RE: identifying application type of network traffic

Thanks for all your reply.

My situation is not to apply QoS policy to those
application but to get statistics of applications.

According to netflow records, the traffic across our
egress interface has port number range from 11 to
65534 , there is record for port 0!
So, what are those applications ?




if you run Cisco routers have a look at NBAR, it
might do what you want.

Passive fingerprinting is about the only thing that's going to tell
you, without actually sniffing the traffic that you're seeing.

Could be anything at all.