Jon Siwek
a994be9eeb
Merge remote-tracking branch 'origin/topic/seth/zeek_init'
...
* origin/topic/seth/zeek_init:
Some more testing fixes.
Update docs and tests for bro_(init|done) -> zeek_(init|done)
Implement the zeek_init handler.
2019-04-19 11:24:29 -07:00
Jon Siwek
1e57e3f026
Use .zeek file suffix in unit tests
2019-04-16 16:08:57 -07:00
Seth Hall
5db766bd88
Update docs and tests for bro_(init|done) -> zeek_(init|done)
2019-04-14 08:49:12 -04:00
Seth Hall
2d1f007186
Extend file extraction log.
...
- New fields: extracted_cutoff and extracted_size.
These fields will be null if the file isn't extracted.
- Extended the extraction test to test the files log too.
2017-01-25 01:16:46 -05:00
Seth Hall
cafd35e746
Updates the files event api and brings file reassembly up to master.
2014-09-26 00:40:37 -04:00
Jon Siwek
89ae4ffd05
Add options to limit extracted file sizes w/ 100MB default.
2013-08-22 16:37:58 -05:00