From: Victor Cappuccio (cvictor@protokolgroup.com)
Date: Wed Sep 27 2006 - 23:28:09 ART
Hola Chris :D
I think that NBAR was a weed thing when got developed ;)
It takes your outgoing requests, and then recognizes the traffic that comes
back,
Example of all this Jumbo Mumbo, using this topology
Sw1 ------ R1 f0/0 ------ WebServer(Sw2)
Configuration:
Sw1#copy http://151.1.8.8/l.gif null:
BB1-TS#1
[Resuming connection 1 to R1 ... ]
R1#
R1#show policy-map int f0/0
FastEthernet0/0
Service-policy input: IMAGENES_DROP
Class-map: CLASE_IMAGENES (match-any)
6 packets, 1363 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: protocol http url "*.gif"
6 packets, 1363 bytes <<<<<<<<<<<<<<<<< Have Pkts Matched.......
5 minute rate 0 bps
drop
Class-map: class-default (match-any)
8 packets, 578 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
R2#show run int f0/0
Building configuration...
Current configuration : 243 bytes
!
interface FastEthernet0/0
service-policy input IMAGENES_DROP
end
R1#
Sw2#show run | in http
ip http server
ip http path flash:
Sw2#show flash: | in gif
88 -rwx 8558 Mar 1 1993 03:34:35 +00:00 l.gif
Saludos,
Victor.-
-----Mensaje original-----
De: nobody@groupstudy.com [mailto:nobody@groupstudy.com] En nombre de Chris
Broadway
Enviado el: Miircoles, 27 de Septiembre de 2006 10:12 p.m.
Para: ccielab@groupstudy.com
Asunto: NBAR
Group,
I was reviewing this link on the DOC CD:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122
t/122t8/dtnbarad.htm#wp1073317
I have a question. I am seeing posts on this forum that contradict the
example at the bottom in Step three. Could someone that is 100% positive
please respond back to me that the classification in step three is either
correct or not correct.
Gracias.
-Broadway
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:41 ART
