Juniper Networks Deep Packet
Inspecon-Decoder (Applicaon
Signature) Release Notes
Published
2022-10-11
RELEASE
Table of Contents
Recent Release History
Overview
New Features and Enhancements
New or Modied Applicaon Groups
Obsolete Applicaons
Resolved Issues
Requesng Technical Support
Revision History
ii
Recent Release History
Table 1 on page 1 summarizes the features and resolved issues in recent releases. You can use this
table to help you decide to update the JDPI-Decoder version in your deployment.
Table 1: JDPI-Decoder Features and Resolved Issues by Release
Release
Date
Signature
Pack
Version
JDPI
Decoder
Version
Engine
Version 5
Features and Resolved Issues
October
11, 2022
The relevant
signature
package
version is
3533.
1.550.2-31 5.7.0-47 This JDPI-Decoder version is supported only on the
Junos OS 12.3X48-D95+ and later releases,
15.1X49-D200+ and laterreleases, and Junos OS
19.2R1 and later releases on all supported SRX Series
plaorms. Starng in Junos OS release 20.1R1,
enhancements to custom applicaons are included in
the JDPI-Decoder release.
Overview
The JDPI-Decoder is a dynamically loadable module that mainly provides applicaon classicaon
funconality and associated protocol aributes. It is hosted on an external server and can be
downloaded as a package and installed on the device. The package also includes XML les that contain
addional details of the list of applicaons and groups. The list of applicaons can be viewed on the
device using the CLI command show services application-identification application summary. Addional
details of any parcular applicaon can be viewed on the device using the CLI command show services
application-identification application detail <application>. For addional details, see Applicaon Signature.
NOTE: This applicaon signature package does not support v4 engines. This upgrade is only
supported on Junos OS 12.3X48D95+ and later releases, 15.1X49-D200+ and later releases
which support the v5 engine, and 19.2R1 and later releases which support the v5 engine. This
signature package is not compable with Junos OS releases supporng v4 engine. There are no
more updates planned for PB1.460.2-46 for Junos OS releases supporng v4 engine.
1
New Features and Enhancements
IN THIS SECTION
New Soware Features and Enhancements Introduced in JDPI-Decoder Release | 2
New Applicaons | 2
Updated Applicaons | 8
Custom Applicaons | 17
The following secons describe new features and enhancements available in the JDPI-Decoder releases:
New Soware Features and Enhancements Introduced in JDPI-Decoder
Release
The following secons describe new features and enhancements available in JDPI-Decoder Release.
New Applicaons
Table 2 on page 2 shows the applicaons that are added in this release of JDPI-Decoder.
Table 2: New
Applicaons
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
1 STREET-FIGHTER Gaming AMAZON Street Fighter is a ghng video
game franchise developed and
published by Capcom . This plugin
classies trac generated by Street
Fighter IV Champion Edion an
online mobile video game.
2
Table 2: New Applicaons
(Connued)
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
2 MEISTERLABS Web HTTP MeisterLabs is German applicaon
editor. This plugin classies their
website. MindMeister is a mind
mapping tool and MeisterTask is a
task management applicaon.
3 CLICKVIEW Mulmedia HTTP This plugin classies ClickView free
services available on the website and
the android applicaon. ClickView is
an educaonal videos and resources
plaorm.
4 HSR Infrastructure ETH High-Availability Seamless
Redundancy provides redundancy for
industrial Ethernet networks. This
headers is used for packet
duplicaon removal. The ixEngine
does not run the duplicaon removal
algorithm.
5 SECTIGO Web HTTP This plugin classies website trac of
secgo.com. Secgo is a cercaon
authority.
6 DOUYIN Messaging BYTEDANCE Douyin, by ByteDance, is the Chinese
version of TikTok, a video sharing
social network.
7 TESTWISE Web HTTP This plugin classies Testwise
website access. Testwise is a scoring
and reporng service plaorm for
schools.
8 SPELLINGCITY Web HTTP SpellingCity is an online educaonal
tool that helps children learn to spell.
This plugin classies website trac.
