PacketWise supports a variety of applications, protocols, and services
for traffic classification. The traffic discovery process can detect many
of them and automatically create traffic classes. You also can create
classes manually via the browser interface or the command-line interface,
and specify the services and protocols listed in the table shown below.
Several services in the following table are listed as "service groups"
(also referred to as service aggregates). A service group encompasses
a combination of services. When you create a traffic class for a service
group, multiple matching rules will be created to handle the traffic types
represented by the group. For example, DLS (Data Link Switch) is a service
group for both the read and write port numbers. When you create a DLS
traffic class, two matching rules will be defined to cover both ports.
Since a service group represents a combination of matching rules, you
cannot specify port numbers for service groups (for example, VDOPhone).
The following services and protocols can be discovered and automatically
classified, unless otherwise noted. You can check the Packeteer
customer support web site periodically to see if any new classification
plug-ins have been developed. If you have an application that does
not use a well-known port number, you can specify the port number instead
of the service name in the traffic class' matching rule definition.
If you are using the command-line interface to define traffic classes
and matching rules, use the class
services command to list the valid command-line service entries.
The applications and protocols that can be classified by PacketWise 6.0
are grouped into the following categories:
|
Class Name
|
Description
|
| Client/Server |
| CVSpserver |
CVS (Concurrent Versions System) pserver |
| CVSup |
CVS-Optimized Network File
Distribution System |
| FIX |
Financial Information eXchange
|
| FoldingAtHome |
Distributed Computation Screen
Saver (foldingathome.stanford.edu) |
| INFOC-RTMS |
Attachmate INFOConnect Response
Time Monitor System |
| INT-1 |
Unisys Interactive 1 (2200,
ClearPath IX) |
| MATIP |
Mapping of Airline Traffic
over IP (RFC 2351) service group |
| MATIP-A |
MATIP Type A |
| MATIP-B |
MATIP Type B |
| MeetingMaker |
Meeting Maker |
| NetIQ |
NetIQ AppManager |
| OpenConnect-JCP |
OpenConnect JCP clients (browser-based
access to host applications) |
| PEPGate |
Attachmate PEP Gateway (Unisys
2200) |
| Unisys-TCPA |
Unisys TCPA (A Series, ClearPath
LX, NX) |
| Content Delivery |
| Apple-iTunes |
Apple iTunes - Music Downloads (available
in v6.0.2 and above) |
| Ariel-419 |
Infotrieve document delivery system (on
port 419); available in 6.0.2 and above |
| Ariel-422 |
Infotrieve document delivery system (on
port 422); available in 6.0.2 and above |
| BackWeb |
Push technology. Polite BackWeb
has an agent on the client to prevent BackWeb background traffic from
interfering with other IP network applications. |
| Chaincast |
Chaincast Flexible Content Delivery System |
| EntryPoint |
EntryPoint push traffic (formerly
PointCast) |
| Kontiki |
Kontiki - Content Distribution Network |
| Marimba |
Marimba Castanet push traffic |
| NewsStand |
NewsStand-Reader - publication subscription
service |
| PointCast |
See EntryPoint |
| Webshots |
Webshots Desktop (photo screensaver application) |
| Database and Enterprise Resource
Planning (ERP) Software |
| BAAN |
Baan enterprise management
system |
| FileMaker |
FileMaker Pro database service
group |
| FileMaker-DB |
FileMaker database access |
| FileMaker-R |
FileMaker network host response |
| JDENet |
J. D. Edwards OneWorld JDENet
protocol |
| MSSQL |
Microsoft Structured Query
Language service group |
| MSSQL-Mon |
SQL monitoring traffic |
| MSSQL-Server |
SQL server traffic |
| Oracle |
Oracle database application
service group |
| Oracle-netv1 |
Oracle SQL*Net v1-based traffic
(v6, Oracle7)
Note: Oracle-netv1 traffic is no longer autodiscovered by PacketWise;
however, you can create this class manually. |
| Oracle-netv2 |
Oracle SQL*Net v2/Net8-based
traffic (Oracle7, 8, 8i, 9i) |
| Oracle-JVM-SSL |
Oracle JVM (IIOP) traffic over SSL |
| Oracle-SSL |
Oracle database over SSL |
| OracleClient |
Oracle Java client (Webforms) |
| OracleEM |
Oracle Enterprise Manager |
| OracleEM1 |
Oracle Enterprise Manager-1 |
| OracleEM2 |
Oracle Enterprise Manager-2 |
| PostgreSQL |
PostgreSQL freeware SQL database (available
in 6.0.2 and above) |
| Progress |
Progress database traffic |
| SAP |
SAP - Systemanalyse und Programmentwicklung
(Services, Applications, and Products in Data Processing) |
| SAP.MCAST.NET |
Multicast Service Announcement
Protocol: 224.2.127.254 |
| Directory Services |
| CRS |
Microsoft Content Replication
Service |
| DHCP |
Dynamic Host Configuration
Protocol service group |
| DHCP-C |
DHCP or BootP Client |
| DHCP-S |
DHCP or BootP Server |
| DNS |
Domain Name Service |
| Finger |
Finger User Information Protocol |
| Ident |
Identification Protocol |
| Kerberos |
Network Authentication Service
(ticket granting and checking) |
| LDAP |
Lightweight Directory Access
Protocol service group |
| LDAP-Clear |
LDAP |
| LDAP-Secure |
Secure LDAP |
| RADIUS |
Service group for Remote Authentication
Dial-in User Service |
| RADIUS-Acct |
RADIUS accounting service |
| RADIUS-Auth |
RADIUS authentication service |
| RRP |
NSI Registry Registrar Protocol |
| rwho |
UNIX remote who (rwho) command;
reports current users for all hosts on the local network |
| SSDP |
Simple Service Discovery Protocol |
| TACACS |
Login host protocol |
| WHOIS |
WHOIS service (application
that identifies the owner of a domain name) |
| WINS |
Windows Internet Name Service |
| Email and Collaboration |
| Biff |
UNIX new mail notification |
| ccMail |
Lotus cc:Mail email application
|
| DCOM |
Microsoft Distributed Component
Object Model |
| Groupwise |
Novell Groupwise messaging
system service group |
| Groupwise-MTA |
Novell Groupwise Message Transfer
Agent |
| Groupwise-POA |
Novell Groupwise Post Office
Agent |
| IMAP |
Interactive Mail Access Protocol
service group |
| IMAP-Clear |
Interactive Mail Access Protocol |
| IMAP-Secure |
Secure Interactive Mail Access
Protocol |
| LotusNotes |
Groupware for collaborative
communication |
| MSSQ |
Microsoft Message Queue service
group |
| MSSQ-CQ |
MSSQ Client Queue |
| MSSQ-IS |
MSSQ Information Store |
| MSSQ-Ping |
MSSQ Ping Mechanism |
| MSSQ-QMT |
MSSQ Queue Manager Traffic |
| MSSQ-SQ |
MSSQ Server Queue |
| OSI |
Open System Interconnection
(OSI) over TCP (RFC2126), e.g., Microsoft Exchange X.400 |
| POP3 |
Mail reception (Post Office
Protocol) service group |
| POP3-Clear |
Post Office Protocol for e-mail |
| POP3-Kerberos |
Secure Mail Reception
(Post Office Protocol with Kerberos) |
| POP3-Secure |
Secure Post Office Protocol
for e-mail |
| SMTP |
Simple Mail Transport Protocol
(mail transmission) service group |
| SMTP-Clear |
Mail transmission |
| SMTP-Secure |
Secure mail transmission with
SSL |
| File Server |
| AFS |
Andrew File System service
group |
| AFS-FS |
Andrew File System file server |
| AFS-VL |
Andrew File System volume location
database |
| CIFS-TCP |
Common Internet File System
(SMB) over TCP |
| CU-Dev |
Fujitsu Device Control (CU-DEV
on TCP/IP) |
| lockd |
NFS file lock daemon |
| Microsoft-ds |
Microsoft Common Internet File System /
Server Message Block (SMB) protocol |
