Hi @ZainexZA 

Thanks for posting in our business forum.

ZainexZA wrote

  @Clive_A 

 

Hi Clive this is indeed correct, traffic is 99% encrypted as per SSL certs on most downloads these days hence why i can still understand why Youtube stats are far off, but how does Unifi manage to solve this? do they use a Man in the middle cert that users can install to investigate the packet flow? qBittorent should be listed let me check. 

 

 

 

So for these the app flow should be the same unless a standard port must be used if you can somehow guide me in the right direction or somehow i can capture packets white wiresharck to send to to RnD so we can get this on par with Unifi and other DPI solutions this would be great, reason for the large traffic amounts is due to the lab i am running i need to get this info sorted for various reasons or understand what the shortfalls are that i can explain these to our clients to push the aweness and present other focus points on why Omada is right for them and what it can and cannot do.

Not asking for a miricale here but a intermidate solution even if this is users being uable to update the DPI Database themselves as i know when DPI is enabled it pulls the latest info from a cloud source somewhwere if i am not mistaken? i have the Q2025 Roadmap for Omada and know this is a feature our users will love and hence if i can help fix it or explain why xyz is not tracked this would be most helpful sadly i have no direct contact with HQ nor RnD from my current role. As you can see Steam is being tracked 100% accurate and i am pushing the limits on this almost over 2TB so far on steam alone QUIC sure cannot track due to how the protocol works but not sure how it picks up Mobile Youtube and tracks the usuage. Also why Upload is not counted on DPI as it should count downstream and upstream traffic? If you can replicate my lab this would be good!

Currently running Omada Cloud Trail (30 Days Standard) ER7206 v2 and a SG2210MP v4.20 switch with a EAP245 all firmware up to date till the latest release.

I am currently Employed by TP-Link ZA as Technical Sales and would share my info to you via DM so we can perhaps solve this inernally and give our users more function and help improve the Omada Ecosystem, do let me know!

Since I am not working with the other vendors, I cannot say for sure that's a middleman cert to crack and log. That's a way to see the traffic flow but I think it is not safe and possible to do that as a solution sold on the market. Potential danger if the cert is modified.

As for some patterns that are correctly recognized, they should be stable and clear DST and ports recognized. Some patterns are stable, unlike the download-ware like bit download which may contain sensitive files that violate the DMCA. It could masquerade itself so the traffic might not be correctly told.

For ISPs, they simply cut off the high-bandwidth connection instead of recognizing it via its pattern time in certain regions. Or they use the database or tag to identify certain IP addresses to tell if they are bit-download servers. That requires a daily update to a database which is something that we don't have. The database is updated usually along with the Controller update.

Correct understanding of the DPI pattern recognition. DPI now is based on the pattern provided by vendors. It may not catch up with the latest changes in the traffic pattern if an app has changed. The traffic pattern may be changed and the database requires a follow-up update. So, it got the margin to take errors.

Further details regarding how DPI and what source the DPI database comes from, could be confidential. I don't have any details about it either since this goes way deep and some information is not made for the general public understanding. If you are an employee, you can contact the HQ and escalate this matter and the dev can get to you. The local company to HQ support channel is different from others.

You can send an email to support.smb@tp-link.com. Or check if there is a source with your local team leader who can relay you to the HQ via a different source. Sorry that I have not been assigned to a local team before so I don't know how your local team works.