Thanks for all your reply.
My situation is not to apply QoS policy to those
application but to get statistics of applications.
According to netflow records, the traffic across our
egress interface has port number range from 11 to
65534 , there is record for port 0!
So, what are those applications ?
if you run Cisco routers have a look at NBAR, it
might do what you want.