The problem is that cisco nbar is not doing it's job in finding bittorrent. I can fire up bittorret on a test computer and it can still upload way above the 40000 bit rate.
giga 0/0 is the network side
giga 0/1 internet side
The setup is all correct.
sh policy-map int giga 0/1
GigabitEthernet0/1
Class-map: P2P (match-any)
3094246 packets, 405621021 bytes
5 minute offered rate 84000 bps, drop rate 44000 bps
Match: protocol bittorrent
2012067 packets, 323545868 bytes
5 minute rate 59000 bps
Match: protocol gnutella
50716 packets, 10618062 bytes
5 minute rate 4000 bps
Match: protocol edonkey
1016563 packets, 68773980 bytes
5 minute rate 20000 bps
Match: protocol kazaa2
0 packets, 0 bytes
5 minute rate 0 bps
Match: protocol fasttrack
209 packets, 26453 bytes
5 minute rate 0 bps
Match: protocol directconnect
0 packets, 0 bytes
5 minute rate 0 bps
Match: protocol winmx
0 packets, 0 bytes
5 minute rate 0 bps
Match: protocol custom-01
14690 packets, 2656604 bytes
5 minute rate 0 bps
police:
cir 40000 bps, bc 1500 bytes, be 1500 bytes
conformed 2539939 packets, 198667831 bytes; actions:
transmit
exceeded 17316 packets, 3979007 bytes; actions:
drop
violated 536991 packets, 202974183 bytes; actions:
drop
conformed 39000 bps, exceed 0 bps, violate 44000 bps
Class-map: class-default (match-any)
61657129 packets, 25490943500 bytes
5 minute offered rate 4702000 bps, drop rate 0 bps
Match: any
