mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
12 lines
427 B
Text
12 lines
427 B
Text
#@TEST-EXEC: bro -b -C -r $TRACES/smb/smb1_transaction2_request.pcap %INPUT
|
|
#@TEST-EXEC: btest-diff .stdout
|
|
|
|
@load base/protocols/smb
|
|
@load policy/protocols/smb
|
|
|
|
# Check that smb1_transaction2 requests are parsed correctly
|
|
|
|
event smb1_transaction2_request(c: connection, hdr: SMB1::Header, args: SMB1::Trans2_Args, sub_cmd: count)
|
|
{
|
|
print fmt("smb1_transaction2_request hdr: %s, args: %s, sub_cmd: %x", hdr, args, sub_cmd);
|
|
}
|