[76565] in North American Network Operators' Group
RE: identifying application type of network traffic
daemon@ATHENA.MIT.EDU (Adam Atkinson)
Thu Dec 16 11:17:28 2004
Date: Thu, 16 Dec 2004 16:16:34 -0000
From: "Adam Atkinson" <Adam.Atkinson@damovo.com>
To: "NANGO" <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
> Currently, I use (protocol, port_number) as indicator
> of application. Referring to rfc on wellknown protocol
> and port allocation, I can only identity about 50% of
> traffic type.
>=20
> Is there a complete (protocol, port_number) list ? or
> is there a better way to identify application type
> based on netflow data?
Cisco's "Network Based Application Recognition" can recognise quite
a few things, particularly a fair few p2p applications. It looks
at the actual contents of packets, not just the port numbers.
