Guest

Cisco Service Control Application-Protocols

Cisco Service Control Application for Broadband Protocol Pack Notes (Older)

 Feedback

Table Of Contents

Cisco Service Control Application for Broadband Protocol Pack Notes, Older Protocol Packs (1-18)

Introduction

Contents

Overview

Installation

SCA BB Protocol Pack #18

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

New Flavors - (Supported by Release 3.5.0 and later)

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #17

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #16

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #15

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #14

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #13

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #12

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

SCA BB Protocol Pack #11

Compatibility Information

Protocol Library Updates

New Protocols

Updated Protocols

Resolved Caveats

Known Limitations

DSS Content

Protocol Signature Details

Manual Configuration

SCA BB Protocol Pack #10

SCA BB 2.5.10 Protocol Pack #10

Prerequisites

What's new in the SCA BB 2.5.10 Protocol Pack #10

Protocol Signature Details

Installation

Manual configuration

SCA BB 3.0.6 Protocol Pack #10

Prerequisites

What's new in the SCA BB 3.0.6 Protocol Pack #10

SCA-BB 3.0.6 Protocol Pack #10 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB 3.1.0 Protocol Pack #10

Prerequisites

What's new in the SCA BB 3.1.0 Protocol Pack #10

SCA-BB 3.1.0 Protocol Pack #10 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB Protocol Pack #09

SCA BB 2.5.10 Protocol Pack #09

Prerequisites

What's new in the SCA BB 2.5.10 Protocol Pack #09

SCA-BB 2.5.10 Protocol Pack #09 limitations and caveats

DSS Content

Protocol Signature Details

Installation

Manual configuration

SCA BB 3.0.6 Protocol Pack #09

Prerequisites

What's new in the SCA BB 3.0.6 Protocol Pack #09

SCA-BB 3.0.6 Protocol Pack #09 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB 3.1.0 Protocol Pack #09

Prerequisites

What's new in the SCA BB 3.1.0 Protocol Pack #09

SCA-BB 3.1.0 Protocol Pack #09 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB Protocol Pack #08

SCA BB 2.5.10 Protocol Pack #08

Prerequisites

What's new in the SCA BB 2.5.10 Protocol Pack #08

DSS Content

Protocol Signature Details

Installation

Manual Configuration

SCA BB 3.0.6 Protocol Pack #08

Prerequisites

What's new in the SCA BB 3.0.6 Protocol Pack #08

SCA-BB 3.0.6 Protocol Pack #08 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB Protocol Pack #07

SCA BB 2.5.10 Protocol Pack #07

Prerequisites

What's new in the SCA BB 2.5.10 Protocol Pack #07

SCA-BB 2.5.10 Protocol Pack #07 limitations and caveats

DSS Content

Protocol Signature Details

Installation

Manual configuration

SCA BB 3.0.5A Protocol Pack #07

Prerequisites

What's new in the SCA BB 3.0.5A Protocol Pack #07

SCA-BB 3.0.5A Protocol Pack #07 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB Protocol Pack #06

SCA BB 2.5.10 Protocol Pack #06

Prerequisites

What's new in the SCA BB 2.5.10 Protocol Pack #06

SCA-BB 2.5.10 Protocol Pack #06 limitations and caveats

DSS Content

Protocol Signature Details

Installation

Manual configuration

SCA BB 3.0.4 Protocol Pack #06

Prerequisites

What's new in the SCA BB 3.0.4 Protocol Pack #06

SCA-BB 3.0.4 Protocol Pack #06 limitations and caveats

DSS Content

Protocol Signature Details

Installation

SCA BB Protocol Pack #05

SCA BB 2.5.10 Protocol Pack #05

Prerequisites

What's new in the SCA BB 2.5.10 Protocol Pack #05

SCA-BB 2.5.10 Protocol Pack #05 limitations and caveats

DSS Content

Protocol Signature Details

Installation

Manual configuration

SCA BB 3.0.3 Protocol Pack #05

Prerequisites

What's new in the SCA BB 3.0.3 Protocol Pack #05

SCA-BB 3.0.3 Protocol Pack #05 limitations and caveats

DSS Content

Protocol Signature Details

Installation

Manual configuration

SCA BB Protocol Pack #04

SCA BB 2.5.9 Protocol Pack #04

Prerequisites

What's new in the SCA BB 2.5.9 Protocol Pack #04

DSS Content

Protocol Signature Details

Installation

SCA BB 3.0.1 Protocol Pack #04

Prerequisites

What's new in the SCA BB 3.0.1 Protocol Pack #04

DSS Content

Protocol Signature Details

Installation

January 2006 Protocol Pack (Protocol Pack #03)

January 2006 2.5.8 Protocol Pack

Prerequisites

What's new in the January 2006 2.5.8 Protocol Pack

DSS Content

Protocol Signature Details

Installation

January 2006 3.0.0 Protocol Pack

Prerequisites

What's new in the January 2006 3.0.0 Protocol Pack

DSS Content

Protocol Signature Details

Installation

November 2005 Protocol Pack (Protocol Pack #02)

Prerequisites

What's new in the November 2005 Protocol Pack

DSS Content

Protocol Signature Details

Installation

September 2005 Protocol Pack (Protocol Pack #01)

What's new in the September 2005 Protocol Pack

Obtaining Documentation and Submitting a Service Request


Cisco Service Control Application for Broadband Protocol Pack Notes, Older Protocol Packs (1-18)


Revised: November 12, 2010, OL-8483-26

Introduction

These protocol pack notes for the Cisco Service Control Application for Broadband (SCA BB) describe the content of the various protocol packs that are available at the Software Download page of the Cisco website.

Contents

Overview

Cisco protocol packs include new and improved protocol signatures for SCA BB. A typical signature update is a file containing new and updated signatures for better detection of new or updated popular peer-to-peer applications, gaming applications, and other interesting protocols. When loaded into the SCE platform, these signatures improve classification abilities of SCA BB with minimal or zero SCE platform service downtime.

The protocol pack files are available for Cisco partners and customers for download from the Software Download page of the Cisco website.

Cisco offers an e-mail notification service that notifies customers and partners each time a new protocol pack becomes available for download. To register for this service, please contact the relevant Cisco account team.

Installation

Installation of the SCA BB Protocol Pack #22 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information, see the Cisco Service Control Application for Broadband User Guide for your SCA BB release:

3.1.7

3.5.5

3.6.0

3.6.1

SCA BB Protocol Pack #18

Compatibility Information

The SCA BB Protocol Pack #18 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

SCA BB Release 3.1.7

SCA BB Release 3.5.0

SCA BB Release 3.5.5

Protocol Library Updates

New Protocols

TruPhone - VoIP (Supported by 3.5.0 and later)

Quake 3 - Gaming server (Supported by 3.5.0 and later)

Maple Story - Online game

Call of Duty - Online game (Supported by 3.5.0 and later)

VPN - IPSec

Youtube HQ - Youtube High Quality videos

Fileguri - P2P

TomatoPang - P2P

Songsari - P2P

Starwars Jedi Knight - Port based protocol (Supported by 3.5.0 and later)

Wolfenstein Enemy Territory - Port based protocol (Supported by 3.5.0 and later)

Updated Protocols

PPLive - Support updated to English client version 1.9.47 and Chinese client version 2.2.2

Ares - Support updated to client version 2.1.1.3035

Youtube HD - Support enhanced and now include Youtube Shows

Skype - Support enhanced to client version 4.1.0.136

Google Talk - Support enhanced

Counter Strike - Port based protocol is now based on Quake3 protocol. (Supported by 3.5.0 and later)

Elite Force - Port based protocol is now based on Quake3 protocol. (Supported by 3.5.0 and later)

Soldier of Fortune - Port based protocol is now based on Quake3 protocol. (Supported by 3.5.0 and later)

New Flavors - (Supported by Release 3.5.0 and later)

Facebook IM - Instant Messenger

Fox News - Flash based video flavor

NBA - Flash based video flavor

CNN - Flash based video flavor

MetaCafe - Flash based video flavor

Rutube - Flash based video flavor

ESPN - Flash based video flavor

Vimeo - Flash based video flavor

MSN - Flash based video flavor

MLB - HTTP based video flavor

NetFlix - Online video service

AppleTV - Online video service

Resolved Caveats

CSCta25715

uTorrent 1.9 with uTP enabled might be misclassified as Generic UDP.

CSCta92977

uTorrent might be misclassified as Generic TCP when multiple flows are sent together.

CSCsy81524

PPLive 2.0.21 might be misclassified as Behavioral P2P.

Known Limitations

CSCsv44394

The installation of Protocol Pack #18 upon SCOS release 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #18 features.


Step 1 Extract the SPQI file from the 3.1.7 Protocol Pack #18 ZIP package and install the Protocol Pack as usual using SCA BB.

Step 2 Extract the script.txt file from the 3.1.7 Protocol Pack #18 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

CSCsx78811

Upgrading from 3.1.7 with Protocol Pack #18 to 3.5.0 with Protocol Pack #18 requires manual configuration in order to support all the Protocol Pack #18 features.


Step 1 Remove the DSS. Go to:

Configuration > Signature Settings > Signature Script

and choose Remove.

Step 2 Save the PQB file.

Step 3 Install 3.5.0 with Protocol Pack 18.



Note Upgrading from 3.5.x with Protocol Pack 18 to a later SCOS version with Protocol Pack 18 will display warning messages. Once the new configuration is saved, warnings will no longer be displayed.


CSCta17754

Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5 .

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols, refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #18. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 1 New and Enhanced Protocols in SCA BB Protocol Pack #18

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

IPSec over TCP

1085

VPN

ESP

VPN

MapleStory

1086

Gaming

Counter Strike

PC Gaming

Truphone

1087

VoIP

SIP

Other VoIP

Quake3 Gaming Server

1088

Gaming

Counter Strike

PC Gaming

Call of Duty

1089

Gaming

Counter Strike

PC Gaming

Starwars Jedi Knight

1090

Gaming

Counter Strike

PC Gaming

Wolfenstein Enemy Territory

1091

Gaming

Counter Strike

PC Gaming

Fileguri

1092

P2P

v-share

Other P2P

TomatoPang

1093

P2P

v-share

Other P2P

Songsari

1094

P2P

v-share

Other P2P


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


SCA BB Protocol Pack #17

Compatibility Information

The SCA BB Protocol Pack #1t can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

SCA BB Release 3.1.6

SCA BB Release 3.1.6S

SCA BB Release 3.1.7

SCA BB Release 3.5.0

Protocol Library Updates

New Protocols

Flash YouTube HD

Flash YouTube Normal

Yahoo General Login

Sky Player - (Supported by 3.5.0 only)

Updated Protocols

Gnutella - Support enhanced and updated.

