policy/protocols/smtp/entities-excerpt.zeek

SMTP

This script is for optionally adding a body excerpt to the SMTP entities log.

Namespace:

SMTP

Imports:

base/protocols/smtp/entities.zeek

Summary

Runtime Options

SMTP::default_entity_excerpt_len: count &redef

This is the default value for how much of the entity body should be included for all MIME entities.

Redefinitions

SMTP::Entity: record

New Fields:

SMTP::Entity

excerpt: string &log &default = "" &optional

The entity body excerpt.

Detailed Interface

Runtime Options

SMTP::default_entity_excerpt_len
Type:

count

Attributes:

&redef

Default:

0

This is the default value for how much of the entity body should be included for all MIME entities. The lesser of this value and default_file_bof_buffer_size will be used.