cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
719
Views
0
Helpful
9
Replies

Protocol inspection/discovery

alanc3141592654
Level 1
Level 1

Hey all is there any way to do protocol inspection such as NBAR protocol discovery.

On the Cisco 3750 Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2)

I pretty much want to map traffic at the application layer for a single interface. but cisco state nbar is not support for the 3750.

Thanks in advance

9 Replies 9

Rupesh Kashyap
Level 1
Level 1

Hi I have 3750, and I have configured default NBAR, please cross-check again.

did you use

ip nbar protocol-discovery ?

I'm wanting to see what data is going across a fibre link on one of our core switches.

the above command does not work, it could be an ios thing though

GOt it, You want to monitor NBAR with discovery Interface command which is not supporting on ur IOS. Do you any idea of PDLM, if it came with ur IOS ? What Cisco TAC says ?

well if i can't turn nbar on. I doubt it will have a PDLM file.

I've yet to contact tac, thought i would do some research before hand.

I will contact TAC, and let you know.

Joseph W. Doherty
Hall of Fame
Hall of Fame

"but cisco state nbar is not support for the 3750."

I believe that to be correct.

NBAR isn't generally supported on Cisco L3 switches but with a couple of exceptions. I believe a couple of WAN boards for the 6500/7600 support it (e.g. FlexWAN), and the sup32-PISA supports (I think) something similar with FPM.

Mark Yeates
Level 7
Level 7

Alan,

As Joseph stated NBAR is not supported on the 3750. The 3750 does not have the hardware to support NBAR. The only switch that is able to support NBAR is the 6500. This is typically a function that is ran on a router not on a switch.

HTH,

Mark

Thanks for your replies.

Hey All,

Sorry to bring this up again.

But has anyone done any form of traffic analysis between 3750s?

3rd party software?

External packet analyzers are popular, especially the free WireShark. If the 3750 supports SPAN, you can then examine the traffic crossing a port of interest. (Analysis capabilites are also much more extensive than one NBAR provides.)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: