I was having issues finding the list of all default NSServices on docs.vmware.com. So with the help fo a nsservices.json file I compiled a list.
I have extracted ICMP, ALG, and L4 Port Set.
ICMP
| Display Name | Protocol | ICMP type |
|---|---|---|
| ICMP | ICMPv4 | 3 |
| ICMP Echo Reply | ICMPv4 | 0 |
| ICMP Echo Request | ICMPv4 | 8 |
| ICMP Redirect | ICMPv4 | 5 |
| ICMP Router Advertisement | ICMPv4 | 9 |
| ICMP Router Solicitation | ICMPv4 | 10 |
| ICMP Source Quench | ICMPv4 | 4 |
| ICMP Time Exceeded | ICMPv4 | 11 |
| ICMPv4-ALL | ICMPv4 | |
| ICMPv6-ALL | ICMPv6 | |
| IPv6-ICMP Destination Unreachable | ICMPv6 | 1 |
| IPv6-ICMP Echo Reply | ICMPv6 | 129 |
| IPv6-ICMP Echo Request | ICMPv6 | 128 |
| IPv6-ICMP Multicast Listener Done | ICMPv6 | 132 |
| IPv6-ICMP Multicast Listener Query | ICMPv6 | 130 |
| IPv6-ICMP Multicast Listener Report | ICMPv6 | 131 |
| IPv6-ICMP Neighbor Advertisement | ICMPv6 | 136 |
| IPv6-ICMP Neighbor Solicitation | ICMPv6 | 135 |
| IPv6-ICMP Packet Too Big | ICMPv6 | 2 |
| IPv6-ICMP Parameter Problem | ICMPv6 | 4 |
| IPv6-ICMP Time Exceeded | ICMPv6 | 3 |
| IPv6-ICMP Version 2 Multicast Listener | ICMPv6 | 143 |
Application Layer Gateway (ALG)
These are a little smarter. They look at the traffic and can open other required ports. Most famous I would say are the FTP and RPC protocols.
| Display name | Destination port |
|---|---|
| FTP | 21 |
| MS_RPC_TCP | 135 |
| MS_RPC_UDP | 135 |
| ORACLE_TNS | 1521 |
| SUN_RPC_TCP | 111 |
| SUN_RPC_UDP | 111 |
| TFTP | 69 |
L4 port sets
| Display name | Protocol | Port |
|---|---|---|
| AD Server | TCP | 1024 |
| Active Directory Server | TCP | 464 |
| Active Directory Server UDP | UDP | 464 |
| CIM-HTTP | TCP | 5988 |
| CIM-HTTPS | TCP | 5989 |
| DCM Java Object Cache port | TCP | 7100 |
| DHCP, MADCAP | UDP | 2535 |
| DHCP-Client | UDP | 68 |
| DHCP-Server | UDP | 67 |
| DHCPv6 Client | UDP | 546 |
| DHCPv6 Server | UDP | 547 |
| DNS | TCP | 53 |
| DNS-UDP | UDP | 53 |
| Directory Services | TCP | 5725 |
| EdgeSync service | TCP | 50636 |
| EdgeSync service/ADAM | TCP | 50389 |
| Enterprise Manager RMI port | TCP | 1850 |
| Enterprise Manager Reporting port | TCP | 3339 |
| Enterprise Manager Servlet port SSL | TCP | 1810 |
| Enterprise ManagerAgent port | TCP | 1831 |
| Exchange ActiveSync | UDP | 2883 |
| For X.400 connections over TCP | TCP | 102 |
| H323 Call Signaling | TCP | 1720 |
| H323 Gatekeeper Discovery | UDP | 1718 |
| HBR Server App | TCP | 5480 |
| HTTP | TCP | 80 |
| HTTPS | TCP | 443 |
| HTTPS, net.tcp binding | TCP | 32843,32844,32845 |
| IBM DB2 | TCP | 5000 |
| IKE (Key Exchange) | UDP | 500 |
| IKE (NAT Traversal) | UDP | 4500 |
| IMAP | TCP | 143 |
| IMAP_SSL | TCP | 993 |
| ISAKMP | UDP | 500 |
| Java Object Cache port | TCP | 7000 |
| KERBEROS | TCP | 88 |
| KERBEROS-TCP | TCP | 88 |
| KERBEROS-UDP | UDP | 88 |
| LDAP | TCP | 389 |
| LDAP Global Catalog | TCP | 3268 |
| LDAP-UDP | UDP | 389 |
| LDAP-over-SSL | TCP | 636 |
| LDAP-over-SSL-UDP | UDP | 636 |
| Log Loader | TCP | 44000 |
| MGCP (TCP) | TCP | 2428 |
| MGCP (UDP) | UDP | 2427 |
| MS Customizable | TCP | 64327 |
| MS Replication service | TCP | 808 |
| MS Unified Messaging server | TCP | 5060,5061,5062 |
| MS Unified Messaging server - Client Access | TCP | 5075,5076,5077 |
| MS Unified Messaging server-Phone | TCP | 5060,5061,5065,5066,5067,5068 |
| MS-DS | TCP | 445 |
| MS-DS-TCP | TCP | 445 |
| MS-DS-UDP | UDP | 445 |
| MS-SQL-M | UDP | 1434 |
| MS-SQL-M-TCP | TCP | 1434 |
| MS-SQL-S | TCP | 1433 |
| MSN (TCP) | TCP | 1863 |
| MSN (UDP) | UDP | 1863 |
| Microsoft Media Server (TCP) | TCP | 1755 |
| Microsoft Media Server (UDP) | UDP | 1755 |
| MySQL | TCP | 3306 |
| NBDG-Broadcast-V1 | UDP | 138 |
| NBNS-Broadcast-V1 | UDP | 137 |
| NFS (TCP) | TCP | 2049 |
| NFS (UDP) | UDP | 2049 |
| NFS Client | TCP | 111 |
| NFS Client UDP | UDP | 111 |
| NFS-Server-TCP | TCP | 2049 |
| NFS-Server-UDP | UDP | 2049 |
| NNTP | TCP | 119 |
| NNTP_SSL | TCP | 563 |
| NTP | UDP | 123 |
| NTP Time Server | UDP | 123 |
| NetBios Datagram (TCP) | TCP | 138 |
| NetBios Datagram (UDP) | UDP | 138 |
| NetBios Name Service (TCP) | TCP | 137 |
| NetBios Name Service (UDP) | UDP | 137 |
| NetBios Session Service (TCP) | TCP | 139 |
| NetBios Session Service (UDP) | UDP | 139 |
| OC4J Forms / Reports Instance | TCP | 8888 |
| OC4J Forms / Reports Instance (8889) | TCP | 8889 |
| ORACLE-FORM-SERVICES | TCP | 9000 |
| ORACLE-HTTP | TCP | 7777 |
| ORACLE-XDB-FTP | TCP | 2100 |
| OS Agent | TCP | 14000 |
| Office Server Web Services, HTTP, SSL | TCP | 56737,56738 |
| Office communication server | TCP | 5075,5076,5077 |
| Oracle | TCP | 1521 |
| Oracle Connection Manager (CMAN) | TCP | 1630 |
| Oracle Connection Manager Admin (CMAN) | TCP | 1830 |
| Oracle Enterprise Manager Web Console | TCP | 5500 |
| Oracle Forms Server 6 / 6i | TCP | 9000 |
| Oracle GIOP IIOP | TCP | 2481 |
| Oracle GIOP IIOP for SSL | TCP | 2482 |
| Oracle HTTP Server Diagnostic Port | TCP | 7200 |
| Oracle HTTP Server Jserv port | TCP | 8007 |
| Oracle HTTP Server Port Tunneling | TCP | 7501 |
| Oracle HTTP Server SSL port | TCP | 4443 |
| Oracle HTTP Server listen port | TCP | 7778 |
| Oracle HTTP Server port | TCP | 7777 |
| Oracle Intelligent Agent (1748) | TCP | 1748 |
| Oracle Intelligent Agent (1754) | TCP | 1754 |
| Oracle Intelligent Agent (1808) | TCP | 1808 |
| Oracle Intelligent Agent (1809) | TCP | 1809 |
| Oracle Internet Directory(SSL) | TCP | 636 |
| Oracle Internet Directory(SSL, 4031) | TCP | 4031 |
| Oracle Internet Directory(non-SSL) | TCP | 389 |
| Oracle Internet Directory(non-SSL, 4032) | TCP | 4032 |
| Oracle JDBC for Rdb Thin Server | TCP | 1701 |
| Oracle Names | TCP | 1575 |
| Oracle Net Listener | TCP | 1526 |
| Oracle Net Listener / Enterprise Manager Repository port | TCP | 1521 |
| Oracle Notification Service local port | TCP | 6100 |
| Oracle Notification Service remote port | TCP | 6200 |
| Oracle Notification Service request port | TCP | 6003 |
| Oracle OC4J AJP | TCP | 3301 |
| Oracle OC4J IIOP | TCP | 3401 |
| Oracle OC4J IIOPS1 | TCP | 3501 |
| Oracle OC4J IIOPS2 | TCP | 3601 |
