zeek/testing/btest/Baseline/scripts.base.frameworks.file-analysis.http.partial-content
Jon Siwek 8dad5026fd File type detection changes and fix https.log {orig,resp}_fuids fields.
- Removed "binary" and "octet-stream" mime type detections. They don't
  provide any more information than an uninitialized mime_type field
  which implicitly means no magic signature matches and so the media
  type is unknown to Bro.

- Slight change to "text/plain" signature.  It's still not the most
  accurate, which is reflected in its -20 strength value.

- The logic for adding file ids to {orig,resp}_fuids fields of
  the http.log incorrectly depended on the state of
  {orig,resp}_mime_types fields, so sometimes not all file ids
  associated w/ the session were logged.
2014-03-25 12:44:11 -05:00
..
a.out File analysis fixes and test updates. 2013-07-25 16:51:16 -05:00
a.size Fixing tests. 2013-05-17 18:14:35 -07:00
b.out File type detection changes and fix https.log {orig,resp}_fuids fields. 2014-03-25 12:44:11 -05:00
b.size Fixing tests. 2013-05-17 18:14:35 -07:00
c.out File type detection changes and fix https.log {orig,resp}_fuids fields. 2014-03-25 12:44:11 -05:00
c.size Fixing tests. 2013-05-17 18:14:35 -07:00