Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Unstoppable torrent

Hello!

I an trying to stop torrent. Here found a lot of samples, but no one works .

I have Cisco 3745. On it IOS 12.4(15)T11, with nbar version  6.

I have create folloing class-map

class-map match-all cm_p2p
match protocol edonkey
match protocol kazaa2
match protocol bittorrent
!
!
policy-map pm_p2p
class cm_Block_Torrents
   drop

then added on external and internal interface command  ip nbar protocol-discovery on internal added service policy input  pm_p2p on internal interface.

as I can see, nbar sees torrents but it do not dropped.

I tryed different way I tried to mark traffic with dscp and then drop. In both cases nbar counter grows, but policy map counter on 0.

Please tell how stop torrent ?

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Unstoppable torrent

You defined the class map as match all.  You meant for it to be match any.  Sorry, I should have noticed this from your initial post.  Try redefining the class map as follows:

no class-map cm_p2p

class-map match-any cm_p2p
  match protocol edonkey
  match protocol kazaa2
  match protocol bittorrent

Match all means traffic has to match every line before matching the class map.  Match any allows traffic to match the class map if it matches any line.

Jason

4 REPLIES

Re: Unstoppable torrent

Could you post your output for 'show policy-map'?

New Member

Re: Unstoppable torrent

rtr#show policy-map
  Policy Map pm_p2p
    Class cm_p2p
      drop

rtr#show policy-map interface  fa0/1.44
FastEthernet0/1.24

  Service-policy input: pm_p2p

    Class-map: cm_p2p (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol edonkey
      Match: protocol kazaa2
      Match: protocol bittorrent
      drop

    Class-map: class-default (match-any)
      1438399 packets, 800192194 bytes
      5 minute offered rate 2202000 bps, drop rate 0 bps
      Match: any

  Service-policy output: pm_p2p

    Class-map: cm_p2p (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol edonkey
      Match: protocol kazaa2
      Match: protocol bittorrent
      drop

    Class-map: class-default (match-any)
      96679 packets, 87266583 bytes
      5 minute offered rate 1803000 bps, drop rate 0 bps
      Match: any

Re: Unstoppable torrent

You defined the class map as match all.  You meant for it to be match any.  Sorry, I should have noticed this from your initial post.  Try redefining the class map as follows:

no class-map cm_p2p

class-map match-any cm_p2p
  match protocol edonkey
  match protocol kazaa2
  match protocol bittorrent

Match all means traffic has to match every line before matching the class map.  Match any allows traffic to match the class map if it matches any line.

Jason

New Member

Re: Unstoppable torrent

Class map was incorrect used match-all, should be match-any.

3634
Views
0
Helpful
4
Replies
CreatePlease login to create content