while tryin to isolate an app taking up bandwidth, i noticed that you can not determine the port number. The application has listed the popular port numbers and all others are grouped as unknown. I used my sniffer to determine the port number. I then added this to Netflow. Is there any way that i couuld get the specific port number from netflow and add it without plugging a sniffer on it?
Take a look at the NetFlow Settings-> Applications and Service Ports. Make sure it is set to Enable All Monitoring (or Monitor All Ports) depending on version.