[Bro] Looking up fa_file given FUID
johanna at icir.org
Thu Dec 28 07:43:33 PST 2017
sorry for the slow reply. There currently is no inbuilt functionality in
Bro to do this. However this feels a bit like an oversight and is probably
something that should be added in the future.
On Thu, Oct 12, 2017 at 07:16:02PM +0000, Lamps, Jereme wrote:
> I was just wondering if it was possible to lookup fa_file or Files::Info records given a FUID. I have been looking through the built in functions but have not seen anything.
> Jereme Lamps
> Bro mailing list
> bro at bro-ids.org
More information about the Bro