	Note: This document is also available in other formats
A PDF version of this document along with all current and older documentation in PDF format can be found at https://my.clavister.com. It is also available in a framed HTML version.

Note: This document is also available in other formats

A PDF version of this document along with all current and older documentation in PDF format can be found at https://my.clavister.com.

It is also available in a framed HTML version.

This document lists all the available application control signatures that are used by the cOS Core Application Control feature.

A full explanation of how the feature is used can be found in the separate cOS Core Administration Guide. This document is designed to be used as additional reference material for administrators.

Individual signatures are categorized by the type of application being targeted. For example, the Peer to Peer section lists applications similar to BitTorrent.

Naming Conventions

The naming used with application control, for example for applications and tags, can have two different forms. One form is that used as the description in this signature reference guide that includes uppercase and spaces. The second form is all lowercase and spaces are replaced by underscore characters. This second form is used with management interfaces such as the CLI. For example, BitTorrent becomes bittorrent. In some isolated cases, the names can have different lengths. For example, the tag Software Update becomes updater in the CLI. The best approach to naming in the CLI is to use the tab completion feature to identify the correct name.

Chapter 1: Antivirus

1.1. 360 Safeguard - 360 Total Security

360 Safeguard and 360 Total Security are security programs developed by Qihoo 360.

Family:	Antivirus
Over:	360cn
Over:	http
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Desktop Applications
Tag:	Antivirus Updater

1.2. Lookout Mobile Security

All-in-one security software for mobile devices.

Family:	Antivirus
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Mobile Applications
Tag:	Antivirus Updater

1.3. Sophos update

Sophos antivirus update protocol.

Family:	Antivirus
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	15
Risk level:	1
Tag:	Antivirus Updater

1.4. ZoneAlarm

ZoneAlarm is a personal firewall for Windows.

Family:	Antivirus
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	1
Tag:	Network Utilities
Tag:	Desktop Applications

1.5. ZoneAlarm Updates

ZoneAlarm is a personal firewall for Windows. This protocol plug-in classifies security updates of the software.

Family:	Antivirus
Over:	zonealarm
Revision:	21
Risk level:	1
Tag:	Software Update
Tag:	Antivirus Updater

Chapter 2: Application Service

2.1. Automatic Certificate Management Environment

Automatic Certificate Management Environment (ACME) automatically provision TLS certificate from a Certificate Authority. This plugin classifies REST servers from major providers; and the HTTP/DNS challenge.

Family:	Application Service
Over:	cloudflare
Over:	dns
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.2. Exchange ActiveSync (EAS)

Exchange ActiveSync (EAS) is a mobile data synchronization technology and protocol developed by Microsoft, originally released in 1996. This protocol is designed for the synchronization of email, contacts, calendar, tasks and notes.

Family:	Mail
Over:	rpc
Revision:	20
Risk level:	3
Tag:	Network Utilities
Tag:	Information Leaking
Tag:	Mobile Applications

2.3. Android connectivity Manager

Android connectivity manager is used by an android device to periodically check and manage internet connection.

Family:	Application Service
Over:	google_gen
Over:	gstatic
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	1
Risk level:	1
Tag:	Mobile Applications

2.4. Apache Solr

This plugin classifies traffic related web interface and HTTP API to Apache Solr over HTTP.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	1
Risk level:	2
Tag:	Web Applications

2.5. Apple Push Notification Service

Apple Push Notification Service is an Apple service which forwards notifications from the servers of third party applications to iOS devices.

Family:	Application Service
Over:	apple
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	15
Risk level:	2
Tag:	Network Utilities
Tag:	Mobile Applications
Tag:	Server Applications

2.6. apple_pay

Apple Pay is a mobile payment and digital wallet service by Apple Inc. This plugin classifies traffic between merchant sites and Apple Pay services.

Family:	Application Service
Over:	akamai
Over:	apple
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Web Sites

2.7. Apple App Store

The Apple App Store is a digital application distribution platform for iOS developed and maintained by Apple Inc.

Family:	Application Service
Over:	http2
Over:	http
Over:	http_proxy
Over:	itunes
Over:	quic
Over:	ssl
Revision:	15
Risk level:	1
Tag:	Mobile Applications
Tag:	Non-business Related

2.8. Amazon AppStream

This plug-in used to classify Amazon AppStream, a remote desktop uses to manage applications running in virtual machines on Amazon platform.

Family:	Application Service
Over:	amazon
Over:	amazon_aws
Over:	http
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Allows Remote Control
Tag:	Server Applications

2.9. Aptoide

Aptoide is the largest independent Android app store allowing users to setup and manage their own Android stores.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Mobile Applications

2.10. Are You a Human

Real time human input detection service for websites and applications.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	1
Tag:	Web Applications
Tag:	Non-business Related
Tag:	Web Sites

2.11. Azure Right Management Service

Azure Right Management Service is a Microsoft right management service for files and Office documents which acts like a DRM license server. It is part of Azure Information Protection and is the on-line version of MS AD RMS. Support of this protocols covers client-to-server requests.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	soap
Over:	spdy
Over:	ssl
Over:	windows_azure
Revision:	1
Risk level:	2
Tag:	Business Applications

2.12. Bosch Security Conettix

Bosch Conettix is a security alarm product line. This plugin classifies the D6600 when no encryption is configured.

Family:	Application Service
Over:	udp
Revision:	1
Risk level:	3
Tag:	Industrial Protocols

2.13. Cafe Bazaar

Cafe Bazaar is an iranian digital application distribution platform for Android.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Server Applications

2.14. Helpsystems QMessage Monitor

QMessage Monitor, by Helpsystems, sends alerts to IT administrators based on filters on AS/400 Message Queues. This protocol is between the AS/400 application and a Windows client.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.15. Cisco UCM Alert Manager and Collector service

This plugin classifies the protocol of CUCAM (Cisco Unified Communications Alert Manager and Collector). This service is used by CUC (Cisco Unified Communications) or the RTMT (Real-Time Monitoring Tool) to provide performance monitoring, data collection, logging, and alerting.

Family:	Application Service
Over:	cisco_ucm
Revision:	1
Risk level:	2
Tag:	Network Layer Protocols

2.16. Citrix Provisioning Services (PVS)

Citrix PVS provides an infrastructure to stream shared Xen Virtual Machine images (vDisk) to hosts. This protocol plug-in classifies the Soap to Stream Process Manager communication protocol used by Citrix PVS.

