Network-Based Application Recognition Protocol Discovery Management Information Base [Cisco IOS and NX-OS Software]

Table Of Contents

Network-Based Application Recognition Protocol Discovery Management Information Base

Contents

Prerequisites for NBAR Protocol Discovery MIBs

Restrictions for NBAR Protocol Discovery MIBs

Tables Supported by NBAR Protocol Discovery MIBs

cnpdSupportedProtocolsTable

cnpdStatusTable

cnpdAllStatsTable

cnpdTopNConfigTable

cnpdTopNStatsTable

cnpdThresholdConfigTable

cnpdThresholdHistoryTable

How to Use the NBAR Protocol Discovery MIB

Querying the Supported Protocols Table

Enabling and Disabling NBAR Protocol Discovery on an Interface

Searching the AllStats Table

Creating a Top-N Table

Setting Protocol Thresholds

Setting a Threshold for a Particular Application or Protocol

Setting the Any Protocol Threshold

Configuration Examples For NBAR Protocol Discovery MIBs

Querying Supported Protocols Table

Query Status Enabled Table

Enabling and Disabling Protocol Discovery

Disabling Protocol Discovery on an Interface

Searching the All Stats Table

Creating Top-N Tables Using the NBAR Protocol Discovery MIB

Create a new TopNConfig Entry

Change StatsSelect

Change SampleTime

Change RequestedSize

Set Status to createAndGo and Display Results

Configuring Thresholds

Specific Protocol Threshold

Any Protocol Threshold

Threshold Options

Any Protocol

SpecificProtocol (HTTP)

Additional References

Related Documents

Standards

MIBs

RFCs

Technical Assistance

Command Reference

Network-Based Application Recognition Protocol Discovery Management Information Base

The existing Network-Based Application Recognition (NBAR) feature is used to identify protocols so traffic can be classified appropriately for Quality of Service purposes. NBAR also contains a Protocol Discovery feature that displays various statistics of any NBAR-supported protocol traffic traversing an interface for the user.

The NBAR Protocol Discovery Management Information Base (MIB) expands the capabilities of NBAR Protocol Discovery by providing the following new Protocol Discovery functionalities through SNMP:

•Enable or Disable Protocol Discovery per interface

•Display Protocol Discovery statistics

•Configure and view multiple top-n tables that list protocols by bandwidth usage

•Configure thresholds based on traffic of particular NBAR-supported protocols or applications that report breaches and send notifications when these thresholds are crossed

Feature Specifications for Network-Based Application Recognition Protocol Discovery MIB

Feature History

Release

Modification

Release 12.2(15)T

This feature was introduced.

Supported Platforms

Cisco 1700, Cisco 2600, Cisco 3600, Cisco 3700, Cisco 7100, Cisco 7200, Cisco 7300, Cisco 7400, Cisco 7500 with VIP, Catalyst 6500 Family Switch with a FlexWAN card.

Finding Support Information for Platforms and Cisco IOS Software Images

Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box and follow the instructions that appear.

Contents

This feature module describes the Network-Based Application Recognition Protocol Discovery MIB and contains the following sections:

•Prerequisites for NBAR Protocol Discovery MIBs

•Restrictions for NBAR Protocol Discovery MIBs

•Tables Supported by NBAR Protocol Discovery MIBs

•How to Use the NBAR Protocol Discovery MIB

•Configuration Examples For NBAR Protocol Discovery MIBs

•Additional References

•Command Reference

Prerequisites for NBAR Protocol Discovery MIBs

This feature is a MIB and therefore requires a method to read and configure MIBs in order to be used.

Restrictions for NBAR Protocol Discovery MIBs

•On some platforms, the NBAR Protocol Discovery MIB is not compatible with all possible Cisco IOS images on that platform. Access Cisco Feature Navigator at http://www.cisco.com/go/fn for information regarding Protocol Discovery MIB support in your Cisco IOS release.

•When multiple thresholds are active, a negative impact on the router could occur. The number of thresholds that are configurable on a particular platform vary based on platform and threshold types, but users should ensure that unneeded thresholds are deactivated and that thresholds are configured in such a way that unwanted breaches do not occur.

Tables Supported by NBAR Protocol Discovery MIBs

Using the NBAR Protocol Discovery MIB, the following tables can be created:

•cnpdSupportedProtocolsTable

•cnpdStatusTable

•cnpdAllStatsTable

•cnpdTopNConfigTable

•cnpdTopNStatsTable

•cnpdThresholdConfigTable

•cnpdThresholdHistoryTable

cnpdSupportedProtocolsTable

The cnpdSupportedProtocolsTable lists all the protocols and applications that NBAR is capable of recognizing on the router. It is important to note that a user can add support for additional NBAR protocols and applications by downloading Packet Description Language Modules (PDLMs) or upgrading to an IOS that has added support for additional NBAR protocols or applications; therefore, this table will not be identical on all routers.

The cnpdSupportedProtocolsTable is composed of the following elements:

•cnpdSupportedProtocolsIndex—The cnpdSupportedProtocolsIndex represents the object identifier (OID) of an NBAR-supported protocol or application. This OID is a number and is used to select or identify a particular protocol throughout this MIB.

•cnpdSupportedProtocolsName—The cnpdSupportedProtocolsName is the name of the protocol associated with a specific OID in the cnpdSupportedProtocolsTable line of this table. The last cnpdSupportedProtocolsName is always "unknown" and is used to classify protocols and applications that are not recognized using NBAR Protocol Discovery.

cnpdStatusTable

The cnpdStatusTable provides the following functionality:

•The ability to enable or disable Protocol Discovery on an interface

•The ability to view if Protocol Discovery is enabled or disabled on an interface

•The ability to view when Protocol Discovery was last enabled on an interface.

The cnpdStatusTable contains the following elements:

•IfIndex—The IfIndex is a number that represents a specific interface.

•cnpdStatusPdEnable—The cnpdStatusPdEnable object is used to determine if NBAR is enabled or disabled on the interface. If cnpdStatusPdEnable is set to true(1), then Protocol Discovery is enabled on that interface. If cnpdStatusPdEnable is set to false(2), then Protocol Discovery is not enabled on that interface.

The cnpdStatusPDEnable object can be configured using the SNMP setany command. For an example of the cnpdStatusPDEnable object modification, see the "Enabling and Disabling NBAR Protocol Discovery on an Interface" section of this document.

•cnpdStatusLastUpdateTime—The cnpdStatusLastUpdateTime displays the last time that Protocol Discovery was enabled on an interface. The number is given in timeticks which are converted to an actual time by the network management system.

cnpdAllStatsTable

The cnpdAllStatsTable is a table that contains the statistics collected on all NBAR-supported protocols on a per-interface basis.

The cnpdAllStatsTable contains the following elements:

•IfIndex—The IfIndex is a number that represents a specific interface.

•ProtocolsIndex—This number represents the protocol being monitored. To see which protocols are mapped to which numbers, see the cnpdSupportedProtocolsTable table.

•cnpdAllStatsInPkts—The cnpdAllStatsInPkts represents the number of packets that have been received by a specific interface. This value is given as a 32-bit variable; if the 32-bit variable is unable to handle the value (because SNMPv2 can support a 64-bit counter), the value used by the Network Management System (NMS) in place of cnpdAllStatInPkts is cnpdHCInPkts.

•cnpdAllStatsOutPkts—The cnpdAllStatsOutPks value represents the number of packets for traffic of a specific protocol or application that have left a specific interface. This value is given as a 32-bit variable; if the 32-bit variable is too small to handle the value (because SNMPv2 can support a 64-bit counter), the value used by the NMS in place of cnpdAllStatOutPkts is cnpdHCOutPkts.

•cnpdAllStatsInBytes—The cnpdAllStatsInBytes represent the total number of bytes for traffic of a specific protocol or application that have entered a specific interface. This value is given as a 32-bit variable; if the 32-bit variable is too small to handle the value (because SNMPv2 can support a 64-bit counter), the value used by the NMS in place of cnpdAllStatInBytes is cnpdHCInBytes.

•cnpdAllStatsOutBytes—The cnpdAllStatsOutBytes represent the total number of bytes for traffic of a specific protocol or application that have left a specific interface. This value is given as a 32-bit variable; if the 32-bit variable is unable to handle the value (because SNMPv2 can support a 64-bit counter), the value used by the NMS in place of cnpdAllStatOutBytes is cnpdHCOutBytes.

•cnpdAllStatsHCInPkts—The cnpdAllStatsHCInPkts represent the total number of packets for traffic of a specific protocol or application that have entered a specific interface. This value is given as a 64-bit variable. If the cnpdAllStatsInPkts value could fit into the 32-bit counter, the cnpdAllStatsHCInPkts value will match the cnpdInPkts value. If the cnpdAllStatsInPkts value could not fit into the 64-bit counter, the NMS will use the cnpdAllStatsHCInPkts value in place of the cnpdAllStatsInPkts value.

•cnpdAllStatsHCOutPkts—The cnpdAllStatsHCOutPkts represent the total number of packets for traffic of a specific protocol or application that have left a specific interface. This value is given as a 64-bit variable. If the cnpdAllStatsOutPkts value could fit into the 32-bit counter, the cnpdAllStatsHCOutPkts value will match the cnpdOutPkts value. If the cnpdAllStatsOutPkts value could not fit into the 64-bit counter, the NMS will use the cnpdAllStatsHCOutPkts value in place of the cnpdAllStatsOutPkts value.

•cnpdAllStatsHCInBytes—The cnpdAllStatsHCInBytes represent the total number of bytes for traffic of a specific protocol or application that have entered a specific interface. This value is given in hexadecimal format. This value is given as a 64-bit variable. If the cnpdAllStatsInBytes value could fit into the 32-bit counter, the cnpdAllStatsHCInBytes value will match the cnpdInBytes value. If the cnpdAllStatsInBytes value could not fit into the 64-bit counter, the NMS will use the cnpdAllStatsHCInBytes value in place of the cnpdAllStatsInBytes value.

•cnpdAllStatsHCOutBytes—The cnpdAllStatsHCOutBytes represent the total number of bytes for traffic of a specific protocol or application that have left a specific interface. This value is given in hexadecimal format. This value is given as a 64-bit variable. If the cnpdAllStatsOutBytes value could fit into the 32-bit counter, the cnpdAllStatsHCOutBytes value will match the cnpdAllStatsOutBytes value. If the cnpdAllStatsOutBytes value could not fit into the 64-bit counter, the NMS will use the cnpdAllStatsHCOutBytes value in place of the cnpdAllStatsOutBytes value.

•cnpdAllStatsInBitRate—The cnpdAllStatsInBitRate represents the bit rate for traffic entering a specific interface.

•cnpdAllStatsOutBitRate—The cnpdAllStatsOutBitRate represents the bit rate for traffic leaving a specific interface.

cnpdTopNConfigTable

The cnpdTopNConfigTable is used to request a top-n list of protocols and their statitistics.

The cnpdTopNConfigTable contains the following elements:

•cnpdTopNConfigIndex—The cnpdTopNConfigIndex is a number that represents a set of configuration parameters that will result in as a single row in the entire table.

•cnpdTopNConfigIfIndex—The cnpdTopNConfigIfIndex is a number that identifies a specific interface.

•cnpdTopNConfigStatsSelect—The cnpdTopNConfigStatsSelect determines the statistic used to calculate the order of precedence of the top-n protocols in the cnpdTopNStatsTable. The following statistics can be chosen:

–bitRateIn(1)—Incoming bit rate

–bitRateOut(2)—Outgoing bit rate

–bitRateSum(3)—The sum of the incoming and outgoing bit rates

–byteCountIn(4)—Incoming byte count

–byteCountOut(5)—Outgoing byte count

–byteCountSum(6)—Sum of incoming and outgoing byte counts

–packetCountIn(7)—Incoming packet count

–packetCountOut(8)—Outgoing packet count

–packetCountSum(9)—Sum of incoming and outgoing packet counts

•cnpdTopNConfigSampleTime—For statistics based on bit rates only, the cnpdTopNConfigSampleTime determines the intervals during which the bit rate is sampled.

•cnpdTopNConfigRequestedSize—The cnpdTopNConfigRequestedSize selects the number of protocols or applications shown in the top-n table (in other words, it represent the n variable in the term "top-n"). In some cases, the cnpdTopNConfigRequestedSize may not show as many statistics as selected due to memory restrictions. The cnpdTopNConfigGrantedSize represents the actual number of protocols or applications displayed in the top-n table.

•cnpdTopNConfigGrantedSize—The cnpdTopNConfigGrantedSize is the actual number of protocols or applications that are shown in the top-n table. The number of protocols or applications in a top-n table does not always match the cnpdTopNConfigRequestedSize due to memory restrictions.

•cnpdTopNConfigTime—The cnpdTopNConfigTime represents the time in timeticks that a particular row entry was made active.

•cnpdTopNConfigStatus—The cnpdTopNConfigStatus creates and deletes rows in the cnpdTopNConfigTable.

It can have the following values:

–Active—A TopNStats entry has been generated for this row.

–NotInService—A TopNStats entry has not been generated for this row because cnpdTopNConfigStatus has been manually set to NotInService.

–NotReady—A TopNStats entry has not been generated for this row.

–createAndGo—create a table with default values for empty fields.

–createAndWait—create a table and set values for all fields.

–Destroy—destroy table.

All of these values can be set at an appropriate time, but Active, NotInService, and NotReady are the only states that this object can be converted to after the values are initially set.

Each row in the cnpdTopNConfigStatus contains a default value. These default values are used when a top-n table is created using createAndGo. If createAndGo is used to create a table from scratch, default values are used for each table row. The actual default values are defined in the MIB.

A user creating a top-n table should be aware that when a table is created using createAndGo, no default value can be assigned to an interface and the row status will therefore be NotReady.

cnpdTopNStatsTable

The cnpdTopNStatsTable contains an overall view of the TopNStats. In particular, this table takes the values of TopNConfigTable and the cnpdTopNConfigGrantedSize and produces an overall dynamic top-n table that monitors these objects.

This cnpdTopNStatsTable contains the following elements:

•cnpdTopNConfigIndex—The cnpdTopNConfigIndex represents the value of the index in the associated cnpdTopNConfigTable.

•cnpdTopNStatsIndex—The cnpdTopNStatsIndex indicates a position of a specific protocol in the top-n table.

•cnpdTopNStatsIfIndex—The cnpdTopNStatsIfIndex specifies the interface where the statistic of the top-n table is being monitored.

•cnpdTopNStatsProtocolName—The name of the protocol being measured.

•cnpdTopNStatsRate—measures the rate of the measured statistic. This value is given as a 32-bit variable. If this value cannot fit into the 32-bit variable, the cnpdTopNHCRate variable is used to provide the rate.

•cnpdTopNHCRate—measures the rate of the measured statistic. This value is given as a 64-bit variable. If this value can fit into the 32-bit variable, this value will match cnpdTopNStatsRate. If this value cannot fit into the 32-bit variable, the cnpdTopNHCRate is used to provide this rate.

cnpdThresholdConfigTable

The cnpdThresholdConfigTable is used to configure thresholds based on Protocol Discovery statistics.

The cnpdThresholdConfigTable contains the following elements:

•cnpdThresholdConfigIndex—Represents a threshold entry or notification if configured.

•cnpdThresholdConfigIfIndex—Represents the interface on which the protocol or application will be measured.

•cndpThresholdConfigInterval—Represents the number of seconds that elapse before polling for the application or protocol.

•cnpdThresholdConfigSampleType—This value determines how statistics are sampled for the threshold.

–If the cnpdThresholdConfigSampleType is set at absoluteValue(1), the value at the end of the sampling interval cnpdThresholdConfigInterval will be compared with the cnpdThresholdConfigRising and cnpdThresholdConfigFalling thresholds.

–If the cnpdThresholdConfigSampleType is set at deltaValue(2), the difference between the samples at the beginning and at the end of the cnpdThresholdConfigInterval will be comparted with the cnpdThresholdConfigRising and cnpdThresholdConfigFalling thresholds.

•cnpdThresholdConfigProtocol—The application or protocol that the thresholds for which the thresholds are being set.

•cnpdThresholdConfigAny—This setting determines if "any" protocol is being monitored for thresholds or if a particular protocol is being monitored for thresholds.

–If cnpdThresholdConfigAny is set to true, "any" protocol is being monitored for thresholds. When any protocol is set, all protocols are monitored to see if they breach the thresholds and an SNMP trap is sent if any individual protocol breaches the threshold.

–If cnpdThresholdConfigAny is set to false, a particular protocol is monitored to see if it crosses the configured thresholds. The cnpdThresholdConfigProtocol is used to set the particular protocol that is being monitored for threshold crossing.

•cnpdThresholdConfigProtocol—The cnpdThresholdConfigProtocol is used to set the particular protocol that is being monitored for threshold crossing.

•cnpdThresholdConfigStatsSelect—The cnpdThresholdConfigStatsSelect specifies the statistic that is being measured.

•cnpdThresholdConfigStartup—The cnpdThresholdConfigStartup controls if and when a notification should be generated the first time a statistic is measured. The following values may appear:

–rising(1)—If cnpdThresholdConfigStartup is set to rising, no threshold breaches will be reported if the first measure of a statistic is above the rising threshold.

–falling(2)—If CnpdThresholdConfigStartup is set to falling, no threshold breaches will be reported if the first measure of a statistic is below the falling threshold.

–risingOrFalling(3)—The default setting. If the cnpdThresholdConfigStartup is set to risingOrFalling, no threshold breaches will be reported when the first measure of a statistic is reported.

•cnpdThresholdConfigRising—The cnpdThresholdConfigRising specifies the high value of the statistic being monitored that needs to be breached for a notification to be sent.

•cnpdThresholdConfigFalling—The cnpdThresholdConfigFalling specifies the low value of the statistic being monitored that needs to be breached for a notification to be sent.

•cnpdThresholdConfigStatus—Specifies if the row on the table is Active or NotReady.

cnpdThresholdHistoryTable

The cnpdThresholdHistoryTable keeps a history of all thresholds that have been breached. It is a two-dimensional table that tracks each particular breached threshold (which is numbered using cnpdThresholdHistoryIndex) and the entire cnpdThresholdConfigTable.

The cnpdThresholdHistoryTable contains the following elements:

•cnpdThresholdHistoryIndex—The cnpdThresholdHistoryIndex is a number that increments each time a threshold is breached.

•cnpdThresholdHistoryConfigIndex—represents a threshold entry or notification if configured. Same value as in the cnpdThresholdConfigTable.

•cnpdThresholdHistoryValue—The value of the sample at the time of the breach.

•cnpdThresholdHistoryType—indicates when the rising or falling threshold was breached in timeticks.

•cnpdThresholdHistoryTime—The time of the breach.

•cnpdThresholdHistoryProtocol—indicates the protocol that has breached the threshold.

•cnpdThresholdHistoryStatsSelect—indicates the statistic that was being monitored when this threshold was breached.

How to Use the NBAR Protocol Discovery MIB

The following sections provide information on configuring elements of the Protocol Discovery MIB and contains the following sections:

•Querying the Supported Protocols Table

•Enabling and Disabling NBAR Protocol Discovery on an Interface

•Searching the AllStats Table

•Creating a Top-N Table

•Setting Protocol Thresholds

Note Throughout this document, the setany and getmany commands used with some MIB tools are used in the examples. In these cases, the setany command is equivalent to the SNMP set command and the getmany command is equivalent to the SNMP getbulk command.

Note For detailed configurations and outputs, we strongly suggest viewing the "Configuration Examples For NBAR Protocol Discovery MIBs" section of this document.

Querying the Supported Protocols Table

The Supported Protocols Table is used to see which protocols are supported by the NBAR Protocol Discovery MIB and to display which object identifier (OID) is assigned to each NBAR-supported application or protocol. The OID is a number that is used in the NBAR Protocol Discovery MIB to identify protocols and applications and to configure and read thresholds.

SUMMARY STEPS

1. getmany -v2c IP-address public cnpdSupported Protocols

Examples

To view the supported protocols table, enter the following command in SNMP:

>$ getmany -v2c a.b.c.d public cnpdSupportedProtocols

(where a.b.c.d is the IP address of the router).

Enabling and Disabling NBAR Protocol Discovery on an Interface

The Status Enabled Table is used to either enable or disable NBAR Protocol Discovery on an interface or to view whether NBAR Protocol Discovery is enabled.

SUMMARY STEPS for Enabling NBAR Protocol Discovery on an Interface

1. getmany -v2c IP-address public cnpdStatusTable (optional)

2. setany -v2c IP-address public cnpdStatusPdEnable.interface-number -i 1

SUMMARY STEPS for Enabling NBAR Protocol Discovery on an Interface

1. getmany -v2c IP-address public cnpdStatusTable (optional)

2. setany -v2c IP-address public cnpdStatusPdEnable.interface-number -i 2

Examples

To view the Status Enabled Table, enter the following SNMP command:

>$ getmany -v2c a.b.c.d public cnpdStatusTable

(where a.b.c.d is the IP address of the router).

To enable Protocol Discovery on an interface, enter the following SNMP command:

>$ setany -v2c a.b.c.d public cnpdStatusPdEnable.14 -i 1

(where a.b.c.d is the IP address of the router, 14 is the number of the interface where Protocol Discovery is being enabled, and 1 sets the cnpdStatusPdEnable object to true(1) to enable Protocol Discovery).

To disable Protocol Discovery on an interface, enter the following SNMP command:

>$ setany -v2c a.b.c.d public cnpdStatusPdEnable.14 -i 2

(where a.b.c.d is the IP address of the router, 14 is the number of the interface where Protocol Discovery is being disabled, and 2 sets the cnpdStatusPdEnable object to false(2) to disable Protocol Discovery).

Searching the AllStats Table

The AllStats Table stores all of the statistics currently stored by NBAR Protocol Discovery. If many interfaces have enabled NBAR Protocol Discovery, the All Stats Table can get incredibly large.

To search the All Stats table, enter the following SNMP command:

>$ getmany -v2c a.b.c.d public cnpdAllStats

(where a.b.c.d is the IP address of the router).

SUMMARY STEPS

1. getmany -v2c IP-address public cnpdAllStats

Creating a Top-N Table

A top-n table in NBAR is a table that displays the most frequently classified NBAR-supported protocols for a specified statistic on a specified interface.

The top-n functionality in the NBAR Protocol Discovery MIB involves two tables. The first table is a configuration table in which each row represents a group of objects that will create a unique top-n report. The other table is a Statistics Results Table, which records the outputs of each row of the configuration table. The Statistics Results Table can be regenerated by the correct use of the rowStatus object in the configuration table.

Summary Steps

1. setany -v2c IP-address public cnpdTopNConfigIfIndex.interface-number -i OID-number

2. getmany -v2c IP-address public cnpdTopNConfig

3. setany -v2c IP-address public cnpdTopNConfigStatsSelect.interface-number -i stats-value -i IfIndex

4. getmany -v2c IP-address public cnpdTopNConfig

5. setany -v2c IP-address public cnpdTopNConfigSampleTime.interface-number -g number-of-timeticks

6. getmany -v2c IP-address public cnpdTopNConfig

7. setany -v2c IP-address public cnpdTopNConfigRequestedSize.interface-number -g requested-size

8. getmany -v2c IP-address public cnpdTopNConfig

9. setany -v2c IP-address public cnpdTopNConfigStatus.interface-number -i config-status

10. getmany -v2c IP-address public cnpdTopNConfig

11. getmany -v2c IP-address public cnpdTopNStats

Examples

To create a Top-n Table, enter the following SNMP commands:

>$ setany -v2c a.b.c.d public cnpdTopNConfigIfIndex.1 -i 13

(where a.b.c.d is the IP address of the router, 1 is the interface on the router, and 13 is the If-Index r of the protocol being monitored).

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

(where a.b.c.d is the IP address of the router).

>$ setany -v2c a.b.c.d public cnpdTopNConfigStatsSelect.1 -i 7

(where a.b.c.d is the IP address of the router, 1 is the interface on the router, and 7 is the OID number of the protocol being monitored).

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

(where a.b.c.d is the IP address of the router).

>$ setany -v2c a.b.c.d public cnpdTopNConfigSampleTime.1 -g 13

(where a.b.c.d is the IP address of the router, 1 is the interface on the router, and 13 is the number of timeticks between when samples are taken for the table).

>$ getmany -v2c a.b.c.d public cnpdTopNConfig
(where a.b.d.c is the IP address of the router).

>$ setany -v2c a.b.c.d public cnpdTopNConfigRequestedSize.1 -g 5

(where a.b.c.d is the IP address of the router, 1 is the interface on the router, and 5 is the number of statistics to appear on the table [in this case, the top-5 statistics will be monitored by this top-n table assuming this object request is granted]).

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

(where a.b.c.d is the IP address of the router).

>$ setany -v2c a.b.c.d public cnpdTopNConfigStatus.1 -i 4

(where a.b.c.d is the IP address of the router, 1 is the interface on the router, and 4 is the number that corresponds to a particular status).

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

(where a.b.c.d is the IP address of the router).

>$ getmany -v2c a.b.c.d public cnpdTopNStats

(where a.b.c.d is the IP address of the router).

Setting Protocol Thresholds

The NBAR Protocol Discovery MIB can be used to set two types of thresholds—a threshold that sends a trap when thresholds for an individual protocol are crossed and a threshold that sends a trap when all NBAR-classifiable protocols or applications are crossed.

Setting a Threshold for a Particular Application or Protocol

A specific protocol threshold is a threshold that monitors the traffic of a specific protocol and the breaches of these thresholds are reported and stored when they occur.

The following items should be noted when configuring a specific protocol threshold:

•The cnpdThresholdConfigProtocolAny must be set to FALSE(2) and cnpdThresholdConfigProtocol must be set to a value that indicates the OID of the protocol being monitored. The OID for each protocol can be seen by querying cnpdSupportedProtocolsTable.

•Use cnpdThresholdConfigIfIndex to select the interface and cnpdThresholdConfigRising and cnpdThresholdConfigFalling to set the rising and falling thresholds.

•Set the cnpdThresholdConfigInterval to configure the frequency with which thresholds should be checked.

•Set cnpdThresholdConfigStatus to 4 (createAndGo) and this config member will become active.

•A hysterisis mechanism is used with thresholds using the NBAR Protocol Discovery MIB to avoid the reporting of multiple breaches.

Summary Steps

1. setany -v2c IP-address public cnpdThresholdConfigProtocolAny.interface-number -i 2

2. setany -v2c IP-address public cnpdThresholdConfigProtocol.interface-number -g protocol-OID

3. setany -v2c IP-address public cnpdThresholdConfigStatsSelect.interface-number -i statistic

4. setany -v2c IP-address public cnpdThresholdConfigIfIndex.interface-number -i interface

5. setany -v2c IP-address public cnpdThresholdConfigRising.interface-number -g rising-threshold

6. setany -v2c IP-address public cnpdThresholdConfigFalling.interface-number -g falling-threshold

7. setany -v2c IP-address public cnpdThresholdConfigStatus.interface-number -i status

Examples

setany -v2c a.b.c.d public cnpdThresholdConfigProtocolAny.2 -i 2
setany -v2c a.b.c.d public cnpdThresholdConfigProtocol.2 -g 5
setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.2 -i 7
setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.2 -i 13
setany -v2c a.b.c.d public cnpdThresholdConfigRising.2 -g 2000
setany -v2c a.b.c.d public cnpdThresholdConfigFalling.2 -g 1000
setany -v2c a.b.c.d public cnpdThresholdConfigStatus.2 -i 4

Setting the Any Protocol Threshold

The Any Protocol Threshold setting is used to send SNMP traps and create history entries if ANY protocol crosses a rising or falling threshold. This threshold does have a mechanism to report a breach only once in a given time period. For instance, if HTTP breaches a rising threshold, a trap is sent only for the first breach. If another protocol like DHCP breaches a rising threshold, a separate trap is sent for that breach.

The setup for any protocol is identical to a specific protocol except cnpdThresholdConfigProtocolAny does not have to be configured and it is unnecessary to specify a cnpdThresholdConfigProtocol.

Summary Steps

1. setany -v2c IP-address public cnpdThresholdConfigStatsSelect.interface-number -i statistic

2. setany -v2c IP-address public cnpdThresholdConfigIfIndex.interface-number -i interface

3. setany -v2c IP-address public cnpdThresholdConfigRising.interface-number -g rising-threshold

4. setany -v2c IP-address public cnpdThresholdConfigFalling.interface-number -g falling-threshold

5. setany -v2c IP-address public cnpdThresholdConfigStatus.interface-number -i status

Examples

setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.1 -i 7
setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.1 -i 13
setany -v2c a.b.c.d public cnpdThresholdConfigRising.1 -g 30
setany -v2c a.b.c.d public cnpdThresholdConfigFalling.1 -g 20
setany -v2c a.b.c.d public cnpdThresholdConfigStatus.1 -i 4

Configuration Examples For NBAR Protocol Discovery MIBs

This section provides the following configuration examples:

•Querying Supported Protocols Table

•Query Status Enabled Table

•Enabling and Disabling Protocol Discovery

•Disabling Protocol Discovery on an Interface

•Searching the All Stats Table

•Creating Top-N Tables Using the NBAR Protocol Discovery MIB

•Configuring Thresholds

•Threshold Options

Note Throughout this document, the setany and getmany commands used with some MIB tools are used in the examples. In these cases, the setany command is equivalent to the SNMP set command and the getmany command is equivalent to the SNMP getbulk command.

Querying Supported Protocols Table

The Querying Supported Protocols Table serves two purposes:

•Lists all the protocols and applications that can be classified by NBAR.

•Gives an OID per application or protocol that can be used in the NBAR Protocol Discovery MIB to identify protocols and applications and to configure and read thresholds.

>$ getmany -v2c a.b.c.d public cnpdSupportedProtocols

cnpdSupportedProtocolsName.1 = rtp
cnpdSupportedProtocolsName.2 = fasttrack
cnpdSupportedProtocolsName.3 = napster
cnpdSupportedProtocolsName.4 = citrix
cnpdSupportedProtocolsName.5 = http
cnpdSupportedProtocolsName.6 = custom-10
cnpdSupportedProtocolsName.7 = custom-09
cnpdSupportedProtocolsName.8 = custom-08
cnpdSupportedProtocolsName.9 = custom-07
cnpdSupportedProtocolsName.10 = custom-06
cnpdSupportedProtocolsName.11 = custom-05
cnpdSupportedProtocolsName.12 = custom-04
cnpdSupportedProtocolsName.13 = custom-03
cnpdSupportedProtocolsName.14 = custom-02
cnpdSupportedProtocolsName.15 = custom-01
cnpdSupportedProtocolsName.16 = gnutella
cnpdSupportedProtocolsName.17 = streamwork
cnpdSupportedProtocolsName.18 = sunrpc
cnpdSupportedProtocolsName.19 = netshow
cnpdSupportedProtocolsName.20 = rcmd
cnpdSupportedProtocolsName.21 = sqlnet
cnpdSupportedProtocolsName.22 = vdolive
cnpdSupportedProtocolsName.23 = realaudio
cnpdSupportedProtocolsName.24 = exchange
cnpdSupportedProtocolsName.25 = tftp
cnpdSupportedProtocolsName.26 = novadigm
cnpdSupportedProtocolsName.27 = printer
cnpdSupportedProtocolsName.28 = xwindows
cnpdSupportedProtocolsName.29 = secure-ftp
cnpdSupportedProtocolsName.30 = secure-telnet
cnpdSupportedProtocolsName.31 = telnet
cnpdSupportedProtocolsName.32 = syslog
cnpdSupportedProtocolsName.33 = ssh
cnpdSupportedProtocolsName.34 = socks
cnpdSupportedProtocolsName.35 = snmp
cnpdSupportedProtocolsName.36 = smtp
cnpdSupportedProtocolsName.37 = rsvp
cnpdSupportedProtocolsName.38 = rip
cnpdSupportedProtocolsName.39 = pptp
cnpdSupportedProtocolsName.40 = secure-pop3
cnpdSupportedProtocolsName.41 = pop3
cnpdSupportedProtocolsName.42 = pcanywhere
cnpdSupportedProtocolsName.43 = ntp
cnpdSupportedProtocolsName.44 = notes
cnpdSupportedProtocolsName.45 = secure-nntp
cnpdSupportedProtocolsName.46 = nntp
cnpdSupportedProtocolsName.47 = nfs
cnpdSupportedProtocolsName.48 = netbios
cnpdSupportedProtocolsName.49 = sqlserver
cnpdSupportedProtocolsName.50 = secure-ldap
cnpdSupportedProtocolsName.51 = ldap
cnpdSupportedProtocolsName.52 = l2tp
cnpdSupportedProtocolsName.53 = kerberos
cnpdSupportedProtocolsName.54 = secure-irc
cnpdSupportedProtocolsName.55 = irc
cnpdSupportedProtocolsName.56 = secure-imap
cnpdSupportedProtocolsName.57 = imap
cnpdSupportedProtocolsName.58 = secure-http
cnpdSupportedProtocolsName.59 = gopher
cnpdSupportedProtocolsName.60 = finger
cnpdSupportedProtocolsName.61 = dns
cnpdSupportedProtocolsName.62 = dhcp
cnpdSupportedProtocolsName.63 = cuseeme
cnpdSupportedProtocolsName.64 = bgp
cnpdSupportedProtocolsName.65 = ipsec
cnpdSupportedProtocolsName.66 = ipinip
cnpdSupportedProtocolsName.67 = eigrp
cnpdSupportedProtocolsName.68 = icmp
cnpdSupportedProtocolsName.69 = gre
cnpdSupportedProtocolsName.70 = egp
cnpdSupportedProtocolsName.71 = ftp
cnpdSupportedProtocolsName.72 = unknown

Query Status Enabled Table

The Query Status Enabled Table has two purposes:

•Each row represents an interface on the router and whether NBAR Protocol Discovery is enabled or disabled on that interface.

•Each row can be configured to enable or disable NBAR Protocol Discovery using SNMP set.

>$ getmany -v2c a.b.c.d public cnpdStatusTable

cnpdStatusPdEnable.1 = false(2)
cnpdStatusPdEnable.2 = false(2)
cnpdStatusPdEnable.3 = false(2)
cnpdStatusPdEnable.4 = false(2)
cnpdStatusPdEnable.5 = false(2)
cnpdStatusPdEnable.6 = false(2)
cnpdStatusPdEnable.7 = false(2)
cnpdStatusPdEnable.8 = false(2)
cnpdStatusPdEnable.9 = false(2)
cnpdStatusPdEnable.10 = false(2)
cnpdStatusPdEnable.11 = false(2)
cnpdStatusPdEnable.12 = false(2)
cnpdStatusPdEnable.13 = true(1)
cnpdStatusPdEnable.14 = false(2)
cnpdStatusPdEnable.15 = false(2)
cnpdStatusPdEnable.16 = false(2)
cnpdStatusPdEnable.17 = false(2)
cnpdStatusPdEnable.18 = false(2)
cnpdStatusPdEnable.19 = false(2)
cnpdStatusPdEnable.20 = false(2)
cnpdStatusPdEnable.21 = false(2)
cnpdStatusPdEnable.22 = false(2)
cnpdStatusPdEnable.23 = false(2)
cnpdStatusPdEnable.24 = false(2)
cnpdStatusPdEnable.25 = false(2)
cnpdStatusPdEnable.26 = false(2)
cnpdStatusPdEnable.27 = false(2)
cnpdStatusPdEnable.28 = false(2)
cnpdStatusPdEnable.29 = false(2)
cnpdStatusPdEnable.30 = false(2)
cnpdStatusPdEnable.31 = false(2)
cnpdStatusPdEnable.32 = false(2)
cnpdStatusPdEnable.33 = false(2)
cnpdStatusPdEnable.34 = false(2)
cnpdStatusPdEnable.35 = false(2)
cnpdStatusLastUpdateTime.1 = 0
cnpdStatusLastUpdateTime.2 = 0
cnpdStatusLastUpdateTime.3 = 0
cnpdStatusLastUpdateTime.4 = 0
cnpdStatusLastUpdateTime.5 = 0
cnpdStatusLastUpdateTime.6 = 0
cnpdStatusLastUpdateTime.7 = 0
cnpdStatusLastUpdateTime.8 = 0
cnpdStatusLastUpdateTime.9 = 0
cnpdStatusLastUpdateTime.10 = 0
cnpdStatusLastUpdateTime.11 = 0
cnpdStatusLastUpdateTime.12 = 0
cnpdStatusLastUpdateTime.13 = 1111
cnpdStatusLastUpdateTime.14 = 0
cnpdStatusLastUpdateTime.15 = 0
cnpdStatusLastUpdateTime.16 = 0
cnpdStatusLastUpdateTime.17 = 0
cnpdStatusLastUpdateTime.18 = 0
cnpdStatusLastUpdateTime.19 = 0
cnpdStatusLastUpdateTime.20 = 0
cnpdStatusLastUpdateTime.21 = 0
cnpdStatusLastUpdateTime.22 = 0
cnpdStatusLastUpdateTime.23 = 0
cnpdStatusLastUpdateTime.24 = 0
cnpdStatusLastUpdateTime.25 = 0
cnpdStatusLastUpdateTime.26 = 0
cnpdStatusLastUpdateTime.27 = 0
cnpdStatusLastUpdateTime.28 = 0
cnpdStatusLastUpdateTime.29 = 0
cnpdStatusLastUpdateTime.30 = 0
cnpdStatusLastUpdateTime.31 = 0
cnpdStatusLastUpdateTime.32 = 0
cnpdStatusLastUpdateTime.33 = 0
cnpdStatusLastUpdateTime.34 = 0
cnpdStatusLastUpdateTime.35 = 0

Enabling and Disabling Protocol Discovery

The following examples show how to enable Protocol Discovery using the NBAR Protocol Discovery MIB using the SNMP set.

>$ setany -v2c a.b.c.d public cnpdStatusPdEnable.14 -i 1

cnpdStatusPdEnable.14 = true(1)

>$ getmany -v2c a.b.c.d public cnpdStatusTable

cnpdStatusPdEnable.1 = false(2)
cnpdStatusPdEnable.2 = false(2)
cnpdStatusPdEnable.3 = false(2)
cnpdStatusPdEnable.4 = false(2)
cnpdStatusPdEnable.5 = false(2)
cnpdStatusPdEnable.6 = false(2)
cnpdStatusPdEnable.7 = false(2)
cnpdStatusPdEnable.8 = false(2)
cnpdStatusPdEnable.9 = false(2)
cnpdStatusPdEnable.10 = false(2)
cnpdStatusPdEnable.11 = false(2)
cnpdStatusPdEnable.12 = false(2)
cnpdStatusPdEnable.13 = true(1)
cnpdStatusPdEnable.14 = true(1)
cnpdStatusPdEnable.15 = false(2)
cnpdStatusPdEnable.16 = false(2)
cnpdStatusPdEnable.17 = false(2)
cnpdStatusPdEnable.18 = false(2)
cnpdStatusPdEnable.19 = false(2)
cnpdStatusPdEnable.20 = false(2)
cnpdStatusPdEnable.21 = false(2)
cnpdStatusPdEnable.22 = false(2)
cnpdStatusPdEnable.23 = false(2)
cnpdStatusPdEnable.24 = false(2)
cnpdStatusPdEnable.25 = false(2)
cnpdStatusPdEnable.26 = false(2)
cnpdStatusPdEnable.27 = false(2)
cnpdStatusPdEnable.28 = false(2)
cnpdStatusPdEnable.29 = false(2)
cnpdStatusPdEnable.30 = false(2)
cnpdStatusPdEnable.31 = false(2)
cnpdStatusPdEnable.32 = false(2)
cnpdStatusPdEnable.33 = false(2)
cnpdStatusPdEnable.34 = false(2)
cnpdStatusPdEnable.35 = false(2)
cnpdStatusLastUpdateTime.1 = 0
cnpdStatusLastUpdateTime.2 = 0
cnpdStatusLastUpdateTime.3 = 0
cnpdStatusLastUpdateTime.4 = 0
cnpdStatusLastUpdateTime.5 = 0
cnpdStatusLastUpdateTime.6 = 0
cnpdStatusLastUpdateTime.7 = 0
cnpdStatusLastUpdateTime.8 = 0
cnpdStatusLastUpdateTime.9 = 0
cnpdStatusLastUpdateTime.10 = 0
cnpdStatusLastUpdateTime.11 = 0
cnpdStatusLastUpdateTime.12 = 0
cnpdStatusLastUpdateTime.13 = 1111
cnpdStatusLastUpdateTime.14 = 44042577
cnpdStatusLastUpdateTime.15 = 0
cnpdStatusLastUpdateTime.16 = 0
cnpdStatusLastUpdateTime.17 = 0
cnpdStatusLastUpdateTime.18 = 0
cnpdStatusLastUpdateTime.19 = 0
cnpdStatusLastUpdateTime.20 = 0
cnpdStatusLastUpdateTime.21 = 0
cnpdStatusLastUpdateTime.22 = 0
cnpdStatusLastUpdateTime.23 = 0
cnpdStatusLastUpdateTime.24 = 0
cnpdStatusLastUpdateTime.25 = 0
cnpdStatusLastUpdateTime.26 = 0
cnpdStatusLastUpdateTime.27 = 0
cnpdStatusLastUpdateTime.28 = 0
cnpdStatusLastUpdateTime.29 = 0
cnpdStatusLastUpdateTime.30 = 0
cnpdStatusLastUpdateTime.31 = 0
cnpdStatusLastUpdateTime.32 = 0
cnpdStatusLastUpdateTime.33 = 0
cnpdStatusLastUpdateTime.34 = 0
cnpdStatusLastUpdateTime.35 = 0

Disabling Protocol Discovery on an Interface

The following example shows how to disable Protocol Discovery on an interface using SNMP set.

>$ setany -v2c a.b.c.d public cnpdStatusPdEnable.14 -i 2

cnpdStatusPdEnable.14 = false(2)

>$ getmany -v2c a.b.c.d public cnpdStatusTable

cnpdStatusPdEnable.1 = false(2)
cnpdStatusPdEnable.2 = false(2)
cnpdStatusPdEnable.3 = false(2)
cnpdStatusPdEnable.4 = false(2)
cnpdStatusPdEnable.5 = false(2)
cnpdStatusPdEnable.6 = false(2)
cnpdStatusPdEnable.7 = false(2)
cnpdStatusPdEnable.8 = false(2)
cnpdStatusPdEnable.9 = false(2)
cnpdStatusPdEnable.10 = false(2)
cnpdStatusPdEnable.11 = false(2)
cnpdStatusPdEnable.12 = false(2)
cnpdStatusPdEnable.13 = true(1)
cnpdStatusPdEnable.14 = false(2)
cnpdStatusPdEnable.15 = false(2)
cnpdStatusPdEnable.16 = false(2)
cnpdStatusPdEnable.17 = false(2)
cnpdStatusPdEnable.18 = false(2)
cnpdStatusPdEnable.19 = false(2)
cnpdStatusPdEnable.20 = false(2)
cnpdStatusPdEnable.21 = false(2)
cnpdStatusPdEnable.22 = false(2)
cnpdStatusPdEnable.23 = false(2)
cnpdStatusPdEnable.24 = false(2)
cnpdStatusPdEnable.25 = false(2)
cnpdStatusPdEnable.26 = false(2)
cnpdStatusPdEnable.27 = false(2)
cnpdStatusPdEnable.28 = false(2)
cnpdStatusPdEnable.29 = false(2)
cnpdStatusPdEnable.30 = false(2)
cnpdStatusPdEnable.31 = false(2)
cnpdStatusPdEnable.32 = false(2)
cnpdStatusPdEnable.33 = false(2)
cnpdStatusPdEnable.34 = false(2)
cnpdStatusPdEnable.35 = false(2)
cnpdStatusLastUpdateTime.1 = 0
cnpdStatusLastUpdateTime.2 = 0
cnpdStatusLastUpdateTime.3 = 0
cnpdStatusLastUpdateTime.4 = 0
cnpdStatusLastUpdateTime.5 = 0
cnpdStatusLastUpdateTime.6 = 0
cnpdStatusLastUpdateTime.7 = 0
cnpdStatusLastUpdateTime.8 = 0
cnpdStatusLastUpdateTime.9 = 0
cnpdStatusLastUpdateTime.10 = 0
cnpdStatusLastUpdateTime.11 = 0
cnpdStatusLastUpdateTime.12 = 0
cnpdStatusLastUpdateTime.13 = 1111
cnpdStatusLastUpdateTime.14 = 0
cnpdStatusLastUpdateTime.15 = 0
cnpdStatusLastUpdateTime.16 = 0
cnpdStatusLastUpdateTime.17 = 0
cnpdStatusLastUpdateTime.18 = 0
cnpdStatusLastUpdateTime.19 = 0
cnpdStatusLastUpdateTime.20 = 0
cnpdStatusLastUpdateTime.21 = 0
cnpdStatusLastUpdateTime.22 = 0
cnpdStatusLastUpdateTime.23 = 0
cnpdStatusLastUpdateTime.24 = 0
cnpdStatusLastUpdateTime.25 = 0
cnpdStatusLastUpdateTime.26 = 0
cnpdStatusLastUpdateTime.27 = 0
cnpdStatusLastUpdateTime.28 = 0
cnpdStatusLastUpdateTime.29 = 0
cnpdStatusLastUpdateTime.30 = 0
cnpdStatusLastUpdateTime.31 = 0
cnpdStatusLastUpdateTime.32 = 0
cnpdStatusLastUpdateTime.33 = 0
cnpdStatusLastUpdateTime.34 = 0
cnpdStatusLastUpdateTime.35 = 0

Searching the All Stats Table

The All Stats Table stores all of the statistics currently stored by NBAR Protocol Discovery. If many interfaces have enabled NBAR Protocol Discovery, the All Stats Table can get incredibly large. In the following example, NBAR Protocol Discovery is enabled on one interface only.

>$ getmany -v2c a.b.c.d public cnpdAllStats

cnpdAllStatsProtocolName.13.1 = rtp
cnpdAllStatsProtocolName.13.2 = fasttrack
cnpdAllStatsProtocolName.13.3 = napster
cnpdAllStatsProtocolName.13.4 = citrix
cnpdAllStatsProtocolName.13.5 = http
cnpdAllStatsProtocolName.13.6 = custom-10
cnpdAllStatsProtocolName.13.7 = custom-09
cnpdAllStatsProtocolName.13.8 = custom-08
cnpdAllStatsProtocolName.13.9 = custom-07
cnpdAllStatsProtocolName.13.10 = custom-06
cnpdAllStatsProtocolName.13.11 = custom-05
cnpdAllStatsProtocolName.13.12 = custom-04
cnpdAllStatsProtocolName.13.13 = custom-03
cnpdAllStatsProtocolName.13.14 = custom-02
cnpdAllStatsProtocolName.13.15 = custom-01
cnpdAllStatsProtocolName.13.16 = gnutella
cnpdAllStatsProtocolName.13.17 = streamwork
cnpdAllStatsProtocolName.13.18 = sunrpc
cnpdAllStatsProtocolName.13.19 = netshow
cnpdAllStatsProtocolName.13.20 = rcmd
cnpdAllStatsProtocolName.13.21 = sqlnet
cnpdAllStatsProtocolName.13.22 = vdolive
cnpdAllStatsProtocolName.13.23 = realaudio
cnpdAllStatsProtocolName.13.24 = exchange
cnpdAllStatsProtocolName.13.25 = tftp
cnpdAllStatsProtocolName.13.26 = novadigm
cnpdAllStatsProtocolName.13.27 = printer
cnpdAllStatsProtocolName.13.28 = xwindows
cnpdAllStatsProtocolName.13.29 = secure-ftp
cnpdAllStatsProtocolName.13.30 = secure-telnet
cnpdAllStatsProtocolName.13.31 = telnet
cnpdAllStatsProtocolName.13.32 = syslog
cnpdAllStatsProtocolName.13.33 = ssh
cnpdAllStatsProtocolName.13.34 = socks
cnpdAllStatsProtocolName.13.35 = snmp
cnpdAllStatsProtocolName.13.36 = smtp
cnpdAllStatsProtocolName.13.37 = rsvp
cnpdAllStatsProtocolName.13.38 = rip
cnpdAllStatsProtocolName.13.39 = pptp
cnpdAllStatsProtocolName.13.40 = secure-pop3
cnpdAllStatsProtocolName.13.41 = pop3
cnpdAllStatsProtocolName.13.42 = pcanywhere
cnpdAllStatsProtocolName.13.43 = ntp
cnpdAllStatsProtocolName.13.44 = notes
cnpdAllStatsProtocolName.13.45 = secure-nntp
cnpdAllStatsProtocolName.13.46 = nntp
cnpdAllStatsProtocolName.13.47 = nfs
cnpdAllStatsProtocolName.13.48 = netbios
cnpdAllStatsProtocolName.13.49 = sqlserver
cnpdAllStatsProtocolName.13.50 = secure-ldap
cnpdAllStatsProtocolName.13.51 = ldap
cnpdAllStatsProtocolName.13.52 = l2tp
cnpdAllStatsProtocolName.13.53 = kerberos
cnpdAllStatsProtocolName.13.54 = secure-irc
cnpdAllStatsProtocolName.13.55 = irc
cnpdAllStatsProtocolName.13.56 = secure-imap
cnpdAllStatsProtocolName.13.57 = imap
cnpdAllStatsProtocolName.13.58 = secure-http
cnpdAllStatsProtocolName.13.59 = gopher
cnpdAllStatsProtocolName.13.60 = finger
cnpdAllStatsProtocolName.13.61 = dns
cnpdAllStatsProtocolName.13.62 = dhcp
cnpdAllStatsProtocolName.13.63 = cuseeme
cnpdAllStatsProtocolName.13.64 = bgp
cnpdAllStatsProtocolName.13.65 = ipsec
cnpdAllStatsProtocolName.13.66 = ipinip
cnpdAllStatsProtocolName.13.67 = eigrp
cnpdAllStatsProtocolName.13.68 = icmp
cnpdAllStatsProtocolName.13.69 = gre
cnpdAllStatsProtocolName.13.70 = egp
cnpdAllStatsProtocolName.13.71 = ftp
cnpdAllStatsProtocolName.13.72 = unknown
cnpdAllStatsInPkts.13.1 = 0
cnpdAllStatsInPkts.13.2 = 0
cnpdAllStatsInPkts.13.3 = 108392
cnpdAllStatsInPkts.13.4 = 0
cnpdAllStatsInPkts.13.5 = 3681501
cnpdAllStatsInPkts.13.6 = 0
cnpdAllStatsInPkts.13.7 = 0
cnpdAllStatsInPkts.13.8 = 0
cnpdAllStatsInPkts.13.9 = 0
cnpdAllStatsInPkts.13.10 = 0
cnpdAllStatsInPkts.13.11 = 0
cnpdAllStatsInPkts.13.12 = 0
cnpdAllStatsInPkts.13.13 = 0
cnpdAllStatsInPkts.13.14 = 0
cnpdAllStatsInPkts.13.15 = 0
cnpdAllStatsInPkts.13.16 = 0
cnpdAllStatsInPkts.13.17 = 0
cnpdAllStatsInPkts.13.18 = 0
cnpdAllStatsInPkts.13.19 = 0
cnpdAllStatsInPkts.13.20 = 0
cnpdAllStatsInPkts.13.21 = 0
cnpdAllStatsInPkts.13.22 = 0
cnpdAllStatsInPkts.13.23 = 1348424
cnpdAllStatsInPkts.13.24 = 0
cnpdAllStatsInPkts.13.25 = 0
cnpdAllStatsInPkts.13.26 = 0
cnpdAllStatsInPkts.13.27 = 0
cnpdAllStatsInPkts.13.28 = 0
cnpdAllStatsInPkts.13.29 = 0
cnpdAllStatsInPkts.13.30 = 0
cnpdAllStatsInPkts.13.31 = 0
cnpdAllStatsInPkts.13.32 = 0
cnpdAllStatsInPkts.13.33 = 0
cnpdAllStatsInPkts.13.34 = 0
cnpdAllStatsInPkts.13.35 = 0
cnpdAllStatsInPkts.13.36 = 106086
cnpdAllStatsInPkts.13.37 = 0
cnpdAllStatsInPkts.13.38 = 0
cnpdAllStatsInPkts.13.39 = 0
cnpdAllStatsInPkts.13.40 = 0
cnpdAllStatsInPkts.13.41 = 17941
cnpdAllStatsInPkts.13.42 = 0
cnpdAllStatsInPkts.13.43 = 0
cnpdAllStatsInPkts.13.44 = 0
cnpdAllStatsInPkts.13.45 = 0
cnpdAllStatsInPkts.13.46 = 562337
cnpdAllStatsInPkts.13.47 = 0
cnpdAllStatsInPkts.13.48 = 81449
cnpdAllStatsInPkts.13.49 = 0
cnpdAllStatsInPkts.13.50 = 0
cnpdAllStatsInPkts.13.51 = 366922
cnpdAllStatsInPkts.13.52 = 0
cnpdAllStatsInPkts.13.53 = 0
cnpdAllStatsInPkts.13.54 = 0
cnpdAllStatsInPkts.13.55 = 0
cnpdAllStatsInPkts.13.56 = 0
cnpdAllStatsInPkts.13.57 = 0
cnpdAllStatsInPkts.13.58 = 0
cnpdAllStatsInPkts.13.59 = 17318
cnpdAllStatsInPkts.13.60 = 0
cnpdAllStatsInPkts.13.61 = 36182
cnpdAllStatsInPkts.13.62 = 12134
cnpdAllStatsInPkts.13.63 = 0
cnpdAllStatsInPkts.13.64 = 0
cnpdAllStatsInPkts.13.65 = 0
cnpdAllStatsInPkts.13.66 = 0
cnpdAllStatsInPkts.13.67 = 0
cnpdAllStatsInPkts.13.68 = 9046
cnpdAllStatsInPkts.13.69 = 0
cnpdAllStatsInPkts.13.70 = 0
cnpdAllStatsInPkts.13.71 = 311978
cnpdAllStatsInPkts.13.72 = 27150
cnpdAllStatsOutPkts.13.1 = 0
cnpdAllStatsOutPkts.13.2 = 0
cnpdAllStatsOutPkts.13.3 = 0
cnpdAllStatsOutPkts.13.4 = 0
cnpdAllStatsOutPkts.13.5 = 0
cnpdAllStatsOutPkts.13.6 = 0
cnpdAllStatsOutPkts.13.7 = 0
cnpdAllStatsOutPkts.13.8 = 0
cnpdAllStatsOutPkts.13.9 = 0
cnpdAllStatsOutPkts.13.10 = 0
cnpdAllStatsOutPkts.13.11 = 0
cnpdAllStatsOutPkts.13.12 = 0
cnpdAllStatsOutPkts.13.13 = 0
cnpdAllStatsOutPkts.13.14 = 0
cnpdAllStatsOutPkts.13.15 = 0
cnpdAllStatsOutPkts.13.16 = 0
cnpdAllStatsOutPkts.13.17 = 0
cnpdAllStatsOutPkts.13.18 = 0
cnpdAllStatsOutPkts.13.19 = 0
cnpdAllStatsOutPkts.13.20 = 0
cnpdAllStatsOutPkts.13.21 = 0
cnpdAllStatsOutPkts.13.22 = 0
cnpdAllStatsOutPkts.13.23 = 0
cnpdAllStatsOutPkts.13.24 = 0
cnpdAllStatsOutPkts.13.25 = 0
cnpdAllStatsOutPkts.13.26 = 0
cnpdAllStatsOutPkts.13.27 = 0
cnpdAllStatsOutPkts.13.28 = 0
cnpdAllStatsOutPkts.13.29 = 0
cnpdAllStatsOutPkts.13.30 = 0
cnpdAllStatsOutPkts.13.31 = 0
cnpdAllStatsOutPkts.13.32 = 0
cnpdAllStatsOutPkts.13.33 = 0
cnpdAllStatsOutPkts.13.34 = 0
cnpdAllStatsOutPkts.13.35 = 0
cnpdAllStatsOutPkts.13.36 = 0
cnpdAllStatsOutPkts.13.37 = 0
cnpdAllStatsOutPkts.13.38 = 0
cnpdAllStatsOutPkts.13.39 = 0
cnpdAllStatsOutPkts.13.40 = 0
cnpdAllStatsOutPkts.13.41 = 0
cnpdAllStatsOutPkts.13.42 = 0
cnpdAllStatsOutPkts.13.43 = 0
cnpdAllStatsOutPkts.13.44 = 0
cnpdAllStatsOutPkts.13.45 = 0
cnpdAllStatsOutPkts.13.46 = 0
cnpdAllStatsOutPkts.13.47 = 0
cnpdAllStatsOutPkts.13.48 = 0
cnpdAllStatsOutPkts.13.49 = 0
cnpdAllStatsOutPkts.13.50 = 0
cnpdAllStatsOutPkts.13.51 = 0
cnpdAllStatsOutPkts.13.52 = 0
cnpdAllStatsOutPkts.13.53 = 0
cnpdAllStatsOutPkts.13.54 = 0
cnpdAllStatsOutPkts.13.55 = 0
cnpdAllStatsOutPkts.13.56 = 0
cnpdAllStatsOutPkts.13.57 = 0
cnpdAllStatsOutPkts.13.58 = 0
cnpdAllStatsOutPkts.13.59 = 0
cnpdAllStatsOutPkts.13.60 = 0
cnpdAllStatsOutPkts.13.61 = 0
cnpdAllStatsOutPkts.13.62 = 0
cnpdAllStatsOutPkts.13.63 = 0
cnpdAllStatsOutPkts.13.64 = 0
cnpdAllStatsOutPkts.13.65 = 0
cnpdAllStatsOutPkts.13.66 = 0
cnpdAllStatsOutPkts.13.67 = 0
cnpdAllStatsOutPkts.13.68 = 0
cnpdAllStatsOutPkts.13.69 = 0
cnpdAllStatsOutPkts.13.70 = 0
cnpdAllStatsOutPkts.13.71 = 0
cnpdAllStatsOutPkts.13.72 = 0
cnpdAllStatsInBytes.13.1 = 0
cnpdAllStatsInBytes.13.2 = 0
cnpdAllStatsInBytes.13.3 = 20157945
cnpdAllStatsInBytes.13.4 = 0
cnpdAllStatsInBytes.13.5 = 2255639168
cnpdAllStatsInBytes.13.6 = 0
cnpdAllStatsInBytes.13.7 = 0
cnpdAllStatsInBytes.13.8 = 0
cnpdAllStatsInBytes.13.9 = 0
cnpdAllStatsInBytes.13.10 = 0
cnpdAllStatsInBytes.13.11 = 0
cnpdAllStatsInBytes.13.12 = 0
cnpdAllStatsInBytes.13.13 = 0
cnpdAllStatsInBytes.13.14 = 0
cnpdAllStatsInBytes.13.15 = 0
cnpdAllStatsInBytes.13.16 = 0
cnpdAllStatsInBytes.13.17 = 0
cnpdAllStatsInBytes.13.18 = 0
cnpdAllStatsInBytes.13.19 = 0
cnpdAllStatsInBytes.13.20 = 0
cnpdAllStatsInBytes.13.21 = 0
cnpdAllStatsInBytes.13.22 = 0
cnpdAllStatsInBytes.13.23 = 464526676
cnpdAllStatsInBytes.13.24 = 0
cnpdAllStatsInBytes.13.25 = 0
cnpdAllStatsInBytes.13.26 = 0
cnpdAllStatsInBytes.13.27 = 0
cnpdAllStatsInBytes.13.28 = 0
cnpdAllStatsInBytes.13.29 = 0
cnpdAllStatsInBytes.13.30 = 0
cnpdAllStatsInBytes.13.31 = 0
cnpdAllStatsInBytes.13.32 = 0
cnpdAllStatsInBytes.13.33 = 0
cnpdAllStatsInBytes.13.34 = 0
cnpdAllStatsInBytes.13.35 = 0
cnpdAllStatsInBytes.13.36 = 10280188
cnpdAllStatsInBytes.13.37 = 0
cnpdAllStatsInBytes.13.38 = 0
cnpdAllStatsInBytes.13.39 = 0
cnpdAllStatsInBytes.13.40 = 0
cnpdAllStatsInBytes.13.41 = 1298760
cnpdAllStatsInBytes.13.42 = 0
cnpdAllStatsInBytes.13.43 = 0
cnpdAllStatsInBytes.13.44 = 0
cnpdAllStatsInBytes.13.45 = 0
cnpdAllStatsInBytes.13.46 = 149193275
cnpdAllStatsInBytes.13.47 = 0
cnpdAllStatsInBytes.13.48 = 14181177
cnpdAllStatsInBytes.13.49 = 0
cnpdAllStatsInBytes.13.50 = 0
cnpdAllStatsInBytes.13.51 = 25078176
cnpdAllStatsInBytes.13.52 = 0
cnpdAllStatsInBytes.13.53 = 0
cnpdAllStatsInBytes.13.54 = 0
cnpdAllStatsInBytes.13.55 = 0
cnpdAllStatsInBytes.13.56 = 0
cnpdAllStatsInBytes.13.57 = 0
cnpdAllStatsInBytes.13.58 = 0
cnpdAllStatsInBytes.13.59 = 1128158
cnpdAllStatsInBytes.13.60 = 0
cnpdAllStatsInBytes.13.61 = 5164765
cnpdAllStatsInBytes.13.62 = 4214412
cnpdAllStatsInBytes.13.63 = 0
cnpdAllStatsInBytes.13.64 = 0
cnpdAllStatsInBytes.13.65 = 0
cnpdAllStatsInBytes.13.66 = 0
cnpdAllStatsInBytes.13.67 = 0
cnpdAllStatsInBytes.13.68 = 633220
cnpdAllStatsInBytes.13.69 = 0
cnpdAllStatsInBytes.13.70 = 0
cnpdAllStatsInBytes.13.71 = 21057032
cnpdAllStatsInBytes.13.72 = 2339425
cnpdAllStatsOutBytes.13.1 = 0
cnpdAllStatsOutBytes.13.2 = 0
cnpdAllStatsOutBytes.13.3 = 0
cnpdAllStatsOutBytes.13.4 = 0
cnpdAllStatsOutBytes.13.5 = 0
cnpdAllStatsOutBytes.13.6 = 0
cnpdAllStatsOutBytes.13.7 = 0
cnpdAllStatsOutBytes.13.8 = 0
cnpdAllStatsOutBytes.13.9 = 0
cnpdAllStatsOutBytes.13.10 = 0
cnpdAllStatsOutBytes.13.11 = 0
cnpdAllStatsOutBytes.13.12 = 0
cnpdAllStatsOutBytes.13.13 = 0
cnpdAllStatsOutBytes.13.14 = 0
cnpdAllStatsOutBytes.13.15 = 0
cnpdAllStatsOutBytes.13.16 = 0
cnpdAllStatsOutBytes.13.17 = 0
cnpdAllStatsOutBytes.13.18 = 0
cnpdAllStatsOutBytes.13.19 = 0
cnpdAllStatsOutBytes.13.20 = 0
cnpdAllStatsOutBytes.13.21 = 0
cnpdAllStatsOutBytes.13.22 = 0
cnpdAllStatsOutBytes.13.23 = 0
cnpdAllStatsOutBytes.13.24 = 0
cnpdAllStatsOutBytes.13.25 = 0
cnpdAllStatsOutBytes.13.26 = 0
cnpdAllStatsOutBytes.13.27 = 0
cnpdAllStatsOutBytes.13.28 = 0
cnpdAllStatsOutBytes.13.29 = 0
cnpdAllStatsOutBytes.13.30 = 0
cnpdAllStatsOutBytes.13.31 = 0
cnpdAllStatsOutBytes.13.32 = 0
cnpdAllStatsOutBytes.13.33 = 0
cnpdAllStatsOutBytes.13.34 = 0
cnpdAllStatsOutBytes.13.35 = 0
cnpdAllStatsOutBytes.13.36 = 0
cnpdAllStatsOutBytes.13.37 = 0
cnpdAllStatsOutBytes.13.38 = 0
cnpdAllStatsOutBytes.13.39 = 0
cnpdAllStatsOutBytes.13.40 = 0
cnpdAllStatsOutBytes.13.41 = 0
cnpdAllStatsOutBytes.13.42 = 0
cnpdAllStatsOutBytes.13.43 = 0
cnpdAllStatsOutBytes.13.44 = 0
cnpdAllStatsOutBytes.13.45 = 0
cnpdAllStatsOutBytes.13.46 = 0
cnpdAllStatsOutBytes.13.47 = 0
cnpdAllStatsOutBytes.13.48 = 0
cnpdAllStatsOutBytes.13.49 = 0
cnpdAllStatsOutBytes.13.50 = 0
cnpdAllStatsOutBytes.13.51 = 0
cnpdAllStatsOutBytes.13.52 = 0
cnpdAllStatsOutBytes.13.53 = 0
cnpdAllStatsOutBytes.13.54 = 0
cnpdAllStatsOutBytes.13.55 = 0
cnpdAllStatsOutBytes.13.56 = 0
cnpdAllStatsOutBytes.13.57 = 0
cnpdAllStatsOutBytes.13.58 = 0
cnpdAllStatsOutBytes.13.59 = 0
cnpdAllStatsOutBytes.13.60 = 0
cnpdAllStatsOutBytes.13.61 = 0
cnpdAllStatsOutBytes.13.62 = 0
cnpdAllStatsOutBytes.13.63 = 0
cnpdAllStatsOutBytes.13.64 = 0
cnpdAllStatsOutBytes.13.65 = 0
cnpdAllStatsOutBytes.13.66 = 0
cnpdAllStatsOutBytes.13.67 = 0
cnpdAllStatsOutBytes.13.68 = 0
cnpdAllStatsOutBytes.13.69 = 0
cnpdAllStatsOutBytes.13.70 = 0
cnpdAllStatsOutBytes.13.71 = 0
cnpdAllStatsOutBytes.13.72 = 0
cnpdAllStatsHCInPkts.13.1 = 0x000000000
cnpdAllStatsHCInPkts.13.2 = 0x000000000
cnpdAllStatsHCInPkts.13.3 = 0x00001a768
cnpdAllStatsHCInPkts.13.4 = 0x000000000
cnpdAllStatsHCInPkts.13.5 = 0x000382cdd
cnpdAllStatsHCInPkts.13.6 = 0x000000000
cnpdAllStatsHCInPkts.13.7 = 0x000000000
cnpdAllStatsHCInPkts.13.8 = 0x000000000
cnpdAllStatsHCInPkts.13.9 = 0x000000000
cnpdAllStatsHCInPkts.13.10 = 0x000000000
cnpdAllStatsHCInPkts.13.11 = 0x000000000
cnpdAllStatsHCInPkts.13.12 = 0x000000000
cnpdAllStatsHCInPkts.13.13 = 0x000000000
cnpdAllStatsHCInPkts.13.14 = 0x000000000
cnpdAllStatsHCInPkts.13.15 = 0x000000000
cnpdAllStatsHCInPkts.13.16 = 0x000000000
cnpdAllStatsHCInPkts.13.17 = 0x000000000
cnpdAllStatsHCInPkts.13.18 = 0x000000000
cnpdAllStatsHCInPkts.13.19 = 0x000000000
cnpdAllStatsHCInPkts.13.20 = 0x000000000
cnpdAllStatsHCInPkts.13.21 = 0x000000000
cnpdAllStatsHCInPkts.13.22 = 0x000000000
cnpdAllStatsHCInPkts.13.23 = 0x000149348
cnpdAllStatsHCInPkts.13.24 = 0x000000000
cnpdAllStatsHCInPkts.13.25 = 0x000000000
cnpdAllStatsHCInPkts.13.26 = 0x000000000
cnpdAllStatsHCInPkts.13.27 = 0x000000000
cnpdAllStatsHCInPkts.13.28 = 0x000000000
cnpdAllStatsHCInPkts.13.29 = 0x000000000
cnpdAllStatsHCInPkts.13.30 = 0x000000000
cnpdAllStatsHCInPkts.13.31 = 0x000000000
cnpdAllStatsHCInPkts.13.32 = 0x000000000
cnpdAllStatsHCInPkts.13.33 = 0x000000000
cnpdAllStatsHCInPkts.13.34 = 0x000000000
cnpdAllStatsHCInPkts.13.35 = 0x000000000
cnpdAllStatsHCInPkts.13.36 = 0x000019e66
cnpdAllStatsHCInPkts.13.37 = 0x000000000
cnpdAllStatsHCInPkts.13.38 = 0x000000000
cnpdAllStatsHCInPkts.13.39 = 0x000000000
cnpdAllStatsHCInPkts.13.40 = 0x000000000
cnpdAllStatsHCInPkts.13.41 = 0x000004615
cnpdAllStatsHCInPkts.13.42 = 0x000000000
cnpdAllStatsHCInPkts.13.43 = 0x000000000
cnpdAllStatsHCInPkts.13.44 = 0x000000000
cnpdAllStatsHCInPkts.13.45 = 0x000000000
cnpdAllStatsHCInPkts.13.46 = 0x0000894a1
cnpdAllStatsHCInPkts.13.47 = 0x000000000
cnpdAllStatsHCInPkts.13.48 = 0x000013e29
cnpdAllStatsHCInPkts.13.49 = 0x000000000
cnpdAllStatsHCInPkts.13.50 = 0x000000000
cnpdAllStatsHCInPkts.13.51 = 0x00005994a
cnpdAllStatsHCInPkts.13.52 = 0x000000000
cnpdAllStatsHCInPkts.13.53 = 0x000000000
cnpdAllStatsHCInPkts.13.54 = 0x000000000
cnpdAllStatsHCInPkts.13.55 = 0x000000000
cnpdAllStatsHCInPkts.13.56 = 0x000000000
cnpdAllStatsHCInPkts.13.57 = 0x000000000
cnpdAllStatsHCInPkts.13.58 = 0x000000000
cnpdAllStatsHCInPkts.13.59 = 0x0000043a6
cnpdAllStatsHCInPkts.13.60 = 0x000000000
cnpdAllStatsHCInPkts.13.61 = 0x000008d56
