zeek/scripts/base/frameworks/files
Jon Siwek 095a68b2ec Various minor changes related to file mime type detection.
- Improve or just remove some file magic signatures ported from libmagic
  that were too general and matched incorrectly too often.

- Fix MHR script's use of fa_file$mime_type before checking if it's
  initialized.  It may be uninitialized if no signatures match.

- The "fa_file" record now contains a "mime_types" field that contains
  all magic signatures that matched the file content (where the
  "mime_type" field is just a shortcut for the strongest match).
2014-03-06 11:41:10 -06:00
..
magic Various minor changes related to file mime type detection. 2014-03-06 11:41:10 -06:00
__load__.bro Replace libmagic w/ Bro signatures for file MIME type identification. 2014-03-04 11:12:06 -06:00
main.bro Various minor changes related to file mime type detection. 2014-03-06 11:41:10 -06:00
README Add README files for most Bro frameworks 2013-10-11 00:19:37 -05:00

The file analysis framework provides an interface for driving the analysis
of files, possibly independent of any network protocol over which they're
transported.