[Bro] [bro] ftp & file hash

[Tim Desrochers]

Does bro hash files it sees being uploaded and/or downloaded via FTP.  When
I see traffic in the ftp.log I never see a fuid so I assume the file
analyzer is not being executed against the traffic.

Am I correct in my assumption that by default bro does not hash files it
sees over FTP?

How can I invoke the file analyzer to have it hash all files seen over FTP?

Thanks
Tim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160403/d48c5a83/attachment.html