Joost - Support updated in response to the new Joost Web-Based Service

Skype - Support enhanced and updated to client version 4.0.0.224

YouTube - Support enhanced and updated in response to changes in YouTube hosting mechanism.

Yahoo Flash - Support enhanced and updated in response to changes in Yahoo hosting (Supported by 3.5.0 only)

Resolved Caveats

CSCsx69375

In certain scenarios, several online games might be misclassified as Bittorrent Encrypted.

CSCsy28207

In certain scenarios, Skype might be misclassified as Bittorrent Encrypted traffic.

CSCsy33909

WinnyP detection dropped compared to previous protocol packs.

CSCsy44809

Yahoo Mail login over HTTPS might be misclassified as Yahoo Messenger traffic.

Known Limitations

CSCsv03281

Hitless upgrade in 3.1.6S is not supported.

CSCsv44394

The installation of Protocol Pack #17 upon SCOS release 3.1.6, 3.1.6S, or 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #17 features.


Step 1 Extract the SPQI file from the 3.1.6/3.1.6S/3.1.7 Protocol Pack #17 ZIP package and install the Protocol Pack as usual using SCA BB.

Step 2 Extract the script.txt file from the 3.1.6/3.1.6S/3.1.7 Protocol Pack #17 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

CSCsx78811

Upgrading from 3.1.x with Protocol Pack #16 or later to 3.5.0 with Protocol Pack #16 or later requires the following manual configuration in order to support all the latest Protocol Pack features.


Step 1 Remove the DSS. Go to:

Configuration > Signature Settings > Signature Script

and choose Remove.

Step 2 Save the PQB file.

Step 3 Install 3.5.0 with Protocol Pack 17.


CSCsz30295

Hitless upgrade in 3.1.7/3.5.0 SCE8000 is not supported.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols, refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #17. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 2 New and Enhanced Protocols in SCA BB Protocol Pack #17

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Flash YouTube HD

1082

Internet Video

Flash YouTube

Flash YouTube

Yahoo General Login

1083

General

Yahoo Messenger

Yahoo Messenger

Flash YouTube Normal

1084

Internet Video

Flash YouTube

Flash YouTube


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


SCA BB Protocol Pack #16

Compatibility Information

The SCA BB Protocol Pack #16 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

SCA BB Release 3.1.1

SCA BB Release 3.1.5

SCA BB Release 3.1.6

SCA BB Release 3.1.6S

SCA BB Release 3.1.7

SCA BB Release 3.5.0

Protocol Library Updates

New Protocols

Newsgroups Downloads (Supported by 3.5.0 only)

SIP-I - VoIP

Telepresence CTS-3000 - VoIP

HyppTV - Internet Video

MegaUpload - OneClick Hosting (Supported by 3.5.0 only)

RapidShare - OneClick Hosting (Supported by 3.5.0 only)

Vagaa - Internet Video (Not supported by 3.1.1)

Updated Protocols

uTorrent - Support enhanced and updated to client version 1.9 Beta (build 13910)

WinnyP - Support enhanced and updated to client version 2.0b7.28 (Disabled by default, Please see manual configuration for further details)

UC - Support enhanced and updated to client version 2008beta2 (Not supported by 3.1.1)

Resolved Caveats

CSCsw78280

In certain scenarios, Manolito protocol is misclassified as Behavioral Upload/Download.

CSCsq04726

In certain scenarios Bittorrent might be misclassified as Generic traffic.

CSCsq96038

In certain scenarios, Oracle traffic might be misclassified as Encrypted eMule.

CSCsr17352

Some online games might be misclassified as Winny 2.

CSCsr22638

In certain scenarios, SSH traffic might be misclassified as Behavioral P2P.

CSCsu06798

In certain scenarios, uTorrent 1.8 might be misclassified as Generic TCP.

CSCsv54098

In certain scenarios, RTMP based protocols such as iView and Hulu might be misclassified as RTMP.

CSCsw33095

UDP traffic might be misclassified as Generic UDP when open-flow-mode is set to minimum packets 5.

Known Limitations

CSCsv44394

The installation of Protocol Pack #16 upon SCOS release 3.1.5, 3.1.6, 3.1.6S, or 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #16 features.


Step 1 Extract the .SPQI file from the 3.1.5/3.1.6/3.1.6S/3.1.7 Protocol Pack #16 ZIP package and install the Protocol Pack as usual using SCA-BB.

Step 2 Extract the script.txt file from the 3.1.5/3.1.6/3.1.6S/3.1.7 Protocol Pack #16 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

CSCsx78811

Upgrading from 3.1.1, 3.1.5, 3.1.6, 3.1.6S, or 3.1.7 with Protocol Pack #16 to 3.5.0 with Protocol Pack #16 requires the following manual configuration in order to support all the Protocol Pack #16 features.


Step 1 Remove the DSS. Go to:

Configuration > Signature Settings > Signature Script

and choose Remove.

Step 2 Save the PQB file.

Step 3 Install 3.5.0 with Protocol Pack 16.


CSCsv03281

Hitless upgrade in 3.1.6S is not supported.

CSCsv03281

Hitless upgrade on top of 3.1.1 with protocol pack #15 is not supported.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #16. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 3 New and Enhanced Protocols in SCA BB Protocol Pack #16

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Telepresence

1078

VoIP

SIP

P2P

Download over NNTP

1079

File-Sharing

NNTP

Newsgroups

Vagaa

1080

P2P

DirectConnect

P2P

HyppTV

1081

Internet Video

Video over HTTP

HTTP Download


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


WinnyP manual configuration instructions

To enable WinnyP classification, the following root level CLI commands should be executed

SCE#>configure
SCE (config)#>interface LineCard 0
SCE (config if)#>tunable GT_PL_WINNYP_CLASSIFICATION_ENABLE value true
SCE(config if)#>tunable GT_PL_WINNYP_AGGRESSIVE_CLASSIFICATION_ENABLE value true

The following command should be executed in 3.5.0 only:

SCE2000(config if)#>tunable GT_PL_BEHAVIORAL_DOWNLOAD_CHECK_SPECIFIC_SIGNATURES value true

SCA BB Protocol Pack #15

Compatibility Information

The SCA BB Protocol Pack #15 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

SCA BB Release 3.0.6

SCA BB Release 3.1.1

SCA BB Release 3.1.5

SCA BB Release 3.1.6

SCA BB Release 3.1.6S

Protocol Library Updates

New Protocols

TVUPlayer - P2PTV

PPFilm - P2PTV

ABC iView - Video Hosting

Naver Phone - VoIP

NateOn - VoIP

Google Mobile Maps

Youtube Mobile

Updated Protocols

Yahoo Messenger - Support enhanced and updated to client version 8.1.0.421

Skype - Support enhanced and updated to client version 4 beta 1

Resolved Caveats

CSCsr04812

In certain scenarios, third party gaming is misclassified as Skype.

CSCsr72588.

In certain scenarios, Mario cart is misclassified as Bittorrent.

CSCsu49225

In certain scenarios, LDAP is misclassified as Skype.

CSCsr81179.

In certain scenarios, RTMP is misclassified as Generic TCP.

CSCsr81134.

RTMP misclassified as Generic Non-Established due to premature aging.

CSCsr30750

MS Remote Desktop misclassified as MSN Messenger.

CSCsr93345

VNC misclassified as PPLive.

Known Limitations

CSCsv44394

The installation of Protocol Pack #15 upon SCOS release 3.1.5 or 3.1.6 requires the following manual configuration in order to support all the Protocol Pack #15 features.


Step 1 Extract the .SPQI file from the 3.1.5/3.1.6 Protocol Pack #15 ZIP package and install the Protocol Pack as usual using SCA-BB.

Step 2 Extract the script.txt file from the 3.1.5/3.1.6 Protocol Pack #15 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

CSCsv03281

Hitless upgrade in 3.1.6S is not supported.

CSCsu91574

In extreme network topologies where UDP is throttled by a NAT or a Firewall device, Skype might be misclassified as Generic TCP.

PPFilm might be misclassified as Generic TCP

PPFilm video service consists of hundreds of channels updated on a daily basis. The SCE platform may not support all channels.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/cgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #15. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 4 New and Enhanced Protocols in SCA BB Protocol Pack #15

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

TVUPlayer

1072

P2P TV

TVAnts

P2P

GMail

1073

Mail

GoogleEarth

E-Mail

Skype

25

VoIP

Skype

Skype

PPFilm

1074

P2P TV

PPLive

P2P

ABC iView

1075

Video Hosting

Flash

Flash

Naver

1076

VoIP

Primus

VoIP

NateOn

1077

VoIP

Primus

VoIP


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


Google Mobile Maps special configuration instructions:


Step 1 Create the Google Mobile Maps flavors

a. From the Configuration drop-down menu, select Flavors.

The Flavors Editing dialog opens.

b. Create the two new flavors:

A flavor of type HTTP URL; for example "Google Mobile Maps URL".

Add a parameter to this flavor with a Host Suffix value of "*.google.com" (case sensitive). Leave all other fields as "*".

A flavor of type HTTP UserAgent; for example "Google Mobile Maps User-Agent".

Add a parameter to this flavor with a User Agent value of "WINM-TEST-USER-AGENT" (case sensitive).

c. Create a new composite flavor using the new flavors.

A flavor of type HTTP Composite; for example "Google Mobile Maps over HTTP".

Add a parameter to this flavor with the HTTP User Agent value you created in Step 1 b.

Add a parameter to this flavor with the HTTP Url value you created in Step 1 b.

Step 2 Create the Google Mobile Maps service:

Open the Services tab and create a new service called "Google Mobile Maps" under 'HTTP' (or other desired group).

Step 3 Create the Google Mobile Maps service elements:

Create new service elements by filling the following values in the Create Service element dialog (fields that are not listed below should not be changed):

Service element:

Service: 'Google Mobile Maps'

Protocol: 'Browsing'

Flavor: 'Google Mobile Maps over HTTP'


Youtube mobile special configuration instructions:


Step 1 Create the Google Mobile Maps flavors

a. From the Configuration drop-down menu, select Flavors.

The Flavors Editing Dialog opens.

b. Create the new flavor:

A flavor of type RTSP Host Name; for example "Youtube Mobile over RTSP".

Add a parameter to this flavor with a Host Suffix value of "*rtsp-youtube.l.google.com" (case sensitive).

Step 2 Create the Youtube Mobile service:

Open the Services tab and create a new service called "Youtube Mobile" under Streaming (or other desired group).

Step 3 Create the Youtube Mobile service elements:

Create new service elements by filling the following values in the Create Service element dialog (fields that are not listed below should not be changed):

Service element:

Service: 'Youtube Mobile'

Protocol: 'RTSP Streaming'

Flavor: 'Youtube Mobile over RTSP'


SCA BB Protocol Pack #14

Compatibility Information

The SCA BB Protocol Pack #14 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

SCA BB Release 3.0.6

SCA BB Release 3.1.0

SCA BB Release 3.1.1

SCA BB Release 3.1.5

SCA BB Release 3.1.6

SCA BB Release 3.1.6S

Protocol Library Updates

New Protocols

BabelGum - IPTV.

