# Empty mime type in http.log **URL:** \ **Category:** Zeek\ **Created:** [December 23, 2013, 11:28am UTC](https://community.zeek.org/t/empty-mime-type-in-http-log/2951 "2013-12-23T11:28:03Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Zainab\_Abaid](https://avatars.discourse-cdn.com/v4/letter/z/eb8c5e/32.png) [@Zainab\_Abaid](https://community.zeek.org/u/Zainab_Abaid)\ **Post date:** [December 23, 2013, 11:28am UTC](https://community.zeek.org/t/empty-mime-type-in-http-log/2951/1 "2013-12-23T11:28:03Z")
Hi, I’m trying to use Bro to identify content types in http traces - so I’m looking at the orig\_mime\_types and resp\_mime\_types columns in http.log. Now, I captured a trace where I blocked all applications except Google chrome, and then used Chrome to play a bunch of videos on Dailymotion. Then I ran Bro over this trace and then ran the following command over the output: cat http.log | bro-cut orig\_mime\_types resp\_mime\_types | sort | uniq -c This is the output I got: 88 - - 35 - application/octet-stream 12 - application/xml 25 - image/gif 188 - image/jpeg 1 - image/png 13 - text/html 59 - text/plain 24 text/plain text/plain I can’t figure out why blanks are appearing in so many of the lines. There are 88 lines where the content type (in both resp and orig columns) is empty - what does that signify? I did see that Bro uses signature matching to correct missing or incorrect file types. Does a “-” mean Bro wasn’t able to match any signature to the content being transferred? Or that it found nothing in the HTTP header’s content type field? Thanks, Zainab ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/empty-mime-type-in-http-log/2951/2 "2022-05-06T15:41:28Z")