3
Table 2: New Applicaons
(Connued)
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
9 NEWORK Web HTTP This plugin classies website trac of
nework.app. NeWork is an online
workspace that supports team
communicaon and it is provided by
NTT Communitcaons, meengs use
Jitsi services.
10 LETS-ENCRYPT Web AMAZON-AWS Let's encrypt is a free SSL/TLS
cercaon authority. This plugin
classies website trac.
11 BLUEJEANS Messaging AKAMAI-VIDEO BlueJeans is a cloud video
conferencing plaorm.
12 WHATSAPP-API Messaging HTTP WhatsApp Business API is the
interface to automate or manage
large number of messages.
13 AZURE-SPEECH Web HTTP Speech is an Azure Cognive Service
to transcribe spoken audio to text,
translate and convert text to realisc
speech.
14 OPENSESAME Web HTTP OpenSesame is an online courses
plaorm.
15 HSRPRP Infrastructure ETH High-Availability Seamless
Redundancy (HSR) and Parallel
Redundancy Protocol (PRP) provide
redundancy for industrial Ethernet
networks. This plugin classies
supervision frames.
4
Table 2: New Applicaons
(Connued)
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
16 PRP Infrastructure ETH Parallel Redundancy Protocol
provides redundancy for industrial
Ethernet networks. This plugin
detects the Redundancy Control
Trailer (RCT) to Ethernet frames. The
ixEngine does not run the duplicaon
removal algorithm.
17 MS-STREAM Mulmedia HTTP Microso Stream is the corporate
video-sharing service of Microso
Oce365.
18 ANGHAMI Mulmedia HTTP Anghami applicaon provides an
audio streaming service.
19 AZURE-STT Web HTTP Speech Speech-To-Text is the Speech
service to transcribe spoken audio to
text.
20 LOOKER Web HTTP Looker Data Sciences, Inc. is an
American computer soware
company. It was acquired by Google
in 2019 and is now part of the
Google Cloud Plaorm.
21 AZURE-S2S Web HTTP Speech Speech-To-Speech is the
Speech service for translaon.
22 OSN Mulmedia COMCAST This plugin classies website
browsing and OSN streaming
applicaons trac. Orbit Showme
Network (OSN) is a Middle Eastern
mulnaonal direct-broadcast
satellite provider and also a video
plaorm for Middle East and North
Africa (MENA).
5
Table 2: New Applicaons
(Connued)
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
23 SMARTSHEET Web HTTP Smartsheet is a soware as a service
(SaaS) providing collaboraon and
work management tools.
24 ZUOYEBANG Web BAIDU Zuoyebang is a chinese e-learning
plaorm owned by Baidu.
25 FLEETSMITH Infrastructure HTTP Fleetsmith is Apple's eet
management SaaS for Apple devices,
leveraging the MDM feature of their
OS.
26 BOTIM Messaging HTTP Bom is a mobile communicaon
applicaon to make audio/video calls
and chat.
27 TWILIO Web HTTP Twilio is a cloud communicaon
plaorm. This plugin classies
website trac.
28 UDEMY Web HTTP Udemy is an online courses plaorm.
29 AZURE-MS Mulmedia HTTP Microso Azure Media Services is a
cloud-based media workow
plaorm.
30 JUNIPER Web ADOBE This plugin classies trac going to
Juniper Web interface.
31 BEIN-SPORTS Mulmedia APPLE-IOS-
UPDATE-SSL
This plugin classies BeIN Sports
Connect for APAC and Middle East
countries and BeIN Sports website.
BeIn Sports is a Qatari network of
sports television channels.
6
Table 2: New Applicaons
(Connued)
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
32 PINDUODUO Web BMFF This plugin classies applicaon and
website browsing of Pinduoduo and
does not manage live video
streaming. Pinduoduo is a Chinese e-
commerce company.
33 TRITONDIGITAL Mulmedia HTTP Triton Digital provides audio and
podcasts streaming services.
34 LIBSYN Mulmedia HTTP Libsyn provides audio and podcasts
streaming services.
