mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 15:48:19 +00:00
12 lines
432 B
Text
12 lines
432 B
Text
# @TEST-EXEC: bro -C -r $TRACES/smb/dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap %INPUT
|
|
# @TEST-EXEC: [ ! -f dce_rpc.log ]
|
|
|
|
@load base/protocols/smb
|
|
|
|
# The DCE_RPC analyzer is a little weird since it's instantiated
|
|
# by the SMB analyzer directly in some cases. Care needs to be
|
|
# taken to handle a disabled analyzer correctly.
|
|
event bro_init()
|
|
{
|
|
Analyzer::disable_analyzer(Analyzer::ANALYZER_DCE_RPC);
|
|
}
|