inliniac/suricata — pull request #179 by dabarb1 (2012-11-06 15:22:36+00:00)
Title: SMTP MIME Email Message decoder

This module parses email messages and decodes content bodies that are transmitted over the SMTP protocol.
Parsing is done on a line-by-line streaming basis to minimize memory resources. Some protocol anomalies are reported as flags in the data structure and file extraction is also available in a streaming fashion using a callback function.