zeek/testing/btest/Baseline/scripts.base.protocols.ftp.ftp-extract
Jon Siwek 7e895a3a2f FileAnalysis: replace script-layer FTP file analysis.
The notable difference here is that ftp.log now logs by default
the PORT, PASV, EPRT, EPSV commands as well as a separate line for
ftp-data channels in which file extraction was requested.

This difference isn't a direct result of now doing the file extraction
through the file analysis framework, it's just because I noticed even
the old way of tracking extracted-file name didn't work right and this
was the way I came up with so that a locally extracted file can be
associated with a data channel and then that data channel associated
with a control channel.
2013-03-27 12:59:38 -05:00
..
conn.log FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00
ftp-item-BTsa70Ua9x7-1.dat FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00
ftp-item-Rqjkzoroau4-0.dat FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00
ftp-item-VLQvJybrm38-2.dat FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00
ftp-item-zrfwSs9K1yk-3.dat FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00
ftp.log FileAnalysis: replace script-layer FTP file analysis. 2013-03-27 12:59:38 -05:00