Re: - EXEC framework - run command
william de ping <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAKZA8xhAbr+zkX=9CdThbtkEGycm=GhP7+iri5q3iC_-NTed-Q@mail.gmail.com> |
Thank you, that solves one issue I have. In case I would like to rm the file, I would have to use the EXEC framework, correct ? On Mon, Jun 24, 2019 at 5:20 PM Justin Azoff <[email protected]> wrote: > There's no need to use exec for this as there is a rename bif now. I > sent a PR to update this: > > https://github.com/hosom/file-extraction/pull/10/files > > On Mon, Jun 24, 2019 at 7:34 AM william de ping <[email protected]> > wrote: > > > > Hi everyone, > > > > I'm trying to run the following script : > > > https://github.com/hosom/file-extraction/blob/master/scripts/plugins/store-files-by-md5.bro > > > > The issue is that the EXEC::run command is not working as expected. > > I run bro on a pcap file, in debug.log I see that a thread was initiated > and finished with no issues, however the file is not moved.. > > > > Any ideas ? > > > > Thank you > > B > > _______________________________________________ > > Zeek mailing list > > [email protected] > > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek > > > > -- > Justin > _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek