Classifying traffic that is considered unclassified

In NetFlow Monitor, for traffic to be considered "unclassified," both the port from which the data is sent, or the source port, and the receiving, or destination port, must not be classified in the NetFlow Ports dialog. If either the source or destination port is classified, the traffic is associated with the application of the classified port.

You can classify traffic that is considered unclassified by classifying the source and/or destination ports over which the traffic is transmitted via the NetFlow Unclassified Traffic dialog.

To classify a source port:

1. From any workspace view or report in the web interface, select GO. The GO menu appears.
2. If the NetFlow section is not visible, click NetFlow. The NetFlow section of the GO menu appears.
3. Select Configure > NetFlow Unclassified Traffic. The NetFlow Unclassified Traffic dialog appears.
4. Use the list fields at the top of the dialog to manipulate the port data displayed in this dialog.
   • Select an Interface over which unclassified traffic is transmitting.
   • Select a Traffic direction (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
   • Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the Group by field.
5. To begin monitoring a source port, select the port from the list, then click Classify Src Port.

To classify a destination port:

1. From any workspace view or report in the web interface, select GO. The GO menu appears.
2. If the NetFlow section is not visible, click NetFlow. The NetFlow section of the GO menu appears.
3. Select Configure > NetFlow Unclassified Traffic. The NetFlow Unclassified Traffic dialog appears.
4. Use the list fields at the top of the dialog to manipulate the port data displayed in this dialog.
   • Select an Interface over which unclassified traffic is transmitting.
   • Select a Traffic direction (Inbound, Outbound, Inbound and Outbound, Bounce) in which the unclassified traffic is traveling.
   • Select a filter (Conversations; Source IP, Port; Source Port; Destination IP, Port; Destination Port) by which to group the unclassified traffic from the Group by field.
5. To begin monitoring a destination port, select the port from the list, then click Classify Dst Port.