Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 17:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

FileAnalysis: replace script-layer SMTP file analysis.

Browse source 
Notable differences:

- Removed SMTP::MD5 notice.

- Removed ability to specify mime entity excerpt length per mime-type.
This commit is contained in:
Jon Siwek 2013-03-26 15:48:52 -05:00
parent 84a0c2fdac
commit 497496ec83
14 changed files with 224 additions and 206 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/protocols/http/file-hash.bro
View file

@ -85,5 +85,5 @@ hook FileAnalysis::policy(trig: FileAnalysis::Trigger, info: FileAnalysis::Info)
if ( ! info?$source ) return;
if ( info$source != "HTTP" ) return;
FileAnalysis::add_action(info$file_id, [$act=FileAnalysis::ACTION_MD5]);
FileAnalysis::remove_action(info$file_id, [$act=FileAnalysis::ACTION_MD5]);
}