Table Of Contents
Protocol Reference
About Protocols
Generic Protocols
Signature-Based Protocols
IP Protocols
Port-Based Protocols
Protocol Reference
This appendix describes the protocols supported by the Cisco APA Engine.
About Protocols
Protocols are divided into four groups:
•Generic Protocols .
•Signature-Based Protocols .
•IP Protocols .
•Port-Based Protocols .
Generic Protocols
The three generic protocols (IP, TCP, and UDP) serve as default containers for classifying transactions of the relevant type (IP, TCP, or UDP) that were not classified as belonging to a more specific protocol.
A transaction is classified as belonging to one of the generic protocols if it meets both the following conditions:
•
•
Table B-1 Generic Protocols
Protocol Name
ID
Description
Generic IP
10
Any non-TCP/UDP transaction where the related IP protocol is not specifically mapped to a service.
Generic TCP
0
Any TCP transaction that does not match any signature-based protocol, and where the related port-based protocol (if it exists) is not specifically mapped to a service1.
Generic UDP
1
Any UDP transaction that does not match any signature-based protocol, and where the related port-based protocol (if it exists) is not specifically mapped to a service.
Signature-Based Protocols
This section lists the signature-based protocols added by Cisco APA. A transaction is classified as belonging to one of the signature-based protocols if it is carried on the protocol's well-known port or matches the protocol's signature.
Table B-2 Signature-Based Protocols
Protocol Name
ID
TCP Ports
UDP Ports
ActiveX
4007
AIM
714
AntsP2P
113
Audio over HTTP
1041
BaiBao
43
Baidu Movie
1043
Behavioral P2P
1044
Behavioral Upload/Download1
127
Binary over HTTP
1042
BitTorrent
24
6881-6889
Blackboard
4011
Citrix
4001
Club Box
1038
CUWorld
117
DHCP Sniff
33
DHT
106
DICOM
4009
Dijjer
120
DingoTel
42
DirectConnect
19
411-413
DNS
933
eDonkey
18
4661-4665, 4672-4673, 4711, 5662, 5773, 5783
4661-4665, 4672-4673, 4711, 5662, 5773, 5783
eMuleEncrypted
105
Entropy
125
Exosee
121
FastTrack KaZaA File Transfer
14
FastTrack KaZaA Networking
13
1214
Feidian
1037
Filetopia
31
FIX
4010
Flash
1033
Flash MySpace
1035
Flash Yahoo
1036
Flash YouTube
1034
Freenet
107
FTP
4
21
Furthur
123
Generic Non-Established TCP2
126
Gnutella File Transfer
12
Gnutella Networking
11
6346-6349
Google Talk
1030
GoogleEarth
118
guruguru
66
H323
28
1720
HL7
4008
Hopster
115
Hotline
20
HTTP Browsing
2
80, 8080
HTTP Tunnel
55
ICQ
119
ICQ VoIP
110
imap
59
143
143
IRC
62
iTunes
30
Jabber
116
Joost
1046
Konspire2b
1031
6085
6085
Kontiki
124
kuro
67
LOCO
5123
Manolito
22
MGCP
38
2427, 2727
MMS
6
1755
Mobile MMS
46
MS Push Mail
1048
MS_Exchange
4004
MSN Messenger VoIP
1054
MSN_Messenger
883
MSSQL
4006
Mute
34
Napster
32
NeoNet
37
NNTP
15
119
NodeZilla
35
NTP
54
Oracle
4000
PeerEnabler
122
Poco
51
POP3
9
110
PPLive
44
PPStream
49
Primus
108
PTT Winphoria
61
QQ
52
QQ-Live
1032
radius
738
Rodi
111
RTP
57
RTSP Streaming
5
554, 1554, 7070
Share
27
SIP
23
5060-5061
5060-5061
Skinny
41
Skype
25
Sling
112
SMTP
8
25
soribada
69
Soulseek
29
SSDP
53
STUN
114
tftp
60
69
69
Thunder
50
TVAnts
109
UC
48
Video over HTTP
1040
Voice_Yahoo
45
v-share
71
Warez/FileCroc
39
Waste
36
WinMX/OpenNap
16
6257, 6699
6257
Winny
17
7742-7745, 7773
Yahoo Messenger
40
5000-5001
5000-5001
Yahoo Messenger VoIP
45
33033
Yahoo VoIP over SIP
1039
Zattoo
1047
IP Protocols
Table B-3 lists the IP protocols added by Cisco APA.
