zeek/scripts/base
Seth Hall 38dbba7622 More file reassembly work.
- The reassembly behavior can be modified per-file by enabling or
   disabling the reassembler and/or modifying the size of the reassembly
   buffer.

 - Changed the file extraction analyzer to use the stream to avoid
   issues with the chunk based approach not immediately triggering
   the file_new event due to mime-type detection delay.  Early chunks
   frequently ended up lost before.

 - Generally things are working now and I'd consider this in testing.
2014-01-05 04:58:01 -05:00
..
files Add more script package README files 2013-10-23 16:36:14 -05:00
frameworks More file reassembly work. 2014-01-05 04:58:01 -05:00
misc Add UDP support to the checksum offload detection script. 2013-10-24 15:21:03 -04:00
protocols Tweak to SMTP script to adjust for new string slicing behaviour. 2013-12-04 13:45:46 -08:00
utils Return the Dir module to file name tracking instead of inode tracking. 2013-10-29 11:09:55 -04:00
init-bare.bro More file reassembly work. 2014-01-05 04:58:01 -05:00
init-default.bro Fix typos and formatting in init-bare.bro and init-default.bro 2013-10-20 01:32:17 -05:00