NBAR question

[carl_townshend]

Hi All

I have a question around NBAR on branch routers, how is NBAR different from Netflow? Does NBAR use Netflow or are they different ?

cheers

[rasmus.elmholt · Accepted solution]

Hi
The main difference is that NBAR uses definitions and L7 inspection to recognise traffic. And has to get updated to support new applications.
NetFlow only looks in the network headers and collects information from it.
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-netflow/prod_white_paper0900aecd80406232.html

NetFlow on Cisco is used to export statistics of network traffic to a NetFlow Collector. NBAR is used to match traffic on the device and can be used as part of the classification process in QoS.

Hope this helps.