[nsp] NBAR, Gnutella and 'match protocol http url'

Jim Dueltgen jimd at lmi.net
Wed Jul 2 17:18:32 EDT 2003


Sorry, that was perhaps misleading of me.  I'm using the "ip nbar 
port-map custom-xx" (xx can be 01 through 10) command to identify 
traffic from programs that aren't covered by the built-in PDLMs; 
things like eDonkey, BitTorrent, some gaming protocols, etc.  So, I 
guess one wouldn't call that a custom PDLM, just custom port maps 
within NBAR.

- Jim

>  > Since the 12.2.(15)T1 release we've been getting excellent, reliable
>>  results using NBAR to manage T1 (single and multilink) utilization on
>>  2620s that serve multi-tenant unit buildings.  These apartments
>>  mostly house college students and they hammer the circuit with every
>  > p2p and broadband app in existence.
>
>  > The built-in PDLMs don't handle everything but with some careful packet
>>  analysis, the custom PDLMs we've added have done a great job.
>
>AFAIK, all the Cisco-provided PDLM's have been integrated into 12.2(15)T1 --
>are you actually writing your own? If so, where were you able to find the
>spec?



More information about the cisco-nsp mailing list