On Thu 20 Nov, steven hessing wrote:
The other day we started using Cisco netflow accounting software together with IP flow export feature of recent Cisco IOS versions.
What we found was that although we put a lot of protocols in the nfknown.protocols file of the accounting software (everywthing we could find in the /etc/services file of Solaris and Linux), there is still a lot of traffic under TCP-Other and UDP-Other. This indicated that traffic is going over our network using ports that the software doesn't know about.
This could for example be Real-audio, Cuseeme, Pointcast, Backweb etc traffic. Unfortunately, I don't have a list of these newer protocols together with their port numbers. Has anyone compiled such a list? There's the Assigned numbers RFC but the last version of it is RFC 1700 of October 1994.
Try, ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers It doesn't give a date it was last updated - but the list is bloody long so should do you ;-) Cheers, aid -- Adrian J Bool | mailto:aid@u-net.net Network Operations | http://www.noc.u-net.net/ U-NET Ltd, UK | tel://44.1925.484461/