RE: NBAR

From: srdja blagojevic (srdja1@pexim.co.yu)
Date: Thu Sep 28 2006 - 04:16:22 ART


Victor,

fa0/0 int on R1 is connected to SW1 or SW2?

Srdja

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Victor Cappuccio
Sent: Thursday, September 28, 2006 04:28
To: 'Chris Broadway'; ccielab@groupstudy.com
Subject: RE: NBAR

Hola Chris :D

I think that NBAR was a weed thing when got developed ;)

It takes your outgoing requests, and then recognizes the traffic that comes
back,

Example of all this Jumbo Mumbo, using this topology

Sw1 ------ R1 f0/0 ------ WebServer(Sw2)

Configuration:

Sw1#copy http://151.1.8.8/l.gif null:

BB1-TS#1
[Resuming connection 1 to R1 ... ]

R1#
R1#show policy-map int f0/0
 FastEthernet0/0

  Service-policy input: IMAGENES_DROP

    Class-map: CLASE_IMAGENES (match-any)
      6 packets, 1363 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol http url "*.gif"
        6 packets, 1363 bytes <<<<<<<<<<<<<<<<< Have Pkts Matched.......
        5 minute rate 0 bps
      drop

    Class-map: class-default (match-any)
      8 packets, 578 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any

R2#show run int f0/0
Building configuration...

Current configuration : 243 bytes
!
interface FastEthernet0/0
  service-policy input IMAGENES_DROP
end

R1#

Sw2#show run | in http
ip http server
ip http path flash:

Sw2#show flash: | in gif
   88 -rwx 8558 Mar 1 1993 03:34:35 +00:00 l.gif

Saludos,
Victor.-

-----Mensaje original-----
De: nobody@groupstudy.com [mailto:nobody@groupstudy.com] En nombre de Chris
Broadway Enviado el: Miircoles, 27 de Septiembre de 2006 10:12 p.m.
Para: ccielab@groupstudy.com
Asunto: NBAR

Group,

I was reviewing this link on the DOC CD:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122
t/122t8/dtnbarad.htm#wp1073317

I have a question. I am seeing posts on this forum that contradict the
example at the bottom in Step three. Could someone that is 100% positive
please respond back to me that the classification in step three is either
correct or not correct.

Gracias.

-Broadway



This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:41 ART