Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/scripts/base/protocols/smb
History
Robin Sommer 369e42a6e4 Fix SMB tests on Apple M1. 
Due to different double precision on M1, file IDs for SMB could end up
changing on M1 because the access time of a file goes into their
computation. The real solution for this would be changing Zeek's
internal "time" representation to uint64; that's planned, but requires
major surgery. For now, this PR changes the SMB code to also pass SMB's
original time representation (which is a uint64) into script-land, and
then use that for computing the file ID.

Closes #1406
2021-06-29 20:17:02 +02:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
const-dos-error.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
const-nt-status.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
consts.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
dpd.sig Enable SMB by default by moving scripts from policy/ to base/ 2018-08-16 17:23:28 -05:00
files.zeek Fix SMB tests on Apple M1. 2021-06-29 20:17:02 +02:00
main.zeek ts fields in SMB logs now default to network_time() 2021-03-10 13:52:44 +00:00
README Enable SMB by default by moving scripts from policy/ to base/ 2018-08-16 17:23:28 -05:00
smb1-main.zeek ts fields in SMB logs now default to network_time() 2021-03-10 13:52:44 +00:00
smb2-main.zeek ts fields in SMB logs now default to network_time() 2021-03-10 13:52:44 +00:00

README 

Support for SMB protocol analysis.