Jon Siwek
1239a286e2
Merge branch 'patch-1' of https://github.com/neu5ron/bro
...
* 'patch-1' of https://github.com/neu5ron/bro :
Update main.bro
Update main.bro
2019-03-13 13:49:17 -07:00
Johanna Amann
cdb6a1b6e6
Baseline updates after hash function change.
2016-07-13 10:11:37 -07:00
Seth Hall
7c2307e079
Move the HTTP "filename" field to "orig_filenames" and "resp_filenames"
...
This changes the HTTP log format slightly but shouldn't mess
up anything that anyone was doing because the old "filename"
field was never actually filled out. Tests are updated as well.
2016-06-15 01:44:18 -04:00
Robin Sommer
adb3fab019
Updating test baselines for http.log now including version.
2016-01-15 12:18:16 -08:00
Jon Siwek
22bf3e1196
Increase UIDs to 96 bits w/ C/F prefix - BIT-1016
...
- The bit-length is adjustable via redef'ing bits_per_uid.
- Prefix 'C' is used for connection UIDS (including IP tunnels) and
'F' for files.
2013-08-26 15:36:31 -05:00
Jon Siwek
705a84d688
Improve tracking of HTTP file extraction (addresses #988 ).
...
http.log now has files taken from request and response bodies in
different fields for each, and can now track multiple files per body.
That is, the "extraction_file" field is now "extracted_request_files"
and "extracted_response_files".
2013-05-21 16:42:35 -05:00
Robin Sommer
4fe0e22128
Fix to make sqlite test consistent, and updating coverage baselines
2013-05-15 15:56:53 -07:00
Bernhard Amann
6392acecd2
fix warnings, update baselines, handle rotation
2013-05-12 20:48:17 -07:00
Bernhard Amann
3415b5fcbe
make sqlite support more or less work for logging and input
...
* add support for &type_column for reading
* add basic tests for logging & input
* clean up a bit
* add support for tables for reading (untested)
2013-01-15 16:01:30 -08:00
