RE: Match protocol http url | mime

From: Scott Morris (swm@emanon.com)
Date: Mon Oct 17 2005 - 09:38:41 GMT-3

Matching on the URL string would assume (generally not a good idea) that
everyone puts their pictures into an /images/ directory.

If you match on MIME types for "image/*" then that will cover any type of
image (GIF, JPG, etc) no matter what the filename or originating directory
structure.

Just a thought. It's Monday though, and I haven't been caffienated yet.

Scott

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Tim
Sent: Monday, October 17, 2005 7:45 AM
To: 'simon hart'; 'Group Study'
Subject: RE: Match protocol http url | mime

Hi Simon,

As unusual and unfortunately, I can't give you a definitive answer to your
excellent question.

However, for purposes of what to do if confronted with this scenario and
uncertainty in the lab, I would advise you, if possible, to cover all bases
by applying the policy in both directions.

This way you don't lost points regardless of what the true answer is.

I also suspect that you will be given subtle "clues" with the working of the
question which may include words such as "requests" or "replies" which may
indicate in which direction the policy should be applied. This, in combo
with being told on which interface your policy should be applied may be all
the info you need to correctly meet the task requirements.

Of course, if there's still any ambiguity, I would approach the proctor with
a "do they mean this or do they mean that" type of question.

Also, keep in mind, if have to apply your policy to either "this" type of
traffic or "that" type of traffic, that the class-map command makes it easy
to handle this type of problem by allowing you the option of "match-any" or
"match-all" construct.

I mention this last point only because I remember struggling to solve a
similar type of problem by using something like this:

Class-map HTTP
match http <reg-exp>

While using a <reg-exp> to fulfill a "either" condition could work, by
forgetting about the "match-any" option, I made my life much more difficult,
unnecessarily.

HTH, Tim

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
simon hart
Sent: Monday, October 17, 2005 4:51 AM
To: Group Study
Subject: Match protocol http url | mime

Hi all,

I have been playing with this command and would like an opinion on the
direction by which this command should be applied. As an example I set up
the following:

Host----------e0-R1-e1--------------------Internet

The Host is a windows pc with IE explorer and packet capturing using
Ethereal

I apply the following commands

policy-map QOS
Class HTTP
drop

class-map HTTP
match url */image/*

service-policy out QOS or service-policy out QOS

Now my question is regarding the servic-policy command. In order to drop
anything associated with a directory string that contains /image/ should I
apply the command outbound on e0 or inbound.

In notice that when I have it applied as outbound then I get a number of
hits within the class map, however the web page will refresh - albeit
slowly.

If I put the command on inbound then I also get a number of hits in the
class-map, however upon refreshing the web page, the page will hang halfway
through.

So which would be more appropriate outbound or inbound?? Would this be the
same for mime requests?

Thanks

Simon 

--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.12.2/137 - Release Date: 16/10/2005

This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:51 GMT-3