5 Replies Latest reply on Mar 3, 2009 10:13 AM by Andy McBride

    unmonitored NetFlow ports?


      If I understand correctly, NF uses port -1 to aggregate all unmonitored applications unless or until you assign a unique port to some application.

      I did a search for port -1 and found a list of 20 applications with a status of "not monitored". For instance, one application listed is named " RSF-1 clustering" on a port of 1195. Is that the normal port for this application and is NF saying that it has never detected this application running on this port in any monitored flows to this point?

      I guess my question stated more simply is, what determines the applications and ports that are assigned to port -1?