By default, CA Network Flow Analysis defines the server port and protocol as the lower number in the flow record.
Source port: 80
Destination port: 8000
In this case, NFA will determine that the lower port is 80, and therefore http.
When the server port (tcp / udp) is a high number, the port priority can be used.
For example:
Server port: 8888
Client port: 6000
By default, NFA would use the lower port (6000) as the server port. The Port Priority functionality will tell NFA to use 8888 as the server port when it is present in the data.
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|