| NetBIOS-IP |
NetBIOS over IP service group
(NetBIOS is a program that allows applications on different computers
to communicate within a LAN) |
| NetBIOS-IP- DGM |
NetBIOS Datagram Service |
| NetBIOS-IP-NS |
NetBIOS Name Service |
| NetBIOS-IP-SSN |
NetBIOS Session Service |
| NFS |
UNIX Network File System (both
TCP and UDP) |
| NW5-CMD |
Netware 5 - Compatibility Mode
Drivers service group |
| NW5-CMD-TCP |
Netware 5 - Compatibility Mode
Drivers over TCP |
| NW5-CMD-UDP |
Netware 5 - Compatibility Mode
Drivers over UDP |
| NW5-NCP |
Netware 5 Core Protocol |
| rsync |
UNIX remote file synchronization protocol |
| Games |
| AsheronsCall |
Asheron's Call network game
by Microsoft |
| Battle.net |
Blizzard Entertainment online
game service, including Diablo II and Warcraft III |
| Doom |
Doom game |
| Everquest |
classified as SonyOnline |
| Half-Life |
Service group for Half-Life
network games by Valve and Sierra Studios (including Opposing Forces,
CounterStrike, and Team Fortress) |
| Half-Life-TCP |
Half-Life chat and server |
| Half-Life-UDP |
Half-Life request and game
play |
| Kali |
Gaming protocol |
| LucasArts |
Jedi Knight II: Jedi Outcast |
| MSN-Zone |
Microsoft Network Gaming Zone,
including Age of Empires |
| MSN-Zone-TCP |
Microsoft Network Gaming Zone
— TCP traffic |
| MSN-Zone-UDP |
Microsoft Network Gaming Zone
— UDPtraffic |
| Mythic |
Mythic Entertainment games (Dark Age of
Camelot) |
| Quake |
Quake game service group |
| Quake-A |
Quake (port 26000) |
| Quake-B |
Quake (port 27500) |
| Quake-II-TCP |
Quake II over TCP |
| Quake-II-UDP |
Quake II over UDP |
| Quake-III |
Quake III Arena |
| SonyOnline |
Games by Sony Online Entertainment
(e.g., EverQuest) |
| Tribes |
Starsiege Tribes network game
by Sierra Studios (includes Tribes 2) |
| Unreal |
Unreal Tournament PC Game |
| Unreal-Browser |
Unreal Tournament — Browser |
| Unreal-Ping |
Unreal Tournament — Info
Ping |
| Unreal-Play |
Unreal Tournament — Game
Play |
| Unreal-Status |
Unreal Tournament — Status
Request |
| YahooGames |
Yahoo! Games |
|
Healthcare
For details on managing this type of traffic, see Common
Performance-Management Strategies for Healthcare Environments.
|
| DICOM |
Digital Imaging and Communications in Medicine |
| HL7 |
Health Level Seven |
| Host Access |
| ATSTCP |
Galileo 2915 Terminal and Printer
Traffic |
| Attachmate-GW |
Attachmate INFOConnect-e-Vantage
Gateway |
| Persona |
Persoft Persona service group |
| Persona-Clear |
Persoft Persona non-encrypted
(port 1917) |
| Persona-Secure |
Persoft Persona secure SSL |
| SHARESUDP |
ALC over UDP for EDS/Shares
(TPF) |
| SMTBF |
Attachmate Lantern Gateway |
| tn3270 |
Telnet for IBM 3270 terminals
and 3270 emulation |
| tn5250 |
IBM 5250 terminal traffic over
Telnet |
| Internet Protocols |
| ActiveX |
Microsoft object-oriented program
technologies and tools |
| FTP |
File Transfer Protocol service
group classification — both FTP commands and data |
| FTP-Cmd-Clear |
File Transfer Protocol command
channel |
| FTP-Cmd-Secure |
Secure FTP command channel
(SSL) |
| FTP-Data-Clear |
FTP data transport channel |
| FTP-Data-Secure |
Secure FTP data transfer channel
(SSL) |
| Gopher |
Search application |
| HTTP |
Web traffic — Hypertext
Transport Protocol |
| HTTP-Tunnel |
HTTP Tunnel Traffic; classifies traffic (such as KaZaA, Morpheus,
and ICQ) that is sent through a tunnel on port 80 using the http-tunnel.com
or socks2http (totalrc.net) gateway
Note: Some people may use these HTTP tunnels to bypass security
and circumnavigate controls on peer-to-peer traffic. With the availability
of the HTTP-Tunnel service, appropriate policies can be applied
to traffic using these tunnels.
