File Extraction Directory

Zeek
1

Hello all:

Quick question, can you change the default file extraction directory for files being extracted in a script. After some poking I came across where this was specified in /opt/bro/share/bro/base/files/extract/main.bro with the following:

export {

The prefix where files are extracted to.

const prefix = “./extract_files/” &redef;

If I try to do something like this in my script:

Set extraction folder

redef prefix = “/var/opt/bro/spool/extract_files”;

I am met with the following:
error in ./scripts/file-ext.bro, line 22: “redef” used but not previously defined (prefix)
internal warning in ./scripts/file-ext.bro, line 22: Can’t document redef of prefix, identifier lookup failed

Can someone help me understand how to define this attribute or otherwise influence where the files are extracted to? I would rather not manually define it in the main.bro file.

Thanks,
Jason

2

It’s missing the namespace scoping, try using “FileExtract::prefix”.

- Jon

3

Hi,

redef FileExtract::prefix = "/var/opt/bro/spool/extract_files/"; should work.

Johanna

4

That’s it :slight_smile:

Thanks!