RTMP - Streaming (including Hulu, BBC iPlayer and Yahoo).

Ventrilo - VoIP.

TeamSpeak - VoIP.

Updated Protocols

Bittorrent - Azureus Vuze client version 3.0.5 support was added.

eMule - updated support to client version 0.49a.

PPLive - Support enhanced and updated to client version 1.9.35.

BBC iPlayer - Support enhanced.

MySpace Flash - Support enhanced

Second Life - Support enhanced.

SSL multipacket protocols - Support enhanced

Bittorrent - uTorrent, Deluge and Azureus - Support enhanced

TFTP - support enhanced.

Flash - support enhanced.

Resolved Caveats

CSCsq83081

When browsing MySpace, it is sometimes classified as 'Flash' rather than 'Flash MySpace'.

CSCsq26609

Lineage gaming is misclassified as Bittorrent Encrypted.

CSCsq83045

Multicast DNS is classified as Second Life.

CSCsq66448

HTTPS traffic is misclassified to MS Push Mail in addition to SSL-VPN traffic.

CSCsq09521

PPLive is misclassified to other protocols due to lack of support for client version 1.9.35.

CSCsm95034

EVE online gaming and VGaurd Video surveillance are misclassified to PPLive.

CSCso89456

In certain scenarios when HBC is disabled and eMule is set to an obfuscated mode, most of the traffic is misclassified to Behavioral Upload / Download and only 15 - 20% is classified to eMule.

CSCso75547

BBC iPLayer is misclassified to Behavioral Upload / Download.

CSCso30107

TFTP - Write request is misclassified to Generic UDP.

CSCso17765

Yahoo messenger is misclassified to SSL.

Known Limitations

CSCsm06607

The installation of Protocol Pack #14 upon 3.1.5 requires the following manual configuration in order to support all the Protocol Pack #14 features.


Step 1 Extract the .SPQI file from the 3.1.5 Protocol Pack #14 ZIP package and install the Protocol Pack as usual using SCA-BB.

Step 2 Extract the script.txt file from the 3.1.5 Protocol Pack #14 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

CSCsr20314

Protocol Packs #12 and above installed on top of SCA-BB Release 3.1.0 or SCA-BB Release 3.1.1 may cause to some P2P traffic to be misclassified.

Following are the protocols that can be misclassified: Manolito, Neonet, Direct_Connect, PPStream, Winny, and Share.

Workaround: Configure the SCE platform by executing the following command sequence:

enable 15
configure
Interface linecard 0 
lookup  GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118030336
lookup  GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118620160
lookup  GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 117899264
lookup  GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118816768
lookup  GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 117702656
lookup  GT_LUT_HBC_SOCKET_BASED_PROTOCOLS remove-key 118292480
exit
exit
copy running-config-application startup-config-application

CSCsq04726

Azureus might not be completely blocked and might be misclassified to Generic TCP / UDP in certain scenarios enforcing BLOCK mode.

CSCso84926

BT Azureus might be misclassified to Generic TCP when the client is working in encrypted mode.

CSCso55461

Upon upgrading from Protocol Pack #11 to Protocol Pack #12 , #13 or #14, WebThunder protocol signature might change, and thus be misclassified to Generic traffic.

Workaround:


Step 1 Delete default DSS.

Step 2 Retrieve the service configuration from the SCE.

Step 3 Apply the service configuration to the SCE.


DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #14. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 5 New and Enhanced Protocols in SCA BB Protocol Pack #14

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

BabelGum

1066

P2P TV

Joost

P2P

RTMP

1067

Streaming

Flash

Streaming

HULU

1068

Internet Video

Flash

Streaming

Ventrilo

1069

VoIP

Fring VoIP

VoIP

TeamSpeak

1070

VoIP

Fring VoIP

VoIP

BBC iPlayer over RTMP

1071

Streaming

BBC iPlayer

P2P


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


SCA BB Protocol Pack #13

Compatibility Information

The SCA BB Protocol Pack #13 can be installed on an SCE 1000 or SCE 2000 platform on which one of these versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

3.0.6

3.1.0

3.1.1

3.1.5

Protocol Library Updates

New Protocols

Behavioral VoIP - General VoIP recognition.

Angle Media - P2P TV provider.

opCast - P2P media provider.

Tor - Virtual Private Network.

Updated Protocols

Bittorrent - uTorrent client support updated to support version 1.8 alpha.

Bittorrent - BitComet client support updated to support version V0.99.

Skype - Support enhanced for Voice, IN and OUT activities.

BBBRoadcast - Support enhanced.

RTP - Support enhanced

Resolved Caveats

CSCsl96818

Specific YouTube videos are classified as Flash rather than Flash YouTube.

CSCsl98416

SMTP may be misclassified to FTP.

CSCsl98389

SCE platform sends RADIUS RDR with no Acct-Status-Type attribute.

CSCsm15090

Some video over HTTP traffic may be misclassified due to wrong file extension usage.

CSCsl93375

PPTP traffic must be classified by a Signature.

CSCsl85317

MSN messenger misclassified to Generic TCP in video and voice conference.

CSCsl99223

MSN Messenger - Voice via Relay server can not be blocked

Known Limitations

CSCsm06607

The installation of Protocol Pack #13 upon 3.1.5 requires the following manual configuration in order to support all the Protocol Pack #13 features.


Step 1 Extract the .SPQI file from the 3.1.5 Protocol Pack #13 ZIP package and install the Protocol Pack as usual using SCA-BB.

Step 2 Extract the script.txt file from the 3.1.5 Protocol Pack #13 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols, please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #13. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 6 New and Enhanced Protocols in SCA BB Protocol Pack #13

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Behavioral VoIP

1062

General VoIP

RTP

VoIP

Angle Media

1063

P2P TV

PPLive

P2P

SopCast

1064

P2P TV

PPLive

P2P

Tor

1065

VPN

Freenet

P2P


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


Nico Nico Douga special configuration instructions:


Step 1 Create the Nico Nico Douga flavors

a. From the Configuration drop-down menu, select Flavors.

The Flavors Editing Dialog window opens.

b. Create a new flavor of the type HTTP URL; for example "Nico Nico Douga".

c. Add a parameter to this flavor with Host Suffix value of "*.nicovideo.jp" and Path Prefix value of "/smile*" (case sensitive). Leave all other fields as "*".

Step 2 Create the Nico Nico Douga service:

Open the Services tab and create a new service called "Nico Nico Douga" under Streaming (or other desired group).

Step 3 Create the Nico Nico Douga service element:

Edit the newly created service element by filling the following values in the Create Service element dialog window (fields that are not listed below should stay unchanged):

Service: 'Nico Nico Douga'

Protocol: 'HTTP Browsing'

Flavor: 'Nico Nico Douga'


SCA BB Protocol Pack #12

Compatibility Information

The SCA BB Protocol Pack #12 can be installed on an SCE 1000 or SCE 2000 platform on which one of the versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

3.0.6

3.1.0

3.1.1

3.1.5

3.1.5LA

Protocol Library Updates

New Protocols

BBBroadcast - Video streaming.

PacketiX - Virtual Private Network.

Second Life - Virtual reality with P2P functions.

Vivox - Online gaming VoIP protocol.

Updated Protocols

Bittorrent - Deluge Bit torrent V0.5.6 client support added.

Bittorrent - Azureus client support updated to support version 3.0.3.

Gnutella - Limewire client support updated to support version V4.14.12

MSN Messenger - Support enhanced.

Google Talk - Support enhanced.

CU World - Support updated to support version 0.92b2.

Resolved Caveats

CSCsi21093

Error in output log file when illegal bind info appears in IRC traffic.

CSCsl20455

POP3 may be classified as Generic TCP.

CSCsl78566

Behavioral P2P mechanism causes misclassifications.

This issue is not relevant for 3.0.6 platform.

CSCsl11500

WebThunder misclassification (New signature should be developed).

CSCsl45174

Online gaming traffic is misclassified as Winny.

CSCsl27582

Nintendo DS WiFi might be misclassified as Manolito.

CSCsl83338

Some SSL TLS 1.0 flows are misclassified as Nodezilla.

Known Limitations

CSCsm06607

The installation of Protocol Pack #12 upon 3.1.5 requires the following manual configuration in order to support all the Protocol Pack #12 features.


Step 1 Extract the .SPQI file from the 3.1.5 Protocol Pack #12 ZIP package and install the Protocol Pack as usual using SCA-BB.

Step 2 Extract the script.txt file from the 3.1.5 Protocol Pack #12 ZIP package and upload to the SCE platform using FTP.

Step 3 Open a CLI session in the SCE platform and navigate to the directory where the uploaded script.txt resides and execute the following CLI command:

script run script.txt.

CSCsl85317, CSCsl99223

In certain network topologies, such as multiple NATs/PATs, MSN voice sessions generate traffic that is not classified correctly.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For a complete list of supported protocols please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #12. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 7 New and Enhanced Protocols in SCA BB Protocol Pack #12

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

BBBroadcast

1058

P2P TV protocol

TVAnts

P2P

PacketiX

1059

VPN

Freenet

P2P

Second Life

1060

Online gaming

Yahoo Game

 

Vivox

1061

Online gaming VoIP protocol

CQ VoIP

 

SCA BB Protocol Pack #11

Compatibility Information

The SCA BB Protocol Pack #11 can be installed on an SCE 1000 or SCE 2000 platform on which one of the versions of SCA BB has already been installed.

This Protocol Pack can be installed on top of the following platforms,

3.0.6

3.1.0

3.1.1

Protocol Library Updates

New Protocols

Gyao - Video streaming.

My Jabber - Instant messaging Jabber client.

BBC iPlayer - P2P video.

WebThunder - P2P protocol with web interface.

Updated Protocols

Poco - Classification in split flow mode enhanced.

Flash/video/audio/binary over HTTP - Classification enhanced.

Skype - Classification updated to support Skype 3.5.

Warez - Classification updated to support Ares 2.0.9 client.

Resolved Caveats

CSCsk51763

If some traffic generated by a P2P client is classified as B.P2P, it causes all the traffic of that client to be mapped to B.P2P.

This issue is relevant for 3.1.0 and 3.1.1 platforms only

CSCsj14472

Encrypted traffic of Winny2 is misclassified.

Resolved for 3.1.1 platform only.

CSCsj58100

Blackberry traffic is classified as Skype.

CSCsj99194

Some SIP flows have preemptive packet that is not recognized as SIP.

CSCsk61759

"PRACK" SIP method is not recognized and thus some SIP flows are mapped to Generic UDP.

CSCsk69072

PL tries to re-bind flows that it already requested a bind for.

