Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 12:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

On rare occasions the server doesn't return the tree id on read responses.

Browse source 
This tracks the tree id given by the request

This also addresses BIT-1862 with code submitted by Stefano Rinaldi
and took some hints from his changes in other areas of the code.
This commit is contained in:
Seth Hall 2018-04-05 17:12:33 -04:00
parent 31223caccd
commit 9c85d3f3a9
4 changed files with 51 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/protocols/smb/smb2-main.bro
View file

@ -72,7 +72,9 @@ event smb2_message(c: connection, hdr: SMB2::Header, is_orig: bool) &priority=-5
# marked as PENDING, then we'll skip all of this and wait
# for a reply that isn't marked pending.
if ( c$smb_state$current_cmd$status == "PENDING" )
{
return;
}
if ( SMB::write_cmd_log &&
c$smb_state$current_cmd$status !in SMB::ignored_command_statuses &&