Table Of Contents

Supported Network and Internet Protocols


Supported Network and Internet Protocols


This appendix provides additional information on Network layer and Internet layer protocols supported by Cisco WAPMS. For more information about assigning protocols to ASEs, see the "Configuring Upper Layer Analysis" section.

Table C-1 and Table C-2 include a short description of the protocols listed in the Protocol Analysis Configuration window in the Network Configuration Toolset and the ASE version in which support initiated.

Configured protocols are displayed in the Troubleshooting, Traffic Capture and Planning and Reporting Toolsets.

Table C-1 Network Protocols Supported by Cisco WAPMS ASEs 

Protocol
Description

AppleTalk

A set of local area network communication protocols originally created for Apple computers.

DecNet

DECnet IV protocol.

IP

See IP protocols.

IPX

Internetwork Packet Exchange. Networking protocol from Novell that interconnects networks that use Novell's NetWare clients and servers.

Other Protocols

All traffic not otherwise counted.

SNA

Proprietary IBM architecture and set of implementing products for network computing within an enterprise.

Vines

Banyan Vines routing protocol.


Table C-2 Internet Protocols Supported by Cisco WAPMS 

Protocol
Description

BOOTP

The BOOTP protocol is used for remote booting over IP networks. It allows a minimum protocol stack, typically stored in ROM, to obtain enough information to begin process of downloading necessary boot code. It uses UDP.

Citrix

Citrix's Independent Computing Architecture (ICA) is a general-purpose presentation services protocol for Microsoft Windows.

Database+

Aggregate that includes DB2, MS SQL, MySQL, Oracle and Sybase protocols. Note, the DB2 and Sybase protocols are supported by the PAC, but not by current Cisco WAPMS ASE versions.

MS SQL

Protocol used in MicroSoft SQL.

MySQL

Protocol used in MySQL database.

Oracle

Protocol that enables communications between an Oracle Client and an Oracle Server.

DLSW

Data Link Switching is a forwarding mechanism for IBM SNA and NetBIOS protocols. It provides switching at the datalink layer and encapsulation in TCP/IP for transport over Internet.

Fileshare

Counts fileshare protocols such as Napster, Morpheus, and Gnutella

FTP

File Transfer Protocol. Standard Internet protocol for exchanging files between computers on the Internet. In v1.0 Cisco WAPMS and v7.1 Visual UpTime, the FTP protocol automatically counts data on dynamic ports that are established in passive mode. This traffic was previously counted as Other.

Gopher

Internet application in which hierarchically-organized text files could be brought from servers all over the world to a viewer on your computer.

Lotus Notes

Protocol used by Lotus Notes, a group of application programs from Lotus Development Corporation that allows organizations to share documents and exchange electronic mail messages.

Mail+

Aggregate that includes IMAP, Lotus CCMail, POP, and SMTP protocols.

IMAP

Internet Message Access Protocol. Standard protocol for accessing e-mail from your local server.

Lotus CCMail

Protocol used by the Lotus CCMail e-mail messaging application.

POP

Post Office Protocol. Standard protocol for receiving e-mail.

SMTP

Simple Mail Transfer Protocol. TCP/IP protocol used in sending and receiving e-mail.

Message+

Aggregate that includes AIM, IRC, MSN Msg, and Yahoo! Msg protocols.

AIM

AOL Instant Messenger protocol.

IRC

Internet Relay Chat. A system for chatting that involves a set of rules and conventions and client/server software.

MSN Msg

MicroSoft Network instant messaging.

Yahoo! Msg

Yahoo! Instant messaging.

NetBIOS

Network Basic Input/Output System. A program that allows applications on different computers to communicate within a LAN. NetBIOS provides two communication modes: session or datagram. The Server Message Block (SMB) protocol over TCP is also counted in the NetBIOS protocol. SMB provides a way for client applications in a computer to read and write files on and to request services from server programs in a network.

NNTP

Network News Transfer Protocol. Predominant protocol used by computer clients and servers for managing the notes posted on Usernet news groups.

Other IP

All IP traffic not otherwise counted.

PeopleSoft

Protocol used by PeopleSoft applications traffic.

Routing+

Aggregate that includes BGP, BGMP, EGP, IGRP, OSPF, and RIP protocols.

BGP

Border Gateway Protocol. Protocol for exchanging routing information between gateway hosts (each with its own router) in a network of autonomous systems.

BGMP

Border Gateway Multicast Protocol. Scalable multicast routing protocol.

EGP

Exterior Gateway Protocol. Protocol for exchanging routing information between two neighbor gateway hosts (each with its own router) in a network of autonomous systems.

IGRP

Interior Gateway Routing Protocol. Protocol for exchanging routing information between gateways (hosts with routers) within an autonomous network

OSPF

Open Shortest Path First. Router protocol used within larger autonomous system networks in preference to RIP.

RIP

Routing Information Protocol. Widely-used protocol for managing router information within a self-contained network such as a corporate LAN or an interconnected group of such LANs.

SAP

Protocol used by SAP applications traffic.

Service+

Aggregate that includes DNS, ICMP, IDENT, LDAP, and RSVP protocols. Other protocols counted in the Service aggregate but not identified separately include:

EPMAP: Microsoft Endpoint Mapper protocol used by Outlook

Finger: User information protocol that provides an interface to a remote user information program

NTP: Network Time Protocol used to synchronize computer clocks to national standard time

PortMapper

WINS: Windows Internet Naming Service protocol.

DNS

The domain name service (DNS) is the way Internet domain names are located and translated into IP addresses.

ICMP

Internet Control Message Protocol. A message control and error-reporting protocol between a host server and a gateway to the Internet.

IDENT

Identification protocol. It provides a means to determine the identity of a user of a particular TCP connection. Given a TCP port number pair, it returns a character string which identifies the owner of that connection on the server's system.

LDAP

Lightweight Directory Access Protocol. Software protocol for enabling anyone to locate organizations, individuals, and other resources such as files and devices in a network on the public Internet or on a corporate intranet.

RSVP

Resource Reservation Setup Protocol. RSVP is used by a host to request specific qualities of service from the network for particular application data streams or flows. It is also used by routers to deliver quality-of-service (QoS) requests to all nodes along the path(s) of the flows and to establish and maintain state to provide the requested service.

SNMP

Simple Network Management Protocol. Protocol governing network management and the monitoring of network devices and their functions.

Streaming

This includes RealAudio, QuickTime, Windows Media Player real-time video and audio streaming protocols.

Telnet

Telnet provides a standardized interface, through which a program on one host may access the resources of another as though the client were a local terminal connected to the server.

TFTP

Trivial File Transfer Protocol. Internet software utility for transferring files that is simpler to use than FTP but less capable.

Tunnel+

Aggregate that includes GRE, IP in IP, IPSec, PPTP, and RDP protocols.

GRE

Generic Routing Encapsulation.

IP in IP

IP-within-IP Encapsulation Protocol.

IPsec

Internet Protocol Security. A standard for security at the network or packet processing layer of network communication.

PPTP

Point-to-Point Tunneling Protocol (PPTP) is used to ensure messages transmitted from one VPN node to another are secure. Allows corporations to extend their corporate network through private "tunnels" over the public Internet.

RDP

CheckPoint Reliable Delivery Protocol.

Voice/Video+

Aggregate that includes the H.225 and H.245 protocols of H.323 standard, which specifies the components, protocols and procedures that provide multimedia communication services-real-time audio, video, and data communications-over packet networks, including Internet protocol (IP)-based networks. It also includes RTCP, RTP, and SIP protocols.

G.xxx specifications which describe the coding of voice and video data, usually refer to codecs, not protocols. Protocol analysis is not dependent on the codec used.

H225

H.323 control protocol. H.225 call signaling is used to set up connections between H.323 endpoints (terminals and gateways), over which the real-time data can be transported.

H245

H.245 control signaling consists of the exchange of end-to-end H.245 messages between communicating H.323 endpoints.

RTCP

Real-Time Control Protocol. RTCP provides support for real-time conferencing of groups in an internet.

RTP

Real-Time Protocol. Standard protocol for the transport of real-time data, including audio and video.

SIP

Session Initiation Protocol. Standard protocol for initiating an interactive user session that involves multimedia elements such as video, voice, chat, gaming, and virtual reality.

Web+

Aggregate that includes all HTTP, secure HTTP, and HTTP proxy traffic.

HTTP

Hypertext Transfer Protocol. The set of rules for exchanging files (text, graphic images, sound, video, and other multimedia files) on the World Wide Web.

HTTP-proxy

HTTP Proxy Protocol. Originally designed to allow users behind a firewall to access external Web sites. It is nearly the same as HTTP, except instead of requesting a server-relative URL in the request line, the client asks for a full URL, complete with scheme and host.

HTTPS

Hypertext Transfer Protocol over Secure Socket Layer, or HTTP over SSL. Web protocol developed by Netscape and built into its browser that encrypts and decrypts user page requests and pages returned by the Web server.

X Windows

Provides the capability of managing both local and remote windows. X Windows allows a user to control all sessions from one window. Remote windows are established through TCP/IP, and local windows through BSD sockets.

Custom IP protocols

Any supported user-defined (non-standard) custom Internet protocol. Establish up to three custom protocols.

You can specify custom IP port ranges. You cannot overlap custom IP port ranges. When you specify a range that overlaps a standard protocol port, traffic on that port is only counted toward the custom protocol.