- EXEC framework - run command

william de ping <[email protected]> Mon, 24 Jun 2019 14:27:49 +0300

Newsgroups	gmane.comp.security.detection.bro
Message-ID	<CAKZA8xhjvbD40Fc-XV7g6hn-4wWzjADB=38uuGOiiOXggAyaEQ@mail.gmail.com>

Hi everyone,

I'm trying to run the following script :
https://github.com/hosom/file-extraction/blob/master/scripts/plugins/store-files-by-md5.bro

The issue is that the EXEC::run command is not working as expected.
I run bro on a pcap file, in debug.log I see that a thread was initiated
and finished with no issues, however the file is not moved..

Any ideas ?

Thank you
B

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek