Feedback
|
Table Of Contents
Cisco Service Control Application for Broadband Protocol Pack Notes, Older Protocol Packs (1-18)
New Flavors - (Supported by Release 3.5.0 and later)
SCA BB 2.5.10 Protocol Pack #10
What's new in the SCA BB 2.5.10 Protocol Pack #10
SCA BB 3.0.6 Protocol Pack #10
What's new in the SCA BB 3.0.6 Protocol Pack #10
SCA-BB 3.0.6 Protocol Pack #10 limitations and caveats
SCA BB 3.1.0 Protocol Pack #10
What's new in the SCA BB 3.1.0 Protocol Pack #10
SCA-BB 3.1.0 Protocol Pack #10 limitations and caveats
SCA BB 2.5.10 Protocol Pack #09
What's new in the SCA BB 2.5.10 Protocol Pack #09
SCA-BB 2.5.10 Protocol Pack #09 limitations and caveats
SCA BB 3.0.6 Protocol Pack #09
What's new in the SCA BB 3.0.6 Protocol Pack #09
SCA-BB 3.0.6 Protocol Pack #09 limitations and caveats
SCA BB 3.1.0 Protocol Pack #09
What's new in the SCA BB 3.1.0 Protocol Pack #09
SCA-BB 3.1.0 Protocol Pack #09 limitations and caveats
SCA BB 2.5.10 Protocol Pack #08
What's new in the SCA BB 2.5.10 Protocol Pack #08
SCA BB 3.0.6 Protocol Pack #08
What's new in the SCA BB 3.0.6 Protocol Pack #08
SCA-BB 3.0.6 Protocol Pack #08 limitations and caveats
SCA BB 2.5.10 Protocol Pack #07
What's new in the SCA BB 2.5.10 Protocol Pack #07
SCA-BB 2.5.10 Protocol Pack #07 limitations and caveats
SCA BB 3.0.5A Protocol Pack #07
What's new in the SCA BB 3.0.5A Protocol Pack #07
SCA-BB 3.0.5A Protocol Pack #07 limitations and caveats
SCA BB 2.5.10 Protocol Pack #06
What's new in the SCA BB 2.5.10 Protocol Pack #06
SCA-BB 2.5.10 Protocol Pack #06 limitations and caveats
SCA BB 3.0.4 Protocol Pack #06
What's new in the SCA BB 3.0.4 Protocol Pack #06
SCA-BB 3.0.4 Protocol Pack #06 limitations and caveats
SCA BB 2.5.10 Protocol Pack #05
What's new in the SCA BB 2.5.10 Protocol Pack #05
SCA-BB 2.5.10 Protocol Pack #05 limitations and caveats
SCA BB 3.0.3 Protocol Pack #05
What's new in the SCA BB 3.0.3 Protocol Pack #05
SCA-BB 3.0.3 Protocol Pack #05 limitations and caveats
SCA BB 2.5.9 Protocol Pack #04
What's new in the SCA BB 2.5.9 Protocol Pack #04
SCA BB 3.0.1 Protocol Pack #04
What's new in the SCA BB 3.0.1 Protocol Pack #04
January 2006 Protocol Pack (Protocol Pack #03)
January 2006 2.5.8 Protocol Pack
What's new in the January 2006 2.5.8 Protocol Pack
January 2006 3.0.0 Protocol Pack
What's new in the January 2006 3.0.0 Protocol Pack
November 2005 Protocol Pack (Protocol Pack #02)
What's new in the November 2005 Protocol Pack
September 2005 Protocol Pack (Protocol Pack #01)
What's new in the September 2005 Protocol Pack
Obtaining Documentation and Submitting a Service Request
Cisco Service Control Application for Broadband Protocol Pack Notes, Older Protocol Packs (1-18)
Revised: November 12, 2010, OL-8483-26Introduction
These protocol pack notes for the Cisco Service Control Application for Broadband (SCA BB) describe the content of the various protocol packs that are available at the Software Download page of the Cisco website.
Contents
Overview
Cisco protocol packs include new and improved protocol signatures for SCA BB. A typical signature update is a file containing new and updated signatures for better detection of new or updated popular peer-to-peer applications, gaming applications, and other interesting protocols. When loaded into the SCE platform, these signatures improve classification abilities of SCA BB with minimal or zero SCE platform service downtime.
The protocol pack files are available for Cisco partners and customers for download from the Software Download page of the Cisco website.
Installation
Installation of the SCA BB Protocol Pack #22 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information, see the Cisco Service Control Application for Broadband User Guide for your SCA BB release:
SCA BB Protocol Pack #18
Compatibility Information
The SCA BB Protocol Pack #18 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
SCA BB Release 3.1.7
•
SCA BB Release 3.5.0
•
SCA BB Release 3.5.5
Protocol Library Updates
New Protocols
•
TruPhone - VoIP (Supported by 3.5.0 and later)
•
Quake 3 - Gaming server (Supported by 3.5.0 and later)
•
Maple Story - Online game
•
Call of Duty - Online game (Supported by 3.5.0 and later)
•
VPN - IPSec
•
Youtube HQ - Youtube High Quality videos
•
Fileguri - P2P
•
TomatoPang - P2P
•
Songsari - P2P
•
Starwars Jedi Knight - Port based protocol (Supported by 3.5.0 and later)
•
Wolfenstein Enemy Territory - Port based protocol (Supported by 3.5.0 and later)
Updated Protocols
•
PPLive - Support updated to English client version 1.9.47 and Chinese client version 2.2.2
•
Ares - Support updated to client version 2.1.1.3035
•
Youtube HD - Support enhanced and now include Youtube Shows
•
Skype - Support enhanced to client version 4.1.0.136
•
Google Talk - Support enhanced
•
Counter Strike - Port based protocol is now based on Quake3 protocol. (Supported by 3.5.0 and later)
•
Elite Force - Port based protocol is now based on Quake3 protocol. (Supported by 3.5.0 and later)
•
Soldier of Fortune - Port based protocol is now based on Quake3 protocol. (Supported by 3.5.0 and later)
New Flavors - (Supported by Release 3.5.0 and later)
•
Facebook IM - Instant Messenger
•
Fox News - Flash based video flavor
•
NBA - Flash based video flavor
•
CNN - Flash based video flavor
•
MetaCafe - Flash based video flavor
•
Rutube - Flash based video flavor
•
ESPN - Flash based video flavor
•
Vimeo - Flash based video flavor
•
MSN - Flash based video flavor
•
MLB - HTTP based video flavor
•
NetFlix - Online video service
•
AppleTV - Online video service
Resolved Caveats
CSCta25715
uTorrent 1.9 with uTP enabled might be misclassified as Generic UDP.
CSCta92977
uTorrent might be misclassified as Generic TCP when multiple flows are sent together.
CSCsy81524
PPLive 2.0.21 might be misclassified as Behavioral P2P.
Known Limitations
CSCsv44394
The installation of Protocol Pack #18 upon SCOS release 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #18 features.
Step 1
Extract the SPQI file from the 3.1.7 Protocol Pack #18 ZIP package and install the Protocol Pack as usual using SCA BB.
Step 2
Extract the script.txt file from the 3.1.7 Protocol Pack #18 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.CSCsx78811
Upgrading from 3.1.7 with Protocol Pack #18 to 3.5.0 with Protocol Pack #18 requires manual configuration in order to support all the Protocol Pack #18 features.
Step 1
Remove the DSS. Go to:
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Save the PQB file.
Step 3
Install 3.5.0 with Protocol Pack 18.
Note
Upgrading from 3.5.x with Protocol Pack 18 to a later SCOS version with Protocol Pack 18 will display warning messages. Once the new configuration is saved, warnings will no longer be displayed.
CSCta17754
Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5 .
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols, refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #18. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
SCA BB Protocol Pack #17
Compatibility Information
The SCA BB Protocol Pack #1t can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
SCA BB Release 3.1.6
•
SCA BB Release 3.1.6S
•
SCA BB Release 3.1.7
•
SCA BB Release 3.5.0
Protocol Library Updates
New Protocols
•
Flash YouTube HD
•
Flash YouTube Normal
•
Yahoo General Login
•
Sky Player - (Supported by 3.5.0 only)
Updated Protocols
•
Gnutella - Support enhanced and updated.
•
Joost - Support updated in response to the new Joost Web-Based Service
•
Skype - Support enhanced and updated to client version 4.0.0.224
•
YouTube - Support enhanced and updated in response to changes in YouTube hosting mechanism.
•
Yahoo Flash - Support enhanced and updated in response to changes in Yahoo hosting (Supported by 3.5.0 only)
Resolved Caveats
CSCsx69375
In certain scenarios, several online games might be misclassified as Bittorrent Encrypted.
