North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: identifying application type of network traffic

  • From: Suresh Ramasubramanian
  • Date: Thu Dec 16 04:55:42 2004
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=hP9Oi7tKA4aSeyL0EYMReP3MvH9e8icJ3BG9t2XNljnOVLOqiLwc6hKyqRiPX4whzgQ2C+MBlhUpCZHR3WJT4e8hPDs7v3N1BlhjBs6PIp5DQT8sXfHcnSSwxsPjWwVt/zLwbJcbHeYOqAp+E+mXXsCer/gYvYcs+uFr9ZOfCl0=
On Thu, 16 Dec 2004 17:41:49 +0800 (CST), Joe Shen
<[email protected]> wrote:
> 
> My situation is not to apply QoS policy to those
> application but to get statistics of applications.
> 
> According to netflow records, the traffic across our
> egress interface has port number range from 11 to
> 65534 ,  there is record for port 0!
> So, what are those applications ?
> 

Passive fingerprinting is about the only thing that's going to tell
you, without actually sniffing the traffic that you're seeing.

Could be anything at all.

-- 
Suresh Ramasubramanian ([email protected])