From: Edwards, Andrew M (andrew.m.edwards@boeing.com)
Date: Thu Aug 18 2005 - 16:44:30 GMT-3
That's what I was trying to tell you a while ago tim.
But for points, it wont hurt to just:
Class-map match-any jpeg
Match protocol http mime image/jpeg
Match protocol http *.jpeg
Match protocol http *.jpg
Note that the IOS will put the appropriate quotations around string
pattern search where necessary. 8)
andy
-----Original Message-----
From: ccie2be [mailto:ccie2be@nyc.rr.com]
Sent: Thursday, August 18, 2005 4:23 AM
To: 'Thomwin Chen'; ccielab@groupstudy.com
Subject: RE: observation on NBAR
Hey Thomas,
Excellent but highly disturbing observations.
How did you make your determination?
And, are you 100% sure you're observations are correct?
Assuming you are correct, these inconsistencies are very disturbing.
Tim
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Thomwin Chen
Sent: Thursday, August 18, 2005 1:46 AM
To: ccielab@groupstudy.com
Subject: observation on NBAR
Hi All,
I just observed NBAR and tested it.
I use this following link :
http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_feature_
guid
e09186a0080134add.html
and use this link sent by Scott Morris several days ago:
http://www.sfsu.edu/training/mimetype.htm
I just noticed that :
match protocol http mime "*jpg" ---> didn't match anything (even the jpg
file)
match protocol http mime "*jpeg" or match protocol http mime
"image/jpeg"
---> match jpeg,jpg,jpe,jfif,pjpeg,pjp
match protocol http mime "*mpg" ---> didn't match anything (even the mpg
file)
match protocol http mime "*mpeg" or match protocol http mime
"video/mpeg"
----> match mpeg,mpg,mpe,mpv,vbs,mpegv
match protocol http host "cisco*" ----> didn't match www.cisco.com match
protocol http host "*cisco*" -----> match www.cisco.com
match protocol http url "WWChannels*" match www.cisco.com/WWChannels/
match protocol http url "*WWChannels*" match www.cisco.com/WWChannels/
match protocol http url "LOCATR*" didn't match
www.cisco.com/WWChannels/LOCATR/ match protocol http url "*LOCATR* match
www.cisco.com/WWChannels/LOCATR/
Rgds,
Thomwin
---------------------------------
Start your day with Yahoo! - make it your home page
This archive was generated by hypermail 2.1.4 : Sun Sep 04 2005 - 17:01:19 GMT-3