces.live.com'.
This protocol plug-in classifies the web traffic to the host 'windowsmedia.com'.
This protocol plug-in classifies the web traffic to the host 'wiserearth.org'.
This protocol plug-in classifies the web traffic to the host 'wixi.com'.
Page 29

Wooribank
Wordpress
Xanga
xbox
Xing
Xinhuanet
XL wap
XL Webmail
XLNet
XMLRPC protocol
xnxx
xrea
Xt3
xvideos
xvideoslive
Yahoo Answers
Yahoo Biz
Yahoo Douga
Yahoo Games
Yahoo Geocities
Yahoo Homes (formerly Yahoo
Realestate)
Yahoo Korea
Yahoo Maps
Yahoo Travel
Yahoo_search
Yahoo360PlusVietnam
Yammer
Yandex search engine
Yelp
Yesky
youdao
Youku
youm7
Youmeo
youporn
YourFileHost
YouSeeMore
YouSendIt
Youtube
Youtube HD

This protocol plug-in classifies the web traffic to the host 'wooribank.com'.
This protocol plug-in classifies the web traffic to the host 'wordpress.com'.
This protocol plug-in classifies the web traffic to the host 'xanga.com'.
This protocol plug-in classifies the web traffic to the host 'xbox.com'.
This protocol plug-in classifies the web traffic to the host 'xing.com'.
This protocol plug-in classifies the web traffic to the host 'xinhuanet.com'.
This protocol plug-in classifies the web traffic to the host 'wap.xl.co.id'.
This protocol plug-in classifies the web traffic to the host 'webmail.xl.co.id'.
This protocol plug-in classifies the web traffic to the host 'xl.net.id'.
XMLRPC is a remote procedure calling using HTTP as the transport and XML as the encoding. XML-RPC is designed to be as simple as
possible, while allowing complex data structures to be transmitted, processed and returned.
This protocol plug-in classifies the web traffic to the host 'xnxx.com'.
This protocol plug-in classifies the web traffic to the host 'xrea.com'.
This protocol plug-in classifies the web traffic to the host 'xt3.com'.
This protocol plug-in classifies the web traffic to the host 'xvideos.com'.
This protocol plug-in classifies the web traffic to the host 'xvideoslive.com'.
This protocol plug-in classifies the web traffic to the host 'answers.yahoo.com'.
This protocol plug-in classifies the web traffic to the hosts 'fr.biz.yahoo.com' and 'finance.yahoo.com'.
This protocol plug-in classifies the web traffic to the host 'streaming.yahoo.co.jp'.
This protocol plug-in classifies the web traffic to the host 'games.yahoo.com'.
This protocol plug-in classifies the web traffic to the host 'geocities.yahoo.com'.
This protocol plug-in classifies the web traffic to the hosts 'realestate.yahoo.com' and 'homes.yahoo.com'.
This protocol plug-in classifies the web traffic to the hosts 'yahoo.co.kr' and 'kr.yahoo.com'.
Yahoo Maps can be used to calculate routes or to look at maps.
This protocol plug-in classifies the web traffic to the hosts 'travel.yahoo.com' and 'fr.voyage.yahoo.com'.
This protocol is used to send queries to the Yahoo search engine.
This protocol plug-in classifies the web traffic to the host 'vn.360plus.yahoo.com'.
This protocol plug-in classifies the web traffic to the host 'www.yammer.com', or associated to the SSL Common Name 'yammer.com'.
Yandex is a Russian search engine.
This protocol plug-in classifies the web traffic to the host 'yelp.com'.
This protocol plug-in classifies the web traffic to the host 'yesky.com'.
This protocol plug-in classifies the web traffic to the host 'youdao.com'.
This protocol plug-in classifies the web traffic to the host 'youku.com'.
This protocol plug-in classifies the web traffic to the host 'youm7.com'.
This protocol plug-in classifies the web traffic to the host 'calumbrannan.com'.
This protocol plug-in classifies the web traffic to the host 'youporn.com'.
This protocol plug-in classifies the web traffic to the host 'yourfilehost.com'.
This protocol plug-in classifies the web traffic to the host 'youseemore.com'.
This protocol plug-in classifies the web traffic associated to the SSL Common Name 'yousendit.com'.
Youtube is a website where users can send or watch videos.
Youtube HD is the new version of Youtube where users can send or watch videos in High Definition.
Page 30

