How Do I Define a Custom Port for a Protocol ?

It is not uncommon for database or web applications to use their own custom defined port for communication in order to improve security or properly integrate into a larger environment. When opening and analyzing capture files, NetworkSmart uses standard default ports for protocols such as HTTP, MYSQL, MSSQL, etc.

To have NetworkSmart analyze a specific protocol on a non-standard port, you must add that port and protocol to the User Defined Ports table as shown below.

screenshot_decodeas.jpg

Step By Step Instructions

Follow these steps to define a custom port for a specific protocol:

  1. From the main NetworkSmart menu, select Tools | Decode As in order to display the Decode As window.
  2. Review the Reserved Ports table in the "Decode As" window in order to make sure the port you want to use is NOT already configured as a default port for another protocol in NetworkSmart.
  3. Enter the custom port number and select the protocol to analyze for this port.
  4. Click "Add" in order to create your custom "Decode As" rule and properly configure NetworkSmart. You should now see your custom port and protocol listed in the User Defined Ports table.
  5. Once have added your own custom "Decode As" rule, you will need to close and reopen your capture files in order for NetworkSmart to properly analyze and decode the data.

Common Questions

Q. Why can't I define custom ports for protocols that are not listed?

A. NetworkSmart contains built-in decoding intelligence for the protocols listed. Therefore, it is possible to provide decoding capabilities for these protocols on non-standard ports. If your desired protocol is not listed this could mean one of two things:

  1. NetworkSmart already decodes the desired protocol based on packet content instead of defined port
  2. NetworkSmart currently does not support the decoding of this protocol.

Q. What if my custom defined port is already listed in NetworkSmart as a Reserved Port?

A. While this may be possible it is not common and probably most unlikely that this would happen. Many applications and process protocol information base some of their rules on port numbers. If this is a valid scenario for your application, please contact LeadByte Support. We will work with you to find a work around to your problem.

Q. Do you have a list of Reserved Ports?

A. Please see the Reserved Ports Table.