|
| IP |
Internet Protocol (not autodiscovered) |
| IPIP |
IP-within-IP Encapsulation Protocol |
| IPv6 |
Internet Protocol version 6
(IPng) |
| NNTP |
Usenet NetNews Transfer Protocol |
| NNTP-Clear |
Clear Text Usenet newsgroup
transmission |
| NNTP-Secure |
Secure Usenet newsgroup transmission |
| TCP |
Transmission Control Protocol
— all Internet TCP traffic (not autodiscovered) |
| TFTP |
Trivial File Transfer Protocol |
| UDP |
User Datagram Protocol —
all Internet UDP traffic (not autodiscovered) |
| UUCP |
Unix-to-Unix Copy Protocol |
| Legacy LAN or Non-IP |
| AFP |
AppleTalk Filing Protocol (AppleShare
IP) |
| AppleTalk |
Apple network protocol |
| DECnet |
Digital Equipment Corporation
network protocol |
| FNA |
Fujitsu Network Architecture
(a variant of SNA) |
| FNAonTCP |
FNA on TCP service group |
| FNAonTCP-1 |
Transport Independent Convergence
(FNA on TCP port 492) |
| FNAonTCP-2 |
Transport Independent Convergence
(FNA on TCP port 493) |
| IPX |
Novell networking protocol |
| LAT |
DEC Printer Support (Local
Area Transport) |
| MOP-DL |
Maintenance Operations Protocol
Dump/Load |
| MOP-RC |
Maintenance Operations Protocol
Remote Console |
| NetBEUI |
NetBEUI — Network protocol
for PCs |
| PPPoE |
Point-to-Point Protocol over Ethernet |
| PPPoE-Control |
Point-to-Point Protocol over Ethernet -
Control |
| PPPoE-Data |
Point-to-Point Protocol over Ethernet -
Data |
| SLP |
Service Location Protocol |
| SNA |
IBM Systems Network Architecture
protocol |
|
Messaging
For details on managing this type of traffic, see Control
Instant Messaging.
|
| AOL-AIM-ICQ |
AOL 8.0 - AOL Instant Messenger
& ICQ service group |
| AOL-IM |
AOL - Instant Messenger &
ICQ Client-Server |
| ICQ-2000 |
ICQ - ICQ2000 Client to Client Protocol |
| AOL-IM-Talk |
AOL Instant Messaging Point-to-Point Talk |
| AOL-IM-IMAGE |
AOL Instant Messaging Point-to-Point Chat |
| AOL-IM-File |
AOL Instant Messaging Point-to-Point File
Transfer |
| AOL-ISP |
AOL 8.0 ISP client traffic |
| AOL-Default |
Unknown AOL traffic |
| IRC |
Internet Relay Chat service
group |
| IRC-Chat |
Internet Relay Chat — General chat
traffic |
| IRC-DCC |
Internet Relay Chat — Direct Client-to-Client
traffic |
| IRC-Secure |
Secure Internet Relay Chat
with SSL (port 994) |
| IRC-Servers |
Internet Relay Chat — Server-to-Server
traffic |
| IRC-194 |
IRC on port 194 |
| IRC-6665 |
IRC on port 6665 (server to
server) |
| IRC-6667 |
IRC on port 6667 (client to
server) |
| Lotus-IM |
IBM Lotus Instant Messaging (available in v6.0.2 and above)
Note: Some Instant Messenger traffic is classified into
pre-existing services: Broadcast Service will classify into RTSP,
Meeting Data into T.120, and Meeting Updates into LotusNotes. In
order to track and manage Lotus messaging traffic most effectively,
you may want to group Lotus-IM, RTSP, T.120, and LotusNotes into
a single folder.
