[Bro] [bro] ftp & file hash

Tim Desrochers tgdesrochers at gmail.com
Sun Apr 3 05:57:53 PDT 2016

Does bro hash files it sees being uploaded and/or downloaded via FTP.  When
I see traffic in the ftp.log I never see a fuid so I assume the file
analyzer is not being executed against the traffic.

Am I correct in my assumption that by default bro does not hash files it
sees over FTP?

How can I invoke the file analyzer to have it hash all files seen over FTP?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160403/d48c5a83/attachment.html 

More information about the Bro mailing list