RE: NBAR URL and host matching

From: Shine Joseph (shinepjoseph@iprimus.com.au)
Date: Mon Sep 03 2007 - 21:22:28 ART


Mark,

If you just want to match the directory ccie, then the match statement can
be "/ccie" and if you want to include every folder under the ccie directory,
I would do a "/ccie/*"

Please the link below for more:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hqos_c
/part05/ch05/hdtnbara.htm#wp1033958

HTH,
Shine

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Mark
Turner
Sent: Tuesday, 4 September 2007 9:42 AM
To: ccielab@groupstudy.com
Subject: NBAR URL and host matching

Hello,

I am looking for some clarity when using NBAR for URL and host
matching. For example assume that i want to match the website and
directory, www.cisco.com/ccie. I also want to drop any pics with .jpg,
.jpeg or .gif from this site. Below is how i would configure it but i
have a couple of questions.

Would the cisco class below match hits from www.cisco.com/ccie?

Is the / in front of the ccie correct? Is it needed at all? Should one
be included afterwards? /ccie/ ?

class-map match-all CISCO
        match protocol http host "*www.cisco.com"
         match protocol http url "/ccie"

Class-map MATCH-ANY PICS
        Match protocol http url "*.jpg|*.jpeg|*.gif"
        
Thanks,

M.T.



This archive was generated by hypermail 2.1.4 : Sat Oct 06 2007 - 12:01:09 ART