NBAR Taxonomy

Viewing the NBAR Taxonomy Information on your Cisco Network Device

[read more]

show ip nbar protocol-pack active
show ip nbar protocol-pack active taxonomy

View the NBAR2 Protocol Pack Taxonomy

  • type: Advanced Protocol Pack
  • pp-version: 16.0(0)
  • ios-version: 16.2(0)

This is an example of a NBAR2 Protocol Pack Taxonomy for the “Domain Name System” protocol

<protocol>
    <attributes>
      <application-group>other</application-group>
      <business-relevance>business-relevant</business-relevance>
      <category>net-admin</category>
      <encrypted>false</encrypted>
      <p2p-technology>false</p2p-technology>
      <sub-category>naming-services</sub-category>
      <traffic-class>ops-admin-mgmt</traffic-class>
      <tunnel>false</tunnel>
    </attributes>
    <common-name>Domain Name System</common-name>
    <enabled>true</enabled>
    <engine-id>3</engine-id>
    <global-id>L4:53</global-id>
    <help-string>Domain Name Server lookup</help-string>
    <id>72</id>
    <ip-version>
      <ipv4>true</ipv4>
      <ipv6>true</ipv6>
    </ip-version>
    <long-description>Domain Name Server (DNS) is a server that translates URLs into IP addresses based on client queries. It is based on client-server architecture.</long-description>
    <name>dns</name>
    <parameters>
      <field-extraction>
        <parameter>
          <help-string>Domain name</help-string>
          <id>13313</id>
          <name>domain-name</name>
        </parameter>
      </field-extraction>
    </parameters>
    <ports>
      <tcp>53,80,5353</tcp>
      <udp>53,5353</udp>
    </ports>
    <indicative-ports>
      <tcp>53,5353</tcp>
      <udp>53,5353</udp>
    </indicative-ports>
    <references>https://www1.ietf.org/rfc/rfc1035.txt</references>
    <commonly-used>10</commonly-used>
    <selector-id>53</selector-id>
  </protocol>