|
1
|
# Quicktime HTTP
|
|
2
|
# Pattern attributes: good notsofast notsofast subset
|
|
3
|
# Protocol groups: streaming_video streaming_audio ietf_draft_standard
|
|
4
|
# Wiki: http://protocolinfo.org/wiki/HTTP
|
|
5
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
|
6
|
#
|
|
7
|
# This pattern has been tested and is believed to work well.
|
|
8
|
# (Quick Time v6.5.1 downloading from www.apple.com/trailers)
|
|
9
|
#
|
|
10
|
# To get or provide more information about this protocol and/or pattern:
|
|
11
|
# http://www.protocolinfo.org/wiki/HTTP
|
|
12
|
# http://lists.sourceforge.net/lists/listinfo/l7-filter-developers
|
|
13
|
#
|
|
14
|
# Since this is a subset of HTTP, it should be put earlier in the packet
|
|
15
|
# filtering chain than HTTP. Also, please don't use this to block Quicktime.
|
|
16
|
# If you must do that, you should use a filtering HTTP proxy, which is probably
|
|
17
|
# more accurate.
|
|
18
|
|
|
19
|
quicktime
|
|
20
|
user-agent: quicktime \(qtver=[0-9].[0-9].[0-9];os=[\x09-\x0d -~]+\)\x0d\x0a
|
|
21
|
|