Table B-3 IP Protocols
IP Protocol Number
Protocol Name
Protocol ID
0
HOPOPT
756
1
ICMP
757
2
IGMP
758
3
GGP
759
4
IP
760
5
ST
761
6
Generic TCP
0
7
CBT
762
8
EGP
763
9
IGP
764
10
BBN-RCC-MON
765
11
NVP-II
766
12
PUP
767
13
ARGUS
768
14
EMCON
769
15
XNET
770
16
CHAOS
771
17
Generic UDP
1
18
MUX
772
19
DCN-MEAS
773
20
HMP
774
21
PRM
775
22
XNS-IDP
776
23
TRUNK-1
777
24
TRUNK-2
778
25
LEAF-1
779
26
LEAF-2
780
27
RDP
781
28
IRTP
782
29
ISO-TP4
783
30
NETBLT
784
31
MFE-NSP
785
32
MERIT-INP
786
33
SEP
787
34
3PC
788
35
IDPR
789
36
XTP
790
37
DDP
791
38
IDPR-CMTP
792
39
TP++
793
40
IL
794
41
IPv6-Over-IPv4
795
42
SDRP
796
43
IPv6-Route
797
44
IPv6-Frag
798
45
IDRP
799
46
RSVP
800
47
GRE
801
48
MHRP
802
49
BNA
803
50
ESP
804
51
AH
805
52
I-NLSP
806
53
SWIPE
807
54
NARP
808
55
MOBILE
809
56
TLSP
810
57
SKIP
811
58
IPv6-ICMP
812
59
IPv6-NoNxt
813
60
IPv6-Opts
814
61
any host internal protocol
815
62
CFTP
816
63
any local network
817
64
SAT-EXPAK
818
65
KRYPTOLAN
819
66
RVD
820
67
IPPC
821
68
any distributed file system
822
69
SAT-MON
823
70
VISA
824
71
IPCV
825
72
CPNX
826
73
CPHB
827
74
WSN
828
75
PVP
829
76
BR-SAT-MON
830
77
SUN-ND
831
78
WB-MON
832
79
WB-EXPAK
833
80
ISO-IP
834
81
VMTP
835
82
SECURE-VMTP
836
83
VINES
837
84
TTP
838
85
NSFNET-IGP
839
86
DGP
840
87
TCF
841
88
EIGRP
842
89
OSPFIGP
843
90
Sprite-RPC
844
91
LARP
845
92
MTP
846
93
AX.25
847
94
IPIP
848
95
MICP
849
96
SCC-SP
850
97
ETHERIP
851
98
ENCAP
852
99
any private encryption scheme
853
100
GMTP
854
101
IFMP
855
102
PNNI
856
103
PIM
857
104
ARIS
858
105
SCPS
859
106
QNX
860
107
A/N
861
108
IPComp
862
109
SNP
863
110
Compaq-Peer
864
111
IPX-in-IP
865
112
VRRP
866
113
PGM
867
114
any 0-hop protocol
868
115
L2TP
869
116
DDX
870
117
IATP
871
118
STP
872
119
SRP
873
120
UTI
874
121
SMP
875
122
SM
876
123
PTP
877
124
ISIS
878
125
FIRE
879
126
CRTP
880
Port-Based Protocols
Table B-4 lists the TCP/UDP port-based protocols defined in the Cisco APA.
Table B-4 Port-Based Protocols
Protocol Name
ID
TCP Ports
UDP Ports
3com-amp3
538
629
629
3com-tsmux
977
106
106
914c/g
204
211
211
9pfs
479
564
564
acap
582
674
674
acas
939
62
62
accessbuilder
662
888
888
accessnetwork
607
699
699
aci
180
187
187
acmaint_dbd
646
774
acmaint_transd
648
775
acp
513
599
599
acr-nema
975
104
104
aed-512
142
149
149
agentx
609
705
705
aim
714
5190-5193
alpes
377
463
463
aminet
558
649
649
ampr-rcmd
373
459
459
Anarchy
1004
7013, 7500-7501
7013, 7500-7501
anet
205
212
212
ansanotify
986
116
116
ansatrader
993
124
124
aodv
563
654
654
apertus-ldp
457
539
539
appleqtc
372
458
458
appleqtcsrvr
463
545
545
applix
680
999
arcisdms
230
262
262
ariel1
334
419
419
ariel2
336
421
421
ariel3
337
422
422
arns
300
384
384
asa
302
386
386
asa-appl-proto
416
502
502
Asherons Call
1005
9000-9013
9000-9013
asia
535
626
626
asipregistry
595
687
687
asip-webadmin
247
311
311
as-servermap
364
449
449
at-3
196
203
203
at-5
198
205
205
at-7
200
207
207
at-8
201
208
208
at-echo
197
204
204
at-nbp
195
202
202
at-rtmp
194
201
201
at-zis
199
206
206
audionews
984
114
114
audit
175
182
182
auditd
928
48
48
aurora-cmgr
280
364
364
aurp
303
387
387
auth
983
113
113
aux_bus_shunt
532
623
623
avian
400
486
486
banyan-rpc
482
567
567
banyan-vip
487
573
573
bdp
495
581
581
bftp
145
152
152
bgmp
232
264
264
bgp
172
179
179
bgs-nsi
396
482
482
bh611
270
354
354
bhevent
273
357
357
bhfhs
224
248
248
bhmds
246
310
310
biff
427
512
Black And White
1006
2611-2612
bl-idm
135
142
142
bmpp
541
632
632
bnet
330
415
415
bootpc
945
68
68
bootps
944
67
67
borland-dsj
611
707
707
busboy
677
998
cableport-ax
239
282
282
cab-protocol
509
595
595
cadlock
640
770
770
CAIlic
209
216
216
cal
502
588
588
cdc
216
223
223
cfdptkt
989
120
120
chargen
908
19
19
chshell
477
562
562
cimplex
581
673
673
cisco-fna
999
130
130
cisco-sys
1001
132
132
cisco-tdp
614
711
711
cisco-tna
1000
131
131
citadel
418
504
504
citrixadmin
699
2513
2513
citrixima
698
2512
2512
citriximaclient
701
2598
2598
citrix-rtmp
700
2897
2897
cl/1
165
172
172
clearcase
287
371
371
cloanto-net-1
272
356
356
cmip-agent
157
164
164
cmip-man
156
163
163
coauthor
693
1529
1529
codaauth2
286
370
370
collaborator
531
622
622
commerce
460
542
542
compressnet
900
2-3
2-3
comscm
352
437
437
con
631
759
759
concert
652
786
786
conference
449
531
531
connendp
601
693
693
contentserver
369
454
454
corba-iiop
591
683
683
corba-iiop-ssl
592
684
684
corerjd
241
284
284
Counter strike
1007
27020-27039
1200, 27000-27014
courier
448
530
530
covia
941
64
64
creativepartnr
370
455
455
creativeserver
368
453
453
crs
421
507
507
cryptoadmin
533
624
624
csi-sgwp
264
348
348
csnet-ns
976
105
105
ctf
957
84
84
custix
446
528
528
cvc_hostd
357
442
442
cybercash
468
551
551
cycleserv
635
763
763
cycleserv2
642
772
772
dantz
411
497
497
Dark Reign
1008
26214
26214
dasp
354
439
439
datasurfsrv
375
461
461
datasurfsrvsec
376
462
462
datex-asn
271
355
355
daytime
905
13
13
dbase
210
217
217
dcp
964
93
93
dctp
583
675
675
ddm-dfm
362
447
447
ddm-rdb
361
446
446
ddm-ssl
363
448
448
dec_dlm
534
625
625
decap
318
403
403
decauth
252
316
316
decbsrv
493
579
579
decladebug
325
410
410
decvms-sysmgt
356
441
441
dei-icda
527
618
618
Delta Force
1025
3100, 3999
3100, 3999, 3568, 3569
deos
952
76
76
device
655
801
801
deviceshare
469
552
552
dhcp-failover
556
647
647
dhcp-failover2
658
847
847
dhcpv6-client
464
546
546
dhcpv6-server
465
547
547
Diablo
1009
6113-6119
6113-6119
digital-evm
528
619
619
digital-vrc
380
466
466
direct
218
242
242
directplay
716
2234
2234
directplay8
717
6073
6073
directv-catlg
723
3337
3337
directv-soft
721
3335
3335
directv-tick
722
3336
3336
directv-web
720
3334
3334
Discard
903
9
9
disclose
575
667
667
dixie
967
96
96
dls
190
197
197
dls-mon
191
198
198
dn6-nlm-aud
188
195
195
dn6-smm-red
189
196
196
dna-cml
351
436
436
dnsix
961
90
90
doom
574
666
666
dpsi
251
315
315
dsETOS
294
378
378
dsfgw
353
438
438
dsp
917
33
33
dsp3270
222
246
246
dtag-ste-sb
268
352
352
dtk
281
365
365
dwr
553
644
644
Echo
902
7
7
efs
437
520
elcsd
608
704
704
Elite Force
1010
26000, 27500
embl-ndt
310
394
394
emfis-cntl
134
141
141
emfis-data
133
140
140
entomb
647
775
entrust-aaas
588
680
680
entrust-aams
589
681
681
entrust-ash
613
710
710
entrust-kmsh
612
709
709
entrust-sps
549
640
640
entrusttime
245
309
309
epmap
128
135
135
erpc
990
121
121
escp-ip
530
621
621
esro-emsdp
551
642
642
esro-gen
227
259
259
eudora-set
506
592
592
exec
426
512
eyelink
503
589
589
F16
1011
3862, 3863
F22 Simulator (lightning 3)
1012
3874-3875, 4533, 4534
fatserv
263
347
347
fcp
424
510
510
finger
953
79
79
flexlm
620
744
744
fln-spx
214
221
221
fsgs
743
6112
6112
ftp-agent
488
574
574
ftp-data
909
20
20
ftps
669
990
990
ftps-data
668
989
989
fujitsu-dev
621
747
747
fxp-1
242
286
286
gacp
183
190
190
game-search
751
29001
game-spy
755
6500, 28900, 29000
6515, 27900
garcon
679
999
gdomap
456
538
538
genie
317
402
402
genrad-mux
169
176
176
ggf-ncp
586
678
678
ginad
543
634
634
GLT Poliane
882
1201
go-login
405
491
491
gopher
947
70
70
gppitnp
974
103
103
graphics
921
41
41
groove
715
2492
2492
gss-http
402
488
488
gss-xlicen
997
128
128
gtp-user
740
2152
2152
ha-cluster
602
694
694
halflife
747
27015
hap
569
661
661
hassle
291
375
375
hcp-wismar
594
686
686
hdap
231
263
263
hello-port
561
652
652
hems
144
151
151
heretic2
749
28910
Hexen
1013
26900
hmmp-ind
521
612
612
hmmp-op
522
