[Bro] Extracting Email Attachments

Digital Ninja dn1nj4 at gmail.com
Fri Mar 22 03:49:29 PDT 2013


Hello all,

New bro user here.  I'm trying to understand how to enable email attachment
extraction with bro.  I see in smtp-entities the setting "extract-file"
which by default is False.  What is the right way to enable it and set the
directory where these attachments will reside?

Thanks in advance!
Jason
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130322/a7c0da97/attachment.html 


More information about the Bro mailing list