match url or mime?

Hi,

When question reads "match http traffic which contains string root.exe"

what is correct?

match http url "*root.exe*"

or match http mime "*root.exe*"

Thanks for your help,
Ajay

Blogs and organic groups at http://www.ccie.net
Received on Fri Jun 19 2009 - 14:55:44 ART