HiPPIE - HiPPIE Protocol Support

HiPPIE Protocol Support

This is the exhaustive, alphabetical list of protocols either currently being supported or planned on being supported within HiPPIE. If you would like to request support for a certain protocol, please contact Josh Ballard at the e-mail address at the bottom of the page. Support levels for these protocols is specified on the right hand side. A table of the definitions for these levels is available below, just below the protocol list. Thanks

Name	Title	Category	Classification
aim	AOL Instant Messenger	Instant Messaging Protocols	Full
ares	Ares P2P	Peer-to-Peer Protocols	Average
bittorrent	BitTorrent P2P	Peer-to-Peer Protocols	Average
dirconn	Direct Connect P2P	Peer-to-Peer Protocols	Coming
dns	Domain Name Service (DNS)	Core Internet Protocols	Full
edonkey	eDonkey / Overnet	Peer-to-Peer Protocols	Full
esp	Encapsulating Security Payload (ESP)	Network and Transport Protocols	Average
fasttrack	FastTrack P2P	Peer-to-Peer Protocols	Full
filetopia	FileTopia	Peer-to-Peer Protocols	Coming
ftp	File Transfer Protocol (FTP)	Core Internet Protocols	Full - Full Prediction
gnutella	Gnutella P2P	Peer-to-Peer Protocols	Full
gre	Generic Routing Encapsulation (GRE)	Network and Transport Protocols	Average
h323	H.323	Multimedia Protocols	Coming
http	HyperText Transfer Protocol (HTTP)	Core Internet Protocols	Full
icmp	Internet Control Message Protocol (ICMP)	Network and Transport Protocols	Full
icq	ICQ	Instant Messaging Protocols	Coming
imap	Internet Message Access Protocol (IMAP)	Core Internet Protocols	Full
ipv4	IPv4	Network and Transport Protocols	Full
ipv6	IPv6	Network and Transport Protocols	Coming
irc	Internet Relay Chat (IRC)	Instant Messaging Protocols	Full - Partial Prediction
msnim	MSN Instant Messenger	Instant Messaging Protocols	Average
nntp	Network News Transfer Protocol	Misc. Protocols	Average
novellcp	Netware Core Protocol	Misc. Protocols	Average
pop3	Post Office Protocol v3 (POP3)	Core Internet Protocols	Full
pplive	PPLive P2P Video	Peer-to-Peer Protocols	Coming
rdp	Remote Desktop Protocol (RDP)	Encrypted Protocols	Average
rtsp	Real-Time Streaming Protocol	Multimedia Protocols	Full - Full Prediction
sip	Session Initiation Protocol (SIP)	Multimedia Protocols	Full - No Prediction
skype	Skype VoIP	Multimedia Protocols	Coming
smtp	Simple Mail Transfer Protocol (SMTP)	Core Internet Protocols	Full
snmp	Simple Network Management Protocol	Misc. Protocols	Coming
ssh	Secure Shell (SSH)	Encrypted Protocols	Full
ssl	Secure Sockets Layer (SSL)	Encrypted Protocols	Full
storm	Storm Worm Encrypted Overnet P2P	Malware Protocols	Full
tcp	Transmission Control Protocol (TCP)	Network and Transport Protocols	Full
udp	User Datagram Protocol (UDP)	Network and Transport Protocols	Full
winmx	WinMX P2P	Peer-to-Peer Protocols	Average
wmedia	Windows Media Streaming	Multimedia Protocols	Coming
xunlei	Xunlei P2P	Peer-to-Peer Protocols	Testing
yahooim	Yahoo Instant Messenger	Instant Messaging Protocols	Full

Protocol support levels:

Classifications

Full

Specifies that at last check, this signature was fullly capable of living up to standards of full classification without misclassification.

Full - Full Prediction

Specifies that for a protocol with extraneous sessions, that full classification without misclassification is available, even for extraneous sessions.

Full - Partial Prediction

Specifies that for a protocol with extraneous sessions, that full classification without misclassification is available for the core protocol and some extraneous sessions.

Full - No Prediction

Specifies that for a protocol with extraneous sessions, that full classification without misclassification is available for all parts except the extraneous sessions.

Average

Specifies that a vast majority of all traffic traversing via the protocol specified would be identified by the signature, and that very little traffic will ever be misclassified of this type.

Testing

Specifies that a protocol is in the process of being supported, but that the signatures are not yet entirely accurate.

Broken

Specifies that a protocol is in the process of being supported, but that either the protocol signature has no reliability or that it could potentially crash the system.

Coming

Specifies that a protocol is intended to be supported, but that classification modules have yet to be written to support this protocol.

Never

Specifies that a protocol is currently not on the slate to be supported, or flat out is never intended to be supported.