Encapsulation Header - IP Protocol
This page provides IP protocol information on the Encapsulation Header IP protocol (ENCAP) detected by the Netify DPI engine. Please see the IP protocol catalog for information on other IP protocols.
ENCAP is the Encapsulation Header, a general-purpose protocol for wrapping one network-layer packet inside another for routing through intermediate networks.
IP Protocol Details
- Name
- Encapsulation Header
- Abbreviation
- ENCAP
- Status
- Inactive
- IANA Number
- 98
- IANA Keyword
- ENCAP
- Network Policy
- Drop
- Reference
- Encapsulation Header
IP Protocol Status - Inactive
ENCAP was documented in RFC 1241 (1991), and is a niche encapsulation scheme, largely superseded by GRE and IP-in-IP.
IP Protocol Network Policy
IP protocol #98 - Encapsulation Header - is typically dropped by edge routers and firewalls. Advanced threat actors and malware families can use these non-standard IP protocol numbers for lateral movement (east-west communication) inside internal networks.