Re: NBAR ..... mime type question

From: Carlos G Mendioroz (tron@huapi.ba.ar)
Date: Thu Oct 27 2005 - 12:43:24 GMT-3


There have been many threads discussing NBAR and MIME types, there is
good content to take a look in the archives !

Don't confuse MIME type with file name.
Types are like "Content-Type: image/jpeg;", no dot there.

Also, get confortable with direction of transfers and where NBAR can see
some MIME encodings. Browsers advertize what they can receive, http
servers tell what format the content they send is.

-Carlos

Schulz, Dave @ 27/10/2005 12:20 dixit:
> I was looking through the doc cd under the NBAR examples for MIMI and
> ran across and example that states.....
>
> The following example classifies, within class map foo, packets based on
> the JPEG MIME type:
> class-map foo
> match protocol http mime "*jpeg"
>
> However, if the question states to match a .jpeg file, then would it be
> just as correct to configure that as:
>
> class-map foo
> match protocol http mime "*.jpeg" (with the "dot" added)
>
> Thoughts?
>
>
> Dave Schulz,
> Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com >
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>

-- 
Carlos G Mendioroz  <tron@huapi.ba.ar>  LW7 EQI  Argentina


This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:54 GMT-3