cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
495
Views
0
Helpful
1
Replies

NBAR port-map empty

a.brazendale
Level 1
Level 1

Hi All,

On one of our 2911 WAN routers i've noticed a high volume of traffic identified by NBAR as 'HL7' protocol (seveal GB). I'm not really sure what this is and after a search around, it looks like it's some health-related product.. I had the thought that it may be incorrectly classifying data as HL7 so I issued the command 'show ip nbar port-map hl7' and it returned nothing, just right back to the enable prompt. So if NBAR doesn't have any port maps associated with this protocol tag, then what is it using to claim/match that all this traffic is hl7?

any ideas?

thanks,

A

1 Reply 1

cadet alain
VIP Alumni
VIP Alumni

Hi,

By inspecting the packet up to layer  7.

Regards.

Don't forget to rate helpful posts.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card