|
| Lotus-IM-CommC |
IBM Lotus Instant Messaging - Tunnelled
Community Service |
| Lotus-IM-CommS |
IBM Lotus Instant Messaging - Community
Service |
| Lotus-IM-MtgS |
IBM Lotus Instant Messaging - Meeting Service |
| Lotus-IM-SrvrEx |
IBM Lotus Instant Messaging - Server Exchange |
| MSN-Messenger |
MSN Messenger Chat Service |
| Windows-POPUP |
Windows Messenger Delivery (RPC); classifies
Windows Messenger spam pop-up windows that were sent out with applications
such as DirectAdvertising (available in v6.0.2 and above) |
| YahooMsg |
Yahoo! Messenger |
|
Middleware
|
| CORBA |
CORBA Internet Inter-ORB Protocol
(IIOP) |
| JavaRMI |
Java 1.1.4 TCP Remote Method
Invocation service group |
| JavaRMI- Act |
Java 1.1.4 TCP Remote Method
Invocation — Activate |
| JavaRMI - Call |
Java 1.1.4 TCP Remote Method
Invocation — Call |
| JavaRMI-Reg |
Java 1.1.4 TCP Remote Method
Invocation — Registry |
| SmartSockets |
Tibco SmartSockets traffic (available in
v6.0.2 and above) |
| SunRPC |
Sun Remote Procedure Calls
(UDP) service group |
| SunRPC-Call |
Sun Remote Procedure Calls |
| SunRPC-PortMap |
Sun Remote Procedure Calls
Port Mapper |
|
Multimedia
For details on managing this type of traffic, see Control
Streaming Media.
|
| MPEG-Audio |
Moving Picture Experts Group
— Audio Streams |
| MPEG-Video |
Moving Picture Experts Group
— Video Streams |
| QuickTime |
QuickTime over HTTP |
| Real |
Service group for Real Networks
streaming audio/video application |
| Real-BackChan |
Real Networks multicast back-channel
traffic |
| Real-Encoder |
Real Networks encoder traffic
over HTTP or RTSP |
| Real-Multicast |
Real Networks real data transport
UDP multicast traffic |
| Real-Player |
Real Networks Player traffic
over HTTP or RTSP |
| Real-RDT-TCP |
Real Networks Real Data transport
TCP traffic |
| Real-RDT-UDP |
Real Networks Real Data transport
UDP traffic |
| Real-RTP-TCP |
Real Networks Real-time Transport
Protocol TCP traffic |
| Real-RTP-UDP |
Real Networks Real-time Transport
Protocol UDP traffic |
| Real-Web |
Real Networks traffic over
HTTP or RTSP |
| RTP-B |
Real-Time Protocol (Broadcast) |
| RTP-I |
Real-Time Protocol (Interactive) |
| RTSP |
Real-Time Streaming Protocol |
| Shoutcast |
Shoutcast streaming audio |
| ST2 |
Internet Stream protocol, version
2 |
| StreamWorks |
StreamWorks Audio and Video |
| VideoFrame |
Citrix VideoFrame service group |
| VideoFrame-TCP |
Citrix VideoFrame control (TCP) |
| VideoFrame-UDP |
Citrix VideoFrame streaming
data (UDP) |
| WebEx |
WebEx Real-Time Communications
Platform |
| WinampStream |
Winamp streaming traffic (available in 6.0.2
and above) |
| WinMedia |
Microsoft Windows Media service
group |
| WinMedia-Mcast |
Windows Media Streaming over
UDP Multicast |
| WinMedia-MSBD |
Windows Media Encoder |
| WinMedia-TCP |
Microsoft Windows Media (NetShow)
Streaming over TCP |
| WinMedia-UDP |
Windows Media Streaming over
UDP Unicast |
| Network Management |
| CiscoDiscovery |
Cisco Router Discovery Protocol
|
| Day-Time |
Day-Time (port 13) |
| Echo |
Echo Protocol |
| ICMP |
Internet Control Message Protocol |
| IPComp |
IP Payload Compression Protocol (IPComp);
