cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
284
Views
0
Helpful
1
Replies

12.4(20)T NBAR and Gnutella

Erin Korff
Level 1
Level 1

Running 12.4(20) T on 2811 router. Successful DROP on matched PROTOCOL bittorrent and edonkey but not gnutella.

class-map match-any Crap

match protocol bittorrent

match protocol edonkey

match protocol fasttrack

match protocol gnutella

!

!

policy-map drop-Crap

class Crap

drop

Output shows:

show policy-map int fa0/0

FastEthernet0/0

Service-policy input: drop-Crap

Class-map: Crap (match-any)

241862 packets, 28136719 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: protocol bittorrent

203346 packets, 22285230 bytes

5 minute rate 0 bps

Match: protocol edonkey

26033 packets, 4115929 bytes

5 minute rate 0 bps

Match: protocol fasttrack

0 packets, 0 bytes

5 minute rate 0 bps

Match: protocol gnutella

0 packets, 0 bytes

5 minute rate 0 bps

drop

Class-map: class-default (match-any)

151126944 packets, 43720115441 bytes

5 minute offered rate 1994000 bps, drop rate 0 bps

Match: any

Strange as NBAR shows this:

show ip nbar protocol-discovery protocol gnutella

FastEthernet0/0

Last clearing of "show ip nbar protocol-discovery" counters 00:12:59

Input Output

----- ------

Protocol Packet Count Packet Count

Byte Count Byte Count

5min Bit Rate (bps) 5min Bit Rate (bps)

5min Max Bit Rate (bps) 5min Max Bit Rate (bps)

------------------------ ------------------------ ------------------------

gnutella 4 2

999 753

What's the deal with that?

1 Reply 1

Erin Korff
Level 1
Level 1

Checking status of this. Any thoughts?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card