[c-nsp] Cisco nbar - How to detect media streamings

Velasquez Venegas Jaime Omar jaime at ulima.edu.pe
Thu Jun 22 22:47:43 EDT 2006


Hi.

I am currently having a problem with traffic from internet to our lan
overloading bandwith use percentage.Several captures of this traffic
reveal that this traffic is mainly http.Since it is very likely that
there is some other protocols embedded in these http sessions I have
been trying to use cisco nbar at the edge router to detect bittorrent
traffic, youtube video sessions and other different streamings suchs as
windows media streamings and radio streamings.

I ve found pdlms for bittorrent and other p2p protocols but it seems
cisco nbar must be binded to a range of protocols to detect it so I
can't bind bittorrent to tcp/80.

As for streaming, I ve found no way to detect video streamings and yes
I've tried http mime video or audio to no avail.

Can anyone help?

 

Thanks!

 

 

 

 

 

 



More information about the cisco-nsp mailing list