base/bif/plugins/Zeek_File.events.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Events

file_transferred: event

Generated when a TCP connection associated w/ file data transfer is seen (e.g.

Detailed Interface

Events

file_transferred
Type

event (c: connection, prefix: string, descr: string, mime_type: string)

Generated when a TCP connection associated w/ file data transfer is seen (e.g. as happens w/ FTP or IRC).

Parameters

  • c – The connection over which file data is transferred.

  • prefix – Up to 1024 bytes of the file data.

  • descr – Deprecated/unused argument.

  • mime_type – MIME type of the file or “<unknown>” if no file magic signatures matched.