[Bro] extract smtp objects

erik clark philosnef at gmail.com
Fri Oct 28 06:43:22 PDT 2016

How can I extract an entire email, and split the attachments out into
separate files in Bro?

Specifically, I want the entire smtp _transaction_ (not just the body of
the email, but headers as well) in a file, and then the the attachments in
the smtp body extracted as well. Not sure how to go about this.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161028/301ec874/attachment.html 

More information about the Bro mailing list