Family:	Application Service
Over:	udp
Revision:	1
Risk level:	2
Tag:	Server Applications
Tag:	Application Layer Protocols

2.17. Wibu Codemeter

Wibu Codemeter is a license server (Software Asset Management). This plugins classifies this product as used in FactoryTalk Activation Manager.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Network Layer Protocols
Tag:	Server Applications

2.18. Control-M Agent

Control-M is an orchestration software form BMC. This plugin classifies communication between the server and the agent when TLS is disabled and persistent connections is disabled.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.19. Dictionary Server

The DICT protocol is a TCP transaction based query/response protocol that enables a client to access dictionary definitions from a set of natural language dictionary databases.

Family:	Application Service
Over:	tcp
Revision:	18
Risk level:	1
Tag:	Server Applications

2.20. Elasticsearch

Elasticsearch is a search engine. It provides a distributed, multitenant-capable full-text search engine

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Server Applications
Tag:	Application Layer Protocols

2.21. Engage Digital

Engage Digital is a digital customer engagement platform. It was previously Dimelo acquired by Ring Central.

Family:	Application Service
Over:	http
Over:	ring_central
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Web Applications

2.22. EndPoint Mapper

End Point Mapper is a protocol used by Exchange to determine the ports used by various services.

Family:	Application Service
Over:	dcerpc
Over:	krb5
Over:	msrpc
Over:	soap
Revision:	18
Risk level:	3
Tag:	Network Utilities
Tag:	Server Applications

2.23. exacqvision

Exacqvision is a software used for video surveillance.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	1
Tag:	Streaming Video

2.24. Financial Information eXchange (FIX)

Electronic communications protocol for international real-time transactions and markets information exchange. This signature classifies all the FIX protocol versions, from FIX 4.0 (13 jan 1996) to FIX 5.0 SP2 (1st mar 2008) and FIXT 1.1.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.25. Fleetsmith

Fleetsmith is Apple's fleet management SaaS for Apple devices, leveraging the MDM feature of their OS.

Family:	Application Service
Over:	apple
Over:	http
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols
Tag:	Web Sites

2.26. Flexera

This plugin classifies FLEXNet license servers and Flexera website.

Family:	Application Service
Over:	adobe
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Server Applications
Tag:	Web Sites

2.27. Generic Attribute Registration Protocol

The Generic Attribute Registration Protocol (GARP) provides a generic framework whereby devices in a bridged LAN can register or delete attribute values between each other.

Family:	Network Service
Over:	8021q
Over:	eth
Over:	gre
Over:	hsr
Revision:	18
Risk level:	1
Tag:	Not Used

2.28. GDB Remote

GDB Remote is a serial protocol used connect gdb to a remote running target program and debug it.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	1
Tag:	Desktop Applications
Tag:	Application Layer Protocols

2.29. Google Play Store

Google Play Store (formerly Android Market) is an online software store developed by Google for Android OS devices.

Family:	Application Service
Over:	google_api
Over:	google_gen
Over:	gstatic
Over:	gsuite
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	16
Risk level:	1
Tag:	Bundles Software
Tag:	Download Manager
Tag:	Software Update
Tag:	Mobile Applications
Tag:	Non-business Related

2.30. Sentinel HASP

Sentinel is a license manager from Thales. This plugin classifies the version delivered with MasterCam, a CNC software, version 2019.

Family:	Application Service
Over:	udp
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.31. HPE operation Agent

HPE Operation Agent is a standalone system management software, collecting metrics and applying configurations. It may be connected to HPE Operation Bridge

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Network Utilities
Tag:	Business Applications

2.32. HPE Operation Bridge

HPE Operation Bridge is a system and network management software for IT teams

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Network Utilities
Tag:	Business Applications

2.33. Huawei Update

Huawei Update classifies Huawei mobile device updates.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Mobile Applications
Tag:	Non-business Related

2.34. IBM Application System - Server Mapper

This plugin classifies traffic related to the IBM i Access server mapper service.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.35. iCloud (Apple)

iCloud is a cloud computing service developed by Apple Inc. which allows to store and share data, from an iOS mobile (iPhone, iPad, iPod Touch or a Macintosh). Note: the classification of this service is maximized if non encrypted traffic is injected.

Family:	Application Service
Over:	akamai
Over:	amazon_aws
Over:	apple
Over:	http2
Over:	http
Over:	https
Over:	imaps
Over:	spdy
Over:	ssl
Revision:	16
Risk level:	3
Tag:	File Storage and Sharing
Tag:	Non-business Related

2.36. Iminent.com

Website providing add-ons for most messengers

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	2
Risk level:	2
Tag:	Instant Messaging
Tag:	Web Sites

2.37. iOS over-the-air (OTA) update

iOS OTA Update is the protocol used for iOS and embedded speech updates Over The Air.

Family:	Application Service
Over:	apple
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	1
Tag:	Software Update
Tag:	Mobile Applications
Tag:	Non-business Related

2.38. Jenkins

Jenkins is a software development build automation infrastructure for continuous integration and delivery. This plugin classify the website and on-site instances using the default HTTP web interface.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	jnlp
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Web Applications
Tag:	Web Sites

2.39. Jenkins Remoting JNLP

JNLP is the protocol used to control Jenkins agents remotely. The JNLP protocol is available as a standalone library.

Family:	Application Service
Over:	ssl
Over:	tcp
Over:	websocket
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.40. kafka

High throughput distributed messaging system

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	1
Tag:	Network Layer Protocols

2.41. Keyence

Keyence is a manufacturer of industrial imaging devices. This plugin classifies the protocol used for image retrieval from KV-X cameras.

Family:	Application Service
Over:	tcp
Over:	udp
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.42. Lighweight Directory Access Protocol

LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this protocol to send queries to Active Directory.

Family:	Application Service
Over:	tcp
Over:	udp
Revision:	17
Risk level:	4
Tag:	Network Utilities
Tag:	Information Leaking
Tag:	Server Applications

2.43. Lighweight Directory Access Protocol Secure

Secure LDAP is the Secure version of the LDAP protocol.

Family:	Application Service
Over:	ssl
Revision:	18
Risk level:	4
Tag:	Network Utilities
Tag:	Server Applications

2.44. Mandriva Update

Information list about the debian archive

Family:	Web
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	17
Risk level:	1
Tag:	Software Update

2.45. Micro Focus Configuration Management System

Micro Focus Configuration Management System, previously known as HP Enterprise CMS, does the discovery and inventory of an IT infrastructure and its hosted services. The discovery is both agent less by using each service own protocol and agent based. This plugin classifies, provided the default certificates are not changed, the custom protocols used between this product components (UD Agent, DF Probe, UCMDB Server, UCMDB UI); and between the UI and a web browser.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssh
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Network Layer Protocols
Tag:	Business Applications

2.46. Mobile Market

Mobile Market is an online Android and iOS software store developed by China Mobile. This plugin classifies traffic from Mobile Market Android application.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Bundles Software
Tag:	Download Manager
Tag:	Mobile Applications

2.47. IBM Websphere MQ

Mq (IBM Websphere MQ) is an inter-application communication protocol.

Family:	Application Service
Over:	tcp
Revision:	18
Risk level:	3
Tag:	Server Applications
Tag:	Application Layer Protocols

2.48. Microsoft Active Directory

Microsoft Active Directory is a directory service for IT infrastructure. This includes the Windows Domain Controller.

Family:	Application Service
Over:	krb5
Over:	ldap
Over:	ldaps
Over:	ms_adws
Over:	ms_drsr
Over:	ms_lsad
Over:	ms_netlogon
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.49. Microsoft AD Right Management Service

Right Management Service is a Microsoft right management service for files and Office documents based on a central server linked to the Active Directory which acts like a DRM license server. Support of this protocol cover both client-to-server and server-to-server requests but is limited to HTTP configurations.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	soap
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Business Applications

2.50. Active Directory Web Services

Microsoft Active Directory Web services are used for the administrative tasks on an Active Directory.

Family:	Application Service
Over:	ms_nmf
Revision:	1
Risk level:	2
Tag:	Network Utilities
Tag:	Business Applications

2.51. Microsoft Directory Replication Service Remote Protocol

Microsoft Directory Replication Service Remote Protocol (MS-DRSR) is a protocol for replication of Active Directory servers alongside LDAP. This plugin classifies the DCE/RPC based protocol.

Family:	Application Service
Over:	dcerpc
Over:	krb5
Over:	msrpc
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.52. Microsoft Local Security Authority Remote Protocol

Microsoft Local Security Authority Remote Protocol (MS-LSAD and MS-LSAT) allows remote management of security policies from an Active Directory server.

Family:	Application Service
Over:	krb5
Over:	msrpc
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.53. Microsoft Message Queuing

Message Queuing (MSMQ) technology enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. Applications send messages to queues and read messages from queues.

Family:	Application Service
Over:	dcerpc
Over:	http2
Over:	http
Over:	https
Over:	msrpc
Over:	soap
Over:	spdy
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Network Layer Protocols

2.54. Microsoft Netlogon Remote Protocol

Netlogon Remote Protocol is used for authentication of users and hosts on a Windows domain and also for domain controller database replication.

Family:	Application Service
Over:	dcerpc
Over:	krb5
Over:	mailslot
Over:	msrpc
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.55. Microsoft Notification Protocol

Microsoft Notification Protocol (MSNP, also known as the Mobile Status Notification Protocol) is an instant messaging protocol developed by Microsoft for use by the Microsoft Messenger service and the instant messaging clients that connect to it, such as Skype since 2014.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	1
Tag:	Instant Messaging
Tag:	Network Utilities
Tag:	Business Applications
Tag:	Desktop Applications

2.56. Myket

Myket is an Iranian Android software store.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	3
Tag:	File Storage and Sharing
Tag:	Mobile Applications

2.57. NetBSD Updates

NetBSD update manages the updates for NetBSD. NetBSD is a Unix-like Open Source operating system.

Family:	Web
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	17
Risk level:	1
Tag:	Software Update

2.58. ESET NOD32 Antivirus Updates

Virus definitions and engine updates for the ESET NOD32 anti-virus.

Family:	Web
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	17
Risk level:	1
Tag:	Antivirus Updater

2.59. Symantec Norton AntiVirus Updates

Virus definitions and engine updates for the Symantec Norton anti-virus.

Family:	Web
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	1
Tag:	Antivirus Updater

2.60. Name Service Provider Interface

Name Service Provider Interface is a protocol used by Exchange.

Family:	Application Service
Over:	dcerpc
Over:	krb5
Over:	msrpc
Revision:	17
Risk level:	4
Tag:	Server Applications
Tag:	Application Layer Protocols

2.61. NUSP protocol

This plugin classifies NUSP protocol. NUSP is custom protocol from NUUO company for initializing and maintaining video streams from cameras.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.62. OpenBSD Updates

This protocol manages OpenBSD updates.

Family:	Web
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Revision:	17
Risk level:	1
Tag:	Software Update

2.63. Opera Mobile Store

Opera Mobile Store provides over 300,000 apps and games for more than 7,500 different mobile phone models across Android, Java, Symbian, BlackBerry, Windows Mobile, Windows Phone and iOS platforms. In agreement with Nokia, Opera Mobile Store is also replacing the former Nokia store for legacy Nokia devices.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	2
Risk level:	2
Tag:	Bundles Software
Tag:	Software Update
Tag:	Mobile Applications

2.64. OV Solutions

This plugin classifies OV Solutions Server traffic. OV Solutions company provides surveillance equipment and software like NVR (Network Video Recording).

Family:	Application Service
Over:	nusp
Revision:	1
Risk level:	2
Tag:	Application Layer Protocols

2.65. Panda Update

Panda_update is the protocol used for panda software updates.

Family:	Web
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	1
Tag:	Antivirus Updater

2.66. Perforce Protocol

Perforce is a commercial, proprietary, centralized revision control system developed by Perforce Software, Inc.

Family:	Application Service
Over:	tcp
Revision:	15
Risk level:	2
Tag:	Business Applications
Tag:	Server Applications

2.67. Port Mapper

Port Mapper protocol maps RPC program and version numbers to port numbers. This program makes dynamic binding of remote programs possible.

