Cisco IOS Software

Table Of Contents

Enabling Protocol Discovery

Contents

Prerequisites for Enabling Protocol Discovery

Information About Protocol Discovery

Protocol Discovery Functionality

How to Configure Protocol Discovery

Enabling Protocol Discovery on an Interface

ip nbar protocol-discovery Command and Layer 2/3 Etherchannel Support

Reporting Protocol Discovery Statistics

Configuration Examples for Enabling Protocol Discovery

Enabling Protocol Discovery on an Interface: Example

Reporting Protocol Discovery Statistics: Example

Where to Go Next

Additional References

Related Documents

Technical Assistance

Feature Information for Enabling Protocol Discovery

Enabling Protocol Discovery

---

First Published: April 4, 2006

Last Updated: August 7, 2008

Network-Based Application Recognition (NBAR) includes a feature called Protocol Discovery. Protocol Discovery provides an easy way to discover the application protocols that are operating on an interface. When you configure NBAR, the first task is to enable Protocol Discovery.

This module contains concepts and tasks for enabling the Protocol Discovery feature.

Finding Feature Information in This Module

Your Cisco IOS software release may not support all of the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To reach links to specific feature documentation in this module and to see a list of the releases in which each feature is supported, use the "Feature Information for Enabling Protocol Discovery" section.

Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images

Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Contents

•Prerequisites for Enabling Protocol Discovery

•Information About Protocol Discovery

•How to Configure Protocol Discovery

•Configuration Examples for Enabling Protocol Discovery

•Where to Go Next

•Additional References

•Feature Information for Enabling Protocol Discovery

Prerequisites for Enabling Protocol Discovery

Before enabling Protocol Discovery, read the information in the "Classifying Network Traffic Using NBAR" module.

Information About Protocol Discovery

Before enabling Protocol Discovery, you should understand the following concept:

•Protocol Discovery Functionality

Protocol Discovery Functionality

NBAR determines which protocols and applications are currently running on your network. NBAR includes a feature called Protocol Discovery. Protocol Discovery provides an easy way of discovering the application protocols that are operating on an interface so that appropriate quality of service (QoS) features can be applied. With Protocol Discovery, you can discover any protocol traffic that is supported by NBAR and obtain statistics that are associated with that protocol.

Protocol Discovery maintains the following per-protocol statistics for enabled interfaces:

•Total number of input packets and bytes

•Total number of output packets and bytes

•Input bit rates

•Output bit rates

The statistics can then be used when you later define classes and traffic policies (sometimes known as policy maps) for each traffic class. The traffic policies (policy maps) are used to apply specific QoS features and functionality to the traffic classes.

How to Configure Protocol Discovery

This section contains the following tasks:

•Enabling Protocol Discovery on an Interface (required)

•Reporting Protocol Discovery Statistics (optional)

Enabling Protocol Discovery on an Interface

To enable Protocol Discovery on an interface, perform the following steps.

ip nbar protocol-discovery Command and Layer 2/3 Etherchannel Support

The ip nbar protocol-discovery command is used to enable Protocol Discovery on an interface. With Cisco IOS Release 12.2(18)ZYA, intended for use on the Cisco 6500 series switch that is equipped with a Supervisor 32/PISA, the ip nbar protocol-discovery command is supported on both Layer 2 and Layer 3 Etherchannels.

SUMMARY STEPS

1. enable

2. configure terminal

3. interface type number [name-tag]

4. ip nbar protocol-discovery

5. end

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. •Enter your password if prompted.
Step 2	configure terminal Example: Router# configure terminal	Enters global configuration mode.
Step 3	interface type number [name-tag] Example: Router(config)# interface ethernet 2/4	Configures an interface type and enters interface configuration mode. •Enter the interface type and the interface number.
Step 4	ip nbar protocol-discovery Example: Router(config-if)# ip nbar protocol-discovery	Configures NBAR to discover traffic for all protocols known to NBAR on a particular interface.
Step 5	end Example: Router(config-if)# end	(Optional) Exits interface configuration mode.

Reporting Protocol Discovery Statistics

To display a report of the Protocol Discovery statistics per interface, perform the following steps.

