[c-nsp] Cisco nbar - How to detect media streamings

[Velasquez Venegas Jaime Omar]

Hi Matt,

Thank you for replying.My goal is not to block p2p or streamings at all
but to limit the rate on bandwidth usage for those protocols.
Do you know any way to detect media streamings (such as youtube,yahoo
streamings,online radios) with Cisco nbar?
Some people point me to Packeteer as the right tool to address this
problem.


-----Original Message-----
From: Matt Stevens [mailto:matt at elevate.org] 
Sent: Viernes, 23 de Junio de 2006 11:59 a.m.
To: Velasquez Venegas Jaime Omar
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Cisco nbar - How to detect media streamings

Most of the newer P2P PDLM files will detect the protocol on any port.

They appear in the list as being bound to their well-known port(s), but 
will detect traffic matching the signature on any port.
-- 
matt


Velasquez Venegas Jaime Omar wrote:
> Hi.
> 
> I am currently having a problem with traffic from internet to our lan
> overloading bandwith use percentage.Several captures of this traffic
> reveal that this traffic is mainly http.Since it is very likely that
> there is some other protocols embedded in these http sessions I have
> been trying to use cisco nbar at the edge router to detect bittorrent
> traffic, youtube video sessions and other different streamings suchs
as
> windows media streamings and radio streamings.
> 
> I ve found pdlms for bittorrent and other p2p protocols but it seems
> cisco nbar must be binded to a range of protocols to detect it so I
> can't bind bittorrent to tcp/80.
> 
> As for streaming, I ve found no way to detect video streamings and yes
> I've tried http mime video or audio to no avail.
> 
> Can anyone help?
> 
>  
> 
> Thanks!
> 
>  
> 
>  
> 
>  
> 
>  
> 
>  
> 
>  
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/