Deep Packet Inspection

NETCAP has support for using libprotoident (v2.0.14), to identify 45 application categories and 500+ applications and protocols!

Furthermore nDPI (v3.0) can be used to identify 244 applications.

The results from all heuristic engines (lPI, nDPI and go heuristics) get dedpulicated automatically. Future versions could create a certainity score based on the number of votes from different heuristics.

DPI is currently used to indicate which applications have been seen for which IPProfile, when using the DeviceProfile encoder.

Read more about it in the documentation: Deep Packet Inspection.