613
613
hostname
972
101
101
hosts2-ns
954
81
81
hp-alarm-mgr
299
383
383
hp-collector
297
381
381
hp-managed-node
298
382
382
http-alt
505
591
591
http-mgmt
237
280
280
http-rpc-epmap
507
593
593
https
358
443
hybrid-pop
387
473
473
hyper-g
333
418
418
hyperwave-isp
600
692
692
iafdbase
394
480
480
iafserver
393
479
479
iasd
347
432
432
ibm-app
301
385
385
ibm-db2
441
523
523
ibprotocol
737
6714
6714
icad-el
340
425
425
iclcnet_svinfo
661
887
887
iclcnet-locate
660
886
886
ideafarm-catch
666
903
903
ideafarm-chat
665
902
902
idfp
466
549
549
ieee-mms
560
651
651
ieee-mms-ssl
603
695
695
iiop
453
535
535
imap3
213
220
220
imap4-ssl
499
585
585
imaps
672
993
993
imsp
321
406
406
inbusiness
220
244
244
infoseek
329
414
414
ingres-net
1003
134
134
intecourier
409
495
495
integra-sme
398
484
484
intrinsa
417
503
503
ipcd
490
576
576
ipcserver
514
600
600
ipdd
492
578
578
ipp
540
631
631
ipx
206
213
213
IRC
187
194
194
ircs
673
994
994
irc-serv
447
529
529
is99c
295
379
379
is99s
296
380
380
isakmp
414
500
500
isi-gl
935
55
55
iso-ill
413
499
499
iso-ip
140
147
147
iso-tp0
139
146
146
iso-tsap
973
102
102
iso-tsap-c2
314
399
399
itm-mcell-s
656
828
828
jargon
141
148
148
kali
718
2213
2213
k-block
243
287
287
kerberos
959
88
88
kerberos-adm
623
749
749
kerberos-iv
625
750
keyserver
498
584
584
KingPin
752
31510
31510
kis
179
186
186
klogin
461
543
543
knet-cmp
150
157
157
Kohan Immortal Sovereigns
1014
3855, 17437
3855, 17437
Konspire2b
1031
6085
6085
kpasswd
378
464
464
kryptolan
313
398
398
kshell
462
544
544
l2tp
742
1701
1701
la-maint
931
51
51
lanserver
546
637
637
ldap
305
389
ldaps
545
636
636
ldp
555
646
646
legent-1
289
373
373
legent-2
290
374
374
link
221
245
245
ljk-login
386
472
472
locus-con
996
127
127
locus-map
994
125
125
login
428
513
mac-srvr-admin
568
660
660
magenta-logic
249
313
313
mailbox-lm
419
505
505
mailq
167
174
174
maitrd
676
997
997
masqdialer
217
224
224
matip-type-a
266
350
350
matip-type-b
267
351
351
mcidas
982
112
112
mcns-sec
547
638
638
mdbs_daemon
654
800
800
mdc-portmapper
593
685
685
mecomm
576
668
668
meregister
577
669
669
meta5
309
393
393
metagram
970
99
99
meter
485
570-571
570-571
mfcobol
958
86
86
mftp
265
349
349
micom-pfs
404
490
490
micromuse-lm
702
1534
1534
microsoft-ds
360
445
445
mit-dov
962
91
91
mit-ml-dev
956
83, 85
83, 85
mm-admin
452
534
534
mobileip-agent
349
434
434
mobilip-mn
350
435
435
mondex
385
471
471
monitor
476
561
561
mortgageware
283
367
367
Motorhead
1015
16000, 16010-16030
16000, 16010-16030
mpm
925
45
45
mpm-flags
924
44
44
mpm-snd
926
46
46
mpp
211
218
218
mptn
312
397
397
mrm
587
679
679
msdp
548
639
639
msexch-routing
599
691
691
msft-gc
687
3268
3268
msft-gc-ssl
688
