What is Cisco NBAR
Posted in NetFlow on November 28th, 2009 by mike@plixer.com
With the barrage of applications today sharing similar behavior characteristics at the protocol level, it becomes necessary to take deep packet inspection steps to determine what the actual application is that is causing the traffic. Thankfully, Cisco already does this for us with something called Network-Based Application Recognition (NBAR) . We explained NBAR support in a recent blog and how it allows us to improve on network traffic analysis.
Once you enable NBAR exports with NetFlow you will notice that since it supports Flexible NetFlow, a few different templates get kicked out.
Michael PattersonScrutinizer Product Manager
Follow Me on Twitter
