From: Tarun Pahuja (pahujat@gmail.com)
Date: Mon Jun 11 2007 - 07:27:06 ART
Malcolm,
When matching by MIME-type, NBAR matches a packet containing
the MIME-type and all subsequent packets until the next HTTP transaction.
When matching by HOST, NBAR performs a regular expression match on the host
field contents inside an HTTP GET packet and classifies all packets from
that host.
When matching by URL is performed, NBAR recognizes the HTTP GET packets
containing the URL, and then matches all packets that are part of the HTTP
GET request.
Please take a look at the following URL, Your example needs corrections.
HTH,
Tarun Pahuja
CCIE#7707(R&S,Security,SP,Voice,Storage),CCSI
This archive was generated by hypermail 2.1.4 : Sun Jul 01 2007 - 17:24:48 ART