Extracting files from HTTP

Zeek
1

Hi all,

I’m new to Bro and I’m trying to follow Liam Randall’s video tutorial on extracting files from HTTP streams.

I’ve just cloned the git repository

git clone --recursive git://[git.bro-ids.org/bro](http://git.bro-ids.org/bro)

and have built Bro according to the quick start guide on the Bro documentation web page.


When Liam looks at "$PREFIX/share/base/protocols/http" I do not see (on my computer) some of the files that Liam has in his installation of Bro in his video.(e.g. file-extract.bro and file-ident.bro are not there)


Can anyone point me in the right direction?


Thanks in advance

James

2

If you want to follow Liam's video you will need to use 2.1. Git master has huge changes to how file handling works.

  .Seth