I'm troubleshooting a problem with overutilization of our Internet connection. In try to determine which users and services are being overused, I've set up NetFlow on our core switch and SNMP on all other LAN switches. I'm able to get statistics from these devices, but NetFlow isn't giving me enough information. It'll tell me who's using HTTP, HTTPS, NetBIOS and so on, but there's a large percentage of traffic listed as "other".
I'm using PRTG to capture these statistics.
Is there any other way I can see what the "other" protocols are?