[c-nsp] Cisco nbar - How to detect media streamings

[Matt Stevens]

Most of the newer P2P PDLM files will detect the protocol on any port.

They appear in the list as being bound to their well-known port(s), but 
will detect traffic matching the signature on any port.
-- 
matt


Velasquez Venegas Jaime Omar wrote:
> Hi.
> 
> I am currently having a problem with traffic from internet to our lan
> overloading bandwith use percentage.Several captures of this traffic
> reveal that this traffic is mainly http.Since it is very likely that
> there is some other protocols embedded in these http sessions I have
> been trying to use cisco nbar at the edge router to detect bittorrent
> traffic, youtube video sessions and other different streamings suchs as
> windows media streamings and radio streamings.
> 
> I ve found pdlms for bittorrent and other p2p protocols but it seems
> cisco nbar must be binded to a range of protocols to detect it so I
> can't bind bittorrent to tcp/80.
> 
> As for streaming, I ve found no way to detect video streamings and yes
> I've tried http mime video or audio to no avail.
> 
> Can anyone help?
> 
>  
> 
> Thanks!
> 
>  
> 
>  
> 
>  
> 
>  
> 
>  
> 
>  
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/