Jon Siwek 7e895a3a2f FileAnalysis: replace script-layer FTP file analysis. ... The notable difference here is that ftp.log now logs by default the PORT, PASV, EPRT, EPSV commands as well as a separate line for ftp-data channels in which file extraction was requested. This difference isn't a direct result of now doing the file extraction through the file analysis framework, it's just because I noticed even the old way of tracking extracted-file name didn't work right and this was the way I came up with so that a locally extracted file can be associated with a data channel and then that data channel associated with a control channel.		2013-03-27 12:59:38 -05:00
..
frameworks	FileAnalysis: file handles now set from events.	2013-03-25 15:37:58 -05:00
misc	Merge remote-tracking branch 'origin/fastpath'	2012-12-14 14:34:51 -08:00
protocols	FileAnalysis: replace script-layer FTP file analysis.	2013-03-27 12:59:38 -05:00
utils	remove the byte_len and length bifs	2013-03-06 13:45:42 -08:00
init-bare.bro	FileAnalysis: file handles now set from events.	2013-03-25 15:37:58 -05:00
init-default.bro	Merge branch 'topic/robin/intel-framework-merge'	2012-11-05 16:00:38 -08:00