Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 20:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
zeek/testing/btest/Traces/smb
History
Arne Welzel 3dae8ab086 smb2: Raise smb2_file_delete for CREATE with FILE_DELETE_ON_CLOSE 
When a CREATE request contains the FILE_DELETE_ON_CLOSE option and
the subsequent CREATE response indicates success, we now raise the
smb2_file_delete event to log a delete action in smb_files.log and
also give users a way to handle this scenario.

The provided pcap was generated locally by recording a smbtorture run
of the smb2.delete-on-close-perms test case.

Placed the create_options into the CmdInfo record for potential
exposure in smb_cmd.log (wasn't sure how that would look so left it
for the future).

Fixes #2276.
2022-07-16 17:14:13 +02:00
..
dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap Lots of cleanup and improvement to DCE/RPC analyzer. 2016-04-01 09:38:52 -04:00
raw_ntlm_in_smb.pcap Including a test for raw NTLM in SMB 2016-10-26 10:41:08 -04:00
smb1.pcap First SMB test. 2016-03-07 13:50:25 -05:00
smb1_transaction2_request.pcap add test for smb1_com_transaction2_request event changes 2018-01-19 14:29:20 +01:00
smb1_transaction2_secondary_request.pcap add test for smb1_com_transaction2_secondary_request event changes 2018-01-19 14:29:26 +01:00
smb1_transaction_request.pcap add test for smb1_com_transaction_request event changes 2018-01-12 13:00:05 +01:00
smb1_transaction_response.pcap add test for smb1_com_transaction_response event changes 2018-01-19 14:29:31 +01:00
smb1_transaction_secondary_request.pcap add test for smb1_com_transaction_secondary_request event changes 2018-01-19 14:29:09 +01:00
smb2.delete-on-close-perms-delete-existing.pcap smb2: Raise smb2_file_delete for CREATE with FILE_DELETE_ON_CLOSE 2022-07-16 17:14:13 +02:00
smb2.pcap Fix a problem I introduced with SMB2 file handling. 2016-03-07 15:36:25 -05:00
smb2readwrite.pcap added test and pcap files for smb_files.log fix 2019-02-14 16:51:50 +01:00
smb3.pcap Convert pcapng test suite files to pcap format 2019-11-08 13:08:06 -08:00
smb3_multichannel.pcap Add tests for new SMB3 multichannel support 2020-12-07 15:35:04 -06:00
smb3_negotiate_context.pcap Fix for smb3 negotiate context 2019-08-27 12:21:03 +03:00
smb311.pcap Convert pcapng test suite files to pcap format 2019-11-08 13:08:06 -08:00
SMBGhost.pcap GH-865: fix parsing of SMB NegotiateContextList 2020-03-16 19:00:01 -07:00