| Oracle OC4J JMS | TCP | 3701 |
| Oracle OC4J RMI | TCP | 3201 |
| Oracle SOAP Server | TCP | 9998 |
| Oracle Times Ten (15000) | TCP | 15000 |
| Oracle Times Ten (15002) | TCP | 15002 |
| Oracle Times Ten (15004) | TCP | 15004 |
| Oracle TimesTen | TCP | 4662 |
| Oracle TimesTen (4758) | TCP | 4758 |
| Oracle TimesTen (4759) | TCP | 4759 |
| Oracle TimesTen (4761) | TCP | 4761 |
| Oracle TimesTen (4764) | TCP | 4764 |
| Oracle TimesTen (4766) | TCP | 4766 |
| Oracle TimesTen (4767) | TCP | 4767 |
| Oracle XMLDB FTP Port | TCP | 2100 |
| Oracle XMLDB HTTP port | TCP | 8080 |
| Oracle-2 | TCP | 1526 |
| Oracle9iAS Clickstream Collector Agent | TCP | 6668 |
| Oracle9iAS Web Cache Admin port | TCP | 4000 |
| Oracle9iAS Web Cache HTTP Listen(SSL) port | TCP | 4444 |
| Oracle9iAS Web Cache HTTP Listen(non-SSL) port | TCP | 7779 |
| Oracle9iAS Web Cache Invalidation port | TCP | 4001 |
| Oracle9iAS Web Cache Statistics port | TCP | 4002 |
| OracleAS Certificate Authority (OCA) - Mutual Authentication | TCP | 4401 |
| OracleAS Certificate Authority (OCA) - Server Authentication | TCP | 4400 |
| PC Anywhere (TCP) | TCP | 5631 |
| PC Anywhere (UDP) | UDP | 5632 |
| POP3 | TCP | 110 |
| POP3_SSL | TCP | 995 |
| PostgreSQL | TCP | 5432 |
| PostgresSQL | TCP | 5432 |
| RDP | TCP | 3389 |
| RFB | TCP | 5900-5964 |
| RPC, DFSR (SYSVOL) | TCP | 5722 |
| RTSP (TCP) | TCP | 554 |
| RTSP (UDP) | UDP | 554 |
| Routing Engine service | TCP | 691 |
| SAP Admin console | TCP | 20005 |
| SAP Alert Server | TCP | 30011 |
| SAP Backup Server | TCP | 30017 |
| SAP Cache Server | TCP | 1095 |
| SAP Central Software Deployment Manager | TCP | 20201 |
| SAP Comm | TCP | 20003 |
| SAP Content Server | TCP | 1090 |
| SAP Cruiser | TCP | 30008 |
| SAP Design Time Repository | TCP | 50015 |
| SAP Dispatcher | TCP | 3200 |
| SAP Dispatcher Netweaver App Server | UDP | 3200 |
| SAP Enqueue Repl 2 | TCP | 50116 |
| SAP Enqueue Svr | TCP | 3201 |
| SAP Exchange Groupware Connector (DCOM) | TCP | 135 |
| SAP File Adapter | TCP | 8230 |
| SAP GRMG Service (Heartbeat) | TCP | 30006 |
| SAP Gateway Netweaver App Server | UDP | 3300 |
| SAP HTTP | TCP | 50000 |
| SAP HTTP Server | TCP | 30005 |
| SAP HTTP Server 2 | TCP | 8353 |
| SAP HTTPS | TCP | 50001 |
| SAP HostControl | TCP | 1128 |
| SAP HostControlS | TCP | 1129 |
| SAP IBM | TCP | 50000,4402 |
| SAP ICM HTTP | TCP | 8000 |
| SAP IIOP | TCP | 50007 |
| SAP IIOP initial | TCP | 50002 |
| SAP IIOPS | TCP | 50003 |
| SAP IPC Dispatcher Mobile client | TCP | 4444 |
| SAP IPC Dispatcher Mobile client 2 | TCP | 4363 |
| SAP IPC Server | TCP | 9999 |
| SAP IPC data loader | TCP | 4445 |
| SAP Import Mgr | TCP | 20006 |
| SAP Index Server | TCP | 30003 |
| SAP Index Server 2 | TCP | 8351 |
| SAP Inst | TCP | 21212,21213 |
| SAP Inst on IBM | TCP | 59975,59976 |
| SAP Inter Server COmm | TCP | 20004 |
| SAP JDBCAdapter | TCP | 8220 |
| SAP JMS | TCP | 50010 |
| SAP JMS Adapter | TCP | 8210 |
| SAP JMS/JDBC/File Adapter Server | TCP | 8200 |
| SAP Java Debug | TCP | 50021 |
