Table Of Contents
Cisco Service Control Application for Broadband Protocol Pack Notes, Protocol Pack #28
New Flavors - (Supported by 3.5.5 and later)
Updated Flavors - (Supported by 3.5.5 and later)
New Zones - (Supported by 3.5.5 and later)
New Flavors - (Supported by 3.5.5 and later)
New Flavors - (Supported by 3.5.5 and later)
Manual Configuration (Release 3.1.7 only)
New Flavors - (Supported by 3.5.5 and later)
DSS Content (Release 3.1.7 only)
Manual Configuration (Release 3.1.7 only)
New Flavors - (Supported by Release 3.5.5 and later)
Known Limitations: Protocol Specific
DSS Content (Release 3.1.7 only)
Manual Configuration (Release 3.1.7 only)
New Flavors - (Supported by Release 3.5.0 and later)
DSS Content (Release 3.1.7 only)
Manual Configuration (Release 3.1.7 only)
New Flavors - (Supported by Release 3.5.0 and later)
Obtaining Documentation and Submitting a Service Request
Cisco Service Control Application for Broadband Protocol Pack Notes, Protocol Pack #28
Revised: May 16, 2012, OL-23979-07Introduction
These protocol pack notes for the Cisco Service Control Application for Broadband (SCA BB) describe the content of the following protocol packs, which are available at the Software Download page of the Cisco website.
•
PP #28
•
•
•
•
•
•
•
•
•
For information about previous protocol packs, see http://www.cisco.com/en/US/docs/cable/serv_exch/serv_control/broadband_app/protocol_ref_guide/protocol_ref_guide.html.
Contents
Overview
Cisco protocol packs include new and improved protocol signatures for SCA BB. A typical signature update is a file containing new and updated signatures for better detection of new or updated popular peer-to-peer applications, gaming applications, and other interesting protocols. When loaded into the SCE platform, these signatures improve classification abilities of SCA BB with minimal or zero SCE platform service downtime.
The protocol pack files are available for Cisco partners and customers for download from the Software Download page of the Cisco website.
Installation
Installation of the SCA BB Protocol Pack #28 involves a replacement of the SCE platform application. This is done automatically as part of the SPQI installation using hitless upgrade mechanism. For more detailed information, see the Cisco Service Control Application for Broadband User Guide for your SCA BB release:
Note
SCA BB Protocol Pack #28
Compatibility Information
Note
The SCA BB Protocol Pack #28 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
•
•
Protocol Library Updates
IPv6
•
•
New Protocols
•
•
•
•
•
•
–
–
–
Updated Protocols
•
•
–
–
•
•
•
•
–
–
–
•
•
•
•
•
New Flavors
•
•
Updated Flavors
None
New Zones
None
Resolved Caveats
CSCtc30635
Weak PPLive signature from PP#18 misclassifies other traffic as PPLive.
CSCty26294
vuze.com gets blocked if bittorrent traffic is blocked.
CSCth87103
MSN Voip not blocked after the first call in the login session.
CSCtw49717
SCE2020 3.5.5 PP24 misclassifies NTP as Skye and other protocols.
CSCtw92305
Issue after upgrading to PP verions 25/26.
Known Limitations
None
Known Caveats
None
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #28. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
SCA BB Protocol Pack #27
Compatibility Information
Note
The SCA BB Protocol Pack #27 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
•
Protocol Library Updates
IPv6 Protocols
Note
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
New Protocols
•
•
•
•
•
•
•
•
•
•
Updated Protocols
•
•
•
•
•
•
•
•
•
•
New Flavors
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Updated Flavors
None
New Zones
None
Resolved Caveats
CSCtu38241
whatsapp support from version 2.6 onwards
CSCtn89419
XBOX live misclassifying with PPLive
Known Limitations
•
•
•
•
Known Caveats
None
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #27. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Note
SCA BB Protocol Pack #26
Compatibility Information
Note
The SCA BB Protocol Pack #26 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
•
•
•
•
•
•
Updated Protocols
•
•
New Flavors
•
•
•
•
•
•
•
Updated Flavors
•
New Zones
•
Resolved Caveats
"CSCtq93885
1080p YouTube video is not classifying as "Flash YouTube HD"
Open Caveats
CSCts98070
CSCts98070 Performance degradation during peak hours is observed and capacity issues are fixed.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #26. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
SCA BB Protocol Pack #25
Compatibility Information
Note
The SCA BB Protocol Pack #25 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
–
–
–
–
–
–
–
–
–
–
–
Updated Protocols
•
•
•
•
•
•
•
•
•
New Flavors - (Supported by 3.5.5 and later)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Updated Flavors - (Supported by 3.5.5 and later)
•
•
New Zones - (Supported by 3.5.5 and later)
•
Resolved Caveats
CSCtr71719
installing-PP #25 over 3.7.0-Invalid Prefix String '/QVideo/~ajax/logon*
CSCtn00035
ISAKMP traffic over port 500 mis-classified as GBox
CSCtl96414
PPStream traffic misclassified
CSCtn77381
Gnutella Traffic not getting blocked
CSCtn46940
HTTP URL returned as empty string
CSCtj34216
Add enhancement support for Gmail Call Phone
Known Limitations
CSCtq71667
PP25-Capacity is degraded by 3% wrt to PP24 FC
CSCtr14067
Gmail Video UDP flows are misclassified
CSCto87975
Add Support for UUsee - Features of registered users are not supported.
CSCtq91367
Warnings thrown while opening earlier version policies in PP25
Note: Some of the newly added protocols/flavors in PP25 will be mapped as below, when PP24 pqb is upgraded to PP25 :
•
•
•
•
•
•
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #25. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
SCA BB Protocol Pack #24
Compatibility Information
The SCA BB Protocol Pack #24 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
•
•
•
–
–
–
–
–
–
Updated Protocols
•
•
•
•
•
•
•
•
•
New Flavors - (Supported by 3.5.5 and later)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Resolved Issues
CSCtk31435
Yahoo PC-to-PC outgoing call is classified as Yahoo Jajah.
CSCtj80243
StarCraft II game is misclassified as GBox.
CSCtl71677
Cannot block YouTube traffic properly.
CSCtl42682
PPTP is misclassified as CCcam.
CSCtj15387
Radius packet is classified as Zattoo.
CSCtk54367
Added support for Netflix Canada traffic.
CSCtk74640
Wow is misclassified in PP #23 due to latest Wow patch.
Known Limitations
CSCtn19520
Warnings received when opening an older protocol pack policy on PP #24 must be resolved manually using the following procedure.
Step 1
Step 2
Step 3
Step 4
CSCtl99807
Gmail Video UDP is not blocked when a block policy is applied.
Work-around: To block Gmail Video UDP traffic, apply a rate limit of 5 Kbps.
CSCtn70726
Funshion Signature not supported for registered users.
CSCtn70995
No support for GaduGadu VoIP and Video Chat.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #24 These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
SCA BB Protocol Pack #23
Compatibility Information
The SCA BB Protocol Pack #23 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
•
•
•
•
–
–
–
–
–
–
–
–
–
–
–
–
–
–
Updated Protocols
•
•
•
•
•
•
New Flavors - (Supported by 3.5.5 and later)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Resolved Issues
CSCth28266
MapleStory is misclassified as PPlive.
CSCti10070
Bittorent as Generic UDP.
CSCti83620
Added support for Flash over HTTP Initiatee flows.
CSCtj01294
Added support for Pandora.
CSCti18214
RTMPE is misclassified as Zattoo in PP22.
CSCtj20581
Content filtering doe not work when HTTP response is not in order.
CSCtj45626
FTP signature is not robust enough.
CSCtj43892
Added a new signature for Suspected P2P Generic traffic.
Note
By default, this signature is turned off. The tunable that can be used to turn it on is GT_PL_GENERIC_P2PSUSPECTED_DO_CLASSIFY.
Known Limitations
CSCta17754
Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5.
CSCte55078
Warnings received when opening an older protocol pack policy on a newer protocol pack release must be resolved manually using the following procedure.
