[Zeek] ftp filesize

Christian Kreibich christian at corelight.com
Wed Feb 20 16:43:37 PST 2019


On 2/13/19 7:38 AM, Seth Hall wrote:
> I'm not sure if the file size is transmitted by the client when a
> file is being uploaded, I'd have to refer to some pcaps.  If it is
> indicated by the client then I think we could view that as a missing 
> implementation though.

Fwiw, from the examples I have I don't see a size indication -- not in 
the STORs, nor in commands/responses surrounding it.

Best,
-C.


More information about the Zeek mailing list