Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 21:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Restore/rename field in SMB2::Fscontrol record type

Browse source 
b41a4bf06d removed a field from this record
because it had a duplicate name as another field. The field does need to
exist, but it needs the correct name.
This commit is contained in:
Tim Wojtulewicz 2023-01-06 18:59:32 -07:00
parent 9a96e3b52a
commit 84ac362c67
4 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
testing/btest/scripts/base/protocols/smb/smb2-fscontrol.test Normal file
View file

@ -0,0 +1,11 @@
# @TEST-EXEC: zeek -r $TRACES/smb/smb2_fscontrol.pcap %INPUT > out
# @TEST-EXEC: btest-diff out
@load base/protocols/smb
event smb2_file_fscontrol(c: connection, hdr: SMB2::Header, file_id: SMB2::GUID, fs_control: SMB2::Fscontrol)
{
print hdr;
print file_id;
print fs_control;
}