zeek/scripts/base/protocols/smtp
Jon Siwek 7e895a3a2f FileAnalysis: replace script-layer FTP file analysis.
The notable difference here is that ftp.log now logs by default
the PORT, PASV, EPRT, EPSV commands as well as a separate line for
ftp-data channels in which file extraction was requested.

This difference isn't a direct result of now doing the file extraction
through the file analysis framework, it's just because I noticed even
the old way of tracking extracted-file name didn't work right and this
was the way I came up with so that a locally extracted file can be
associated with a data channel and then that data channel associated
with a control channel.
2013-03-27 12:59:38 -05:00
..
__load__.bro FileAnalysis: integrate w/ SMTP analyzer. 2013-03-18 11:30:59 -05:00
entities-excerpt.bro FileAnalysis: replace script-layer SMTP file analysis. 2013-03-26 15:48:52 -05:00
entities.bro FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00
file-analysis.bro FileAnalysis: file handles now set from events. 2013-03-25 15:37:58 -05:00
main.bro Fix some Info:Record field documentation. 2012-07-13 14:04:24 -04:00