Family:	Application Service
Over:	rpc
Revision:	17
Risk level:	3
Tag:	Network Utilities
Tag:	Server Applications

2.68. Samsung Apps

Samsung Apps is an application store for Samsung mobile and TV users.

Family:	Application Service
Over:	amazon_aws
Over:	cdnetworks
Over:	facebook
Over:	http2
Over:	http
Over:	https
Over:	llnwd
Over:	samsung
Over:	spdy
Over:	ssl
Over:	twitter
Revision:	15
Risk level:	1
Tag:	Mobile Applications

2.69. Samsung Update

Samsung Update classifies Samsung mobile device updates.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	1
Risk level:	2
Tag:	Mobile Applications
Tag:	Non-business Related

2.70. Sentinel RMS

Sentinel Rights Management System (RMS) is a license manager from Thales. This plugin classifies the communication from the client to the local license server.

Family:	Application Service
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	udp
Revision:	1
Risk level:	2
Tag:	Business Applications

2.71. Snapmirror relationship data transfer

This plugin classifies SnapMirror relationship protocol for data transfer only, thus protocol related to replication of snapshots between any two ONTAP systems.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Server Applications

2.72. Splunk Cloud

Splunk Cloud is the data collection, indexing, and visualization service for operational intelligence.

Family:	Application Service
Over:	http2
Over:	http_proxy
Over:	quic
Over:	rtsp
Over:	sip
Over:	spdy
Over:	splunk
Over:	splunk_ufwd
Over:	ssl
Over:	stun
Revision:	1
Risk level:	1
Tag:	Network Utilities

2.73. Splunk Universal Forwarder

Universal Forwarder is used to forward data Splunk application (6.5.0), it is designed to scale to large number of remote systems and collect very large amount of data.

Family:	Application Service
Over:	splunk
Revision:	1
Risk level:	1
Tag:	Transport Layer Protocols

2.74. Service Location Protocol

Service Location Protocol is a decentralized, lightweight, scalable and extensible protocol for service discovery within a local area network.

Family:	Application Service
Over:	tcp
Over:	udp
Revision:	17
Risk level:	3
Tag:	Network Utilities
Tag:	Application Layer Protocols

2.75. Simple Service Discovery Protocol

Simple Service Discovery Protocol (SSDP) provides a mechanism whereby network clients can discover desired network services.

Family:	Application Service
Over:	udp
Revision:	17
Risk level:	3
Tag:	Network Utilities
Tag:	Application Layer Protocols

2.76. Microsoft Service Control

This protocol is used to control remotely Windows services. Also known as MS-SCMR (Service Control Manager Remote Protocol). For further information, see https://msdn.microsoft.com/en-us/library/cc245832.aspx

Family:	Application Service
Over:	dcerpc
Over:	krb5
Over:	msrpc
Revision:	1
Risk level:	3
Tag:	Allows Remote Control
Tag:	Application Layer Protocols

2.77. Syslog

Syslog protocol is used for the transmission of event notification messages across networks between a client and a server.

Family:	Application Service
Over:	tcp
Over:	udp
Revision:	19
Risk level:	3
Tag:	Information Leaking
Tag:	Server Applications

2.78. Tencent Appstore

Tencent Appstore (Yingyongbao) is an online applications store developed by Tencent for Android OS devices.

Family:	Application Service
Over:	http
Over:	ssl
Over:	tencent
Revision:	1
Risk level:	3
Tag:	Mobile Applications

2.79. Windows Marketplace

Windows Marketplace is a service by Microsoft for its Windows Phone 7/8 and Microsoft Windows 8 platforms that allows users to browse and download applications that have been developed by third-parties. The website of the chain of retail stores Microsoft Store is also classified.

Family:	Application Service
Over:	azure_ms
Over:	http2
Over:	http
Over:	https
Over:	microsoft
Over:	spdy
Over:	ssl
Revision:	19
Risk level:	2
Tag:	Bundles Software
Tag:	Software Update
Tag:	Mobile Applications
Tag:	Web Sites

2.80. VMware vMotion

vMotion is the VMware protocol which allows hot migration of virtual machines between different vSphere servers running on different hosts.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Server Applications
Tag:	Application Layer Protocols

2.81. VMWare Blast

Blast is a Virtual Desktop Infrastructure (VDI) protocol from VMWare, in use for the Horizon platform. When tunneled, it is classified by the vmware_horizon plugin.

Family:	Application Service
Over:	http2
Over:	https
Over:	spdy
Over:	ssl
Over:	udp
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.82. VMWare Horizon

Horizon is VMWare's Virtual Desktop Infrastructure (VDI). It is available both on-premises and in cloud version.

Family:	Application Service
Over:	http
Over:	https
Over:	ssl
Over:	vmware
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Application Layer Protocols

2.83. Vmware Horizon View (PCoIP protocol)

Vmware Horizon View is a commercial desktop-virtualization product developed by VMware. This plugin classifies pcoip streams over UDP, between virtual machines and Mac/Windows clients

Family:	Application Service
Over:	udp
Revision:	2
Risk level:	3
Tag:	Allows Remote Control

2.84. X Font Server

X Font Server is a standard communication protocol between an X server and a font renderer.

Family:	Application Service
Over:	tcp
Revision:	16
Risk level:	1
Tag:	Server Applications

2.85. ZooKeeper

This plugin classifies replication protocol used by Apache ZooKeeper to synchronise instances.

Family:	Application Service
Over:	tcp
Revision:	1
Risk level:	2
Tag:	Business Applications
Tag:	Server Applications

Chapter 3: Audio/Video

3.1. 050 plus

050 plus is a Japanese embedded smartphone application dedicated to audio-conferencing.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	rtp
Over:	sip
Over:	spdy
Over:	ssl
Over:	stun
Revision:	15
Risk level:	2
Tag:	VoIP
Tag:	Mobile Applications
Tag:	Non-business Related

3.2. 300hu

300hu.com is a chinese video streaming platform. This plugin classifies website traffic.

Family:	Audio/Video
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	jingdong
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.3. 6play

French mobile application providing tv live broadcast and catchup TV.

Family:	Audio/Video
Over:	apple_hls
Over:	flurry
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	quic
Over:	smartadserver
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	1
Tag:	Mobile Applications
Tag:	Streaming Video
Tag:	Non-business Related

3.4. 7digital

7digital is a digital music and radio services platform. For example, it is used by Trebel application. This plugin classifies website traffic.

Family:	Audio/Video
Over:	amazon_aws
Over:	fastly
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Web Applications

3.5. 8tracks

Internet radio and social networking website based on user-made playlists streaming.

Family:	Audio/Video
Over:	amazon_aws
Over:	cloudflare
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Social Networking
Tag:	Streaming Audio
Tag:	Web Sites

3.6. Acast

Acast is a podcast platform. This plugin classifies listening, browsing and downloading podcasts traffic for free account.

Family:	Audio/Video
Over:	amazon
Over:	amazon_aws
Over:	archive
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio

3.7. Adobe Connect

Adobe Connect is a web communication system for the training, the marketing, the conferences and the online collaboration.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	rtmp
Over:	spdy
Over:	ssl
Revision:	19
Risk level:	3
Tag:	Allows Remote Control
Tag:	Web Conferencing
Tag:	Non-business Related

3.8. adRise

adRise is an internet TV platform. This plugin classifies only website traffic.

Family:	Audio/Video
Over:	amazon_aws
Over:	cloudflare
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.9. Afreeca TV

This protocol plug-in classifies the http and TCP traffic to the host .afreeca.com.

Family:	Audio/Video
Over:	data_saver
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	rtmp
Over:	spdy
Over:	ssl
Over:	tcp
Revision:	1
Risk level:	1
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.10. Air Video

Air Video can stream videos to your iPhone, iPad and iPod touch.

Family:	Audio/Video
Over:	apple_hls
Over:	http2
Over:	http
Over:	https
Over:	spdy
Revision:	1
Risk level:	1
Tag:	Mobile Applications
Tag:	Streaming Video

3.11. AllMusic.com

Allmusic is an online music guide service website. This plug-in classifies navigation on the AllMusic web service, and MP3 music playback. Video clip streaming is handled by youtube.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	2
Risk level:	2
Tag:	Non-business Related
Tag:	Web Sites

3.12. Amazon Music

Amazon Music is an online music store.

Family:	Audio/Video
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio
Tag:	Non-business Related
Tag:	Web Sites

3.13. Anghami

Anghami application provides an audio streaming service.

Family:	Audio/Video
Over:	akamai
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	tritondigital
Over:	zendesk
Revision:	1
Risk level:	2
Tag:	Streaming Audio

3.14. Anten

Anten is an Iranian sport live streaming platform.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Streaming Video
Tag:	Non-business Related

3.15. Anvato

Anvato is a video on demand technologies provider, now part of the media and entertainment offer of Google Cloud Platform (GCP).

Family:	Audio/Video
Over:	akamai
Over:	gcp
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.16. Aol.On

AOL On is a video streaming web site.

Family:	Audio/Video
Over:	apple_hls
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	1
Tag:	Streaming Video
Tag:	Non-business Related

3.17. Apple AirPlay

Apple airplay is a protocol for display picture and video to a connected tv from a device connected to the same private network

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	rtsp
Over:	spdy
Over:	tcp
Over:	udp
Revision:	3
Risk level:	1
Tag:	Instant Messaging
Tag:	Video Conferencing
Tag:	VoIP

3.18. Apple HTTP Live Streaming

Apple implementation of the HTTP Live Streaming IETF draft. Used on Apple iOS devices.

Family:	Audio/Video
Over:	akamai
Over:	akamai_video
Over:	amazon_aws
Over:	apple
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Over:	ssl
Over:	turner
Over:	videoplaza
Revision:	1
Risk level:	1
Tag:	Web Conferencing
Tag:	Streaming Video
Tag:	Streaming Audio

3.19. Apple Music

Apple Music is an on-demand music streaming service by Apple.

Family:	Audio/Video
Over:	apple
Over:	appstore
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	itunes
Over:	quic
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	1
Tag:	Streaming Audio
Tag:	Non-business Related

3.20. Apple TV Plus

Apple TV Plus offers paid VOD distributed by Apple. This plugin classifies the video streams related to Apple TV Plus option and web site tv.apple.com. This plugin does not cover streams related to Apple TV application.

Family:	Audio/Video
Over:	amazon_aws
Over:	apple
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.21. Audible

Audible Inc. is a seller and producer of spoken audio entertainment owned by Amazon.

Family:	Audio/Video
Over:	adobe
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Mobile Applications
Tag:	Desktop Applications
Tag:	Streaming Audio

3.22. Microsoft Azure Media Services

Microsoft Azure Media Services is a cloud-based media workflow platform.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	rtmp
Over:	spdy
Over:	ssl
Over:	windows_azure
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Streaming Audio

3.23. Baidu Player

BaiduPlayer is a video player that can play local, online and OnDemand videos.

Family:	Audio/Video
Over:	facebook
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	tcp
Over:	udp
Revision:	2
Risk level:	2
Tag:	Streaming Video
Tag:	Streaming Audio
Tag:	Non-business Related
Tag:	Web Sites

3.24. BAMTech

BAMTech is a VOD technology provider owned by Walt Disney Company, Major League Baseball Advanced Media and National Hockey League. This plugin classifies its streaming technology as used by Disney Plus.

Family:	Audio/Video
Over:	adobe
Over:	amazon
Over:	amazon_aws
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video

3.25. BBC Player

BBC Player is an in-browser live video streaming service.

Family:	Audio/Video
Over:	akamai
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	llnwd
Over:	rtmp
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.26. BeIN SPORTS

This plugin classifies BeIN Sports Connect for APAC and Middle East countries and BeIN Sports website. BeIn Sports is a Qatari network of sports television channels.

Family:	Audio/Video
Over:	akamai
Over:	amazon_aws
Over:	apple
Over:	apple_hls
Over:	cloudflare
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	zendesk
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.27. ISO Base Media File Format

The ISO Base Media File Format, as described in ISO/IEC 14496-12:2008 (MPEG-4 Part 12).

