Classifying traffic that is considered unclassified
In Flow Monitor, for traffic to be considered "unclassified," both the port from which the data is sent, or the source port, and the receiving, or destination port, must not be classified in the Flow Ports dialog. If either the source or destination port is classified, the traffic is associated with the application of the classified port.
You can classify traffic that is considered unclassified by classifying the source and/or destination ports over which the traffic is transmitted via the Flow Unclassified Traffic dialog.
To classify a source port:
- From any workspace view or report in the web interface, select . The GO menu appears.
- If the Flow Monitor section is not visible, click . The Flow section of the GO menu appears.
- Select . The Flow Unclassified Traffic dialog appears.
- Use the list fields at the top of the dialog to manipulate the port data displayed in this dialog.
- Select an over which unclassified traffic is transmitting.
- Select a (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
- Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the field.
- To begin monitoring a source port, select the port from the list, then click .
To classify a destination port:
- From any workspace view or report in the web interface, select . The GO menu appears.
- If the Flow Monitor section is not visible, click . The Flow section of the GO menu appears.
- Select . The Flow Unclassified Traffic dialog appears.
- Use the list fields at the top of the dialog to manipulate the port data displayed in this dialog.
- Select an over which unclassified traffic is transmitting.
- Select a (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
- Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the field.
- To begin monitoring a destination port, select the port from the list, then click .