base/bif/plugins/Zeek_File.events.bif.zeek¶

GLOBAL¶

Namespace: GLOBAL

Summary¶

Events¶

file_transferred: event

Generated when a TCP connection associated w/ file data transfer is seen (e.g.

Detailed Interface¶

Events¶

file_transferred¶

Type: event (c: connection, prefix: string, descr: string, mime_type: string)

Generated when a TCP connection associated w/ file data transfer is seen (e.g. as happens w/ FTP or IRC).

C: The connection over which file data is transferred.
Prefix: Up to 1024 bytes of the file data.
Descr: Deprecated/unused argument.
Mime_type: MIME type of the file or “<unknown>” if no file magic signatures matched.