Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5380] Better decode for NetFlow NBAR applicationId

Date: Mon, 15 Nov 2010 19:08:19 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5380

--- Comment #1 from Andrew Feren <acferen@xxxxxxxxx> 2010-11-15 19:08:15 PST ---
Forgot to mention the following detail.

NBAR standard IDs mean the same thing across all exporters.  So any standard ID
will map to the same application regardless of where it is exported from

NBAR custom IDs are unique to each exporter.  So the application represented by
a particular custom ID may be different for each exporter.  6/42 might mean
application FOO from one exporter and application BAR from a second exporter.

5/42 will always refer to the same application.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.