<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: identifying application type of network traffic</TITLE>
</HEAD>
<BODY>
<P> <FONT SIZE=2>I believe NBAR stats are accessible via SNMP, so you can use MRTG to graph application utilization.</FONT>
</P>
<P><FONT SIZE=2><A HREF="http://vermeer.org/display_doc.php?doc_id=6" TARGET="_blank">http://vermeer.org/display_doc.php?doc_id=6</A></FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>___________________________________________________________________</FONT>
</P>
<P><FONT SIZE=2>Thanks,</FONT>
<BR><FONT SIZE=2>Rick Cheung</FONT>
</P>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: owner-nanog@merit.edu [<A HREF="mailto:owner-nanog@merit.edu">mailto:owner-nanog@merit.edu</A>]On Behalf Of</FONT>
<BR><FONT SIZE=2>Adam Atkinson</FONT>
<BR><FONT SIZE=2>Sent: Thursday, December 16, 2004 11:17 AM</FONT>
<BR><FONT SIZE=2>To: NANGO</FONT>
<BR><FONT SIZE=2>Subject: RE: identifying application type of network traffic</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>> Currently, I use (protocol, port_number) as indicator</FONT>
<BR><FONT SIZE=2>> of application. Referring to rfc on wellknown protocol</FONT>
<BR><FONT SIZE=2>> and port allocation, I can only identity about 50% of</FONT>
<BR><FONT SIZE=2>> traffic type.</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> Is there a complete (protocol, port_number) list ? or</FONT>
<BR><FONT SIZE=2>> is there a better way to identify application type</FONT>
<BR><FONT SIZE=2>> based on netflow data?</FONT>
</P>
<P><FONT SIZE=2>Cisco's "Network Based Application Recognition" can recognise quite</FONT>
<BR><FONT SIZE=2>a few things, particularly a fair few p2p applications. It looks</FONT>
<BR><FONT SIZE=2>at the actual contents of packets, not just the port numbers.</FONT>
</P>
</BODY>
</HTML>
<table><tr><td bgcolor=#ffffff><font color=#000000>This message, including any attachments, contains confidential information intended for a specific<br>
individual and purpose and is protected by law. If you are not the intended recipient, please contact<br>
sender immediately by reply e-mail and destroy all copies. <br>
You are hereby notified that any disclosure, copying, or distribution of this message, or the taking <br>
of any action based on it, is strictly prohibited.<br>
<br>
WARNING: Computer viruses can be transmitted via email. The recipient should check this email<br>
and any attachments for the presence of viruses. The sender accepts no liability for any damage <br>
caused by any virus transmitted by this email. E-mail transmission cannot be guaranteed <br>
to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive <br>
late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors <br>
or omissions in the contents of this message, which arise as a result of e-mail transmission.<br>
</font></td></tr></table>