Ytimg
Yugma
Yuuguu
Zelune
Ziddu
Zoho CRM
ZOHO DB and Reports
Zoho Meeting
Zoho People
Zol
Zoo
zShare
Zum
Zynga Game Network

This protocol plug-in classifies the web traffic to the host '.ytimg.com'.
This protocol plug-in classifies the web traffic to the host 'yugma.com', or associated to the SSL Common Name 'yugma.com'.
This protocol plug-in classifies the web traffic to the host 'share.yuuguu.com', or associated to the SSL Common Name
'share.yuuguu.com'.
This protocol plug-in classifies the web traffic to the host 'zelune.info'.
This protocol plug-in classifies the web traffic to the host 'ziddu.com'.
This protocol plug-in classifies the web traffic to the host 'crm.zoho.com', or associated to the SSL Common Name 'crm.zoho.com'.
The ZOHO DB and Reports is an online database and reporting application.
This protocol plug-in classifies the web traffic to the hosts 'wms8.zoho.com', 'chat.zoho.com' and 'meeting.zoho.com', or associated to
the SSL Common Name 'meeting.zoho.com'.
This protocol plug-in classifies the web traffic to the host 'wms2.zoho.com'.
This protocol plug-in classifies the web traffic to the host 'zol.com.cn'.
This protocol plug-in classifies the web traffic to the host 'zoo.gr'.
zShare is an online solution to store, send and share files
This protocol plug-in classifies the web traffic to the host 'zum.com'.
This protocol plug-in classifies the web traffic to the host 'zynga.com'.

WEBMAIL
Dynamic Internet Messaging
Program
facebook mail
gmail basic
Gmail mobile version
gmx
Google Mail
IMP mobile version
Internet Messaging Program
La Poste Webmail
Live hotmail for mobile
mail.ru webmail
Maktoob mail
Orange webmail
Outlook Web Access
Rambler webmail
SquirrelMail
Windows Live Hotmail
Yahoo Mail classic
Yahoo webmail (new version) for
mobile
Yahoo webmail for mobile
Yandex webmail

DIMP is a Webmail protocol
Facebook_mail is a webmail environment on Facebook.
Gmail basic is the HTML version of the Google Webmail service.
Gmail_mobile is the Google webmail for mobile phones. This protocol decodes only the non-ciphered version.
GMX is a German webmail.
Gmail is the Google webmail service.
MIMP is the IMP webmail for mobile phones.
IMP is the IMAP webmail of the Horde project
Laposte Webmail is a webmail protocol.
Livemail_mobile is the livemail webmail for mobile phones
Mail.ru is a Russian web portal providing services such as webmail, search engine, instant messaging.
Maktoob is a webmail protocol.
Orangemail is the webmail of webmail.orange.fr.
Outlook Web App is used to access e-mail (including support for S/MIME), calendars, contacts, tasks, documents (used with SharePoint
or in 2010 Office Web Apps), and other mailbox content when access to the Microsoft Outlook desktop application is unavailable.
Rambler webmail is the webmail of the Russian website rambler.ru.
SquirrelMail is a web-based email application written in the PHP scripting language.
Windows Live Hotmail is a free webmail service operated by Microsoft.
Yahoo! Mail Classic was the original interface for Yahoo! Mail.
Yahoo Mail Mobile_new is the new yahoo.com webmail adapted to mobiles.
Yahoo Mail Mobile is the yahoo.com webmail adapted to mobiles.
Yandex webmail is the Russian webmail on webmail.yandex.ru.
Page 31

ymail2
Zimbra
Zimbra Webmail Standard Version

This protocol is the ajax based version of Webmail Yahoo.
Zimbra provides open source server and client software for messaging and collaboration.
zimbra_standard is the called standard version for the zimbra webmail.

Page 32