5 commits

Author	SHA1	Message	Date
Jon Siwek	7e895a3a2f	FileAnalysis: replace script-layer FTP file analysis. ... The notable difference here is that ftp.log now logs by default the PORT, PASV, EPRT, EPSV commands as well as a separate line for ftp-data channels in which file extraction was requested. This difference isn't a direct result of now doing the file extraction through the file analysis framework, it's just because I noticed even the old way of tracking extracted-file name didn't work right and this was the way I came up with so that a locally extracted file can be associated with a data channel and then that data channel associated with a control channel.	2013-03-27 12:59:38 -05:00
Jon Siwek	59ed5c75f1	FileAnalysis: add unit tests covering current protocol integration. ... And had to make various fixes/refinements after scrutinizing results.	2013-03-19 15:50:05 -05:00
Jon Siwek	e34f6d9e3b	Enable GridFTP detection by default. Track/log SSL client certs. ... In the *service* field of connection records, GridFTP control channels are labeled as "gridftp" and data channels as "gridftp-data". Added *client_subject* and *client_issuer_subject* as &log'd fields to SSL::Info record. Also added *client_cert* and *client_cert_chain* fields to track client cert chain.	2012-10-08 11:38:29 -05:00
Daniel Thayer	96df1bac40	Add test case for FTP over IPv4	2012-02-21 11:18:43 -06:00
Daniel Thayer	278704f7a3	Add a test for FTP over IPv6	2012-02-16 15:17:55 -06:00