Application Families and Tags
Along with other metadata, NetMon classifies applications by family and tag, providing more granular control to visualize, sort, search, report on, or set alarms with. NetMon automatically assigns families and tags in metadata for traffic flows—users cannot manually configure families or tags.
A family classifies an application by category of traffic, such as Instant Messaging or Antivirus. Each classified application in NetMon is associated with only one family.
A tag specifies the type of traffic within the family. For example, an application in the Instant Messaging family might be tagged with im_mc, file_transfer, and voip. Unlike families, a classified application in NetMon has at least one tag and may have many.
Some applications captured by NetMon do not include family or tag metadata because these flows are not fully classified—for example, a TCP application could belong to several families. To determine which applications are classified, select the FlowClassified field and look for “FlowClassified=true.”
For a comprehensive list of applications supported in NetMon, see NetMon Supported Applications.
Application Families
The following table contains NetMon supported application families (sorted alphabetically) and descriptions.
Family | Description |
|---|---|
Antivirus | Antivirus update |
Application Service | Background service |
Audio/Video | Protocol/application used to transport audio or video content |
Authentication | Protocol used for authentication purposes |
Behavioral | Protocol classified by non-deterministic criteria based on a statistical analysis of packet form and session behaviour. |
Compression | Compression layers |
Custom | Custom family |
Database | Protocol used for database remote queries |
Encrypted | Encryption protocol |
ERP | Enterprise Resource Planning application |
File Server | File transfer protocol |
File Transfer | Protocol used for user-to-user file transfers via Instant-Messaging applications |
Forum | Web forum |
Game | Gaming protocol |
Instant Messaging | Instant messaging application |
Email exchange protocol | |
Microsoft Office | Microsoft office sub-protocol |
Middleware | Platform protocol for remote procedure calls |
Network Management | Protocol used for IT management |
Network Service | Low level network protocol |
Peer to Peer | Peer to peer application |
Printer | Printer communication protocol |
Routing | Network routing protocol |
Security Service | Workstation security application |
Standard | Basic layers defined by Qosmos |
Telephony | Telephony core network protocol |
Terminal | Remote terminal protocol |
Thin Client | Remote control protocol |
Tunneling | Tunneling protocol |
Wap | Mobile-specific transport protocol |
Web | Generic web traffic |
Webmail | Web email application |
Application Tags
The following table contains NetMon supported application tags (sorted alphabetically) and descriptions.
Tag | Description |
|---|---|
aaa | Protocol/application used for AAA (Authentification, Authorization and Accounting) purposes |
adult_content | Adult content |
advertising | Advertising networks and applications |
aetls | Application known to enforce HSTS and thus use of TLS. |
analytics | user-analytics and statistics |
anonymizer | Traffic-anonymization protocol/application |
artification_intelligence | Product including a significant Artificial Intelligence (AI) functionality, such as generative models. |
audio_chat | Protocol/application used for Audio Chat |
basic | Covers all protocols required for basic classification, including most networking protocols as well as standard protocols like HTTP |
blog | Blogging platform |
cdn | Protocol/application used for Content-Delivery Networks |
certif_auth | |
chat | Protocol/application used for Text Chat |
classified_ads | Protocol/application used for Classified ads |
cloud_services | SaaS and/or PaaS cloud-based services |
crowdfunding | Service for funding a project or venture by raising small amounts of money from a large number of people, typically via the Internet |
cryptocurrency | Services for mining cryptocurrencies, for example a Crypto Web Browser (an application that mines cryptocurrency in the background while its user browses the web) |
db | Database-specific protocols |
dea_mail | Service offering Disposable Email Accounts (DEA). DEA is a technique to share temporary email addresses between many users. |
ebook_reader | Services for e-book readers—connected devices that display electronic books (typically using e-ink displays to reduce glare and eye strain) |
education | |
Native email protocol | |
enterprise | Protocol/application used in an enterprise network |
file_mngt | Protocol/application designed specifically for file management and exchange. This can include bona fide network protocols (like SMB) as well as web/cloud services (like Dropbox). |
file_transfer | Protocol that offers file transferring as a secondary feature. This typically includes IM, WebMail, and other protocols that allow file transfers in addition to their principal function. |
forum | Online forum |
gaming | Protocol/application used by games |
healthcare | Protocols offering medical services (protocols used in medical environment) |
im_mc | Protocol/application used for Instant messaging or multiconferencing |
iot | Internet of Things protocol/application |
map_service | Digital maps service (website and their related API) |
mm_streaming | Protocol/application used for multimedia streaming |
mobile | Mobile-specific protocol/application |
networking | Protocol used for (inter) networking purpose |
news_portal | Protocol/application used for News Portals |
p2p | Protocol/application used for Peer-to-peer purposes |
payment_service | Application offering online services for accepting electronic payments by a variety of payment methods (credit card, bank-based payments such as direct debit, bank transfer, etc.) |
remote_access | Protocol/application used for remote access |
scada | SCADA (Supervisory control and data acquisition) protocols, all generations |
social_network | Social networking application |
speedtest | Speedtest application allowing to access quality of Internet connection (upload, download, latency, etc.) |
standardized | Protocol issued from standardized bodies such as IETF, ITU, IEEE, ETSI, OIF |
transportation | Transportation services, for example smartphone applications that allow users to hail a taxi |
update | Auto-update protocol |
video_chat | Protocol/application used for Video Chat |
voip | Application used for Voice over IP |
vpn_tun | Protocol/application used for VPN or tunneling purposes |
web | Application based on HTTP/HTTPS |
web_ecom | Protocol/application used for E-commerce websites |
web_search | Protocol/application used for Web search portals |
web_sites | Protocol/application used for Company Websites |
webmail | Web email application |