a protocol to reduce the size of IP packets |
| NTP |
Network Time Protocol service
group |
| RSVP |
Resource Reservation Protocol |
| SMS |
Microsoft SMS 2.0 — Service
Pack 2 or later (For classification of SMS pre-SP2, download the SMS
plug-in. See Download
Plug-ins.) |
| SMS-Auth |
SMS authentication |
| SMS-Chat |
SMS remote chat |
| SMS-File |
SMS file transfer |
| SMS-RC |
SMS remote control |
| SNMP |
Simple Network Management Protocol
service group |
| SNMP-Mon |
SNMP monitoring traffic |
| SNMP-Trap |
SNMP event notification |
| Syslog |
UNIX system logging |
| TimeServer |
Time Server (port 37) |
|
Peer-to-Peer (P2P) Applications
For details on controlling this type of traffic, see Control
Peer-2-Peer Downloads.
Note: Traffic for TCP handshakes will be classified in the
Default class while a Peer-to-Peer application is looking for hosts
that are online. Traffic will get classified into the appropriate
P2P class once the data downloads begin.
|
| Aimster |
Aimster file sharing application
service group |
| Aimster-Cmd |
Aimster command traffic |
| Aimster-Data |
Aimster file transfer traffic
(upload/download) |
| Aimster-Init |
Aimster initial connection
to redirector |
| Audiogalaxy |
Audiogalaxy Satellite File
Sharing Community (including Rhapsody) |
| BitTorrent |
Bit Torrent Distributed File Sharing System (available
in v6.0.1 and above) |
| Blubster |
Blubster File Sharing Application |
| DirectConnect |
NeoModus Direct Connect File
Sharing Community |
| eDonkey |
eDonkey2000 File Sharing Application
service group (in v6.0.1, also includes eMule and Overnet traffic) |
| eDonkey-TCP |
eDonkey2000 data traffic |
| eDonkey-Ping |
eDonkey2000 host location ping
requests |
| FileRogue |
FileRogue File Sharing Application |
| Filetopia |
Filetopia community traffic (available in
v6.0.2 and above) |
| Furthurnet |
Furthur Network Peer to Peer File Sharing |
| Gnutella |
File sharing and distribution
network service group (a variety of look-alike clients get classified
as Gnutella, for example Mutella, Shareaza, Xolox, Ares, Acquisition,
Phex, Qtraxmax, and Morpheus). |
| Gnutella-Cmd |
Gnutella command and query
traffic |
| Gnutella-Download |
Gnutella file transfer from the outside
to the inside |
| Gnutella-Init |
Gnutella initial connection
|
| Gnutella-Upload |
Gnutella file transfer from the inside to
the outside |
| Groove |
Groove Peer-to-Peer Application |
| Hotline |
Hotline File Sharing Community
service group |
| Hotline-TCP |
Hotline File Sharing Community
— TCP |
| Hotline-UDP |
Hotline File Sharing Community
— UDP |
| iMesh |
User-to-User Media Exchange.
|
| KaZaA |
KaZaA File Sharing Application
service group
Note: MusicCity Morpheus also classifies as KaZaA |
| KaZaA-Cmd |
KaZaA command traffic |
| KaZaA-Download |
KaZaA file transfer from the outside to
the inside |
| KaZaA-Query |
KaZaA peer server query |
| KaZaA-Upload |
KaZaA file transfer from the inside to the
outside |
| Napster |
Napster Music Community service
group (a variety of look-alike clients get classified as Napster,
for example Gnapster, AudioGnone, Lopster, and Spotlight).
