Hi,
when a file is tranfered via ftp, the column conn_uids only contains the ftp-data connection. As this column is already a set, wouldn’t it make sense to add the ftp control connection?
This would save the “detour” of looking up the fuid in ftp.log to find the control connection. Something like:
event file_state_remove(f: fa_file) {
if (f?$ftp) {
add f$info$conn_uids[f$ftp$uid];
}
}
This could also happen in file_new().
Have a nice weekend!
Franky