Go CCIE Go!! - A Cisco Certified Internetwork Expert

Correct, even though you specify anything after the /, nbar strips that and only matches the host portion of your string so with your second statement you would match anything from www.cisco.com regardless of what directory it came from.
From the doc url
Host specification is identical to URL specification. NBAR performs a regular expression match on the host field contents inside an HTTP packet and classifies all packets from that host. For example, for the URL www.cisco.com/latest/whatsnew.html, include only www.cisco.com.
http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/clsfy_traffic_nbar_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1055866
- Thor On Sat, May 24, 2008 at 12:24 PM, Joseph Brunner wrote:
> Im not behind my 2811 right now, but I don’t expect the second one to work. > > The http host feature identifies the site, while the directory identifies > the content on that host. I have never seen both work in the one host line. > > -Joe > > —–Original Message—– > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of > ccie > Sent: Saturday, May 24, 2008 6:59 AM > To: ‘Cisco certification’ > Subject: What would be the difference between these two class-maps > > Experts, > > > > What would be the difference between these two class-maps > > > > class-map match-all TEST > > match protocol http host “www.XYZ.com ” > > match protocol http url “/directory/” > > > > vs > > > > class-map match-all TEST > > match protocol http host “www.XYZ.com/directory > ” > > > > > > Regards, > > Amin > > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html > > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html