mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
![]() - Previously there was an (incorrect) assumption that a TCP conneciton would only ever have one DCE_RPC binding. That assumption was incorrect and with named pipes over SMB there can be multiple concurrent DCE_RPC bindings. This commit fixes that assumption by dynamically creating a new DCE_RPC analyzer whenever a new, unknown binding is created. - There is a crash fix in how string handling in the bind_ack message was done. - Named pipe handling over SMB1 is still not working quite right and problems will show up with multiplexed DCE_RPC bindings. |
||
---|---|---|
.. | ||
files | ||
frameworks | ||
misc | ||
protocols | ||
utils | ||
init-bare.bro | ||
init-default.bro |