[Bro] File Extraction Directory

Jason Batchelor jxbatchelor at gmail.com
Wed Aug 27 14:38:29 PDT 2014

Hello all:

Quick question, can you change the default file extraction directory for
files being extracted in a script. After some poking I came across where
this was specified in /opt/bro/share/bro/base/files/extract/main.bro with
the following:

export {
   ## The prefix where files are extracted to.
   const prefix = "./extract_files/" &redef;
If I try to do something like this in my script:

# Set extraction folder
redef prefix = "/var/opt/bro/spool/extract_files";
I am met with the following:
error in ./scripts/file-ext.bro, line 22: "redef" used but not previously
defined (prefix)
internal warning in ./scripts/file-ext.bro, line 22: Can't document redef
of prefix, identifier lookup failed
Can someone help me understand how to define this attribute or otherwise
influence where the files are extracted to? I would rather not manually
define it in the main.bro file.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140827/ca79b753/attachment.html 

More information about the Bro mailing list