08-11-2008 05:54 AM - last edited on 03-25-2019 03:19 PM by ciscomoderator
pls i need to know what is passing thru my router, using 'sh nbar ...' giv few information , and majority of the traffic are classified as default, is there any way i can make the router do more traffic identificatiion and less default .
08-11-2008 06:18 AM
Upgrade your IOS version , the new versions support more protocols... or use Cisco NetFlow or SPAN / PORT MIRROR in your switch for sniff your traffic.
--
Regards,
Raul
(please rate helpful posts)
08-11-2008 07:14 AM
Please can u tell me how to use this switch command
08-11-2008 07:22 AM
IOS Config example:
router(config)#monitor session 1 source interface fastethernet 4/2
!--- This configures interface Fast Ethernet 4/2 as source port.
router(config)#monitor session 1 destination interface fastethernet 4/3
!--- The configures interface Fast Ethernet 4/3 as destination port.
For more information visit:
http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml
--
Regards,
Raul
(please rate helpful posts)
08-11-2008 04:19 PM
At least on the software routers, there's an NBAR (debug?) option for it to break down unknown traffic by UDP or TCP and port number beyond what NBAR discovery recognizes. This will provide an additional view what's passing through the router.
Once you identified certain traffic of interest, you can define custom NBAR to classify that traffic.
Also, depending on what version of IOS you're using, PDLMs can increase the traffic types that NBAR recognizes.
08-14-2008 02:08 AM
can u pls explain or give me the commands to do the nbar option.
08-14-2008 02:49 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: