# filelist

dirname: /usr/share/btest/data/pcaps/dce-rpc
filetypes: ffffffff
filenames:
  20-fids-no-close.pcap/20-fids.pcap/cs_window7-join_stream092.pcap/dce_rpc_netlogon.pcap/dce_rpc_ntlm.pcap/mapi.pcap/ntlm-empty-av-sequence.pcap/ntlm-unterminated-av-sequence.pcap


dirname: /usr/share/btest/data/pcaps/trunc
filetypes: ffffffffff
filenames:
  icmp-header-trunc.pcap/icmp-payload-trunc.pcap/ip4-trunc.pcap/ip6-ext-trunc.pcap/ip6-trunc.pcap/ipv4-internally-truncated-header.pcap/ipv4-truncated-broken-header.pcap/mpls-6in6-6in6-4in6-trunc.pcap/mpls-6in6-broken.pcap.gz/trunc-hdr.pcap


dirname: /usr/share/btest/data/pcaps/tunnels/gtp
filetypes: fffffffffffff
filenames:
  gtp10_not_0xff.pcap/gtp1_gn_normal_incl_fragmentation.pcap/gtp2_different_udp_port.pcap/gtp3_false_gtp.pcap/gtp4_udp_2152_inside.pcap/gtp6_gtp_0x32.pcap/gtp7_ipv6.pcap/gtp8_teredo.pcap/gtp9_unknown_or_too_short_payload.pcap/gtp_control_prime.pcap/gtp_create_pdp_ctx.pcap/gtp_ext_header.pcap/pdp_ctx_messages.trace


dirname: /usr/share/btest/data/pcaps/dns
filetypes: fffffff
filenames:
  dns-binds.pcap/dns-wks.pcap/hinfo.pcap/loc-29-trunc.pcap/long-connection.pcap/proto255.pcap/sshfp-trunc.pcap


dirname: /usr/share/btest/data/pcaps/ssh
filetypes: fffffffffff
filenames:
  reverse-ssh.pcap/single-conn.trace/ssh-on-port-80.trace/ssh-over-udp.pcap/ssh.trace/ssh1-ssh2-fingerprints.pcap/ssh_client_sends_first_enc_pkt_with_newkeys.pcap/ssh_kex_curve25519.pcap/ssh_server_sends_first_enc_pkt_with_newkeys.pcap/ssh_version_199.pcap/sshguess.pcap


dirname: /usr/share/btest/data/pcaps
filenames:
  README/arp-leak.pcap/arp-who-has-radiotap.pcap/arp-who-has-wlanmon.pcap/arp-who-has.pcap/auth_change_session_keys.pcap/bittorrent/chksums/cisco-fabric-path.pcap/communityid/conn-size.trace/contentline-irc-5k-line.pcap/dce-rpc/dhcp/dnp3/dns/dns-caa.pcap/dns-edns-cookie.pcap/dns-edns-ecs-bad.pcap/dns-edns-ecs-weirds.pcap/dns-edns-ecs.pcap/dns-edns-tcp-keepalive.pcap/dns-https.pcap/dns-huge-ttl.pcap/dns-inverse-query.trace/dns-spf.pcap/dns-svcb.pcap/dns-tsig.trace/dns-two-responses.trace/dns-txt-multiple.trace/dns-zero-RRs.trace/dns53.pcap/dns_original_case.pcap/dnssec/echo-connections.pcap.gz/empty.trace/erspan.trace/erspanI.pcap/erspanII.pcap/erspanIII.pcap/fake-syslog-with-padding.pcap/finger/ftp/globus-url-copy-bad-encoding.trace/globus-url-copy.trace/http/icmp/icmp_dot1q.trace/icmp_nd_dnssl.trace/ieee80211.15.4.pcap/ip-bogus-header-len.pcap/ip6_esp.trace/ipv4/ipv6-fragmented-dns.trace/ipv6-hbh-routing0.trace/ipv6-http-atomic-frag.trace/ipv6-mobility-dst-opts.trace/ipv6_zero_len_ah.trace/irc-353.pcap/irc-basic.trace/irc-dcc-send.trace/irc-whitespace.trace/krb/linux_dlt_sll2.pcap/linuxsll-arp.pcap/llc.pcap/lldp.pcap/mixed-vlan-mpls.trace/mmsX.pcap/mobile-ipv6/modbus/mount/mpls-in-vlan.trace/mqtt.pcap/mysql/ncp.pcap/negative-time.pcap/nflog-http.pcap/nfs/nmap-vsn.trace/ntp/ntp.pcap/pbb.pcap/pe/pop3-unknown-commands.pcap/port4242.trace/port4243.trace/pppoe-over-qinq.pcap/pppoe.trace/q-in-q.trace/radiotap.pcap/radius/raw_layer.pcap/raw_packets.trace/rdp/rfb/rotation.trace/rpc-portmap-sadmind.pcap/sip/smb/smtp-attachment-msg.pcap/smtp-mail-transactions-invalid.pcap/smtp-multi-addr.pcap/smtp-one-side-only.trace/smtp.trace/snap-arp.pcap/snmp/socks-auth-10080.pcap/socks-auth.pcap/socks-with-ssl.trace/socks.trace/spicy/ssh/ssl-and-ssh-using-sslh.trace/syslog-missing-pri.trace/syslog-single-udp.trace/tcp/tcp-http-with-padding.pcap/ticks-dns-1hr.pcap/ticks-dns.pcap/tls/trunc/tunnels/udp-multiple-source-ports.pcap/udp-packet.pcap/udp-signature-test.pcap/var-services-std-ports.trace/vntag.pcap/web.trace/wikipedia-filtered-plus-udp.trace/wikipedia.trace/wlanmon.pcap/workshop_2011_browse.trace/www-odd-url.trace

filetypes:
  ffffffddfdffddddfffffffffffffffffdfffffffddffddfffffdfffffffffdffffffdddffdfffdfdffdfffffffdffddffddffffffdffffddfffdfffdddfffffffffff


dirname: /usr/share/btest/data/pcaps/smb
filetypes: ffffffffffffffffffff
filenames:
  SMBGhost.pcap/dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap/raw_ntlm_in_smb.pcap/smb1-OSS-fuzz-54883.pcap/smb1.pcap/smb1_transaction2_request.pcap/smb1_transaction2_secondary_request.pcap/smb1_transaction_request.pcap/smb1_transaction_response.pcap/smb1_transaction_secondary_request.pcap/smb2.delete-on-close-perms-delete-existing.pcap/smb2.pcap/smb2_100_small_files.pcap/smb2_fscontrol.pcap/smb2readwrite.pcap/smb3.pcap/smb311.pcap/smb3_multichannel.pcap/smb3_negotiate_context.pcap/smb_many_open_files_500.pcap.gz


dirname: /usr/share/btest/data/pcaps/tcp
filetypes: ffffffffffffffffffffffffff
filenames:
  fin_retransmission.pcap/handshake-reorder.trace/http-on-irc-port-missing-syn.pcap/miss_end_data.pcap/missing-syn.pcap/no-handshake.pcap/option-27.pcap/option-sack.pcap/options.pcap/payload-syn.pcap/payload-synack.pcap/qi_internet_SYNACK_curl_jsonip.pcap/reassembly.pcap/retransmit-fast009.trace/retransmit-timeout.pcap/rst-inject-rae.trace/single-rst.pcap/ssh-dups.pcap/syn-synack.pcap/syn-then-ack-then-rst.pcap/syn-then-rst.pcap/syn-then-stuff-then-rst.pcap/syn.pcap/tcp-fast-open.pcap/timestamp.pcap/truncated-header.pcap


dirname: /usr/share/btest/data/pcaps/dhcp
filetypes: fffffff
filenames:
  dhcp.trace/dhcp_ack_subscriber_id_and_agent_remote_id.trace/dhcp_discover_param_req_and_client_id.trace/dhcp_flood.pcap/dhcp_inform.trace/dhcp_time_and_nameserver.trace/hw-type0.pcap


dirname: /usr/share/zeek/base/bif/plugins
filenames:
  Zeek_AF_Packet.af_packet.bif.zeek/Zeek_ARP.events.bif.zeek/Zeek_AsciiReader.ascii.bif.zeek/Zeek_AsciiWriter.ascii.bif.zeek/Zeek_BenchmarkReader.benchmark.bif.zeek/Zeek_BinaryReader.binary.bif.zeek/Zeek_BitTorrent.events.bif.zeek/Zeek_ConfigReader.config.bif.zeek/Zeek_ConnSize.events.bif.zeek/Zeek_ConnSize.functions.bif.zeek/Zeek_DCE_RPC.consts.bif.zeek/Zeek_DCE_RPC.events.bif.zeek/Zeek_DCE_RPC.types.bif.zeek/Zeek_DHCP.events.bif.zeek/Zeek_DHCP.types.bif.zeek/Zeek_DNP3.events.bif.zeek/Zeek_DNS.events.bif.zeek/Zeek_FTP.events.bif.zeek/Zeek_FTP.functions.bif.zeek/Zeek_File.events.bif.zeek/Zeek_FileEntropy.events.bif.zeek/Zeek_FileExtract.events.bif.zeek/Zeek_FileExtract.functions.bif.zeek/Zeek_FileHash.events.bif.zeek/Zeek_Finger.events.bif.zeek/Zeek_GSSAPI.events.bif.zeek/Zeek_GTPv1.events.bif.zeek/Zeek_GTPv1.functions.bif.zeek/Zeek_Geneve.events.bif.zeek/Zeek_Gnutella.events.bif.zeek/Zeek_HTTP.events.bif.zeek/Zeek_HTTP.functions.bif.zeek/Zeek_ICMP.events.bif.zeek/Zeek_IMAP.events.bif.zeek/Zeek_IRC.events.bif.zeek/Zeek_Ident.events.bif.zeek/Zeek_KRB.events.bif.zeek/Zeek_KRB.types.bif.zeek/Zeek_Login.events.bif.zeek/Zeek_Login.functions.bif.zeek/Zeek_MIME.consts.bif.zeek/Zeek_MIME.events.bif.zeek/Zeek_MQTT.events.bif.zeek/Zeek_MQTT.types.bif.zeek/Zeek_Modbus.events.bif.zeek/Zeek_MySQL.events.bif.zeek/Zeek_NCP.consts.bif.zeek/Zeek_NCP.events.bif.zeek/Zeek_NTLM.events.bif.zeek/Zeek_NTLM.types.bif.zeek/Zeek_NTP.events.bif.zeek/Zeek_NTP.types.bif.zeek/Zeek_NetBIOS.events.bif.zeek/Zeek_NetBIOS.functions.bif.zeek/Zeek_NoneWriter.none.bif.zeek/Zeek_PE.events.bif.zeek/Zeek_POP3.events.bif.zeek/Zeek_RADIUS.events.bif.zeek/Zeek_RDP.events.bif.zeek/Zeek_RDP.types.bif.zeek/Zeek_RFB.events.bif.zeek/Zeek_RPC.events.bif.zeek/Zeek_RawReader.raw.bif.zeek/Zeek_SIP.events.bif.zeek/Zeek_SMB.consts.bif.zeek/Zeek_SMB.events.bif.zeek/Zeek_SMB.smb1_com_check_directory.bif.zeek/Zeek_SMB.smb1_com_close.bif.zeek/Zeek_SMB.smb1_com_create_directory.bif.zeek/Zeek_SMB.smb1_com_echo.bif.zeek/Zeek_SMB.smb1_com_logoff_andx.bif.zeek/Zeek_SMB.smb1_com_negotiate.bif.zeek/Zeek_SMB.smb1_com_nt_cancel.bif.zeek/Zeek_SMB.smb1_com_nt_create_andx.bif.zeek/Zeek_SMB.smb1_com_query_information.bif.zeek/Zeek_SMB.smb1_com_read_andx.bif.zeek/Zeek_SMB.smb1_com_session_setup_andx.bif.zeek/Zeek_SMB.smb1_com_transaction.bif.zeek/Zeek_SMB.smb1_com_transaction2.bif.zeek/Zeek_SMB.smb1_com_transaction2_secondary.bif.zeek/Zeek_SMB.smb1_com_transaction_secondary.bif.zeek/Zeek_SMB.smb1_com_tree_connect_andx.bif.zeek/Zeek_SMB.smb1_com_tree_disconnect.bif.zeek/Zeek_SMB.smb1_com_write_andx.bif.zeek/Zeek_SMB.smb1_events.bif.zeek/Zeek_SMB.smb2_com_close.bif.zeek/Zeek_SMB.smb2_com_create.bif.zeek/Zeek_SMB.smb2_com_negotiate.bif.zeek/Zeek_SMB.smb2_com_read.bif.zeek/Zeek_SMB.smb2_com_session_setup.bif.zeek/Zeek_SMB.smb2_com_set_info.bif.zeek/Zeek_SMB.smb2_com_transform_header.bif.zeek/Zeek_SMB.smb2_com_tree_connect.bif.zeek/Zeek_SMB.smb2_com_tree_disconnect.bif.zeek/Zeek_SMB.smb2_com_write.bif.zeek/Zeek_SMB.smb2_events.bif.zeek/Zeek_SMB.types.bif.zeek/Zeek_SMTP.events.bif.zeek/Zeek_SMTP.functions.bif.zeek/Zeek_SNMP.events.bif.zeek/Zeek_SNMP.types.bif.zeek/Zeek_SOCKS.events.bif.zeek/Zeek_SQLiteReader.sqlite.bif.zeek/Zeek_SQLiteWriter.sqlite.bif.zeek/Zeek_SSH.events.bif.zeek/Zeek_SSH.types.bif.zeek/Zeek_SSL.consts.bif.zeek/Zeek_SSL.events.bif.zeek/Zeek_SSL.functions.bif.zeek/Zeek_SSL.types.bif.zeek/Zeek_Syslog.events.bif.zeek/Zeek_TCP.events.bif.zeek/Zeek_TCP.functions.bif.zeek/Zeek_TCP.types.bif.zeek/Zeek_Teredo.events.bif.zeek/Zeek_Teredo.functions.bif.zeek/Zeek_UDP.events.bif.zeek/Zeek_VXLAN.events.bif.zeek/Zeek_X509.events.bif.zeek/Zeek_X509.functions.bif.zeek/Zeek_X509.ocsp_events.bif.zeek/Zeek_X509.types.bif.zeek/Zeek_XMPP.events.bif.zeek/__load__.zeek

filetypes:
  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff


dirname: /usr/share/zeek/base/protocols
filetypes: dddddddddddddddddddddddddddddd
filenames:
  conn/dce-rpc/dhcp/dnp3/dns/finger/ftp/http/imap/irc/krb/modbus/mqtt/mysql/ntlm/ntp/pop3/radius/rdp/rfb/sip/smb/smtp/snmp/socks/ssh/ssl/syslog/tunnels/xmpp


dirname: /usr/share/zeek/base/packet-protocols
filetypes: fddddddddddddddfdddddddddddddddd
filenames:
  __load__.zeek/ayiya/ethernet/fddi/geneve/gre/gtpv1/icmp/ieee802_11/ieee802_11_radio/ip/iptunnel/linux_sll/linux_sll2/llc/main.zeek/mpls/nflog/novell_802_3/null/pbb/ppp_serial/pppoe/root/skip/snap/tcp/teredo/udp/vlan/vntag/vxlan


dirname: /usr/share/zeek/policy/frameworks/intel/seen
filetypes: ffffffffffffff
filenames:
  __load__.zeek/conn-established.zeek/dns.zeek/file-hashes.zeek/file-names.zeek/http-headers.zeek/http-url.zeek/pubkey-hashes.zeek/smb-filenames.zeek/smtp-url-extraction.zeek/smtp.zeek/ssl.zeek/where-locations.zeek/x509.zeek


dirname: /usr/share/zeek/policy/misc
filetypes: fdfffffffff
filenames:
  capture-loss.zeek/detect-traceroute/dump-events.zeek/load-balancing.zeek/loaded-scripts.zeek/profiling.zeek/scan.zeek/stats.zeek/trim-trace-file.zeek/unknown-protocols.zeek/weird-stats.zeek


dirname: /usr/share/zeek/base/protocols/smb
filetypes: fffffffff
filenames:
  __load__.zeek/const-dos-error.zeek/const-nt-status.zeek/consts.zeek/dpd.sig/files.zeek/main.zeek/smb1-main.zeek/smb2-main.zeek


dirname: /usr/share/zeek/policy/frameworks/management
filetypes: fdfdfdffdff
filenames:
  __load__.zeek/agent/config.zeek/controller/log.zeek/node/persistence.zeek/request.zeek/supervisor/types.zeek/util.zeek


dirname: /usr/share/zeek/base
filetypes: dddffffdddd
filenames:
  bif/files/frameworks/init-bare.zeek/init-default.zeek/init-frameworks-and-bifs.zeek/init-supervisor.zeek/misc/packet-protocols/protocols/utils


dirname: /usr/share/zeek/base/frameworks/netcontrol
filetypes: ffffffdff
filenames:
  __load__.zeek/cluster.zeek/drop.zeek/main.zeek/non-cluster.zeek/plugin.zeek/plugins/shunt.zeek/types.zeek


dirname: /usr/share/zeek/base/protocols/conn
filetypes: fffffff
filenames:
  __load__.zeek/contents.zeek/inactivity.zeek/main.zeek/polling.zeek/removal-hooks.zeek/thresholds.zeek


dirname: /usr/share/zeek/policy/frameworks/files
filetypes: fffff
filenames:
  deprecated-txhosts-rxhosts-connuids.zeek/detect-MHR.zeek/entropy-test-all-files.zeek/extract-all-files.zeek/hash-all-files.zeek


dirname: /usr/share/zeek/base/bif
filetypes: fffffffffffffffffdffffffffff
filenames:
  CPP-load.bif.zeek/__load__.zeek/analyzer.bif.zeek/bloom-filter.bif.zeek/cardinality-counter.bif.zeek/comm.bif.zeek/communityid.bif.zeek/const.bif.zeek/data.bif.zeek/event.bif.zeek/file_analysis.bif.zeek/input.bif.zeek/logging.bif.zeek/messaging.bif.zeek/option.bif.zeek/packet_analysis.bif.zeek/pcap.bif.zeek/plugins/reporter.bif.zeek/stats.bif.zeek/store.bif.zeek/strings.bif.zeek/supervisor.bif.zeek/telemetry.bif.zeek/top-k.bif.zeek/types.bif.zeek/zeek.bif.zeek/zeekygen.bif.zeek


dirname: /usr/share/zeek/base/utils
filetypes: ffffffffffffffffffff
filenames:
  active-http.zeek/addrs.zeek/backtrace.zeek/conn-ids.zeek/dir.zeek/directions-and-hosts.zeek/email.zeek/exec.zeek/files.zeek/geoip-distance.zeek/hash_hrw.zeek/numbers.zeek/paths.zeek/patterns.zeek/queue.zeek/site.zeek/strings.zeek/thresholds.zeek/time.zeek/urls.zeek


dirname: /usr/share/zeek/policy/protocols/ssl
filetypes: fffffffffffff
filenames:
  certificate-request-info.zeek/decryption.zeek/dpd-v2.sig/expiring-certs.zeek/heartbleed.zeek/known-certs.zeek/log-certs-base64.zeek/log-hostcerts-only.zeek/ssl-log-ext.zeek/validate-certs.zeek/validate-ocsp.zeek/validate-sct.zeek/weak-keys.zeek


dirname: /usr/share/zeek/policy/frameworks
filetypes: ddddddddddddd
filenames:
  cluster/control/dpd/files/intel/management/netcontrol/notice/packet-filter/signatures/software/spicy/telemetry


dirname: /usr/share/zeek/policy/protocols/conn
filetypes: fffffff
filenames:
  community-id-logging.zeek/known-hosts.zeek/known-services.zeek/mac-logging.zeek/speculative-service.zeek/vlan-logging.zeek/weirds.zeek


dirname: /usr/share/zeek/base/frameworks/files/magic
filetypes: ffffffffffff
filenames:
  __load__.zeek/archive.sig/audio.sig/executable.sig/font.sig/general.sig/image.sig/java.sig/libmagic.sig/office.sig/programming.sig/video.sig


dirname: /usr/share/zeek/base/frameworks
filetypes: dddddddddddddddddddddd
filenames:
  analyzer/broker/cluster/config/control/dpd/files/input/intel/logging/netcontrol/notice/openflow/packet-filter/reporter/signatures/software/spicy/sumstats/supervisor/telemetry/tunnels


dirname: /usr/share/zeek/policy/protocols/http
filetypes: ffffffff
filenames:
  detect-sqli.zeek/detect-webapps.sig/detect-webapps.zeek/header-names.zeek/software-browser-plugins.zeek/software.zeek/var-extraction-cookies.zeek/var-extraction-uri.zeek


dirname: /usr/share/zeek/base/frameworks/sumstats/plugins
filetypes: ffffffffffff
filenames:
  __load__.zeek/average.zeek/hll_unique.zeek/last.zeek/max.zeek/min.zeek/sample.zeek/std-dev.zeek/sum.zeek/topk.zeek/unique.zeek/variance.zeek


dirname: /usr/include/zeek/spicy
filetypes: fffffffd
filenames:
  cookie.h/file-analyzer.h/manager.h/packet-analyzer.h/port-range.h/protocol-analyzer.h/runtime-support.h/spicyz


dirname: /usr/include/zeek/3rdparty
filetypes: ffffdffdfff
filenames:
  ConvertUTF.h/bro_inet_ntop.h/bsd-getopt-long.h/doctest.h/ghc/modp_numtoa.h/patricia.h/rapidjson/setsignal.h/sqlite3.h/zeek_inet_ntop.h


dirname: /usr/include/zeek/analyzer/protocol
filetypes: ddddddddddddddddddddddddddddddddddddddddddd
filenames:
  asn1/bittorrent/conn-size/dce-rpc/dhcp/dnp3/dns/file/finger/ftp/gnutella/gssapi/http/ident/imap/irc/krb/login/mime/modbus/mqtt/mysql/ncp/netbios/ntlm/ntp/pia/pop3/radius/rdp/rfb/rpc/sip/smb/smtp/snmp/socks/ssh/ssl/syslog/tcp/xmpp/zip


dirname: /usr/include/zeek/3rdparty/rapidjson/include/rapidjson/internal
filetypes: fffffffffffff
filenames:
  biginteger.h/clzll.h/diyfp.h/dtoa.h/ieee754.h/itoa.h/meta.h/pow10.h/regex.h/stack.h/strfunc.h/strtod.h/swap.h


dirname: /usr/include/zeek/analyzer/protocol/bittorrent
filetypes: ffffff
filenames:
  BitTorrent.h/BitTorrentTracker.h/bittorrent-analyzer.pac/bittorrent-protocol.pac/bittorrent.pac/events.bif.h


dirname: /usr/include/zeek/packet_analysis/protocol
filetypes: dddddddddddddddddddddddddddddddd
filenames:
  arp/ayiya/ethernet/fddi/geneve/gre/gtpv1/icmp/ieee802_11/ieee802_11_radio/ip/iptunnel/linux_sll/linux_sll2/llc/mpls/nflog/novell_802_3/null/pbb/ppp_serial/pppoe/root/skip/snap/tcp/teredo/udp/vlan/vntag/vxlan/wrapper


