| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
udp |
>1023 |
53 |
|
incoming query via udp, client to server |
| out |
int |
ext |
udp |
53 |
>1023 |
|
answer to incoming udp query, server to client |
| in |
ext |
int |
tcp |
>1023 |
53 |
a |
incoming query via tcp, client to server |
| out |
int |
ext |
tcp |
53 |
>1023 |
y |
answer to incoming tcp query, server to client |
| out |
int |
ext |
udp |
>1023 |
53 |
|
outgoing query via udp, client to server |
| in |
ext |
int |
udp |
53 |
>1023 |
|
answer to outgoing udp query, server to client |
| out |
int |
ext |
tcp |
>1023 |
53 |
a |
outgoing query via tcp, client to server |
| in |
ext |
int |
tcp |
53 |
>1023 |
y |
answer to outgoing tcp query, server to client |
| in |
ext |
int |
udp |
53 |
>1023 |
|
query or response between two servers via udp |
| out |
int |
ext |
udp |
53 |
>1023 |
|
query or response between two servers via udp |
| in |
ext |
int |
tcp |
>1023 |
53 |
a |
query from external server via tcp; also zone transfer request from external secondary server via tcp |
| out |
int |
ext |
tcp |
53 |
>1023 |
y |
answer from internal server to external server via tcp; also zone transfer response to external secondary server via tcp |
| out |
int |
ext |
tcp |
>1023 |
53 |
|
query from internal server to external server via tcp |
| in |
ext |
int |
tcp |
53 |
>1023 |
y |
answer from external server to internal server via tcp |
| FTP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
21 |
a |
incoming ftp request |
| out |
int |
ext |
tcp |
21 |
>1023 |
y |
response to incoming request |
| out |
int |
ext |
tcp |
20 |
>1023 |
a |
data channel creation for incoming ftp request, normal mode |
| in |
ext |
int |
tcp |
>1023 |
20 |
y |
data channel responses for incoming ftp request, normal mode |
| in |
ext |
int |
tcp |
>1023 |
>1023 |
a |
data channel creation for incoming ftp request, passive mode |
| out |
int |
ext |
tcp |
>1023 |
>1023 |
y |
data channel responses for incoming ftp request, passive mode |
| out |
int |
ext |
tcp |
>1023 |
21 |
a |
outgoing ftp request |
| in |
ext |
int |
tcp |
21 |
>1023 |
y |
response to outgoing request |
| in |
ext |
int |
tcp |
20 |
>1023 |
a |
data channel creation for outgoing ftp request, normal mode |
| out |
int |
ext |
tcp |
>1023 |
20 |
y |
data channel responses for outgoing ftp request, normal mode |
| out |
int |
ext |
tcp |
>1023 |
>1023 |
a |
data channel creation for outgoing ftp request, passive mode |
| in |
ext |
int |
tcp |
>1023 |
>1023 |
y |
data channel responses for outgoing ftp request, passive mode |
| HTTP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
80 |
a |
incoming session, client to server |
| out |
int |
ext |
tcp |
80 |
>1023 |
y |
incoming session, server to client |
| out |
int |
ext |
tcp |
>1023 |
80 |
a |
outgoing session, client to server |
| in |
ext |
int |
tcp |
80 |
>1023 |
y |
outgoing session, server to client |
| IRC protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
6667 |
a |
external client or server contacting internal server |
| out |
int |
ext |
tcp |
6667 |
>1023 |
y |
internal server answering external client or server |
| out |
int |
ext |
tcp |
>1023 |
6667 |
a |
internal client or server contacting external server |
| in |
ext |
int |
tcp |
6667 |
>1023 |
y |
external server answering internal client or server |
| in |
ext |
int |
tcp |
>1023 |
>1023 |
a |
DCC connection requested by internal client; external client answering invitation from internal client |
| out |
int |
ext |
tcp |
>1023 |
>1023 |
y |
DCC connection requested by internal client |
| out |
int |
ext |
tcp |
>1023 |
>1023 |
a |
DCC connection requested by external client; internal client answering invitation from external client |
| in |
ext |
int |
tcp |
>1023 |
>1023 |
y |
DCC connection requested by external client |
| NNTP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
119 |
a |
incoming news |
| out |
int |
ext |
tcp |
119 |
>1023 |
y |
incoming news responses |
| out |
int |
ext |
tcp |
>1023 |
119 |
a |
outgoing news |
| in |
ext |
int |
tcp |
119 |
>1023 |
y |
outgoing news responses |
| |
int |
news server |
tcp |
>1023 |
119 |
a |
newsreader client resding news |
| |
news server |
int |
tcp |
119 |
>1023 |
y |
server sending articles to newsreader client |
| PING protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
icmp |
|
|
8 |
incoming ping |
| out |
int |
ext |
icmp |
|
|
0 |
response to incoming ping |
| out |
int |
ext |
icmp |
|
|
8 |
outgoing ping |
| in |
ext |
int |
icmp |
|
|
0 |
response to outgoing ping |
| POP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
110,109 |
a |
incoming POP connection, client to server |
| out |
int |
ext |
tcp |
