[Bro] Extracting Email Attachments

Digital Ninja dn1nj4 at gmail.com
Fri Mar 22 12:59:27 PDT 2013


I tried both:
redef SMTP::extract_file_types += /application\/.*/;
and
redef SMTP::extract_file_types += /.*/;

But still end up with no attachments in /tmp, nor MD5s in the
smtp_entities.log.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130322/5eb3ed2f/attachment.html 


More information about the Bro mailing list