Trend Micro InterScan M Series, Administrator'S Manual

Page: 150 / 480

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Administrator’s Guide
6
-
10
Standard Internet media types have the following format:
type/subtype
Nonstandard types have subtype that is prefixed with an
x-
, as follows:
type/x-subtype
Vendor-specific types have a subtype with a
vnd.
prefix, as follows:
type/vnd.subtype
Capturing Network Traffic for Analysis
If the kind of file that you are looking for is not listed in Table 6-1, “Common Internet
media types and subtypes, by category,” on page 6-8, you can determine the MIME
type by using a network traffic capture utility (also known as packet sniffers) like
Ethereal.
There are both free and commercially available network traffic capture utilities.
Locating the MIME type in Packet Sniffer Data
A typical packet sniffer application can return data on an HTTP stream similar to that
shown here:
GET /midisong/wma/014223.wma HTTP/1.1
Accept: */*
User-Agent: NSPlayer/9.0.0.2980
Host: sample.some-domain.com
X-Accept-Authentication: NTLM, Digest, Basic
Pragma: version11-enabled=1
Pragma:
no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=
4294967295,max-duration=0
Pragma: packet-pair-experiment=1
Pragma: pipeline-experiment=1
Supported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch,
com.microsoft.wm.predstrm
Pragma: xClientGUID={3300AD50-2C39-46c0-AE0A-9B31A4381F20}
Accept-Language: zh-TW, *;q=0.1
HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Date: Tue, 23 Jan 2007 06:42:32 GMT