Unknown Protocols Discovered by NBAR

vchoudhary · ‎02-17-2009

Hello ALL

My question & problem is related to NBAR, I have enabled NBAR on one of my Cisco router Interface using the command line â€œip nbar protocol-discoveryâ€ & it discovered bunch of the well known protocols running across my enterprise, but with that it shows huge amount of Bandwidth is eaten-up by unknown protocols.

So, my question is how I can discover that which application are those Unknown protocols? Can you please help me with a way or command to find that?

Thanks for all your help

Vishal

linker.team · ‎02-19-2009

NBAR identifies applications based on the PDLMs available in the router. NBAR reports applications as unknown if there is no PDLM match available in the router. You can find pdlm files in the Cisco site and use the following to load it in the flash

Router(config) # ip nbar pdlm flash://.pdlm

Hope this helps.

Thanks

Don

ManageEngine NetFlow & NBAR Analyzer

www.netflowanalyzer.com