Hello mikand, Thanks for reply. As you wrote "insufficient-data' means that is not enough data packets for identifying the application. I think insufficient-data, not to be identified app-id, was undecided application on session browser. However in my case, UNDECIDED traffic had got so many packets and data exceed over about 1.3GB on session browser. Its traffic could be insufficient-data? I suspect that. When captured PCAPs, the traffic was recognized NFS protocol on wireshark. Thanks. Regards. Roh.
... View more