CSCsy28207
In certain scenarios, Skype might be misclassified as Bittorrent Encrypted traffic.
CSCsy33909
WinnyP detection dropped compared to previous protocol packs.
CSCsy44809
Yahoo Mail login over HTTPS might be misclassified as Yahoo Messenger traffic.
Known Limitations
CSCsv03281
Hitless upgrade in 3.1.6S is not supported.
CSCsv44394
The installation of Protocol Pack #17 upon SCOS release 3.1.6, 3.1.6S, or 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #17 features.
Step 1
Extract the SPQI file from the 3.1.6/3.1.6S/3.1.7 Protocol Pack #17 ZIP package and install the Protocol Pack as usual using SCA BB.
Step 2
Extract the script.txt file from the 3.1.6/3.1.6S/3.1.7 Protocol Pack #17 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.CSCsx78811
Upgrading from 3.1.x with Protocol Pack #16 or later to 3.5.0 with Protocol Pack #16 or later requires the following manual configuration in order to support all the latest Protocol Pack features.
Step 1
Remove the DSS. Go to:
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Save the PQB file.
Step 3
Install 3.5.0 with Protocol Pack 17.
CSCsz30295
Hitless upgrade in 3.1.7/3.5.0 SCE8000 is not supported.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols, refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #17. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
SCA BB Protocol Pack #16
Compatibility Information
The SCA BB Protocol Pack #16 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
SCA BB Release 3.1.1
•
SCA BB Release 3.1.5
•
SCA BB Release 3.1.6
•
SCA BB Release 3.1.6S
•
SCA BB Release 3.1.7
•
SCA BB Release 3.5.0
Protocol Library Updates
New Protocols
•
Newsgroups Downloads (Supported by 3.5.0 only)
•
SIP-I - VoIP
•
Telepresence CTS-3000 - VoIP
•
HyppTV - Internet Video
•
MegaUpload - OneClick Hosting (Supported by 3.5.0 only)
•
RapidShare - OneClick Hosting (Supported by 3.5.0 only)
•
Vagaa - Internet Video (Not supported by 3.1.1)
Updated Protocols
•
uTorrent - Support enhanced and updated to client version 1.9 Beta (build 13910)
•
WinnyP - Support enhanced and updated to client version 2.0b7.28 (Disabled by default, Please see manual configuration for further details)
•
UC - Support enhanced and updated to client version 2008beta2 (Not supported by 3.1.1)
Resolved Caveats
CSCsw78280
In certain scenarios, Manolito protocol is misclassified as Behavioral Upload/Download.
CSCsq04726
In certain scenarios Bittorrent might be misclassified as Generic traffic.
CSCsq96038
In certain scenarios, Oracle traffic might be misclassified as Encrypted eMule.
CSCsr17352
Some online games might be misclassified as Winny 2.
CSCsr22638
In certain scenarios, SSH traffic might be misclassified as Behavioral P2P.
CSCsu06798
In certain scenarios, uTorrent 1.8 might be misclassified as Generic TCP.
CSCsv54098
In certain scenarios, RTMP based protocols such as iView and Hulu might be misclassified as RTMP.
CSCsw33095
UDP traffic might be misclassified as Generic UDP when open-flow-mode is set to minimum packets 5.
Known Limitations
CSCsv44394
The installation of Protocol Pack #16 upon SCOS release 3.1.5, 3.1.6, 3.1.6S, or 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #16 features.
Step 1
Extract the .SPQI file from the 3.1.5/3.1.6/3.1.6S/3.1.7 Protocol Pack #16 ZIP package and install the Protocol Pack as usual using SCA-BB.
Step 2
Extract the script.txt file from the 3.1.5/3.1.6/3.1.6S/3.1.7 Protocol Pack #16 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.CSCsx78811
Upgrading from 3.1.1, 3.1.5, 3.1.6, 3.1.6S, or 3.1.7 with Protocol Pack #16 to 3.5.0 with Protocol Pack #16 requires the following manual configuration in order to support all the Protocol Pack #16 features.
Step 1
Remove the DSS. Go to:
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Save the PQB file.
Step 3
Install 3.5.0 with Protocol Pack 16.
CSCsv03281
Hitless upgrade in 3.1.6S is not supported.
CSCsv03281
Hitless upgrade on top of 3.1.1 with protocol pack #15 is not supported.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #16. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
WinnyP manual configuration instructions
To enable WinnyP classification, the following root level CLI commands should be executed
SCE#>configureSCE (config)#>interface LineCard 0SCE (config if)#>tunable GT_PL_WINNYP_CLASSIFICATION_ENABLE value trueSCE(config if)#>tunable GT_PL_WINNYP_AGGRESSIVE_CLASSIFICATION_ENABLE value trueThe following command should be executed in 3.5.0 only:
SCE2000(config if)#>tunable GT_PL_BEHAVIORAL_DOWNLOAD_CHECK_SPECIFIC_SIGNATURES value trueSCA BB Protocol Pack #15
Compatibility Information
The SCA BB Protocol Pack #15 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
SCA BB Release 3.0.6
•
SCA BB Release 3.1.1
•
SCA BB Release 3.1.5
•
SCA BB Release 3.1.6
•
SCA BB Release 3.1.6S
Protocol Library Updates
New Protocols
•
TVUPlayer - P2PTV
•
PPFilm - P2PTV
•
ABC iView - Video Hosting
•
Naver Phone - VoIP
•
NateOn - VoIP
•
Google Mobile Maps
•
Youtube Mobile
Updated Protocols
•
Yahoo Messenger - Support enhanced and updated to client version 8.1.0.421
•
Skype - Support enhanced and updated to client version 4 beta 1
Resolved Caveats
CSCsr04812
In certain scenarios, third party gaming is misclassified as Skype.
CSCsr72588.
In certain scenarios, Mario cart is misclassified as Bittorrent.
CSCsu49225
In certain scenarios, LDAP is misclassified as Skype.
CSCsr81179.
In certain scenarios, RTMP is misclassified as Generic TCP.
CSCsr81134.
RTMP misclassified as Generic Non-Established due to premature aging.
CSCsr30750
MS Remote Desktop misclassified as MSN Messenger.
CSCsr93345
VNC misclassified as PPLive.
Known Limitations
CSCsv44394
The installation of Protocol Pack #15 upon SCOS release 3.1.5 or 3.1.6 requires the following manual configuration in order to support all the Protocol Pack #15 features.
Step 1
Extract the .SPQI file from the 3.1.5/3.1.6 Protocol Pack #15 ZIP package and install the Protocol Pack as usual using SCA-BB.
Step 2
Extract the script.txt file from the 3.1.5/3.1.6 Protocol Pack #15 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.CSCsv03281
Hitless upgrade in 3.1.6S is not supported.
CSCsu91574
In extreme network topologies where UDP is throttled by a NAT or a Firewall device, Skype might be misclassified as Generic TCP.
PPFilm might be misclassified as Generic TCP
PPFilm video service consists of hundreds of channels updated on a daily basis. The SCE platform may not support all channels.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/cgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #15. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
Google Mobile Maps special configuration instructions:
Step 1
Create the Google Mobile Maps flavors
a.
From the Configuration drop-down menu, select Flavors.
The Flavors Editing dialog opens.
b.
Create the two new flavors:
•
A flavor of type HTTP URL; for example "Google Mobile Maps URL".
Add a parameter to this flavor with a Host Suffix value of "*.google.com" (case sensitive). Leave all other fields as "*".
•
A flavor of type HTTP UserAgent; for example "Google Mobile Maps User-Agent".
Add a parameter to this flavor with a User Agent value of "WINM-TEST-USER-AGENT" (case sensitive).
c.
Create a new composite flavor using the new flavors.
•
A flavor of type HTTP Composite; for example "Google Mobile Maps over HTTP".
–
Add a parameter to this flavor with the HTTP User Agent value you created in Step 1 b.
–
Add a parameter to this flavor with the HTTP Url value you created in Step 1 b.
Step 2
Create the Google Mobile Maps service:
Open the Services tab and create a new service called "Google Mobile Maps" under 'HTTP' (or other desired group).
Step 3
Create the Google Mobile Maps service elements:
Create new service elements by filling the following values in the Create Service element dialog (fields that are not listed below should not be changed):
•
Service element:
–
Service: 'Google Mobile Maps'
–
Protocol: 'Browsing'
–
Flavor: 'Google Mobile Maps over HTTP'
Youtube mobile special configuration instructions:
Step 1
Create the Google Mobile Maps flavors
a.
From the Configuration drop-down menu, select Flavors.
The Flavors Editing Dialog opens.
b.
Create the new flavor:
•
A flavor of type RTSP Host Name; for example "Youtube Mobile over RTSP".
Add a parameter to this flavor with a Host Suffix value of "*rtsp-youtube.l.google.com" (case sensitive).
Step 2
Create the Youtube Mobile service:
Open the Services tab and create a new service called "Youtube Mobile" under Streaming (or other desired group).
Step 3
Create the Youtube Mobile service elements:
Create new service elements by filling the following values in the Create Service element dialog (fields that are not listed below should not be changed):
•
Service element:
–
Service: 'Youtube Mobile'
–
Protocol: 'RTSP Streaming'
–
Flavor: 'Youtube Mobile over RTSP'
SCA BB Protocol Pack #14
Compatibility Information
The SCA BB Protocol Pack #14 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
SCA BB Release 3.0.6
•
SCA BB Release 3.1.0
•
SCA BB Release 3.1.1
•
SCA BB Release 3.1.5
•
SCA BB Release 3.1.6
•
SCA BB Release 3.1.6S
Protocol Library Updates
New Protocols
•
BabelGum - IPTV.
•
RTMP - Streaming (including Hulu, BBC iPlayer and Yahoo).
•
Ventrilo - VoIP.
•
TeamSpeak - VoIP.
Updated Protocols
•
Bittorrent - Azureus Vuze client version 3.0.5 support was added.
•
eMule - updated support to client version 0.49a.
•
PPLive - Support enhanced and updated to client version 1.9.35.
•
BBC iPlayer - Support enhanced.
•
MySpace Flash - Support enhanced
•
Second Life - Support enhanced.
•
SSL multipacket protocols - Support enhanced
•
Bittorrent - uTorrent, Deluge and Azureus - Support enhanced
•
TFTP - support enhanced.
•
Flash - support enhanced.
Resolved Caveats
CSCsq83081
When browsing MySpace, it is sometimes classified as 'Flash' rather than 'Flash MySpace'.
CSCsq26609
Lineage gaming is misclassified as Bittorrent Encrypted.
CSCsq83045
Multicast DNS is classified as Second Life.
CSCsq66448
HTTPS traffic is misclassified to MS Push Mail in addition to SSL-VPN traffic.
CSCsq09521
PPLive is misclassified to other protocols due to lack of support for client version 1.9.35.
CSCsm95034
EVE online gaming and VGaurd Video surveillance are misclassified to PPLive.
CSCso89456
In certain scenarios when HBC is disabled and eMule is set to an obfuscated mode, most of the traffic is misclassified to Behavioral Upload / Download and only 15 - 20% is classified to eMule.
CSCso75547
BBC iPLayer is misclassified to Behavioral Upload / Download.
CSCso30107
TFTP - Write request is misclassified to Generic UDP.
CSCso17765
Yahoo messenger is misclassified to SSL.
Known Limitations
CSCsm06607
The installation of Protocol Pack #14 upon 3.1.5 requires the following manual configuration in order to support all the Protocol Pack #14 features.
Step 1
Extract the .SPQI file from the 3.1.5 Protocol Pack #14 ZIP package and install the Protocol Pack as usual using SCA-BB.
Step 2
Extract the script.txt file from the 3.1.5 Protocol Pack #14 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.CSCsr20314
Protocol Packs #12 and above installed on top of SCA-BB Release 3.1.0 or SCA-BB Release 3.1.1 may cause to some P2P traffic to be misclassified.
Following are the protocols that can be misclassified: Manolito, Neonet, Direct_Connect, PPStream, Winny, and Share.
Workaround: Configure the SCE platform by executing the following command sequence:
enable 15configureInterface linecard 0lookup GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118030336lookup GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118620160lookup GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 117899264lookup GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118816768lookup GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 117702656lookup GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118292480exitexitcopy running-config-application startup-config-applicationCSCsq04726
Azureus might not be completely blocked and might be misclassified to Generic TCP / UDP in certain scenarios enforcing BLOCK mode.
CSCso84926
BT Azureus might be misclassified to Generic TCP when the client is working in encrypted mode.
CSCso55461
Upon upgrading from Protocol Pack #11 to Protocol Pack #12 , #13 or #14, WebThunder protocol signature might change, and thus be misclassified to Generic traffic.
Workaround:
Step 1
Delete default DSS.
Step 2
Retrieve the service configuration from the SCE.
Step 3
Apply the service configuration to the SCE.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #14. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
SCA BB Protocol Pack #13
Compatibility Information
The SCA BB Protocol Pack #13 can be installed on an SCE 1000 or SCE 2000 platform on which one of these versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
3.0.6
•
3.1.0
•
3.1.1
•
3.1.5
Protocol Library Updates
New Protocols
•
Behavioral VoIP - General VoIP recognition.
•
Angle Media - P2P TV provider.
•
opCast - P2P media provider.
•
Tor - Virtual Private Network.
Updated Protocols
•
Bittorrent - uTorrent client support updated to support version 1.8 alpha.
•
Bittorrent - BitComet client support updated to support version V0.99.
•
Skype - Support enhanced for Voice, IN and OUT activities.
•
BBBRoadcast - Support enhanced.
•
RTP - Support enhanced
Resolved Caveats
CSCsl96818
Specific YouTube videos are classified as Flash rather than Flash YouTube.
CSCsl98416
SMTP may be misclassified to FTP.
CSCsl98389
SCE platform sends RADIUS RDR with no Acct-Status-Type attribute.
CSCsm15090
Some video over HTTP traffic may be misclassified due to wrong file extension usage.
CSCsl93375
PPTP traffic must be classified by a Signature.
CSCsl85317
MSN messenger misclassified to Generic TCP in video and voice conference.
CSCsl99223
MSN Messenger - Voice via Relay server can not be blocked
Known Limitations
CSCsm06607
The installation of Protocol Pack #13 upon 3.1.5 requires the following manual configuration in order to support all the Protocol Pack #13 features.
Step 1
Extract the .SPQI file from the 3.1.5 Protocol Pack #13 ZIP package and install the Protocol Pack as usual using SCA-BB.
Step 2
Extract the script.txt file from the 3.1.5 Protocol Pack #13 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #13. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
Nico Nico Douga special configuration instructions:
Step 1
Create the Nico Nico Douga flavors
a.
From the Configuration drop-down menu, select Flavors.
The Flavors Editing Dialog window opens.
b.
Create a new flavor of the type HTTP URL; for example "Nico Nico Douga".
c.
Add a parameter to this flavor with Host Suffix value of "*.nicovideo.jp" and Path Prefix value of "/smile*" (case sensitive). Leave all other fields as "*".
Step 2
Create the Nico Nico Douga service:
Open the Services tab and create a new service called "Nico Nico Douga" under Streaming (or other desired group).
Step 3
Create the Nico Nico Douga service element:
Edit the newly created service element by filling the following values in the Create Service element dialog window (fields that are not listed below should stay unchanged):
•
Service: 'Nico Nico Douga'
•
Protocol: 'HTTP Browsing'
•
Flavor: 'Nico Nico Douga'
SCA BB Protocol Pack #12
Compatibility Information
The SCA BB Protocol Pack #12 can be installed on an SCE 1000 or SCE 2000 platform on which one of the versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
3.0.6
•
3.1.0
•
3.1.1
•
3.1.5
•
3.1.5LA
Protocol Library Updates
New Protocols
•
BBBroadcast - Video streaming.
•
PacketiX - Virtual Private Network.
•
Second Life - Virtual reality with P2P functions.
•
Vivox - Online gaming VoIP protocol.
Updated Protocols
•
Bittorrent - Deluge Bit torrent V0.5.6 client support added.
•
Bittorrent - Azureus client support updated to support version 3.0.3.
•
Gnutella - Limewire client support updated to support version V4.14.12
•
MSN Messenger - Support enhanced.
•
Google Talk - Support enhanced.
•
CU World - Support updated to support version 0.92b2.
Resolved Caveats
CSCsi21093
Error in output log file when illegal bind info appears in IRC traffic.
CSCsl20455
POP3 may be classified as Generic TCP.
CSCsl78566
Behavioral P2P mechanism causes misclassifications.
This issue is not relevant for 3.0.6 platform.
CSCsl11500
WebThunder misclassification (New signature should be developed).
CSCsl45174
Online gaming traffic is misclassified as Winny.
CSCsl27582
Nintendo DS WiFi might be misclassified as Manolito.
CSCsl83338
Some SSL TLS 1.0 flows are misclassified as Nodezilla.
Known Limitations
CSCsm06607
The installation of Protocol Pack #12 upon 3.1.5 requires the following manual configuration in order to support all the Protocol Pack #12 features.
Step 1
Extract the .SPQI file from the 3.1.5 Protocol Pack #12 ZIP package and install the Protocol Pack as usual using SCA-BB.
Step 2
Extract the script.txt file from the 3.1.5 Protocol Pack #12 ZIP package and upload to the SCE platform using FTP.
Step 3
Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:
script run script.txt.CSCsl85317, CSCsl99223
In certain network topologies, such as multiple NATs/PATs, MSN voice sessions generate traffic that is not classified correctly.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For a complete list of supported protocols please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #12. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
SCA BB Protocol Pack #11
Compatibility Information
The SCA BB Protocol Pack #11 can be installed on an SCE 1000 or SCE 2000 platform on which one of the versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
3.0.6
•
3.1.0
•
3.1.1
Protocol Library Updates
New Protocols
•
Gyao - Video streaming.
•
My Jabber - Instant messaging Jabber client.
•
BBC iPlayer - P2P video.
•
WebThunder - P2P protocol with web interface.
Updated Protocols
•
Poco - Classification in split flow mode enhanced.
•
Flash/video/audio/binary over HTTP - Classification enhanced.
•
Skype - Classification updated to support Skype 3.5.
•
Warez - Classification updated to support Ares 2.0.9 client.
Resolved Caveats
CSCsk51763
If some traffic generated by a P2P client is classified as B.P2P, it causes all the traffic of that client to be mapped to B.P2P.
This issue is relevant for 3.1.0 and 3.1.1 platforms only
CSCsj14472
Encrypted traffic of Winny2 is misclassified.
Resolved for 3.1.1 platform only.
CSCsj58100
Blackberry traffic is classified as Skype.
CSCsj99194
Some SIP flows have preemptive packet that is not recognized as SIP.
CSCsk61759
"PRACK" SIP method is not recognized and thus some SIP flows are mapped to Generic UDP.
CSCsk69072
PL tries to re-bind flows that it already requested a bind for.
CSCsk17816
Some YouTube videos are classified as Flash instead of Flash YouTube.
CSCsk88129
HTTP & HTTPS half-closed flows leftovers are misclassified as Winny2.
CSCsk86079
Misclassifications of Google Earth to "HTTP port" and to "HTTP Browsing" were observed.
Known Limitations
CSCsk92699
Several clients (BBC-iPlayer/4oD/Sky) use the same underlying protocol - Kontiki. '4oD' and 'Sky' clients are not distinguished and will be mapped to Kontiki.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
For complete list of supported protocols please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #11. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
Gyao special configuration instructions:
Step 1
Create the Gyao flavors
a.
From the 'Configuration' drop-down menu, select 'Flavors'.
The 'Flavors Editing Dialog' window opens.
b.
Create the two new flavors:
•
A flavor of type 'RTSP Host Name'; for example "Gyao over RTSP".
Add a parameter to this flavor with a 'Host Suffix' value of "*gyao.jp" (case sensitive)
Hit 'Accept' when finished.
•
A flavor of type 'HTTP URL'; for example "Gyao over HTTP".
Add a parameter to this flavor with a 'Host Suffix' value of "*gyao.jp" (case sensitive). Leave all other fields as "*".
Step 2
Create the Gyao service:
Open the 'Services' tab and create a new service called "Gyao" under 'Streaming' (or other desired group).
Step 3
Create the Gyao service elements:
Create two new service elements by filling the following values in the 'Create Service element' dialog window (fields that are not listed below should stay unchanged):
•
Service element #1:
–
Service: 'Gyao'
–
Protocol: 'RTSP Streaming'
–
Flavor: 'Gyao over RTSP'
•
Service element #2:
–
Service: 'Gyao'
–
Protocol: 'HTTP Browsing'
–
Flavor: 'Gyao over HTTP'
SCA BB Protocol Pack #10
The SCA BB Protocol Pack #10 contains the following three protocol packs:
•
SCA BB 2.5.10 Protocol Pack #10
•
SCA BB 3.0.6 Protocol Pack #10
•
SCA BB 3.1.0 Protocol Pack #10
Refer to the relevant section for your SCA BB version.
Upgrading release 2.5.10, 3.0.6, or 3.1.0 with Protocol Pack #10 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.
Note
Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #10
Installation- SCA BB 3.0.6 Protocol Pack #10
Installation- SCA BB 3.1.0 Protocol Pack #10
SCA BB 2.5.10 Protocol Pack #10
Prerequisites
The SCA BB 2.5.10 Protocol Pack #10 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.
What's new in the SCA BB 2.5.10 Protocol Pack #10
Note
The SCA BB 2.5.10 Protocol Pack #10 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:
•
Pando - P2P file sharing.
•
KuGoo - P2P music file sharing.
•
Fring - IM client for mobile phone.
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:
•
eMule - updated to support v0.48 (CSCsj48543).
•
ICQ - voice recognition enhanced (CSCsi96940).
•
PPStream - updated to support the latest (v2.0) version (CSCsj76001).
•
Yahoo Messenger - updated to support v8.1.0 (CSCsi96962).
•
Gnutella - support enhanced (CSCsi52884).
•
Skype - misclassifications resolved (CSCsj14278, CSCsj43543).
•
PPLive - support enhanced (CSCsj53023, CSCsj75652).
•
Vonage - support enhanced (CSCsh84903).
The SCA BB 2.5.10 Protocol Pack #10 for SCA BB 2.5.10 includes the following two spqi files:
•
SCABB_2510PP10_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_2510PP10_SUS.spqi: designated for all other regions
SCA-BB 2.5.10 Protocol Pack #10 limitations and caveats
•
Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.10 Protocol Pack 10 includes the following legacy DSS-based signatures:
•
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
•
The SUSAP script contains following DSS-based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.10 Protocol Pack #10 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.10 Protocol Pack #10 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
Manual configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
GoogleEarth special configuration instructions:
Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.
ICQ VoIP special configuration instructions:
Although 2.5.10-Protocol Pack #10 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
Video/Audio/Binary over HTTP special configuration instructions:
Using the SCA BB console, manually assign the protocols 'Video over HTTP', 'Audio over HTTP' and 'Binary over HTTP' to the 'HTTP' Service.
SCA BB 3.0.6 Protocol Pack #10
Prerequisites
The SCA BB 3.0.6 Protocol Pack #10 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.6 has already been installed.
What's new in the SCA BB 3.0.6 Protocol Pack #10
Note
The SCA BB 3.0.6 Protocol Pack #10 for SCA BB 3.0.6 can be installed ONLY on the SCA BB 3.0.6 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.6:
•
Pando - P2P file sharing.
•
KuGoo - P2P music file sharing.
•
Fring - IM client for mobile phone.
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.6:
•
eMule - updated to support v0.48 (CSCsj48543).
•
ICQ - voice recognition enhanced (CSCsi96940).
•
PPStream - updated to support v2.0 (CSCsj76001).
•
Yahoo Messenger - updated to support v8.1.0 (CSCsi96962).
•
Gnutella - support enhanced (CSCsi52884).
•
Skype - misclassifications resolved (CSCsj14278, CSCsj43543).
•
PPLive - support enhanced (CSCsj53023, CSCsj75652).
•
Vonage - support enhanced (CSCsh84903).
The SCA BB 3.0.6 Protocol Pack #10 for SCA BB 3.0.6 includes the following spqi file:
•
SCABB_306PP10_SUS.spqi: designated for all regions
SCA-BB 3.0.6 Protocol Pack #10 limitations and caveats
•
Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.6 Protocol Pack #10 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.6 Protocol Pack #10 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.6 Protocol Pack #10 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB 3.1.0 Protocol Pack #10
Prerequisites
The SCA BB 3.1.0 Protocol Pack #10 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.1.0 has already been installed.
What's new in the SCA BB 3.1.0 Protocol Pack #10
Note
The SCA BB 3.1.0 Protocol Pack #10 for SCA BB 3.1.0 can be installed ONLY on the SCA BB 3.1.0 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.1.0:
•
Pando - P2P file sharing.
•
KuGoo - P2P music file sharing.
•
Fring - IM client for mobile phone.
This Protocol Pack includes updates for the following protocols over SCA BB 3.1.0:
•
eMule - updated to support v0.48 (CSCsj48543).
•
ICQ - voice recognition enhanced (CSCsi96940).
•
PPStream - updated to support v2.0 (CSCsj76001).
•
Yahoo Messenger - updated to support v8.1.0 (CSCsi96962).
•
Gnutella - support enhanced (CSCsi52884).
•
Skype - misclassifications resolved (CSCsj14278, CSCsj43543).
•
PPLive - support enhanced (CSCsj53023, CSCsj75652).
•
Vonage - support enhanced (CSCsh84903).
The SCA BB 3.1.0 Protocol Pack #10 for SCA BB 3.1.0 includes the following spqi file:
•
SCABB_310PP10_SUS.spqi: designated for all regions
SCA-BB 3.1.0 Protocol Pack #10 limitations and caveats
•
Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.1.0 Protocol Pack #10 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.1.0 Protocol Pack #10 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.1.0 Protocol Pack #10 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB Protocol Pack #09
The SCA BB Protocol Pack #09 contains the following three protocol packs:
•
SCA BB 2.5.10 Protocol Pack #09
•
SCA BB 3.0.6 Protocol Pack #09
•
SCA BB 3.1.0 Protocol Pack #09
Refer to the relevant section for your SCA BB version.
Upgrading release 2.5.10, 3.0.6, or 3.1.0 with Protocol Pack #09 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.
Note
Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #09
Installation- SCA BB 3.0.6 Protocol Pack #09
Installation- SCA BB 3.1.0 Protocol Pack #09
SCA BB 2.5.10 Protocol Pack #09
Prerequisites
The SCA BB 2.5.10 Protocol Pack #09 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.
What's new in the SCA BB 2.5.10 Protocol Pack #09
Note
The SCA BB 2.5.10 Protocol Pack #09 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:
•
Zattoo - P2P TV protocol
•
Sony Location Free - TV broadcast streaming protocol
•
Joost - P2P TV protocol.
•
Microsoft Push Mail - E-mail support for PDA/Smartphone
•
Windows Live Messenger (MSN) v8.1.
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:
•
PPLive - 1.6.19 classification enhanced (CSCsi25885).
•
Poco - update to support 2007 beta version (CSCsi87040).
•
RTSP - Redirect: redirect of RTSP and Streaming does not work - defect resolved (CSCsi55101).
The SCA BB 2.5.10 Protocol Pack #09 for SCA BB 2.5.10 includes the following two spqi files:
•
SCABB_2510PP09_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_2510PP09_SUS.spqi: designated for all other regions
SCA-BB 2.5.10 Protocol Pack #09 limitations and caveats
•
Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).
•
2.5.10 with Protocol Pack #09 introduces an additional protocol ID for MSN Messenger called Windows Live Messenger
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.10 Protocol Pack 09 includes the following legacy DSS-based signatures:
•
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
•
The SUSAP script contains following DSS-based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.10 Protocol Pack #09 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.10 Protocol Pack #09 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
Manual configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
GoogleEarth special configuration instructions:
Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.
ICQ VoIP special configuration instructions:
Although 2.5.10-Protocol Pack #09 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
Video/Audio/Binary over HTTP special configuration instructions:
Using the SCA BB console, manually assign the protocols 'Video over HTTP', 'Audio over HTTP' and 'Binary over HTTP' to the 'HTTP' Service.
SCA BB 3.0.6 Protocol Pack #09
Prerequisites
The SCA BB 3.0.6 Protocol Pack #09 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.6 has already been installed.
What's new in the SCA BB 3.0.6 Protocol Pack #09
Note
The SCA BB 3.0.6 Protocol Pack #09 for SCA BB 3.0.6 can be installed ONLY on the SCA BB 3.0.6 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.6:
•
Zattoo - P2P TV protocol
•
Sony Location Free - TV broadcast streaming protocol
•
Joost - P2P TV protocol.
•
Microsoft Push Mail - E-mail support for PDA/Smartphone
•
Windows Live Messenger (MSN) v8.1.
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.6:
•
PPLive - 1.6.19 classification enhanced (CSCsi25885).
•
Poco - update to support 2007 beta version (CSCsi87040).
•
SIP - SIP fails to bundle RTP flow when the connection information of the WAN IP to bundle appears only in the SDP "Ringing" status - defect resolved (CSCsi25885)
•
RTSP - Redirect: redirect of RTSP and Streaming does not work - defect resolved (CSCsi55101).
•
SMTP - Certain Non Standard SMTP sessions may not be classified correctly, defect resolved (CSCsi87468).
The SCA BB 3.0.6 Protocol Pack #09 for SCA BB 3.0.6 includes the following spqi file:
•
SCABB_306PP09_SUS.spqi: designated for all regions
SCA-BB 3.0.6 Protocol Pack #09 limitations and caveats
•
Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.6 Protocol Pack #09 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.6 Protocol Pack #09 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.6 Protocol Pack #09 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB 3.1.0 Protocol Pack #09
Prerequisites
The SCA BB 3.1.0 Protocol Pack #09 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.1.0 has already been installed.
What's new in the SCA BB 3.1.0 Protocol Pack #09
Note
The SCA BB 3.1.0 Protocol Pack #09 for SCA BB 3.1.0 can be installed ONLY on the SCA BB 3.1.0 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.1.0:
•
Zattoo - P2P TV protocol
•
Sony Location Free - TV broadcast streaming protocol
•
Joost - P2P TV protocol.
•
Microsoft Push Mail - E-mail support for PDA/Smartphone
•
Windows Live Messenger (MSN) v8.1.
This Protocol Pack includes updates for the following protocols over SCA BB 3.1.0:
•
PPLive - 1.6.19 classification enhanced (CSCsi25885).
•
Poco - update to support 2007 beta version (CSCsi87040).
•
SMTP - Certain Non Standard SMTP sessions may not be classified correctly, defect resolved (CSCsi87468).
The SCA BB 3.1.0 Protocol Pack #09 for SCA BB 3.1.0 includes the following spqi file:
•
SCABB_310PP09_SUS.spqi: designated for all regions
SCA-BB 3.1.0 Protocol Pack #09 limitations and caveats
•
Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.1.0 Protocol Pack #09 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.1.0 Protocol Pack #09 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.1.0 Protocol Pack #09 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB Protocol Pack #08
The SCA BB Protocol Pack #08 contains the following two protocol packs:
•
SCA BB 2.5.10 Protocol Pack #08
•
SCA BB 3.0.6 Protocol Pack #08
Refer to the relevant section for your SCA BB version.
Upgrading release 2.5.10 or 3.0.6 with Protocol Pack #08 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.
Note
Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #08
Installation - SCA BB 3.0.6 Protocol Pack #08
SCA BB 2.5.10 Protocol Pack #08
Prerequisites
The SCA BB 2.5.10 Protocol Pack #08 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.
What's new in the SCA BB 2.5.10 Protocol Pack #08
Note
The SCA BB 2.5.10 Protocol Pack #08 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.
•
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:
•
Club Box - file sharing protocol
•
Baidu Movie - media sharing protocol
•
Feidian - TV Streaming protocol
•
Google Talk - IM protocol
•
Audio over HTTP - audio download on HTTP protocol
•
Binary over HTTP - binary download on HTTP protocol
•
Video over HTTP - video download on HTTP protocol
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:
•
PPLive - 1.6.19 version update.
•
Skype - 3.0 version update
•
NTPv2 is mis-classified as Skype - defect resolved (CSCsh90616)
The SCA BB 2.5.10 Protocol Pack #08 for SCA BB 2.5.10 includes the following two spqi files:
•
SCABB_2510PP08_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_2510PP08_SUS.spqi: designated for all other regions
•
SCA-BB 2.5.10 Protocol Pack #08 limitations and caveats
•
Thunder FTP flows are not recognized as Thunder (CSCsh24316).
•
Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.10 Protocol Pack 08 includes the following legacy DSS-based signatures:
•
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
•
The SUSAP script contains following DSS-based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.10 Protocol Pack #08 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.10 Protocol Pack #08 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
GoogleEarth special configuration instructions:
Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.
ICQ VoIP special configuration instructions:
Although 2.5.10-Protocol Pack #08 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
Video/Audio/Binary over HTTP special configuration instructions:
Using the SCA BB console, manually assign the protocols 'Video over HTTP', 'Audio over HTTP' and 'Binary over HTTP' to the 'HTTP' Service.
SCA BB 3.0.6 Protocol Pack #08
Prerequisites
The SCA BB 3.0.6 Protocol Pack #08 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.6 has already been installed.
What's new in the SCA BB 3.0.6 Protocol Pack #08
Note
The SCA BB 3.0.6 Protocol Pack #08 for SCA BB 3.0.6 can be installed ONLY on the SCA BB 3.0.6 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.6:
•
Club Box - file sharing protocol
•
Baidu Movie - media sharing protocol
•
Feidian - TV Streaming protocol
•
Google Talk - IM protocol
•
Audio over HTTP - audio download on HTTP protocol
•
Binary over HTTP - binary download on HTTP protocol
•
Video over HTTP - video download on HTTP protocol
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.6:
•
PPLive - 1.6.19 version update.
•
Skype - 3.0 version update
•
Redirect not working immediately when trying same URL again - defect resolved (CSCsh74572)
•
NTPv2 is mis-classified as Skype - defect resolved (CSCsh90616)
The SCA BB 3.0.6 Protocol Pack #08 for SCA BB 3.0.6 includes the following spqi file:
•
SCABB_306PP08_SUS.spqi: designated for all regions
SCA-BB 3.0.6 Protocol Pack #08 limitations and caveats
•
Thunder FTP flows are not recognized as Thunder (CSCsh24316).
