zeek/testing/btest/Baseline/scripts.base.frameworks.file-analysis.http.partial-content
Jon Siwek 3642ecc73e FileAnalysis: misc. tweaks/fixes.
- Add a timeout flag to file_analysis.log so it's easy to tell what
  has had at least one timeout trigger happen.

- Fix ftp-data service tag not being set for reused connections.

- Fix HTTP::Incorrect_File_Type because mime types returned by FAF have
  the charset still in them, but the HTTP::mime_types_extensions table
  does not and it requires an exact string match. (still ugly)

- Add TRIGGER_NEW_CONN to track files going over multiple connections.

- Add an initial file/mime type guess for non-linear file transfers.

- Fix a case where file/mime type detection would never be attempted
  if the start of the file was a content gap.

- Improve mime type tracking of HTTP byte-range/partial-content,
  even if the requests are pipelined or over multiple connections.

- I changed the modbus.events test because having the baseline output
  be 80+ MB is nuts and it was sensitive to connection record redefs.
2013-03-28 16:59:29 -05:00
..
a.out FileAnalysis: misc. tweaks/fixes. 2013-03-28 16:59:29 -05:00
a.size FileAnalysis: unit test tweaks (portability, etc.) 2013-03-27 14:51:23 -05:00
b.out FileAnalysis: misc. tweaks/fixes. 2013-03-28 16:59:29 -05:00
b.size FileAnalysis: unit test tweaks (portability, etc.) 2013-03-27 14:51:23 -05:00
c.out FileAnalysis: misc. tweaks/fixes. 2013-03-28 16:59:29 -05:00
c.size FileAnalysis: unit test tweaks (portability, etc.) 2013-03-27 14:51:23 -05:00