Running 12.4(20) T on 2811 router. Successful DROP on matched PROTOCOL bittorrent and edonkey but not gnutella.
class-map match-any Crap
match protocol bittorrent
match protocol edonkey
match protocol fasttrack
match protocol gnutella
!
!
policy-map drop-Crap
class Crap
drop
Output shows:
show policy-map int fa0/0
FastEthernet0/0
Service-policy input: drop-Crap
Class-map: Crap (match-any)
241862 packets, 28136719 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: protocol bittorrent
203346 packets, 22285230 bytes
5 minute rate 0 bps
Match: protocol edonkey
26033 packets, 4115929 bytes
5 minute rate 0 bps
Match: protocol fasttrack
0 packets, 0 bytes
5 minute rate 0 bps
Match: protocol gnutella
0 packets, 0 bytes
5 minute rate 0 bps
drop
Class-map: class-default (match-any)
151126944 packets, 43720115441 bytes
5 minute offered rate 1994000 bps, drop rate 0 bps
Match: any
Strange as NBAR shows this:
show ip nbar protocol-discovery protocol gnutella
FastEthernet0/0
Last clearing of "show ip nbar protocol-discovery" counters 00:12:59
Input Output
----- ------
Protocol Packet Count Packet Count
Byte Count Byte Count
5min Bit Rate (bps) 5min Bit Rate (bps)
5min Max Bit Rate (bps) 5min Max Bit Rate (bps)
------------------------ ------------------------ ------------------------
gnutella 4 2
999 753
What's the deal with that?