Cisco Systems NAM, 5 manual New Application Classification Architecture, Standards-Based NBI

Chapter 1 Overview

Introducing NAM Traffic Analyzer 5.0

a set of subnets specified by an address prefix and mask, or using other criteria such as a remote device data source (for example, remote WAE device and segment information). If you want to limit the view of your network analysis data to a specific city, a specific building, or even a specific floor of a building, you can use the sites function.

You can also include multiple types of data sources in the site definition, and you can then get an aggregated view of all network traffic.

The pre-defined “Unassigned Site” makes it easy to bring up a NAM without having to configure user-defined sites. Hosts that do not belong to any user-defined site will automatically belong to the Unassigned Site.

Figure 1-2shows an example of how a network may be configured using sites.

Figure 1-2 Site Level Aggregation

San Jose

Campus	NAM
San Jose
Site San	Site New
Jose	York	Netflow
Datacenter		FX
San Jose

New York

NYC Building 1

NYC

Building 2

197645

For information about defining and editing a site, see Sites, page 2-58.

New Application Classification Architecture

In previous releases of NAM, the RMON-2 protocol directory infrastructure was used to identify applications and network protocols. In NAM Traffic Analyzer Release 5.0, the application classification scheme is changed to align with the methodology used by Cisco with technologies such as NBAR (Network-Based Application Recognition) and SCL. It also accepts standardized application identifiers exported by Cisco platforms with NDE (NetFlow Data Export).

This allows you to gain application visibility with consistent and unique application identifiers across the network. For example, you can view applications using a global unique identifier, as compared with multiple classification engines using different applications identifiers.

For information about set up, see Classification, page 2-66.

Standards-Based NBI

NBI (Northbound Interface), also referred to as API (Application Programming Interface) enables partners and customers to provision the NAM and extract performance data. Previous releases of NAM were limited to SNMP s, and direct-URL knowledge for access to some data, including the method by which CSV-formatted data is retrieved.

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

OL-22617-01 1-3