cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
318
Views
0
Helpful
1
Replies

12.4(20)T NBAR and Gnutella

Erin Korff
Level 1
Level 1

Running 12.4(20) T on 2811 router. Successful DROP on matched PROTOCOL bittorrent and edonkey but not gnutella.

class-map match-any Crap

match protocol bittorrent

match protocol edonkey

match protocol fasttrack

match protocol gnutella

!

!

policy-map drop-Crap

class Crap

drop

Output shows:

show policy-map int fa0/0

FastEthernet0/0

Service-policy input: drop-Crap

Class-map: Crap (match-any)

241862 packets, 28136719 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: protocol bittorrent

203346 packets, 22285230 bytes

5 minute rate 0 bps

Match: protocol edonkey

26033 packets, 4115929 bytes

5 minute rate 0 bps

Match: protocol fasttrack

0 packets, 0 bytes

5 minute rate 0 bps

Match: protocol gnutella

0 packets, 0 bytes

5 minute rate 0 bps

drop

Class-map: class-default (match-any)

151126944 packets, 43720115441 bytes

5 minute offered rate 1994000 bps, drop rate 0 bps

Match: any

Strange as NBAR shows this:

show ip nbar protocol-discovery protocol gnutella

FastEthernet0/0

Last clearing of "show ip nbar protocol-discovery" counters 00:12:59

Input Output

----- ------

Protocol Packet Count Packet Count

Byte Count Byte Count

5min Bit Rate (bps) 5min Bit Rate (bps)

5min Max Bit Rate (bps) 5min Max Bit Rate (bps)

------------------------ ------------------------ ------------------------

gnutella 4 2

999 753

What's the deal with that?

1 Reply 1

Erin Korff
Level 1
Level 1

Checking status of this. Any thoughts?

Review Cisco Networking for a $25 gift card