From: Ivan Walker (ivan@itpro.co.nz)
Date: Sun Jan 11 2009 - 04:26:06 ARST
Taking a look at the link to the Cisco documentation (link below) it states:
The parameter specification strings can take the form of a regular
expression with the following options:
Option Description
* Match any zero or more characters in this position.
? Match any one character in this position.
| Match one of a choice of characters.
(|) Match one of a choice of characters in a range. For example
cisco.(gif | jpg) matches either cisco.gif or cisco.jpg.
[ ] Match any character in the range specified, or one of the special
characters. For example, [0-9] is all of the digits. [*] is the "*"
character and [[] is the "[" character.
So I would guess it is a subset but you could always lab it up to make sure.
I also forgot to mention previously that apart from appending the ?xxxx
to a url for caching purposes a user could exploit this to bypass url
matching configured on a router.
Ivan
Hobbs wrote:
> What's the purpose of $ if you don't put the * at the end of your
> expression. Doesn't $ signify end of line? Or are these not pure regexp?
>
> On Sat, Jan 10, 2009 at 9:48 PM, Ivan Walker <ivan@itpro.co.nz
> <mailto:ivan@itpro.co.nz>> wrote:
>
> Hi,
>
> Someone kindly pointed out earlier that often the images have ?
> followed some random numbers or string. Quite often this is done
> so that the images aren't taken from a cache. Eg
> http://yourdomain.com/fish.gif?988798
>
> Using the * after jpg etc will match these urls too.
>
> Thanks
>
> Ivan
>
> Radioactive Frog wrote:
>
> Why suffixed *' with the last .jpg* and *.gif and not with *.jpeg
>
> match protocol http url "*.gif*|*.jpeg|*.jpg*"
>
> On Sun, Jan 11, 2009 at 9:29 AM, Narbik Kocharians
> <narbikk@gmail.com <mailto:narbikk@gmail.com>
> <mailto:narbikk@gmail.com <mailto:narbikk@gmail.com>>> wrote:
>
> Ivan,
>
> You are correct.
>
> On Sat, Jan 10, 2009 at 11:56 AM, Ivan Walker
> <ivan@itpro.co.nz <mailto:ivan@itpro.co.nz>
> <mailto:ivan@itpro.co.nz <mailto:ivan@itpro.co.nz>>> wrote:
>
> > Hi,
> >
> > According to the documentation (
> >
>
> http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1024534)
> >
> >
> > url: (Optional) Specifies matching by a URL.
> > url-string: (Optional) User-specified URL of HTTP traffic
> to be
> matched.
> > host: (Optional) Specifies matching by a hostname.
> > hostname-string: (Optional) User-specified hostname to be
> matched.
> >
> > "When specifying a URL for classification, include only the
> portion of the
> > URL that follows the www./hostname/./domain/ in the *match*
> statement. For
> > example, for the URL www.cisco.com/latest/whatsnew.html
> <http://www.cisco.com/latest/whatsnew.html>
> <http://www.cisco.com/latest/whatsnew.html>, include only
>
> > /latest/whatsnew.html with the *match* statement (for
> instance,
> *match
> > protocol http url /latest/whatsnew.html*). "
> > Thus shouldn't the example be like this?
> >
> > class-map match-all TEST
> > match protocol http url "*.gif*|*.jpeg|*.jpg*"
> > match protocol http host "www.youtube.com
> <http://www.youtube.com> <http://www.youtube.com>"
>
> >
> > Regards
> >
> > Ivan
> >
> >
> > Basel wrote:
> >
> >> Hi,
> >> You would need to use the | operator if you are matching
> those
> extensions
> >> from specific websites like YouTube, hence you need 2
> matching
> statements
> >> one for the url of the website and one for all
> extensions need
> to be
> >> matched
> >> while your class-map should match-all.
> >>
> >> class-map match-all TEST
> >> match protocol http url "*.gif*|*.jpeg|*.jpg*"
> >> match protocol http url "www.youtube.com
> <http://www.youtube.com> <http://www.youtube.com>"
>
> >>
> >>
> >>
> >> Regards,
> >> Basel
> >>
> >> -----Original Message-----
> >> From: nobody@groupstudy.com
> <mailto:nobody@groupstudy.com> <mailto:nobody@groupstudy.com
> <mailto:nobody@groupstudy.com>>
> [mailto:nobody@groupstudy.com
> <mailto:nobody@groupstudy.com> <mailto:nobody@groupstudy.com
> <mailto:nobody@groupstudy.com>>] On
> Behalf Of
> >> John
> >> Edom
> >> Sent: Saturday, January 10, 2009 4:36 PM
> >> To: GS
> >> Subject: NBAR url match
> >>
> >> hi,
> >>
> >> Tell me is it correct to match http .gif, .jpeg, jpg images
> >>
> >> class-map match-any HTTP
> >> match proto http url "*.gif*"
> >> match proto http url "*.jpeg*"
> >> match proto http url "*.jpg*"
> >>
> >>
> >> sorry for large font but what you should you clear :)
> >>
> >> I have found some solution without * at end that seems
> correct
> as well and
> >> a
> >> solution where only one statement configure and all
> images type
> separate
> >> with | sign.
> >>
> >> Regards
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >>
>
> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >>
>
> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >>
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> >
>
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> >
> >
> >
>
>
> --
> Narbik Kocharians
> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> www.MicronicsTraining.com
> <http://www.MicronicsTraining.com>
> <http://www.MicronicsTraining.com>
> www.Net-Workbooks.com <http://www.Net-Workbooks.com>
> <http://www.Net-Workbooks.com>
>
> Sr. Technical Instructor
>
>
> Blogs and organic groups at http://www.ccie.net
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:37 ARST