35 RIOT-GAMES Gaming CLOUDFLARE Riot Games is a videogame company,
and has developed games like League
of Legends, Valorant, etc... This plugin
classies website trac.
36 WEEBLY Web HTTP Weebly is a web hosng service
plaorm. This plugin classies
website trac.
37 AZURE-TTS Web HTTP Speech Text-To-Speech is the Speech
service to translate and convert text
to realisc speech.
38 MOLOCO-ADS Web HTTP Moloco is an adversing plaorm.
39 SOGOU-INPUT Web HTTP Sogou Input is a Chinese input
method editor developed by
Sohu.com, Inc. under its search
engine brand name, Sogou.
40 SYNCHROPHASOR Infrastructure TCP IEEE C37.118 Synchrophasor
Protocol conveys electrical current
measurements in power grid
substaons.
7
Table 2: New Applicaons
(Connued)
Sr.
No.
Applicaon Name Applicaon
Type
Reported Over Descripon
41 163-WEBMAIL Web 163 163Mail is an email plaorm owned
by Netease.
42 SEGMENT Web HTTP Segment is a customer data plaorm.
It is a Twilio services.
Updated Applicaons
Table 3 on page 8 lists the applicaon updates in this release of JDPI-Decoder.
Table 3: Updated Applicaons
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
1 WHATSAPP Messaging HTTP WhatsApp Business
API is the interface
to automate or
manage large
number of
messages
2 SOLIDWORKS Infrastructure HTTP This plugin
Classies
SolidWorks
collaboraon
servers and
Solidworks website.
Solidworks is a CAD
(Computer-Aided
Design) suite from
Dassault Systems.
8
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
3 SMB Infrastructure File-Servers This protocol
triggers when it
detects Server
Message Blocks
(also known as
Common Internet
File System, CIFS). It
operates as an
applicaon-layer
network protocol
mainly used to
provide shared
access to les and
services between
nodes on a network.
Most usage of SMB
involves computers
running Microso
Windows Operang
Systems.
4 POP3 Messaging HTTP Secure version of
the POP3 protocol.
5 VITAL-QIP Infrastructure HTTP Vital QIP is DDI
applicaon (DNS,
DHCP, IPAM (IP
Address
Management)) that
comes with a
manager (AMS) to
administrate Vital
QIP appliance.
9
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
6 KEYENCE-
BARECODE
Infrastructure HTTP This plugin classies
the control protocol
of Keyence
Barecode scanners,
that is also used by
AutoID Network
Navigator, their
setup soware.
7 HTTP Web HAPROXY/HTTP-
PROXY/HTTP-
TUNNEL/NET-
PROXY/SOCKS4/
SOCKS5/TCP/UDP
This signature
detects HyperText
Transfer Protocol
(HTTP). World Wide
Web uses this
protocol. This
signature denes
how messages are
formaed and
transmied and
what acons Web
servers and
browsers should
take in response to
various commands.
HTTP usually runs
on TCP port 80.
8 MS-ADWS Infrastructure HTTP Microso Acve
Directory Web
services are used
for the
administrave tasks
on an Acve
Directory.
10
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
9 MS-NMF Infrastructure HTTP .NET Message
Framing Protocol,
also known as its
URI scheme
'tcp.net', is a
Microso framing
protocol for TCP. It
also enables port
sharing between
several applicaons.
10 IWAREHOUSE Infrastructure HTTP iWarehouse is a
eet and warehouse
management from
Raymond
Corporaon, a
forkli
manufacturer, part
of Toyota. This
plugin classies the
protocol of the on-
board device,
named Monitor.
11 SMTP Messaging Mail This signature
detects Simple Mail
Transfer Protocol
(SMTP), which is
protocol for e-mail
transmission across
the Internet. It is an
Internet standard
host-to-host mail
transport protocol.
SMTP usually runs
on TCP port 25.
11
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
12 BR-AUTOMATION Infrastructure HTTP B&R Industrial
Automaon is a
manufacturer for
the industry. This
plugin classies a
plasc molding
machinery.
13 EVASIVE-
PROTOCOL
Infrastructure HTTP This protocol
classies common
mechanisms used
by evasive
applicaons. Those
mechanisms can be
shared by several
dierent
applicaons.
14 LINKEDIN Web HTTP This signature
detects Linkedin,
which is a Web-
based social
networking
applicaon used to
keep in contact with
business
professionals.
15 TELEGRAM Messaging HTTP Telegram is an
instant messaging
protocol like
Whatsapp. This
plugin also classies
trac generated by
Telegram API
embedded by
telgram.org web
site.
12
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
16 FACEBOOK Web HTTP This signature
detects Facebook
Applicaons - an
extension of
Facebook.
17 MS-DFSR Infrastructure HTTP The Distributed File
System Replicaon
(DFSR) service is a
new mul-master
replicaon engine
that is used to keep
folders
synchronized on
mulple servers.
18 SKYVPN Infrastructure HTTP SkyVpn encrypts
your data to secure
your connecon as
a VPN using domain
fronng and
encrypted trac.
19 QUIC Web HTTP QUIC is an open
networking protocol
developed primarily
at Google for
transporng web
content.
20 CALL-OF-DUTY-
MOBILE
Gaming HTTP Call of Duty: Mobile
is a free to play
mobile videogame.
This plugin classies
only the trac
generated by the
online playing.
13
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
21 RAKUTEN Web HTTP This signature
detects Rakuten, a
large Japanese
online retailer.
22 EPIC-GAMES Gaming HTTP epic_games is an
American video
game and soware
development
corporaon.
23 PUBG Gaming HTTP PlayerUnknown's
BaleGrounds is a
First Personal
Shooter (FPS) online
video game.
24 UNREAL-ENGINE Gaming HTTP unreal_engine is a
video game engine
developed by Epic
Games.
25 ANONYTUN-VPN Web HTTP AnonyTun is an
android VPN client
oering to their
users to customize a
few parameters
related to tunnel.
26 chrome_remote_des
ktop
Web HTTP This signature
classies chrome
remote desktop
based on DNS
caching and SSL
common name on
PC as well as on
Mobile.
14
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
27 VIBER Messaging HTTP Viber is an
applicaon for
iPhone and Android
phones that lets you
make free phone
calls and send text
messages to anyone
who also has the
applicaon.
28 SKYPE Infrastructure HTTP This signature
detects SSL access
to any of the Skype
domains. Skype is a
VOIP and popular
instant messenger
service maintained
by Microso.
29 FIFA Gaming HTTP Fifa is a football
video game edited
by EA Sports. This
plugin classies
video game online
trac.
30 GOOGLETALK Messaging Instant-Messaging This signature
detects the Google
Talk client using the
Jabber (XMPP)
protocol.
31 MPLUS-
MESSENGER
Messaging HTTP M+ is a taiwanese
mobile IM
applicaon with
audio/image le
send feature.
15
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
32 TOKBOX Web HTTP TokBox was a PaaS
(Plaorm as a
Service) company
that provided
hosted
infrastructure, APIs
and tools required
to deliver
enterprise-grade
WebRTC
capabilies. It was
acquired by Vonage.
33 SIEMENS-APOGEE Infrastructure HTTP This plugin classies
the main data
protocol used by
Siemens Apogee
HVAC product line.
This device also
uses BACnet and
other control
protocols that are
not covered here.
34 DNS Infrastructure Networking This signature
detects Domain
Name System
(DNS), which is
used for Internet
mail and host
address support.
35 STARKVPN Infrastructure HTTP Stark VPN is a vpn
applicaon.
16
Table 3: Updated Applicaons
(Connued)
Sr. No. Applicaon Name Applicaon Type Reported Over Descripon
36 SYNOLOGY-
BACKUP
Infrastructure HTTP Centralize backup
tasks for physical
and virtual
environments to
keep your data and
services always
available.
37 IBM Web HTTP IBM (Internaonal
Business Machines
Corporaon) is an
American
mulnaonal
technology
company.
Custom Applicaons
This release of JDPI-Decoder does not introduce any enhancements to the custom applicaons.
New or Modied Applicaon Groups
This release of JDPI-Decoder does not inlcude any applicaon addions and modicaons.
