This Counter64, in HTTP Protocol Data Units, counts HTTP PDUs where the actual content type detected differs from the content type declared in the PDU's header, requiring HTTP-layer deep packet inspection, accumulated since the last reboot. An admin uses it to catch a common evasion technique where a file is mislabeled to slip past content-type filtering. A rise in this counter would point an admin toward investigating traffic where files may be disguised as an allowed type to bypass content restrictions.