zeek/testing/btest/Baseline/scripts.base.frameworks.file-analysis.http.partial-content/a.out at 7caa4aa45cc9389a03eff9c847b3735afe01237c - Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

mirror of https://github.com/zeek/zeek.git synced 2025-10-11 02:58:20 +00:00

Jon Siwek 71f0e2d276 FileAnalysis: replace script-layer http file analysis.

Other misc:

- Remove HTTP::MD5 notice.

- Add "last_active" field to FileAnalysis::Info record.

- Replace "conn_uids", "conn_ids" fields in FileAnalysis::Info record
  with just a "conns" fields containing full connection records.

- The http-methods unit test is failing now, but I think it will be
  fixed once I change the file handle callback mechanism to use events
  instead.

2013-03-22 16:14:06 -05:00

8 lines

283 B

Text

Raw Blame History

 FileAnalysis::TRIGGER_NEW
 gZBKVUgy4l, 0, 0
 FileAnalysis::TRIGGER_DONE
 gZBKVUgy4l, 555523, 0
 [orig_h=10.101.84.70, orig_p=10978/tcp, resp_h=129.174.93.161, resp_p=80/tcp]
 [orig_h=10.101.84.70, orig_p=10977/tcp, resp_h=129.174.93.161, resp_p=80/tcp]
 total bytes: 555523
 source: HTTP