policy/protocols/smtp/entities-excerpt.zeek

SMTP

This script is for optionally adding a body excerpt to the SMTP entities log.

Namespace:SMTP
Imports:base/protocols/smtp/entities.zeek

Summary

Runtime Options

SMTP::default_entity_excerpt_len: count &redef This is the default value for how much of the entity body should be included for all MIME entities.

Redefinitions

SMTP::Entity: record
New Fields:

SMTP::Entity

excerpt: string &log &default = "" &optional

The entity body excerpt.

Detailed Interface

Runtime Options

SMTP::default_entity_excerpt_len
Type:count
Attributes:&redef
Default:0

This is the default value for how much of the entity body should be included for all MIME entities. The lesser of this value and default_file_bof_buffer_size will be used.