NBAR and Netbios

From: Anthony Pace (anthonypace@fastmail.fm)
Date: Fri May 09 2003 - 15:21:11 GMT-3


On all the router interfaces I have enabled NBAR on, I only see NETBIOS
traffic going into the interface but no Netbios going out. I understand
that some Netbios/IP is broadcasts which will not be propogated, but alot
of should be unicasts which I would expect to see IN and OUT bytes. DOes
anyone have any insights into this?

Anthony Pace

FastEthernet2/0
                            Input Output
   Protocol Packet Count Packet Count
                            Byte Count Byte Count
                            5 minute bit rate (bps) 5 minute bit rate
                            (bps)
   ------------------------ ------------------------
   ------------------------
   snmp 62379 66897
                            5593740 5740531
                            0 0
   http 11493 7448
                            8388659 1715467
                            0 0
   netbios 67998 0
                            9930903 0
                            0 0
   dhcp 10598 0
                            3457856 0
                            0 0
   icmp 8185 5196
  

/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
FastEthernet2/1
                            Input Output
   Protocol Packet Count Packet Count
                            Byte Count Byte Count
                            5 minute bit rate (bps) 5 minute bit rate
                            (bps)
   ------------------------ ------------------------
   ------------------------
   snmp 160660 62369
                            13413785 5592915
                            0 0
   http 9066 10071
                            1846833 8169989
                            0 0
   netbios 12137 0
                            1663597 0
                            0 0
   icmp 7755 2578
                            750789 231383
                            0 0
   secure-http 669 708
                            122257 502288
                            0 0

              

-- 
-- 
  Anthony Pace
  anthonypace@fastmail.fm

-- http://www.fastmail.fm - Does exactly what it says on the tin



This archive was generated by hypermail 2.1.4 : Mon Jun 02 2003 - 15:13:40 GMT-3