CSCsk17816

Some YouTube videos are classified as Flash instead of Flash YouTube.

CSCsk88129

HTTP & HTTPS half-closed flows leftovers are misclassified as Winny2.

CSCsk86079

Misclassifications of Google Earth to "HTTP port" and to "HTTP Browsing" were observed.

Known Limitations

CSCsk92699

Several clients (BBC-iPlayer/4oD/Sky) use the same underlying protocol - Kontiki. '4oD' and 'Sky' clients are not distinguished and will be mapped to Kontiki.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform.


The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details


Note For complete list of supported protocols please refer to the protocol support reference guide located at http://www.cisco.com/pcgi-bin/tablebuild.pl/sca-ps.


The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #11. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 8 New and Enhanced Protocols in SCA BB Protocol Pack #11

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

WebThunder

1055

P2P file sharing accelerator

Napster

P2P

MyJabber

1056

Instant messaging client

ICQ

 

BBC iPlayer

1057

P2P TV streaming

TVAnts

P2P


Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


Gyao special configuration instructions:


Step 1 Create the Gyao flavors

a. From the 'Configuration' drop-down menu, select 'Flavors'.

The 'Flavors Editing Dialog' window opens.

b. Create the two new flavors:

A flavor of type 'RTSP Host Name'; for example "Gyao over RTSP".

Add a parameter to this flavor with a 'Host Suffix' value of "*gyao.jp" (case sensitive)

Hit 'Accept' when finished.

A flavor of type 'HTTP URL'; for example "Gyao over HTTP".

Add a parameter to this flavor with a 'Host Suffix' value of "*gyao.jp" (case sensitive). Leave all other fields as "*".

Step 2 Create the Gyao service:

Open the 'Services' tab and create a new service called "Gyao" under 'Streaming' (or other desired group).

Step 3 Create the Gyao service elements:

Create two new service elements by filling the following values in the 'Create Service element' dialog window (fields that are not listed below should stay unchanged):

Service element #1:

Service: 'Gyao'

Protocol: 'RTSP Streaming'

Flavor: 'Gyao over RTSP'

Service element #2:

Service: 'Gyao'

Protocol: 'HTTP Browsing'

Flavor: 'Gyao over HTTP'

SCA BB Protocol Pack #10

The SCA BB Protocol Pack #10 contains the following three protocol packs:

SCA BB 2.5.10 Protocol Pack #10

SCA BB 3.0.6 Protocol Pack #10

SCA BB 3.1.0 Protocol Pack #10

Refer to the relevant section for your SCA BB version.

Upgrading release 2.5.10, 3.0.6, or 3.1.0 with Protocol Pack #10 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.


Note Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #10
Installation- SCA BB 3.0.6 Protocol Pack #10
Installation- SCA BB 3.1.0 Protocol Pack #10


SCA BB 2.5.10 Protocol Pack #10

Prerequisites

The SCA BB 2.5.10 Protocol Pack #10 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.

What's new in the SCA BB 2.5.10 Protocol Pack #10


Note The SCA BB 2.5.10 Protocol Pack #10 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:

Pando - P2P file sharing.

KuGoo - P2P music file sharing.

Fring - IM client for mobile phone.

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:

eMule - updated to support v0.48 (CSCsj48543).

ICQ - voice recognition enhanced (CSCsi96940).

PPStream - updated to support the latest (v2.0) version (CSCsj76001).

Yahoo Messenger - updated to support v8.1.0 (CSCsi96962).

Gnutella - support enhanced (CSCsi52884).

Skype - misclassifications resolved (CSCsj14278, CSCsj43543).

PPLive - support enhanced (CSCsj53023, CSCsj75652).

Vonage - support enhanced (CSCsh84903).

The SCA BB 2.5.10 Protocol Pack #10 for SCA BB 2.5.10 includes the following two spqi files:

SCABB_2510PP10_SUSAP.spqi: designated for the Asia Pacific region

SCABB_2510PP10_SUS.spqi: designated for all other regions

SCA-BB 2.5.10 Protocol Pack #10 limitations and caveats

Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.10 Protocol Pack 10 includes the following legacy DSS-based signatures:

The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

The SUSAP script contains following DSS-based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.10 Protocol Pack #10 includes the following new/enhanced interfaces:

Table 9 New and Enhanced Protocols in SCA BB 2.5.10 Protocol Pack #10

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Pando

99

File sharing

Napster

P2P

Kugoo

100

P2P music file sharing

DirectConnect

P2P

Fring

101

IM mobile phone client

Yahoo Messenger

Instant Messaging


Installation

Installation of the SCA BB 2.5.10 Protocol Pack #10 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

Manual configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


GoogleEarth special configuration instructions:

Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.

ICQ VoIP special configuration instructions:

Although 2.5.10-Protocol Pack #10 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

Video/Audio/Binary over HTTP special configuration instructions:

Using the SCA BB console, manually assign the protocols 'Video over HTTP', 'Audio over HTTP' and 'Binary over HTTP' to the 'HTTP' Service.

SCA BB 3.0.6 Protocol Pack #10

Prerequisites

The SCA BB 3.0.6 Protocol Pack #10 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.6 has already been installed.

What's new in the SCA BB 3.0.6 Protocol Pack #10


Note The SCA BB 3.0.6 Protocol Pack #10 for SCA BB 3.0.6 can be installed ONLY on the SCA BB 3.0.6 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.6:

Pando - P2P file sharing.

KuGoo - P2P music file sharing.

Fring - IM client for mobile phone.

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.6:

eMule - updated to support v0.48 (CSCsj48543).

ICQ - voice recognition enhanced (CSCsi96940).

PPStream - updated to support v2.0 (CSCsj76001).

Yahoo Messenger - updated to support v8.1.0 (CSCsi96962).

Gnutella - support enhanced (CSCsi52884).

Skype - misclassifications resolved (CSCsj14278, CSCsj43543).

PPLive - support enhanced (CSCsj53023, CSCsj75652).

Vonage - support enhanced (CSCsh84903).

The SCA BB 3.0.6 Protocol Pack #10 for SCA BB 3.0.6 includes the following spqi file:

SCABB_306PP10_SUS.spqi: designated for all regions

SCA-BB 3.0.6 Protocol Pack #10 limitations and caveats

Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.6 Protocol Pack #10 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.6 Protocol Pack #10 includes the following new/enhanced interfaces:

Table 10 New and Enhanced Protocols in SCA BB 3.0.6 Protocol Pack #10

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Pando

1049

File sharing

Napster

P2P

Kugoo

1050

P2P music file sharing

DirectConnect

P2P

ICQ Voice

1051

IM voice

ICQ VoIP

VoIP

Fring

1052

IM mobile phone client

Yahoo Messenger

Instant Messaging


Installation

Installation of the SCA BB 3.0.6 Protocol Pack #10 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB 3.1.0 Protocol Pack #10

Prerequisites

The SCA BB 3.1.0 Protocol Pack #10 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.1.0 has already been installed.

What's new in the SCA BB 3.1.0 Protocol Pack #10


Note The SCA BB 3.1.0 Protocol Pack #10 for SCA BB 3.1.0 can be installed ONLY on the SCA BB 3.1.0 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.1.0:

Pando - P2P file sharing.

KuGoo - P2P music file sharing.

Fring - IM client for mobile phone.

This Protocol Pack includes updates for the following protocols over SCA BB 3.1.0:

eMule - updated to support v0.48 (CSCsj48543).

ICQ - voice recognition enhanced (CSCsi96940).

PPStream - updated to support v2.0 (CSCsj76001).

Yahoo Messenger - updated to support v8.1.0 (CSCsi96962).

Gnutella - support enhanced (CSCsi52884).

Skype - misclassifications resolved (CSCsj14278, CSCsj43543).

PPLive - support enhanced (CSCsj53023, CSCsj75652).

Vonage - support enhanced (CSCsh84903).

The SCA BB 3.1.0 Protocol Pack #10 for SCA BB 3.1.0 includes the following spqi file:

SCABB_310PP10_SUS.spqi: designated for all regions

SCA-BB 3.1.0 Protocol Pack #10 limitations and caveats

Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.1.0 Protocol Pack #10 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.1.0 Protocol Pack #10 includes the following new/enhanced interfaces:

Table 11 New/Enhanced Protocols in SCA BB 3.1.0 Protocol Pack #10

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Pando

1049

File sharing

Napster

P2P

Kugoo

1050

P2P music file sharing

DirectConnect

P2P

ICQ Voice

1051

IM voice

ICQ VoIP

VoIP

Fring

1052

IM mobile phone client

Yahoo Messenger

Instant Messaging


Installation

Installation of the SCA BB 3.1.0 Protocol Pack #10 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB Protocol Pack #09

The SCA BB Protocol Pack #09 contains the following three protocol packs:

SCA BB 2.5.10 Protocol Pack #09

SCA BB 3.0.6 Protocol Pack #09

SCA BB 3.1.0 Protocol Pack #09

Refer to the relevant section for your SCA BB version.

Upgrading release 2.5.10, 3.0.6, or 3.1.0 with Protocol Pack #09 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.


Note Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #09
Installation- SCA BB 3.0.6 Protocol Pack #09
Installation- SCA BB 3.1.0 Protocol Pack #09


SCA BB 2.5.10 Protocol Pack #09

Prerequisites

The SCA BB 2.5.10 Protocol Pack #09 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.

What's new in the SCA BB 2.5.10 Protocol Pack #09


Note The SCA BB 2.5.10 Protocol Pack #09 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:

Zattoo - P2P TV protocol

Sony Location Free - TV broadcast streaming protocol

Joost - P2P TV protocol.

Microsoft Push Mail - E-mail support for PDA/Smartphone

Windows Live Messenger (MSN) v8.1.

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:

PPLive - 1.6.19 classification enhanced (CSCsi25885).

Poco - update to support 2007 beta version (CSCsi87040).

RTSP - Redirect: redirect of RTSP and Streaming does not work - defect resolved (CSCsi55101).

The SCA BB 2.5.10 Protocol Pack #09 for SCA BB 2.5.10 includes the following two spqi files:

SCABB_2510PP09_SUSAP.spqi: designated for the Asia Pacific region

SCABB_2510PP09_SUS.spqi: designated for all other regions

SCA-BB 2.5.10 Protocol Pack #09 limitations and caveats

Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).

2.5.10 with Protocol Pack #09 introduces an additional protocol ID for MSN Messenger called Windows Live Messenger

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.10 Protocol Pack 09 includes the following legacy DSS-based signatures:

The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

The SUSAP script contains following DSS-based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.10 Protocol Pack #09 includes the following new/enhanced interfaces:

Table 12 New/Enhanced Protocols in SCA BB 2.5.10 Protocol Pack #09

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Joost

96

P2P TV

MMS

P2P

MS Push Mail

98

E-mail to PDA

SMTP

E-Mai

Sony Location Free

95

TV broadcast

MMS

P2P

Windows Live Messenger

97

Instant messaging

Yahoo Messenger

Instant messaging

Zattoo

94

P2P TV

MMS

P2P


Installation

Installation of the SCA BB 2.5.10 Protocol Pack #09 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

Manual configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


GoogleEarth special configuration instructions:

Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.