Step 1
Step 2
Step 3
Step 4
CSCti16281
Warnings received when opening a PP#21 policy after PP#22 has been installed must be resolved manually using the procedure described for CSCte55078.
CSCti16531
Hitless upgrade is not supported on the following:
•
•
CSCti18214
Blocking Zattoo 4.0.5 streaming traffic requires a block policy on the RTMP service element.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack#23. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration (Release 3.1.7 only)
The manual configuration should be performed after the Protocol Pack installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Step 2
Step 3
SCA BB Protocol Pack #22
Compatibility Information
The SCA BB Protocol Pack #22 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
Updated Protocols
•
•
•
•
•
•
•
•
•
•
New Flavors - (Supported by 3.5.5 and later)
•
•
•
•
•
•
•
Resolved Issues
CSCta54033
Camera traffic classified as P2P.
CSCtd41901
Skype Voice from a PDA to a PC is misclassified as Skype IM when PP19 is installed.
CSCte89479
MSN VOIP is misclassified when running SCOS Release 3.5.5 with PP 20 installed.
CSCtg26799
Google Talk is misclassified as STUN.
CSCtg27285
Google Talk file transfer is not blocked.
CSCtg65322
Cannot block Skype FT while allowing other Skype protocols.
CSCtg65335
Cannot block Skype VoIP while allowing other Skype protocols.
CSCtg70136
uTorrent is misclassified to "Other UDP" when running SCOS Release 3.5.5 with PP 20 installed.
CSCth28494
Skype can not be blocked in the SCE 2000.
CSCth32957
The protocol ISAKMP is included in different service after upgrading the Protocol Pack.
Known Limitations
CSCsv44394
The installation of Protocol Pack #21 upon SCOS release 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #21 features.
Step 1
Step 2
Step 3
script run script.txt.CSCsx78811
Upgrading from 3.1.7 with Protocol Pack #21 to 3.5.5 with Protocol Pack #21 requires the following manual configuration in order to support all the Protocol Pack #21 features.
Step 1
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Step 3
Note
CSCta17754
Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5 .
CSCte55078
Warnings received when opening a 3.1.7 policy on SCA BB release 3.5.5 must be resolved manually using the following procedure.
Step 1
Step 2
Step 3
Step 4
CSCti16281
Warnings received when opening a PP#21 policy after PP#22 has been installed must be resolved manually using the procedure described for CSCte55078.
CSCti16531
Hitless upgrade is not supported on the following:
•
•
DSS Content (Release 3.1.7 only)
Note
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack#22. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration (Release 3.1.7 only)
The manual configuration should be performed after the Protocol Pack installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Step 2
Step 3
SCA BB Protocol Pack #21
Compatibility Information
The SCA BB Protocol Pack #21 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
•
Updated Protocols
•
•
•
•
•
•
New Flavors - (Supported by Release 3.5.5 and later)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Resolved Issues
CSCte11816
MMS traffic is not correctly classified
CSCtf36994
TLS based SMTP flows are not subject for SPAM detection or blocking
CSCtf81007
Some Fring VoIP sessions are being misclassified as Other
CSCtg09102
Lord of the rings online is misclassified to PPLive
CSCtf83959
PPTP signature not correctly classified
Known Limitations
CSCsv44394
The installation of Protocol Pack #21 upon SCOS release 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #21 features.
Step 1
Step 2
Step 3
script run script.txt.CSCsx78811
Upgrading from 3.1.7 with Protocol Pack #21 to 3.5.5 with Protocol Pack #21 requires the following manual configuration in order to support all the Protocol Pack #21 features.
Step 1
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Step 3
Note
CSCta17754
Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5 .
CSCte55078
Warnings received when opening a 3.1.7 policy on SCA BB release 3.5.5 must be resolved manually using the following procedure.
Step 1
Step 2
Step 3
Step 4
Known Limitations: Protocol Specific
WebEx :
As of Protocol Pack#21, flows where security parameters are not negotiated between SSL client and server are not part of the classification.
MS Exchange:
•
•
FIX:
Classification is supported for the following browsers:
•
•
•
•
As of Protocol Pack#21, flows where security parameters are not negotiated between SSL client and server are not part of the classification.
