Allow loading policy/protocols/smb once again

It just redirects to base/protocols/smb
This commit is contained in:
Jon Siwek 2018-08-30 16:05:36 -05:00
parent 1baf946e52
commit 57a505b0e4
5 changed files with 13 additions and 3 deletions

View file

@ -1,4 +1,8 @@
2.5-947 | 2018-08-30 16:05:36 -0500
* Allow loading policy/protocols/smb once again (Jon Siwek, Corelight)
2.5-946 | 2018-08-30 09:51:16 -0500 2.5-946 | 2018-08-30 09:51:16 -0500
* Update NEWS with more info about runtime options (Daniel Thayer) * Update NEWS with more info about runtime options (Daniel Thayer)

8
NEWS
View file

@ -267,8 +267,12 @@ New Functionality
- Added new NFS events: nfs_proc_symlink, nfs_proc_link, nfs_proc_sattr. - Added new NFS events: nfs_proc_symlink, nfs_proc_link, nfs_proc_sattr.
- The SMB scripts in policy/protocols/smb are now moved into base/protocols/smb - The SMB scripts in policy/protocols/smb are now moved into
and loaded/enabled by default. base/protocols/smb and loaded/enabled by default. If you previously
loaded these scripts from their policy/ location (in local.bro or
other custom scripts) you may now remove/change those although they
should still work since policy/protocols/smb is simply a placeholder
script that redirects to the new base/ location.
- Added new SMB events: smb1_transaction_secondary_request, - Added new SMB events: smb1_transaction_secondary_request,
smb1_transaction2_secondary_request, smb1_transaction_response. smb1_transaction2_secondary_request, smb1_transaction_response.

View file

@ -1 +1 @@
2.5-946 2.5-947

View file

@ -0,0 +1 @@
@load base/protocols/smb

View file

@ -82,6 +82,7 @@
@load protocols/modbus/track-memmap.bro @load protocols/modbus/track-memmap.bro
@load protocols/mysql/software.bro @load protocols/mysql/software.bro
@load protocols/rdp/indicate_ssl.bro @load protocols/rdp/indicate_ssl.bro
@load protocols/smb/__load__.bro
@load protocols/smb/log-cmds.bro @load protocols/smb/log-cmds.bro
@load protocols/smtp/blocklists.bro @load protocols/smtp/blocklists.bro
@load protocols/smtp/detect-suspicious-orig.bro @load protocols/smtp/detect-suspicious-orig.bro