Table Of Contents

Classifying Network Traffic Using NBAR Features Roadmap

Classifying Network Traffic Using NBAR Features Roadmap

---

First Published: April 4, 2006

Last Updated: December 5, 2008

This features roadmap lists the Cisco IOS features related to Network-Based Application Recognition (NBAR) that are documented in the Cisco IOS Quality of Service Solutions Configuration Guide; the roadmap also maps the features to the documents in which they appear. The roadmap is organized so that you can select your release train and see the features in that release. Find the feature name that you are searching for and click on the URL in the "Where Documented" column to access the document containing that feature.

Many legacy features have been incorporated into the configuration files, and these features may not have entries in this roadmap. In addition, information in this roadmap supports other software releases or platforms. For the latest feature information and caveats, see the release notes for your platform and software release.

Feature and Release Support

Table 1 lists NBAR-related feature support for the following Cisco IOS software release trains:

•Cisco IOS Releases 12.2T, 12.3, and 12.3T

•Cisco IOS Release 12.2ZY

•Cisco IOS Releases 12.4 and 12.4T

•Cisco IOS XE Release 2

Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS, Catalyst OS, and Cisco IOS XE software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

---

Note Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.

---

Table 1 lists the most recent release of each software train first and the features in alphabetical order within the release.

Table 1 Supported NBAR-Related Features 

Release	Feature Name	Feature Description	Where Documented
Cisco IOS Releases 12.2T, 12.3, and 12.3T
12.3(4)T	NBAR Extended Inspection for HTTP Traffic	Allows NBAR to scan TCP ports that are not well known and identify HTTP traffic that traverses these ports.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC"
	NBAR PDLM Versioning	Enables the ability to verify the Cisco IOS and NBAR Packet Description Language Module (PDLM) versions for ensuring software compatibility.	"Classifying Network Traffic Using NBAR" "Adding Application Recognition Modules"
	NBAR User-Defined Custom Application Classification	Provides the ability to identify TCP- or UDP-based applications by using a character string or value. The character string or value is used to match traffic within the packet payload.	"Classifying Network Traffic Using NBAR" "Creating a Custom Protocol"
12.2(15)T	NBAR Protocol Discovery MIBs	NBAR Protocol Discovery MIBs expand the capabilities of NBAR Protocol Discovery by providing the following new Protocol Discovery functionality through SNMP: •Enable or disable Protocol Discovery per interface. •Display Protocol Discovery statistics. •Configure and view multiple top-n tables that list protocols by bandwidth usage. •Configure thresholds based on traffic of particular NBAR-supported protocols or applications that report breaches and send notifications when these thresholds are crossed.	Network-Based Application Recognition Protocol Discovery Management Information Base
	NBAR Real-Time Transport Protocol Payload Classification	Enables stateful identification of real-time audio and video traffic.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC"
Cisco IOS Release 12.2ZY
12.2(18)ZYA1	Non-intrusive Protocol Discovery	Non-intrusive Protocol Discovery enables the Catalyst 6500 series switch that is equipped with a Supervisor 32/programmable intelligent services accelerator (PISA) to perform protocol discovery in out-of-band (that is, offline) mode. In offline mode, a copy of the network traffic is used to discover the application protocols that are operating on an interface.	"Classifying Network Traffic Using NBAR"
12.2(18)ZYA	NBAR—Network-Based Application Recognition	Integrates NBAR and Firewall Service Module (FWSM) functionality on the Catalyst 6500 series switch that is equipped with a Supervisor 32/programmable intelligent services accelerator (PISA). Provides support for Layer 2 Etherchannels and supports additional protocols.	"Classifying Network Traffic Using NBAR" "Enabling Protocol Discovery" "Configuring NBAR Using the MQC" The following commands were modified: ip nbar protocol-discovery, match protocol (NBAR), show ip nbar protocol-discovery.
12.2(18)ZY2	NBAR—Network-Based Application Recognition (Hardware Accelerated Quality of Service (QoS) for NBAR Classification on PISA)	Enhances NBAR functionality on the Catalyst 6500 series switch that is equipped with a Supervisor 32/programmable intelligent services accelerator (PISA).	"Classifying Network Traffic Using NBAR"
12.2(18)ZY	NBAR—Network-Based Application Recognition (Hardware Accelerated NBAR)	Enables NBAR functionality on the Catalyst 6500 series switch that is equipped with a Supervisor 32/PISA.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC"
Cisco IOS Releases 12.4 and 12.4T
12.4(4)T	QoS: DirectConnect PDLM	Provides support for the DirectConnect PDLM and protocol. The DirectConnect protocol can now be recognized when using the Modular Quality of Service (QoS) Command-Line Interface (CLI) (MQC) to classify traffic.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC" "Adding Application Recognition Modules"
	QoS: Skype Classification	Provides support for the Skype protocol. The Skype protocol can now be recognized when using the MQC to classify traffic. Note For Cisco IOS Release 12.4(4)T, Cisco supports only Skype version 1. Other versions of Skype are supported in later Cisco IOS releases.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC"
12.4(2)T	NBAR—BitTorrent PDLM	Provides support for the BitTorrent PDLM and protocol. The BitTorrent protocol can now be recognized when using the MQC to classify traffic.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC" "Adding Application Recognition Modules"
	NBAR—Citrix ICA Published Applications	Enables NBAR to classify traffic on the basis of the Citrix Independent Computing Architecture (ICA) published application name and tag number.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC"
	NBAR—Multiple Matches Per Port	Provides the ability for NBAR to distinguish between values of an attribute within the traffic stream of a particular application on a TCP or UDP port.	"Classifying Network Traffic Using NBAR" "Configuring NBAR Using the MQC" "Creating a Custom Protocol"
Cisco IOS XE Release 2
Cisco IOS XE Release  2.1	NBAR—Network-Based Application Recognition	Provides support for the Protocol Discovery MIB and stateful identification of real-time audio and video traffic (Real-time Transport Protocol Payload Classification). Also provides support for additional protocols.	"Classifying Network Traffic Using NBAR" The following command was modified: match protocol (NBAR).

CCDE, CCENT, CCSI, Cisco Eos, Cisco Explorer, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco TrustSec, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx logo are registered trademarks of Cisco and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1002R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental

2006-2008 Cisco Systems, Inc. All rights reserved.