DPI operates by capturing packets of data as they pass through a network checkpoint. These packets are then compared against a set of predefined criteria, which could include specific keywords, types of data, or patterns. If a packet matches the criteria, it can be flagged, blocked, or allowed to proceed.