[Bro] Trying to extract HTTP payload

Seth Hall seth at icir.org
Tue Sep 18 10:14:34 PDT 2012


On Sep 18, 2012, at 1:08 PM, Abhishek Chanda <abhishek.lists at gmail.com> wrote:

> sudo ./bro -i eth0 "HTTP::extract_file_types=/.jpg/"


sudo ./bro -i eth0 "HTTP::extract_file_types=/.*\.jpg/"

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list