[Bro] Extract files not authentic copy of file

Ambros Novak ambros.novak.89 at gmail.com
Tue Feb 20 22:32:54 PST 2018


The configuration is extracting certain file types but the files that are extracted are not authentic replications of the files in the stream. The hashes do no match the real files at the user’s endpoint. Upon inspecting the extracted files there seems to be mismatched and duplicated streams. 

How can this be corrected? I would like the extracted files to be exactly what the user would download. 

Thank you kindly for your help. 



More information about the Bro mailing list