zeek/testing/btest/Baseline/scripts.base.frameworks.file-analysis.http.multipart
Jon Siwek 8dad5026fd File type detection changes and fix https.log {orig,resp}_fuids fields.
- Removed "binary" and "octet-stream" mime type detections. They don't
  provide any more information than an uninitialized mime_type field
  which implicitly means no magic signature matches and so the media
  type is unknown to Bro.

- Slight change to "text/plain" signature.  It's still not the most
  accurate, which is reflected in its -20 strength value.

- The logic for adding file ids to {orig,resp}_fuids fields of
  the http.log incorrectly depended on the state of
  {orig,resp}_mime_types fields, so sometimes not all file ids
  associated w/ the session were logged.
2014-03-25 12:44:11 -05:00
..
1-file Merge branch 'master' into topic/jsiwek/faf-cleanup 2013-06-07 15:44:36 -05:00
2-file Merge branch 'master' into topic/jsiwek/faf-cleanup 2013-06-07 15:44:36 -05:00
3-file Merge branch 'master' into topic/jsiwek/faf-cleanup 2013-06-07 15:44:36 -05:00
4-file Merge branch 'master' into topic/jsiwek/faf-cleanup 2013-06-07 15:44:36 -05:00
out File type detection changes and fix https.log {orig,resp}_fuids fields. 2014-03-25 12:44:11 -05:00