Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 12:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge branch 'smb3-transform-header' of https://github.com/mauropalumbo75/zeek

Browse source 
* 'smb3-transform-header' of https://github.com/mauropalumbo75/zeek:
  clean up, test and pcap for transform_header added
  added smb2-com-transform-header for smb3.x
This commit is contained in:
Jon Siwek 2019-03-20 19:25:11 -07:00
commit 9eb5449ecb
16 changed files with 163 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
testing/btest/scripts/base/protocols/smb/smb3.test Normal file
View file

@ -0,0 +1,14 @@
# @TEST-EXEC: bro -r $TRACES/smb/smb3.pcap %INPUT
# @TEST-EXEC: btest-diff smb_mapping.log
# @TEST-EXEC: test ! -f dpd.log
# @TEST-EXEC: test ! -f weird.log
# @TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
# Add a test for SMB2 transform header.
event smb2_transform_header(c: connection, hdr: SMB2::Transform_header)
{
print fmt("smb2_transform_header %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, hdr);
}