rfc2896.txt

RFC 的详细文档！

xns-ch PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "XNS Clearinghouse"
    REFERENCE
       "Xerox Corporation"
    ::= { tcp 54,
       udp 54 }

xns-auth PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "XNS Authentication Protocol"
    REFERENCE
       "Xerox Corporation"
    ::= { tcp 56,
       udp 56 }

priv-term PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Pseudo-protocol reserved for any private terminal access
       protocol."
    REFERENCE
       "[RFC1700]"
    ::= { tcp 57,
       udp 57 }

xns-mail PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "XNS Mil Protocol"
    REFERENCE
       "Xerox Corporation"
    ::= { tcp 58,
       udp 58 }

priv-file PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Pseudo-protocol reserved for any private file service."
    REFERENCE
       "[RFC1700]"



Bierman, et al.              Informational                     [Page 26]

RFC 2896                     RMON PI Macros                  August 2000


    ::= { tcp 59,
       udp 59 }

tacacs-ds PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Default Server Port; TACACS Access Control Protocol Database
       Service."
    REFERENCE
       "RFC 1492 [RFC1492] defines the TACACS Protocol."
    ::= { tcp 65 }

sqlnet PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Oracle SQL*NET"
    REFERENCE
       "Oracle Corporation"
    ::= { tcp 66 }

bootps PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Bootstrap Protocol Server Protocol; BOOTP Clients send requests
       (usually broadcast) to the bootps port."
    REFERENCE
       "RFC 951 [RFC951] defines the Bootstrap Protocol."
    ::= { udp 67 }

bootpc PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Bootstrap Protocol Client Protocol; BOOTP Server replies are
       sent to the BOOTP Client using this destination port."
    REFERENCE
       "RFC 951 [RFC951] defines the Bootstrap Protocol."
    ::= { udp 68 }

tftp PROTOCOL-IDENTIFIER
    PARAMETERS {
     tracksSessions(1)
    }
    ATTRIBUTES { }
    DESCRIPTION



Bierman, et al.              Informational                     [Page 27]

RFC 2896                     RMON PI Macros                  August 2000


       "Trivial File Transfer Protocol; Only the first packet of each
       TFTP transaction will be sent to port 69. If the tracksSessions
       attribute is set, then packets for each TFTP transaction will be
       attributed to tftp, instead of the unregistered port numbers that
       will be encoded in subsequent packets."
    REFERENCE
       "RFC 1350 [RFC1350] defines the TFTP Protocol (revision 2);
        RFC 1782 [RFC1782] defines TFTP Option Extensions;
        RFC 1783 [RFC1783] defines the TFTP Blocksize Option;
        RFC 1784 [RFC1784] defines TFTP Timeout Interval and Transfer
        Size  Options."
    ::= { udp 69 }

gopher PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Internet Gopher Protocol"
    REFERENCE
       "RFC 1436 [RFC1436] defines the Gopher Protocol."
    ::= { tcp 70 }

netrjs-1 PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Remote Job Service Protocol; (historical)."
    REFERENCE
       "RFC 740 [RFC740] defines the NETRJS Protocol."
    ::= { tcp 71 }

netrjs-2 PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Remote Job Service Protocol; (historical)."
    REFERENCE
       "RFC 740 [RFC740] defines the NETRJS Protocol."
    ::= { tcp 72 }

netrjs-3 PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Remote Job Service Protocol; (historical)."
    REFERENCE
       "RFC 740 [RFC740] defines the NETRJS Protocol."
    ::= { tcp 73 }



Bierman, et al.              Informational                     [Page 28]

RFC 2896                     RMON PI Macros                  August 2000


netrjs-4 PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Remote Job Service Protocol; (historical)."
    REFERENCE
       "RFC 740 [RFC740] defines the NETRJS Protocol."
    ::= { tcp 74 }

priv-dialout PROTOCOL-IDENTIFIER

    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Pseudo-protocol reserved for any private dial out service."
    REFERENCE
       "[RFC1700]"
    ::= { tcp 75,
       udp 75 }

priv-rje PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Pseudo-protocol reserved for any private remote job entry
       service."
    REFERENCE
       "[RFC1700]"
    ::= { tcp 77,
       udp 77 }

finger PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Finger User Information Protocol"
    REFERENCE
       "RFC 1288 [RFC1288] defines the finger protocol."
    ::= { tcp 79 }

www-http PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Hypertext Transfer Protocol"
    REFERENCE
       "RFC 1945 [RFC1945] defines the Hypertext Transfer Protocol
(HTTP/1.0).



Bierman, et al.              Informational                     [Page 29]

RFC 2896                     RMON PI Macros                  August 2000


        RFC 2068 [RFC2068] defines the Hypertext Transfer Protocol
(HTTP/1.1).
        RFC 2069 [RFC2069] defines an Extension to HTTP: Digest Access
           Authentication.
        RFC 2109 [RFC2109] defines the HTTP State Management Mechanism.
        RFC 2145 [RFC2145] defines the use and interpretation of HTTP
           version numbers."
    ::= { tcp 80 }

priv-termlink PROTOCOL-IDENTIFIER

    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Pseudo-protocol reserved for any private terminal link
       protocol."
    REFERENCE
       "[RFC1700]"
    ::= { tcp 87,
       udp 87 }

kerberos PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "The Kerberos Network Authentication Service (V5)"
    REFERENCE
       "RFC 1510 [RFC1510] defines the Kerberos protocol."
    ::= { udp 88 }

supdup PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "SUPDUP Display; (historical)"
    REFERENCE
       "RFC 734 [RFC734] defines the SUPDUP Protocol."
    ::= { tcp 95 }

dixie PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "DIXIE Directory Service"
    REFERENCE
       "RFC 1249 [RFC1249] defines the DIXIE Protocol."
    ::= { tcp 96,
       udp 96 }



Bierman, et al.              Informational                     [Page 30]

RFC 2896                     RMON PI Macros                  August 2000


hostname  PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "NIC Internet Hostname Server Protocol; (historical)"
    REFERENCE
       "RFC 953 [RFC953] defines the Hostname Server Protocol."
    ::= { tcp 101 }

3com-tsmux PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "3COM-TSMUX"
    REFERENCE
       "3Com, Inc."
    ::= { tcp 106,
       udp 106 }

rtelnet  PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Remote User Telnet Protocol; (historical)."
    REFERENCE
       "RFC 818 [RFC818] defines the Remote User Telnet Service."
    ::= { tcp 107 }

pop2 PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Post Office Protocol -- Version 2. Clients establish connections
       with POP2 servers by using this destination port number.
       Historical."
    REFERENCE
       "RFC 937 [RFC937] defines Version 2 of the Post Office Protocol."
    ::= { tcp 109 }

pop3 PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Post Office Protocol -- Version 3. Clients establish connections
       with POP3 servers by using this destination port number."
    REFERENCE
       "RFC 1725 [RFC1725] defines Version 3 of the Post Office
       Protocol."



Bierman, et al.              Informational                     [Page 31]

RFC 2896                     RMON PI Macros                  August 2000


    ::= { tcp 110,
       udp 110 }     -- RFC defines tcp use

sunrpc PROTOCOL-IDENTIFIER

    PARAMETERS {
        tracksSessions(1) -- learn port mapping of programs
    }
    ATTRIBUTES {
        hasChildren(0)   -- port mapper function numbers
    }
    DESCRIPTION
       "SUN Remote Procedure Call Protocol. Port mapper function
       requests are sent to this destination port."
    CHILDREN
       "Specific RPC functions are represented as children of the sunrpc
       protocol.  Each 'RPC function protocol' is identified by its
       function number assignment. RPC function number assignments are
       defined by different naming authorities, depending on the
       function identifier value.
       From [RFC1831]:

       Program numbers are given out in groups of hexadecimal 20000000
       (decimal 536870912) according to the following chart:

                     0 - 1fffffff   defined by [e-mail]
              20000000 - 3fffffff   defined by user
              40000000 - 5fffffff   transient
              60000000 - 7fffffff   reserved
              80000000 - 9fffffff   reserved
              a0000000 - bfffffff   reserved
              c0000000 - dfffffff   reserved
              e0000000 - ffffffff   reserved

       Children of 'sunrpc' are encoded as [ 0.0.0.111], the protocol
       identifier component for 'sunrpc', followed by [ a.b.c.d ], where
       a.b.c.d is the 32 bit binary RPC program number encoded in
       network byte order.  For example, a protocolDirID-fragment value
       of:
           0.0.0.111.0.1.134.163

       defines the NFS function (and protocol).

       Children are named as 'sunrpc' followed by the RPC function
       number in base 10 format. For example, NFS would be named:
           'sunrpc 100003'."
    DECODING
       "The first packet of many SUNRPC transactions is sent to the



Bierman, et al.              Informational                     [Page 32]

RFC 2896                     RMON PI Macros                  August 2000


       port- mapper program, and therefore decoded statically by
       monitoring RFC portmap requests [RFC1831]. Any subsequent packets
       must be decoded and correctly identified by 'remembering' the
       port assignments used in each RPC function call (as identified
       according to the procedures in the RPC Specification Version 2
       [RFC1831]).

       In some cases the port mapping for a particular protocol is well
       known and hard coded into the requesting client.  In these cases
       the client will not send portmap requests; instead it will send
       the SUNRPC request directly to the well known port.  These cases
       are rare and are being eliminated over time.  NFS is the most
       significant SUNRPC program of this class.  Such programs should
       still be declared as children of SUNRPC as described under
       CHILDREN above.  How an implementation detects this behaviour and
       handles it is beyond the scope of this document.

       The 'tracksSessions(1)' PARAMETER bit is used to indicate whether
       the probe can (and should) monitor portmapper activity to
       correctly track SUNRPC connections."
    REFERENCE
       "RFC 1831 [RFC1831] defines the Remote Procedure Call Protocol
       Version 2.  The authoritative list of RPC Functions is identified
       by the URL:
           ftp://ftp.isi.edu/in-notes/iana/assignments/sun-rpc-numbers"
    ::= { tcp 111,
       udp 111 }

auth PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Authentication Service; Identification Protocol."
    REFERENCE
       "RFC 1413 [RFC1413] defines the Identification Protocol."
    ::= { tcp 113 }

sftp PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Simple File Transfer Protocol; (historical)."
    REFERENCE
       "RFC 913 [RFC913] defines the Simple File Transfer Protocol."
    ::= { tcp 115 }

uucp-path  PROTOCOL-IDENTIFIER




Bierman, et al.              Informational                     [Page 33]

RFC 2896                     RMON PI Macros                  August 2000


    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "UUCP Path Service"
    REFERENCE
       "RFC 915 [RFC915] defines the Network Mail Path Service."
    ::= { tcp 117 }

nntp PROTOCOL-IDENTIFIER
    PARAMETERS { }
    ATTRIBUTES { }
    DESCRIPTION
       "Network News Transfer Protocol"
    REFERENCE
       "RFC 977 [RFC977] defines the Network News Transfer Protocol."
    ::= { tcp 119 }

cfdptkt PROTOCOL-IDENTIFIER