Netflow protocol type

[qhang]

I have netfow v5 enabled on my router. I saw one ip sequentially scan through ip address. Protocol 11 on dest port 9595.

What is protocol 11? I could not find it on Cisco webiste.

Thanks

10.180.0.62 AT1/IMA0.1 10.2.133.224 11 0424 9595 6

10.180.0.62 AT1/IMA0.1 10.2.133.225 11 0424 9595 6

10.180.0.62 AT1/IMA0.1 10.2.133.222 11 0424 9595 6

[thisisshanky]

Protocol 11, according IETF RFCs indicate NVP protocol. Network Voice Protocol. Note that the port numbers are in hex, so you need to convert them into dec to find the actual src and dst port numbers.

[remmings]

The protocols are also in hex, so this is in fact, protocol decimal 17, or UDP.