question for show ip cache flow

[gongya001]

R2#show ip cache flow | b Protocol
Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec)
--------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow     /Flow
TCP-Telnet          12      0.0         1    50      0.0       0.0       8.4
TCP-other           20      0.0         4    57      0.0       2.6       7.0
UDP-other          127      0.0         5   292      0.2      14.1      15.3
ICMP               102      0.0         1   181      0.0       3.4      15.5
IP-other             2      0.0       194    80      0.1    1795.3       5.3
Total:             263      0.0         5   203      0.4      22.0      14.4

where is TCP-Telnet defined to be displayed ?  I made a ssh connection, but I did not see TCP-SSH.

thanks !!

[Alex Pfeil]

This is from routing-bits.

https://www.google.com/amp/s/routing-bits.com/2009/07/14/using-netflow/amp/

• SrcP & DstP – Displays the Source and Destination TCP or UDP Port Numbers in HEX.    From the output:
  • 0089 in hex = 137 in decimal which is Microsoft Netbios-NS
  • 0050 in hex = 80 in decimal which is HTTP

Decimal 22 should be 0016 in hex. 

Please rate helpful posts.

[gongya001]

thanks!

I did not express it clearly. What I like to know what Protocols are predefined by Cisco, such as TCP-Telnet,TCP-FTP and etc, Can we add something else, such as TCP-SSH ?

[Alex Pfeil · Accepted solution]

I do not believe you can add any further protocols at the command line. If you are exporting your netflow data to another program, you should be able to add the protocols in that software.

Please mark helpful posts.

[gongya001]

thanks for clarification.