| SAP Java Join | TCP | 50020 |
| SAP Layout Server | TCP | 31596,31597,31604 |
| SAP Layout Server 2 | TCP | 31596 |
| SAP Layout Server Adobe InDesign | TCP | 31603 |
| SAP Layout Server Quark Express | TCP | 31602 |
| SAP LiveCache | TCP | 7200,7210,7269,7270,7575 |
| SAP Lotus Domino - Connector | TCP | 62026-62029 |
| SAP Lotus Domino - Proxy | TCP | 62126-62129 |
| SAP MDM Server | TCP | 2000-2002 |
| SAP Mapping Manager | TCP | 3909 |
| SAP Message Server HTTP | TCP | 8100 |
| SAP Monitoring (GRMG) | TCP | 8366 |
| SAP Msg Svr | TCP | 3600 |
| SAP Msg Svr 2 | TCP | 3601 |
| SAP Msg Svr HTTP | TCP | 8101 |
| SAP Name Server | TCP | 30001 |
| SAP Name Server 2 | TCP | 8355 |
| SAP Oracle Listener | TCP | 1527 |
| SAP P4 | TCP | 50004 |
| SAP P4 over HTTP | TCP | 50005 |
| SAP P4 over SSL | TCP | 50006 |
| SAP PAW Communication Server | TCP | 1099 |
| SAP PAW Servlet Engine | TCP | 1089 |
| SAP Pre Processor | TCP | 30002 |
| SAP Pre Processor 2 | TCP | 8357 |
| SAP Queue Server | TCP | 30004 |
| SAP Queue Server 2 | TCP | 8352 |
| SAP RFC Server | TCP | 30007 |
| SAP Router | TCP | 3299 |
| SAP SDM/SL | TCP | 50017,50018,50019 |
| SAP SNC secured gateway | TCP | 4800 |
| SAP Start Service | TCP | 50013 |
| SAP Start Service 2 | TCP | 50014 |
| SAP Syndicator Service | TCP | 20007 |
| SAP Telnet | TCP | 50008 |
| SAP Upgrade | TCP | 4238,4239,4240,4241 |
| SAP gateway - CPIC/RFC | TCP | 3300 |
| SAP gateway/replication | TCP | 3301 |
| SAP network Test Program | TCP | 3298 |
| SAP printer spooler | TCP | 515 |
| SIP 5060 | UDP | 5060 |
| SIP 5061 | UDP | 5061 |
| SMB | TCP | 445 |
| SMB Server | TCP | 445 |
| SMB Server UDP | UDP | 445 |
| SMTP | TCP | 25 |
| SMTP_TLS | TCP | 587 |
| SNMP | UDP | 161 |
| SNMP-Receive | UDP | 161 |
| SNMP-Send | UDP | 162 |
| SOAP | TCP | 9389 |
| SQL Analysis service | TCP | 2383 |
| SQL Server Browser service | TCP | 2382 |
| SSH | TCP | 22 |
| Server Message Block (SMB) | TCP | 137,138,139 |
| Site Replication service | TCP | 379 |
| Skinny | TCP | 2000 |
| Syslog (TCP) | TCP | 514 |
| Syslog (UDP) | UDP | 514 |
| Syslog-Server | TCP | 514 |
| Syslog-Server-UDP | UDP | 514 |
| T120 (Whiteboard A43) | TCP | 1503 |
| TELNET | TCP | 23 |
| Terminal Services (TCP) | TCP | 3389 |
| Terminal Services (UDP) | UDP | 3389 |
| VMware Consolidated Backup | TCP | 443 |
| VMware VMotion | TCP | 8000 |
| VMware-CIMSLP | UDP | 427 |
| VMware-DVS | TCP | 8301,8302 |
| VMware-DataRecovery | TCP | 22024 |
| VMware-ESXi5.x-TCP | TCP | 902 |
| VMware-ESXi5.x-UDP | UDP | 902 |
| VMware-HA-TCP | TCP | 8182 |
| VMware-HA-UDP | UDP | 8182 |
| VMware-SPS | TCP | 31100,31000 |
| VMware-SRM-H5-UI | TCP | 443 |
| VMware-SRM-HTTP | TCP | 9008 |
| VMware-SRM-Replication | TCP | 8123 |
| VMware-SRM-SOAP | TCP | 8043 |
| VMware-SRM-Server-Management | TCP | 9086 |
| VMware-SRM-UI | TCP | 9085 |
| VMware-SRM-VAMI | TCP | 8080 |
| VMware-SRM-vCentreServer | TCP | 8096 |
| VMware-SRM-vSphereReplication | TCP | 31031,44046 |
| VMware-SRMClient-Server | TCP | 8095 |
| VMware-UpdateMgr | TCP | 9000-9100 |
