Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge remote-tracking branch 'origin/master' into topic/bernhard/input

Browse source
This commit is contained in:
Bernhard Amann 2011-11-15 11:00:24 -08:00
commit b62e6899ad
12 changed files with 341 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/frameworks/notice/weird.bro
View file

@ -174,7 +174,7 @@ export {
["SYN_after_reset"] = ACTION_LOG,
["SYN_inside_connection"] = ACTION_LOG,
["SYN_seq_jump"] = ACTION_LOG,
["SYN_with_data"] = ACTION_LOG,
["SYN_with_data"] = ACTION_LOG_PER_ORIG,
["TCP_christmas"] = ACTION_LOG,
["truncated_ARP"] = ACTION_LOG,
["truncated_NTP"] = ACTION_LOG,

3
scripts/base/protocols/http/file-extract.bro
View file

@ -33,7 +33,8 @@ export {
event http_entity_data(c: connection, is_orig: bool, length: count, data: string) &priority=5
{
# Client body extraction is not currently supported in this script.
if ( is_orig || ! c$http$first_chunk ) return;
if ( is_orig )
return;
if ( c$http$first_chunk )
{