3269
3269
msg-auth
916
31
31
msg-icp
913
29
29
MSN Messenger
883
1863
1863
msnp
713
1836
1836
ms-olap
686
2382-2383, 2393-2394
2382-2383, 2393-2394
msp
907
18
18
ms-rome
484
569
569
ms-shuttle
483
568
568
ms-sql-m
685
1434
1434
ms-sql-s
684
1433
1433
ms-term-services
689
3389
3389
multiling-http
650
777
777
multiplex
164
171
171
mumps
181
188
188
mylex-mapd
381
467
467
mysql
711
3306
3306
Myth
1016
3453
3453
name
922
42
42
namp
160
167
167
nas
670
991
991
nced
319
404
404
ncld
320
405
405
ncp
442
524
524
ndsauth
269
353
353
Need For Speed
1017
9442
9442
Need For Speed 3
1018
1030
1030
nest-protocol
403
489
489
net8-cman
697
1830
1830
net-assistant
712
3283
3283
netbios-dgm
131
138
138
netbios-ns
130
137
137
netbios-ssn
132
139
139
netgw
618
741
741
netnews
450
532
532
netrcs
619
742
742
netrjs-1
948
71
71
netrjs-2
949
72
72
netrjs-3
950
73
73
netrjs-4
951
74
74
netsc-dev
148
155
155
netsc-prod
147
154
154
netviewdm1
615
729
729
netviewdm2
616
730
730
netviewdm3
617
731
731
netwall
451
533
533
netware-ip
311
396
396
newacct
971
100
new-rwho
467
550
550
nextstep
171
178
178
nicname
923
43
43
ni-ftp
927
47
47
ni-mail
938
61
61
nip
292
376
376
nlogin
630
758
758
nmap
597
689
689
nmsp
455
537
537
nnsp
348
433
433
nntps
478
563
563
notify
644
773
novastorbakcup
244
308
308
npmp-gui
520
611
611
npmp-local
519
610
610
npmp-trap
518
609
609
npp
963
92
92
nqs
516
607
607
ns
632
760
760
nsiiops
229
261
261
nsrmp
275
359
359
nss-routing
152
159
159
nsw-fe
912
27
27
ntalk
435
518
518
NTP
992
123
123
nxedit
995
126
126
obex
559
650
650
objcall
965
94
94
ocbinder
176
183
183
ocs_amu
344
429
429
ocs_cmu
343
428
428
ocserver
177
184
184
odmr
282
366
366
ohimsrv
420
506
506
olsr
606
698
698
omginitialrefs
663
900
900
omserv
636
764
764
onmux
332
417
417
opalis-rdv
454
536
536
opalis-robot
250
314
314
opc-job-start
338
423
423
opc-job-track
339
424
424
openport
228
260
260
openvms-sysipc
472
557
557
Operation Flash Point
1019
47624
oracle
690
1521
1521
oraclenames
695
1575
1575
oraclenet8cman
696
1630
1630
orasrv
691
1525
1525
orbix-config
705
3076
3076
orbixd
703
1570
1570
orbix-locator
704
3075
3075
orbix-loc-ssl
706
3077
3077
osu-nms
185
192
192
Outlaws
1020
5310
5310
parsec-game
744
6582
6582
passgo
425
511
511
passgo-tivoli
536
627
627
password-chg
500
586
586
pawserv
261
345
345
pcmail-srv
151
158
158
pdap
260
344
344
personal-link
238
281
281
pftp
570
662
662
ph
395
481
481
philips-vc
497
583
583
phonebook
638
767
767
photuris
382
468
468
pim-rp-disc
410
496
496
pip
257
321
321
pirp
470
553
553
pkix-3-ca-ra
657
829
829
pkix-timestamp
254
318
318
pop2
980
109
109
pop3s
674
995
995
pov-ray
408
494
494
powerburst
399
485
485
pptp
739
1723
1723
printer
