[Zeek] - EXEC framework - run command

william de ping bill.de.ping at gmail.com
Mon Jun 24 04:27:49 PDT 2019


Hi everyone,

I'm trying to run the following script :
https://github.com/hosom/file-extraction/blob/master/scripts/plugins/store-files-by-md5.bro

The issue is that the EXEC::run command is not working as expected.
I run bro on a pcap file, in debug.log I see that a thread was initiated
and finished with no issues, however the file is not moved..

Any ideas ?

Thank you
B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190624/54f584d1/attachment.html 


More information about the Zeek mailing list