•
Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.6 Protocol Pack #08 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.6 Protocol Pack #08 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.6 Protocol Pack #08 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB).
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB Protocol Pack #07
The SCA BB Protocol Pack #07 contains the following two protocol packs:
•
SCA BB 2.5.10 Protocol Pack #07
•
SCA BB 3.0.5A Protocol Pack #07
Refer to the relevant section for your SCA BB version.
Upgrading release 2.5.10 or 3.0.5A with Protocol Pack #07 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.
Note
Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #07
Installation- SCA BB 3.0.5A Protocol Pack #07
SCA BB 2.5.10 Protocol Pack #07
Prerequisites
The SCA BB 2.5.10 Protocol Pack #07 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.
What's new in the SCA BB 2.5.10 Protocol Pack #07
Note
The SCA BB 2.5.10 Protocol Pack #07 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:
•
QQ-Live - TV Streaming protocol
•
Flash - Support for Flash based video streaming, including unique signatures for the top three sites: 'YouTube', 'MySpace', 'Yahoo!'
•
Entropy - Freenet client
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:
•
QQ - 2006 version.
•
Thunder - Enhanced Thunder signature to support HTTP download
•
Skype 2.5 - In/Out/Cast services
•
Poco - 2006 version
•
Yahoo VOIP other behaviors (CSCsd53602)
•
GIVE handshake protocols: PeerEnabler, Edonkey and Kazaa (CSCsg22708_CSCsg67059)
•
Warez-Ares 1.9.9 TCP download/upload recognition improved (CSCsf29301)
The SCA BB 2.5.10 Protocol Pack #07 for SCA BB 2.5.10 includes the following two spqi files:
•
SCABB_2510PP07_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_2510PP07_SUS.spqi: designated for all other regions
SCA-BB 2.5.10 Protocol Pack #07 limitations and caveats
•
Thunder FTP flows are not recognized as Thunder (CSCsh24316).
•
Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.10 Protocol Pack 07 includes the following legacy DSS-based signatures:
•
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
•
The SUSAP script contains following DSS-based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.10 Protocol Pack #07 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.10 Protocol Pack #07 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
Manual configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform.
Step 2
Perform the necessary changes according to instructions below.
Step 3
Apply the modified PQB file.
GoogleEarth special configuration instructions:
Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.
ICQ VoIP special configuration instructions:
Although 2.5.10-Protocol Pack #07 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB 3.0.5A Protocol Pack #07
Prerequisites
The SCA BB 3.0.5A Protocol Pack #07 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.5A has already been installed.
What's new in the SCA BB 3.0.5A Protocol Pack #07
Note
The SCA BB 3.0.5A Protocol Pack #07 for SCA BB 3.0.5A can be installed ONLY on the SCA BB 3.0.5A release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.5A:
•
QQ-Live - TV Streaming protocol
•
Flash - Support for Flash based video streaming, including unique signatures for the top three sites: 'YouTube', 'MySpace', 'Yahoo!'
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.5A:
•
QQ - 2006 version
•
Thunder - Enhanced Thunder signature to support HTTP download
•
Skype 2.5 - In/Out/Cast services
•
Poco - 2006 version
•
Yahoo VOIP other behaviors (CSCsd53602)
•
GIVE handshake protocols: PeerEnabler, Edonkey and Kazaa (CSCsg22708_CSCsg67059)
•
Warez-Ares 1.9.9 TCP download/upload recognition improved (CSCsf29301)
The SCA BB 3.0.5A Protocol Pack #07 for SCA BB 3.0.5A includes the following spqi file:
•
SCABB_305PP07_SUS.spqi: designated for all regions
SCA-BB 3.0.5A Protocol Pack #07 limitations and caveats
•
Thunder FTP flows are not recognized as Thunder (CSCsh24316).
•
Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).
•
Protocol Pack #07 can be installed upon 3.0.5A only.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.5A Protocol Pack #07 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.5A Protocol Pack #07 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.5A Protocol Pack #07 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB Protocol Pack #06
The SCA BB Protocol Pack #06 contains the following two protocol packs:
•
SCA BB 2.5.10 Protocol Pack #06
•
SCA BB 3.0.4 Protocol Pack #06
Refer to the relevant section for your SCA BB version.
Upgrading release 2.5.10 or 3.0.4 with Protocol Pack #06 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.
Note
Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #06
Installation- SCA BB 3.0.4 Protocol Pack #06
SCA BB 2.5.10 Protocol Pack #06
Prerequisites
The SCA BB 2.5.10 Protocol Pack #06 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.
What's new in the SCA BB 2.5.10 Protocol Pack #06
Note
The SCA BB 2.5.10 Protocol Pack #06 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:
•
TVAnts - TV and Video Streaming protocol
•
Freenet - P2P protocol
•
Primus/Lingo - VoIP service protocol
•
DHT - distributed hash table, used by P2P applications
•
EmuleEncrypted - eMule 0.47 with protocol obfuscation
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:
•
Skype - update signature to support version 2.5
•
ARES - update Wares signature to support ARES 192 version
•
FLYFF game misclassified as P2P (CSCse79503)
•
Manolito may potentially cause misclassifications (CSCse94748)
•
MGCP bundle problem - related to MGCP transaction-id (CSCse99652)
•
ICQ SIP - consecutive calls are not properly bundled (CSCse99641)
•
SMTP - CLRFs in RDRs where they are not allowed/expected (CSCsd61859)
•
eMule - classified eMule HTTP based traffic relying on X-Network field in HTTP header instead of user-agent field (CSCsg10743)
•
HTTP 0.9 - HTTP 1.0/1.1 packets starting with 'GET' and not recognized as P2P will never be reported (CSCsd17487)
•
Bittorent - added support for uTorrent 1.6 client (CSCsg10738)
•
FTP - too many bundled flows data cause errors to be written to the log (CSCsg53122)
The SCA BB 2.5.10 Protocol Pack #06 for SCA BB 2.5.10 includes the following two spqi files:
•
SCABB_2510PP06_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_2510PP06_SUS.spqi: designated for all other regions
SCA-BB 2.5.10 Protocol Pack #06 limitations and caveats
•
Ares 192 version is not fully supported (not all Ares flows are recognized).
•
Primus: Lingo service is classified as SIP.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.10 Protocol Pack 06 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
•
The SUSAP script contains following DSS based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.10 Protocol Pack #06 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.10 Protocol Pack #06 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
Manual configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco SCA BB User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform
Step 2
Perform the necessary changes according to instructions below
Step 3
Apply the modified PQB file
GoogleEarth special configuration instructions:
Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.
ICQ VoIP special configuration instructions:
Although 2.5.10-Protocol Pack #06 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB 3.0.4 Protocol Pack #06
Prerequisites
The SCA BB 3.0.4 Protocol Pack #06 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.4 has already been installed.
What's new in the SCA BB 3.0.4 Protocol Pack #06
Note
The SCA BB 3.0.4 Protocol Pack #06 for SCA BB 3.0.4 can be installed ONLY on the SCA BB 3.0.4 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.4:
•
TVAnts - TV and Video Streaming protocol
•
Freenet - P2P protocol
•
Primus/Lingo - VoIP service protocol
•
DHT - Distributed hash table which is used by many P2P applications.
•
eMule 0.47 - emule with protocol obfuscation
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.4:
•
Skype - update signature to support version 2.5
•
ARES - update Wares signature to support ARES 192 version
•
FLYFF game misclassified as P2P (CSCse79503)
•
Manolito may potentially cause misclassifications (CSCse94748)
•
MGCP bundle problem - related to MGCP transaction-id (CSCse99652)
•
ICQ SIP - consecutive calls are not properly bundled (CSCse99641)
•
SMTP - CLRFs in RDRs where they are not allowed/expected (CSCsd61859)
•
eMule - classified eMule HTTP based traffic relying on X-Network field in HTTP header instead of user-agent field (CSCsg10743)
•
Bittorent - added support for uTorrent 1.6 client (CSCsg10738)
•
HTTP 0.9 - HTTP 1.0/1.1 packets starting with 'GET' and not recognized as P2P will never be reported (CSCsd17487)
•
HTTP 0.9 - the aging time for HTTP-like flows that are mapped to generic is not set (CSCsg48851)
The SCA BB 3.0.4 Protocol Pack #06 for SCA BB 3.0.4 includes the following spqi file:
•
SCABB_304PP06_SUS.spqi: designated for all regions
Note
Beginning with 3.0.4 Protocol Pack #06, there is no separate package for APAC region (SUSAP). SCABB_304PP06_SUSAP.spqi is no longer required as APAC-specific protocols have become a part of the application functionality. Enabling APAC-specific protocols can be done through the 3.0.4 SCA BB Console (Advanced Service Configuration Options GUI). Assuming that APAC users already have a 3.0.4 PQB deployed with the proper settings, installing PP #06 will preserve these settings. For detailed instructions how to enable APAC specific protocols, see Release Notes for Cisco Service Control Application for Broadband (SCA BB), Release 3.0.4.
