zeek/scripts/base
Jon Siwek 095a68b2ec Various minor changes related to file mime type detection.
- Improve or just remove some file magic signatures ported from libmagic
  that were too general and matched incorrectly too often.

- Fix MHR script's use of fa_file$mime_type before checking if it's
  initialized.  It may be uninitialized if no signatures match.

- The "fa_file" record now contains a "mime_types" field that contains
  all magic signatures that matched the file content (where the
  "mime_type" field is just a shortcut for the strongest match).
2014-03-06 11:41:10 -06:00
..
files Minor unified2 script documentation fix. 2014-02-03 16:55:23 -06:00
frameworks Various minor changes related to file mime type detection. 2014-03-06 11:41:10 -06:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols Merge branch 'topic/robin/http-connect' 2014-03-03 16:53:46 -08:00
utils Return the Dir module to file name tracking instead of inode tracking. 2013-10-29 11:09:55 -04:00
init-bare.bro Various minor changes related to file mime type detection. 2014-03-06 11:41:10 -06:00
init-default.bro Replace libmagic w/ Bro signatures for file MIME type identification. 2014-03-04 11:12:06 -06:00