%FILES%
usr/
usr/bin/
usr/bin/maltrail-sensor
usr/bin/maltrail-server
usr/share/
usr/share/doc/
usr/share/doc/maltrail/
usr/share/doc/maltrail/README.md
usr/share/licenses/
usr/share/licenses/maltrail/
usr/share/licenses/maltrail/LICENSE
usr/share/maltrail/
usr/share/maltrail/CHANGELOG
usr/share/maltrail/CITATION.cff
usr/share/maltrail/SECURITY.md
usr/share/maltrail/core/
usr/share/maltrail/core/__init__.py
usr/share/maltrail/core/addr.py
usr/share/maltrail/core/alert.py
usr/share/maltrail/core/assemble.py
usr/share/maltrail/core/attribdict.py
usr/share/maltrail/core/colorized.py
usr/share/maltrail/core/common.py
usr/share/maltrail/core/compat.py
usr/share/maltrail/core/custom_trails.py
usr/share/maltrail/core/datatype.py
usr/share/maltrail/core/doctor.py
usr/share/maltrail/core/enums.py
usr/share/maltrail/core/geo.py
usr/share/maltrail/core/httpd.py
usr/share/maltrail/core/ignore.py
usr/share/maltrail/core/index.py
usr/share/maltrail/core/log.py
usr/share/maltrail/core/logfmt.py
usr/share/maltrail/core/meta.py
usr/share/maltrail/core/provenance.py
usr/share/maltrail/core/quic_sni.py
usr/share/maltrail/core/settings.py
usr/share/maltrail/core/testing.py
usr/share/maltrail/core/tls_intel.py
usr/share/maltrail/core/trailsbin.py
usr/share/maltrail/core/trailsdict.py
usr/share/maltrail/core/update.py
usr/share/maltrail/data/
usr/share/maltrail/data/bogon_ranges.txt
usr/share/maltrail/data/cdn_ranges.txt
usr/share/maltrail/data/drop.txt
usr/share/maltrail/data/ignore_events.txt
usr/share/maltrail/data/ip2cc.csv.gz
usr/share/maltrail/data/ip2cc6.csv.gz
usr/share/maltrail/data/mass_scanner.txt
usr/share/maltrail/data/mass_scanner_cidr.txt
usr/share/maltrail/data/public_suffix_icann.txt
usr/share/maltrail/data/ua.txt
usr/share/maltrail/data/whitelist.txt
usr/share/maltrail/data/worst_asns.txt
usr/share/maltrail/docker/
usr/share/maltrail/docker/Dockerfile
usr/share/maltrail/docker/README.md
usr/share/maltrail/docker/docker-compose.yml
usr/share/maltrail/docker/entrypoint.sh
usr/share/maltrail/docker/tests/
usr/share/maltrail/docker/tests/entrypoint_test.sh
usr/share/maltrail/docs/
usr/share/maltrail/docs/compat/
usr/share/maltrail/docs/compat/README.md
usr/share/maltrail/docs/compat/rows/
usr/share/maltrail/docs/compat/rows/alma-aarch64.json
usr/share/maltrail/docs/compat/rows/alma-x86_64.json
usr/share/maltrail/docs/compat/rows/alpine-x86_64.json
usr/share/maltrail/docs/compat/rows/arch-x86_64.json
usr/share/maltrail/docs/compat/rows/debian-x86_64.json
usr/share/maltrail/docs/compat/rows/debian13-aarch64.json
usr/share/maltrail/docs/compat/rows/debian13-x86_64.json
usr/share/maltrail/docs/compat/rows/fedora-aarch64.json
usr/share/maltrail/docs/compat/rows/fedora-x86_64.json
usr/share/maltrail/docs/compat/rows/fedora41-x86_64.json
usr/share/maltrail/docs/compat/rows/freebsd-amd64.json
usr/share/maltrail/docs/compat/rows/macos-arm64-arm64.json
usr/share/maltrail/docs/compat/rows/macos-intel-x86_64.json
usr/share/maltrail/docs/compat/rows/netbsd-amd64.json
usr/share/maltrail/docs/compat/rows/openbsd-amd64.json
usr/share/maltrail/docs/compat/rows/opensuse-x86_64.json
usr/share/maltrail/docs/compat/rows/rocky-x86_64.json
usr/share/maltrail/docs/compat/rows/tumbleweed-x86_64.json
usr/share/maltrail/docs/compat/rows/ubuntu-aarch64.json
usr/share/maltrail/docs/compat/rows/ubuntu-x86_64.json
usr/share/maltrail/docs/compat/rows/ubuntu2204-x86_64.json
usr/share/maltrail/feeds/
usr/share/maltrail/feeds/__init__.py
usr/share/maltrail/feeds/abuseipdb.py
usr/share/maltrail/feeds/alienvault.py
usr/share/maltrail/feeds/atmos.py
usr/share/maltrail/feeds/binarydefense.py
usr/share/maltrail/feeds/bitcoinnodes.py
usr/share/maltrail/feeds/blackbook.py
usr/share/maltrail/feeds/blackholemonster.py
usr/share/maltrail/feeds/blocklist.py
usr/share/maltrail/feeds/botscout.py
usr/share/maltrail/feeds/bruteforceblocker.py
usr/share/maltrail/feeds/ciarmy.py
usr/share/maltrail/feeds/cybercrimetracker.py
usr/share/maltrail/feeds/dataplane.py
usr/share/maltrail/feeds/dshieldip.py
usr/share/maltrail/feeds/emergingthreatsbot.py
usr/share/maltrail/feeds/emergingthreatscip.py
usr/share/maltrail/feeds/emergingthreatsdns.py
usr/share/maltrail/feeds/fareit.py
usr/share/maltrail/feeds/feodotrackerip.py
usr/share/maltrail/feeds/gpfcomics.py
usr/share/maltrail/feeds/greensnow.py
usr/share/maltrail/feeds/ipnoise.py
usr/share/maltrail/feeds/minerchk.py
usr/share/maltrail/feeds/myip.py
usr/share/maltrail/feeds/openphish.py
usr/share/maltrail/feeds/policeman.py
usr/share/maltrail/feeds/rutgers.py
usr/share/maltrail/feeds/sblam.py
usr/share/maltrail/feeds/scriptzteam.py
usr/share/maltrail/feeds/socksproxy.py
usr/share/maltrail/feeds/sslblcert.py
usr/share/maltrail/feeds/sslblja3.py
usr/share/maltrail/feeds/sslproxies.py
usr/share/maltrail/feeds/torproject.py
usr/share/maltrail/feeds/torprojectnodes.py
usr/share/maltrail/feeds/trickbot.py
usr/share/maltrail/feeds/turris.py
usr/share/maltrail/feeds/urlhaus.py
usr/share/maltrail/feeds/viriback.py
usr/share/maltrail/html/
usr/share/maltrail/html/README.txt
usr/share/maltrail/html/css/
usr/share/maltrail/html/css/main.css
usr/share/maltrail/html/favicon.ico
usr/share/maltrail/html/images/
usr/share/maltrail/html/images/logo.xcf
usr/share/maltrail/html/images/mlogo.png
usr/share/maltrail/html/index.html
usr/share/maltrail/html/js/
usr/share/maltrail/html/js/demo.js
usr/share/maltrail/html/js/main.js
usr/share/maltrail/html/js/thirdparty.min.js
usr/share/maltrail/html/js/worldmap.js
usr/share/maltrail/html/robots.txt
usr/share/maltrail/install.ps1
usr/share/maltrail/install.sh
usr/share/maltrail/maltrail.conf
usr/share/maltrail/packaging/
usr/share/maltrail/packaging/README.md
usr/share/maltrail/packaging/launchd/
usr/share/maltrail/packaging/launchd/io.maltrail.sensor.plist
usr/share/maltrail/packaging/launchd/io.maltrail.server.plist
usr/share/maltrail/packaging/rc.d/
usr/share/maltrail/packaging/rc.d/maltrail_sensor
usr/share/maltrail/packaging/rc.d/maltrail_server
usr/share/maltrail/packaging/systemd/
usr/share/maltrail/packaging/systemd/maltrail-sensor.service
usr/share/maltrail/packaging/systemd/maltrail-server.service
usr/share/maltrail/ruff.toml
usr/share/maltrail/sensor/
usr/share/maltrail/sensor/.gitignore
usr/share/maltrail/sensor/Cargo.lock
usr/share/maltrail/sensor/Cargo.toml
usr/share/maltrail/sensor/README.md
usr/share/maltrail/sensor/benches/
usr/share/maltrail/sensor/benches/hotpath.rs
usr/share/maltrail/sensor/build.rs
usr/share/maltrail/sensor/deny.toml
usr/share/maltrail/sensor/docs/
usr/share/maltrail/sensor/docs/ARCHITECTURE.md
usr/share/maltrail/sensor/docs/COMPATIBILITY.md
usr/share/maltrail/sensor/docs/INSTALL.md
usr/share/maltrail/sensor/docs/PORTING_MAP.md
usr/share/maltrail/sensor/docs/REPORT.md
usr/share/maltrail/sensor/docs/ROADMAP.md
usr/share/maltrail/sensor/rustfmt.toml
usr/share/maltrail/sensor/src/
usr/share/maltrail/sensor/src/addr.rs
usr/share/maltrail/sensor/src/capture/
usr/share/maltrail/sensor/src/capture/fanout.rs
usr/share/maltrail/sensor/src/capture/mod.rs
usr/share/maltrail/sensor/src/capture/srcfanout.rs
usr/share/maltrail/sensor/src/colorized.rs
usr/share/maltrail/sensor/src/config.rs
usr/share/maltrail/sensor/src/event.rs
usr/share/maltrail/sensor/src/fasthash.rs
usr/share/maltrail/sensor/src/heuristics/
usr/share/maltrail/sensor/src/heuristics/beacon.rs
usr/share/maltrail/sensor/src/heuristics/dns_exhaustion.rs
usr/share/maltrail/sensor/src/heuristics/dns_tunneling.rs
usr/share/maltrail/sensor/src/heuristics/mod.rs
usr/share/maltrail/sensor/src/heuristics/nxdomain.rs
usr/share/maltrail/sensor/src/heuristics/scan.rs
usr/share/maltrail/sensor/src/ignore.rs
usr/share/maltrail/sensor/src/lib.rs
usr/share/maltrail/sensor/src/lru.rs
usr/share/maltrail/sensor/src/main.rs
usr/share/maltrail/sensor/src/meta.rs
usr/share/maltrail/sensor/src/metrics.rs
usr/share/maltrail/sensor/src/output.rs
usr/share/maltrail/sensor/src/packet/
usr/share/maltrail/sensor/src/packet/dlt.rs
usr/share/maltrail/sensor/src/packet/mod.rs
usr/share/maltrail/sensor/src/packet/tunnel.rs
usr/share/maltrail/sensor/src/process.rs
usr/share/maltrail/sensor/src/protocols/
usr/share/maltrail/sensor/src/protocols/dns.rs
usr/share/maltrail/sensor/src/protocols/http.rs
usr/share/maltrail/sensor/src/protocols/mod.rs
usr/share/maltrail/sensor/src/protocols/quic.rs
usr/share/maltrail/sensor/src/protocols/tls.rs
usr/share/maltrail/sensor/src/pyre.rs
usr/share/maltrail/sensor/src/selftest.rs
usr/share/maltrail/sensor/src/settings.rs
usr/share/maltrail/sensor/src/settings_gen.rs
usr/share/maltrail/sensor/src/smallstr.rs
usr/share/maltrail/sensor/src/state.rs
usr/share/maltrail/sensor/src/stats.rs
usr/share/maltrail/sensor/src/testkit.rs
usr/share/maltrail/sensor/src/throttle.rs
usr/share/maltrail/sensor/src/trails/
usr/share/maltrail/sensor/src/trails/loader.rs
usr/share/maltrail/sensor/src/trails/mod.rs
usr/share/maltrail/sensor/src/trails/regexset.rs
usr/share/maltrail/sensor/src/trails/table.rs
usr/share/maltrail/sensor/src/trailupdate.rs
usr/share/maltrail/sensor/src/whitelist.rs
usr/share/maltrail/sensor/src/worker.rs
usr/share/maltrail/sensor/tests/
usr/share/maltrail/sensor/tests/bounded_state.rs
usr/share/maltrail/sensor/tests/capture_live.rs
usr/share/maltrail/sensor/tests/config_ranges.rs
usr/share/maltrail/sensor/tests/corpus/
usr/share/maltrail/sensor/tests/corpus/ack_sweep_no_fp.pcap
usr/share/maltrail/sensor/tests/corpus/cache_expiry.pcap
usr/share/maltrail/sensor/tests/corpus/clean_tcp.pcap
usr/share/maltrail/sensor/tests/corpus/dlt_raw.pcap
usr/share/maltrail/sensor/tests/corpus/dlt_sll.pcap
usr/share/maltrail/sensor/tests/corpus/dns_dga_labels.pcap
usr/share/maltrail/sensor/tests/corpus/dns_exhaustion.pcap
usr/share/maltrail/sensor/tests/corpus/dns_ignored_suffixes.pcap
usr/share/maltrail/sensor/tests/corpus/dns_malformed.pcap
usr/share/maltrail/sensor/tests/corpus/dns_nxdomain_flood.pcap
usr/share/maltrail/sensor/tests/corpus/dns_queries.pcap
usr/share/maltrail/sensor/tests/corpus/dns_resolver_trail.pcap
usr/share/maltrail/sensor/tests/corpus/dns_responses.pcap
usr/share/maltrail/sensor/tests/corpus/dns_same_socket_burst.pcap
usr/share/maltrail/sensor/tests/corpus/duplicate_syn.pcap
usr/share/maltrail/sensor/tests/corpus/fragments.pcap
usr/share/maltrail/sensor/tests/corpus/http_heuristics.pcap
usr/share/maltrail/sensor/tests/corpus/http_responses.pcap
usr/share/maltrail/sensor/tests/corpus/http_trails.pcap
usr/share/maltrail/sensor/tests/corpus/icmp.pcap
usr/share/maltrail/sensor/tests/corpus/infection_scan.pcap
usr/share/maltrail/sensor/tests/corpus/ip_trails.pcap
usr/share/maltrail/sensor/tests/corpus/ipv4_options.pcap
usr/share/maltrail/sensor/tests/corpus/ipv6.pcap
usr/share/maltrail/sensor/tests/corpus/manifest.json
usr/share/maltrail/sensor/tests/corpus/mixed_soup.pcap
usr/share/maltrail/sensor/tests/corpus/port_scan.pcap
usr/share/maltrail/sensor/tests/corpus/pppoe.pcap
usr/share/maltrail/sensor/tests/corpus/quic_sni.pcap
usr/share/maltrail/sensor/tests/corpus/repeated_detections.pcap
usr/share/maltrail/sensor/tests/corpus/stealth_scan_fin.pcap
usr/share/maltrail/sensor/tests/corpus/stealth_scan_null.pcap
usr/share/maltrail/sensor/tests/corpus/stealth_scan_xmas.pcap
usr/share/maltrail/sensor/tests/corpus/tcp_malware_ja3.pcap
usr/share/maltrail/sensor/tests/corpus/tcp_periodic_beacon.pcap
usr/share/maltrail/sensor/tests/corpus/tls_sni.pcap
usr/share/maltrail/sensor/tests/corpus/trail_under_whitelist_parent.pcap
usr/share/maltrail/sensor/tests/corpus/trails.csv
usr/share/maltrail/sensor/tests/corpus/truncated.pcap
usr/share/maltrail/sensor/tests/corpus/udp_malware_dst.pcap
usr/share/maltrail/sensor/tests/corpus/udp_scan.pcap
usr/share/maltrail/sensor/tests/corpus/vlan.pcap
usr/share/maltrail/sensor/tests/corpus/web_scan.pcap
usr/share/maltrail/sensor/tests/corpus/whitelisted.pcap
usr/share/maltrail/sensor/tests/detection.rs
usr/share/maltrail/sensor/tests/fail_closed.rs
usr/share/maltrail/sensor/tests/fuzz_extended.rs
usr/share/maltrail/sensor/tests/fuzz_parsers.rs
usr/share/maltrail/sensor/tests/generated.rs
usr/share/maltrail/sensor/tests/lifecycle.rs
usr/share/maltrail/sensor/tests/loader_parity.rs
usr/share/maltrail/sensor/tests/meta.rs
usr/share/maltrail/sensor/tests/multi_pcap.rs
usr/share/maltrail/sensor/tests/multi_worker_parity.rs
usr/share/maltrail/sensor/tests/replay.rs
usr/share/maltrail/sensor/tests/storage_health.rs
usr/share/maltrail/sensor/tests/tls_certificate.rs
usr/share/maltrail/sensor/tests/trail_update.rs
usr/share/maltrail/sensor/tests/trails.rs
usr/share/maltrail/sensor/tests/vectors.rs
usr/share/maltrail/sensor/tests/vectors/
usr/share/maltrail/sensor/tests/vectors/addr_port.tsv
usr/share/maltrail/sensor/tests/vectors/cef_escape.tsv
usr/share/maltrail/sensor/tests/vectors/checks.tsv
usr/share/maltrail/sensor/tests/vectors/client_hellos.tsv
usr/share/maltrail/sensor/tests/vectors/colorized.tsv
usr/share/maltrail/sensor/tests/vectors/compress_ipv6.tsv
usr/share/maltrail/sensor/tests/vectors/direct_ip_url.tsv
usr/share/maltrail/sensor/tests/vectors/entropy.tsv
usr/share/maltrail/sensor/tests/vectors/event_json.tsv
usr/share/maltrail/sensor/tests/vectors/event_line.tsv
usr/share/maltrail/sensor/tests/vectors/ignore_rule.tsv
usr/share/maltrail/sensor/tests/vectors/parse_host_port.tsv
usr/share/maltrail/sensor/tests/vectors/py_repr.tsv
usr/share/maltrail/sensor/tests/vectors/re_escape.tsv
usr/share/maltrail/sensor/tests/vectors/safe_value.tsv
usr/share/maltrail/sensor/tests/vectors/sinkhole.tsv
usr/share/maltrail/sensor/tests/vectors/splitext.tsv
