# Extract Executables **URL:** \ **Category:** Zeek\ **Created:** [December 25, 2016, 10:56am UTC](https://community.zeek.org/t/extract-executables/4566 "2016-12-25T10:56:46Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![sec-x\_sec-x](https://avatars.discourse-cdn.com/v4/letter/s/4af34b/32.png) [@sec-x\_sec-x](https://community.zeek.org/u/sec-x_sec-x)\ **Post date:** [December 25, 2016, 10:56am UTC](https://community.zeek.org/t/extract-executables/4566/1 "2016-12-25T10:56:46Z")
Hi, I recently used bro IDS - Default Policy (GetTraffic from TAP on the network) and i want to analysis Files. 1- extract all Executables Files from all traffic (http,smb and others protocols). 2- md5 of all files that passed in the traffic. How can i do it? Thanks, CM. ---
**Author:** ![Joe\_Blow](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@Joe\_Blow](https://community.zeek.org/u/Joe_Blow)\ **Post date:** [December 25, 2016, 12:56pm UTC](https://community.zeek.org/t/extract-executables/4566/2 "2016-12-25T12:56:15Z")
Try turning on the file extraction framework. Look at the code and see if that fits your needs. Cheers, JB > **From:** [center.mnt@gmail.com](mailto:center.mnt@gmail.com) > **Sent:** December 25, 2016 6:07 AM > **To:** [bro@bro.org](mailto:bro@bro.org) > **Subject:** [Bro] Extract Executables > > | > > - | Hi, I recently used bro IDS - Default Policy (GetTraffic from TAP on the network) and i want to analysis Files. 1- extract all Executables Files from all traffic (http,smb and others protocols). 2- md5 of all files that passed in the traffic. How can i do it? Thanks, CM. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/extract-executables/4566/3 "2022-05-06T15:44:26Z")