5 commits

Author	SHA1	Message	Date
Jon Siwek	d9321e2203	FileAnalysis: remove some file events. ... The file_new event now takes over the function of file_type, file_bof, and file_bof_buffer.	2013-04-10 14:34:23 -05:00
Jon Siwek	a2d9b47bcd	FileAnalysis: finish switching hooks to events.	2013-04-10 11:13:43 -05:00
Jon Siwek	641154f8e8	FileAnalysis: checkpoint in middle of big reorganization. ... - FileAnalysis::Info is now just a record used for logging, the fa_file record type is defined in init-bare.bro as the analogue to a connection record. - Starting to transfer policy hook triggers and analyzer results to events.	2013-04-09 15:49:58 -05:00
Jon Siwek	497496ec83	FileAnalysis: replace script-layer SMTP file analysis. ... Notable differences: - Removed SMTP::MD5 notice. - Removed ability to specify mime entity excerpt length per mime-type.	2013-03-26 15:48:52 -05:00
Seth Hall	adc486c673	Merge remote-tracking branch 'origin/topic/jsiwek/smtp-refactor' ... - While updating, I did some further work on the branch. - New function in the base/utils/files for extracting filenames from content-dispositions. - New script for entity excerpt extraction if you aren't interested in full extraction. The data goes a log field too. - Some renaming and reorganization of types. - Updated tests to work with new code. * origin/topic/jsiwek/smtp-refactor: Make the doc.coverage test happy. SMTP script refactor. (addresses #509) Conflicts: doc/scripts/DocSourcesList.cmake policy/protocols/smtp/__load__.bro policy/protocols/smtp/base/__load__.bro	2011-08-10 13:34:31 -04:00