[Bro] Problem with FTP filename in Bro 2.5.2

Vedran Ivanec vedran.ivanec at gmail.com
Fri Nov 10 08:49:11 PST 2017


Hi,

I'm trying to upgrade Bro from 2.4.1 to 2.5.2.
I've managed to port all custom script to new Bro but one thing doesn't
work.

In Bro 2.4.2 file_cap.log for FTP traffic looks like this:
1510317723.341233       FTP_DATA        application/x-zip       Starting
file extraction, file name=Test-01.zip, total_bytes=0

In Bro 2.5.2 file_cap.log looks like:
1510319840.650513    FTP_DATA    application/x-zip    Starting file
extraction, file name=FTP_DATA-FF9XlZGkkngVBK1Z1.zip, total_bytes=0

Can someone point me in the right direction which variable changed in the
meantime and how to fix this issue?


Thanks in advance

--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20171110/243123e1/attachment.html 


More information about the Bro mailing list