Protocol Analysis Modules

With the ExtraHop platform, IT teams can speak the same languages their applications do. The analysis modules in the ExtraHop platform enable IT teams to understand the conversations taking place within the datacenter—at the wire protocol level and in real time. Equipped with application-specific details—such as the URI included in an HTTP 500 error or a slow stored procedure in a database—IT teams can more effectively prevent slowdowns, identify root causes, and troubleshoot problems. In contrast to this real-time, application-centric approach, many network monitoring tools can only guess at application activity based on server response times, L4 port, or TCP header information. To gain greater specificity, some network performance monitoring (NPM) and application performance monitoring (APM) vendors rely on offline packet-capture tools that require terabytes of storage to record even a small portion of production traffic, do not provide proactive early-warning alerts, and are slow to respond to queries. Read about the unique advantages of real-time L2–L7 analysis with the ExtraHop platform.


Supported protocols: HTTP/HTTPS, AMF, and SSL Analyze transactions to and from web servers, application servers, load balancers, and more. Monitor rich Internet applications (RIAs) based on Adobe Flash. Ensure that SSL certificates are up to date according to the latest standards and recommendations. Read more about Web analysis modules.


Supported protocols: ICA, CGP, and PCoIP Analyze every transaction for Citrix XenDesktop and XenApp and gain deep visibility into real-time user experience to quickly solve issues such as slow logins and load times. Read more about the Citrix VDI module.


Supported protocols: ActiveMQ, IBM MQ, CICS, and other HTTP-based protocols Answer questions about middleware performance with real-time, transaction-level details pulled off the wire.


Supported protocols: IBM DB2, IBM Informix, Microsoft SQL Server, MongoDB, MySQL, Oracle, PostgreSQL, and Sybase Monitor production database activity without agents or resource-intensive profilers. Examine transactions between application servers and databases as they occur. Read more about database analysis modules.


Supported protocols: iSCSI, CIFS, and NFS Illuminate the storage black box and gain the granular, real-time insight needed to tune networked storage performance, pinpoint problem files, audit storage usage, or select the right WAN optimization candidates for SAN and NAS systems. Read more about iSCSI, CIFS, and NFS analysis modules.

Industry-Specific Protocols

Supported protocols: HL7, FIX, and SMPP Optimize the performance of industry-specific applications with real-time metrics based on the analysis of protocols such as the HL7 messaging standard, Financial Information eXchange protocol (FIX), and Short Message Peer-to-Peer (SMPP) protocol. Read about the HL7 module.

Directory Services and AAA

Supported protocols: LDAP, RADIUS, and Diameter Gain deep insight into directory services for performance tuning, troubleshooting, and early warning of potential problems. Access information that is unavailable to other tools and absent in log files. Read more about directory services and AAA analysis modules.

Infrastructure Services

Supported protocols: DNS, FTP, ICMP, LLDP, memcache, MSRPC, and SMTP Ensure optimal performance from shared IT infrastructure services with real-time analysis of standard protocols for email messaging, domain-name services, FTP, and caching. Read more about the memcache analysis module.

VoIP and Video

Supported protocols: SIP, RTP, RTCP, RTCP XR, and DSCP Enable the Voice over IP (VoIP) protocol module to see a real-time breakdown of voice and multimedia activity for various VoIP protocols. Read more about the Enterprise VoIP and Video module.

Custom Protocols

Supported protocols: Any protocol based on TCP or UDP Program the ExtraHop platform’s real-time stream processor to analyze custom protocols or other protocols not natively supported, including DHCP, MSMQ, syslog, and others. Read more about universal payload analysis.