[Bro] HTTP plus Compression File Extraction
anthony.kasza at gmail.com
Fri Apr 24 22:16:04 PDT 2015
This question is likely gear towards Seth but I thought others on the list
may have an answer or find the question useful too.
Is there a way to control how the file analysis framework handles HTTP
compression? For example, if a PNG is transferred over HTTP with gzip
compression, can I have Bro dump the gzip file instead of the PNG?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro