Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 10:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fix HTTP multipart body file analysis.

Browse source 
Each part now gets assigned a different file handle/id.
This commit is contained in:
Jon Siwek 2013-05-21 15:35:22 -05:00
parent 38ac03d558
commit 3cbef60f57
8 changed files with 112 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
testing/btest/scripts/base/frameworks/file-analysis/http/multipart.bro Normal file
View file

@ -0,0 +1,13 @@
# @TEST-EXEC: bro -r $TRACES/http/multipart.trace $SCRIPTS/file-analysis-test.bro %INPUT >out
# @TEST-EXEC: btest-diff out
# @TEST-EXEC: btest-diff TJdltRTxco1-file
# @TEST-EXEC: btest-diff QJO04kPdawk-file
# @TEST-EXEC: btest-diff dDH5dHdsRH4-file
# @TEST-EXEC: btest-diff TaUJcEIboHh-file
redef test_file_analysis_source = "HTTP";
redef test_get_file_name = function(f: fa_file): string
{
return fmt("%s-file", f$id);
};