Cisco NBAR2 Protocol Pack release 78.0.0 includes the following updates:

• New protocols: cotp, cursor, iec104, mms-iec61850, ntcip, opcua, r-goose, r-sv, webex-ai (See New Protocols.)

• Updated protocols: amazon, amazon-instant-video, apple-remote-desktop, apple-services, att-web-services, azure-ai, azure-traffic-manager, cisco-meraki, cisco-spark, cloudflare-services, dnp, e-online, fastly-services, google-docs, http, huggingface, jimdo, mongo, ms-lync-audio, ms-services, oracle, oracle-sqlnet, rackspace-services, radius, snmp, ssl, t-mobile-web-services, telegram, usps, vimeo, webex-meeting, whatsapp, wikipedia, windows-azure, xbox-web-portal, yahoo-mail (See Updated Protocols).

• See Cisco NBAR2 Protocol Reference for protocol details.

Releases Supported for Upgrade

Platform	Releases Supported for Upgrade
Routers
Cisco ASR 1000 Series Aggregation Services Routers (ASR1000)	Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Cisco 4000 Series Integrated Services Routers (ISR4000)	Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Cisco 1100 Series Integrated Service Routers (ISR1100)	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Cisco Catalyst 8200 Series Edge Platforms	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Cisco Catalyst 8300 Series Edge Platforms	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Cisco Catalyst 8500 Series Edge Platforms	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Cisco Catalyst 8500L Series Edge Platforms	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x
Switches
Cisco Catalyst 9200 Series Switches	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1 and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1 and later maintenance releases of 17.15.x
Cisco Catalyst 9300 Series Switches	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1 and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1 and later maintenance releases of 17.15.x
Cisco Catalyst 9400 Series Switches	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1 and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1 and later maintenance releases of 17.15.x
Cisco Catalyst IE9300 Rugged Series Switches	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1 and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1 and later maintenance releases of 17.15.x
Wireless Controllers
Cisco 9800 Series Wireless Controllers	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1 and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1 and later maintenance releases of 17.15.x
Software Platforms
Cisco Catalyst 8000V Edge Software	Cisco IOS XE 26.1.1 and later maintenance releases of 26.1.x Cisco IOS XE 17.18.1a and later maintenance releases of 17.18.x Cisco IOS XE 17.15.1a and later maintenance releases of 17.15.x

Releases with This Protocol Pack Built In

None.

The following protocol(s) were added in NBAR2 Protocol Pack 78.0.0.

Protocol Name	Common Name	Long Description
cotp	cotp	COTP (Connection-Oriented Transport Protocol) is the OSI Layer-4 transport defined in ISO/IEC 8073, supporting connection setup, data transfer, and release. It is used to carry higher-layer OSI protocols like MMS or S7comm.
cursor	Cursor	Cursor is an AI-assisted integrated development environment for Windows, macOS and Linux. It is a fork of Visual Studio Code with additional AI features. Cursor is proprietary software and developed by Anysphere, a San Francisco-based startup company founded in 2022.
iec104	IEC 104	Industrial Standard Communication Protocol used primarily in electrical power systems for telecontrol.
mms-iec61850	Manufacturing Message Specification	MMS (Manufacturing Message Specification, ISO 9506) is an application layer protocol designed for real-time industrial communication between devices such as SCADA masters, RTUs, PLCs, and IEDs. It forms the backbone of IEC 61850 communication in modern substation automation systems.
ntcip	NTCIP	NTCIP is a family of communication standards used to control and monitor intelligent transportation systems, such as traffic signals, dynamic message signs, and roadway sensors. It provides a common language that allows transportation devices from different vendors to work together.
opcua	OPC-UA	OPC UA (OPC Unified Architecture) is a secure, platform-independent industrial communication protocol. It provides standardized discovery, data access, and information modeling for reliable interoperability between automation devices and applications.
r-goose	Routable GOOSE	R-GOOSE is a routable version of the Generic Object Oriented Substation Event (GOOSE) protocol. R-GOOSE encapsulates the data into Layer 3 (IP) packets, typically using UDP multicast. It is used for exchanging event-based data. Limitations: R-GOOSE supports multicast publisher-subscriber communications. But NBAR does not support multicast interfaces and therefore does not classify R-GOOSE multicast traffic. NBAR does not support classification of IEC61850-90-5 based R-GOOSE traffic.
r-sv	Routable Sampled Values	R-SV extends IEC 61850 Sampled Values to be routable via UDP/IP, enabling multicast measured data streaming beyond local LANs for wide-area monitoring and protection systems.
webex-ai	Webex AI	Webex AI encompasses artificial intelligence and machine learning features integrated into Cisco Webex, including real-time transcription, meeting summaries, noise cancellation, and intelligent assistant capabilities.

The following protocols have been updated to improve accuracy:

• amazon

• amazon-instant-video

• apple-remote-desktop

• apple-services

• att-web-services

• azure-ai

• azure-traffic-manager

• cisco-meraki

• cisco-spark

• cloudflare-services

• dnp

• e-online

• fastly-services

• google-docs

• http

• huggingface

• jimdo

• mongo

• ms-lync-audio

• ms-services

• oracle

• oracle-sqlnet

• rackspace-services

• radius

• snmp

• ssl

• t-mobile-web-services

• telegram

• usps

• vimeo

• webex-meeting

• whatsapp

• wikipedia

• windows-azure

• xbox-web-portal

• yahoo-mail

NBAR2 Protocol Packs are available for download on the Cisco software download page (https://software.cisco.com/download/home). On the download page, specify a platform model to display software available for download. One software option will be NBAR2 Protocol Packs.

Example

To display Protocol Packs available for the Cisco ASR 1001 platform, enter "ASR 1001 Router" in the search field.

You can also enter a platform series, such as "ASR 1000 Series," and then select a model from the results.