[Zeek] - EXEC framework - run command

Justin Azoff justin at corelight.com
Mon Jun 24 07:19:48 PDT 2019


There's no need to use exec for this as there is a rename bif now.  I
sent a PR to update this:

https://github.com/hosom/file-extraction/pull/10/files

On Mon, Jun 24, 2019 at 7:34 AM william de ping <bill.de.ping at gmail.com> wrote:
>
> Hi everyone,
>
> I'm trying to run the following script :
> https://github.com/hosom/file-extraction/blob/master/scripts/plugins/store-files-by-md5.bro
>
> The issue is that the EXEC::run command is not working as expected.
> I run bro on a pcap file, in debug.log I see that a thread was initiated and finished with no issues, however the file is not moved..
>
> Any ideas ?
>
> Thank you
> B
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin


More information about the Zeek mailing list