Yes! From config.xml:
<global collect-modified-files="true"
client-default-visit-time="120"
capture-network-packets="false"
send-exclusion-lists="false"
You'll be interested in collect-modified-files="true" , and possible
capture-network-packets if you want the tcpdumps of each interaction.
cheers,
Jamie
2008/7/2 asm <[EMAIL PROTECTED]>:
> Hi, dear all;
>
> I wonder if Caputure-Client has the funtion to upload the sample file
> which it find to the Capture-Server?
> If it has the funtion, then we'll be able to collect malware sample via
> URLs.
> Thanks.
--
Jamie Riden / [EMAIL PROTECTED] / [EMAIL PROTECTED]
UK Honeynet Project: http://www.ukhoneynet.org/
_______________________________________________
Capture-HPC mailing list
Capture-HPC@public.honeynet.org
https://public.honeynet.org/mailman/listinfo/capture-hpc