Microsoft Silverlight:
Number of HTTP GET detections has to be increased using the following procedure:
Step 1
Step 2
Step 3
System Settings window appears.
Step 4
Step 5
Step 6
Step 7
DSS Content (Release 3.1.7 only)
Note
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack#21. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration (Release 3.1.7 only)
The manual configuration should be performed after the Protocol Pack installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Step 2
Step 3
SCA BB Protocol Pack #20
Compatibility Information
The SCA BB Protocol Pack #20 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
Updated Protocols
•
•
•
•
•
•
New Flavors - (Supported by Release 3.5.0 and later)
None
Resolved Issues
CSCtb85172
GoogleTalk might be misclassified as STUN.
CSCtc61531
Street Fighter 4 on Playstation 3 not classified.
CSCtc93694
`Service element already exists' warning when installing Protocol Pack 19.
CSCtd41978
P2P and NNTP classification degradation in SCA-BB version 3.5.5.
CSCtd82455
HTTP-based Yahoo Messenger login is classified as HTTP Browsing.
CSCte12073
SIP TCP classification problem if Register command is spread over two packets.
CSCtd66946
uTP misclassification in latest uTorrent client versions (1.8.4 and higher).
Known Limitations
CSCsv44394
The installation of Protocol Pack #20 upon SCOS release 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #20 features.
Step 1
Step 2
Step 3
script run script.txt.CSCsx78811
Upgrading from 3.1.7 with Protocol Pack #20 to 3.5.0 with Protocol Pack #20 requires the following manual configuration in order to support all the Protocol Pack #20 features.
Step 1
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Step 3
Note
CSCta17754
Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5 .
CSCte55078
Warnings received when opening a 3.1.7 policy on SCA BB releases 3.5.5 and 3.5.0 must be resolved manually using the following procedure.
Step 1
Step 2
Step 3
Step 4
DSS Content (Release 3.1.7 only)
Note
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #20. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration (Release 3.1.7 only)
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Step 2
Step 3
SCA BB Protocol Pack #19
Compatibility Information
The SCA BB Protocol Pack #19 can be installed on an SCE 1000, SCE 2000, or SCE8000 platform on which one of the following versions of SCA BB has already been installed.
This Protocol Pack can be installed on top of the following platforms,
•
•
•
Protocol Library Updates
New Protocols
•
•
•
•
•
•
Updated Protocols
•
•
•
•
•
•
•
New Flavors - (Supported by Release 3.5.0 and later)
•
•
Resolved Issues
CSCsy95605
Skype 4 cannot be blocked.
CSCta86415
Cisco VPN AnyConnect SSL traffic is classified as encrypted BitTorrent.
CSCtb49956
HTTP traffic for skype.com is misclassified as Skype.
CSCtc54115
Non-authenticated SMTP is not blocked when not using diamond brackets.
Known Limitations
CSCsv44394
The installation of Protocol Pack #19 upon SCOS release 3.1.7 requires the following manual configuration in order to support all the Protocol Pack #19 features.
Step 1
Step 2
Step 3
script run script.txt.CSCsx78811
Upgrading from 3.1.7 with Protocol Pack #19 to 3.5.0 with Protocol Pack #19 requires manual configuration in order to support all the Protocol Pack #19 features.
Step 1
Configuration > Signature Settings > Signature Script
and choose Remove.
Step 2
Step 3
Note
CSCta17754
Hitless upgrade is not supported on the SCE 2000 platform for release 3.5.5 .
DSS Content
Note
The SUS script contains no DSS-based signatures and is only provided to expose the new signature IDs to the application.
Protocol Signature Details
Note
The following table contains protocol IDs for the protocols that were added or enhanced in Protocol Pack #19. These IDs appear in the PROTOCOL_ID field of RDRs that are generated for these protocols.
Manual Configuration
The manual configuration should be performed after the PP installation has been completed (according to the procedure described in the Cisco Service Control Application for Broadband User Guide).
To perform any required manual configuration, complete the following steps:
Step 1
Step 2
Step 3
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS Version 2.0.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2011 Cisco Systems, Inc. All rights reserved.
