- HTTP extract files from wget

Zeek
1

Hi everyone,

I’ve stumbled upon a weird issue using Zeek 3.0.
Parsing traffic that has a file transfer over http using wget does not produce any file analysis.

I do see the get_file_handle event were it says ANALYZER::ANALYZER_HTTP but no files.log is created and extract-all-files.zeek script does not produce the transferred file.

am I missing something here ?

Thanks
B

2

What does the conn log entry look like?