03-16-2009 07:13 PM - edited 03-04-2019 03:57 AM
Hey all is there any way to do protocol inspection such as NBAR protocol discovery.
On the Cisco 3750 Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2)
I pretty much want to map traffic at the application layer for a single interface. but cisco state nbar is not support for the 3750.
Thanks in advance
03-16-2009 08:45 PM
Hi I have 3750, and I have configured default NBAR, please cross-check again.
03-16-2009 10:46 PM
did you use
ip nbar protocol-discovery ?
I'm wanting to see what data is going across a fibre link on one of our core switches.
the above command does not work, it could be an ios thing though
03-16-2009 10:56 PM
GOt it, You want to monitor NBAR with discovery Interface command which is not supporting on ur IOS. Do you any idea of PDLM, if it came with ur IOS ? What Cisco TAC says ?
03-16-2009 11:01 PM
well if i can't turn nbar on. I doubt it will have a PDLM file.
I've yet to contact tac, thought i would do some research before hand.
I will contact TAC, and let you know.
03-17-2009 07:08 PM
"but cisco state nbar is not support for the 3750."
I believe that to be correct.
NBAR isn't generally supported on Cisco L3 switches but with a couple of exceptions. I believe a couple of WAN boards for the 6500/7600 support it (e.g. FlexWAN), and the sup32-PISA supports (I think) something similar with FPM.
03-17-2009 07:44 PM
Alan,
As Joseph stated NBAR is not supported on the 3750. The 3750 does not have the hardware to support NBAR. The only switch that is able to support NBAR is the 6500. This is typically a function that is ran on a router not on a switch.
HTH,
Mark
03-18-2009 02:33 PM
Thanks for your replies.
03-25-2009 09:55 PM
Hey All,
Sorry to bring this up again.
But has anyone done any form of traffic analysis between 3750s?
3rd party software?
03-26-2009 04:24 AM
External packet analyzers are popular, especially the free WireShark. If the 3750 supports SPAN, you can then examine the traffic crossing a port of interest. (Analysis capabilites are also much more extensive than one NBAR provides.)
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: