[Bro] File Extraction Directory

Jason Batchelor jxbatchelor at gmail.com
Fri Aug 29 13:00:00 PDT 2014


That's it :)

Thanks!


On Wed, Aug 27, 2014 at 5:07 PM, Johanna Amann <johanna at icir.org> wrote:

> Hi,
>
> redef FileExtract::prefix = "/var/opt/bro/spool/extract_files/"; should
> work.
>
> Johanna
>
> On 27 Aug 2014, at 14:38, Jason Batchelor wrote:
>
> > Hello all:
> >
> > Quick question, can you change the default file extraction directory for
> > files being extracted in a script. After some poking I came across where
> > this was specified in /opt/bro/share/bro/base/files/extract/main.bro with
> > the following:
> >
> > export {
> >  ## The prefix where files are extracted to.
> >  const prefix = "./extract_files/" &redef;
> > If I try to do something like this in my script:
> >
> > # Set extraction folder
> > redef prefix = "/var/opt/bro/spool/extract_files";
> > I am met with the following:
> > error in ./scripts/file-ext.bro, line 22: "redef" used but not previously
> > defined (prefix)
> > internal warning in ./scripts/file-ext.bro, line 22: Can't document redef
> > of prefix, identifier lookup failed
> > Can someone help me understand how to define this attribute or otherwise
> > influence where the files are extracted to? I would rather not manually
> > define it in the main.bro file.
> >
> > Thanks,
> > Jason
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140829/7b18792d/attachment.html 


More information about the Bro mailing list