{"action":"closed","issue":{"url":"https://api.github.com/repos/ntop/nDPI/issues/171","repository_url":"https://api.github.com/repos/ntop/nDPI","labels_url":"https://api.github.com/repos/ntop/nDPI/issues/171/labels{/name}","comments_url":"https://api.github.com/repos/ntop/nDPI/issues/171/comments","events_url":"https://api.github.com/repos/ntop/nDPI/issues/171/events","html_url":"https://github.com/ntop/nDPI/issues/171","id":147204175,"number":171,"title":"How to study nDPI and develop dissection support for a specific application","user":{"login":"tianzhishuizhu","id":12470646,"avatar_url":"https://avatars.githubusercontent.com/u/12470646?v=3","gravatar_id":"","url":"https://api.github.com/users/tianzhishuizhu","html_url":"https://github.com/tianzhishuizhu","followers_url":"https://api.github.com/users/tianzhishuizhu/followers","following_url":"https://api.github.com/users/tianzhishuizhu/following{/other_user}","gists_url":"https://api.github.com/users/tianzhishuizhu/gists{/gist_id}","starred_url":"https://api.github.com/users/tianzhishuizhu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tianzhishuizhu/subscriptions","organizations_url":"https://api.github.com/users/tianzhishuizhu/orgs","repos_url":"https://api.github.com/users/tianzhishuizhu/repos","events_url":"https://api.github.com/users/tianzhishuizhu/events{/privacy}","received_events_url":"https://api.github.com/users/tianzhishuizhu/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-04-10T07:55:52Z","updated_at":"2016-04-10T08:52:04Z","closed_at":"2016-04-10T08:52:04Z","body":"I'm a student and interested in protocol/application classification. I have run ntopng on my ubuntu and read some documentation. But I have some problems about learning.\r\n \r\n1. I can't find documentation about how nDPI determines which application flows belong to based on pcap file detailedly, from the viewpoint of developer instead of user. For instance, to classify YouTube flows, how can a developer inspect the header and payload of packets and what algorithm can be used?\r\n\r\n2. I want to learn the process of developing a dissection support for a specific application(maybe YouTube). Are there documentation avaliable for this?\r\n\r\nThanks for all the work you have done. \r\n "}}