[Bro-Dev] #509: SMTP rework

Bro Tracker bro at tracker.bro-ids.org
Fri Jul 22 04:13:33 PDT 2011


#509: SMTP rework
---------------------+------------------------
 Reporter:  seth     |      Owner:
     Type:  Task     |     Status:  new
 Priority:  Normal   |  Milestone:  Bro1.6
Component:  Bro      |    Version:  git/master
 Keywords:  preview  |
---------------------+------------------------
 There are a couple of tasks that need done on the SMTP analyzer before the
 preview.

 - Stop doing message header parsing with the smtp_data event and use the
 mime_* events (they deal with header wrap around appropriately and the
 various message encodings).

 - Create a new logging stream named something like SMTP::ENTITIES to log
 file information.  It would have the same information as the current
 mim.log.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/509>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list