<div dir="ltr">hi seth,<br><br>In http transaction, some of the executable files are transfer via this mime type -<br><br>application/octet-stream<br><br>I have appended it for watched_mime_types in http-identified-files.bro and it works fine.<br>
<br>Cheers ;]<br clear="all"><br>-- <br>Best Regards,<br><br>CS Lee<geek00L[at]<a href="http://gmail.com">gmail.com</a>><br><br><a href="http://geek00l.blogspot.com">http://geek00l.blogspot.com</a><br>
</div>