Skip to content

Instantly share code, notes, and snippets.

@grigorescu
grigorescu / http-more-files-names.zeek
Last active September 10, 2020 21:36 — forked from sethhall/http-more-files-names.bro
Get some extra file names from http
@load base/protocols/http/entities
module HTTP;
redef record HTTP::Info += {
potential_fname: string &optional;
};
event http_request(c: connection, method: string, original_URI: string,
unescaped_URI: string, version: string) &priority=5