[Bro] [bro] ftp & file hash
tgdesrochers at gmail.com
Sun Apr 3 05:57:53 PDT 2016
Does bro hash files it sees being uploaded and/or downloaded via FTP. When
I see traffic in the ftp.log I never see a fuid so I assume the file
analyzer is not being executed against the traffic.
Am I correct in my assumption that by default bro does not hash files it
sees over FTP?
How can I invoke the file analyzer to have it hash all files seen over FTP?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro