Deep Packet Inspection (DPI) become popular when the Edward Snowden leaks about data collection by the government came out. It has gone from just another buzzword to making headlines. In this chapter, we will look at various traits of protocols and packets that aid DPI.
We will be specifically looking at the following topics:
- Analysis of multiple protocols
- Packet encapsulation and packet analysis
So, why are we learning DPI? Well, DPI is the process of looking beyond the generic TCP/IP headers and involves analyzing the payload itself.
Devices with DPI capabilities can analyze, evaluate, and perform actions from layer 2 to the application layer itself. This means that the devices with DPI capabilities are not only reliant on the header information but also check what is being sent as the data part. Hence, the overall tradition of network analysis is now...
