Port Summarization

TCP and UDP clients use arbitrary port numbers above 1023
Need to summarize these `ephemeral' port numbers

Simple algorithm:
  For source and destination port
If port is < 1024, leave it unchanged
If port is > 1023, is it a well-known service?
If so, leave it unchanged
Otherwise, replace it with zero