Family:	Audio/Video
Over:	akamai
Over:	alibaba_cloud
Over:	amazon_aws
Over:	apple_hls
Over:	cloudflare
Over:	data_saver
Over:	flash
Over:	http2
Over:	http
Over:	https
Over:	qiniu
Over:	spdy
Revision:	12
Risk level:	2
Tag:	Streaming Video
Tag:	Streaming Audio

3.28. BridTV

BridTV is a video monetization solution platform. This plugin classifies only website traffic.

Family:	Audio/Video
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	zendesk
Revision:	1
Risk level:	2
Tag:	Web Sites

3.29. Byte

Byte (byte.co) is a mobile app allowing to create and share short video.

Family:	Audio/Video
Over:	cloudflare
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	stackpath
Over:	zendesk
Revision:	1
Risk level:	2
Tag:	Streaming Video

3.30. VodCCTV

VodCCTV provides a web on-line video and video on demand client for the CCTV Chinese television network.

Family:	Audio/Video
Over:	cntv
Over:	rtmp
Over:	udp
Revision:	3
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.31. Chang Ba

Chang Ba ("Just Sing") is a chinese karaoke platform. This plugin classifies website and Android application traffic.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	qiniu
Over:	spdy
Over:	ssl
Over:	tmall
Revision:	1
Risk level:	3
Tag:	Mobile Applications
Tag:	Web Sites

3.32. ClickView

This plugin classifies ClickView free services available on the website and the android application. ClickView is an educational videos and resources platform.

Family:	Audio/Video
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	zendesk
Revision:	1
Risk level:	2
Tag:	Mobile Applications
Tag:	Streaming Video
Tag:	Streaming Audio
Tag:	Web Sites

3.33. C More

CMORE is a swedish distributor of paid videos on demand.

Family:	Audio/Video
Over:	akamai
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	1
Tag:	Web Applications
Tag:	Streaming Video
Tag:	Non-business Related

3.34. CNET Video (aka CNET TV)

CNET Video is a web television network.

Family:	Audio/Video
Over:	akamai
Over:	http2
Over:	http
Over:	https
Over:	rtmp
Over:	spdy
Revision:	17
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.35. Connatix

Connatix is a video syndication and monetization platform for publishers. This plugin classifies website traffic.

Family:	Audio/Video
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Web Sites

3.36. Crackle

crackle is an entertainment network and studio that distributes free movies, television shows and original programming.

Family:	Audio/Video
Over:	akamai
Over:	akamai_video
Over:	amazon_aws
Over:	google_gen
Over:	http2
Over:	http
Over:	https
Over:	rtmp
Over:	spdy
Over:	ssl
Over:	windows_azure
Revision:	1
Risk level:	1
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.37. DAZN

DAZN is a video streaming service for sports.

Family:	Audio/Video
Over:	akamai
Over:	akamai_video
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	llnwd
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.38. DirecTV GO

This plugin classifies loading of DirecTV GO home page. DirecTV GO is video streaming platform proposed by AT&T in latina America.

Family:	Audio/Video
Over:	akamai
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Web Sites

3.39. Discovery Inc

Discovery Inc, is an American global media and entertainment company. This plugin classifies website traffic.

Family:	Audio/Video
Over:	adobe
Over:	akamai
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Over:	ssl
Over:	windows_azure
Revision:	1
Risk level:	2
Tag:	Web Sites

3.40. Disney Plus

Disney Plus is a Video On Demand (VOD) service.

Family:	Audio/Video
Over:	akamai
Over:	amazon
Over:	disney
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.41. Dplay

Dplay is a video streaming provider. This plugin classifies only free account.

Family:	Audio/Video
Over:	discovery_inc
Over:	http
Over:	quic
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.42. Eurosport Player

Eurosport Player is the Eurosport service for playing videos streaming (live and replay).

Family:	Audio/Video
Over:	eurosport
Over:	http2
Over:	http
Over:	quic
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.43. Facebook Live

Free live video streaming service by Facebook. This signature only classifies the live video streaming making (upstream) from the official Facebook mobile application. The live video watching is classified as facebook_video.

Family:	Audio/Video
Over:	facebook
Over:	http
Over:	quic
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Mobile Applications
Tag:	Streaming Video
Tag:	Non-business Related

3.44. Apple FaceTime

FaceTime is an Apple video calling software which runs on iOS based mobile devices.

Family:	Audio/Video
Over:	rtp
Over:	sip
Over:	stun
Over:	udp
Revision:	15
Risk level:	3
Tag:	Video Conferencing
Tag:	Mobile Applications
Tag:	Non-business Related

3.45. Flash Media Playback

Adobe Flash Media Playback is a dynamic HTTP streaming protocol used to access video contents (Flash Media PlayBack, Flow Player, ...) from a smart client application. (In case of known server application, we will favor its classification instead of classify it as Flash)

Family:	Audio/Video
Over:	adobe
Over:	amazon
Over:	amazon_aws
Over:	gstatic
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	llnwd
Over:	rackspace
Over:	spdy
Revision:	17
Risk level:	2
Tag:	Application Layer Protocols
Tag:	Streaming Video
Tag:	Streaming Audio
Tag:	Non-business Related

3.46. Free Music Download Pro - Downloader and Player

Download, play, sort, organize media files.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	lastfm
Over:	scorecardresearch
Over:	spdy
Revision:	1
Risk level:	3
Tag:	Download Manager
Tag:	Non-business Related

3.47. Fuze

Fuze (formerly known as ThinkingPhones) is a provider of cloud-based Unified Communications as a Service (UCaaS).

Family:	Audio/Video
Over:	amazon_aws
Over:	dtls
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	quic
Over:	rtcp
Over:	rtp
Over:	rtsp
Over:	sip
Over:	spdy
Over:	splunk_cloud
Over:	ssl
Over:	stun
Revision:	1
Risk level:	3
Tag:	Instant Messaging
Tag:	Social Networking
Tag:	Business Applications
Tag:	Streaming Video
Tag:	Streaming Audio

3.48. Fuze meeting

Video-conferencing application (audio, video HD, desktop sharing, file transfer)

Family:	Audio/Video
Over:	fuze
Over:	http2
Over:	http_proxy
Over:	quic
Over:	rtsp
Over:	sip
Over:	spdy
Over:	ssl
Over:	stun
Revision:	2
Risk level:	3
Tag:	Allows Remote Control
Tag:	File Storage and Sharing
Tag:	Instant Messaging
Tag:	Web Conferencing
Tag:	Video Conferencing
Tag:	VoIP
Tag:	Business Applications
Tag:	Streaming Video

3.49. Gaana

Gaana is an application of musical streaming.

Family:	Audio/Video
Over:	akamai
Over:	akamai_video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio

3.50. GITV

GITV is an internet television company providing systems, products for tv operators and also video contents. This plugin classifies traffic to gitv.tv and gitv.cn.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.51. Google Play Music

Google Play Music is a music streaming service and online music locker operated by Google.

Family:	Audio/Video
Over:	fcm
Over:	google_api
Over:	google_gen
Over:	gstatic
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	2
Risk level:	1
Tag:	Web Applications
Tag:	Streaming Audio
Tag:	Non-business Related
Tag:	Web Sites

3.52. GoToMeeting Online Meeting

GoToMeeting is an online meeting service developed by Citrix.

Family:	Audio/Video
Over:	amazon
Over:	http2
Over:	http
Over:	https
Over:	logmein
Over:	quic
Over:	rtp
Over:	spdy
Over:	ssl
Over:	stun
Over:	tcp
Over:	udp
Revision:	19
Risk level:	3
Tag:	Allows Remote Control
Tag:	Web Conferencing
Tag:	Video Conferencing
Tag:	Non-business Related

3.53. Graboid

Graboid Video is an application for downloading and watching videos.

Family:	Audio/Video
Over:	highwinds
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	quic
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video

3.54. Gige Vision Control Protocol

GVCP stands for Give Vision Control Protocol a standard for industrial cameras supported by several companies. This plugin classifies GVCP traffic related to control and discovery.

Family:	Audio/Video
Over:	udp
Revision:	1
Risk level:	2
Tag:	Internet of Things
Tag:	Industrial Protocols

3.55. H225

The H225 Protocol is a VoIP protocol, used for call signaling and RAS (Registration, Admission and Status).

Family:	Audio/Video
Over:	q931
Over:	udp
Revision:	17
Risk level:	3
Tag:	VoIP
Tag:	Application Layer Protocols

3.56. H245

H245 is a VoIP protocol, used for call signaling codec negotiation.

Family:	Audio/Video
Over:	tcp
Revision:	17
Risk level:	3
Tag:	VoIP
Tag:	Application Layer Protocols

3.57. h248 Protocol (Megaco) in binary mode

h248 Protocol (Megaco) in binary mode.

Family:	Audio/Video
Over:	udp
Revision:	15
Risk level:	2
Tag:	VoIP
Tag:	Application Layer Protocols

3.58. h248 Protocol (Megaco) in text mode

h248 Protocol (Megaco) in text mode.

Family:	Audio/Video
Over:	udp
Revision:	15
Risk level:	2
Tag:	VoIP
Tag:	Application Layer Protocols

3.59. Hami Music

Traffic from Hami Music website.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio
Tag:	Non-business Related

3.60. HBO GO

On-demand video streaming website powered by the HBO american TV channel.

Family:	Audio/Video
Over:	amazon
Over:	amazon_aws
Over:	cloudflare
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	windows_azure
Revision:	17
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.61. HBO Max

HBO Max is a video streaming platform developed by Warner Media. This plugin classifies website traffic.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	warner_media
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.62. HOOQ

HOOQ is a video on demand streaming service deployed in Asia (2018).

Family:	Audio/Video
Over:	akamai
Over:	amazon
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	quickplay
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video

3.63. Horizon GO

Horizon GO provides live TV, streams movies and series on demand. This plugin classifies the traffic on horizon.tv and ziggogo.tv.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Web Applications
Tag:	Mobile Applications
Tag:	Streaming Video
Tag:	Non-business Related

3.64. Houseparty

Houseparty is a social network with video capabilities.

Family:	Audio/Video
Over:	amazon
Over:	amazon_aws
Over:	branch
Over:	http2
Over:	http
Over:	https
Over:	rtcp
Over:	rtp
Over:	spdy
Over:	ssl
Over:	stun
Over:	webrtc
Revision:	1
Risk level:	2
Tag:	Social Networking
Tag:	Video Conferencing

3.65. Howcast.com

This protocol plug-in classifies the http and ssl traffic to the host .howcast.com.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Over:	ssl
Revision:	16
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.66. Hulkshare

Free Internet Radio service featuring personal audio file uploading and sharing.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio
Tag:	Non-business Related
Tag:	Web Sites

3.67. Hulu

Hulu is a free Video-On-Demand and video sharing service.

Family:	Audio/Video
Over:	akamai
Over:	amazon
Over:	edgecast
Over:	http2
Over:	http
Over:	https
Over:	level3
Over:	rtmp
Over:	spdy
Over:	ssl
Over:	tcp
Over:	udp
Revision:	18
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.68. Huya

Huya is a Chinese live-streaming game platform. This plugin classifies browsing and video-playing traffic.

Family:	Audio/Video
Over:	alibaba_cloud
Over:	http2
Over:	http
Over:	https
Over:	mpegts
Over:	qqvideo
Over:	rtp
Over:	spdy
Over:	ssl
Over:	tcp
Over:	udp
Revision:	1
Risk level:	3
Tag:	Streaming Video
Tag:	Web Sites

3.69. I Want TFC

IWant TV is an over-the-top content (OTT) platform exclusively available in the Philippines.

Family:	Audio/Video
Over:	abs_cbn
Over:	akamai
Over:	akamai_video
Over:	amazon_aws
Over:	cloudflare
Over:	gcp
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	2
Risk level:	2
Tag:	Streaming Video
Tag:	Streaming Audio

3.70. Inter Asterisk eXchange

Inter Asterisk eXchange (IAX2) is a data exchange protocol between Asterisk servers.

Family:	Audio/Video
Over:	udp
Revision:	17
Risk level:	1
Tag:	VoIP
Tag:	Server Applications
Tag:	Application Layer Protocols

3.71. icall

icall is proprietary voice/video over IP protocol.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	rtcp
Over:	rtmp
Over:	rtp
Over:	sip
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	2
Tag:	Video Conferencing
Tag:	VoIP

3.72. icecast

Icecast is a protocol used to stream audio files over HTTP.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	icy
Over:	mms
Over:	spdy
Over:	ssl
Over:	xiph
Revision:	18
Risk level:	2
Tag:	Server Applications
Tag:	Application Layer Protocols
Tag:	Streaming Audio
Tag:	Non-business Related

3.73. ICY (I Can Yell)

ICY is the former version of the SHOUTCast streaming protocol, developed by Nullsoft.

Family:	Audio/Video
Over:	data_saver
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	tcp
Over:	tritondigital
Revision:	1
Risk level:	2
Tag:	Server Applications
Tag:	Application Layer Protocols
Tag:	Streaming Audio
Tag:	Non-business Related

3.74. iFilmTV

iFilmTV is an iranian television portal, featuring Live TV streaming. This signature classifies live TV, as well as video trailers and clips playing.

Family:	Audio/Video
Over:	akamai_video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related
Tag:	Web Sites

3.75. WeTV iFlix

Iflix is a video streaming application based on the Akamai cloud service.

Family:	Audio/Video
Over:	adobe
Over:	akamai
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	mpegts
Over:	qq_web
Over:	qqvideo
Over:	spdy
Over:	ssl
Over:	tencent
Revision:	2
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.76. iTunes

iTunes is an Apple proprietary digital media player application, used for playing and organizing digital music and video files.

Family:	Audio/Video
Over:	akamai
Over:	apple
Over:	apple_hls
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	2
Tag:	Streaming Audio
Tag:	Non-business Related

3.77. Xigua Video

Xigua Video is a video platform of Bytedance.

Family:	Audio/Video
Over:	bytedance
Over:	http
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Streaming Video

3.78. Jitsi

Jitsi is a VOIP and a Video Conferencing platform.

Family:	Audio/Video
Over:	dtls
Over:	http2
Over:	http
Over:	https
Over:	maxcdn
Over:	rtcp
Over:	rtp
Over:	spdy
Over:	ssl
Over:	stun
Over:	udp
Over:	webrtc
Revision:	1
Risk level:	2
Tag:	Video Conferencing

3.79. Join me

This signature detects Join.me, a free service that allows to share a desktop instantly with others.

Family:	Audio/Video
Over:	http
Over:	logmein
Over:	ssl
Revision:	1
Risk level:	4
Tag:	Allows Remote Control

3.80. KKBOX

Traffic from KKBOX website.

Family:	Audio/Video
Over:	amazon_aws
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio
Tag:	Non-business Related

3.81. Kuaishou

This plugin classifies Kuaishou website and iOS application traffics (making a Live streaming and chat are not supported). Kuaishou is a content community and social platform and owned many applications (Kuaishou Flagship, Kuaishou Express, Kuaishou Concept, Yitian Camera, Kmovie, AcFun, Kuaikandian). Kwai is the international version of the Kuaishou

Family:	Audio/Video
Over:	amazon_aws
Over:	apple_hls
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	mpegts
Over:	quic
Over:	spdy
Over:	ssl
Over:	tcp
Over:	udp
Revision:	1
Risk level:	2
Tag:	Social Networking
Tag:	Mobile Applications
Tag:	Web Sites

3.82. Kuwo

Kuwo provides music streaming services.

Family:	Audio/Video
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	kugou
Over:	qq_web
Over:	rtmp
Over:	rtp
Over:	spdy
Over:	ssl
Over:	udp
Over:	websocket
Revision:	1
Risk level:	3
Tag:	Streaming Audio

3.83. Lan Ren Ting Shu

Lan Ren Ting Shu is a Chinese audio reading platform.

Family:	Audio/Video
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	qiniu
Over:	spdy
Over:	ssl
Over:	tencent
Revision:	1
Risk level:	3
Tag:	Streaming Audio
Tag:	Web Sites

3.84. Libsyn

Libsyn provides audio & podcasts streaming services.

Family:	Audio/Video
Over:	cloudflare
Over:	disqus
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Audio

3.85. Lifesize

Lifesize is a video and audio telecommunications company. This plugin classifies traffic generated on Android and Chrome platforms.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	quic
Over:	rtp
Over:	spdy
Over:	ssl
Over:	stun
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Streaming Audio
Tag:	Web Sites

3.86. Lingsheng Duoduo - A lot of ringtones

Lingsheng Duoduo ("A lot of ringtones") is a ringtones platform for mobile.

Family:	Audio/Video
Over:	baidu
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	3
Tag:	Mobile Applications
Tag:	Web Sites

3.87. magicJack

MagicJack is a VoIP service for home and business use, available as a mobile application and also with a proprietary device (magicJack PLUS).

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	rtp
Over:	sip
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	VoIP
Tag:	Mobile Applications

3.88. Mango TV

Mango TV is a chinese online video platform.

Family:	Audio/Video
Over:	apple_hls
Over:	bmff
Over:	http2
Over:	http
Over:	https
Over:	mpegts
Over:	qq_web
Over:	spdy
Over:	ssl
Revision:	1
Risk level:	2
Tag:	Streaming Video
Tag:	Web Sites

3.89. Cisco MeetingPlace

MeetingPlace is a protocol used by the Cisco Unified MeetingPlace suite of voice, web, and video conferencing products.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	soap
Over:	spdy
Over:	ssl
Revision:	17
Risk level:	3
Tag:	Web Conferencing
Tag:	Video Conferencing

3.90. Metacafe.com

Metacafe is a popular video sharing website launched in 2002.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	http_proxy
Over:	https
Over:	spdy
Revision:	16
Risk level:	2
Tag:	Streaming Video
Tag:	Non-business Related

3.91. Media Gateway Control Protocol

MGCP protocol is used as signaling protocol for voice IP applications.

Family:	Audio/Video
Over:	tcp
Over:	udp
Revision:	17
Risk level:	2
Tag:	VoIP
Tag:	Application Layer Protocols

3.92. Milestone Systems

Milestone Systems is an IP video management software platform. This plugin classifies only website traffic.

Family:	Audio/Video
Over:	http2
Over:	http
Over:	https
Over:	spdy
Over:	ssl
Over:	windows_azure
Revision:	1
Risk level:	2
Tag:	Web Sites

3.93. Microsoft Multimedia Streaming

MMS protocol is used extensively nowadays by Microsoft video streaming servers. It enables to stream a file in real time to many simultaneous viewers.

Family:

Audio/Video