Note: Napster tunneled through SOCKS is also detected and classified
as Napster traffic. |
| Napster-Cmd |
Napster command traffic |
| Napster-Data |
Napster data traffic (upload/download) |
| Napster-Init |
Napster initial connection
to napster.com |
| PeerEnabler |
Altnet over KaZaA (v2.5) and PeerEnabler
traffic (available in v6.0.2 and above) |
| ScourExchange |
ScourExchange File Sharing
Community. |
| Scour-Web |
Scour Exchange — web traffic |
| Scour-CSC |
Scour Exchange — CSC protoco |
| Tripnosis |
Tripnosis File Sharing Application |
| Print Traffic |
| IPP |
Internet Printing Protocol |
| Printer |
UNIX line printer spooler (LPR) |
| tn3287 |
IBM 3270 print traffic (TN
3287 extensions) |
| tn5250p |
IBM 5250 print traffic over
Telnet |
| Routing Protocols |
| AURP |
AppleTalk Update-based Routing
Protocol |
| BGP |
Border Gateway Protocol |
| CBT |
Core-Based Trees (Multicast
Routing Protocol) |
| DRP |
DECnet Routing Protocol |
| EGP |
Exterior Gateway
Protocol (network routing information) |
| EIGRP |
Enhanced Interior Gateway Routing
Protocol |
| IGMP |
Internet Group Management Protocol |
| IGP |
Interior Gateway Protocol |
| OSPF |
Open Shortest-Path First network
routing information |
| PIM |
Protocol-Independent Multicast
Routing Protocol |
| RARP |
Reverse Address Resolution
Protocol |
| RIP |
Routing Information Protocol
(UDP) |
| SpanningTree |
IEEE802.1 Bridge Spanning Tree |
| Security Protocols |
| DLS |
SNA over TCP transport —
Service group classification of Data Link Switch traffic, both read
and write port numbers |
| DLS-RPN |
Data Link Switch Read Port
Number |
| DLS-WPN |
Data Link Switch Write Port
Number |
| DPA |
Microsoft Distributed Password
Authentication |
| GRE |
General Routing Encapsulation |
| IPSec |
IP Security Encapsulation service
group |
| IPSec-AH |
IPSec Authentication Header |
| IPSec-ESP |
IPSec Encapsulating Security
Payload |
| ISAKMP |
ISAKMP/IKE key exchange |
| L2TP |
Layer 2 Tunneling Protocol
for VPN connections (UDP encapsulation) |
| PPTP |
Point-to-Point Tunneling Protocol |
| RC5DES |
DES (data encryption standard)
encryption-cracking application |
| SOCKS |
SOCKSv4 and SOCKSv5 proxy protocol |
| SSH |
Secure Shell remote login protocol |
| SSL |
Secure Sockets Layer protocol
(secure Web traffic) |
| SSL-Shell |
SSL Secure Shell remote login
protocol |
| Session |
| GoToMyPC |
GoToMyPC HTTP traffic (available in 6.0.2
and above) |
| pcAnywhere |
Remote management collaboration
tool service group |
| pcAnywhere-D |
pcAnywhere data |
| pcAnywhere-OD |
pcAnywhere data (old port) |
| pcAnywhere-OS |
pcAnywhere status (old port) |
| pcAnywhere-S |
pcAnywhere status |
| rexec |
UNIX remote execution protocol |
| rlogin |
Remote login |
| rsh |
UNIX remote shell command |
| Telnet |
Telnet terminal service group |
| Telnet-Clear |
Network terminal protocol |
| Telnet-Secure |
Secure Network terminal protocol
|
| Timbuktu |
Timbuktu Pro service group
(networked remote control) |
| Timbuktu-Ctl |
Timbuktu Control Channel |
| Timbuktu-HS |
Timbuktu Handshaking |
| Timbuktu-Obs |
Timbuktu Observe Channel |
| Timbuktu-Snd |
Timbuktu Send Channel |
| Timbuktu-Xch |
Timbuktu Exchange Channel |
| VNC |
Virtual Network Computing |
| XWindows |
X11 Windowing agent (UDP) |
| XWindows-DM |
XWindows Display Manager (XDMCP) |
| XWindows-S |
XWindows Server |
| Thin Client or Server
Based |
| Citrix |
Citrix connectivity application
service group. Enables any type of client to access applications across
any type of network connection. |
| Citrix-ICA |
Citrix Independent Computer
Architecture (ICA) |
| Citrix-SB |
Citrix Server Browsing (UDP) |
| CitrixIMA |
Citrix Integrated Management
Architecture service group |
| CitrixIMA-CMC |
Citrix IMA Management Console |
| CitrixIMA-Svr |
Citrix IMA Server to Server |
| RDP |
Remote Desktop Protocol —
Microsoft Windows Terminal Server |
|
Voice Over IP (VOIP)
For details on managing this type of traffic, see Manage
Voice and Video Sessions.
