[Bro] Convert utf8 in smtp.log
Seth Hall
seth at icir.org
Tue Mar 24 08:32:10 PDT 2015
> On Mar 24, 2015, at 6:57 AM, C. L. Martinez <carlopmart at gmail.com> wrote:
>
> Is it possible to convert utf8 characters in subject emails logged by
> bro to a "readable" format?
There is a script! (i’ve heard that it has caused problems for some people though) :)
It adds a new fields named “decoded_subject” to your smtp log:
https://github.com/sethhall/bro-junk-drawer/blob/master/smtp-decode-encoded-word-subjects.bro
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the Bro
mailing list