110,109 |
>1023 |
y |
incoming POP connection, server to client |
| out |
int |
ext |
tcp |
>1023 |
110,109 |
a |
outgoing POP connection, client to server |
| in |
ext |
int |
tcp |
110,109 |
>1023 |
y |
outgoing POP connection, server to client |
| REXEC protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
<1024 |
512 |
a |
incoming rexec, client to server |
| out |
int |
ext |
tcp |
512 |
<1024 |
y |
incoming rexec, server to client |
| out |
int |
ext |
tcp |
<1024 |
512 |
a |
outgoing rexec, client to server |
| in |
ext |
int |
tcp |
512 |
<1024 |
y |
outgoing rexec, server to client |
| "R" commands protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
<1024 |
513 |
a |
incoming rlogin, client to server |
| out |
int |
ext |
tcp |
513 |
<1024 |
y |
incoming rlogin, server to client |
| out |
int |
ext |
tcp |
<1024 |
513 |
a |
outgoing rlogin, client to server |
| in |
ext |
int |
tcp |
513 |
<1024 |
y |
outgoing rlogin, server to client |
| in |
ext |
int |
tcp |
<1024 |
514 |
a |
incoming rsh/rcp/rdump/rrestore/rdist, client to server |
| out |
int |
ext |
tcp |
514 |
<1024 |
y |
incoming rsh/rcp/rdump/rrestore/rdist, server to client |
| in |
ext |
int |
tcp |
<1024 |
<1024 |
y |
incoming rsh, error channel, client to server |
| out |
int |
ext |
tcp |
<1024 |
<1024 |
a |
incoming rsh, error channel, server to client |
| out |
int |
ext |
tcp |
<1024 |
514 |
a |
outgoing rsh/rcp/rdump/rrestore/rdist, client to server |
| in |
ext |
int |
tcp |
514 |
<1024 |
y |
outgoing rsh/rcp/rdump/rrestore/rdist, server to client |
| out |
int |
ext |
tcp |
<1024 |
<1024 |
y |
outgoing rsh, error channel, client to server |
| in |
ext |
int |
tcp |
<1024 |
<1024 |
a |
outgoing rsh, error channel, server to client |
| SMTP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
25 |
a |
incoming mail, sender to recipient |
| out |
int |
ext |
tcp |
25 |
>1023 |
y |
incoming mail, recipient to sender |
| out |
int |
ext |
tcp |
>1023 |
25 |
a |
outgoing mail, sender to recipient |
| in |
ext |
int |
tcp |
25 |
>1023 |
y |
outgoing mail, recipient to sender |
| SYSLOG protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
udp |
>1023 |
514 |
|
external client contacting internal syslog server |
| out |
int |
ext |
udp |
>1023 |
514 |
|
internal client contacting external syslog server |
| in |
ext |
int |
udp |
514 |
514 |
|
external syslog server passing message to internal syslog server |
| out |
int |
ext |
udp |
514 |
514 |
|
internal syslog server passing message to external syslog server |
| TALK protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
udp |
>1023 |
517,518 |
|
external client contacting internal server |
| out |
int |
ext |
udp |
517,518 |
>1023 |
|
internal server answering external client |
| out |
int |
ext |
udp |
>1023 |
517,518 |
|
internal client contacting external server |
| in |
ext |
int |
udp |
517,518 |
>1023 |
|
external server answering internal client |
| out |
int |
ext |
tcp |
>1023 |
>1023 |
a |
internal client communicating with external client |
| in |
ext |
int |
tcp |
>1023 |
>1023 |
a |
external client communicating with internal client |
| TELNET protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
23 |
a |
incoming session, client to server |
| out |
int |
ext |
tcp |
23 |
>1023 |
y |
incoming session, server to client |
| out |
int |
ext |
tcp |
>1023 |
23 |
a |
outgoing session, client to server |
| in |
ext |
int |
tcp |
23 |
>1023 |
y |
outgoing session, server to client |
| TFTP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
udp |
>1023 |
69 |
a |
incoming tftp request ( first packet from client ) |
| out |
int |
ext |
udp |
>1023 |
>1023 |
a |
response to incoming request |
| in |
ext |
int |
udp |
>1023 |
>1023 |
a |
subsequent packets from client |
| out |
int |
ext |
udp |
>1023 |
69 |
a |
outgoing tftp request ( first packet from client ) |
| in |
ext |
int |
udp |
>1023 |
>1023 |
a |
response to outgoing request |
| out |
int |
ext |
udp |
>1023 |
>1023 |
a |
subsequent packets from client |
| UUCP protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| in |
ext |
int |
tcp |
>1023 |
540 |
a |
incoming uucp connection, client to server |
| out |
int |
ext |
tcp |
540 |
>1023 |
y |
incoming uucp connection, server to client |
| out |
ext |
int |
tcp |
>1023 |
540 |
a |
outgoing uucp connection, client to server |
| in |
int |
ext |
tcp |
540 |
>1023 |
y |
outgoing uucp connection, server to client |
| WHOIS protocol |
| direction |
src addr |
dst addr |
protocol |
src port |
dst port |
ACK set |
notes |
| out |
int |
ext |
tcp |
>1023 |
43 |
a |
outgoing query, client to server |
| in |
ext |
int |
tcp |
43 |
>1023 |
y |
incoming response, server to client |
