NBAR - Classifying MIME type

From: Schulz, Dave (DSchulz@dpsciences.com)
Date: Fri Apr 21 2006 - 00:28:19 GMT-3

• Next message: Victor Cappuccio: "Re: One of those wrong days"
• Previous message: Brian Dennis: "RE: One of those wrong days"
• Next in thread: Faryar Zabihi \(fzabihi\): "RE: NBAR - Classifying MIME type"
• Maybe reply: Faryar Zabihi \(fzabihi\): "RE: NBAR - Classifying MIME type"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Group -

I realize that we may have covered this issue a few times, but I wanted
to ask a slightly different question. I have been researching the
various MIME types and those that we may be asked to configure for NBAR.
If we are looking to classify traffic of .avi type....

Would it be more correct to do it.....

Class AVI_TYPE
  Match protocol http mime "*.avi"

OR.....

Class AVI_TYPE
  Match protocol http mime "video/avi"

Dave Schulz,

Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com >

• Next message: Victor Cappuccio: "Re: One of those wrong days"
• Previous message: Brian Dennis: "RE: One of those wrong days"
• Next in thread: Faryar Zabihi \(fzabihi\): "RE: NBAR - Classifying MIME type"
• Maybe reply: Faryar Zabihi \(fzabihi\): "RE: NBAR - Classifying MIME type"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Mon May 01 2006 - 11:41:58 GMT-3