cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
725
Views
0
Helpful
1
Replies

Is there a way to collect protocol ID for NBAR using SNMP

eksantrik
Level 1
Level 1

We are collecting some netflow data from our Cisco ISR router and noticed a netflow field that shows the application ID for the detected traffic. The field is in hex format but it is ok.

 

Our goal is to locate an SNMP table on ISR that tells us the application IDs for each NBAR detected application.

 

Is there such a table?

 

We found the CISCO-NBAR-PROTOCOL-DISCOVERY-MIB file but there were no application ID fields in it. It only provided us the application name and some byte counts.

 

Thanks,

 

 

1 Reply 1

eksantrik
Level 1
Level 1

To be clear, what we are looking for should match the output for:

 

isr4300-3977#show ip nbar protocol-id

or better yet:

 

isr4300-3977#show flow exporter option application table

Engine: prot (IANA_L3_STANDARD, ID: 1)

appID Name Description
----- ---- -----------
1:8 egp Exterior Gateway Protocol
1:88 eigrp Enhanced Interior Gateway Routing Protocol
1:47 gre General Routing Encapsulation
1:1 icmp Internet Control Message Protocol
1:4 ipinip IP in IP
1:58 ipv6-icmp ICMP for IPv6
1:115 l2tp Layer 2 Tunneling Protocol
1:89 ospf Open Shortest Path First
1:46 rsvp Resource Reservation Protocol

Any clues?

Review Cisco Networking for a $25 gift card