FileAnalysis: finish switching hooks to events.

This commit is contained in:
Jon Siwek 2013-04-10 11:13:43 -05:00
parent 641154f8e8
commit a2d9b47bcd
39 changed files with 219 additions and 305 deletions

View file

@ -1,9 +1,9 @@
FileAnalysis::TRIGGER_NEW
FILE_NEW
7gZBKVUgy4l, 0, 0
FileAnalysis::TRIGGER_TYPE
FILE_TYPE
file type is set
mime type is set
FileAnalysis::TRIGGER_NEW_CONN
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
7gZBKVUgy4l, 555523, 0
[orig_h=10.101.84.70, orig_p=10978/tcp, resp_h=129.174.93.161, resp_p=80/tcp]

View file

@ -1,6 +1,6 @@
FileAnalysis::TRIGGER_NEW
FILE_NEW
oDwT1BbzjM1, 0, 0
FileAnalysis::TRIGGER_TYPE
FILE_TYPE
file type is set
mime type is set
FILE_STATE_REMOVE
@ -8,12 +8,12 @@ oDwT1BbzjM1, 1022920, 0
[orig_h=192.168.72.14, orig_p=3254/tcp, resp_h=65.54.95.206, resp_p=80/tcp]
total bytes: 1022920
source: HTTP
FileAnalysis::TRIGGER_NEW
FILE_NEW
oDwT1BbzjM1, 0, 0
FileAnalysis::TRIGGER_TYPE
FILE_TYPE
file type is set
mime type is set
FileAnalysis::TRIGGER_TIMEOUT
FILE_TIMEOUT
FILE_STATE_REMOVE
oDwT1BbzjM1, 206024, 0
[orig_h=192.168.72.14, orig_p=3257/tcp, resp_h=65.54.95.14, resp_p=80/tcp]

View file

@ -1,9 +1,9 @@
FileAnalysis::TRIGGER_NEW
FILE_NEW
uHS14uhRKGe, 0, 0
FileAnalysis::TRIGGER_TYPE
FILE_TYPE
file type is set
mime type is set
FileAnalysis::TRIGGER_NEW_CONN
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
uHS14uhRKGe, 498702, 0
[orig_h=10.45.179.94, orig_p=19950/tcp, resp_h=129.174.93.170, resp_p=80/tcp]