zeek/testing/btest/Baseline/scripts.base.frameworks.file-analysis.http.partial-content/c.out at 7caa4aa45cc9389a03eff9c847b3735afe01237c - Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

mirror of https://github.com/zeek/zeek.git synced 2025-10-08 01:28:20 +00:00

Jon Siwek 71f0e2d276 FileAnalysis: replace script-layer http file analysis.

Other misc:

- Remove HTTP::MD5 notice.

- Add "last_active" field to FileAnalysis::Info record.

- Replace "conn_uids", "conn_ids" fields in FileAnalysis::Info record
  with just a "conns" fields containing full connection records.

- The http-methods unit test is failing now, but I think it will be
  fixed once I change the file handle callback mechanism to use events
  instead.

2013-03-22 16:14:06 -05:00

8 lines

283 B

Text

Raw Blame History

 FileAnalysis::TRIGGER_NEW
 uHS14uhRKGe, 0, 0
 FileAnalysis::TRIGGER_DONE
 uHS14uhRKGe, 498702, 0
 [orig_h=10.45.179.94, orig_p=19950/tcp, resp_h=129.174.93.170, resp_p=80/tcp]
 [orig_h=10.45.179.94, orig_p=19953/tcp, resp_h=129.174.93.170, resp_p=80/tcp]
 total bytes: 498668
 source: HTTP