Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 21:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Lots of SMB1 parsing fixes.

Browse source
This commit is contained in:
Seth Hall 2016-08-08 15:36:07 -04:00
parent f03e4ce041
commit 117b5c3ac7
18 changed files with 193 additions and 159 deletions
Download patch file Download diff file Expand all files Collapse all files

7
scripts/policy/protocols/smb/smb1-main.bro
View file

@ -273,7 +273,12 @@ event smb1_trans2_find_first2_request(c: connection, hdr: SMB1::Header, args: SM
{
c$smb_state$current_cmd$argument = args$file_name;
}
event smb1_session_setup_andx_request(c: connection, hdr: SMB1::Header, request: SMB1::SessionSetupAndXRequest) &priority=5
{
# No behavior yet.
}
event smb1_session_setup_andx_response(c: connection, hdr: SMB1::Header, response: SMB1::SessionSetupAndXResponse) &priority=-5
{
if ( SMB::write_cmd_log &&