| VMware-UpdateMgr-Patching | TCP | 735 |
| VMware-UpdateMgr-SOAP | TCP | 8084 |
| VMware-UpdateMgr-VUM | TCP | 9084 |
| VMware-VC-DPM | UDP | 623 |
| VMware-VC-DumpCollector-TCP | TCP | 8000 |
| VMware-VC-DumpSvr | UDP | 6500 |
| VMware-VC-ESXi | TCP | 51915 |
| VMware-VC-RemoteConsole | TCP | 903 |
| VMware-VC-Syslog | TCP | 8001 |
| VMware-VCO-Command | TCP | 8240 |
| VMware-VCO-Data | TCP | 8244 |
| VMware-VCO-Messaging | TCP | 8250 |
| VMware-VCO-VCO-HTTPS | TCP | 8283 |
| VMware-VCO-WebHTTP | TCP | 8280 |
| VMware-VCO-WebHTTPS | TCP | 8281 |
| VMware-VCOMgr-UI | TCP | 1194 |
| VMware-VCOStdAln-Heartbeat | TCP | 1199 |
| VMware-VDM2.x-Ephemeral | TCP | 1024-65535 |
| VMware-VDM2.x-RGS | TCP | 42966 |
| VMware-VR-Replication-Traffic | TCP | 31031,44046 |
| VMware-VR-Server-Management-Traffic | TCP | 8043 |
| VMware-View-PCoIP | TCP | 4172 |
| VMware-View5.x-JMS | TCP | 4001 |
| VMware-View5.x-PCoIP-UDP | UDP | 4172 |
| VMware-iSCSI-Server | TCP | 3260 |
| Vmware-FT-TCP | TCP | 8100,8200 |
| Vmware-FT-UDP | UDP | 8100,8200 |
| Vmware-Heartbeat-PrimarySecondary | TCP | 57348 |
| Vmware-SRM-WSDL-vCentreServer | TCP | 9007 |
| Vmware-UpdateMgr-update | TCP | 9087 |
| Vmware-VC-HTTP | TCP | 10080 |
| Vmware-VC-VC-Internal | TCP | 7500,8005,8006,8083,8085,8086,8087,8443,10109,10111,60099 |
| Vmware-VC-WebAccess | TCP | 8443,9443,10443 |
| Vmware-VCHeartbeat | TCP | 52267 |
| Vmware-VCO-Lookup | TCP | 8230 |
| Vmware-VCO-VCO-HTTP | TCP | 8282 |
| Vmware-VCOStdAln-Remote | TCP | 61616 |
| Vmware-VDM2.x-AJP | TCP | 8009 |
| Vmware-VDM2.x-JMS | TCP | 4100 |
| WINS | TCP | 42 |
| WINS-UDP | UDP | 42 |
| Win - RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS - TCP | TCP | 1025-65535 |
| Win - RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS - UDP | UDP | 1025-65535 |
| Win 2003 - RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS | TCP | 1025-5000 |
| Win 2008 - RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS | TCP | 49152-65535 |
| Windows-Global-Catalog | TCP | 3268 |
| Windows-Global-Catalog-over-SSL | TCP | 3269 |
| Yahoo Messenger (TCP) | TCP | 5050 |
| Yahoo Messenger (UDP) | UDP | 5050 |
| iSQLPlus 10g | TCP | 5560 |
| iSQLPlus 10g (5580) | TCP | 5580 |
To build:
(get-Content "nsservices.json"|ConvertFrom-JSON).results|?{$_.nsservice_element.resource_type -eq 'ALGTypeNSService'}|Select @{l='Display Name';e={$_.display_name}}, @{l='Triggering Port';e={$_.nsservice_element.destination_ports}}
(get-Content "nsservices.json"|ConvertFrom-JSON).results|?{$_.nsservice_element.resource_type -eq 'L4PortSetNSService'}|Select @{l='Display Name';e={$_.display_name}},@{l='Protocol';e={$_.nsservice_element.l4_protocol}}, @{l='Port';e={[system.string]::join(',',$_.nsservice_element.destination_ports)}}
(get-Content "nsservices.json"|ConvertFrom-JSON).results|?{$_.nsservice_element.resource_type -eq 'ICMPTypeNSService'}|Select @{l='Display Name';e={$_.display_name}},@{l='Protocol';e={$_.nsservice_element.protocol}}, @{l='ICMP type';e={[system.string]::join(',',$_.nsservice_element.icmp_type)}}