mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
SMTP: Adapt scripts for enable_rfc822_msg_file_analysis
Specifically, set a MIME part's parent_id to the rfc822_msg_fuid if it is set and take into account the current rfc822_msg_fuid for describe_file() to avoid fuid collisions of the top-level RFC822 message and the first MIME part.
This commit is contained in:
parent
a42875d033
commit
4c60dfd6c5
8 changed files with 3013 additions and 2980 deletions
|
@ -779,6 +779,7 @@ connection {
|
|||
* process_smtp_headers: bool, log=F, optional=T
|
||||
* rcptto: set[string], log=T, optional=T
|
||||
* reply_to: string, log=T, optional=T
|
||||
* rfc822_msg_fuid: string, log=F, optional=T
|
||||
* second_received: string, log=T, optional=T
|
||||
* subject: string, log=T, optional=T
|
||||
* tls: bool, log=T, optional=T
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue