policy/protocols/smtp/entities-excerpt.zeek

SMTP

This script is for optionally adding a body excerpt to the SMTP entities log.

Namespace

SMTP

Imports

base/protocols/smtp/entities.zeek

Summary

Runtime Options

SMTP::default_entity_excerpt_len: count &redef

This is the default value for how much of the entity body should be included for all MIME entities.

Redefinitions

SMTP::Entity: record

New Fields

SMTP::Entity

excerpt: string &log &default = "" &optional

The entity body excerpt.

Detailed Interface

Runtime Options

SMTP::default_entity_excerpt_len
Type

count

Attributes

&redef

Default

0

This is the default value for how much of the entity body should be included for all MIME entities. The lesser of this value and default_file_bof_buffer_size will be used.