If I turn on NBAR on my routers, will NTA understand what i's getting and list the applications correctly?
We are presently examining some options for NBAR monitoring. No dates to share at this point.
Short answer: No
Long answer: It isn't that NTA doesn't understand NBAR. It is that the the netflow protocol doesn't recognize/send NBAR information to NTA.
Samuel's correct. NBAR is a completely separate technology with some obvious overlap with NetFlow. We at SolarWinds have seen a few requests for NBAR, but the interest has been mild.
How does ManageEngine work it in then (www.adventnet.com/.../netflow-cisco.html)
Do they poll via SNMP and then mash the data together somehow?
I'd be very interested in something that gave me a bit more visibility into the 50GB of port 80 traffic we seem to plough through in a day.
I believe that they poll the CISCO-NBAR-PROTOCOL-DISCOVERY-MIB via SNMP and correlate the data somehow.
It's definitely something we could do. It's not difficult, but as with anything, it takes time, and we would do that instead of something else. When we've interviewed users about NBAR, most folks don't know much about it. The few who do are under the impression that it's a big hit on router resources (esp. CPU, if I recall) and hence don't have any great desire to deploy it. If any of that changes and we have a groundswell of interest in NBAR, we will be responsive.
I would like to request native NBAR support be added to either Orion NPM and/or the Netflow Traffic Analyzer. It is very valuable to be able to see Layer 7 data via NBAR in addition to the Netflow data. It will provide more visibility into what is going on in the network, and more visibilty is always a good thing!
Netflow monitors the data in Layer 2 through 4 only and is only able to determine applications by port. This of course is not useful for applications that use dynamic ports. NBAR completes the view by examining the data from Layer 3 through 7. It uses layer 3 & 4 PLUS deep packet inspection (layer 7) for traffic classification. This is useful for statefull inspection of dynamic port traffic. NBAR is a nice feature already built into most Cisco routers that just needs to be collected and presented in a useful way by a good tool such as NTA.
Thanks for the post. I am doing some more fact finding now on NBAR deployment so it is very timely. We don't have NBAR built in today but is you set it up manually you can use Orion's Universal Device Poller to poll the NBAR MIB for results.
FYI... i was looking for this information . thanks
Do you use NBAR today?
Same here for NBAR.
I would like to see NBAR support added as well.
Please please add NBAR support to Orion! I tried the ManageEngine product and the NBAR support is great. This would be great in Orion.
LesOkrasa,
thanks for your feedback.
Please use this thread to vote for your feature: http://thwack.com/forums/73.aspx This will help to rise its priority in PM's feature list.
thanks
Add me as another requestor for NBAR. We owned ManageEngine and would like to use NTA, but the lack of NBAR is a killer.
NBAR supporters for NTA reply to the thread below so we can get Solarwinds to add this feature to NTA!
Hello J,
NBAR is definitely being considered here at SolarWinds, I really appreciate the fact that you brought this up on the forum again. It is has been long discussed and is currently the #1 most voted feature request in the Idea's and Feature Request section. Your feedback is valued and we are listening. The requests for NBAR support have certainly become more frequent. Please make sure that you visit the linked section above and up-vote existing or create new idea's / features requests.
-Jacob
NBAR2 beta ready: Better application traffic visibility - NTA 4.2 Beta using NBAR2
Just wanted to let you know that NTA 4.2 is now in general availability and NBAR2 is implemented!
Netflow Traffic Analyzer 4.2 is Now Available
Here are the two key Success Center documents you will want to reference to start using NBAR2.
Set up NBAR2 on Cisco devices - SolarWinds Worldwide, LLC. Help and Support
NBAR2 Advanced Applications - SolarWinds Worldwide, LLC. Help and Support
