Query to Graph Cisco router NBAR (Network Based Application Recognition) protocol stats (Either as Bits/Sec or Packets/Sec)

The Query finds all supported protocols on all NBAR enabled interfaces - mutiple interfaces will give many results for the query so be patient . Each discovered protocol can then be graphed for Bits/Sec, Packets/Sec or Bitrate (Router caclulated bits/sec). Some IOS support high capacity (64 Bit Counters) for the Bits/Sec and Packets/Sec fields which can also be graphed.

I've also included a graph template to select 6 Data Source (e.g. 6 Protocols) to be graphed together as stacked areas. You just need to select the appropriate Data sources and name each protocol.

The query uses a combination of the ifIndex and ProtocolIndex to create a custom index of its own. Should your ifINdex change (i.e. you add interfaces) it will screw it up! - I suggest you make use of the ifIndex persist config command.

NBAR SNMP support also requires reasonably new IOS. Support can be verified by walking "1.3.6.1.4.1.9.9.244.1.8.1.1.2" which will give all supported NBAR protocols if SNMP NBAR support is present.

Thanks to EFLY for some of the MIB Decode info

26/01/2004 Version 1.1 Corrected CDEF in the router generated bit rate template. Corrected small bug that meant query failed if the server had the MIB loaded.

Full Details (including install instructions and examples) Here

ZIP Download Here

Deano

This is an example of the query results - just check the protocols you want (there's over 70 in total) and select the graph type....

What a nice addition to SAA templates. By the way, does this work with windows install of Cacti? I've installed it, but Cacti hangs when I tried to add this query to NBAR enabled router. I could not get the verbose mode either...

Test host:
Windows 2000
Cacti 0.8.4

Thanks!

I had the same problem with Windows install, any luck yet?

Havent tried with windows I'm afraid - I only have Linux installs. Its prob something in the PHP script that I havent got right.

What versions of PHP on windows (and which web server) are you using ?

I've been meaning to set Cacti up on my Home Windows Server so hopefully I'll try and debug this soon.....

Deano

Running...

PHP 4.3.5
IIS 5.0 web server
Windows 2000

Is there any configuration that I need to Put on the cisco router/switch interface to get this to work

You need to have NBAR protocol discovery enabled on at least one interface.

Example CIsco config info

As of late last night Ihave a windows install of Cacti up & running so will be testing the compatability this week.

Deano

Double post

Posted a small Update

Ver 1.1 Has the CDEF for the router generated bit rate graphs corrected. Also corrected an error which meant the query failed if the MIB was loaded on the Cacti server.

Still working on getting a Working Win32 Cacti install so I can test the NBAR query on that.

Deano

Hello,

On which cisco router have you tried NBAR?
What was the IOS version?

I have Cisco 2621 with IOS 12.3.10 and the OID you specified it does not exists.

Best regards,
Aleksander

I did a little poking around on my Windows installation and I believe I got it to work by putting a "." in front of every OID in your PHP file.

The first two arrays of OIDs do not start with ".", and adding it to it like you did in the third array seemed to make it work on my Windows installation.

N/A

Fatal error: Maximum execution time of 30 seconds exceeded in C:\cacti-0.8.6\lib\functions.php on line 1145

It also hangs when I try to verbose the query.

No .RRD file is created when I add this graph as well.

OS: Windows 2000
IIS: 5.0

I just wanted to point out how much we are benefiting from this addon. I've attached a sample.

We are currently monitoring and graphing 5 protocols, and also graphing current overall traffic to our WAN sites. The "gap" is the protocols we are working on identifying - of course we'll always have an "unknown"

Comments? Suggestions?

Questions?

I am trying to graph the NBAR stacked protocols from a Cisco Router but i am having trouble.
I just configured the router with the instructiones given on the cisco website. Then i download the zip file and import the templates and installed the php and xml files... this went fine! but... the query doesn`t return anything... there`s 0 items. So i get the empty graphic.
I attach the results. What am i missing?? what`s wrong?
Please Help Me!!