432
515
515
print-srv
163
170
170
prm-nm
324
409
409
prm-sm
323
408
408
profile
129
136
136
prospero
184
191
191
ps2
899
10070-10080
10070
pssc
554
645
645
ptcnameservice
511
597
597
ptp-event
255
319
319
ptp-general
256
320
320
pump
626
751
751
puparp
678
998
purenoise
571
663
663
pwdgen
998
129
129
qbikgdp
284
368
368
qft
182
189
189
qmqp
537
628
628
qmtp
202
209
209
qotd
906
17
17
qrh
627
752
752
qsc
653
787
quake-server
754
27960
27910, 27960
quotad
634
762
762
Rainbox six
1026
2346
2346
rap
919
38
38
rcp
383
469
469
rda
539
630
630
rdb-dbs-disp
694
1571
1571
realm-rusd
596
688
688
re-mail-ck
930
50
50
remotefs
471
556
556
remote-kis
178
185
185
repcmd
550
641
641
repscmd
562
653
653
rescap
240
283
283
rfile
624
750
ripng
439
521
521
ris
173
180
180
ris-cm
622
748
748
RJE
901
5
5
rlp
920
39
39
rlzdbase
544
635
635
rmc
566
657
657
rmiactivation
682
1098
1098
rmiregistry
683
1099
1099
rmonitor
475
560
560
rmt
326
411
router
438
520
rpasswd
645
774
rpc2portmap
285
369
369
rrh
628
753
753
rrp
557
648
648
rsh-spx
215
222
222
rsvd
161
168
168
rsvp_tunnel
279
363
363
rsync
659
873
873
rtelnet
978
107
107
rtip
641
771
771
rtsps
258
322
322
runescape
753
43594
rushd
604
696
696
rxe
633
761
761
SAP
4002
1228/1229
1228/1229
saft
401
487
487
sanity
552
643
643
scc-security
496
582
582
sco-dtmgr
526
617
617
scohelp
371
457
457
scoi2odialog
276
360
360
sco-inetmgr
524
615
615
sco-sysmgr
525
616
616
sco-websrvrmg3
512
598
598
sco-websrvrmgr
529
620
620
scx-proxy
384
470
470
sdnskmp
473
558
558
secure-aux-bus
572
664
664
semantix
277
361
361
send
162
169
169
servstat
542
633
633
set
225
257
257
sfs-config
367
452
452
sfs-smp-net
366
451
451
sftp
985
115
115
sgcp
355
440
440
sgmp
146
153
153
sgmp-traps
153
160
160
shell
430
514
shockwave
707
1626
1626
shrinkwrap
274
358
358
siam
412
498
498
sift-uft
517
608
608
silc
610
706
706
silverplatter
331
416
416
SiN
746
22450
22450
sitaradir
710
2631
2631
sitaramgmt
709
2630
2630
sitaraserver
708
2629
2629
skronk
374
460
460
smakynet
991
122
122
smartsdp
341
426
426
smpnameres
664
901
901
smpte
335
420
420
smsd
510
596
596
smsp
328
413
smux
192
199
199
snagas
979
108
108
snare
423
509
509
s-net
159
166
166
snmp
154
161
161
snmptrap
155
162
162
snpp
359
444
444
sntp-heartbeat
494
580
580
softpc
208
215
215
Soldier of fortune
1027
28911-28915
sonar
486
572
572
spmp
565
656
656
spsc
392
478
478
sql*net
943
66
66
sql-net
143
150
150
sqlserv
988
118
118
sqlsrv
149
156
156
src
193
200
200
srmp
186
193
193
srssend
278
362
362
ss7ns
391
477
477
ssh
910
22
22
sshell
523
614
614
sst
234
266
266
starsiege
750
29001-29009
statsrv
1002
133
133
stmf
415
501
501
streettalk
481
566
566
stx
445
527
527
submission
501
587
587
submit
643
773
subntbcst_tftp
223
247
247
su-mit-tg
960
89
89
sun-dr
573
665
665
sunrpc
981
111
111
supdup
966
95
95
surf
681
1010
1010
sur-meas
219
243
243
svrloc
342
427
427
Swat3
1021
16639
16638
swift-rvf
968
97
97
synoptics-trap
327
412
synotics-broker
308
392
392
synotics-relay
307
391
391
syslog
431
514
systat
904
11
11
tacacs
929
49
49
tacacs-ds
942
65
65
tacnews
969
98
98
talk
434
517
517
td-replica
236
268
268
td-service
235
267
267
teedtap
474
559
559
tell
629
754
754
telnet
911
23
23
telnets
671
992
992
tempo
444
526
526
tenfold
567
658
658
texar
259
333
333
ticf-1
406
492
492
ticf-2
407
493
493
timbuktu
322
407
407
time
918
37
37
timed
443
525
525
tinc
564
655
655
tlisrv
692
1527
1527
tnETOS
293
377
377
tns-cml
504
590
590
tn-tl-fd1
390
476
476
tn-tl-w1
388
474
tn-tl-w2
389
474
tpip
508
594
594
tribes
748
28001
28001
tserver
365
450
450
uaac
138
145
145
uarps
212
219
219
uis
306
390
390
ulistproc
288
372
372
ulp
440
522
522
ulpnet
397
483
483
Ultima
1022
5002-5010, 7775-7777, 8888, 9999, 7875
uma
137
144
144
unidata-ldm
304
388
388
unify
174
181
181
UnReal_UT
745
7778
7777-7783
ups
316
401
401
url-rendezvous
379
465
465
urm
515
606
606
utime
436
519
519
utmpcd
346
431
431
utmpsd
345
430
430
uucp
458
540
540
uucp-path
987
117
117
uucp-rlogin
459
541
541
uuidgen
605
697
697
vacdsm-app
579
671
671
vacdsm-sws
578
670
670
vatp
598
690
690
vemmi
489
575
575
vid
639
769
769
videotex
433
516
516
vmnet
168
175
175
vmpwscs
207
214
214
vnas
491
577
577
vpp
585
677
677
vpps-qua
580
672
672
vpps-via
584
676
676
vsinet
675
996
996
vslmp
248
312
312
wap-push
725
2948
2948
wap-push-http
727
4035
4035
wap-push-https
728
4036
4036
wap-pushsecure
726
2949
2949
wap-vcal
734
9205
9205
wap-vcal-s
736
9207
9207
wap-vcard
733
9204
9204
wap-vcard-s
735
9206
9206
wap-wsp
729
9200
9200
wap-wsp-s
731
9202
9202
wap-wsp-wtp
730
9201
9201
wap-wsp-wtp-s
732
9203
9203
Warcraft
1023
3724
3724
webster
637
765
765
Westwood Online
1028
1140, 1234
1140, 1234
who
429
513
whoami
480
565
565
whois
940
63
63
work-sol
315
400
400
worldfusion
719
2595-2596
2595-2596
wpages
649
776
776
wpgs
651
780
780
wta-wsp-s
724
2805
2805
xact-backup
667
911
911
x-bone-ctl
233
265
265
xbox live
898
3074
3074
xdmcp
170
177
177
xdtp
741
3088
3088
xfer
955
82
82
xfr
590
682
682
xns-auth
936
56
56
xns-ch
934
54
54
xns-courier
158
165
165
xns-mail
937
58
58
xns-time
932
52
52
xvttp
422
508
508
xyplex-mux
166
173
173
Yahoo Games
1029
11999
yak-chat
226
258
258
z39.50
203
210
210
zannet
253
317
317
Znes
1024
7845
zserv
262
346
346
Generic Protocols—Generic protocols of the relevant type (IP, TCP, or UDP) that are not classified as belonging to a more specific protocol. See Generic Protocols.