From 009bbae7c647a6dac78075dd5de30a35e746373b Mon Sep 17 00:00:00 2001 From: Tim Wojtulewicz Date: Tue, 2 Jan 2024 11:13:17 -0700 Subject: [PATCH] Merge remote-tracking branch 'origin/topic/awelzel/smb-unbounded-recent-files-growth' * origin/topic/awelzel/smb-unbounded-recent-files-growth: smb: Fix &read_expire not in effect due to &default=string_set() usage (cherry picked from commit 5740dbcf20ca81fdbd1a9e474a7025e71e997697) --- scripts/base/protocols/smb/main.zeek | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/base/protocols/smb/main.zeek b/scripts/base/protocols/smb/main.zeek index 91e27acffa..9d37312862 100644 --- a/scripts/base/protocols/smb/main.zeek +++ b/scripts/base/protocols/smb/main.zeek @@ -157,7 +157,7 @@ export { ## A set of recent files to avoid logging the same ## files over and over in the smb files log. ## This only applies to files seen in a single connection. - recent_files : set[string] &default=string_set() &read_expire=3min; + recent_files : set[string] &default=set() &read_expire=3min; }; ## Everything below here is used internally in the SMB scripts.