Obsolete Applicaons
shows the applicaons that are now obsolete either because they are no longer in use in the eld or
they have been replaced with more recent applicaons. While conguraon commit will not fail ihese
obsolete applicaons are already congured,the recommendaon is to remove these applicaons from
conguraons of AppSecure modules (AppFW, AppQoS, APBR, AppQoE and Unied Policy), as they will
no longer be classied or reported. The applicaons which have been replaced are added as an alias
17
under a related applicaon which are provided in the specic reason column. You cannot congure a
new policy with these obsolete applicaons, instead
Table 4: Obsolete Applicaons
Sr. No. Applicaon Name Specic Reason Descripon
1 ALYAMANALARABY This applicaon is
deprecated and no longer
supported.
Worlwide news website
famous in the Yemen.
2 RIFFSY This applicaon is
deprecated and no longer
supported.
Risy's GIF Keyboard
(Tenor.co) permits users
to share and discover
animated GIFs and videos
on mobile.
3 COMM This applicaon is
deprecated and no longer
supported.
COMM is a VoIP and
Instant messaging
applicaon for mobile
phones commonly used in
Japan.
Resolved Issues
Table 5 on page 18 describes the resolved issues in this release of JDPI-Decoder.
Table 5: Resolved Issue
Problem Report Descripon
1620323 AppID does not recognizing the Keyence-Barecode
trac.
1615455 Updated SolidWork applicaon signature.
1617440 AppID not recognizing VITAL QIP trac.
18
Table 5: Resolved Issue
(Connued)
Problem Report Descripon
1661299 AppID stops to idenfy dynamic applicaon, policy
allows trac instead of denying it.
1664770 The srxpfe process generates core les during sigpack
switch.
Requesng Technical Support
IN THIS SECTION
Self-Help Online Tools and Resources | 20
Creang a Service Request with JTAC | 20
Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).
If you are a customer with an acve J-Care or Partner Support Service support contract, or are covered
under warranty, and need post-sales technical support, you can access our tools and resources online or
open a case with JTAC.
• JTAC policies—For a complete understanding of our JTAC procedures and policies, review the
JTACUser Guide
located at hps://www.juniper.net/us/en/local/pdf/resource-guides/7100059-
en.pdf.
• Product warranes—For product warranty informaon, visit hp://www.juniper.net/support/
warranty/.
• JTAC hours of operaon—The JTAC centers have resources available 24 hours a day, 7 days a week,
365 days a year.
19
Self-Help Online Tools and Resources
For quick and easy problem resoluon, Juniper Networks has designed an online self-service portal
called the Customer Support Center (CSC) that provides you with the following features:
• Find CSC oerings: hps://www.juniper.net/customers/support/
• Search for known bugs: hps://prsearch.juniper.net/
• • Find product documentaon: hps://www.juniper.net/documentaon/
• • Find soluons and answer quesons using our Knowledge Base: hps://kb.juniper.net/
• Download the latest versions of soware and review release notes: hps://www.juniper.net/
customers/csc/soware/
• Search technical bullens for relevant hardware and soware nocaons: hps://kb.juniper.net/
InfoCenter/
• Join and parcipate in the Juniper Networks Community Forum: hps://www.juniper.net/company/
communies/
• Create a service request online: hps://myjuniper.juniper.net
To verify service entlement by product serial number, use our Serial Number Entlement (SNE) Tool:
hps://entlementsearch.juniper.net/entlementsearch/
Creang a Service Request with JTAC
You can create a service request with JTAC on the Web or by telephone.
• Visit hps://myjuniper.juniper.net.
• Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For internaonal or direct-dial opons in countries without toll-free numbers, see hps://
support.juniper.net/support/requesng-support/.
Revision History
• October 11, 2022—Revision 1, JDPI Release Notes.
20
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper
Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered
marks, or registered service marks are the property of their respecve owners. Juniper Networks assumes
no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change,
modify, transfer, or otherwise revise this publicaon without noce. Copyright © 2022 Juniper Networks,
Inc. All rights reserved.
21