Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 04:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

add smb1_transaction_secondary_request event

Browse source 
expose SMB_COM_TRANSACTION_SECONDARY (0x26) message to script
language. See MS-CIFS section 2.2.4.34.1.
This commit is contained in:
Jeffrey Bencteux 2017-06-01 09:18:55 +02:00
parent bd72710e3b
commit 046c7bc481
6 changed files with 106 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

19
scripts/base/init-bare.bro
View file

@ -2861,6 +2861,25 @@ export {
setup_count: count;
};
type SMB1::Trans_Sec_Args: record {
## Total parameter count
total_param_count: count;
## Total data count
total_data_count: count;
## Parameter count
param_count: count;
## Parameter offset
param_offset: count;
## Parameter displacement
param_displacement: count;
## Data count
data_count: count;
## Data offset
data_offset: count;
## Data displacement
data_displacement: count;
};
type SMB1::Find_First2_Request_Args: record {
## File attributes to apply as a constraint to the search
search_attrs : count;