"Other" protocols in NAM-2

[a.gesse]

Hello,

protocol statistics on NAM-2 shows protocol as "other",

what could it mean ?

Some protocols are being recognized, like smb, xwin, http, icmp etc..

Some are shown just by port# like udp-4141 or tcp 4120.

And also there is "other".

Could it be non-ip traffic ?

Any input would be appreciated

Thanks,

Alex

[amolrajgure]

Hi,

First 100 unknown protocols are shown with the protocol number like udp-4141 or tcs 4120. If it exceeds then it will be shown under "others".

Regards

Amol Rajgure

[David Stanford]

If you want to be able to see more details on these ports which aren't well know ports you can do the following on the NAM:

By going to Setup-->Monitor-->Protocol directory you can define this protocol and

can give it a name that you recognize.

Once the number of unknown protocols becomes > 100 , they are all grouped

together and displayed under "other" category.

In 3.1 and 3.3 releases, the number of unknown protocols monitored is 100.

This has been increased to a maximum of 500 (user definable) in 3.4 .

If you are unsure about what traffic is contained in the other group your best option is

to do a data capture using NAM to find out what exactly are these 'other' protocols are in

reality and then add them in the Protocol list for the NAM.

Next time it will show up in the proper category you have defined.

[a.gesse]

Thanks,

I captured the traffic under question,

and what i figured out is that "other" trafic is RTP traffic (RTP/UDP).

Thank you,

Alex