[Bro] HTTP plus Compression File Extraction

anthony kasza anthony.kasza at gmail.com
Fri Apr 24 22:16:04 PDT 2015


This question is likely gear towards Seth but I thought others on the list
may have an answer or find the question useful too.

Is there a way to control how the file analysis framework handles HTTP
compression? For example, if a PNG is transferred over HTTP with gzip
compression, can I have Bro dump the gzip file instead of the PNG?
Thanks!

-AK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150424/e5ee28a3/attachment.html 


More information about the Bro mailing list