Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-03 07:08:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Enable SMB by default by moving scripts from policy/ to base/

Browse source
This commit is contained in:
Jon Siwek 2018-08-16 17:21:28 -05:00
parent 7fdf621a1d
commit a04c76c035
33 changed files with 633 additions and 552 deletions
Download patch file Download diff file Expand all files Collapse all files

2
testing/btest/scripts/base/protocols/krb/smb_gssapi.test
View file

@ -8,4 +8,4 @@
# @TEST-EXEC: btest-diff-rst scripts.base.protocols.krb
@load base/protocols/krb
@load policy/protocols/smb
@load base/protocols/smb

2
testing/btest/scripts/base/protocols/smb/disabled-dce-rpc.test
View file

@ -1,7 +1,7 @@
# @TEST-EXEC: bro -C -r $TRACES/smb/dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap %INPUT
# @TEST-EXEC: [ ! -f dce_rpc.log ]
@load policy/protocols/smb
@load base/protocols/smb
# The DCE_RPC analyzer is a little weird since it's instantiated
# by the SMB analyzer directly in some cases. Care needs to be

2
testing/btest/scripts/base/protocols/smb/raw-ntlm.test
View file

@ -2,7 +2,7 @@
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/ntlm
@load policy/protocols/smb
@load base/protocols/smb
# Just verify that the session key is grabbed correctly from NTLM
# carried raw over SMB.

2
testing/btest/scripts/base/protocols/smb/smb1-transaction-dcerpc.test
View file

@ -2,4 +2,4 @@
# @TEST-EXEC: btest-diff dce_rpc.log
@load base/protocols/dce-rpc
@load policy/protocols/smb
@load base/protocols/smb

2
testing/btest/scripts/base/protocols/smb/smb1-transaction-request.test
View file

@ -2,7 +2,7 @@
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
@load policy/protocols/smb
@load base/protocols/smb
# Check that smb1_transaction requests are parsed correctly

2
testing/btest/scripts/base/protocols/smb/smb1-transaction-response.test
View file

@ -2,7 +2,7 @@
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
@load policy/protocols/smb
@load base/protocols/smb
# Check that smb1_transaction_response requests are parsed correctly

2
testing/btest/scripts/base/protocols/smb/smb1-transaction-secondary-request.test
View file

@ -2,7 +2,7 @@
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
@load policy/protocols/smb
@load base/protocols/smb
# Check that smb1_transaction_secondary requests are parsed correctly

2
testing/btest/scripts/base/protocols/smb/smb1-transaction2-request.test
View file

@ -2,7 +2,7 @@
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
@load policy/protocols/smb
@load base/protocols/smb
# Check that smb1_transaction2 requests are parsed correctly

2
testing/btest/scripts/base/protocols/smb/smb1-transaction2-secondary-request.test
View file

@ -2,7 +2,7 @@
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
@load policy/protocols/smb
@load base/protocols/smb
# Check that smb1_transaction2_secondary requests are parsed correctly

2
testing/btest/scripts/base/protocols/smb/smb1.test
View file

@ -1,4 +1,4 @@
# @TEST-EXEC: bro -b -r $TRACES/smb/smb1.pcap %INPUT
# @TEST-EXEC: btest-diff smb_files.log
@load policy/protocols/smb
@load base/protocols/smb

2
testing/btest/scripts/base/protocols/smb/smb2.test
View file

@ -6,7 +6,7 @@
# @TEST-EXEC: test ! -f weird.log
# @TEST-EXEC: btest-diff .stdout
@load policy/protocols/smb
@load base/protocols/smb
# Add some tests for SMB2 create request and response.
event smb2_create_request(c: connection, hdr: SMB2::Header, request: SMB2::CreateRequest)