cnpdAllStatsHCInPkts.13.62 = 0x000002f66
cnpdAllStatsHCInPkts.13.63 = 0x000000000
cnpdAllStatsHCInPkts.13.64 = 0x000000000
cnpdAllStatsHCInPkts.13.65 = 0x000000000
cnpdAllStatsHCInPkts.13.66 = 0x000000000
cnpdAllStatsHCInPkts.13.67 = 0x000000000
cnpdAllStatsHCInPkts.13.68 = 0x000002356
cnpdAllStatsHCInPkts.13.69 = 0x000000000
cnpdAllStatsHCInPkts.13.70 = 0x000000000
cnpdAllStatsHCInPkts.13.71 = 0x00004c2aa
cnpdAllStatsHCInPkts.13.72 = 0x000006a0e
cnpdAllStatsHCOutPkts.13.1 = 0x000000000
cnpdAllStatsHCOutPkts.13.2 = 0x000000000
cnpdAllStatsHCOutPkts.13.3 = 0x000000000
cnpdAllStatsHCOutPkts.13.4 = 0x000000000
cnpdAllStatsHCOutPkts.13.5 = 0x000000000
cnpdAllStatsHCOutPkts.13.6 = 0x000000000
cnpdAllStatsHCOutPkts.13.7 = 0x000000000
cnpdAllStatsHCOutPkts.13.8 = 0x000000000
cnpdAllStatsHCOutPkts.13.9 = 0x000000000
cnpdAllStatsHCOutPkts.13.10 = 0x000000000
cnpdAllStatsHCOutPkts.13.11 = 0x000000000
cnpdAllStatsHCOutPkts.13.12 = 0x000000000
cnpdAllStatsHCOutPkts.13.13 = 0x000000000
cnpdAllStatsHCOutPkts.13.14 = 0x000000000
cnpdAllStatsHCOutPkts.13.15 = 0x000000000
cnpdAllStatsHCOutPkts.13.16 = 0x000000000
cnpdAllStatsHCOutPkts.13.17 = 0x000000000
cnpdAllStatsHCOutPkts.13.18 = 0x000000000
cnpdAllStatsHCOutPkts.13.19 = 0x000000000
cnpdAllStatsHCOutPkts.13.20 = 0x000000000
cnpdAllStatsHCOutPkts.13.21 = 0x000000000
cnpdAllStatsHCOutPkts.13.22 = 0x000000000
cnpdAllStatsHCOutPkts.13.23 = 0x000000000
cnpdAllStatsHCOutPkts.13.24 = 0x000000000
cnpdAllStatsHCOutPkts.13.25 = 0x000000000
cnpdAllStatsHCOutPkts.13.26 = 0x000000000
cnpdAllStatsHCOutPkts.13.27 = 0x000000000
cnpdAllStatsHCOutPkts.13.28 = 0x000000000
cnpdAllStatsHCOutPkts.13.29 = 0x000000000
cnpdAllStatsHCOutPkts.13.30 = 0x000000000
cnpdAllStatsHCOutPkts.13.31 = 0x000000000
cnpdAllStatsHCOutPkts.13.32 = 0x000000000
cnpdAllStatsHCOutPkts.13.33 = 0x000000000
cnpdAllStatsHCOutPkts.13.34 = 0x000000000
cnpdAllStatsHCOutPkts.13.35 = 0x000000000
cnpdAllStatsHCOutPkts.13.36 = 0x000000000
cnpdAllStatsHCOutPkts.13.37 = 0x000000000
cnpdAllStatsHCOutPkts.13.38 = 0x000000000
cnpdAllStatsHCOutPkts.13.39 = 0x000000000
cnpdAllStatsHCOutPkts.13.40 = 0x000000000
cnpdAllStatsHCOutPkts.13.41 = 0x000000000
cnpdAllStatsHCOutPkts.13.42 = 0x000000000
cnpdAllStatsHCOutPkts.13.43 = 0x000000000
cnpdAllStatsHCOutPkts.13.44 = 0x000000000
cnpdAllStatsHCOutPkts.13.45 = 0x000000000
cnpdAllStatsHCOutPkts.13.46 = 0x000000000
cnpdAllStatsHCOutPkts.13.47 = 0x000000000
cnpdAllStatsHCOutPkts.13.48 = 0x000000000
cnpdAllStatsHCOutPkts.13.49 = 0x000000000
cnpdAllStatsHCOutPkts.13.50 = 0x000000000
cnpdAllStatsHCOutPkts.13.51 = 0x000000000
cnpdAllStatsHCOutPkts.13.52 = 0x000000000
cnpdAllStatsHCOutPkts.13.53 = 0x000000000
cnpdAllStatsHCOutPkts.13.54 = 0x000000000
cnpdAllStatsHCOutPkts.13.55 = 0x000000000
cnpdAllStatsHCOutPkts.13.56 = 0x000000000
cnpdAllStatsHCOutPkts.13.57 = 0x000000000
cnpdAllStatsHCOutPkts.13.58 = 0x000000000
cnpdAllStatsHCOutPkts.13.59 = 0x000000000
cnpdAllStatsHCOutPkts.13.60 = 0x000000000
cnpdAllStatsHCOutPkts.13.61 = 0x000000000
cnpdAllStatsHCOutPkts.13.62 = 0x000000000
cnpdAllStatsHCOutPkts.13.63 = 0x000000000
cnpdAllStatsHCOutPkts.13.64 = 0x000000000
cnpdAllStatsHCOutPkts.13.65 = 0x000000000
cnpdAllStatsHCOutPkts.13.66 = 0x000000000
cnpdAllStatsHCOutPkts.13.67 = 0x000000000
cnpdAllStatsHCOutPkts.13.68 = 0x000000000
cnpdAllStatsHCOutPkts.13.69 = 0x000000000
cnpdAllStatsHCOutPkts.13.70 = 0x000000000
cnpdAllStatsHCOutPkts.13.71 = 0x000000000
cnpdAllStatsHCOutPkts.13.72 = 0x000000000
cnpdAllStatsHCInBytes.13.1 = 0x000000000
cnpdAllStatsHCInBytes.13.2 = 0x000000000
cnpdAllStatsHCInBytes.13.3 = 0x0013395f9
cnpdAllStatsHCInBytes.13.4 = 0x000000000
cnpdAllStatsHCInBytes.13.5 = 0x086725280
cnpdAllStatsHCInBytes.13.6 = 0x000000000
cnpdAllStatsHCInBytes.13.7 = 0x000000000
cnpdAllStatsHCInBytes.13.8 = 0x000000000
cnpdAllStatsHCInBytes.13.9 = 0x000000000
cnpdAllStatsHCInBytes.13.10 = 0x000000000
cnpdAllStatsHCInBytes.13.11 = 0x000000000
cnpdAllStatsHCInBytes.13.12 = 0x000000000
cnpdAllStatsHCInBytes.13.13 = 0x000000000
cnpdAllStatsHCInBytes.13.14 = 0x000000000
cnpdAllStatsHCInBytes.13.15 = 0x000000000
cnpdAllStatsHCInBytes.13.16 = 0x000000000
cnpdAllStatsHCInBytes.13.17 = 0x000000000
cnpdAllStatsHCInBytes.13.18 = 0x000000000
cnpdAllStatsHCInBytes.13.19 = 0x000000000
cnpdAllStatsHCInBytes.13.20 = 0x000000000
cnpdAllStatsHCInBytes.13.21 = 0x000000000
cnpdAllStatsHCInBytes.13.22 = 0x000000000
cnpdAllStatsHCInBytes.13.23 = 0x01bb01d54
cnpdAllStatsHCInBytes.13.24 = 0x000000000
cnpdAllStatsHCInBytes.13.25 = 0x000000000
cnpdAllStatsHCInBytes.13.26 = 0x000000000
cnpdAllStatsHCInBytes.13.27 = 0x000000000
cnpdAllStatsHCInBytes.13.28 = 0x000000000
cnpdAllStatsHCInBytes.13.29 = 0x000000000
cnpdAllStatsHCInBytes.13.30 = 0x000000000
cnpdAllStatsHCInBytes.13.31 = 0x000000000
cnpdAllStatsHCInBytes.13.32 = 0x000000000
cnpdAllStatsHCInBytes.13.33 = 0x000000000
cnpdAllStatsHCInBytes.13.34 = 0x000000000
cnpdAllStatsHCInBytes.13.35 = 0x000000000
cnpdAllStatsHCInBytes.13.36 = 0x0009cdcfc
cnpdAllStatsHCInBytes.13.37 = 0x000000000
cnpdAllStatsHCInBytes.13.38 = 0x000000000
cnpdAllStatsHCInBytes.13.39 = 0x000000000
cnpdAllStatsHCInBytes.13.40 = 0x000000000
cnpdAllStatsHCInBytes.13.41 = 0x00013d148
cnpdAllStatsHCInBytes.13.42 = 0x000000000
cnpdAllStatsHCInBytes.13.43 = 0x000000000
cnpdAllStatsHCInBytes.13.44 = 0x000000000
cnpdAllStatsHCInBytes.13.45 = 0x000000000
cnpdAllStatsHCInBytes.13.46 = 0x008e4823b
cnpdAllStatsHCInBytes.13.47 = 0x000000000
cnpdAllStatsHCInBytes.13.48 = 0x000d86339
cnpdAllStatsHCInBytes.13.49 = 0x000000000
cnpdAllStatsHCInBytes.13.50 = 0x000000000
cnpdAllStatsHCInBytes.13.51 = 0x0017ea9a0
cnpdAllStatsHCInBytes.13.52 = 0x000000000
cnpdAllStatsHCInBytes.13.53 = 0x000000000
cnpdAllStatsHCInBytes.13.54 = 0x000000000
cnpdAllStatsHCInBytes.13.55 = 0x000000000
cnpdAllStatsHCInBytes.13.56 = 0x000000000
cnpdAllStatsHCInBytes.13.57 = 0x000000000
cnpdAllStatsHCInBytes.13.58 = 0x000000000
cnpdAllStatsHCInBytes.13.59 = 0x0001136de
cnpdAllStatsHCInBytes.13.60 = 0x000000000
cnpdAllStatsHCInBytes.13.61 = 0x0004ecedd
cnpdAllStatsHCInBytes.13.62 = 0x000404e8c
cnpdAllStatsHCInBytes.13.63 = 0x000000000
cnpdAllStatsHCInBytes.13.64 = 0x000000000
cnpdAllStatsHCInBytes.13.65 = 0x000000000
cnpdAllStatsHCInBytes.13.66 = 0x000000000
cnpdAllStatsHCInBytes.13.67 = 0x000000000
cnpdAllStatsHCInBytes.13.68 = 0x00009a984
cnpdAllStatsHCInBytes.13.69 = 0x000000000
cnpdAllStatsHCInBytes.13.70 = 0x000000000
cnpdAllStatsHCInBytes.13.71 = 0x001414e08
cnpdAllStatsHCInBytes.13.72 = 0x00023b261
cnpdAllStatsHCOutBytes.13.1 = 0x000000000
cnpdAllStatsHCOutBytes.13.2 = 0x000000000
cnpdAllStatsHCOutBytes.13.3 = 0x000000000
cnpdAllStatsHCOutBytes.13.4 = 0x000000000
cnpdAllStatsHCOutBytes.13.5 = 0x000000000
cnpdAllStatsHCOutBytes.13.6 = 0x000000000
cnpdAllStatsHCOutBytes.13.7 = 0x000000000
cnpdAllStatsHCOutBytes.13.8 = 0x000000000
cnpdAllStatsHCOutBytes.13.9 = 0x000000000
cnpdAllStatsHCOutBytes.13.10 = 0x000000000
cnpdAllStatsHCOutBytes.13.11 = 0x000000000
cnpdAllStatsHCOutBytes.13.12 = 0x000000000
cnpdAllStatsHCOutBytes.13.13 = 0x000000000
cnpdAllStatsHCOutBytes.13.14 = 0x000000000
cnpdAllStatsHCOutBytes.13.15 = 0x000000000
cnpdAllStatsHCOutBytes.13.16 = 0x000000000
cnpdAllStatsHCOutBytes.13.17 = 0x000000000
cnpdAllStatsHCOutBytes.13.18 = 0x000000000
cnpdAllStatsHCOutBytes.13.19 = 0x000000000
cnpdAllStatsHCOutBytes.13.20 = 0x000000000
cnpdAllStatsHCOutBytes.13.21 = 0x000000000
cnpdAllStatsHCOutBytes.13.22 = 0x000000000
cnpdAllStatsHCOutBytes.13.23 = 0x000000000
cnpdAllStatsHCOutBytes.13.24 = 0x000000000
cnpdAllStatsHCOutBytes.13.25 = 0x000000000
cnpdAllStatsHCOutBytes.13.26 = 0x000000000
cnpdAllStatsHCOutBytes.13.27 = 0x000000000
cnpdAllStatsHCOutBytes.13.28 = 0x000000000
cnpdAllStatsHCOutBytes.13.29 = 0x000000000
cnpdAllStatsHCOutBytes.13.30 = 0x000000000
cnpdAllStatsHCOutBytes.13.31 = 0x000000000
cnpdAllStatsHCOutBytes.13.32 = 0x000000000
cnpdAllStatsHCOutBytes.13.33 = 0x000000000
cnpdAllStatsHCOutBytes.13.34 = 0x000000000
cnpdAllStatsHCOutBytes.13.35 = 0x000000000
cnpdAllStatsHCOutBytes.13.36 = 0x000000000
cnpdAllStatsHCOutBytes.13.37 = 0x000000000
cnpdAllStatsHCOutBytes.13.38 = 0x000000000
cnpdAllStatsHCOutBytes.13.39 = 0x000000000
cnpdAllStatsHCOutBytes.13.40 = 0x000000000
cnpdAllStatsHCOutBytes.13.41 = 0x000000000
cnpdAllStatsHCOutBytes.13.42 = 0x000000000
cnpdAllStatsHCOutBytes.13.43 = 0x000000000
cnpdAllStatsHCOutBytes.13.44 = 0x000000000
cnpdAllStatsHCOutBytes.13.45 = 0x000000000
cnpdAllStatsHCOutBytes.13.46 = 0x000000000
cnpdAllStatsHCOutBytes.13.47 = 0x000000000
cnpdAllStatsHCOutBytes.13.48 = 0x000000000
cnpdAllStatsHCOutBytes.13.49 = 0x000000000
cnpdAllStatsHCOutBytes.13.50 = 0x000000000
cnpdAllStatsHCOutBytes.13.51 = 0x000000000
cnpdAllStatsHCOutBytes.13.52 = 0x000000000
cnpdAllStatsHCOutBytes.13.53 = 0x000000000
cnpdAllStatsHCOutBytes.13.54 = 0x000000000
cnpdAllStatsHCOutBytes.13.55 = 0x000000000
cnpdAllStatsHCOutBytes.13.56 = 0x000000000
cnpdAllStatsHCOutBytes.13.57 = 0x000000000
cnpdAllStatsHCOutBytes.13.58 = 0x000000000
cnpdAllStatsHCOutBytes.13.59 = 0x000000000
cnpdAllStatsHCOutBytes.13.60 = 0x000000000
cnpdAllStatsHCOutBytes.13.61 = 0x000000000
cnpdAllStatsHCOutBytes.13.62 = 0x000000000
cnpdAllStatsHCOutBytes.13.63 = 0x000000000
cnpdAllStatsHCOutBytes.13.64 = 0x000000000
cnpdAllStatsHCOutBytes.13.65 = 0x000000000
cnpdAllStatsHCOutBytes.13.66 = 0x000000000
cnpdAllStatsHCOutBytes.13.67 = 0x000000000
cnpdAllStatsHCOutBytes.13.68 = 0x000000000
cnpdAllStatsHCOutBytes.13.69 = 0x000000000
cnpdAllStatsHCOutBytes.13.70 = 0x000000000
cnpdAllStatsHCOutBytes.13.71 = 0x000000000
cnpdAllStatsHCOutBytes.13.72 = 0x000000000
cnpdAllStatsInBitRate.13.1 = 0
cnpdAllStatsInBitRate.13.2 = 0
cnpdAllStatsInBitRate.13.3 = 0
cnpdAllStatsInBitRate.13.4 = 0
cnpdAllStatsInBitRate.13.5 = 0
cnpdAllStatsInBitRate.13.6 = 0
cnpdAllStatsInBitRate.13.7 = 0
cnpdAllStatsInBitRate.13.8 = 0
cnpdAllStatsInBitRate.13.9 = 0
cnpdAllStatsInBitRate.13.10 = 0
cnpdAllStatsInBitRate.13.11 = 0
cnpdAllStatsInBitRate.13.12 = 0
cnpdAllStatsInBitRate.13.13 = 0
cnpdAllStatsInBitRate.13.14 = 0
cnpdAllStatsInBitRate.13.15 = 0
cnpdAllStatsInBitRate.13.16 = 0
cnpdAllStatsInBitRate.13.17 = 0
cnpdAllStatsInBitRate.13.18 = 0
cnpdAllStatsInBitRate.13.19 = 0
cnpdAllStatsInBitRate.13.20 = 0
cnpdAllStatsInBitRate.13.21 = 0
cnpdAllStatsInBitRate.13.22 = 0
cnpdAllStatsInBitRate.13.23 = 0
cnpdAllStatsInBitRate.13.24 = 0
cnpdAllStatsInBitRate.13.25 = 0
cnpdAllStatsInBitRate.13.26 = 0
cnpdAllStatsInBitRate.13.27 = 0
cnpdAllStatsInBitRate.13.28 = 0
cnpdAllStatsInBitRate.13.29 = 0
cnpdAllStatsInBitRate.13.30 = 0
cnpdAllStatsInBitRate.13.31 = 0
cnpdAllStatsInBitRate.13.32 = 0
cnpdAllStatsInBitRate.13.33 = 0
cnpdAllStatsInBitRate.13.34 = 0
cnpdAllStatsInBitRate.13.35 = 0
cnpdAllStatsInBitRate.13.36 = 0
cnpdAllStatsInBitRate.13.37 = 0
cnpdAllStatsInBitRate.13.38 = 0
cnpdAllStatsInBitRate.13.39 = 0
cnpdAllStatsInBitRate.13.40 = 0
cnpdAllStatsInBitRate.13.41 = 0
cnpdAllStatsInBitRate.13.42 = 0
cnpdAllStatsInBitRate.13.43 = 0
cnpdAllStatsInBitRate.13.44 = 0
cnpdAllStatsInBitRate.13.45 = 0
cnpdAllStatsInBitRate.13.46 = 0
cnpdAllStatsInBitRate.13.47 = 0
cnpdAllStatsInBitRate.13.48 = 0
cnpdAllStatsInBitRate.13.49 = 0
cnpdAllStatsInBitRate.13.50 = 0
cnpdAllStatsInBitRate.13.51 = 0
cnpdAllStatsInBitRate.13.52 = 0
cnpdAllStatsInBitRate.13.53 = 0
cnpdAllStatsInBitRate.13.54 = 0
cnpdAllStatsInBitRate.13.55 = 0
cnpdAllStatsInBitRate.13.56 = 0
cnpdAllStatsInBitRate.13.57 = 0
cnpdAllStatsInBitRate.13.58 = 0
cnpdAllStatsInBitRate.13.59 = 0
cnpdAllStatsInBitRate.13.60 = 0
cnpdAllStatsInBitRate.13.61 = 0
cnpdAllStatsInBitRate.13.62 = 0
cnpdAllStatsInBitRate.13.63 = 0
cnpdAllStatsInBitRate.13.64 = 0
cnpdAllStatsInBitRate.13.65 = 0
cnpdAllStatsInBitRate.13.66 = 0
cnpdAllStatsInBitRate.13.67 = 0
cnpdAllStatsInBitRate.13.68 = 0
cnpdAllStatsInBitRate.13.69 = 0
cnpdAllStatsInBitRate.13.70 = 0
cnpdAllStatsInBitRate.13.71 = 0
cnpdAllStatsInBitRate.13.72 = 0
cnpdAllStatsOutBitRate.13.1 = 0
cnpdAllStatsOutBitRate.13.2 = 0
cnpdAllStatsOutBitRate.13.3 = 0
cnpdAllStatsOutBitRate.13.4 = 0
cnpdAllStatsOutBitRate.13.5 = 0
cnpdAllStatsOutBitRate.13.6 = 0
cnpdAllStatsOutBitRate.13.7 = 0
cnpdAllStatsOutBitRate.13.8 = 0
cnpdAllStatsOutBitRate.13.9 = 0
cnpdAllStatsOutBitRate.13.10 = 0
cnpdAllStatsOutBitRate.13.11 = 0
cnpdAllStatsOutBitRate.13.12 = 0
cnpdAllStatsOutBitRate.13.13 = 0
cnpdAllStatsOutBitRate.13.14 = 0
cnpdAllStatsOutBitRate.13.15 = 0
cnpdAllStatsOutBitRate.13.16 = 0
cnpdAllStatsOutBitRate.13.17 = 0
cnpdAllStatsOutBitRate.13.18 = 0
cnpdAllStatsOutBitRate.13.19 = 0
cnpdAllStatsOutBitRate.13.20 = 0
cnpdAllStatsOutBitRate.13.21 = 0
cnpdAllStatsOutBitRate.13.22 = 0
cnpdAllStatsOutBitRate.13.23 = 0
cnpdAllStatsOutBitRate.13.24 = 0
cnpdAllStatsOutBitRate.13.25 = 0
cnpdAllStatsOutBitRate.13.26 = 0
cnpdAllStatsOutBitRate.13.27 = 0
cnpdAllStatsOutBitRate.13.28 = 0
cnpdAllStatsOutBitRate.13.29 = 0
cnpdAllStatsOutBitRate.13.30 = 0
cnpdAllStatsOutBitRate.13.31 = 0
cnpdAllStatsOutBitRate.13.32 = 0
cnpdAllStatsOutBitRate.13.33 = 0
cnpdAllStatsOutBitRate.13.34 = 0
cnpdAllStatsOutBitRate.13.35 = 0
cnpdAllStatsOutBitRate.13.36 = 0
cnpdAllStatsOutBitRate.13.37 = 0
cnpdAllStatsOutBitRate.13.38 = 0
cnpdAllStatsOutBitRate.13.39 = 0
cnpdAllStatsOutBitRate.13.40 = 0
cnpdAllStatsOutBitRate.13.41 = 0
cnpdAllStatsOutBitRate.13.42 = 0
cnpdAllStatsOutBitRate.13.43 = 0
cnpdAllStatsOutBitRate.13.44 = 0
cnpdAllStatsOutBitRate.13.45 = 0
cnpdAllStatsOutBitRate.13.46 = 0
cnpdAllStatsOutBitRate.13.47 = 0
cnpdAllStatsOutBitRate.13.48 = 0
cnpdAllStatsOutBitRate.13.49 = 0
cnpdAllStatsOutBitRate.13.50 = 0
cnpdAllStatsOutBitRate.13.51 = 0
cnpdAllStatsOutBitRate.13.52 = 0
cnpdAllStatsOutBitRate.13.53 = 0
cnpdAllStatsOutBitRate.13.54 = 0
cnpdAllStatsOutBitRate.13.55 = 0
cnpdAllStatsOutBitRate.13.56 = 0
cnpdAllStatsOutBitRate.13.57 = 0
cnpdAllStatsOutBitRate.13.58 = 0
cnpdAllStatsOutBitRate.13.59 = 0
cnpdAllStatsOutBitRate.13.60 = 0
cnpdAllStatsOutBitRate.13.61 = 0
cnpdAllStatsOutBitRate.13.62 = 0
cnpdAllStatsOutBitRate.13.63 = 0
cnpdAllStatsOutBitRate.13.64 = 0
cnpdAllStatsOutBitRate.13.65 = 0
cnpdAllStatsOutBitRate.13.66 = 0
cnpdAllStatsOutBitRate.13.67 = 0
cnpdAllStatsOutBitRate.13.68 = 0
cnpdAllStatsOutBitRate.13.69 = 0
cnpdAllStatsOutBitRate.13.70 = 0
cnpdAllStatsOutBitRate.13.71 = 0
cnpdAllStatsOutBitRate.13.72 = 0

