Table of Contents

Quick Reference: Protocols Supported in TrafficDirector Release 5.8.0a Using the Catalyst 6000 Network Analysis Module

This document contains quick reference information for using TrafficDirector Release 5.8.0a (on Windows NT and Solaris platforms) with the Catalyst 6000 Network Analysis Module (NAM).

The TrafficDirector application includes a default property file (nam6kprop.asd) that contains a set of protocols you can monitor with the NAM.

Table 1 describes the protocols supported on the NAM.

Note   Although omitted from the table, all protocol annotations begin with the string wildcard-. For example, an annotation of -ether2.ip.ah is fully represented as wildcard-ether2.ip.ah.

Table 1: Protocols Supported in TrafficDirector Release 5.8.0a

Protocol and Annotation (all preceded by the string "wildcard-")	Description/Reference (if applicable)
AARP -ether2.aarp	AppleTalk Address Resolution Protocol/AppleTalk Phase 2 Protocol Specification, document ADPA #C0144LL/A
AEP -ether2.atalk.aep	AppleTalk Echo Protocol
AH -ether2.ip.ah	IP Authentication Header/RFC 1826
ARP -ether2.arp	Address Resolution Protocol message (request or response); does not include Reverse ARP (RARP) packets which are counted separately./RFC 826
ATALK -ether2.atalk	AppleTalk Protocol/AppleTalk Phase 2 Protocol Specification, document ADPA #C0144LL/A
ATMP -ether2.ip.udp.atmp	Ascend Tunnel Management Protocol/RFC 2107
BGP -ether2.ip.tcp.bgp	Border Gateway Protocol/RFC 1267
BOOTPC -ether2.ip.udp.bootpc	Bootstrap Protocol Client Protocol; BOOTP server replies are sent to the BOOTP client using this destination port./RFC 951
BOOTPS -ether2.ip.udp.bootps	Bootstrap Protocol Server Protocol; BOOTP clients send requests (usually broadcast) to the bootps port./RFC 951
BRIDGE -llc.bridge	MAC Bridge Protocol Entity/Bridge Protocol defined in ISO/IEC 15802-3 (IEEE Std. 802.1D)
CATALYST -vsnap.cisco-snap.catalyst-sync	Synchronization protocol used between Cisco Catalyst switches
CCMAIL1 -llc.netbeui.ccmail	Lotus CC-mail Protocol
CCMAIL2 -ether2.ip.udp.ccmail	Lotus CC-mail Protocol
CCMAIL3 -ether2.ip.udp.nbt-data.ccmail	Lotus CC-mail Protocol
CCMAIL4 -ether2.ip.tcp.ccmail	Lotus CC-mail Protocol
CCMAIL5 -ether2.ip.tcp.nbt-data.ccmail	Lotus CC-mail Protocol
CDP -vsnap.cisco-snap.cdp	Cisco Discovery Protocol
CIPC -vsnap.cisco-snap.cipc	Cisco Inter-Process Communication
CGMP -vsnap.cisco-snap.cgmp	Cisco Group Management Protocol
CSTB -vsnap.cisco-snap.cstb	Cisco Spanning Tree BPDU
DBASE -ether2.ip.tcp.dbase	dBASE UNIX
DISL -vsnap.cisco-snap.disl	Dynamic Inter-Switch Link
DLSRPN -ether2.ip.tcp.dlsrpn	Data Link Switch (DLSw) Read Port Number/RFC 1795
DLSWPN -ether2.ip.tcp.dlswpn	Data Link Switch (DLSw) Write Port Number/RFC 1795
DOMAIN1 -ether2.ip.udp.domain	Domain Name Service Protocol; DNS may be transported by UDP (RFC768) or TCP (RFC793). If transport is UDP, DNS requests restricted to 512 bytes in length may be sent to this port./RFC 1035
DOMAIN2 -ether2.ip.tcp.domain	Domain Name Service Protocol; DNS may be transported by UDP (RFC768) or TCP (RFC793). If transport is UDP, DNS requests restricted to 512 bytes in length may be sent to this port./RFC 1035
DOOM -ether2.ip.tcp.doom	DOOM Game; Id Software
DRP -ether2.drp	DEC Routing Protocol/DECnet Digital Network Architecture Phase IV Routing Layer Functional Specification
EGP -ether2.ip.egp	Exterior Gateway Protocol (historical)/RFC 904
ESMP -vsnap.cisco-snap.esmp	Even Simpler Management Protocol
ESP -ether2.ip.esp	IP Encapsulating Security Payload/RFC 1827
EXEC -ether2.ip.tcp.exec	Remote Exec
FINGER -ether2.ip.tcp.finger	Finger User Information Protocol/RFC 1288
FTP -ether2.ip.tcp.ftp	File Transfer Protocol Control Port; an FTP client initiates an FTP control connection by sending FTP commands from user port (U) to this port./RFC 959
FTP-DATA -ether2.ip.tcp.ftp-data	File Transfer Protocol Data Port; FTP server process default data-connection port./RFC 959; See section 3.2 for details about FTP data connections.
