mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 00:58:19 +00:00
![]() We now extract email addresses in the fields that one would expect to contain addresses. This makes further downstream processing of these fields easier like log analysis or using these fields in the Intel framework. The primary downside is that any other content in these fields is no longer available such as full name and any group information. I believe the simplification of the content in these fields is worth the change. Added "cc" to the script that feeds information from SMTP into the Intel framework. A new script for email handling utility functions has been created as a side effect of these changes. |
||
---|---|---|
.. | ||
btest | ||
external | ||
scripts | ||
.gitignore | ||
Makefile | ||
README |
This directory contains suites for testing for Bro's correct operation: btest/ An ever-growing set of small unit tests testing Bro's functionality. external/ A framework for downloading additional test sets that run more complex Bro configuration on larger traces files. Due to their size, these are not included directly. See the README for more information. scripts/ Helpers scripts used by some tests.