usr/share/maltrail/sensor/tests/vectors/suspicious_request.tsv
usr/share/maltrail/sensor/tests/vectors/suspicious_ua.tsv
usr/share/maltrail/sensor/tests/vectors/unquote.tsv
usr/share/maltrail/sensor/tests/vectors/valid_dns_name.tsv
usr/share/maltrail/sensor/tests/vectors/wildcard_trails.tsv
usr/share/maltrail/sensor/tools/
usr/share/maltrail/sensor/tools/adversarial_traffic.py
usr/share/maltrail/sensor/tools/bump_version.py
usr/share/maltrail/sensor/tools/check.sh
usr/share/maltrail/sensor/tools/check_feeds.py
usr/share/maltrail/sensor/tools/check_redistribution.py
usr/share/maltrail/sensor/tools/check_refs.py
usr/share/maltrail/sensor/tools/check_trails.py
usr/share/maltrail/sensor/tools/check_version.py
usr/share/maltrail/sensor/tools/check_windows.sh
usr/share/maltrail/sensor/tools/dump_trails.py
usr/share/maltrail/sensor/tools/fanout_check.py
usr/share/maltrail/sensor/tools/gen_corpus.py
usr/share/maltrail/sensor/tools/gen_demo_js.py
usr/share/maltrail/sensor/tools/gen_ja_vectors.py
usr/share/maltrail/sensor/tools/gen_settings.py
usr/share/maltrail/sensor/tools/gen_vectors.py
usr/share/maltrail/sensor/tools/refnet.py
usr/share/maltrail/sensor/tools/update_trails.py
usr/share/maltrail/server.py
usr/share/maltrail/tests/
usr/share/maltrail/tests/README.md
usr/share/maltrail/tests/_pcapgen.py
usr/share/maltrail/tests/canaries-allow.txt
usr/share/maltrail/tests/canaries-top100k.txt
usr/share/maltrail/tests/canaries.txt
usr/share/maltrail/tests/install/
usr/share/maltrail/tests/install/assert.sh
usr/share/maltrail/tests/install/record.py
usr/share/maltrail/tests/install/run.sh
usr/share/maltrail/tests/install/soname.sh
usr/share/maltrail/tests/install/windows.py
usr/share/maltrail/tests/run.sh
usr/share/maltrail/tests/test_addr.py
usr/share/maltrail/tests/test_adversarial.py
usr/share/maltrail/tests/test_alert.py
usr/share/maltrail/tests/test_assemble.py
usr/share/maltrail/tests/test_check_trails.py
usr/share/maltrail/tests/test_colorized.py
usr/share/maltrail/tests/test_common.py
usr/share/maltrail/tests/test_compat.py
usr/share/maltrail/tests/test_confidence.py
usr/share/maltrail/tests/test_config.py
usr/share/maltrail/tests/test_datatype.py
usr/share/maltrail/tests/test_debug_artifacts.py
usr/share/maltrail/tests/test_detect_test.py
usr/share/maltrail/tests/test_doctests.py
usr/share/maltrail/tests/test_doctor.py
usr/share/maltrail/tests/test_drop.py
usr/share/maltrail/tests/test_enums.py
usr/share/maltrail/tests/test_frontend.py
usr/share/maltrail/tests/test_geo.py
usr/share/maltrail/tests/test_httpd.py
usr/share/maltrail/tests/test_ignore.py
usr/share/maltrail/tests/test_index.py
usr/share/maltrail/tests/test_log_condense.py
usr/share/maltrail/tests/test_logd.py
usr/share/maltrail/tests/test_logfmt.py
usr/share/maltrail/tests/test_meta.py
usr/share/maltrail/tests/test_options.py
usr/share/maltrail/tests/test_quic_sni.py
usr/share/maltrail/tests/test_redistribution.py
usr/share/maltrail/tests/test_reference.py
usr/share/maltrail/tests/test_refnet.py
usr/share/maltrail/tests/test_refs.py
usr/share/maltrail/tests/test_seam.py
usr/share/maltrail/tests/test_severity_parity.py
usr/share/maltrail/tests/test_smoke.py
usr/share/maltrail/tests/test_tls_intel.py
usr/share/maltrail/tests/test_trailsdict.py
usr/share/maltrail/tests/test_update.py
usr/share/maltrail/tests/test_version_sync.py
usr/share/maltrail/tests/test_workflows.py