Creating Top-N Tables Using the NBAR Protocol Discovery MIB

The top-n functionality in the NBAR Protocol Discovery MIB involves two tables. The first table is a configuration table in which each row represents a group of objects that will create a unique top-n report. The other table is a Statistics Results Table that records the outputs of each row of the configuration table. The Statistics ResultsTable can be regenerated by the correct use of the rowStatus object in the configuration table.

Create a new TopNConfig Entry

>$ setany -v2c a.b.c.d public cnpdTopNConfigIfIndex.1 -i 13

cnpdTopNConfigIfIndex.1 = 13

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

cnpdTopNConfigIfIndex.1 = 13
cnpdTopNConfigStatsSelect.1 = byteCountSum(6)
cnpdTopNConfigSampleTime.1 = 0
cnpdTopNConfigRequestedSize.1 = 0
cnpdTopNConfigGrantedSize.1 = 0
cnpdTopNConfigTime.1 = 0
cnpdTopNConfigStatus.1 = notReady(3)

Change StatsSelect

>$ setany -v2c a.b.c.d public cnpdTopNConfigStatsSelect.1 -i 7

cnpdTopNConfigStatsSelect.1 = packetCountIn(7)

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

cnpdTopNConfigIfIndex.1 = 13
cnpdTopNConfigStatsSelect.1 = packetCountIn(7)
cnpdTopNConfigSampleTime.1 = 0
cnpdTopNConfigRequestedSize.1 = 0
cnpdTopNConfigGrantedSize.1 = 0
cnpdTopNConfigTime.1 = 0
cnpdTopNConfigStatus.1 = notReady(3)

Change SampleTime

>$ setany -v2c a.b.c.d public cnpdTopNConfigSampleTime.1 -g 13

cnpdTopNConfigSampleTime.1 = 13

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

cnpdTopNConfigIfIndex.1 = 13
cnpdTopNConfigStatsSelect.1 = byteCountOut(5)
cnpdTopNConfigSampleTime.1 = 13
cnpdTopNConfigRequestedSize.1 = 0
cnpdTopNConfigGrantedSize.1 = 0
cnpdTopNConfigTime.1 = 0
cnpdTopNConfigStatus.1 = notReady(3)

Change RequestedSize

>$ setany -v2c a.b.c.d public cnpdTopNConfigRequestedSize.1 -g 5

cnpdTopNConfigRequestedSize.1 = 5

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

cnpdTopNConfigIfIndex.1 = 13
cnpdTopNConfigStatsSelect.1 = byteCountOut(5)
cnpdTopNConfigSampleTime.1 = 13
cnpdTopNConfigRequestedSize.1 = 5
cnpdTopNConfigGrantedSize.1 = 5
cnpdTopNConfigTime.1 = 0
cnpdTopNConfigStatus.1 = notReady(3)

Set Status to createAndGo and Display Results

>$ setany -v2c a.b.c.d public cnpdTopNConfigStatus.1 -i 4

cnpdTopNConfigStatus.1 = createAndGo(4)

>$ getmany -v2c a.b.c.d public cnpdTopNConfig

cnpdTopNConfigIfIndex.1 = 13
cnpdTopNConfigStatsSelect.1 = packetCountIn(7)
cnpdTopNConfigSampleTime.1 = 13
cnpdTopNConfigRequestedSize.1 = 5
cnpdTopNConfigGrantedSize.1 = 5
cnpdTopNConfigTime.1 = 44093748
cnpdTopNConfigStatus.1 = active(1)

>$ getmany -v2c a.b.c.d public cnpdTopNStats

cnpdTopNStatsProtocolName.1.1 = http
cnpdTopNStatsProtocolName.1.2 = realaudio
cnpdTopNStatsProtocolName.1.3 = nntp
cnpdTopNStatsProtocolName.1.4 = ldap
cnpdTopNStatsProtocolName.1.5 = ftp
cnpdTopNStatsRate.1.1 = 3681501
cnpdTopNStatsRate.1.2 = 1348424
cnpdTopNStatsRate.1.3 = 562337
cnpdTopNStatsRate.1.4 = 366922
cnpdTopNStatsRate.1.5 = 311978
cnpdTopNStatsHCRate.1.1 = 0x000382cdd
cnpdTopNStatsHCRate.1.2 = 0x000149348
cnpdTopNStatsHCRate.1.3 = 0x0000894a1
cnpdTopNStatsHCRate.1.4 = 0x00005994a
cnpdTopNStatsHCRate.1.5 = 0x00004c2aa

Configuring Thresholds

The NBAR Protocol Discovery MIB can be used to set two types of thresholds—a threshold that reports a breach when thresholds for an individual protocol are crossed and a threshold that reports a breach when all NBAR-classifiable protocols or applications are crossed.

Specific Protocol Threshold

A specific protocol threshold is a threshold that monitors the traffic of a specific protocol. An SNMP trap is sent when this threshold is crossed.

The following items should be noted when configuring a specific protocol threshold:

•The cnpdThresholdConfigProtocolAny must be set to FALSE(2) and cnpdThresholdConfigProtocol must be set to a value that indicates the OID of the protocol being monitored. The OID for each protocol can be seen by querying cnpdSupportedProtocolsTable (for instance, use 5 to monitor HTTP).