dirname: /usr/include/zeek/analyzer/protocol/rdp
filetypes: ffffffffff
filenames:
  RDP.h/RDPEUDP.h/events.bif.h/rdp-analyzer.pac/rdp-protocol.pac/rdp.pac/rdpeudp-analyzer.pac/rdpeudp-protocol.pac/rdpeudp.pac/types.bif.h


dirname: /usr/include/zeek/analyzer/protocol/ssl
filetypes: ffffffffffffffffffff
filenames:
  DTLS.h/SSL.h/consts.bif.h/dtls-analyzer.pac/dtls-protocol.pac/dtls.pac/events.bif.h/functions.bif.h/proc-certificate.pac/ssl-analyzer.pac/ssl-defs.pac/ssl-dtls-analyzer.pac/ssl-dtls-protocol.pac/ssl-protocol.pac/ssl.pac/tls-handshake-analyzer.pac/tls-handshake-protocol.pac/tls-handshake-signed_certificate_timestamp.pac/tls-handshake.pac/types.bif.h


dirname: /usr/include/zeek/script_opt/CPP
filetypes: fffffffffff
filenames:
  Attrs.h/Compile.h/Func.h/InitsInfo.h/Runtime.h/RuntimeInitSupport.h/RuntimeInits.h/RuntimeOps.h/RuntimeVec.h/Tracker.h/Util.h


dirname: /usr/share/zeek/cmake
filetypes: fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
filenames:
  AddUninstallTarget.cmake/BifCl.cmake/BinPAC.cmake/BroPlugin.cmake/BuiltInSpicyAnalyzer.cmake/COPYING/ChangeMacInstallNames.cmake/CheckCompilerArch.cmake/CheckCompilers.cmake/CheckFunctions.cmake/CheckHeaders.cmake/CheckNameserCompat.cmake/CheckOptionalBuildSources.cmake/CheckTypes.cmake/CommonCMakeConfig.cmake/ConfigurePackaging.cmake/ConfigureSpicyBuild.cmake/FindBIND.cmake/FindBISON.cmake/FindBinPAC.cmake/FindBroker.cmake/FindCAres.cmake/FindCapstats.cmake/FindClangTidy.cmake/FindFTS.cmake/FindGooglePerftools.cmake/FindJeMalloc.cmake/FindKqueue.cmake/FindLibKrb5.cmake/FindLibMMDB.cmake/FindOpenSSL.cmake/FindPCAP.cmake/FindPackageHandleStandardArgs.cmake/FindPackageMessage.cmake/FindPythonDev.cmake/FindRequiredPackage.cmake/FindSpicy.cmake/FindSubnetTree.cmake/FindTraceSummary.cmake/FindZeek.cmake/Gen-ZAM.cmake/GetArchitecture.cmake/InstallClobberImmune.cmake/InstallPackageConfigFile.cmake/InstallShellScript.cmake/InstallSymlink.cmake/MAC_PACKAGE_INTRO/MacDependencyPaths.cmake/MiscTests.cmake/OSSpecific.cmake/OpenSSLTests.cmake/PCAPTests.cmake/ProhibitInSourceBuild.cmake/README/RequireCXX17.cmake/SelectLibraryConfigurations.cmake/SetDefaultCompileFlags.cmake/SetupRPATH.cmake/UserChangedWarning.cmake/ZeekConfig.cmake/ZeekConfigVersion.cmake/ZeekPlugin.cmake/ZeekPluginBootstrap.cmake/ZeekPluginCommon.cmake/ZeekPluginDynamic.cmake/ZeekPluginStatic.cmake/ZeekSpicyAnalyzerSupport.cmake/ZeekSubdir.cmake/ZeekTargets.cmake/cmake_uninstall.cmake.in/conan.cmake/package_postupgrade.sh.in/package_preinstall.sh.in/zeek-plugin-create-package.sh/zeek-plugin-install-package.sh


dirname: /usr/include/zeek/file_analysis
filetypes: fffffffdf
filenames:
  Analyzer.h/AnalyzerSet.h/Component.h/File.h/FileReassembler.h/FileTimer.h/Manager.h/analyzer/file_analysis.bif.h


dirname: /usr/include/zeek/analyzer/protocol/tcp
filetypes: ffffffff
filenames:
  ContentLine.h/TCP.h/TCP_Endpoint.h/TCP_Flags.h/TCP_Reassembler.h/events.bif.h/functions.bif.h/types.bif.h


dirname: /usr/include/zeek/script_opt
filetypes: dfffffffffffd
filenames:
  CPP/ExprOptInfo.h/GenIDDefs.h/IDOptInfo.h/Inline.h/ProfileFunc.h/Reduce.h/ScriptOpt.h/StmtOptInfo.h/TempVar.h/UsageAnalyzer.h/UseDefs.h/ZAM


dirname: /usr/include/zeek/analyzer/protocol/smb
filetypes: fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
filenames:
  SMB.h/consts.bif.h/events.bif.h/smb-common.pac/smb-gssapi.pac/smb-mailslot.pac/smb-pipe.pac/smb-strings.pac/smb-time.pac/smb.pac/smb1-com-check-directory.pac/smb1-com-close.pac/smb1-com-create-directory.pac/smb1-com-echo.pac/smb1-com-locking-andx.pac/smb1-com-logoff-andx.pac/smb1-com-negotiate.pac/smb1-com-nt-cancel.pac/smb1-com-nt-create-andx.pac/smb1-com-nt-transact.pac/smb1-com-query-information.pac/smb1-com-read-andx.pac/smb1-com-session-setup-andx.pac/smb1-com-transaction-secondary.pac/smb1-com-transaction.pac/smb1-com-transaction2-secondary.pac/smb1-com-transaction2.pac/smb1-com-tree-connect-andx.pac/smb1-com-tree-disconnect.pac/smb1-com-write-andx.pac/smb1-protocol.pac/smb1_com_check_directory.bif.h/smb1_com_close.bif.h/smb1_com_create_directory.bif.h/smb1_com_echo.bif.h/smb1_com_logoff_andx.bif.h/smb1_com_negotiate.bif.h/smb1_com_nt_cancel.bif.h/smb1_com_nt_create_andx.bif.h/smb1_com_query_information.bif.h/smb1_com_read_andx.bif.h/smb1_com_session_setup_andx.bif.h/smb1_com_transaction.bif.h/smb1_com_transaction2.bif.h/smb1_com_transaction2_secondary.bif.h/smb1_com_transaction_secondary.bif.h/smb1_com_tree_connect_andx.bif.h/smb1_com_tree_disconnect.bif.h/smb1_com_write_andx.bif.h/smb1_events.bif.h/smb2-com-close.pac/smb2-com-create.pac/smb2-com-ioctl.pac/smb2-com-lock.pac/smb2-com-negotiate.pac/smb2-com-read.pac/smb2-com-session-setup.pac/smb2-com-set-info.pac/smb2-com-transform-header.pac/smb2-com-tree-connect.pac/smb2-com-tree-disconnect.pac/smb2-com-write.pac/smb2-protocol.pac/smb2_com_close.bif.h/smb2_com_create.bif.h/smb2_com_negotiate.bif.h/smb2_com_read.bif.h/smb2_com_session_setup.bif.h/smb2_com_set_info.bif.h/smb2_com_transform_header.bif.h/smb2_com_tree_connect.bif.h/smb2_com_tree_disconnect.bif.h/smb2_com_write.bif.h/smb2_events.bif.h/types.bif.h


dirname: /usr/include/zeek
filenames:
  3rdparty/Anon.h/Attr.h/Base64.h/BifReturnVal.h/CCL.h/CPP-load.bif.func_h/CPP-load.bif.netvar_h/CompHash.h/Conn.h/DFA.h/DNS_Mapping.h/DNS_Mgr.h/DbgBreakpoint.h/DbgDisplay.h/DbgWatch.h/Debug.h/DebugCmds.h/DebugLogger.h/Desc.h/Dict.h/Discard.h/EquivClass.h/Event.h/EventHandler.h/EventLauncher.h/EventRegistry.h/EventTrace.h/Expr.h/File.h/Flare.h/Frag.h/Frame.h/Func.h/Hash.h/ID.h/IP.h/IPAddr.h/IntSet.h/IntrusivePtr.h/List.h/NFA.h/NetVar.h/Notifier.h/Obj.h/OpaqueVal.h/Options.h/Overflow.h/PacketFilter.h/Pipe.h/PolicyFile.h/PrefixTable.h/PriorityQueue.h/RE.h/RandTest.h/Reassem.h/Reporter.h/Rule.h/RuleAction.h/RuleCondition.h/RuleMatcher.h/RunState.h/ScannedFile.h/Scope.h/ScriptCoverageManager.h/ScriptProfile.h/ScriptValidation.h/SerializationFormat.h/SmithWaterman.h/Span.h/Stats.h/Stmt.h/StmtBase.h/StmtEnums.h/Tag.h/Timer.h/Traverse.h/TraverseTypes.h/Trigger.h/TunnelEncapsulation.h/Type.h/UID.h/Val.h/Var.h/WeirdState.h/ZVal.h/ZeekArgs.h/ZeekList.h/ZeekString.h/analyzer/binpac-lib.pac/binpac.pac/binpac_zeek-lib.pac/binpac_zeek.h/broker/builtin-plugins/communityid.bif.func_h/communityid.bif.netvar_h/const.bif.func_h/const.bif.netvar_h/digest.h/event.bif.func_h/event.bif.netvar_h/file_analysis/fuzzers/include/input/input.h/iosource/logging/module_util.h/net_util.h/option.bif.func_h/option.bif.netvar_h/packet_analysis/packet_analysis.bif.func_h/packet_analysis.bif.netvar_h/plugin/probabilistic/reporter.bif.func_h/reporter.bif.netvar_h/script_opt/session/spicy/stats.bif.func_h/stats.bif.netvar_h/strings.bif.func_h/strings.bif.netvar_h/supervisor/supervisor.bif.func_h/supervisor.bif.netvar_h/telemetry/threading/types.bif.func_h/types.bif.netvar_h/util.h/zeek-affinity.h/zeek-bif.h/zeek-config-paths.h/zeek-config.h/zeek-setup.h/zeek-version.h/zeek.bif.func_h/zeek.bif.netvar_h/zeek.pac/zeekygen

filetypes:
  dffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdffffddfffffffddddfddffffdffddffdddffffdffddffffffffffffd


dirname: /usr/include/zeek/zeekygen
filetypes: ffffffffff
filenames:
  Configuration.h/IdentifierInfo.h/Info.h/Manager.h/PackageInfo.h/ReStructuredTextTable.h/ScriptInfo.h/Target.h/utils.h/zeekygen.bif.h


dirname: /usr/include/zeek/file_analysis/analyzer/pe
filetypes: ffffffff
filenames:
  PE.h/events.bif.h/pe-analyzer.pac/pe-file-headers.pac/pe-file-idata.pac/pe-file-types.pac/pe-file.pac/pe.pac


dirname: /usr/include/zeek/analyzer/protocol/mqtt/commands
filetypes: ffffffffffffff
filenames:
  connack.pac/connect.pac/disconnect.pac/pingreq.pac/pingresp.pac/puback.pac/pubcomp.pac/publish.pac/pubrec.pac/pubrel.pac/suback.pac/subscribe.pac/unsuback.pac/unsubscribe.pac


dirname: /usr/include/zeek/probabilistic
filetypes: fffffffff
filenames:
  BitVector.h/BloomFilter.h/CardinalityCounter.h/CounterVector.h/Hasher.h/Topk.h/bloom-filter.bif.h/cardinality-counter.bif.h/top-k.bif.h


dirname: /usr/include/zeek/analyzer/protocol/krb
filetypes: ffffffffffff
filenames:
  KRB.h/KRB_TCP.h/events.bif.h/krb-analyzer.pac/krb-asn1.pac/krb-defs.pac/krb-padata.pac/krb-protocol.pac/krb-types.pac/krb.pac/krb_TCP.pac/types.bif.h


dirname: /usr/include/zeek/analyzer/protocol/dce-rpc
filetypes: ffffffffff
filenames:
  DCE_RPC.h/consts.bif.h/dce_rpc-analyzer.pac/dce_rpc-auth.pac/dce_rpc-protocol.pac/dce_rpc.pac/endpoint-atsvc.pac/endpoint-epmapper.pac/events.bif.h/types.bif.h


dirname: /usr/include/zeek/file_analysis/analyzer/x509
filetypes: fffffffff
filenames:
  OCSP.h/X509.h/X509Common.h/events.bif.h/functions.bif.h/ocsp_events.bif.h/types.bif.h/x509-extension.pac/x509-signed_certificate_timestamp.pac


dirname: /usr/include/zeek/3rdparty/rapidjson/include/rapidjson
filetypes: fffffdfffdfffdffffffffff
filenames:
  allocators.h/cursorstreamwrapper.h/document.h/encodedstream.h/encodings.h/error/filereadstream.h/filewritestream.h/fwd.h/internal/istreamwrapper.h/memorybuffer.h/memorystream.h/msinttypes/ostreamwrapper.h/pointer.h/prettywriter.h/rapidjson.h/reader.h/schema.h/stream.h/stringbuffer.h/uri.h/writer.h


dirname: /usr/lib64/zeek/python/zeekctl/ZeekControl
filetypes: fffffffffffffffffffffff
filenames:
  __init__.py/cmdresult.py/config.py/control.py/cron.py/doc.py/events.py/exceptions.py/execute.py/install.py/lock.py/node.py/options.py/plugin.py/pluginreg.py/printdoc.py/ssh_runner.py/state.py/util.py/utilcurses.py/version.py/zeekcmd.py/zeekctl.py


dirname: /usr/share/zeekctl/scripts
filetypes: ffffffdffdfffff
filenames:
  archive-log/check-config/crash-diag/delete-log/expire-crash/expire-logs/helpers/make-archive-name/post-terminate/postprocessors/run-zeek/run-zeek-on-trace/send-mail/set-zeek-path/stats-to-csv


