Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

NBAR x NETFLOW

Today I use NBAR, and it works OK, We will implement the NETFLOW.

Can the Netflow replace the NBAR ?

I mean, will the Netflow show all information about applications that the NBAR shows ? . Or NBAR and NETFLOW are complementary management tools ?

TKS

Alexandre

1 REPLY
Cisco Employee

Re: NBAR x NETFLOW

They are pretty complimentary...

This might help you with NBAR

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6558/ps6612/ps6653/prod_qas09186a00800a3ded_ps6616_Products_Q_and_A_Item.html

This is helpful for Netflow

http://www.cisco.com/en/US/products/ps6601/prod_presentation_list.html

Netflow has very specific applications that it can classify. Sometimes the 'true' determination is left for the netflow analyzer (NMS application) to handle.

Netflow provides details about network traffic, where you can filter the search by the IP

address, source/destination, port, AS... so you can isolate which user starts some connections.

NBAR is a classification tool for applications, more for upper layers (4-7), especially a few stateful protocols.

105
Views
4
Helpful
1
Replies
CreatePlease to create content