NBAR examines the traffic on a router interface and associates it with an application. This is done by way of mapping ports to Protocols. In addition it also recognises traffic without a standard port number, useful for things like P2P traffic.
What would you use this for?
If you are trying to identify traffic on an interface for the purpose of applying QoS polices to it.
How does it all work?
show ip nbar protocol-discovery; or
show ip nbar protocol-discovery top-n 10 (shows you the top 10 protocols)
show ip nbar protocol-discovery stats max-bit-rate top-n (show the top protocols by max bit rate)
MystaJoneS 