From: simon hart (simon@harttel.com)
Date: Thu Oct 27 2005 - 12:53:44 GMT-3
Dave,
I do not think this would be correct. If you have .jpeg, then I think you
should use match protocol http url .jpeg
The reason being that this will be an executable being requested
Simon
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Schulz, Dave
Sent: 27 October 2005 16:20
To: ccielab@groupstudy.com
Subject: NBAR ..... mime type question
I was looking through the doc cd under the NBAR examples for MIMI and
ran across and example that states.....
The following example classifies, within class map foo, packets based on
the JPEG MIME type:
class-map foo
match protocol http mime "*jpeg"
However, if the question states to match a .jpeg file, then would it be
just as correct to configure that as:
class-map foo
match protocol http mime "*.jpeg" (with the "dot" added)
Thoughts?
Dave Schulz,
Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com >
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:54 GMT-3