zeek/scripts/base/protocols
Jon Siwek 037d582b0e FileAnalysis: add custom libmagic database.
- It's derived from the magic database of libmagic 5.14, but with most
  everything not related to mime types removed.

- The custom database is always used by default for mime detection, but
  the more verbose file type detection will fall back on the default
  libmagic installation's database.  The result is: mime type strings
  are now guaranteed to be consistent across platforms, but the verbose
  file type descriptions are not.

- The custom database gets installed in $prefix/share/bro/magic, and
  should even be extensible if files with new patterns are added inside
  the directory.

- The search path for the mime magic database can be controlled via
  BROMAGIC environment variable.

- Remove mime_desc field from ftp.log.

- Stop using the mime/file type canonifier with unit tests.

- libmagic >= 5.04 is now a requirement.
2013-04-12 11:58:19 -05:00
..
conn Merge remote-tracking branch 'origin/topic/jsiwek/gridftp' 2012-10-12 10:43:16 -07:00
dns Fixed a DNS attribute issue (reported by Matt Thompson). 2012-11-26 15:58:25 -05:00
ftp FileAnalysis: add custom libmagic database. 2013-04-12 11:58:19 -05:00
http FileAnalysis: change terminology s/action/analyzer 2013-04-11 14:53:54 -05:00
irc FileAnalysis: change terminology s/action/analyzer 2013-04-11 14:53:54 -05:00
modbus Fixing tests after modbus merge. 2012-11-05 15:58:38 -08:00
smtp FileAnalysis: change terminology s/action/analyzer 2013-04-11 14:53:54 -05:00
socks Add an error for record coercions that would orphan a field. 2013-01-24 09:56:19 -06:00
ssh Fix some Info:Record field documentation. 2012-07-13 14:04:24 -04:00
ssl add base64-encode functionality and bif. 2013-03-05 16:05:07 -08:00
syslog Fix some Info:Record field documentation. 2012-07-13 14:04:24 -04:00