•Use cnpdThresholdConfigIfIndex to select the interface and cnpdThresholdConfigRising and cnpdThresholdConfigFalling to set the rising and falling thresholds.

•Set the cnpdThresholdConfigInterval to configure the frequency with which thresholds should be checked.

•Set cnpdThresholdConfigStatus to 4 (createAndGo) and this config member will become active.

Example:

setany -v2c a.b.c.d public cnpdThresholdConfigProtocolAny.2 -i 2
setany -v2c a.b.c.d public cnpdThresholdConfigProtocol.2 -g 5
setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.2 -i 7
setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.2 -i 13
setany -v2c a.b.c.d public cnpdThresholdConfigRising.2 -g 2000
setany -v2c a.b.c.d public cnpdThresholdConfigFalling.2 -g 1000
setany -v2c a.b.c.d public cnpdThresholdConfigStatus.2 -i 4

Any Protocol Threshold

The Any Protocol Threshold setting is used to report breaches and create history entries if ANY protocol crosses a rising or falling threshold. This threshold does have a mechanism to report a breach only once (in a given time period). For instance, if HTTP breaches a rising threshold, a trap is sent only for the first breach. If another protocol, such as DHCP, breaches a rising threshold, a separate breach is reported.

The setup for any protocol is identical to a specific protocol except cnpdThresholdConfigProtocolAny does not have to be configured and it is unnecessary to specify a cnpdThresholdConfigProtocol.

Example:

setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.1 -i 7
setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.1 -i 13
setany -v2c a.b.c.d public cnpdThresholdConfigRising.1 -g 30
setany -v2c a.b.c.d public cnpdThresholdConfigFalling.1 -g 20
setany -v2c a.b.c.d public cnpdThresholdConfigStatus.1 -i 4

Threshold Options

The cnpdThresholdConfigSampleType is used to change the way a threshold value is sampled and can be set to either of the following values:

•absoluteValue(1)

•deltaValue(2)

When the cnpdThresholdConfigSampleType is set to absoluteValue, the sampled statistic is compared to cnpdThresholdConfigRising and cnpdThresholdConfigFalling and a trap is sent if either of these thresholds are crossed. A ThresholdHistory event is also registered when either of these thresholds are crossed.

Note Most Protocol Discovery statistics are aggregates and only rise. Therefore, only one threshold is likely to be breached.

When the cnpdThresholdConfigSampleType is set to deltaValue, the difference between the current sample and the previous sample is compared to cnpdThresholdConfigRising and cnpdThresholdConfigFalling. A ThresholdHistory event is registered only if this difference is greater or less than the compared values. This deltaValue therefore measures the gradient of statistic change is the value being tested and can lead to several breach events and traps.

Examples:

Any Protocol

Note The cnpdThresholdConfigProtocolAny object is set to TRUE by default so it does not need to set the value manually.

>$ setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.1 -i 7

cnpdThresholdConfigStatsSelect.1 = packetCountIn(7)

>$ setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.1 -i 13

cnpdThresholdConfigIfIndex.1 = 13

>$ setany -v2c a.b.c.d public cnpdThresholdConfigRising.1 -g 30

cnpdThresholdConfigRising.1 = 30

>$ setany -v2c a.b.c.d public cnpdThresholdConfigFalling.1 -g 20

cnpdThresholdConfigFalling.1 = 20

>$ setany -v2c a.b.c.d public cnpdThresholdConfigStatus.1 -i 4

cnpdThresholdConfigStatus.1 = createAndGo(4)

>$ getmany -v2c a.b.c.d public cnpdThresholdConfig

cnpdThresholdConfigIfIndex.1 = 13
cnpdThresholdConfigInterval.1 = 10
cnpdThresholdConfigSampleType.1 = absoluteValue(1)
cnpdThresholdConfigProtocol.1 = 62
cnpdThresholdConfigProtocolAny.1 = true(1)
cnpdThresholdConfigStatsSelect.1 = packetCountIn(7)
cnpdThresholdConfigStartup.1 = risingOrFalling(3)
cnpdThresholdConfigRising.1 = 30
cnpdThresholdConfigFalling.1 = 20
cnpdThresholdConfigStatus.1 = active(1)

>$ getmany -v2c a.b.c.d public cnpdThresholdHistory

cnpdThresholdHistoryConfigIndex.1 = 1
cnpdThresholdHistoryConfigIndex.2 = 1
cnpdThresholdHistoryConfigIndex.3 = 1
cnpdThresholdHistoryConfigIndex.4 = 1
cnpdThresholdHistoryConfigIndex.5 = 1
cnpdThresholdHistoryConfigIndex.6 = 1
cnpdThresholdHistoryConfigIndex.7 = 1
cnpdThresholdHistoryConfigIndex.8 = 1
cnpdThresholdHistoryConfigIndex.9 = 1
cnpdThresholdHistoryConfigIndex.10 = 1
cnpdThresholdHistoryConfigIndex.11 = 1
cnpdThresholdHistoryConfigIndex.12 = 1
cnpdThresholdHistoryConfigIndex.13 = 1
cnpdThresholdHistoryConfigIndex.14 = 1
cnpdThresholdHistoryValue.1 = 73906
cnpdThresholdHistoryValue.2 = 26985
cnpdThresholdHistoryValue.3 = 11250
cnpdThresholdHistoryValue.4 = 7380
cnpdThresholdHistoryValue.5 = 6552
cnpdThresholdHistoryValue.6 = 2184
cnpdThresholdHistoryValue.7 = 2160
cnpdThresholdHistoryValue.8 = 1620
cnpdThresholdHistoryValue.9 = 724
cnpdThresholdHistoryValue.10 = 364
cnpdThresholdHistoryValue.11 = 360
cnpdThresholdHistoryValue.12 = 181
cnpdThresholdHistoryValue.13 = 2
cnpdThresholdHistoryValue.14 = 31
cnpdThresholdHistoryType.1 = risingBreach(1)
cnpdThresholdHistoryType.2 = risingBreach(1)
cnpdThresholdHistoryType.3 = risingBreach(1)
cnpdThresholdHistoryType.4 = risingBreach(1)
cnpdThresholdHistoryType.5 = risingBreach(1)
cnpdThresholdHistoryType.6 = risingBreach(1)
cnpdThresholdHistoryType.7 = risingBreach(1)
cnpdThresholdHistoryType.8 = risingBreach(1)
cnpdThresholdHistoryType.9 = risingBreach(1)
cnpdThresholdHistoryType.10 = risingBreach(1)
cnpdThresholdHistoryType.11 = risingBreach(1)
cnpdThresholdHistoryType.12 = risingBreach(1)
cnpdThresholdHistoryType.13 = fallingBreach(2)
cnpdThresholdHistoryType.14 = risingBreach(1)
cnpdThresholdHistoryTime.1 = 8579
cnpdThresholdHistoryTime.2 = 8579
cnpdThresholdHistoryTime.3 = 8579
cnpdThresholdHistoryTime.4 = 8579
cnpdThresholdHistoryTime.5 = 8579
cnpdThresholdHistoryTime.6 = 8579
cnpdThresholdHistoryTime.7 = 8579
cnpdThresholdHistoryTime.8 = 8579
cnpdThresholdHistoryTime.9 = 8579
cnpdThresholdHistoryTime.10 = 8579
cnpdThresholdHistoryTime.11 = 8579
cnpdThresholdHistoryTime.12 = 8579
cnpdThresholdHistoryTime.13 = 8579
cnpdThresholdHistoryTime.14 = 97579
cnpdThresholdHistoryProtocol.1 = 5
cnpdThresholdHistoryProtocol.2 = 23
cnpdThresholdHistoryProtocol.3 = 46
cnpdThresholdHistoryProtocol.4 = 51
cnpdThresholdHistoryProtocol.5 = 71
cnpdThresholdHistoryProtocol.6 = 36
cnpdThresholdHistoryProtocol.7 = 3
cnpdThresholdHistoryProtocol.8 = 48
cnpdThresholdHistoryProtocol.9 = 61
cnpdThresholdHistoryProtocol.10 = 59
cnpdThresholdHistoryProtocol.11 = 41
cnpdThresholdHistoryProtocol.12 = 68
cnpdThresholdHistoryProtocol.13 = 62
cnpdThresholdHistoryProtocol.14 = 62
cnpdThresholdHistoryStatsSelect.1 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.2 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.4 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.5 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.6 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.7 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.8 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.9 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.10 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.11 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.12 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.13 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.14 = packetCountIn(7)

SpecificProtocol (HTTP)

>$ setany -v2c a.b.c.d public cnpdThresholdConfigProtocolAny.2 -i 2

cnpdThresholdConfigProtocolAny.2 = false(2)

>$ setany -v2c a.b.c.d public cnpdThresholdConfigProtocol.2 -g 5

cnpdThresholdConfigProtocol.2 = 5

>$ setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.2 -i 7

cnpdThresholdConfigStatsSelect.2 = packetCountIn(7)

>$ setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.2 -i 13

cnpdThresholdConfigIfIndex.2 = 13

>$ setany -v2c a.b.c.d public cnpdThresholdConfigRising.2 -g 2000

cnpdThresholdConfigRising.2 = 2000

>$ setany -v2c a.b.c.d public cnpdThresholdConfigFalling.2 -g 1000

cnpdThresholdConfigFalling.2 = 1000

>$ setany -v2c a.b.c.d public cnpdThresholdConfigStatus.2 -i 4

cnpdThresholdConfigStatus.2 = createAndGo(4)

>$ getmany -v2c a.b.c.d public cnpdThresholdConfig

cnpdThresholdConfigIfIndex.1 = 13
cnpdThresholdConfigIfIndex.2 = 13
cnpdThresholdConfigInterval.1 = 10
cnpdThresholdConfigInterval.2 = 10
cnpdThresholdConfigSampleType.1 = absoluteValue(1)
cnpdThresholdConfigSampleType.2 = absoluteValue(1)
cnpdThresholdConfigProtocol.1 = 62
cnpdThresholdConfigProtocol.2 = 5
cnpdThresholdConfigProtocolAny.1 = true(1)
cnpdThresholdConfigProtocolAny.2 = false(2)
cnpdThresholdConfigStatsSelect.1 = packetCountIn(7)
cnpdThresholdConfigStatsSelect.2 = packetCountIn(7)
cnpdThresholdConfigStartup.1 = risingOrFalling(3)
cnpdThresholdConfigStartup.2 = risingOrFalling(3)
cnpdThresholdConfigRising.1 = 30
cnpdThresholdConfigRising.2 = 2000
cnpdThresholdConfigFalling.1 = 20
cnpdThresholdConfigFalling.2 = 1000
cnpdThresholdConfigStatus.1 = active(1)
cnpdThresholdConfigStatus.2 = active(1)

>$ getmany -v2c a.b.c.d public cnpdThresholdHistory

cnpdThresholdHistoryConfigIndex.1 = 1
cnpdThresholdHistoryConfigIndex.2 = 1
cnpdThresholdHistoryConfigIndex.3 = 1
cnpdThresholdHistoryConfigIndex.4 = 1
cnpdThresholdHistoryConfigIndex.5 = 1
cnpdThresholdHistoryConfigIndex.6 = 1
cnpdThresholdHistoryConfigIndex.7 = 1
cnpdThresholdHistoryConfigIndex.8 = 1
cnpdThresholdHistoryConfigIndex.9 = 1
cnpdThresholdHistoryConfigIndex.10 = 1
cnpdThresholdHistoryConfigIndex.11 = 1
cnpdThresholdHistoryConfigIndex.12 = 1
cnpdThresholdHistoryConfigIndex.13 = 1
cnpdThresholdHistoryConfigIndex.14 = 1
cnpdThresholdHistoryConfigIndex.15 = 2
cnpdThresholdHistoryValue.1 = 73906
cnpdThresholdHistoryValue.2 = 26985
cnpdThresholdHistoryValue.3 = 11250
cnpdThresholdHistoryValue.4 = 7380
cnpdThresholdHistoryValue.5 = 6552
cnpdThresholdHistoryValue.6 = 2184
cnpdThresholdHistoryValue.7 = 2160
cnpdThresholdHistoryValue.8 = 1620
cnpdThresholdHistoryValue.9 = 724
cnpdThresholdHistoryValue.10 = 364
cnpdThresholdHistoryValue.11 = 360
cnpdThresholdHistoryValue.12 = 181
cnpdThresholdHistoryValue.13 = 2
cnpdThresholdHistoryValue.14 = 31
cnpdThresholdHistoryValue.15 = 3681501
cnpdThresholdHistoryType.1 = risingBreach(1)
cnpdThresholdHistoryType.2 = risingBreach(1)
cnpdThresholdHistoryType.3 = risingBreach(1)
cnpdThresholdHistoryType.4 = risingBreach(1)
cnpdThresholdHistoryType.5 = risingBreach(1)
cnpdThresholdHistoryType.6 = risingBreach(1)
cnpdThresholdHistoryType.7 = risingBreach(1)
cnpdThresholdHistoryType.8 = risingBreach(1)
cnpdThresholdHistoryType.9 = risingBreach(1)
cnpdThresholdHistoryType.10 = risingBreach(1)
cnpdThresholdHistoryType.11 = risingBreach(1)
cnpdThresholdHistoryType.12 = risingBreach(1)
cnpdThresholdHistoryType.13 = fallingBreach(2)
cnpdThresholdHistoryType.14 = risingBreach(1)
cnpdThresholdHistoryType.15 = risingBreach(1)
cnpdThresholdHistoryTime.1 = 8579
cnpdThresholdHistoryTime.2 = 8579
cnpdThresholdHistoryTime.3 = 8579
cnpdThresholdHistoryTime.4 = 8579
cnpdThresholdHistoryTime.5 = 8579
cnpdThresholdHistoryTime.6 = 8579
cnpdThresholdHistoryTime.7 = 8579
cnpdThresholdHistoryTime.8 = 8579
cnpdThresholdHistoryTime.9 = 8579
cnpdThresholdHistoryTime.10 = 8579
cnpdThresholdHistoryTime.11 = 8579
cnpdThresholdHistoryTime.12 = 8579
cnpdThresholdHistoryTime.13 = 8579
cnpdThresholdHistoryTime.14 = 97579
cnpdThresholdHistoryTime.15 = 44261817
cnpdThresholdHistoryProtocol.1 = 5
cnpdThresholdHistoryProtocol.2 = 23
cnpdThresholdHistoryProtocol.3 = 46
cnpdThresholdHistoryProtocol.4 = 51
cnpdThresholdHistoryProtocol.5 = 71
cnpdThresholdHistoryProtocol.6 = 36
cnpdThresholdHistoryProtocol.7 = 3
cnpdThresholdHistoryProtocol.8 = 48
cnpdThresholdHistoryProtocol.9 = 61
cnpdThresholdHistoryProtocol.10 = 59
cnpdThresholdHistoryProtocol.11 = 41
cnpdThresholdHistoryProtocol.12 = 68
cnpdThresholdHistoryProtocol.13 = 62
cnpdThresholdHistoryProtocol.14 = 62
cnpdThresholdHistoryProtocol.15 = 5
cnpdThresholdHistoryStatsSelect.1 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.2 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.4 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.5 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.6 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.7 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.8 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.9 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.10 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.11 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.12 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.13 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.14 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.15 = packetCountIn(7)

Note The traps shown below are sample traps that could be generated by traffic patterns that breach the above configuration. The traps are shown only for the sake of the example.

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44261817
cnpdThresholdConfigIfIndex.2 = 13
cnpdThresholdConfigStatsSelect.2 = packetCountIn(7)
cnpdThresholdHistoryValue.2 = 3681501
cnpdThresholdConfigRising.2 = 2000
cnpdThresholdHistoryProtocol.2 = 5
cnpdThresholdHistoryTime.2 = 44261817

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44278817
cnpdThresholdConfigIfIndex.2 = 13
cnpdThresholdConfigStatsSelect.2 = packetCountIn(7)
cnpdThresholdHistoryValue.2 = 3681501
cnpdThresholdConfigRising.2 = 2000
cnpdThresholdHistoryProtocol.2 = 5
cnpdThresholdHistoryTime.2 = 44278817

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44284817
cnpdThresholdConfigIfIndex.2 = 13
cnpdThresholdConfigStatsSelect.2 = packetCountIn(7)
cnpdThresholdHistoryValue.2 = 3681501
cnpdThresholdConfigRising.2 = 2000
cnpdThresholdHistoryProtocol.2 = 5
cnpdThresholdHistoryTime.2 = 44284817

AnyProtocol=TRUE and SampleType=Delta

>$ setany -v2c a.b.c.d public cnpdThresholdConfigStatsSelect.3 -i 7

cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)

>$ setany -v2c a.b.c.d public cnpdThresholdConfigIfIndex.3 -i 13

cnpdThresholdConfigIfIndex.3 = 13

>$ setany -v2c a.b.c.d public cnpdThresholdConfigRising.3 -g 30

cnpdThresholdConfigRising.3 = 30

>$ setany -v2c a.b.c.d public cnpdThresholdConfigFalling.3 -g 20

cnpdThresholdConfigFalling.3 = 20

>$ setany -v2c a.b.c.d public cnpdThresholdConfigSampleType.3 -i 2

cnpdThresholdConfigSampleType.3 = deltaValue(2)

>$ setany -v2c a.b.c.d public cnpdThresholdConfigStatus.3 -i 4

cnpdThresholdConfigStatus.3 = createAndGo(4)

>$ getmany -v2c a.b.c.d public cnpdThresholdConfig

cnpdThresholdConfigIfIndex.1 = 13
cnpdThresholdConfigIfIndex.2 = 13
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigInterval.1 = 10
cnpdThresholdConfigInterval.2 = 10
cnpdThresholdConfigInterval.3 = 10
cnpdThresholdConfigSampleType.1 = absoluteValue(1)
cnpdThresholdConfigSampleType.2 = absoluteValue(1)
cnpdThresholdConfigSampleType.3 = deltaValue(2)
cnpdThresholdConfigProtocol.1 = 62
cnpdThresholdConfigProtocol.2 = 5
cnpdThresholdConfigProtocol.3 = 62
cnpdThresholdConfigProtocolAny.1 = true(1)
cnpdThresholdConfigProtocolAny.2 = false(2)
cnpdThresholdConfigProtocolAny.3 = true(1)
cnpdThresholdConfigStatsSelect.1 = packetCountIn(7)
cnpdThresholdConfigStatsSelect.2 = packetCountIn(7)
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdConfigStartup.1 = risingOrFalling(3)
cnpdThresholdConfigStartup.2 = risingOrFalling(3)
cnpdThresholdConfigStartup.3 = risingOrFalling(3)
cnpdThresholdConfigRising.1 = 30
cnpdThresholdConfigRising.2 = 2000
cnpdThresholdConfigRising.3 = 30
cnpdThresholdConfigFalling.1 = 20
cnpdThresholdConfigFalling.2 = 1000
cnpdThresholdConfigFalling.3 = 20
cnpdThresholdConfigStatus.1 = active(1)
cnpdThresholdConfigStatus.2 = active(1)
cnpdThresholdConfigStatus.3 = active(1)

>$ getmany -v2c a.b.c.d public cnpdThresholdHistory

cnpdThresholdHistoryConfigIndex.1 = 1
cnpdThresholdHistoryConfigIndex.2 = 1
cnpdThresholdHistoryConfigIndex.3 = 1
cnpdThresholdHistoryConfigIndex.4 = 1
cnpdThresholdHistoryConfigIndex.5 = 1
cnpdThresholdHistoryConfigIndex.6 = 1
cnpdThresholdHistoryConfigIndex.7 = 1
cnpdThresholdHistoryConfigIndex.8 = 1
cnpdThresholdHistoryConfigIndex.9 = 1
cnpdThresholdHistoryConfigIndex.10 = 1
cnpdThresholdHistoryConfigIndex.11 = 1
cnpdThresholdHistoryConfigIndex.12 = 1
cnpdThresholdHistoryConfigIndex.13 = 1
cnpdThresholdHistoryConfigIndex.14 = 1
cnpdThresholdHistoryConfigIndex.15 = 2
cnpdThresholdHistoryConfigIndex.16 = 2
cnpdThresholdHistoryConfigIndex.17 = 2
cnpdThresholdHistoryConfigIndex.18 = 3
cnpdThresholdHistoryConfigIndex.19 = 3
cnpdThresholdHistoryConfigIndex.20 = 3
cnpdThresholdHistoryConfigIndex.21 = 3
cnpdThresholdHistoryConfigIndex.22 = 3
cnpdThresholdHistoryConfigIndex.23 = 3
cnpdThresholdHistoryConfigIndex.24 = 3
cnpdThresholdHistoryConfigIndex.25 = 3
cnpdThresholdHistoryConfigIndex.26 = 3
cnpdThresholdHistoryConfigIndex.27 = 3
cnpdThresholdHistoryConfigIndex.28 = 3
cnpdThresholdHistoryConfigIndex.29 = 3
cnpdThresholdHistoryConfigIndex.30 = 3
cnpdThresholdHistoryConfigIndex.31 = 3
cnpdThresholdHistoryValue.1 = 73906
cnpdThresholdHistoryValue.2 = 26985
cnpdThresholdHistoryValue.3 = 11250
cnpdThresholdHistoryValue.4 = 7380
cnpdThresholdHistoryValue.5 = 6552
cnpdThresholdHistoryValue.6 = 2184
cnpdThresholdHistoryValue.7 = 2160
cnpdThresholdHistoryValue.8 = 1620
cnpdThresholdHistoryValue.9 = 724
cnpdThresholdHistoryValue.10 = 364
cnpdThresholdHistoryValue.11 = 360
cnpdThresholdHistoryValue.12 = 181
cnpdThresholdHistoryValue.13 = 2
cnpdThresholdHistoryValue.14 = 31
cnpdThresholdHistoryValue.15 = 3681501
cnpdThresholdHistoryValue.16 = 3681501
cnpdThresholdHistoryValue.17 = 3681501
cnpdThresholdHistoryValue.18 = 3681501
cnpdThresholdHistoryValue.19 = 1348424
cnpdThresholdHistoryValue.20 = 562337
cnpdThresholdHistoryValue.21 = 366922
cnpdThresholdHistoryValue.22 = 311978
cnpdThresholdHistoryValue.23 = 108392
cnpdThresholdHistoryValue.24 = 106086
cnpdThresholdHistoryValue.25 = 81449
cnpdThresholdHistoryValue.26 = 36182
cnpdThresholdHistoryValue.27 = 17941
cnpdThresholdHistoryValue.28 = 17318
cnpdThresholdHistoryValue.29 = 12197
cnpdThresholdHistoryValue.30 = 9046
cnpdThresholdHistoryValue.31 = 1
cnpdThresholdHistoryType.1 = risingBreach(1)
cnpdThresholdHistoryType.2 = risingBreach(1)
cnpdThresholdHistoryType.3 = risingBreach(1)
cnpdThresholdHistoryType.4 = risingBreach(1)
cnpdThresholdHistoryType.5 = risingBreach(1)
cnpdThresholdHistoryType.6 = risingBreach(1)
cnpdThresholdHistoryType.7 = risingBreach(1)
cnpdThresholdHistoryType.8 = risingBreach(1)
cnpdThresholdHistoryType.9 = risingBreach(1)
cnpdThresholdHistoryType.10 = risingBreach(1)
cnpdThresholdHistoryType.11 = risingBreach(1)
cnpdThresholdHistoryType.12 = risingBreach(1)
cnpdThresholdHistoryType.13 = fallingBreach(2)
cnpdThresholdHistoryType.14 = risingBreach(1)
cnpdThresholdHistoryType.15 = risingBreach(1)
cnpdThresholdHistoryType.16 = risingBreach(1)
cnpdThresholdHistoryType.17 = risingBreach(1)
cnpdThresholdHistoryType.18 = risingBreach(1)
cnpdThresholdHistoryType.19 = risingBreach(1)
cnpdThresholdHistoryType.20 = risingBreach(1)
cnpdThresholdHistoryType.21 = risingBreach(1)
cnpdThresholdHistoryType.22 = risingBreach(1)
cnpdThresholdHistoryType.23 = risingBreach(1)
cnpdThresholdHistoryType.24 = risingBreach(1)
cnpdThresholdHistoryType.25 = risingBreach(1)
cnpdThresholdHistoryType.26 = risingBreach(1)
cnpdThresholdHistoryType.27 = risingBreach(1)
cnpdThresholdHistoryType.28 = risingBreach(1)
cnpdThresholdHistoryType.29 = risingBreach(1)
cnpdThresholdHistoryType.30 = risingBreach(1)
cnpdThresholdHistoryType.31 = fallingBreach(2)
cnpdThresholdHistoryTime.1 = 8579
cnpdThresholdHistoryTime.2 = 8579
cnpdThresholdHistoryTime.3 = 8579
cnpdThresholdHistoryTime.4 = 8579
cnpdThresholdHistoryTime.5 = 8579
cnpdThresholdHistoryTime.6 = 8579
cnpdThresholdHistoryTime.7 = 8579
cnpdThresholdHistoryTime.8 = 8579
cnpdThresholdHistoryTime.9 = 8579
cnpdThresholdHistoryTime.10 = 8579
cnpdThresholdHistoryTime.11 = 8579
cnpdThresholdHistoryTime.12 = 8579
cnpdThresholdHistoryTime.13 = 8579
cnpdThresholdHistoryTime.14 = 97579
cnpdThresholdHistoryTime.15 = 44261817
cnpdThresholdHistoryTime.16 = 44278817
cnpdThresholdHistoryTime.17 = 44284817
cnpdThresholdHistoryTime.18 = 44288471
cnpdThresholdHistoryTime.19 = 44288471
cnpdThresholdHistoryTime.20 = 44288471
cnpdThresholdHistoryTime.21 = 44288471
cnpdThresholdHistoryTime.22 = 44288471
cnpdThresholdHistoryTime.23 = 44288471
cnpdThresholdHistoryTime.24 = 44288471
cnpdThresholdHistoryTime.25 = 44288471
cnpdThresholdHistoryTime.26 = 44288471
cnpdThresholdHistoryTime.27 = 44288471
cnpdThresholdHistoryTime.28 = 44288471
cnpdThresholdHistoryTime.29 = 44288471
cnpdThresholdHistoryTime.30 = 44288471
cnpdThresholdHistoryTime.31 = 44289471
cnpdThresholdHistoryProtocol.1 = 5
cnpdThresholdHistoryProtocol.2 = 23
cnpdThresholdHistoryProtocol.3 = 46
cnpdThresholdHistoryProtocol.4 = 51
cnpdThresholdHistoryProtocol.5 = 71
cnpdThresholdHistoryProtocol.6 = 36
cnpdThresholdHistoryProtocol.7 = 3
cnpdThresholdHistoryProtocol.8 = 48
cnpdThresholdHistoryProtocol.9 = 61
cnpdThresholdHistoryProtocol.10 = 59
cnpdThresholdHistoryProtocol.11 = 41
cnpdThresholdHistoryProtocol.12 = 68
cnpdThresholdHistoryProtocol.13 = 62
cnpdThresholdHistoryProtocol.14 = 62
cnpdThresholdHistoryProtocol.15 = 5
cnpdThresholdHistoryProtocol.16 = 5
cnpdThresholdHistoryProtocol.17 = 5
cnpdThresholdHistoryProtocol.18 = 5
cnpdThresholdHistoryProtocol.19 = 23
cnpdThresholdHistoryProtocol.20 = 46
cnpdThresholdHistoryProtocol.21 = 51
cnpdThresholdHistoryProtocol.22 = 71
cnpdThresholdHistoryProtocol.23 = 3
cnpdThresholdHistoryProtocol.24 = 36
cnpdThresholdHistoryProtocol.25 = 48
cnpdThresholdHistoryProtocol.26 = 61
cnpdThresholdHistoryProtocol.27 = 41
cnpdThresholdHistoryProtocol.28 = 59
cnpdThresholdHistoryProtocol.29 = 62
cnpdThresholdHistoryProtocol.30 = 68
cnpdThresholdHistoryProtocol.31 = 62
cnpdThresholdHistoryStatsSelect.1 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.2 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.4 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.5 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.6 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.7 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.8 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.9 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.10 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.11 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.12 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.13 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.14 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.15 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.16 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.17 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.18 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.19 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.20 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.21 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.22 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.23 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.24 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.25 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.26 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.27 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.28 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.29 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.30 = packetCountIn(7)
cnpdThresholdHistoryStatsSelect.31 = packetCountIn(7)

Note The traps shown below are sample traps that could be generated by traffic patterns that breach the above configuration. The traps are shown only for the sake of the example.

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 366922
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 51
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 311978
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 71
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 108392
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 3
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 106086
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 36
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 81449
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 48
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 36182
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 61
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 17941
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 41
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288472
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 17318
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 59
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288472
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 12197
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 62
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 1
Time Ticks: 44288472
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 9046
cnpdThresholdConfigRising.3 = 30
cnpdThresholdHistoryProtocol.3 = 68
cnpdThresholdHistoryTime.3 = 44288471

Received SNMPv1 Trap:
Community: public
Enterprise: ciscoNbarProtocolDiscoveryMIB
Agent-addr: a.b.c.d
Enterprise Specific trap.
Enterprise Specific trap: 2
Time Ticks: 44289471
cnpdThresholdConfigIfIndex.3 = 13
cnpdThresholdConfigStatsSelect.3 = packetCountIn(7)
cnpdThresholdHistoryValue.3 = 1
cnpdThresholdConfigFalling.3 = 20
cnpdThresholdHistoryProtocol.3 = 62
cnpdThresholdHistoryTime.3 = 44289471

Additional References

For additional information related to <module feature>, refer to the following references:

Related Documents

Related Topic

Document Title

Network-Based Application Recognition

"Classifying Network Traffic Using NBAR" module

SNMP

"Configuring SNMP Support" module

Standards

This feature does not address any new standards.

For information on Standards supported by the general NBAR and dNBAR features, see the "Classifying Network Traffic Using NBAR" module.

MIBs

This document documents the CISCO-NBAR-PROTOCOL-DISCOVERY MIB.

For information on other MIBs supported by the general NBAR and dNBAR features, see the "Classifying Network Traffic Using NBAR" module.

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:

http://tools.cisco.com/ITDIT/MIBS/servlet/index

If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of supported MIBs and download MIBs from the Cisco MIBs page at the following URL:

http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your account information, send a blank e-mail to cco-locksmith@cisco.com. An automatic check will verify that your e-mail address is registered with Cisco.com. If the check is successful, account details with a new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com by following the directions found at this URL:

http://www.cisco.com/register

RFCs

This feature does not address any new RFCs.

For information on RFCs supported by the general NBAR and dNBAR features, see "Classifying Network Traffic Using NBAR" module.

Technical Assistance

Description

Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies.

To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds.

Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http://www.cisco.com/techsupport

Command Reference

The following commands are introduced or modified in the feature or features documented in this module. For information about these commands, see the Cisco IOS Quality of Service Solutions Command Reference at http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_book.html. For information about all Cisco IOS commands, use the Command Lookup Tool at http://tools.cisco.com/Support/CLILookup or a Cisco IOS master commands list.

•snmp-server enable traps cnpd

•snmp-server host

CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0809R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

© 2007 Cisco Systems, Inc. All rights reserved.

Hierarchical Navigation

Cisco IOS and NX-OS Software

Network-Based Application Recognition Protocol Discovery Management Information Base

Downloads

Table Of Contents

Network-Based Application Recognition Protocol Discovery Management Information Base

Contents

Prerequisites for NBAR Protocol Discovery MIBs

Restrictions for NBAR Protocol Discovery MIBs

Tables Supported by NBAR Protocol Discovery MIBs

cnpdSupportedProtocolsTable

cnpdStatusTable

cnpdAllStatsTable

cnpdTopNConfigTable

cnpdTopNStatsTable

cnpdThresholdConfigTable

cnpdThresholdHistoryTable

How to Use the NBAR Protocol Discovery MIB

Querying the Supported Protocols Table

SUMMARY STEPS

Examples

Enabling and Disabling NBAR Protocol Discovery on an Interface

SUMMARY STEPS for Enabling NBAR Protocol Discovery on an Interface

SUMMARY STEPS for Enabling NBAR Protocol Discovery on an Interface

Examples

Searching the AllStats Table

SUMMARY STEPS

Creating a Top-N Table

Summary Steps

Examples

Setting Protocol Thresholds

Setting a Threshold for a Particular Application or Protocol

Summary Steps

Examples

Setting the Any Protocol Threshold

Summary Steps

Examples

Configuration Examples For NBAR Protocol Discovery MIBs

Querying Supported Protocols Table

Query Status Enabled Table

Enabling and Disabling Protocol Discovery

Disabling Protocol Discovery on an Interface

Searching the All Stats Table

Creating Top-N Tables Using the NBAR Protocol Discovery MIB

Create a new TopNConfig Entry

Change StatsSelect

Change SampleTime

Change RequestedSize

Set Status to createAndGo and Display Results

Configuring Thresholds

Specific Protocol Threshold

Any Protocol Threshold

Threshold Options

Any Protocol

SpecificProtocol (HTTP)

Additional References

Related Documents

Standards

MIBs

RFCs

Technical Assistance

Command Reference

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0809R)