Telnet on TCP port 00, TFTP on UDP port 00, and ICMP.  Note: ICMP flows are represented in the output using the L0 info (000:00000:00000). The protcol number 0 field is the assigned by Internet Assigned Numbers Authority (IANA). The source and destination field represents the type of ICMP captured by NetFlow. 