base/protocols/http/entities.zeek
- HTTP
Analysis and logging for MIME entities found in HTTP sessions.
- Namespace
HTTP
- Imports
base/frameworks/files, base/frameworks/notice/weird.zeek, base/protocols/http/main.zeek, base/utils/files.zeek, base/utils/strings.zeek
Summary
Runtime Options
Maximum number of originator files to log. |
|
Maximum number of responder files to log. |
Types
Redefinitions
|
|
|
Hooks
Called when reaching the max number of files across a given HTTP
connection according to |
Detailed Interface
Runtime Options
- HTTP::max_files_orig
-
Maximum number of originator files to log.
HTTP::max_files_policy
even is called once this limit is reached to determine if it’s enforced.
- HTTP::max_files_resp
-
Maximum number of responder files to log.
HTTP::max_files_policy
even is called once this limit is reached to determine if it’s enforced.
Types
Hooks
- HTTP::max_files_policy
-
Called when reaching the max number of files across a given HTTP connection according to
HTTP::max_files_orig
orHTTP::max_files_resp
. Break from the hook early to signal that the file limit should not be applied.