Classifying traffic that is considered unclassified

In Flow Monitor, for traffic to be considered "unclassified," both the port from which the data is sent, or the source port, and the receiving, or destination port, are not classified in the Flow Ports dialog. If either the source or destination port is classified, the traffic is associated with the application of the classified port.

You can classify traffic that is considered unclassified by classifying the source and/or destination ports over which the traffic is transmitted via the Flow Unclassified Traffic dialog.

To classify a source port:

Navigate to the Unclassified Traffic dialog (Flow Monitor > Unclassified Traffic). The Unclassified Traffic dialog appears.
Use the list boxes at the top of the dialog to manipulate the port data displayed in this dialog.
- Select an Interface over which unclassified traffic is transmitting.
- Select a Traffic direction (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
- Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the Group by box.
To begin monitoring a source port, select the port from the list, then click Classify Src Port.

To classify a destination port:

Navigate to the Unclassified Traffic dialog (Flow Monitor > Unclassified Traffic). The Unclassified Traffic dialog appears.
Use the list boxes at the top of the dialog to manipulate the port data displayed in this dialog.
- Select an Interface over which unclassified traffic is transmitting.
- Select a Traffic direction (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
- Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the Group by box.
To begin monitoring a destination port, select the port from the list, then click Classify Dst Port.