How do DPI boxes classify network traffic?

And what do they do with unknown traffic? Does the average box flag unknown protocols specifically?