Can I use an 'match protocol' in a class-map to classify packets even if 'ip nbar protocol-discovery' hasn't been enabled on an interface?

My understanding was that classification would work regardless of this setting on the interface, but perhaps I'm wrong?

You're correct. You can use 'match protocol' in a class map without enabling anything else.

_________________
blog.brokennetwork.ca

I asked a similar question a little while back. The "ip nbar protocol-discovery" command is used to enable the statistics gathering on the interface.

I thought when you use the command,

Match Protocol ( this enables NBAR to match the protocol you selected) you do not need to explicitly enable NBAR, its automatic.

Hope someone can confirm

_________________
There is no Motivation like self Motivation.

Remember if you worry you die, if you don't worry you still die.

That was my understanding too.

NBAR is enabled, but NBAR protocol-discovery is not. Protocol discovery is a seperate command that is not needed when matching protocol traffic through NBAR

_________________
www.mellowd.co.uk/ccie/

Thanks. Seems we're all in agreement.