Results 1 to 4 of 4

Thread: "Normal" Enterprise Traffic

Threaded View

  1. #1
    My life is this forum thorin's Avatar
    Join Date
    Jan 2010
    Posts
    2,629

    Default "Normal" Enterprise Traffic

    Hey Everyone, I've been asked to come up with a short list of "normal" (ya totally picture me doing that with air quotes when talking about it) Enterprise Traffic. [Inside, or Inside to Outside, not as concerned with in-bound.]

    So far I've come up with the list below based on a brain dump with small additions from:

    2005 - A First Look at Modern Enterprise Trafic - http://www.icir.org/enterprise-traci...look-imc05.pdf

    Normal'ish Enterprise Traffic (don't get held up on the names/categories, they're just preliminary to make my life easier, I'll put more thought/rigor into them before I send this out internally):

    Web - HTTP, HTTPS
    email - SMTP, IMAP, POP3, POP3S
    IM - MS Communicator, MSN, AIM (AOL), Yahoo, Jabber (XMPP), ICQ, IRC
    Streaming - RTSP/RTP, MMS
    Directory - LDAP, AD, Novell eDirectory
    VoIP - SIP/SIPS, H.323, Media Gateway Control Protocol (MGCP)
    Bulk Transfers - SCP (SSH?), FTP, FTPS, SFTP
    Remote Access - Telnet, SSH, RDP, VNC, NetMeeting, rlogin, X11
    OS - NFS, NetBIOS (DGM & SSN), CIFS/SMB, DCE/RPC
    DB - MySQL, Oracle (TNS), MS SQL
    Fat Clients - SAP
    AV - There's gotta be some kind of proprietary comms associated with AV solutions and master definition servers etc. [EPO, etc.]
    Backup - Netbackup/Veritas, rsync

    Net Mgmt - SNMP, DHCP, NTP

    Net Other - ARP, ICMP, BGP, DNS (TCP & UDP)

    Fringe Cases
    - VPN
    - RADIUS
    - NNTP
    - Streaming
    -- SHOUTcast
    -- SRTP (Secure RTP)
    -- STUN (Simple Traversal of Datagram)
    -- SDP (Session Description Protocol)

    Any thoughts/suggestions?

    Edit: 20120604 - Added POP3S and Novell eDirectory @ scottm99's suggestion.
    Last edited by thorin; 06-04-2012 at 08:31 AM.
    I'm a compulsive post editor, you might wanna wait until my post has been online for 5-10 mins before quoting it as it will likely change.

    I know I seem harsh in some of my replies. SORRY! But if you're doing something illegal or posting something that seems to be obvious BS I'm going to call you on it.

Similar Threads

  1. Replies: 0
    Last Post: 03-03-2012, 07:57 PM
  2. Replies: 0
    Last Post: 09-22-2011, 08:56 PM
  3. back track 5 "recovery mode" yes video, back track 5 "normal mode" no video
    By satelitetv in forum BackTrack 5 Beginners Section
    Replies: 0
    Last Post: 06-16-2011, 08:23 PM
  4. Replies: 4
    Last Post: 02-24-2011, 04:52 PM
  5. Sniff wireless traffic "After you have key"
    By texstorm in forum OLD Newbie Area
    Replies: 5
    Last Post: 11-24-2009, 09:20 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •