I’m trying to upgrade Bro from 2.4.1 to 2.5.2.
I’ve managed to port all custom script to new Bro but one thing doesn’t work.
In Bro 2.4.2 file_cap.log for FTP traffic looks like this:
1510317723.341233 FTP_DATA application/x-zip Starting file extraction, file name=Test-01.zip, total_bytes=0
In Bro 2.5.2 file_cap.log looks like:
1510319840.650513 FTP_DATA application/x-zip Starting file extraction, file name=FTP_DATA-FF9XlZGkkngVBK1Z1.zip, total_bytes=0
Can someone point me in the right direction which variable changed in the meantime and how to fix this issue?
Thanks in advance