mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
8dad5026fd
- Removed "binary" and "octet-stream" mime type detections. They don't
provide any more information than an uninitialized mime_type field
which implicitly means no magic signature matches and so the media
type is unknown to Bro.
- Slight change to "text/plain" signature. It's still not the most
accurate, which is reflected in its -20 strength value.
- The logic for adding file ids to {orig,resp}_fuids fields of
the http.log incorrectly depended on the state of
{orig,resp}_mime_types fields, so sometimes not all file ids
associated w/ the session were logged.
|
||
|---|---|---|
| .. | ||
| magic | ||
| __load__.bro | ||
| main.bro | ||
| README | ||
The file analysis framework provides an interface for driving the analysis of files, possibly independent of any network protocol over which they're transported.