so,is there any way to recognise HTTP or even HTTPS very well?
I don't kown L7 very much,really bother...
TKS
Any one konws how to mark http protocol?
As we all know that HTTP use tcp port 80,BUT,some download tools or IM use 80 too,
so,is there any way to recognise HTTP or even HTTPS very well?
I don't kown L7 very much,really bother...
TKS
so,is there any way to recognise HTTP or even HTTPS very well?
I don't kown L7 very much,really bother...
TKS
Re: Any one konws how to mark http protocol?
http://l7-filter.sourceforge.net/protocols
Code: Select all
/ip firewall layer7-protocol
add name=HTTPS regexp="^(.\?.\?\\x16\\x03.*\\x16\\x03|.\?.\?\\x01\\x03\\x01\?.*\\x0b)"