[Bro] Specifying File Extraction Limit

Jason Batchelor jxbatchelor at gmail.com
Mon Aug 10 11:17:11 PDT 2015


Hello all:

With the 2.4 release is it still best practice so specify file extraction
size limit as follows...

Files::add_analyzer(f, Files::ANALYZER_EXTRACT, [$extract_filename=fname,
$extract_limit=<FILE LIMIT>]);

I ask because I seem to be getting files extracted greater than my imposed
limit on occasion and was wondering if something had changed?

Thanks,
Jason
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150810/281ef721/attachment.html 


More information about the Bro mailing list