How to get well known ports report?

[yanevbt]

Hello, I am new to splunk. I am trying to run a report to show what servers our users connect to and on what ports.  the report is going to be reviewed by non IT business unit so it will be nice if the report can have a description to the ports (example: NetBIOS, SQL, LDAP, etc).  Is there a way to do that?  Thank you in advance!

[richgalloway]

After producing the report (using network traffic logs, perhaps), use a lookup file to map port number to services.  The lookup file (I'll call it ports.csv) might look like this:

port,service
22,ssh
53,DNS
80,HTTP
443,HTTPS

and it would be used something like this:

... | lookup ports.csv port OUTPUT service