|
| CiscoCTI |
Cisco Computer Telephony Interface |
| Clarent-CC |
Clarent Voice over IP Command
Center |
| Clarent-Complex |
Clarent complex traffic |
| Clarent-Mgmt |
Clarent management traffic |
| Clarent-Voice-S |
Clarent voice traffic (simple) |
| CUSeeMe |
Video chat services application
service group |
| CUSeeMe-AV |
Video chat services audio/video |
| CUSeeMe-CC |
Video chat services connection
control |
| CUSeeMe-CE |
Video chat services connection
establishment |
| Dialpad |
Dialpad Internet Telephone service group |
| Dialpad-Ctrl |
Dialpad Internet Telephone — control
traffic |
| Dialpad-Stream |
Dialpad Internet Telephone — RTP stream |
| H.323 |
Internet telephony standard
service group |
| H.323-GKD |
H.323 Gatekeeper Discovery |
| H.323-H.245 |
H.323 call control |
| H.323-Q.931 |
H.323 call setup |
| H.323-RAS |
H.323 Gatekeeper Control (Registration,
Admission, and Status) |
| I-Phone |
Vocaltec Internet telephone
service |
| MCK-Signaling |
MCK Signaling (not autodiscovered) |
| MCK-Voice |
MCK Voice (not autodiscovered) |
| Megaco |
Media Gateway Control (H.248) |
| Megaco-Text |
Media Gateway Control (H.248) Text |
| Megaco-Bin |
Media Gateway Control (H.248) Binary |
| MGCP |
Media Gateway Control Protocol |
| MGCP-Gateway |
Media Gateway Control Protocol Gateway |
| MGCP-CallAgent |
Media Gateway Control Protocol CallAgent |
| MGCP-KpAlive |
Media Gateway Control Protocol KeepAlive
Connection |
| Micom-VIP |
Micom Voice over IP (V/IP) |
| Net2Phone |
Net2Phone CommCenter |
| Net2Phone-TCP |
Net2Phone Call Setup and Control |
| Net2Phone-UDP |
Net2Phone Internet Phone Calls |
| RTCP-B |
Real-Time Control Protocol
(Broadcast) |
| RTCP-I |
Real-Time Control Protocol
(Interactive) |
SIP
|
Session Initiation Protocol |
| SIP-UDP |
Session Initiation Protocol - UDP |
| SIP-TCP |
Session Initiation Protocol - TCP |
| Skinny |
Cisco's Skinny Client Control Protocol (SCCP)
Note: This service is not autodiscovered, but you can create
a class manually for this service.
|
| T.120 |
Collaboration application |
| VDOPhone |
Service group for Internet
telephone service group (not autodiscovered) |
| VDOPhone-a |
Internet telephone application
— TCP port 1 (not autodiscovered) |
| VDOPhone-b |
Internet telephone application
— TCP port 2 (not autodiscovered) |
| VDOPhone-UDP |
VDOPhone real-time media (not
autodiscovered) |
