Do you know how to define your own Cisco NBAR applications?
In today’s networks, application recognition is no longer one of those ‘nice to have’ options when it comes to traffic monitoring, it is a necessity.
Many vendors are now exporting application definitions in their flow exports.
Using NBAR, applications like H.323, Telnet, RTP, Exchange and Skype can all be identified. Additionally, if you are running IOS release 15.1 or higher, can be exported in NetFlow exports.
On a call last week, a customer was looking at various NBAR reports, and seeing a significant amount of traffic showing up as “unknown”, and was wondering what this traffic was and what was the best approach for handling it.
The best way to reduce the amount of “unknown” traffic is twofold.
