- EXEC framework - run command

Hi everyone,

I’m trying to run the following script :
https://github.com/hosom/file-extraction/blob/master/scripts/plugins/store-files-by-md5.bro

The issue is that the EXEC::run command is not working as expected.
I run bro on a pcap file, in debug.log I see that a thread was initiated and finished with no issues, however the file is not moved…

Any ideas ?

Thank you
B

There's no need to use exec for this as there is a rename bif now. I
sent a PR to update this:

https://github.com/hosom/file-extraction/pull/10/files

Thank you, that solves one issue I have.
In case I would like to rm the file, I would have to use the EXEC framework, correct ?

Never mind, Ive just seen the unlink command :slight_smile: