# Extracting files from HTTP

**URL:** <https://community.zeek.org/t/extracting-files-from-http/2761>\
**Category:** Zeek\
**Created:** [August 1, 2013, 3:23pm UTC](https://community.zeek.org/t/extracting-files-from-http/2761 "2013-08-01T15:23:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![James\_Hook](https://avatars.discourse-cdn.com/v4/letter/j/e36b37/32.png) [@James\_Hook](https://community.zeek.org/u/James_Hook)\
**Post date:** [August 1, 2013, 3:23pm UTC](https://community.zeek.org/t/extracting-files-from-http/2761/1 "2013-08-01T15:23:22Z")

</div>

Hi all,

I’m new to Bro and I’m trying to follow Liam Randall’s video tutorial on extracting files from HTTP streams.

I’ve just cloned the git repository

```auto
git clone --recursive git://[git.bro-ids.org/bro](http://git.bro-ids.org/bro)

and have built Bro according to the quick start guide on the Bro documentation web page.

```

```auto
When Liam looks at "$PREFIX/share/base/protocols/http" I do not see (on my computer) some of the files that Liam has in his installation of Bro in his video.(e.g. file-extract.bro and file-ident.bro are not there)

```

```auto
Can anyone point me in the right direction?

```

```auto
Thanks in advance

```

![](https://mail.google.com/mail/images/cleardot.gif)James

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [August 1, 2013, 3:57pm UTC](https://community.zeek.org/t/extracting-files-from-http/2761/2 "2013-08-01T15:57:13Z")

</div>

If you want to follow Liam's video you will need to use 2.1. Git master has huge changes to how file handling works.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/extracting-files-from-http/2761/3 "2022-05-06T15:41:08Z")

</div>

Closed on May 6, 2022, 3:41pm UTC


