base/bif/plugins/Zeek_File.events.bif.zeek

GLOBAL

Namespace:: GLOBAL

Summary

Events

file_transferred: event

Generated when a TCP connection associated w/ file data transfer is seen (e.g.

Detailed Interface

Events

file_transferred 

Type:: event (c: connection, prefix: string, descr: string, mime_type: string)

Generated when a TCP connection associated w/ file data transfer is seen (e.g. as happens w/ FTP or IRC).

Parameters:

c – The connection over which file data is transferred.
prefix – Up to 1024 bytes of the file data.
descr – Deprecated/unused argument.
mime_type – MIME type of the file or “<unknown>” if no file magic signatures matched.