mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
38dbba7622
- The reassembly behavior can be modified per-file by enabling or disabling the reassembler and/or modifying the size of the reassembly buffer. - Changed the file extraction analyzer to use the stream to avoid issues with the chunk based approach not immediately triggering the file_new event due to mime-type detection delay. Early chunks frequently ended up lost before. - Generally things are working now and I'd consider this in testing. |
||
|---|---|---|
| .. | ||
| __load__.bro | ||
| main.bro | ||
| README | ||
The file analysis framework provides an interface for driving the analysis of files, possibly independent of any network protocol over which they're transported.