Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 17:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add an is_orig parameter to file_over_new_connection event.

Browse source
This commit is contained in:
Jon Siwek 2013-07-09 15:58:28 -05:00
parent efe878f3de
commit 73155c321b
12 changed files with 21 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/protocols/http/entities.bro
View file

@ -53,7 +53,7 @@ event http_header(c: connection, is_orig: bool, name: string, value: string) &pr
}
}
event file_over_new_connection(f: fa_file, c: connection) &priority=5
event file_over_new_connection(f: fa_file, c: connection, is_orig: bool) &priority=5
{
if ( f$source == "HTTP" && c$http?$entity )
{

4
scripts/base/protocols/http/files.bro
View file

@ -40,7 +40,7 @@ event bro_init() &priority=5
Files::register_protocol(Analyzer::ANALYZER_HTTP, HTTP::get_file_handle);
}
event file_over_new_connection(f: fa_file, c: connection) &priority=5
event file_over_new_connection(f: fa_file, c: connection, is_orig: bool) &priority=5
{
if ( c?$http )
{
@ -49,4 +49,4 @@ event file_over_new_connection(f: fa_file, c: connection) &priority=5
else
c$http$resp_fuids[|c$http$resp_fuids|] = f$id;
}
}
}