From: Schulz, Dave (DSchulz@dpsciences.com)
Date: Fri Oct 28 2005 - 23:43:47 GMT-3
Yes, it appears to be a bit unclear on exactly the "best practice", but what I
am understanding from what Scott states, that you don't use the "dot" with the
mime type, since is not part of the actual filename. And, you can use (or not
use) the quotes in the url expression. However, this appears to be necessary
in the mime-type expression. So, for the .jpeg within a http page that is
imbedded, you would use....
match protocol http mime "*jpeg"
or,
match protocol http mime "image/jpeg"
Hope this helps.
Dave
-----Original Message-----
From: Kunle Ayodele
To: Dave Temkin
Cc: Scott Morris; Schulz, Dave; ccielab@groupstudy.com
Sent: 10/28/2005 6:12 PM
Subject: Re: NBAR ..... mime type question
Hmmmmm.Still dont get it. will it be right if am to match images of file
type.gif,jpg to use
class-map match-all KCK
match protocol http url "*.gif|*.jpg"
or
match protocol http mime "*gif|*.jpg"
On 10/27/05, Dave Temkin <dave@ordinaryworld.com
<mailto:dave@ordinaryworld.com> > wrote:
Related question - does the URL need to be in quotes or no?
The examples they give here say no for match url, but yes for match
mime:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft
/121t/121t5/dtnbar.htm#xtocid259533
<http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newf
t/121t/121t5/dtnbar.htm#xtocid259533>
-Dave
On Thu, 27 Oct 2005, Scott Morris wrote:
> The . Is never part of a MIME specification. That's a file name, and
> therefore is part of the http url string.
>
> Two different pieces.
>
> Scott
>
> -----Original Message-----
> From: nobody@groupstudy.com <mailto:nobody@groupstudy.com> [mailto:
nobody@groupstudy.com <mailto:nobody@groupstudy.com> ] On Behalf Of
> Schulz, Dave
> Sent: Thursday, October 27, 2005 11:20 AM
> To: ccielab@groupstudy.com <mailto:ccielab@groupstudy.com>
> Subject: NBAR ..... mime type question
>
> I was looking through the doc cd under the NBAR examples for MIMI and
ran
> across and example that states.....
>
> The following example classifies, within class map foo, packets based
on the
> JPEG MIME type:
> class-map foo
> match protocol http mime "*jpeg"
>
> However, if the question states to match a .jpeg file, then would it
be just
> as correct to configure that as:
>
> class-map foo
> match protocol http mime "*.jpeg" (with the "dot" added)
>
> Thoughts?
>
>
> Dave Schulz,
> Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com>
<mailto: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com> >
>
>
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:55 GMT-3