RE: NBAR

From: Osamah Shaheen (ShaheenO@maaden.com.sa)
Date: Sun Oct 05 2008 - 03:19:43 ART


Hi,

It is work with me when only use the website to drop. Suppose that I
need to block the video entire this website, what should I match, I have
used match rtp video and nothing change....

---------------------

FastEthernet0/1/0

  Service-policy output: POLICE

    Class-map: IMAGES (match-all)

      115 packets, 34835 bytes

      30 second offered rate 0 bps, drop rate 0 bps

      Match: protocol http url "*youtube.com*"

      drop

    Class-map: class-default (match-any)

      81868 packets, 13720861 bytes

      30 second offered rate 132000 bps, drop rate 0 bps

      Match: any

----------------

When I tested with another website it showing nothing match!!!!

RiyRouter#sh policy-map int

 FastEthernet0/1/0

  Service-policy output: POLICE

    Class-map: IMAGES (match-any)

      0 packets, 0 bytes

      30 second offered rate 0 bps, drop rate 0 bps

      Match: protocol http url "*youtube.com*"

        0 packets, 0 bytes

        30 second rate 0 bps

      Match: protocol http url "*metacafe.com*" <--

        0 packets, 0 bytes

        30 second rate 0 bps

      drop

    Class-map: class-default (match-any)

      2592 packets, 371777 bytes

      30 second offered rate 141000 bps, drop rate 0 bps

      Match: any

________________________________

From: Ali Mousawi [mailto:mousawi.ali@gmail.com]
Sent: 2008-10-04 23:43
To: Osamah Shaheen
Cc: femi ogunlana; ccielab@groupstudy.com
Subject: Re: NBAR

Hi Osamah,

the following should be able to drop images

On R1:

class-map match-all IMAGES

match protocol http url "*.jpg|*.gif"

match protocol http url "*youtube.com <http://www.youtube.com/> *"

policy-map POLICE

class-map IMAGES

 drop

HTH

On Sat, Oct 4, 2008 at 1:20 PM, Osamah Shaheen <ShaheenO@maaden.com.sa>
wrote:

Have a look at the link below for a good example by Brain M

http://blog.internetworkexpert.com/2008/05/08/using-nbar-for-application
-filtering/

Blogs and organic groups at http://www.ccie.net <http://www.ccie.net/>



This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:19 ARST