SCA-BB 3.0.4 Protocol Pack #06 limitations and caveats
•
Ares 192 version is not fully supported (not all Ares flows are recognized).
•
The update of SCA BB release 3.0.4 with PP #06 may cause performance degradation of up to 3%. Release 3.0.5 coming out on November 30th 2006 includes all PP #06 protocols and is expected to match the performance of release 3.0.4. For SCE deployments where performance sizing is tight, it might be best to wait for the release of SCA BB 3.0.5.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.4 Protocol Pack #06 includes the following legacy DSS based signatures:
•
The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.4 Protocol Pack #06 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.4 Protocol Pack #06 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see SCA BB 3.0.4 Release Notes
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document
SCA BB Protocol Pack #05
The SCA BB Protocol Pack #05 contains the following two protocol packs:
•
SCA BB 2.5.10 Protocol Pack #05
•
SCA BB 3.0.3 Protocol Pack #05
Refer to the relevant section for your SCA BB version.
Upgrading release 2.5.10 or 3.0.3 with Protocol Pack #05 in a network where the newly supported protocols are relatively common has little performance impact (±1%). In a network where the majority of the newly supported protocols are not common, performance might drop by up to 2%, depending on the traffic mix and control policy.
Note
Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #05
Installation- SCA BB 3.0.3 Protocol Pack #05
SCA BB 2.5.10 Protocol Pack #05
Prerequisites
The SCA BB 2.5.10 Protocol Pack #05 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.
What's new in the SCA BB 2.5.10 Protocol Pack #05
Note
The SCA BB 2.5.10 Protocol Pack #05 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:
•
Shoutcast - Audio Streaming protocol
•
ICQ - IM with file transfer protocol
•
CU-SeeMe - IM & Video conference protocol is partially supported
•
Rodi - P2P File sharing protocol
•
GoogleEarth - Streaming protocol
•
Hopster - Private net protocol
•
Jabber - IM open protocol
•
AntsP2P - P2P File sharing protocol
•
Sling - TV broadcast protocol
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:
•
Share:
–
new signatures for 2ex added (CSCse06602)
–
new signatures for NT5 UDP added (CSCsc96277)
•
BitTorrent:
–
".torrent" pattern removed (CSCse51968)
–
added tunable to disable/enable BT networking signature to work around misclassification of other protocols (like metastock) that are using DHT (CSCse67418)
•
Gnutella - Foxy and mxie Gnutella user-agent added (CSCse39295)
•
Warez - update signature to fix HTTPS and Telnet traffic misclassification (CSCse25538 and CSCse30568)
•
Manolito - update signature to fix Mosa VoIP traffic misclassification (CSCsd66745)
•
FTP - update signature to fix FTP sessions not bundled properly (CSCsd74132)
•
Skype - update signature to fix CounterStrike misclassification as Skype (CSCse10448)
The SCA BB 2.5.10 Protocol Pack #05 for SCA BB 2.5.10 includes the following two spqi files:
•
SCABB_2510PP05_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_2510PP05_SUS.spqi: designated for all other regions
SCA-BB 2.5.10 Protocol Pack #05 limitations and caveats
•
ICQ - Voice/Video conferencing, gaming, and multi-chat are not supported
•
CU-SeeMe - RTP flows are not supported
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.10 Protocol Pack 05 includes the following legacy DSS based signatures:
•
The SUS script is empty.
•
The SUSAP script contains the following DSS based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.10 Protocol Pack #05 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.10 Protocol Pack #05 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
Manual configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco SCA BB User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform
Step 2
Perform the necessary changes according to instructions below
Step 3
Apply the modified PQB file
GoogleEarth special configuration instructions:
Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.
ICQ VoIP special configuration instructions:
Although 2.5.10-Protocol Pack #05 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB 3.0.3 Protocol Pack #05
Prerequisites
The SCA BB 3.0.3 Protocol Pack #05 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.3 has already been installed.
What's new in the SCA BB 3.0.3 Protocol Pack #05
Note
The SCA BB 3.0.3 Protocol Pack #05 for SCA BB 3.0.3 can be installed ONLY on the SCA BB 3.0.3 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.3:
•
Shoutcast - Audio Streaming protocol
•
ICQ - IM with file transfer & Voice/Video conferencing protocol
•
CU-SeeMe - IM & Video conference protocol
•
Rodi - P2P File sharing protocol
•
GoogleEarth - Streaming protocol
•
Hopster - Private net protocol
•
Jabber - IM open protocol
•
AntsP2P - P2P File sharing protocol
•
Sling - TV broadcast protocol
•
STUN - Simple Traversal of UDP through NATs protocol
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.3:
•
Share:
–
new signatures for 2ex added (CSCse06602)
–
new signatures for NT5 UDP added (CSCsc96277)
•
BitTorrent:
–
".torrent " pattern removed (CSCse51968)
–
added tunable to disable/enable BT networking signature to work around misclassification of other protocols (like metastock) that are using DHT (CSCse67418)
•
Gnutella - Foxy and mxie Gnutella user-agent added (CSCse39295)
•
Warez - update signature to fix HTTPS and Telnet traffic misclassification (CSCse25538 and CSCse30568)
•
Manolito - update signature to fix 'Mosa' VoIP traffic misclassification (CSCsd66745)
•
FTP - update signature to fix FTP sessions not bundled properly (CSCsd74132)
•
FileCroc - update signature to fix HTTPS misclassification as FileCroc (CSCse30568)
•
Skype - update signature to fix CounterStrike misclassification as Skype (CSCse10448)
•
Content Filtering Redirect - fix for a redirect issue found in SCA-BB 3.0.3 (CSCse72875 - Redirect does not work with Content Filtering).
The SCA BB 3.0.3 Protocol Pack #05 for SCA BB 3.0.3 includes the following spqi files:
•
SCABB_303PP05_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_303PP05_SUS.spqi: designated for all other regions
SCA-BB 3.0.3 Protocol Pack #05 limitations and caveats
•
ICQ - multi-chat is using IRC protocol and being classified as IRC
•
ICQ - gaming is not supported
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.3 Protocol Pack #05 includes the following legacy DSS based signatures:
•
The SUS script is empty in 3.0.3
•
The SUSAP script contains the following DSS based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.3 Protocol Pack #05 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.3 Protocol Pack #05 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that a short service downtime is expected.
Manual configuration
The manual configuration should be performed after the Protocol Pack #05 installation has been completed (according to the procedure described in the Cisco SCA BB User Guide)
To perform any required manual configuration, complete the following steps:
Step 1
Retrieve the PQB file from the SCE platform
Step 2
Perform the necessary changes according to instructions below
Step 3
Apply the modified PQB file
ICQ VoIP special configuration instructions:
Although SCA BB 3.0.3-Protocol Pack #05 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:
Using the Advanced Options dialog of the SCA BB console, add port 5190 to the list "UDP ports for which flows should be opened on first packet".
For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB Protocol Pack #04
Starting with this protocol pack, SCA BB Protocol Pack #04, protocol packs will be named by serial number, rather than by month/year.
Thus, the previous protocol packs are:
•
January 06 Protocol Pack - Protocol Pack #03
•
November 05 Protocol Pack - Protocol Pack #02
•
September 05 Protocol Pack - Protocol Pack #01
The SCA BB Protocol Pack #04 contains the following two protocol packs:
•
SCA BB 2.5.9 Protocol Pack #04
•
SCA BB 3.0.1 Protocol Pack #04
Refer to the relevant section for your SCA BB version.
SCA BB 2.5.9 Protocol Pack #04
Prerequisites
The SCA BB 2.5.9 Protocol Pack #04 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.9 has already been installed.
What's new in the SCA BB 2.5.9 Protocol Pack #04
Note
The SCA BB 2.5.9 Protocol Pack #04 can be installed ONLY on the SCA BB 2.5.9 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.9:
•
Dijjer - P2P protocol
•
Exosee - P2P protocol
•
Furthur - P2P protocol
•
PeerEnabler - P2P protocol
•
Kontiki - P2P protocol (Please note: a portion of Kontiki traffic is classified as HTTP Streaming)
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.9:
•
BitTorrent - New signatures
•
Skype - New signatures
•
Winny - Improved signature intended to resolve the few false-detection cases that occurred. The old Winny1 signature was disabled and can be revived if needed.
