can you maybe link some ressources on how the protocol used can be detected? i did not know about this and would like to read into it some more :)