Hi Kings, yes its working with "mathc request header host regex" command.. i did the capture in wireshark and would able to find the youtube.com under http packet in host field.
Thnks for your help. I have now better understanding Regards, Yusef On Mon, Dec 27, 2010 at 5:59 PM, Kingsley Charles < [email protected]> wrote: > Since it's "youtube.com", it should work by matching the host field as > Tacack mentioned. > > Did you try capturing it using Wireshark? > > I am not sure, "match request header" will match actually in the HTTP > packet. > > With regards > Kings > > On Mon, Dec 27, 2010 at 4:27 PM, Vybhav Ramachandran > <[email protected]>wrote: > >> Hello Yusef, >> >> I just labbed this up and these are the results : >> >> 1) If you read Kings's mail, you will find that only the "absolute URI" >> will contain the full path -> "www.youtube.com/video1.html" >> >> 2) Also, if it's not an absolute URI, then the URI field will only contact >> "/video1.html". The HOST field is used to identify the host. >> >> I found that the GET requests from an IOS router following the >> "non-absolute URI" method. So if you want to block all traffic to >> www.youtube.com, you must do this by matching the regex against the host >> field >> >> ex: >> *regex youtube youtube\.com* >> * >> * >> *class-map type inspection http YOUTUBE* >> *match request header host regex youtube* >> >> Hope this helps! >> Cheers, >> TacACK >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
