base/protocols/http/entities.zeek¶
-
HTTP
¶
Analysis and logging for MIME entities found in HTTP sessions.
- Namespace
HTTP
- Imports
base/frameworks/files, base/protocols/http/main.zeek, base/utils/files.zeek, base/utils/strings.zeek
Summary¶
Runtime Options¶
Maximum number of originator files to log. |
|
Maximum number of responder files to log. |
Types¶
Redefinitions¶
|
|
|
Hooks¶
Called when reaching the max number of files across a given HTTP
connection according to |
Detailed Interface¶
Runtime Options¶
- HTTP::max_files_orig¶
-
Maximum number of originator files to log.
HTTP::max_files_policy
even is called once this limit is reached to determine if it’s enforced.
- HTTP::max_files_resp¶
-
Maximum number of responder files to log.
HTTP::max_files_policy
even is called once this limit is reached to determine if it’s enforced.
Types¶
Hooks¶
- HTTP::max_files_policy¶
-
Called when reaching the max number of files across a given HTTP connection according to
HTTP::max_files_orig
orHTTP::max_files_resp
. Break from the hook early to signal that the file limit should not be applied.