[Bro] Specifying File Extraction Limit
damonrouse at gmail.com
Mon Aug 10 11:53:45 PDT 2015
I seem to have having a similar issue with the way I was limiting the size
of my extracted files too. Under 2.3.2, popping the following redef in my
local.bro worked perfectly: redef FileExtract::default_limit = 25000000;
Under 2.4, I have larger files being extracted like Jason.
On Mon, Aug 10, 2015 at 11:17 AM, Jason Batchelor <jxbatchelor at gmail.com>
> Hello all:
> With the 2.4 release is it still best practice so specify file extraction
> size limit as follows...
> Files::add_analyzer(f, Files::ANALYZER_EXTRACT, [$extract_filename=fname,
> $extract_limit=<FILE LIMIT>]);
> I ask because I seem to be getting files extracted greater than my imposed
> limit on occasion and was wondering if something had changed?
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro