NBAR2 Protocol Pack 5.0.0
Release Notes for NBAR2 Protocol Pack 5.0.0
Downloads: This chapterpdf (PDF - 74.0KB) The complete bookPDF (PDF - 4.58MB) | Feedback

Release Notes for NBAR2 Protocol Pack 5.0.0

Release Notes for NBAR2 Protocol Pack 5.0.0

Supported Platforms

Network Based Application Recognition (NBAR) Protocol Pack 5.0.0 is supported on Cisco ASR 1000 Series Aggregation Services Routers, Cisco CSR 1000V Series Cloud Services Routers, and Cisco ISR G2 Series Integrated Services Routers.

New Protocols in NBAR2 Protocol Pack 5.0.0

The following protocols are added to NBAR2 Protocol Pack 5.0.0:

Common Name

Syntax Name

Description

Airplay

airplay

AirPlay (previously called AirTunes) is a proprietary protocol stack/suite developed by Apple Inc. that allows wireless streaming of audio, video, and photos, along with related metadata between devices.

Dropbox

dropbox

Dropbox is a file hosting service operated by Dropbox Inc., that offers cloud storage, file synchronization, and client software. Dropbox allows users to create a special folder on each of their computers, which Dropbox then synchronizes so that it appears to be the same folder (with the same contents) regardless of which computer is used to view it. Files placed in this folder also are accessible through a website and mobile phone applications.

Outlook Web Service

outlook-web-service

Outlook Web Service is a protocol that covers a group of Microsoft's web email services. It includes Outlook email service part of Microsoft Office 365 Business Plan.

Updated Protocols in NBAR2 Protocol Pack 5.0.0

The following protocols are updated in NBAR2 Protocol Pack 5.0.0:

Protocol

Updates

edonkey

Updated signatures to support eMule 0.51a

encrypted-emule

Updated signatures to support eMule 0.51a

Caveats in NBAR2 Protocol Pack 5.0.0


Note


If you have an account on Cisco.com, you can also use the Bug Toolkit to find select caveats of any severity. To reach the Bug Toolkit, log in to Cisco.com and go to http://www.cisco.com/pcgi-bin/Support/Bugtool/launch_bugtool.pl. (If the defect that you have requested cannot be displayed, this may be due to one or more of the following reasons: the defect number does not exist, the defect does not have a customer-visible description yet, or the defect has been marked Cisco Confidential.)

Known Caveats in NBAR2 Protocol Pack 5.0.0

The following table lists the known caveats in NBAR2 Protocol Pack 5.0.0:

Known Caveat

Description

CSCtx65481

Traffic generated by pcAnywhere for mac and pcAnywhere mobile app might be misclassified as unknown

CSCub62860

gtalk-video might be misclassified as rtp

CSCub89835

gbridge pc client might not be blocked

CSCuc43505

Traffic generated by AIM Pro might be misclassified as unknown and webex-meeting

CSCuc57822

NBAR classification granularity may not work or some protocols may be classified as unknown. The CSCuc57822 caveat is specific to Cisco IOS XE Release 3.7S on Cisco ASR 1000 Series Aggregation Services Routers.

CSCue69212

Traffic generated by qqlive might be misclassified as http

CSCuf98846

Traffic generated by hotmail might be misclassified as http

CSCug12174

Under heavy SSL traffic, the following error message my appear: ": %STILE_CLIENT-4-MAX_LINK_TOUCH_WARN: F0: cpp_cp: NBAR number of flow-slinks threshold is reached, can't allocate more memory for flow-slinks"

CSCug53325

Bittorrent-networking is not applied to any attribute.

Restrictions and Limitations in NBAR2 Protocol Pack 5.0.0

The following table lists the limitations and restrictions in NBAR2 Protocol Pack 5.0.0:

Protocol

Limitation/Restriction

bittorrent

http traffic generated by the bitcomet bittorrent client might be classified as http

capwap-data

For capwap-data to be classified correctly, capwap-control must also be enabled.

ftp

During configuring QoS class-map with ftp-data, the ftp protocol must be selected. As an alternative, the ftp application group can be selected.

livemeeting

Application is discontinued and replaced with ms-lync, traffic generated by livemeeting may be classified as ms-lync

hulu

Encrypted video streaming generated by hulu might be classified as its underlying protocol rtmpe

logmein

Traffic generated by the logmein android app might be misclassified as ssl

ms-lync

Login and chat traffic generated by the ms-lync client might be misclassified as ssl

secondlife

Voice traffic generated by secondlife might be misclassified as ssl

Downloading NBAR2 Protocol Packs

NBAR2 Protocol Packs are available for download as Software Type 'NBAR2 Protocol Pack' on cisco.com software download page (http://www.cisco.com/cisco/software/navigator.html).

Additional References

Related Documents

Related Topic

Document Title

Application Visibility and Control

Application Visibility and Control Configuration Guide

Classifying Network Traffic Using NBAR

Classifying Network Traffic Using NBAR module

NBAR Protocol Pack

NBAR Protocol Pack module

QoS: NBAR Configuration Guide

QoS: NBAR Configuration Guide

QoS Command Reference

Quality of Service Solutions Command Reference

© 2013 Cisco Systems, Inc. All rights reserved.