ICQ VoIP special configuration instructions:

Although 2.5.10-Protocol Pack #09 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

Video/Audio/Binary over HTTP special configuration instructions:

Using the SCA BB console, manually assign the protocols 'Video over HTTP', 'Audio over HTTP' and 'Binary over HTTP' to the 'HTTP' Service.

SCA BB 3.0.6 Protocol Pack #09

Prerequisites

The SCA BB 3.0.6 Protocol Pack #09 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.6 has already been installed.

What's new in the SCA BB 3.0.6 Protocol Pack #09


Note The SCA BB 3.0.6 Protocol Pack #09 for SCA BB 3.0.6 can be installed ONLY on the SCA BB 3.0.6 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.6:

Zattoo - P2P TV protocol

Sony Location Free - TV broadcast streaming protocol

Joost - P2P TV protocol.

Microsoft Push Mail - E-mail support for PDA/Smartphone

Windows Live Messenger (MSN) v8.1.

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.6:

PPLive - 1.6.19 classification enhanced (CSCsi25885).

Poco - update to support 2007 beta version (CSCsi87040).

SIP - SIP fails to bundle RTP flow when the connection information of the WAN IP to bundle appears only in the SDP "Ringing" status - defect resolved (CSCsi25885)

RTSP - Redirect: redirect of RTSP and Streaming does not work - defect resolved (CSCsi55101).

SMTP - Certain Non Standard SMTP sessions may not be classified correctly, defect resolved (CSCsi87468).

The SCA BB 3.0.6 Protocol Pack #09 for SCA BB 3.0.6 includes the following spqi file:

SCABB_306PP09_SUS.spqi: designated for all regions

SCA-BB 3.0.6 Protocol Pack #09 limitations and caveats

Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.6 Protocol Pack #09 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.6 Protocol Pack #09 includes the following new/enhanced interfaces:

Table 13 New/Enhanced Protocols in SCA BB 3.0.6 Protocol Pack #09

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Joost

1046

P2P TV

TVAnts

P2P

MS Push Mail

1048

E-mail to PDA

SMTP

E-Mai

Sony Location Free

1045

TV broadcast

TVAnts

P2P

Windows Live Messenger

883

Instant messaging

Yahoo Messenger

Instant messaging

Zattoo

1047

P2P TV

MMS

P2P


Installation

Installation of the SCA BB 3.0.6 Protocol Pack #09 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB 3.1.0 Protocol Pack #09

Prerequisites

The SCA BB 3.1.0 Protocol Pack #09 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.1.0 has already been installed.

What's new in the SCA BB 3.1.0 Protocol Pack #09


Note The SCA BB 3.1.0 Protocol Pack #09 for SCA BB 3.1.0 can be installed ONLY on the SCA BB 3.1.0 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.1.0:

Zattoo - P2P TV protocol

Sony Location Free - TV broadcast streaming protocol

Joost - P2P TV protocol.

Microsoft Push Mail - E-mail support for PDA/Smartphone

Windows Live Messenger (MSN) v8.1.

This Protocol Pack includes updates for the following protocols over SCA BB 3.1.0:

PPLive - 1.6.19 classification enhanced (CSCsi25885).

Poco - update to support 2007 beta version (CSCsi87040).

SMTP - Certain Non Standard SMTP sessions may not be classified correctly, defect resolved (CSCsi87468).

The SCA BB 3.1.0 Protocol Pack #09 for SCA BB 3.1.0 includes the following spqi file:

SCABB_310PP09_SUS.spqi: designated for all regions

SCA-BB 3.1.0 Protocol Pack #09 limitations and caveats

Skype and Joost classification accuracy - since most likely these two protocols share the same underlying protocol suite, Joost flows may be misclassified as Skype. In cases where home users use both of these protocols simultaneously, deviation may reach 100%, i.e. - Joost would be classified as Skype (CSCsi87050).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.1.0 Protocol Pack #09 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.1.0 Protocol Pack #09 includes the following new/enhanced interfaces:

Table 14 New/Enhanced Protocols in SCA BB 3.1.0 Protocol Pack #09

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Joost

1046

P2P TV

TVAnts

P2P

MS Push Mail

1048

E-mail to PDA

SMTP

E-Mai

Sony Location Free

1045

TV broadcast

TVAnts

P2P

Windows Live Messenger

883

Instant messaging

Yahoo Messenger

Instant messaging

Zattoo

1047

P2P TV

MMS

P2P


Installation

Installation of the SCA BB 3.1.0 Protocol Pack #09 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB Protocol Pack #08

The SCA BB Protocol Pack #08 contains the following two protocol packs:

SCA BB 2.5.10 Protocol Pack #08

SCA BB 3.0.6 Protocol Pack #08

Refer to the relevant section for your SCA BB version.

Upgrading release 2.5.10 or 3.0.6 with Protocol Pack #08 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.


Note Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #08
Installation - SCA BB 3.0.6 Protocol Pack #08


SCA BB 2.5.10 Protocol Pack #08

Prerequisites

The SCA BB 2.5.10 Protocol Pack #08 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.

What's new in the SCA BB 2.5.10 Protocol Pack #08


Note The SCA BB 2.5.10 Protocol Pack #08 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:

Club Box - file sharing protocol

Baidu Movie - media sharing protocol

Feidian - TV Streaming protocol

Google Talk - IM protocol

Audio over HTTP - audio download on HTTP protocol

Binary over HTTP - binary download on HTTP protocol

Video over HTTP - video download on HTTP protocol

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:

PPLive - 1.6.19 version update.

Skype - 3.0 version update

NTPv2 is mis-classified as Skype - defect resolved (CSCsh90616)

The SCA BB 2.5.10 Protocol Pack #08 for SCA BB 2.5.10 includes the following two spqi files:

SCABB_2510PP08_SUSAP.spqi: designated for the Asia Pacific region

SCABB_2510PP08_SUS.spqi: designated for all other regions

SCA-BB 2.5.10 Protocol Pack #08 limitations and caveats

Thunder FTP flows are not recognized as Thunder (CSCsh24316).

Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.10 Protocol Pack 08 includes the following legacy DSS-based signatures:

The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

The SUSAP script contains following DSS-based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.10 Protocol Pack #08 includes the following new/enhanced interfaces:

Table 15 New/Enhanced Protocols in SCA BB 2.5.10 Protocol Pack #08

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Audio over HTTP

68

Download over HTTP

   

Baidu Movie

77

Media download

Napster

Commercial file sharing

Binary over HTTP

70

Download over HTTP

   

Club Box

92

File share

iTunes

Commercial file sharing

Feidian

91

P2P, TV streaming

DirectConnect

P2P

Google Talk

93

IM

Yahoo Messenger

Instant messaging

Video over HTTP

65

Download over HTTP

   

Installation

Installation of the SCA BB 2.5.10 Protocol Pack #08 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

Manual Configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


GoogleEarth special configuration instructions:

Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.

ICQ VoIP special configuration instructions:

Although 2.5.10-Protocol Pack #08 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

Video/Audio/Binary over HTTP special configuration instructions:

Using the SCA BB console, manually assign the protocols 'Video over HTTP', 'Audio over HTTP' and 'Binary over HTTP' to the 'HTTP' Service.

SCA BB 3.0.6 Protocol Pack #08

Prerequisites

The SCA BB 3.0.6 Protocol Pack #08 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.6 has already been installed.

What's new in the SCA BB 3.0.6 Protocol Pack #08


Note The SCA BB 3.0.6 Protocol Pack #08 for SCA BB 3.0.6 can be installed ONLY on the SCA BB 3.0.6 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.6:

Club Box - file sharing protocol

Baidu Movie - media sharing protocol

Feidian - TV Streaming protocol

Google Talk - IM protocol

Audio over HTTP - audio download on HTTP protocol

Binary over HTTP - binary download on HTTP protocol

Video over HTTP - video download on HTTP protocol

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.6:

PPLive - 1.6.19 version update.

Skype - 3.0 version update

Redirect not working immediately when trying same URL again - defect resolved (CSCsh74572)

NTPv2 is mis-classified as Skype - defect resolved (CSCsh90616)

The SCA BB 3.0.6 Protocol Pack #08 for SCA BB 3.0.6 includes the following spqi file:

SCABB_306PP08_SUS.spqi: designated for all regions

SCA-BB 3.0.6 Protocol Pack #08 limitations and caveats

Thunder FTP flows are not recognized as Thunder (CSCsh24316).

Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.6 Protocol Pack #08 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.6 Protocol Pack #08 includes the following new/enhanced interfaces:

Table 16 New/Enhanced Protocols in SCA BB 3.0.6 Protocol Pack #08

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Audio over HTTP

68

Download over HTTP

   

Baidu Movie

77

Media download

Napster

Commercial file sharing

Binary over HTTP

70

Download over HTTP

   

Club Box

92

File share

iTunes

Commercial file sharing

Feidian

91

P2P, TV streaming

DirectConnect

P2P

Google Talk

93

IM

Yahoo Messenger

Instant messaging

Video over HTTP

65

Download over HTTP

   

Installation

Installation of the SCA BB 3.0.6 Protocol Pack #08 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB).

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB Protocol Pack #07

The SCA BB Protocol Pack #07 contains the following two protocol packs:

SCA BB 2.5.10 Protocol Pack #07

SCA BB 3.0.5A Protocol Pack #07

Refer to the relevant section for your SCA BB version.

Upgrading release 2.5.10 or 3.0.5A with Protocol Pack #07 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.


Note Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #07
Installation- SCA BB 3.0.5A Protocol Pack #07


SCA BB 2.5.10 Protocol Pack #07

Prerequisites

The SCA BB 2.5.10 Protocol Pack #07 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.

What's new in the SCA BB 2.5.10 Protocol Pack #07


Note The SCA BB 2.5.10 Protocol Pack #07 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:

QQ-Live - TV Streaming protocol

Flash - Support for Flash based video streaming, including unique signatures for the top three sites: 'YouTube', 'MySpace', 'Yahoo!'

Entropy - Freenet client

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:

QQ - 2006 version.

Thunder - Enhanced Thunder signature to support HTTP download

Skype 2.5 - In/Out/Cast services

Poco - 2006 version

Yahoo VOIP other behaviors (CSCsd53602)

GIVE handshake protocols: PeerEnabler, Edonkey and Kazaa (CSCsg22708_CSCsg67059)

Warez-Ares 1.9.9 TCP download/upload recognition improved (CSCsf29301)

The SCA BB 2.5.10 Protocol Pack #07 for SCA BB 2.5.10 includes the following two spqi files:

SCABB_2510PP07_SUSAP.spqi: designated for the Asia Pacific region

SCABB_2510PP07_SUS.spqi: designated for all other regions

SCA-BB 2.5.10 Protocol Pack #07 limitations and caveats

Thunder FTP flows are not recognized as Thunder (CSCsh24316).

Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.10 Protocol Pack 07 includes the following legacy DSS-based signatures:

The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

The SUSAP script contains following DSS-based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.10 Protocol Pack #07 includes the following new/enhanced interfaces:

Table 17 New/Enhanced Protocols in SCA BB 2.5.10 Protocol Pack #07

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

Entropy

85

P2P File sharing, FreeNet client.

DirectConnect

P2P

QQ-Live

86

P2P, TV streaming.

DirectConnect

P2P

Flash

87

Flash video streaming

MMS

MMS

Flash YouTube

88

YouTube Video streaming

MMS

MMS

Flash MySpace

89

MySpace Video streaming

MMS

MMS

Flash Yahoo

90

Yahoo! Video streaming

MMS

MMS

Thunder

50

Download accelerator

DirectConnect

P2P


Installation

Installation of the SCA BB 2.5.10 Protocol Pack #07 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

Manual configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform.

Step 2 Perform the necessary changes according to instructions below.

Step 3 Apply the modified PQB file.


GoogleEarth special configuration instructions:

Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.

ICQ VoIP special configuration instructions:

Although 2.5.10-Protocol Pack #07 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB 3.0.5A Protocol Pack #07

Prerequisites

The SCA BB 3.0.5A Protocol Pack #07 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.5A has already been installed.

What's new in the SCA BB 3.0.5A Protocol Pack #07


Note The SCA BB 3.0.5A Protocol Pack #07 for SCA BB 3.0.5A can be installed ONLY on the SCA BB 3.0.5A release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.5A:

QQ-Live - TV Streaming protocol

Flash - Support for Flash based video streaming, including unique signatures for the top three sites: 'YouTube', 'MySpace', 'Yahoo!'

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.5A:

QQ - 2006 version

Thunder - Enhanced Thunder signature to support HTTP download

Skype 2.5 - In/Out/Cast services

Poco - 2006 version

Yahoo VOIP other behaviors (CSCsd53602)

GIVE handshake protocols: PeerEnabler, Edonkey and Kazaa (CSCsg22708_CSCsg67059)

Warez-Ares 1.9.9 TCP download/upload recognition improved (CSCsf29301)

The SCA BB 3.0.5A Protocol Pack #07 for SCA BB 3.0.5A includes the following spqi file:

SCABB_305PP07_SUS.spqi: designated for all regions

SCA-BB 3.0.5A Protocol Pack #07 limitations and caveats

Thunder FTP flows are not recognized as Thunder (CSCsh24316).

Ares 1.9.9 version is not fully supported, not all Ares flows are recognized (CSCsg13333).

Protocol Pack #07 can be installed upon 3.0.5A only.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.5A Protocol Pack #07 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application.

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.5A Protocol Pack #07 includes the following new/enhanced interfaces:

Table 18 New/Enhanced Protocols in SCA BB 3.0.5A Protocol Pack #07

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

QQ-Live

1032

P2P, TV streaming.

DirectConnect

P2P

Flash

1033

Flash video streaming

HTTP Browsing

HTTP

Flash YouTube

1034

YouTube Video streaming

HTTP Browsing

HTTP

Flash MySpace

1035

MySpace Video streaming

HTTP Browsing

HTTP

Flash Yahoo

1036

Yahoo! Video streaming

HTTP Browsing

HTTP

Thunder

50

Download accelerator

DirectConnect

P2P


Installation

Installation of the SCA BB 3.0.5A Protocol Pack #07 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see Release Notes for Cisco Service Control Application for Broadband (SCA BB)

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB Protocol Pack #06

The SCA BB Protocol Pack #06 contains the following two protocol packs:

SCA BB 2.5.10 Protocol Pack #06

SCA BB 3.0.4 Protocol Pack #06

Refer to the relevant section for your SCA BB version.

Upgrading release 2.5.10 or 3.0.4 with Protocol Pack #06 in a network where the newly supported protocols are relatively common has little performance impact. In a network where the majority of the newly supported protocols are not common, performance might drop, depending on the traffic mix and control policy.


Note Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #06
Installation- SCA BB 3.0.4 Protocol Pack #06


SCA BB 2.5.10 Protocol Pack #06

Prerequisites

The SCA BB 2.5.10 Protocol Pack #06 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.

What's new in the SCA BB 2.5.10 Protocol Pack #06


Note The SCA BB 2.5.10 Protocol Pack #06 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:

TVAnts - TV and Video Streaming protocol

Freenet - P2P protocol

Primus/Lingo - VoIP service protocol

DHT - distributed hash table, used by P2P applications

EmuleEncrypted - eMule 0.47 with protocol obfuscation

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:

Skype - update signature to support version 2.5

ARES - update Wares signature to support ARES 192 version

FLYFF game misclassified as P2P (CSCse79503)

Manolito may potentially cause misclassifications (CSCse94748)

MGCP bundle problem - related to MGCP transaction-id (CSCse99652)

ICQ SIP - consecutive calls are not properly bundled (CSCse99641)

SMTP - CLRFs in RDRs where they are not allowed/expected (CSCsd61859)

eMule - classified eMule HTTP based traffic relying on X-Network field in HTTP header instead of user-agent field (CSCsg10743)

HTTP 0.9 - HTTP 1.0/1.1 packets starting with 'GET' and not recognized as P2P will never be reported (CSCsd17487)

Bittorent - added support for uTorrent 1.6 client (CSCsg10738)

FTP - too many bundled flows data cause errors to be written to the log (CSCsg53122)

The SCA BB 2.5.10 Protocol Pack #06 for SCA BB 2.5.10 includes the following two spqi files:

SCABB_2510PP06_SUSAP.spqi: designated for the Asia Pacific region

SCABB_2510PP06_SUS.spqi: designated for all other regions

SCA-BB 2.5.10 Protocol Pack #06 limitations and caveats

Ares 192 version is not fully supported (not all Ares flows are recognized).

Primus: Lingo service is classified as SIP.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.10 Protocol Pack 06 includes the following legacy DSS based signatures:

The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.

The SUSAP script contains following DSS based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.10 Protocol Pack #06 includes the following new/enhanced interfaces:

Table 19 New/Enhanced Protocols in SCA BB 2.5.10 Protocol Pack #06

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

TVAnts

81

TV video streaming

MMS

Streaming

FreeNet

82

P2P File sharing

DirectConnect

P2P

DHT

83

Distributed tracker used in P2P applications

DirectConnect

P2P

SIP

10

Primus-Lingo VoIP added and mapped to SIP

   

EmuleEncrypted

84

emule 0.47 with protocol obfuscation

eDonkey

P2P


Installation

Installation of the SCA BB 2.5.10 Protocol Pack #06 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

Manual configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco SCA BB User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform

Step 2 Perform the necessary changes according to instructions below

Step 3 Apply the modified PQB file


GoogleEarth special configuration instructions:

Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.

ICQ VoIP special configuration instructions:

Although 2.5.10-Protocol Pack #06 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB 3.0.4 Protocol Pack #06

Prerequisites

The SCA BB 3.0.4 Protocol Pack #06 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.4 has already been installed.

What's new in the SCA BB 3.0.4 Protocol Pack #06


Note The SCA BB 3.0.4 Protocol Pack #06 for SCA BB 3.0.4 can be installed ONLY on the SCA BB 3.0.4 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.4:

TVAnts - TV and Video Streaming protocol

Freenet - P2P protocol

Primus/Lingo - VoIP service protocol

DHT - Distributed hash table which is used by many P2P applications.

eMule 0.47 - emule with protocol obfuscation

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.4:

Skype - update signature to support version 2.5

ARES - update Wares signature to support ARES 192 version

FLYFF game misclassified as P2P (CSCse79503)

Manolito may potentially cause misclassifications (CSCse94748)

MGCP bundle problem - related to MGCP transaction-id (CSCse99652)

ICQ SIP - consecutive calls are not properly bundled (CSCse99641)

SMTP - CLRFs in RDRs where they are not allowed/expected (CSCsd61859)

eMule - classified eMule HTTP based traffic relying on X-Network field in HTTP header instead of user-agent field (CSCsg10743)

Bittorent - added support for uTorrent 1.6 client (CSCsg10738)

HTTP 0.9 - HTTP 1.0/1.1 packets starting with 'GET' and not recognized as P2P will never be reported (CSCsd17487)

HTTP 0.9 - the aging time for HTTP-like flows that are mapped to generic is not set (CSCsg48851)

The SCA BB 3.0.4 Protocol Pack #06 for SCA BB 3.0.4 includes the following spqi file:

SCABB_304PP06_SUS.spqi: designated for all regions


Note Beginning with 3.0.4 Protocol Pack #06, there is no separate package for APAC region (SUSAP). SCABB_304PP06_SUSAP.spqi is no longer required as APAC-specific protocols have become a part of the application functionality. Enabling APAC-specific protocols can be done through the 3.0.4 SCA BB Console (Advanced Service Configuration Options GUI). Assuming that APAC users already have a 3.0.4 PQB deployed with the proper settings, installing PP #06 will preserve these settings. For detailed instructions how to enable APAC specific protocols, see Release Notes for Cisco Service Control Application for Broadband (SCA BB), Release 3.0.4.


SCA-BB 3.0.4 Protocol Pack #06 limitations and caveats

Ares 192 version is not fully supported (not all Ares flows are recognized).

The update of SCA BB release 3.0.4 with PP #06 may cause performance degradation of up to 3%. Release 3.0.5 coming out on November 30th 2006 includes all PP #06 protocols and is expected to match the performance of release 3.0.4. For SCE deployments where performance sizing is tight, it might be best to wait for the release of SCA BB 3.0.5.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.4 Protocol Pack #06 includes the following legacy DSS based signatures:

The SUS script contains no DSS based signatures and is only provided to expose the new signature IDs to the application

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.4 Protocol Pack #06 includes the following new/enhanced interfaces:

Table 20 New/Enhanced Protocols in SCA BB 3.0.4 Protocol Pack #06

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

TVAnts

109

TV video streaming

MMS

Streaming

FreeNet

107

P2P File sharing

DirectConnect

P2P

Primus/Lingo

108

VoiP

SIP

SIP

DHT

106

Distributed tracker used in P2P applications

DirectConnect

P2P

EmuleEncrypted

105

encrypted emule protocol

eDonkey

P2P


Installation

Installation of the SCA BB 3.0.4 Protocol Pack #06 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information see SCA BB 3.0.4 Release Notes

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document

SCA BB Protocol Pack #05

The SCA BB Protocol Pack #05 contains the following two protocol packs:

SCA BB 2.5.10 Protocol Pack #05

SCA BB 3.0.3 Protocol Pack #05

Refer to the relevant section for your SCA BB version.

