Forum Discussion
hooleylist
Dec 03, 2007Cirrostratus
How many domains do you want to remove from the HTTP content? I would guess that using a stream profile/expression with the list would be significantly faster than collecting the response data and performing regex operations on it. Using a stream to do this would also simplify the rule needed to do this.
If you can define the 'find' pattern using strings it would be the most efficient. Else, if you need to use regexes, something like this should work:
when HTTP_RESPONSE {
if {[HTTP::header value Content-Type] contains "text"}{
STREAM::expression {@https?://(?:www\.)?example1\.com@xxxxxxxxxx@ @https?://(?:www\.)?example2\.com@xxxxxxxxxx@}
STREAM::enable
}
}
Aaron