[Bro] Problem with FTP filename in Bro 2.5.2

Vedran Ivanec vedran.ivanec at gmail.com
Fri Nov 10 08:49:11 PST 2017


I'm trying to upgrade Bro from 2.4.1 to 2.5.2.
I've managed to port all custom script to new Bro but one thing doesn't

In Bro 2.4.2 file_cap.log for FTP traffic looks like this:
1510317723.341233       FTP_DATA        application/x-zip       Starting
file extraction, file name=Test-01.zip, total_bytes=0

In Bro 2.5.2 file_cap.log looks like:
1510319840.650513    FTP_DATA    application/x-zip    Starting file
extraction, file name=FTP_DATA-FF9XlZGkkngVBK1Z1.zip, total_bytes=0

Can someone point me in the right direction which variable changed in the
meantime and how to fix this issue?

Thanks in advance

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20171110/243123e1/attachment.html 

More information about the Bro mailing list