GARP -llc.bridge.garp	General Attribute Registration Protocol/ISO/IEC 15802-3 (IEEE Std. 802.1D
GDP -ether2.ip.udp.gdp	Cisco Gateway Discovery Protocol
GOPHER -ether2.ip.tcp.gopher	Internet Gopher Protocol/RFC 1436
GRE -ether2.ip.gre	General Routing Encapsulation/ RFC 1701--GRE. RFC 1702--GRE over IPv4 networks.
H245 -ether2.ip.tcp.h245	H.323 control protocol/ ITU-T Recommendation H.245 Control Protocol for Multimedia Communication. ITU-T Recommendation H.225.0 Media Stream Packetization and Synchronization on Non-Guaranteed Quality of Service LANs. ITU-T Recommendation H.323 Visual Telephone Systems and Equipment for Local Area Networks which Provide a Non-Guaranteed Quality of Service
H323-GAT -ether2.ip.udp.h323-gatekeeper	H.323 protocol for Registration, Admission, and Status (RAS)/ ITU-T Recommendation H.225.0 Media Stream Packetization and Synchronization on Non-Guaranteed Quality of Service LANs. ITU-T Recommendation H.323 Visual Telephone Systems and Equipment for Local Area Networks which Provide a Non-Guaranteed Quality of Service.
HSRP -ether2.ip.udp.hsrp	Cisco Hot Standby Router Protocol/RFC 2281
HTTPS -ether2.ip.tcp.https	Secure HTTP; HTTP over TLS/SSL/ http://home.netscape.com/eng/ssl3/
ICMP -ether2.ip.icmp	Internet Message Control Protocol/RFC 792
IDP -ether2.idp	Xerox IPX/Xerox Corporation, Document XNSS 028112, 1981
IDRP -ether2.ip.idrp	Inter-Domain Routing Protocol/RFC 1745
IGMP -ether2.ip.igmp	Internet Group Management Protocol; used by IP hosts to report host group memberships to any immediately neighboring multicast routers./RFC1112, Appendix A
IGRP -ether2.ip.igrp	IGRP; Cisco routing protocol
IMAP3 -ether2.ip.tcp.imap3	Interactive Mail Access Protocol v3 (historical)./RFC 1203
INGRES-N -ether2.ip.tcp.print-srv	Network PostScript
IP -ether2.ip	Protocol identifiers for Internet Protocol (IP); may be encapsulated within itself, so more than one identifier may be present in a protocolDir ID string./RFC 791 Authoritative repository for PROTOCOL NUMBERS is at: ftp://ftp.isi.edu/in-notes/iana/assignments/protocol-numbers
IPIP -ether2.ip.ipip	IP-within-IP Encapsulation Protocol
IPIP4 -ether2.ip.ipip4	IP in IP Tunneling/ RFC 1853--IP in IP over Protocol 4. RFC 2003--IP Encapsulation within IP.
IPV6 -ether2.ipv6	Method for the Transmission of IPv6 Packets over Ethernet Networks/ RFC 2460--Internet Protocol, Version 6 (IPv6). RFC 2464--Method for the Transmission of IPv6 Packets over Ethernet Networks.
IPX -ether2.ipx	Novell IPX/Defined by Novell Corporation
IP-XNS-R -ether2.ip.udp.ip-xns-rip	XNS-RIP
IPX-TUNN -ether2.ip.udp.ipx-tunnel	Tunneling IPX Traffic through IP Networks/RFC 1234
IRC -ether2.ip.udp.irc	Internet Relay Chat Protocol/RFC 1459
ISO-TP4 -ether2.ip.iso-tp4	ISO Transport Protocol Specification/RFC 905; ISO DP 8073
ISP-IP -ether2.ip.ISO-IP	ISO Internet Protocol
KERBEROS -ether2.ip.udp.kerberos	Kerberos Network Authentication Service V5/RFC 1510
L2F -ether2.ip.udp.l2f	Cisco Layer Two Forwarding (Protocol)-- L2F/RFC 2341
L3SW -vsnap.cisco-snap.l3sw	Layer 3 IP and IPX switching
LAT -ether2.lat	DEC Local Area Transport Protocol
LDAP1 -ether2.ip.udp.ldap	Lightweight Directory Access Protocol/ RFC 2251--LDAP. RFC 1798-- Connection-less Lightweight X.500 Directory Access Protocol.
LDAP2 -ether2.ip.tcp.ldap	Lightweight Directory Access Protocol/ RFC 2251--LDAP. RFC 1798-- Connection-less Lightweight X.500 Directory Access Protocol.
LOGIN -ether2.ip.tcp.login	BSD Rlogin; remote login via telnet/RFC 1282
MOBILE -ether2.ip.mobile	Minimal Encapsulation within IP
MSCP -vsnap.cisco-snap.mscp	Multicast Shortcut Control Protocol
NBP -ether2.atalk.nbp	AppleTalk Name Binding Protocol
NBT-DA1 -ether2.ip.udp.nbt-data	NetBIOS-over-TCP datagram protocol/RFC 1002
NBT-DA2 -ether2.ip.tcp.nbt-data	NetBIOS-over-TCP datagram protocol/RFC 1002
NBT-SE1 -ether2.ip.udp.nbt-session	NetBIOS-over-TCP session protocol/RFC 1002
NBT-SE2 -ether2.ip.tcp.nbt-session	NetBIOS-over-TCP session protocol/RFC 1002
NBT-NA1 -ether2.ip.udp.nbt-name	NetBIOS-over-TCP name protocol/RFC 1002
NBT-NA2 -ether2.ip.tcp.nbt-name	NetBIOS-over-TCP name protocol/RFC 1002
NCP_NAM -ether2.ipx.nov-pep.ncp_nam	Netware Core Protocol
NDS -ether2.ipx.nov-pep.ncp.nds	Netware Directory Services sub-protocol
NETBEUI -llc.netbeui	LAN Manager NetBEUI protocol
NEWS1 -ether2.ip.udp.news	News
NEWS2 -ether2.ip.tcp.news	NewS
NHRP -ether2.ip.nhrp	NBMA Next Hop Resolution Protocol
NFS1 -ether2.ip.udp.sunrpc.nfs	Sun Network File System/RFC 1813
NFS2 -ether2.ip.tcp.sunrpc.nfs	Sun Network File System/RFC 1813
NLSP -ether2.ipx.nov-pep.nlsp	NLSP
NNTP -ether2.ip.tcp.nntp	Network News Transfer Protocol/RFC 977
NOTES1 -llc.netbeui.notes	Lotus Notes Protocol
NOTES2 -ether2.ipx.nov-pep.nov-sap.notes	Lotus Notes Protocol
NOTES3 -ether2.ip.udp.notes	Lotus Notes Protocol
NOTES4 -ether2.ip.udp.nbt-data.notes	Lotus Notes Protocol
NOTES5 -ether2.ip.tcp.notes	Lotus Notes Protocol
NOTES6 -ether2.ip.tcp.nbt-data.notes	Lotus Notes Protocol
NOV-PEP -ether2.ipx.nov-pep	Novell Packet Exchange Protocol. A null protocol layer as all IPX packets contain the relevant fields for this protocol. Defined so socket-based decoding has a point of attachment in the decode tree while allowing packet type-based decoding.
NOV-RIP -ether2.ipx.nov-rip	Novell Routing Information Protocol
NOV-SAP -ether2.ipx.nov-pep.nov-sap	Novell Service Advertising Protocol; binds applications on a particular host to an IPX/PEP or IPX/SPX socket number. Although not used as a transport protocol, is used to establish sessions between clients and servers. Is the only reliable method, besides well-known sockets, to determine the protocol running over a particular socket on a particular system./ A list of SAP service types can be found at: ftp://ftp.isi.edu/in-notes/iana/assignments/novell-sap-numbers
NOV-SPX -ether2.ipx.nov-spx	Novell Sequenced Packet Exchange Protocol; an extension of IPX/PEP (shares a common header).
NSP -ether2.drp.nsp	DEC Network Services Protocol/DECnet Digital Network Architecture Phase IV NSP Functional Specification
NTP -ether2.ip.udp.ntp	Network Time Protocol
OSPF -ether2.ip.ospf	Open Shortest Path First Interior GW Protocol (OSPFIGP)/ RFC 1583
PAGP -vsnap.cisco-snap.pagp	Port Aggregation Protocol
PNNI -ether2.ip.pnni	PNNI over IP
PORTMA2 -ether2.ip.tcp.sunrpc.portmapper	SUNRPC PORTMAPPER program; SUNRPC program used to locate the UDP/TCP ports on which other SUNRPC programs can be found./RFC 1057, Appendix A
POP31 -ether2.ip.udp.pop3	Post Office Protocol--Version 3. Clients establish connections with POP3 servers using this destination port number./RFC 1725
POP32 -ether2.ip.tcp.pop3	Post Office Protocol--Version 3. Clients establish connections with POP3 servers using this destination port number./RFC 1725
POP2 -ether2.ip.tcp.pop2	Post Office Protocol--Version 2. Clients establish connections with POP2 servers using this destination port number./RFC 937
PORTMA1 -ether2.ip.udp.sunrpc.portmapper	SUNRPC PORTMAPPER program; SUNRPC program used to locate the UDP/TCP ports on which other SUNRPC programs can be found./RFC 1057, Appendix A
PRINT-1 -ether2.ip.udp.print-srv	Network PostScript
PRINT-2 -ether2.ip.tcp.print-srv	Network PostScript
PRINTER -ether2.ip.tcp.printer	Printer Spooler
Q931 -ether2.ip.tcp.q931	H.323 call-signalling protocol/ ITU-T Recommendation Q.931 Digital Subscriber Signalling System No. 1 (DSS 1)--ISDN User-Network Interface Layer 3 Specification for Basic Call Control. ITU-T Recommendation H.225.0 Media Stream Packetization and Synchronization on Non-Guaranteed Quality of Service LANs. ITU-T Recommendation H.323 Visual Telephone Systems and Equipment for Local Area Networks which Provide a Non-Guaranteed Quality of Service.
RARP_NAM -ether2.rarp_nam	Reverse Address Resolution Protocol/RFC 903
RAUDIO -ether2.ip.tcp.raudio	Real Audio
RSVP1 -ether2.ip.rsvp	Resource Reservation Setup Protocol/RFC 2205
RSVP2 -ether2.ip.udp.rsvp	Resource Reservation Setup Protocol/RFC 2205
RSVP3 -ether2.ip.udp.rsvp	Resource Reservation Setup Protocol/RFC 2205
RTCP -ether2.ip.udp.rtcp	Real Time Control Protocol/RFC 1889
RTMP1 -ether2.atalk.rtmp	AppleTalk Routing Table Maintenance Protocol
RTMP2 -ether2.atalk.rtmp	AppleTalk Routing Table Maintenance Protocol
RTP -ether2.ip.udp.rtp	Real Time Protocol/RFC 1889
SCCP -ether2.ip.tcp.sccp	Skinny Client Control Protocol
SMB1 -llc.netbeui.smb	Microsoft Server Message Block Protocol
SMB2 -ether2.ipx.nov-pep.smb	Microsoft Server Message Block Protocol
SMB3 -ether2.ip.udp.nbt-data.smb	Microsoft Server Message Block Protocol
SMB4 -ether2.ip.tcp.nbt-data.smb	Microsoft Server Message Block Protocol
SMTP -ether2.ip.tcp.smtp	The Simple Mail Transfer Protocol; SMTP control and data messages are sent on this port./RFC 821
SNMP -ether2.ip.udp.snmp	Simple Network Management Protocol; includes SNMPv1 and SNMPv2 protocol versions; does not include SNMP trap packets./ RFC 1902--SNMP SMI. RFC 1905--SNMP protocol. RFC 1906--Transport mappings. RFC 1420--SNMP over IPX. RFC 1419--SNMP over AppleTalk.
SNMPTRAP -ether2.ip.udp.snmptrap	Simple Network Management Protocol Trap Port/ RFC 1902--SNMP SMI. RFC 1905--SNMP protocol. RFC 1906--Transport mappings. RFC 1420--SNMP over IPX. RFC 1419--SNMP over AppleTalk.
SQL*NET -ether2.ip.tcp.sql*net	Oracle SQL*NET
SQL-NET -ether2.ip.tcp.sql-net	SQL-NET
SQLSRV -ether2.ip.tcp.sqlsrv	SQL Services; protocol to talk to Oracle databases (historical).
