mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
bd47115c84
Converted hard-coded examples in the File Analysis framework document to using btest sphinx.
11 lines
285 B
Text
11 lines
285 B
Text
event file_new(f: fa_file)
|
|
{
|
|
print "new file", f$id;
|
|
if ( f?$mime_type && f$mime_type == "text/plain" )
|
|
Files::add_analyzer(f, Files::ANALYZER_MD5);
|
|
}
|
|
|
|
event file_hash(f: fa_file, kind: string, hash: string)
|
|
{
|
|
print "file_hash", f$id, kind, hash;
|
|
}
|