Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

too large default traffic

pls i need to know what is passing thru my router, using 'sh nbar ...' giv few information , and majority of the traffic are classified as default, is there any way i can make the router do more traffic identificatiion and less default .

6 REPLIES
Community Member

Re: too large default traffic

Upgrade your IOS version , the new versions support more protocols... or use Cisco NetFlow or SPAN / PORT MIRROR in your switch for sniff your traffic.

--

Regards,

Raul

(please rate helpful posts)

Community Member

Re: too large default traffic

Please can u tell me how to use this switch command

Community Member

Re: too large default traffic

IOS Config example:

router(config)#monitor session 1 source interface fastethernet 4/2

!--- This configures interface Fast Ethernet 4/2 as source port.

router(config)#monitor session 1 destination interface fastethernet 4/3

!--- The configures interface Fast Ethernet 4/3 as destination port.

For more information visit:

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml

--

Regards,

Raul

(please rate helpful posts)

Super Bronze

Re: too large default traffic

At least on the software routers, there's an NBAR (debug?) option for it to break down unknown traffic by UDP or TCP and port number beyond what NBAR discovery recognizes. This will provide an additional view what's passing through the router.

Once you identified certain traffic of interest, you can define custom NBAR to classify that traffic.

Also, depending on what version of IOS you're using, PDLMs can increase the traffic types that NBAR recognizes.

Community Member

Re: too large default traffic

can u pls explain or give me the commands to do the nbar option.

Super Bronze

Re: too large default traffic

108
Views
0
Helpful
6
Replies
CreatePlease to create content