SUMMARY STEPS

1. enable

2. show policy-map interface type number

3. show ip nbar protocol-discovery [interface type number] [stats {byte-count | bit-rate | packet-count | max-bit-rate}] [protocol protocol-name | top-n number]

4. exit

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. •Enter your password if prompted.
Step 2	show policy-map interface type number Example: Router# show policy-map interface Fastethernet 6/0	(Optional) Displays the packet and class statistics for all policy maps on the specified interface. •Enter the interface type and the interface number.
Step 3	show ip nbar protocol-discovery [interface type number] [stats {byte-count | bit-rate | packet-count | max-bit-rate}] [protocol protocol-name | top-n number] Example: Router# show ip nbar protocol-discovery interface Fastethernet 6/0	Displays the statistics gathered by the NBAR Protocol Discovery feature. •(Optional) Enter keywords and arguments to fine-tune the statistics displayed.
Step 4	exit Example: Router# exit	(Optional) Exits privileged EXEC mode.

Configuration Examples for Enabling Protocol Discovery

This section provides the following configuration examples:

•Enabling Protocol Discovery on an Interface: Example

•Reporting Protocol Discovery Statistics: Example

Enabling Protocol Discovery on an Interface: Example

In the following sample configuration, Protocol Discovery is enabled on Ethernet interface 2/4.

Router> enable

Router# configure terminal

Router(config)# interface ethernet 2/4

Router(config-if)# ip nbar protocol-discovery

Router(config-if)# end

Reporting Protocol Discovery Statistics: Example

The following example displays output from the show ip nbar protocol-discovery command for the five most active protocols on an Ethernet interface:

Router# show ip nbar protocol-discovery top-n 5 

 Ethernet2/0 

                            Input                    Output                  

                            -----                    ------                  

  Protocol                  Packet Count             Packet Count            

                            Byte Count               Byte Count              

                            30sec Bit Rate (bps)     30sec Bit Rate (bps)    

                            30sec Max Bit Rate (bps) 30sec Max Bit Rate (bps)

--------------------------- ------------------------ ------------------------

   rtp                      3272685                  3272685                           

                                             242050604                242050604                         

                            768000                   768000                            

                            2002000                  2002000                           

   gnutella                 513574                   513574                            

                            118779716                118779716                         

                            383000                   383000                            

                            987000                   987000                            

   ftp                      482183                   482183                            

                            37606237                 37606237                          

                            121000                   121000                            

                            312000                   312000                            

   http                     144709                   144709                            

                            32351383                 32351383                          

                            105000                   105000                            

                            269000                   269000                            

   netbios                  96606                    96606                             

                            10627650                 10627650                          

                            36000                    36000                             

                            88000                    88000                             

   unknown                  1724428                  1724428                           

                            534038683                534038683                         

                            2754000                  2754000                           

                            4405000                  4405000                           

   Total                    6298724                  6298724                           

                            989303872                989303872                         

                            4213000                  4213000                           

                            8177000                  8177000                           

Where to Go Next

After you enable Protocol Discovery, you have the option to configure NBAR using the Modular Quality of Service (QoS) Command-Line Interface (CLI) (MQC). To configure NBAR using the MQC, see the "Configuring NBAR Using the MQC" module.

Additional References

The following sections provide references related to enabling Protocol Discovery.

Related Documents

Related Topic	Document Title
QoS commands: complete command syntax, command modes, command history, defaults, usage guidelines, and examples	Cisco IOS Quality of Service Solutions Command Reference
Concepts and information about NBAR	"Classifying Network Traffic Using NBAR" module
Configuring NBAR using the MQC	"Configuring NBAR Using the MQC" module
Adding application recognition modules (also known as PDLMs)	"Adding Application Recognition Modules" module
Creating a custom protocol	"Creating a Custom Protocol" module

Technical Assistance

Description

Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http://www.cisco.com/techsupport

Feature Information for Enabling Protocol Discovery

Table 1 lists the release history for this feature.

For information on a feature in this technology that is not documented here, see the "Classifying Network Traffic Using NBAR Features Roadmap" module.

Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.

Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

---

Note Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.

---

Table 1 Feature Information for Enabling Protocol Discovery 

Feature Name	Releases	Feature Information
NBAR—Network-Based Application Recognition	12.2(18)ZYA	Integrates NBAR and Firewall Service Module (FWSM) functionality on the Catalyst 6500 series switch that is equipped with a Supervisor 32/programmable intelligent services accelerator (PISA). The following commands were modified: ip nbar protocol-discovery, show ip nbar protocol-discovery.

CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0807R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

© 2006-2008 Cisco Systems, Inc. All rights reserved.