Upgrading release 2.5.10 or 3.0.3 with Protocol Pack #05 in a network where the newly supported protocols are relatively common has little performance impact (±1%). In a network where the majority of the newly supported protocols are not common, performance might drop by up to 2%, depending on the traffic mix and control policy.


Note Special configuration instructions were added with this Protocol Pack release. Refer to the installation section for your SCA BB version:
Installation- SCA BB 2.5.10 Protocol Pack #05
Installation- SCA BB 3.0.3 Protocol Pack #05


SCA BB 2.5.10 Protocol Pack #05

Prerequisites

The SCA BB 2.5.10 Protocol Pack #05 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.10 has already been installed.

What's new in the SCA BB 2.5.10 Protocol Pack #05


Note The SCA BB 2.5.10 Protocol Pack #05 for SCA BB 2.5.10 can be installed ONLY on the SCA BB 2.5.10 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.10:

Shoutcast - Audio Streaming protocol

ICQ - IM with file transfer protocol

CU-SeeMe - IM & Video conference protocol is partially supported

Rodi - P2P File sharing protocol

GoogleEarth - Streaming protocol

Hopster - Private net protocol

Jabber - IM open protocol

AntsP2P - P2P File sharing protocol

Sling - TV broadcast protocol

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.10:

Share:

new signatures for 2ex added (CSCse06602)

new signatures for NT5 UDP added (CSCsc96277)

BitTorrent:

".torrent" pattern removed (CSCse51968)

added tunable to disable/enable BT networking signature to work around misclassification of other protocols (like metastock) that are using DHT (CSCse67418)

Gnutella - Foxy and mxie Gnutella user-agent added (CSCse39295)

Warez - update signature to fix HTTPS and Telnet traffic misclassification (CSCse25538 and CSCse30568)

Manolito - update signature to fix Mosa VoIP traffic misclassification (CSCsd66745)

FTP - update signature to fix FTP sessions not bundled properly (CSCsd74132)

Skype - update signature to fix CounterStrike misclassification as Skype (CSCse10448)

The SCA BB 2.5.10 Protocol Pack #05 for SCA BB 2.5.10 includes the following two spqi files:

SCABB_2510PP05_SUSAP.spqi: designated for the Asia Pacific region

SCABB_2510PP05_SUS.spqi: designated for all other regions

SCA-BB 2.5.10 Protocol Pack #05 limitations and caveats

ICQ - Voice/Video conferencing, gaming, and multi-chat are not supported

CU-SeeMe - RTP flows are not supported

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.10 Protocol Pack 05 includes the following legacy DSS based signatures:

The SUS script is empty.

The SUSAP script contains the following DSS based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.10 Protocol Pack #05 includes the following new/enhanced interfaces:

Table 21 New/Enhanced Protocols in SCA BB 2.5.10 Protocol Pack #05

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

HTTP Streaming

18

Shoutcast added to HTTP Streaming

   

ICQ

72

Version 5.1

Yahoo Messenger

IM

SIP

10

ICQ VoIP added and Mapped to SIP

   

CU-SeeMe

74

Version 7.0.59.1

Yahoo Messenger

IM

Rodi

80

Version 0.3.60

DirectConnect

P2P

GoogleEarth

73

Client version: 3.0.076

   

Hopster

76

Release 1

HTTP Tunnel

Tunneling

Jabber

75

 

Yahoo Messenger

IM

AntsP2P

78

Version beta1.5.6 b 0.9.

DirectConnect

P2P

Sling

79

SlingPlayer 1.0.5.140

MMS

Streaming

Share

9

Share NT5 and EX2

   

Installation

Installation of the SCA BB 2.5.10 Protocol Pack #05 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

Manual configuration

The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco SCA BB User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform

Step 2 Perform the necessary changes according to instructions below

Step 3 Apply the modified PQB file


GoogleEarth special configuration instructions:

Using the SCA BB console, manually assign the protocol 'GoogleEarth' to the 'HTTP' Service.

ICQ VoIP special configuration instructions:

Although 2.5.10-Protocol Pack #05 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Protocols dialog of the SCA BB console, add UDP port 5190 to the SIP protocol.

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB 3.0.3 Protocol Pack #05

Prerequisites

The SCA BB 3.0.3 Protocol Pack #05 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.3 has already been installed.

What's new in the SCA BB 3.0.3 Protocol Pack #05


Note The SCA BB 3.0.3 Protocol Pack #05 for SCA BB 3.0.3 can be installed ONLY on the SCA BB 3.0.3 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.3:

Shoutcast - Audio Streaming protocol

ICQ - IM with file transfer & Voice/Video conferencing protocol

CU-SeeMe - IM & Video conference protocol

Rodi - P2P File sharing protocol

GoogleEarth - Streaming protocol

Hopster - Private net protocol

Jabber - IM open protocol

AntsP2P - P2P File sharing protocol

Sling - TV broadcast protocol

STUN - Simple Traversal of UDP through NATs protocol

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.3:

Share:

new signatures for 2ex added (CSCse06602)

new signatures for NT5 UDP added (CSCsc96277)

BitTorrent:

".torrent " pattern removed (CSCse51968)

added tunable to disable/enable BT networking signature to work around misclassification of other protocols (like metastock) that are using DHT (CSCse67418)

Gnutella - Foxy and mxie Gnutella user-agent added (CSCse39295)

Warez - update signature to fix HTTPS and Telnet traffic misclassification (CSCse25538 and CSCse30568)

Manolito - update signature to fix 'Mosa' VoIP traffic misclassification (CSCsd66745)

FTP - update signature to fix FTP sessions not bundled properly (CSCsd74132)

FileCroc - update signature to fix HTTPS misclassification as FileCroc (CSCse30568)

Skype - update signature to fix CounterStrike misclassification as Skype (CSCse10448)

Content Filtering Redirect - fix for a redirect issue found in SCA-BB 3.0.3 (CSCse72875 - Redirect does not work with Content Filtering).

The SCA BB 3.0.3 Protocol Pack #05 for SCA BB 3.0.3 includes the following spqi files:

SCABB_303PP05_SUSAP.spqi: designated for the Asia Pacific region

SCABB_303PP05_SUS.spqi: designated for all other regions

SCA-BB 3.0.3 Protocol Pack #05 limitations and caveats

ICQ - multi-chat is using IRC protocol and being classified as IRC

ICQ - gaming is not supported

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.3 Protocol Pack #05 includes the following legacy DSS based signatures:

The SUS script is empty in 3.0.3

The SUSAP script contains the following DSS based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.3 Protocol Pack #05 includes the following new/enhanced interfaces:

Table 22 New/Enhanced Protocols in SCA BB 3.0.3 Protocol Pack #05

Protocol Name
Protocol ID
Comment
Buddy Protocol
Default Service

HTTP Streaming

18

Shoutcast added to HTTP Streaming

   

ICQ

72

Version 5.1

Yahoo Messenger

IM

SIP

10

ICQ VoIP added and Mapped to SIP

   

CU-SeeMe

74

Version 7.0.59.1

Yahoo Messenger

IM

Rodi

80

Version 0.3.60

DirectConnect

P2P

GoogleEarth

73

Client version: 3.0.076

   

Hopster

76

Release 1

HTTP Tunnel

Tunneling

Jabber

75

 

Yahoo Messenger

IM

AntsP2P

78

Version beta1.5.6 b 0.9.

DirectConnect

P2P

Sling

79

SlingPlayer 1.0.5.140

MMS

Streaming

Share

9

Share NT5 and EX2

   

Installation

Installation of the SCA BB 3.0.3 Protocol Pack #05 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation. It should be noted that a short service downtime is expected.

Manual configuration

The manual configuration should be performed after the Protocol Pack #05 installation has been completed (according to the procedure described in the Cisco SCA BB User Guide)

To perform any required manual configuration, complete the following steps:


Step 1 Retrieve the PQB file from the SCE platform

Step 2 Perform the necessary changes according to instructions below

Step 3 Apply the modified PQB file


ICQ VoIP special configuration instructions:

Although SCA BB 3.0.3-Protocol Pack #05 correctly classifies 'ICQ VoIP' traffic as SIP, the following additional manual configuration change is required:

Using the Advanced Options dialog of the SCA BB console, add port 5190 to the list "UDP ports for which flows should be opened on first packet".

For further information regarding the installation or distribution process, please use the Cisco SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB Protocol Pack #04

Starting with this protocol pack, SCA BB Protocol Pack #04, protocol packs will be named by serial number, rather than by month/year.

Thus, the previous protocol packs are:

January 06 Protocol Pack - Protocol Pack #03

November 05 Protocol Pack - Protocol Pack #02

September 05 Protocol Pack - Protocol Pack #01

The SCA BB Protocol Pack #04 contains the following two protocol packs:

SCA BB 2.5.9 Protocol Pack #04

SCA BB 3.0.1 Protocol Pack #04

Refer to the relevant section for your SCA BB version.

SCA BB 2.5.9 Protocol Pack #04

Prerequisites

The SCA BB 2.5.9 Protocol Pack #04 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.9 has already been installed.

What's new in the SCA BB 2.5.9 Protocol Pack #04


Note The SCA BB 2.5.9 Protocol Pack #04 can be installed ONLY on the SCA BB 2.5.9 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.9:

Dijjer - P2P protocol

Exosee - P2P protocol

Furthur - P2P protocol

PeerEnabler - P2P protocol

Kontiki - P2P protocol (Please note: a portion of Kontiki traffic is classified as HTTP Streaming)

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.9:

BitTorrent - New signatures

Skype - New signatures

Winny - Improved signature intended to resolve the few false-detection cases that occurred. The old Winny1 signature was disabled and can be revived if needed.

The SCA BB 2.5.9 Protocol Pack #04 includes the following two spqi files:

SCABB_259PP04_SUSAP.spqi: designated for the Asia Pacific region

SCABB_259PP04_SUS.spqi: designated for all other regions

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 2.5.9 Protocol Pack #04 includes the following legacy DSS based signatures:

The SUS script is empty.

The SUSAP script contains the following DSS based signatures for Korean protocols:

Kuro

Guruguru

V-share

Soribada

Share - UDP-based signature

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 2.5.9 Protocol Pack #04 includes the following new/enhanced interfaces:

Table 23 New/Enhanced Protocols in SCA BB 2.5.9 Protocol Pack #04

Protocol Name
Protocol ID
Comment

Dijjer

74

1.0b build 117

Exosee

76

0.99.022

Peerenabler

78

1.26-0

Furthur

75

1.7.5Beta

Kontiki

77

Kontiki Delivery Manager 4.03.50401.0 /
AOL Hi-Q Video - Delivery Manager 4.20 (4.20.51004.0)

Skype

25

Ver 2.0.0.97

BitTorrent

24

Azureus 2.4.0.0 / Utorrent 1.5 / BitComet 0.63


Installation

Installation of the SCA BB 2.5.9 Protocol Pack #04 involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

SCA BB 3.0.1 Protocol Pack #04

Prerequisites

The January SCA BB 3.0.1 Protocol Pack #04 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.1 has already been installed.

