Move the SMB analyzer out of the default load.

This also adds a note in the local.bro script about enabling the SMB analyzer.
2025-10-02 06:38:20 +00:00 · 2016-06-14 15:34:00 -04:00 · 2016-06-14 15:34:00 -04:00 · 134d0922d5
commit 134d0922d5
parent e2fb7591f4
11 changed files with 4 additions and 1 deletions
--- a/scripts/base/init-default.bro
+++ b/scripts/base/init-default.bro
@ -58,7 +58,6 @@
@load base/protocols/rdp
@load base/protocols/rfb
@load base/protocols/sip
-@load base/protocols/smb
@load base/protocols/snmp
@load base/protocols/smtp
@load base/protocols/socks
--- a/scripts/policy/protocols/smb/load.bro
+++ b/scripts/policy/protocols/smb/load.bro
--- a/scripts/policy/protocols/smb/const-dos-error.bro
+++ b/scripts/policy/protocols/smb/const-dos-error.bro
--- a/scripts/policy/protocols/smb/const-nt-status.bro
+++ b/scripts/policy/protocols/smb/const-nt-status.bro
--- a/scripts/policy/protocols/smb/consts.bro
+++ b/scripts/policy/protocols/smb/consts.bro
--- a/scripts/policy/protocols/smb/dpd.sig
+++ b/scripts/policy/protocols/smb/dpd.sig
--- a/scripts/policy/protocols/smb/files.bro
+++ b/scripts/policy/protocols/smb/files.bro
--- a/scripts/policy/protocols/smb/main.bro
+++ b/scripts/policy/protocols/smb/main.bro
--- a/scripts/policy/protocols/smb/smb1-main.bro
+++ b/scripts/policy/protocols/smb/smb1-main.bro
--- a/scripts/policy/protocols/smb/smb2-main.bro
+++ b/scripts/policy/protocols/smb/smb2-main.bro
--- a/scripts/site/local.bro
+++ b/scripts/site/local.bro
@ -88,3 +88,7 @@
 # Uncomment the following line to enable logging of connection VLANs. Enabling
 # this adds two VLAN fields to the conn.log file.
 # @load policy/protocols/conn/vlan-logging
+
+# Uncomment the following line to enable the SMB analyzer.  The analyzer
+# is currently considered a preview and therefore not loaded by default.
+# @load policy/protocols/smb