Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

nbar eDonkey classification - correct?

Hi everybody -

we are classifying traffic on a serial interface with the nbar feature as edonkey traffic. Is it possible that Cisco's nbar mistakes the backup application traffic with edonkey packets?

Our netflow an ip accounting data is not that well syncronized since we enabled the features during different times of the day. So as of now we can't align the different data properly ..

Anybody an idea of how reliable a classification as edonkey might be?

regards

Robert

1 ACCEPTED SOLUTION

Accepted Solutions
Blue

Re: nbar eDonkey classification - correct?

Robert,

The NBAR PDLM uses the well known TCP port 4662 to identify eDonkey. If your backup app uses the same port then it would look just like eDonkey to NBAR.

If the backups and eDonkey are always different IP addresses then you should be able to define your traffic classes to protect your backups.

You can post your config if you would like suggestions.

Please rate helpful posts.

Dave

2 REPLIES
Blue

Re: nbar eDonkey classification - correct?

Robert,

The NBAR PDLM uses the well known TCP port 4662 to identify eDonkey. If your backup app uses the same port then it would look just like eDonkey to NBAR.

If the backups and eDonkey are always different IP addresses then you should be able to define your traffic classes to protect your backups.

You can post your config if you would like suggestions.

Please rate helpful posts.

Dave

New Member

Re: nbar eDonkey classification - correct?

Thanks Dave,

I thought NBAR would look somehow deeper into the application layers ...

870
Views
0
Helpful
2
Replies
CreatePlease to create content