RE: NBAR Classification Question

From: Mike Haddad (mike.haddad@hotmail.com)
Date: Sun Mar 16 2008 - 04:48:51 ART


Thanks Shine clear enough now!

I appreciate it! :-)

Regards,
> From: shinepjoseph@iprimus.com.au> To: mike.haddad@hotmail.com;
ccielab@groupstudy.com> Subject: RE: NBAR Classification Question> Date: Sun,
16 Mar 2008 18:35:59 +1100> > Any URL containing root.exe> > > > _____ > >
From: Mike Haddad [mailto:mike.haddad@hotmail.com] > Sent: Sunday, 16 March
2008 6:34 PM> To: Shine Joseph; ccielab@groupstudy.com> Subject: RE: NBAR
Classification Question> > > > Hello Joseph,> > Then what about "*root.exe*"?>
> Thanks,> > > > From: shinepjoseph@iprimus.com.au> > To:
mike.haddad@hotmail.com; ccielab@groupstudy.com> > Subject: RE: NBAR
Classification Question> > Date: Sun, 16 Mar 2008 18:05:57 +1100> > > > * is
the wild card representation. That means if you specify *cisco.com*> any> >
url containing cisco.com will be matched. You are telling the router to> >
match only cisco.com while specifying "cisco.com" as the match criteria.> >
This won't match anything as there wouldn't be any such url. If you need> to>
> match cisco.com, it would be better to use host option.> > > > HTH,> >
Shine> > > > > > -----Original Message-----> > From: nobody@groupstudy.com
[mailto:nobody@groupstudy.com] On Behalf Of> Mike> > Haddad> > Sent: Sunday,
16 March 2008 3:01 PM> > To: ccielab@groupstudy.com> > Subject: NBAR
Classification Question> > > > Hello,> > > > I am a bit lost between the two>
> > > match protocol http host *cisco.com* --> Using *> > match protocol http
host "cisco.com" --> Using ""> > > > Are they the same?> > > > Thanks,> > > >



This archive was generated by hypermail 2.1.4 : Tue Apr 01 2008 - 07:53:53 ART