[Bro] Problem extracting files

David Dorsey trogdorsey at gmail.com
Wed Nov 16 07:54:21 PST 2011


I'm trying to extract PDF files using the bro 2.0 beta, so I added the
following line to share/bro/site/local.bro.

redef HTTP::extract_file_types = /application\/pdf/;

However, no files are being extracted.  And if I open up BroControl and
print out that variable, I get this:

[BroControl] > print HTTP::extract_file_types
       bro   HTTP::extract_file_types = /^?(NO_DEFAULT)$?/
[BroControl] >

Is there another variable I need to set?

Thanks,


David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20111116/dd6cef0c/attachment.html 


More information about the Bro mailing list