zeek/scripts/base/frameworks/files
Jon Siwek cbbe7b52dc Review/fix/change file reassembly functionality.
- Re-arrange how some fa_file fields (e.g. source, connection info, mime
  type) get updated/set for consistency.

- Add more robust mechanisms for flushing the reassembly buffer.
  The goal being to report all gaps and deliveries to file analyzers
  regardless of the state of the reassembly buffer at the time it has to
  be flushed.
2014-12-16 14:05:15 -06:00
..
magic Improve TAR file detection and other small changes. 2014-11-05 11:31:48 -05:00
__load__.bro Replace libmagic w/ Bro signatures for file MIME type identification. 2014-03-04 11:12:06 -06:00
main.bro Review/fix/change file reassembly functionality. 2014-12-16 14:05:15 -06:00
README Add README files for most Bro frameworks 2013-10-11 00:19:37 -05:00

The file analysis framework provides an interface for driving the analysis
of files, possibly independent of any network protocol over which they're
transported.