Understanding Netflow source and destination port output

[Roger De Couto]

Hi Guys,

Just wondering if anyone would be able to help me understanding what the source and destination port translate to per the below netflow output?

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Gi0/0   134.170.140.11  Gi0/1         229.65.42.245   11 0035 D886     1
Gi0/0    202.58.206.112  Gi0/1         229.65.42.248   06 D8D5 01BB     4

I was hoping to see well known and unknown port numbers, like 25, 110, etc - so not sure what the above mean?

Cheers,

Roger

[Aaron Drydale · Accepted solution]

Cisco will sometimes display hex conversions of decimal numbers (to conserve space or make the output cleaner from what I've seen). 

Hex	Decimal
0035	53 (DNS)
D886	55430
D8D5	55509
01BB	443 (HTTPS)

[Roger De Couto]

Thanks Aaron.