Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

ts fields in SMB logs now default to network_time()

Browse source 
This avoids a problem identified by amanbansal2709 in pull
request #1288. I fixed it in a different way than that pull request
by making sure the ts field is always set so that this isssue doesn't
return in the future.
This commit is contained in:
Seth Hall 2021-03-10 13:52:44 +00:00
parent 1d46bcbb81
commit db7aba0835
3 changed files with 11 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scripts/base/protocols/smb/main.zeek
View file

@ -48,7 +48,7 @@ export {
## This record is for the smb_files.log
type FileInfo: record {
## Time when the file was first discovered.
ts : time &log;
ts : time &log &default=network_time();
## Unique ID of the connection the file was sent over.
uid : string &log;
## ID of the connection the file was sent over.
@ -74,7 +74,7 @@ export {
## This record is for the smb_mapping.log
type TreeInfo: record {
## Time when the tree was mapped.
ts : time &log &optional;
ts : time &log &default=network_time();
## Unique ID of the connection the tree was mapped over.
uid : string &log;
## ID of the connection the tree was mapped over.
@ -94,7 +94,7 @@ export {
## This record is for the smb_cmd.log
type CmdInfo: record {
## Timestamp of the command request.
ts : time &log;
ts : time &log &default=network_time();
## Unique ID of the connection the request was sent over.
uid : string &log;
## ID of the connection the request was sent over.