observation on NBAR

From: Thomwin Chen (thomwin_chen@yahoo.com)
Date: Thu Aug 18 2005 - 02:46:27 GMT-3


Hi All,
 
I just observed NBAR and tested it.
I use this following link :
http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_feature_guide09186a0080134add.html
 
and use this link sent by Scott Morris several days ago:
http://www.sfsu.edu/training/mimetype.htm
 
I just noticed that :
 
match protocol http mime "*jpg" ---> didn't match anything (even the jpg file)
match protocol http mime "*jpeg" or match protocol http mime "image/jpeg" ---> match jpeg,jpg,jpe,jfif,pjpeg,pjp
match protocol http mime "*mpg" ---> didn't match anything (even the mpg file)
match protocol http mime "*mpeg" or match protocol http mime "video/mpeg" ----> match mpeg,mpg,mpe,mpv,vbs,mpegv
 
match protocol http host "cisco*" ----> didn't match www.cisco.com
match protocol http host "*cisco*" -----> match www.cisco.com
 
match protocol http url "WWChannels*" match www.cisco.com/WWChannels/
match protocol http url "*WWChannels*" match www.cisco.com/WWChannels/
match protocol http url "LOCATR*" didn't match www.cisco.com/WWChannels/LOCATR/
match protocol http url "*LOCATR* match www.cisco.com/WWChannels/LOCATR/
 
Rgds,
Thomwin
 

                
---------------------------------
 Start your day with Yahoo! - make it your home page



This archive was generated by hypermail 2.1.4 : Sun Sep 04 2005 - 17:01:19 GMT-3