SSH -ether2.ip.tcp.ssh	SSH Remote Login Protocol
SSTB -vsnap.cisco-snap.sstb	Shared Spanning Tree BPDU
STP -llc.bridge.stp	Bridge Spanning Tree Protocol/ISO/IEC 15802-3 (IEEE Std. 802.1D)
SUNRPC1 -ether2.ip.udp.sunrpc	SUN Remote Procedure Call Protocol; port mapper function requests are sent to this destination port./RFC 1831 The authoritative list of RPC Functions is identified by the URL: ftp://ftp.isi.edu/in-notes/iana/assignments/sun-rpc-numbers
SUNRPC2 -ether2.ip.tcp.sunrpc	SUN Remote Procedure Call Protocol; port mapper function requests are sent to this destination port./RFC 1831 Authoritative list of RPC functions is identified at: ftp://ftp.isi.edu/in-notes/iana/assignments/sun-rpc-numbers
SYSLOG -ether2.ip.udp.syslog	syslog
SYSTAT -ether2.ip.tcp.systat	Retrieves the active users list; debugging tool for TCP and UDP transports./RFC 866
TACACS -ether2.ip.tcp.tacacs	Login Host Protocol (TACACS)
TAGSWITC -vsnap.cisco-snap.tagswitch	Tag Switching
TCP -ether2.ip.tcp	Transmission Control Protocol/RFC 793 Authoritative repository for reserved and registered TCP port values is at: ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
TELNET -ether2.ip.tcp.telnet	Provides a general, bidirectional, eight-bit, byte-oriented communications facility that allows a standard method of interfacing terminal devices and terminal-oriented processes to each other. /RFC 854
TFTP_NAM -ether2.ip.udp.tftp_nam	Trivial File Transfer Protocol; only the first packet of each TFTP transaction is sent to port 69. If the tracksSessions attribute is set, packets for each TFTP transaction are attributed to tftp instead of the unregistered port numbers encoded in subsequent packets./ RFC 1350--TFTP Protocol (revision 2). RFC 1782--TFTP Option Extensions. RFC 1783--TFTP Blocksize Option. RFC 1784 --TFTP Timeout Interval and Transfer Size Options.
UDP -ether2.ip.udp	User Datagram Protocol/RFC 768 Authoritative repository for reserved and registered UDP port values is at: ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
VARP -ether2.vip.varp	Banyan Vines Address Resolution Protocol/Vines Protocol Definition--Part# 092093-001, Order# 003673
VDOLIVE -ether2.ip.tcp.vdolive	VDOLive
VICP -ether2.vip.vicp	Banyan Vines Internet Control Protocol/Vines Protocol Definition--Part# 092093-001, Order# 003673
VINES -ether2.ip.vines	VINES
VIP1 -ether2.vip	Banyan Vines Internet Protocol/Vines Protocol Definition-- Part# 092093-001, Order# 003673
VIP2 -ether2.vip	Banyan Vines Internet Protocol/Vines Protocol Definition-- Part# 092093-001, Order# 003673
VIPC -ether2.vip.vipc	Vines Protocol Definition--Part# 092093-001, Order# 003673
VRTP -ether2.vip.vrtp	Banyan Vines Routing Update Protocol/Vines Protocol Definition--Part# 092093-001, Order# 003673
VSI -vsnap.cisco-snap.vsi	Virtual Switch Interface
VSPP -ether2.vip.vspp	Banyan Vines Sequenced Packet Protocol/Vines Protocol Definition--Part# 092093-001, Order# 003673
VTP -vsnap.cisco-snap.vtp	VLAN Trunking Protocol/Cisco VLAN Trunk Protocol
WHO -ether2.ip.udp.who	rwho; shows logged-in users
WWW-HTTP -ether2.ip.tcp.www-http	Hypertext Transfer Protocol/ RFC 1945--Hypertext Transfer Protocol (HTTP/1.0). RFC 2068--Hypertext Transfer Protocol (HTTP/1.1). RFC 2069--Extension to HTTP: Digest Access Authentication. RFC 2109--HTTP State Management Mechanism. RFC 2145--Use and interpretation of HTTP version numbers.
XDMCP -ether2.ip.udp.xdmcp	X Display Manager Control Protocol
XNS-ECHO -ether2.idp.xns-echo	XNS echo protocol
XNS-ERRO -ether2.idp.xns-error	XNS error-handler protocol
XNS-PEP -ether2.idp.xns-pep	XNS Packet Exchange Protocol
XNS-RIP -ether2.idp.xns-rip	Routing Information Protocol
XNS-SPP -ether2.idp.xns-spp	Sequenced Packet Protocol
XWIN1 -ether2.ip.udp.xwin	X Windows Protocol
XWIN2 -ether2.ip.tcp.xwin	X Windows Protocol
ZIP -ether2.atalk.zip	AppleTalk Zone Information Protocol

Posted: Tue Aug 1 16:29:52 PDT 2000
Copyright 1989-2000©Cisco Systems Inc.