Classifying traffic that is considered unclassified

In Flow Monitor, for traffic to be considered "unclassified," both the port from which the data is sent, or the source port, and the receiving, or destination port, must not be classified in the Flow Ports dialog. If either the source or destination port is classified, the traffic is associated with the application of the classified port.

You can classify traffic that is considered unclassified by classifying the source and/or destination ports over which the traffic is transmitted via the Flow Unclassified Traffic dialog.

To classify a source port:

  1. From any workspace view or report in the web interface, select GO. The GO menu appears.
  2. If the Flow Monitor section is not visible, click Flow Monitor. The Flow section of the GO menu appears.
  3. Select Configure > Flow Unclassified Traffic. The Flow Unclassified Traffic dialog appears.
  4. Use the list fields at the top of the dialog to manipulate the port data displayed in this dialog.
    • Select an Interface over which unclassified traffic is transmitting.
    • Select a Traffic direction (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
    • Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the Group by field.
  5. To begin monitoring a source port, select the port from the list, then click Classify Src Port.

To classify a destination port:

  1. From any workspace view or report in the web interface, select GO. The GO menu appears.
  2. If the Flow Monitor section is not visible, click Flow Monitor. The Flow section of the GO menu appears.
  3. Select Configure > Flow Unclassified Traffic. The Flow Unclassified Traffic dialog appears.
  4. Use the list fields at the top of the dialog to manipulate the port data displayed in this dialog.
    • Select an Interface over which unclassified traffic is transmitting.
    • Select a Traffic direction (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
    • Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the Group by field.
  5. To begin monitoring a destination port, select the port from the list, then click Classify Dst Port.