NSSA1.7-juniper SSG防火墙 session分析工具

{0: "reserved Reserved", \ 1: "tcpmux TCP port multiplexer RFC1078 ", \ 2: "compressnet Management Utility death trojan", \ 3: "compressnet Compression Process", \ 5: "rje Remote Job Entry", \ 7: "echo Echo", \ 9: "discard sink null Discard", \ 11: "systat users Active Users", \ 13: "daytime Daytime RFC 867 ", \ 15: "netstat Network status", \ 17: "qotd Quote of the Day", \ 18: "msp Message Send Protocol", \ 19: "chargen ttytst source Character Generator", \ 20: "ftpdata File Transfer Protocol [Default Data]", \ 21: "ftp File Transfer Protocol [Control]", \ 22: "ssh SSH Remote Login Protocol", \ 23: "telnet Telnet", \ 24: "privmail any private mail system", \ 25: "smtp Simple Mail Transfer Protocol", \ 27: "nsw-fe NSW User System FE", \ 29: "msg-icp MSG ICP", \ 30: "agent40421 Agent 40421 Trojan", \ 31: "msg-auth Paradise Master MSG Authentication", \ 33: "dsp Display Support Protocol", \ 35: "privprint any private printer server", \ 37: "time timserver Time", \ 38: "rap Route Access Protocol", \ 39: "rlp Resource Location Protocol", \ 41: "graphics Deep Throat Trojan Horse Graphics", \ 42: "wins Microsoft WINS server replications server port Host Name Server IEN 116", \ 43: "whois whois Who Is", \ 44: "mpm-flags MPM FLAGS Protocol", \ 45: "mpm Message Processing Module [recv]", \ 46: "mpmsnd MPM [default send]", \ 47: "ni-ftp NI FTP", \ 48: "auditd Digital Audit Daemon", \ 49: "tacacs Login Host Protocol TACACS ", \ 50: "remailchk Remote Mail Checking Protocol", \ 51: "lamaint IMP Logical Address Maintenance", \ 52: "xnstime XNS Time Protocol", \ 53: "domain Domain Name Server", \ 54: "xnsch XNS Clearinghouse", \ 55: "isigl ISI Graphics Language", \ 56: "xnsauth XNS Authentication", \ 57: "privterm any private terminal access", \ 58: "xnsmail XNS Mail", \ 59: "privfile any private file service", \ 61: "nimail NI MAIL", \ 62: "acas ACA Services", \ 63: "whois++ whois++ VIA Systems FTP", \ 64: "covia Communications Integrator CI ", \ 65: "tacacsds TACACS-Database Service", \ 66: "sql*net Oracle SQL*NET", \ 67: "bootps DHCP Bootstrap Protocol Server", \ 68: "bootpc Bootstrap Protocol Client", \ 69: "tftp Trivial File Transfer", \ 70: "gopher Gopher", \ 71: "netjrs1 Remote Job Service", \ 72: "netjrs2 Remote Job Service", \ 73: "netjrs3 Remote Job Service", \ 74: "netjrs4 Remote Job Service", \ 75: "privdial any private dial out service", \ 76: "deos Distributed External Object Store", \ 77: "privrje any private RJE service", \ 78: "vettcp", \ 79: "Finger", \ 80: "World Wide Web HTTP", \ 81: "hosts2ns HOSTS2 Name Server", \ 82: "xfer XFER Utility", \ 83: "mitmldev MIT ML Device", \ 84: "ctf Common Trace Facility", \ 85: "mitmldev MIT ML Device", \ 86: "mfcobol Micro Focus Cobol", \ 87: "privterml any private terminal link", \ 88: "kerberos kdc Kerberos authentication--tcp", \ 89: "sumittg SU MIT Telnet Gateway", \ 90: "dnsix DNSIX Securit Attribute Token Map", \ 91: "mitdov MIT Dover Spooler", \ 92: "npp Network Printing Protocol", \ 93: "dcp Device Control Protocol", \ 94: "objcall Tivoli Object Dispatcher", \ 95: "supdup BSD supdupd 8 ", \ 96: "dixie DIXIE Protocol Specification", \ 97: "swiftrvf Swift Remote Virtural File Protocol", \ 98: "linuxconf LinuxConf TAC News", \ 99: "metagram Metagram Relay", \ 100: "newacct [unauthorized use]", \ 101: "hostname NIC hostname server usually to sri-nic", \ 102: "mta-x400 Microsoft MTA - X.400 over TCP IP tsap part of ISODE.", \ 103: "gppitnp Genesis Point-to-Point Trans Net ISO Mail", \ 104: "acrnema ACR-NEMA Digital Imag. & Comm. 300 X400", \ 105: "csnetns Mailbox Name Nameserver CCSO name server protocol", \ 106: "3comtsmux pop3pw 3COM-TSMUX Eudora compatible PW changer", \ 107: "rtelnet Remote Telnet Service", \ 108: "snagas SNA Gateway Access Server", \ 109: "pop2 postoffice Post Office Protocol - Version 2", \ 110: "pop3 postoffice Post Office Protocol - Version 3", \ 111: "rpc SUN Remote Procedure Call", \ 112: "mcidas McIDAS Data Transmission Protocol", \ 113: "ident ident tap authentication Authentication Service", \ 114: "audionews Audio News Multicast", \ 115: "sftp Simple File Transfer Protocol", \ 116: "ansanotify ANSA REX Notify", \ 117: "uucppath UUCP Path Service", \ 118: "sqlserv SQL Services", \ 119: "nntp Network News Transfer Protocol Usenet", \ 120: "cfdptkt CFDPTKT", \ 121: "jammerkilla Jammer killa trojan Encore Expedited Remote Pro.Call", \ 122: "smakynet SMAKYNET", \ 123: "ntp Network Time Protocol", \ 124: "ansatrader ANSA REX Trader", \ 125: "locusmap Locus PC-Interface Net Map Ser", \ 127: "locuscon Locus PC-Interface Conn Server", \ 128: "gssxclien GSS X License Verification", \ 129: "pwdgen Password Generator Protocol", \ 130: "ciscofna cisco FNATIVE", \ 131: "ciscotna cisco TNATIVE", \ 132: "ciscosys cisco SYSMAINT", \ 133: "statsrv Statistics Service", \ 134: "ingresnet INGRES-NET Service", \ 135: "locsrv DCE endpoint resolution NCS local location broker Microsoft rpc", \ 136: "profile PROFILE Naming System", \ 137: "netbiosns NETBIOS Name Service nbns", \ 138: "netbiosdgm NETBIOS Datagram Service", \ 139: "netbiosssn NETBIOS session service", \ 140: "emfisdata EMFIS Data Service", \ 141: "emfiscntl EMFIS Control Service", \ 142: "blidm Britton-Lee IDM", \ 143: "imap Interim Mail Access Protocol v2 Access Protocol", \ 144: "uma Universal Management Architecture NewS window system", \ 145: "uaac UAAC Protocol", \ 146: "isotp0 ISO-IP0", \ 147: "isoip ISO-IP", \ 148: "cronus CRONUS-SUPPORT Jargon", \ 149: "aed512 AED 512 Emulation Service", \ 150: "sqlnet SQL-NET", \ 151: "hems HEMS", \ 152: "bftp Background File Transfer Program", \ 153: "sgmp SGMP", \ 154: "netscprod NETSC", \ 155: "netscdev NETSC", \ 156: "sqlsrv SQL Service", \ 157: "knetcmp KNET VM Command Message Protocol", \ 158: "pcmailsrv PCMail Server", \ 159: "nssrouting NSS-Routing", \ 160: "sgmptraps SGMP-TRAPS", \ 161: "snmp Simple Net Mgmt Proto", \ 162: "snmptrap snmptrap Traps for SNMP", \ 163: "cmipman CMIP TCP Manager ISO mgmt over IP CMOT ", \ 164: "cmipagent CMIP TCP Agent", \ 165: "xnscourier Xerox", \ 166: "snet Sirius Systems", \ 167: "namp NAMP", \ 168: "rsvd RSVD", \ 169: "send SEND", \ 170: "printsrv Network PostScript", \ 171: "multiplex Network Innovations Multiplex", \ 172: "cl1 Network Innovations CL 1", \ 173: "xyplexmux Xyplex", \ 174: "mailq zmailer MTA mailq", \ 175: "vmnet VMNET", \ 176: "genradmux GENRAD-MUX", \ 177: "xdmcp X Display Manager Control Protocol", \ 178: "nextstep NextStep Window Server", \ 179: "bgp Border Gateway Proto.", \ 180: "ris Intergraph", \ 181: "unify Unify", \ 182: "audit Unisys Audit SITP", \ 183: "ocbinder OCBinder", \ 184: "ocserver OCServer", \ 185: "remotekis Remote-KIS", \ 186: "kis KIS Protocol", \ 187: "aci Application Communication Interface", \ 188: "mumps Plus Five s MUMPS", \ 189: "qft Queued File Transport", \ 190: "gacp Gateway Access Control Protocol", \ 191: "prospero Cliff Neuman s Prospero Directory Service", \ 192: "osunms OSU Network Monitoring System", \ 193: "srmp Spider Remote Monitoring Protocol", \ 194: "irc Internet Relay Chat Protocol", \ 195: "dn6nlmaud DNSIX Network Level Module Audit", \ 196: "dn6smmred DNSIX Session Mgt Module Audit Redir", \ 197: "dls Directory Location Service", \ 198: "dlsmon Directory Location Service Monitor", \ 199: "smux SNMP Unix Multiplexer", \ 200: "src IBM System Resource Controller", \ 201: "atrtmp AppleTalk Routing Maintenance", \ 202: "atnbp AppleTalk name binding", \ 203: "at3 AppleTalk Unused", \ 204: "atecho AppleTalk echo", \ 205: "at5 AppleTalk Unused", \ 206: "atzis AppleTalk zone information", \ 207: "at7 AppleTalk Unused", \ 208: "at8 AppleTalk Unused", \ 209: "qmtp The Quick Mail Transfer Protocol Trivial Authenticated Mail Protocol", \ 210: "z3950 ANSI Z39.