The SCA BB 2.5.9 Protocol Pack #04 includes the following two spqi files:
•
SCABB_259PP04_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_259PP04_SUS.spqi: designated for all other regions
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 2.5.9 Protocol Pack #04 includes the following legacy DSS based signatures:
•
The SUS script is empty.
•
The SUSAP script contains the following DSS based signatures for Korean protocols:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
–
Share - UDP-based signature
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 2.5.9 Protocol Pack #04 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 2.5.9 Protocol Pack #04 involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
SCA BB 3.0.1 Protocol Pack #04
Prerequisites
The January SCA BB 3.0.1 Protocol Pack #04 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.1 has already been installed.
What's new in the SCA BB 3.0.1 Protocol Pack #04
Note
The SCA BB 3.0.1 Protocol Pack #04 can be installed ONLY on the SCA BB 3.0.1 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.1:
•
Dijjer - P2P protocol
•
Exosee - P2P protocol
•
Furthur - P2P protocol
•
PeerEnabler - P2P protocol
•
Kontiki - P2P protocol (Please note: a portion of Kontiki traffic is classified as HTTP Streaming)
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.0:
•
BitTorrent - New signatures
•
Skype - New signatures
•
Winny - Improved signature intended to resolve the few false-detection cases that occurred. The old Winny1 signature was disabled and can be revived if needed.
The SCA BB 3.0.1 Protocol Pack #04 includes the following spqi files:
•
SCABB_301PP04_SUSAP.spqi: designated for the Asia Pacific region.
•
SCABB_301PP04_SUS.spqi: designated for all other regions
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The SCA BB 3.0.1 Protocol Pack #04 includes the following legacy DSS based signatures:
•
The SUS script is empty in 3.0.1
•
The SUSAP script contains the following DSS based signatures for Korean protocols
–
Kuro
–
Guruguru
–
V-share
–
Soribada
–
Share
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The SCA BB 3.0.1 Protocol Pack #04 includes the following new/enhanced interfaces:
Installation
Installation of the SCA BB 3.0.1 Protocol Pack #04 involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
January 2006 Protocol Pack (Protocol Pack #03)
The January 2006 Protocol Pack contains the following two protocol packs:
•
January 2006 2.5.8 Protocol Pack
•
January 2006 3.0.0 Protocol Pack
Refer to the relevant section for your SCA BB version.
January 2006 2.5.8 Protocol Pack
Prerequisites
The January 2006 2.5.8 Protocol Pack for SCA BB 2.5.8 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.8 has already been installed.
What's new in the January 2006 2.5.8 Protocol Pack
Note
The January 2006 2.5.8 Protocol Pack for SCA BB 2.5.8 can be installed ONLY on the SCA BB 2.5.8 release.
This Protocol Pack includes support for the following new protocols over SCA BB 2.5.8:
•
HTTP Tunnel - Tunneling protocol over HTTP
This Protocol Pack includes updates for the following protocols over SCA BB 2.5.8:
•
Skype - New signatures
•
PPLive - New TCP signature
The January 2006 2.5.8 Protocol Pack for SCA BB 2.5.8 includes the following two spqi files:
•
SCABB_258PP0601_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_258PP0601_SUS.spqi: designated for all other regions
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The January 2006 2.5.8 Protocol Pack includes the following legacy DSS based signatures:
•
The SUS script contains two protocols:
–
Suspected http
–
Other Gnutella
•
The SUSAP script contains the following DSS based signatures for Korean protocols, in addition to the protocols in the SUS script:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
–
Share - UDP-based signature
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The January 2006 2.5.8 Protocol Pack includes the following new/enhanced interfaces:
Table 25 New/Enhanced Protocols in SCA BB 2.5.8 Protocol Pack
Protocol Name Protocol ID CommentHTTP Tunnel
80
Skype
25
Version 1.4.0.84
PPLive
44
Version 1.1.0.0
Installation
Installation of the January 2006 2.5.8 Protocol Pack involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
January 2006 3.0.0 Protocol Pack
Prerequisites
The January 2006 3.0.0 Protocol Pack for SCA BB 3.0.0 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.0 has already been installed.
What's new in the January 2006 3.0.0 Protocol Pack
Note
The January 2006 3.0.0 Protocol Pack for SCA BB 3.0.0 can be installed ONLY on the SCA BB 3.0.0 release.
This Protocol Pack includes support for the following new protocols over SCA BB 3.0.0:
•
BaiBao - Chinese P2P protocol
•
HTTP Tunnel - Tunneling protocol over HTTP
•
NTP - Network time protocols
•
Poco - Chinese P2P protocol
•
PPLive - Chinese P2P TV sharing protocol
•
PPStream - Chinese P2P TV sharing protocol
•
SSDP - Simple service discovery protocol
•
Thunder - Download accelerator
•
QQ - Chinese instant messenger
•
UC - Chinese instant messenger
This Protocol Pack includes updates for the following protocols over SCA BB 3.0.0:
•
Bearshare - New UDP signature
•
Skype - New signatures
This Protocol Pack includes the following bug fixes over SCA BB 3.0.0:
•
NTP misclassification as eDonkey and Manolito
•
Improved lately marks mechanism
The January 2006 3.0.0 Protocol Pack for SCA BB 3.0.0 includes the following spqi file:
•
SCABB_300PP0601_SUS.spqi: designated for all regions other than the Asia Pacific.
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The January 2006 3.0.0 Protocol Pack includes the following legacy DSS based signatures:
•
The SUS script is empty in 3.0.0
Please note that the January 2006 3.0.0 Protocol Pack does not support the following protocols:
•
Kuro
•
Guruguru
•
V-share
•
Soribada
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Installation
Installation of the January 2006 3.0.0 Protocol Pack involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.
November 2005 Protocol Pack (Protocol Pack #02)
Prerequisites
The November 2005 Protocol Pack for 2.5.7 can be installed on an SCE 1000 or SCE 2000 on which either one of the following software versions has already installed:
•
SCA BB 2.5.7
•
SCA BB 2.5.7 with September 2005 Protocol Pack
What's new in the November 2005 Protocol Pack
Note
The November 2005 Protocol Pack can be installed ONLY on the SCA BB 2.5.7 release, with or without the previous Protocol Pack.
This Protocol Pack includes support for the following new protocols:
•
NTP - Network time protocols
•
Poco - Chinese P2P protocol
•
PPStream - Chinese P2P TV sharing protocol
•
SSDP - Simple service discovery protocol
•
Thunder - Download accelerator
•
QQ - Chinese instant messenger
•
UC - Chinese instant messenger
This Protocol Pack includes updates for the following protocols:
•
Bearshare - New UDP signature
•
BitTorrent - BitComet client unique signature
•
PPLive - New TCP signature
This Protocol Pack includes the following bug fixes:
•
NTP misclassification as eDonkey and Manolito
•
SIP does not recognize Yahoo VOIP
•
Improved handling of dormant BitTorrent flows
The November Protocol Pack includes the following two zip files:
•
SCABB_257PP0511_SUSAP.spqi: designated for the Asia Pacific region
•
SCABB_257PP0511_SUS.spqi: designated for all other regions
DSS Content
Note
The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.
The November Protocol Pack includes the following legacy DSS based signatures:
•
The SUS script contains two protocols:
–
Suspected http
–
Other Gnutella
•
The SUSAP script contains the following DSS based signatures for Korean protocols, in addition to the protocols in the SUS script:
–
Kuro
–
Guruguru
–
V-share
–
Soribada
–
Share - UDP-based signature
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
The November Protocol Pack includes the following new/enhanced interfaces:
Table 28 Enhanced Protocols from Previous Protocol Pack Release
Protocol Name Protocol ID CommentBaiBao
80
Version 1.3.1
PPLive
81
Version 1.0.7.4
DNS
82
FC 1035
Installation
Installation of the November 2005 Protocol Pack involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.
For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution - User Guide Supplement, which is available on CCO at the same directory as the current document.
September 2005 Protocol Pack (Protocol Pack #01)
What's new in the September 2005 Protocol Pack
The September 2005 Protocol pack is relevant for the SCA BB 2.5.7 release.
•
This Protocol Pack includes support for the following protocols:
•
BaiBao - A P2P protocol that is widely used in China
•
PPLive - An application for TV broadcasting using P2P technology
•
Azarus BitTorrent client - A BitTorrent client that runs over UDP
•
Bitcomet BitTorrent client - A BitTorrent client that runs over UDP
•
Fix for the issue of classification of DHCP traffic as Manolito
•
DNS - The Domain Name Service protocol
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS Version 2.0.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2010 Cisco Systems, Inc. All rights reserved.
Feedback