What's new in the SCA BB 3.0.1 Protocol Pack #04


Note The SCA BB 3.0.1 Protocol Pack #04 can be installed ONLY on the SCA BB 3.0.1 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.1:

Dijjer - P2P protocol

Exosee - P2P protocol

Furthur - P2P protocol

PeerEnabler - P2P protocol

Kontiki - P2P protocol (Please note: a portion of Kontiki traffic is classified as HTTP Streaming)

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.0:

BitTorrent - New signatures

Skype - New signatures

Winny - Improved signature intended to resolve the few false-detection cases that occurred. The old Winny1 signature was disabled and can be revived if needed.

The SCA BB 3.0.1 Protocol Pack #04 includes the following spqi files:

SCABB_301PP04_SUSAP.spqi: designated for the Asia Pacific region.

SCABB_301PP04_SUS.spqi: designated for all other regions

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The SCA BB 3.0.1 Protocol Pack #04 includes the following legacy DSS based signatures:

The SUS script is empty in 3.0.1

The SUSAP script contains the following DSS based signatures for Korean protocols

Kuro

Guruguru

V-share

Soribada

Share

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The SCA BB 3.0.1 Protocol Pack #04 includes the following new/enhanced interfaces:

Table 24 New/Enhanced Protocols in SCA BB 3.0.1 Protocol Pack #04

Protocol Name
Protocol ID
Comment

Dijjer

120

1.0b build 117

Exosee

121

0.99.022

Peerenabler

122

1.26-0

Furthur

123

1.7.5Beta

Kontiki

124

Kontiki Delivery Manager 4.03.50401.0 /
AOL Hi-Q Video - Delivery Manager 4.20 (4.20.51004.0)

Skype

125

Ver 2.0.0.97

BitTorrent

24

Azureus 2.4.0.0 / Utorrent 1.5 / BitComet 0.63


Installation

Installation of the SCA BB 3.0.1 Protocol Pack #04 involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

January 2006 Protocol Pack (Protocol Pack #03)

The January 2006 Protocol Pack contains the following two protocol packs:

January 2006 2.5.8 Protocol Pack

January 2006 3.0.0 Protocol Pack

Refer to the relevant section for your SCA BB version.

January 2006 2.5.8 Protocol Pack

Prerequisites

The January 2006 2.5.8 Protocol Pack for SCA BB 2.5.8 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 2.5.8 has already been installed.

What's new in the January 2006 2.5.8 Protocol Pack


Note The January 2006 2.5.8 Protocol Pack for SCA BB 2.5.8 can be installed ONLY on the SCA BB 2.5.8 release.


This Protocol Pack includes support for the following new protocols over SCA BB 2.5.8:

HTTP Tunnel - Tunneling protocol over HTTP

This Protocol Pack includes updates for the following protocols over SCA BB 2.5.8:

Skype - New signatures

PPLive - New TCP signature

The January 2006 2.5.8 Protocol Pack for SCA BB 2.5.8 includes the following two spqi files:

SCABB_258PP0601_SUSAP.spqi: designated for the Asia Pacific region

SCABB_258PP0601_SUS.spqi: designated for all other regions

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The January 2006 2.5.8 Protocol Pack includes the following legacy DSS based signatures:

The SUS script contains two protocols:

Suspected http

Other Gnutella

The SUSAP script contains the following DSS based signatures for Korean protocols, in addition to the protocols in the SUS script:

Kuro

Guruguru

V-share

Soribada

Share - UDP-based signature

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The January 2006 2.5.8 Protocol Pack includes the following new/enhanced interfaces:

Table 25 New/Enhanced Protocols in SCA BB 2.5.8 Protocol Pack

Protocol Name
Protocol ID
Comment

HTTP Tunnel

80

 

Skype

25

Version 1.4.0.84

PPLive

44

Version 1.1.0.0


Installation

Installation of the January 2006 2.5.8 Protocol Pack involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

January 2006 3.0.0 Protocol Pack

Prerequisites

The January 2006 3.0.0 Protocol Pack for SCA BB 3.0.0 can be installed on an SCE 1000 or SCE 2000 platform on which SCA BB 3.0.0 has already been installed.

What's new in the January 2006 3.0.0 Protocol Pack


Note The January 2006 3.0.0 Protocol Pack for SCA BB 3.0.0 can be installed ONLY on the SCA BB 3.0.0 release.


This Protocol Pack includes support for the following new protocols over SCA BB 3.0.0:

BaiBao - Chinese P2P protocol

HTTP Tunnel - Tunneling protocol over HTTP

NTP - Network time protocols

Poco - Chinese P2P protocol

PPLive - Chinese P2P TV sharing protocol

PPStream - Chinese P2P TV sharing protocol

SSDP - Simple service discovery protocol

Thunder - Download accelerator

QQ - Chinese instant messenger

UC - Chinese instant messenger

This Protocol Pack includes updates for the following protocols over SCA BB 3.0.0:

Bearshare - New UDP signature

Skype - New signatures

This Protocol Pack includes the following bug fixes over SCA BB 3.0.0:

NTP misclassification as eDonkey and Manolito

Improved lately marks mechanism

The January 2006 3.0.0 Protocol Pack for SCA BB 3.0.0 includes the following spqi file:

SCABB_300PP0601_SUS.spqi: designated for all regions other than the Asia Pacific.

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The January 2006 3.0.0 Protocol Pack includes the following legacy DSS based signatures:

The SUS script is empty in 3.0.0

Please note that the January 2006 3.0.0 Protocol Pack does not support the following protocols:

Kuro

Guruguru

V-share

Soribada

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

Table 26 New/Enhanced Protocols in SCA BB 3.0.0 Protocol Pack

Protocol Name
Protocol ID
Comment

BaiBao

88

Version 1.31

Gnutella

11

Bearshare 5.1, iMash 5.5, limewire 4.9, morpheus 5, shareaza 2.2

HTTP Tunnel

89

 

NTP_Sig

86

Version 3

Poco

82

2005 build 0403

PPLive

83

Version 1.1.0.0

PPStream

81

Version 1.0.0.98

Skype

25

Version 1.4.0.84

SSDP

80

Version 1.0

Thunder

85

Version 5.0.3.86

QQ

87

2005 beta version 3

UC

84

2005 beta version 3


Installation

Installation of the January 2006 3.0.0 Protocol Pack involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution User Guide Supplement, which is available on CCO at the same directory as the current document.

November 2005 Protocol Pack (Protocol Pack #02)

Prerequisites

The November 2005 Protocol Pack for 2.5.7 can be installed on an SCE 1000 or SCE 2000 on which either one of the following software versions has already installed:

SCA BB 2.5.7

SCA BB 2.5.7 with September 2005 Protocol Pack

What's new in the November 2005 Protocol Pack


Note The November 2005 Protocol Pack can be installed ONLY on the SCA BB 2.5.7 release, with or without the previous Protocol Pack.


This Protocol Pack includes support for the following new protocols:

NTP - Network time protocols

Poco - Chinese P2P protocol

PPStream - Chinese P2P TV sharing protocol

SSDP - Simple service discovery protocol

Thunder - Download accelerator

QQ - Chinese instant messenger

UC - Chinese instant messenger

This Protocol Pack includes updates for the following protocols:

Bearshare - New UDP signature

BitTorrent - BitComet client unique signature

PPLive - New TCP signature

This Protocol Pack includes the following bug fixes:

NTP misclassification as eDonkey and Manolito

SIP does not recognize Yahoo VOIP

Improved handling of dormant BitTorrent flows

The November Protocol Pack includes the following two zip files:

SCABB_257PP0511_SUSAP.spqi: designated for the Asia Pacific region

SCABB_257PP0511_SUS.spqi: designated for all other regions

DSS Content


Note The DSS included in the SPQI file is automatically applied to the active PQB file when the SPQI is installed on the SCE platform. The DSS file is required in order to assign protocol IDs to new protocols.


The November Protocol Pack includes the following legacy DSS based signatures:

The SUS script contains two protocols:

Suspected http

Other Gnutella

The SUSAP script contains the following DSS based signatures for Korean protocols, in addition to the protocols in the SUS script:

Kuro

Guruguru

V-share

Soribada

Share - UDP-based signature

Protocol Signature Details

The following table contains protocol IDs for the protocols that were added or enhanced in this protocol pack. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.

The November Protocol Pack includes the following new/enhanced interfaces:

Table 27 New/Enhanced Protocols

Protocol Name
Protocol ID
Comment

BitTorrent

24

BitTorrent 4.1.4, Bitcomet 0.6, Azureuz 2.3.0.4, eXeem 0.27

eDonkey

18

eDonkey2000 1.1, eMule 0.46c

Gnutella

11

Bearshare 5.1, iMash 5.5, limewire 4.9, morpheus 5, shareaza 2.2

Manolito

22

Blubster 2.5, Piolet 1.05

NTP

86

Version 3

Poco

83

2005 build 0403

PPStream

84

Version 1.0.0.98

SIP

23

Version 2.0

SSDP

85

Version 1.0

Thunder

87

Version 5.0.3.86

QQ

88

2005 beta version 3

UC

89

2005 beta version 3


Table 28 Enhanced Protocols from Previous Protocol Pack Release

Protocol Name
Protocol ID
Comment

BaiBao

80

Version 1.3.1

PPLive

81

Version 1.0.7.4

DNS

82

FC 1035


Installation

Installation of the November 2005 Protocol Pack involves a replacement of the SCE application. This is done automatically as part of the SPQI installation. It should be noted that some service downtime is expected, similar to that of an SCE platform application upgrade. This is due to the closing of all active flow contexts and reclassification of all traffic with the new version.

For further information regarding the installation or distribution process, please use the SCA BB Protocol Signatures Distribution - User Guide Supplement, which is available on CCO at the same directory as the current document.

September 2005 Protocol Pack (Protocol Pack #01)

What's new in the September 2005 Protocol Pack

The September 2005 Protocol pack is relevant for the SCA BB 2.5.7 release.

This Protocol Pack includes support for the following protocols:

BaiBao - A P2P protocol that is widely used in China

PPLive - An application for TV broadcasting using P2P technology

Azarus BitTorrent client - A BitTorrent client that runs over UDP

Bitcomet BitTorrent client - A BitTorrent client that runs over UDP

Fix for the issue of classification of DHCP traffic as Manolito

DNS - The Domain Name Service protocol

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS Version 2.0.