[Oisf-devel] filemd5?

[Martin Holste]

Sure, I can do the malwr.com one as a plugin to a base script by then.
 I'll have to review my VT code as the API has probably changed since I did
my last script with it.  If others have pages that have the md5 as part of
the URL,  let me know and I will include those as well.

On Thursday, February 16, 2012, Victor Julien <victor at inliniac.net> wrote:
> So... Martin, some scripts by tomorrow? ;-)
>
> On 02/16/2012 10:33 PM, Martin Holste wrote:
>> A field would help a bit if it's no extra work.
>>
>> On Thursday, February 16, 2012, Victor Julien <victor at inliniac.net>
wrote:
>>> On 02/16/2012 09:23 PM, Martin Holste wrote:
>>>> PERFECT!  There are going to be some very happy toolsmiths and NSM
>>>> analysts out there, myself among them.  Nice work, we need to bore you
>>>> more often!
>>>
>>> Hehe, happy to help :)
>>>
>>> Btw, this works for both IPv4 and IPv6. Do you want a field that gives
>>> the IP version, or will you figure it out from the addresses?
>>>
>>> --
>>> ---------------------------------------------
>>> Victor Julien
>>> http://www.inliniac.net/
>>> PGP: http://www.inliniac.net/victorjulien.asc
>>> ---------------------------------------------
>>>
>>>
>>
>
>
> --
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ---------------------------------------------
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20120216/3ee577e3/attachment-0002.html>