I have created a configuration that appears to work - by creating an 
oer-map referencing the MGMT application "refname". I then fed the 
oer-map back into the MC configuration using the policy-rules statement. 
The Telnet traffic is now being captured correctly:
Rack1R6# show run | se oer
oer master
 policy-rules MANAGEMENT
 logging
 !
 border 150.1.4.4 key-chain OER
  interface FastEthernet0/0 external
  interface FastEthernet0/1 internal
  interface Serial0/2/0 external
 !
 border 150.1.6.6 key-chain OER
  interface FastEthernet0/0.67 external
  interface FastEthernet0/0.146 internal
  interface Serial0/1/0 external
 !
 learn
  throughput
  delay
  periodic-interval 0
  monitor-period 1
  list seq 1 refname MGMT
   traffic-class application nbar telnet
   aggregation-type prefix-length 32
   delay
 periodic 90
 !
oer border
 local Loopback0
 master 150.1.6.6 key-chain OER
oer-map MANAGEMENT 10
 match oer learn list MGMT
*Apr  4 17:39:24.010: %OER_MC-5-NOTICE: Discovered Exit for Appl Prefix 
150.1.8.8/32 telnet, BR 150.1.4.4, i/f Se0/2/0
Rack1R6#show oer master traffic-class learned list MGMT
OER Prefix Statistics:
 Pas - Passive, Act - Active, S - Short term, L - Long term, Dly - Delay 
(ms),
 P - Percentage below threshold, Jit - Jitter (ms),
 MOS - Mean Opinion Score
 Los - Packet Loss (packets-per-million), Un - Unreachable 
(flows-per-million),
 E - Egress, I - Ingress, Bw - Bandwidth (kbps), N - Not applicable
 U - unknown, * - uncontrolled, + - control more specific, @ - active 
probe all
 # - Prefix monitor mode is Special, & - Blackholed Prefix
 % - Force Next-Hop, ^ - Prefix is denied
DstPrefix           Appl_ID Dscp Prot     SrcPort     DstPort 
SrcPrefix        
           Flags             State     Time            CurrBR  CurrI/F 
Protocol
         PasSDly  PasLDly   PasSUn   PasLUn  PasSLos  PasLLos      
EBw      IBw
         ActSDly  ActLDly   ActSUn   ActLUn  ActSJit  ActPMOS  ActSLos  
ActLLos
--------------------------------------------------------------------------------
150.1.2.2/32         telnet defa    N           N           N 
0.0.0.0/0        
                         INPOLICY*      @70         150.1.4.4  
Se0/2/0        U
              48       48        0        0    19073    19073        
1        6
              59       59        0        0        N        N        
N        N
150.1.8.8/32         telnet defa    N           N           N 
0.0.0.0/0        
                          DEFAULT*      @44         150.1.4.4  
Se0/2/0        U
               U        U        0        0        0        0        
1        0
               U        U        0        0        N        N        
N        N
Rack1R6#show oer master
OER state: ENABLED and ACTIVE
  Conn Status: SUCCESS, PORT: 3949
  Version: 2.2
  Number of Border routers: 2
  Number of Exits: 4
  Number of monitored prefixes: 3 (max 5000)
  Max prefixes: total 5000 learn 2500
  Prefix count: total 3, learn 2, cfg 0
  PBR Requirements met
  Nbar Status: Active
Border           Status   UP/DOWN             AuthFail  Version
150.1.6.6        ACTIVE   UP       00:03:22          0  2.2
150.1.4.4        ACTIVE   UP       00:03:22          0  2.2
Global Settings:
  max-range-utilization percent 20 recv 0
  mode route metric bgp local-pref 5000
  mode route metric static tag 5000
  trace probe delay 1000
  logging
  exit holddown time 60 secs, time remaining 0
Default Policy Settings:
  backoff 300 3000 300
  delay relative 50
  holddown 300
  periodic 90
  probe frequency 56
  number of jitter probe packets 100
  mode route observe
  mode monitor both
  mode select-exit good
  loss relative 10
  jitter threshold 20
  mos threshold 3.60 percent 30
  unreachable relative 50
  resolve delay priority 11 variance 20
  resolve range priority 12 variance 0
  resolve utilization priority 13 variance 20
Learn Settings:
  current state : STARTED
  time remaining in current state : 67 seconds
  throughput
  delay
  no inside bgp
  no protocol
  monitor-period 1
  periodic-interval 0
  aggregation-type prefix-length 24
  prefixes 100
  expire after time 720
  Learn-List seq 1 refname MGMT
    Configuration:
     Traffic-Class Application: telnet
     Aggregation-type: prefix-length 32
     Learn type: delay
     Session count: 50 Max count: 100
     Policies assigned: 10
    Stats:
     Traffic-Class Count: 1
regards Andy
Blogs and organic groups at http://www.ccie.net
Received on Mon Apr 05 2010 - 02:14:36 ART
This archive was generated by hypermail 2.2.0 : Sat May 01 2010 - 09:49:56 ART