Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-17 22:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Disabled the attempt at support for the SMB2 SetInfo message.

Browse source 
It was causing reporter warnings and was so wildly incomplete
that it provided no benefit.
This commit is contained in:
Seth Hall 2016-03-08 11:28:32 -05:00
parent c63ad1cdcf
commit 90559a3372
2 changed files with 20 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/base/protocols/smb/smb2-main.bro
View file

@ -154,10 +154,12 @@ event smb2_create_response(c: connection, hdr: SMB2::Header, file_id: SMB2::GUID
SMB::write_file_log(c$smb_state);
}
event smb2_set_info_request(c: connection, hdr: SMB2::Header, request: SMB2::SetInfoRequest) &priority=5
{
c$smb_state$current_file$size = request$eof;
}
# This is commented out for now because the message type in the SMB analyzer
# is no where near complete.
#event smb2_set_info_request(c: connection, hdr: SMB2::Header, request: SMB2::SetInfoRequest) &priority=5
# {
# c$smb_state$current_file$size = request$eof;
# }
event smb2_read_request(c: connection, hdr: SMB2::Header, file_id: SMB2::GUID, offset: count, length: count) &priority=5
{