zeek/scripts/base/protocols/smb
Arne Welzel fea8ee2260 smb: Fix &read_expire not in effect due to &default=string_set() usage
The SMB::State$recent_files field is meant to have expiring entries.
However, due to usage of &default=string_set(), the &read_expire
attribute is not respected causing unbounded state growth. Replace
&default=string_set() with &default=set().

Thanks to ya-sato on Slack for reporting!

Related: zeek/zeek-docs#179, #3513.
2023-12-17 15:02:05 +01:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
const-dos-error.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
const-nt-status.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
consts.zeek fix for ill-formed (complex) &default function 2022-03-31 19:31:21 -07:00
dpd.sig Enable SMB by default by moving scripts from policy/ to base/ 2018-08-16 17:23:28 -05:00
files.zeek scripts: Migrate table iteration to blank identifiers 2022-10-24 10:36:09 +02:00
main.zeek smb: Fix &read_expire not in effect due to &default=string_set() usage 2023-12-17 15:02:05 +01:00
README Enable SMB by default by moving scripts from policy/ to base/ 2018-08-16 17:23:28 -05:00
smb1-main.zeek Remove script functions marked as unused (6.1 deprecations) 2023-06-14 10:07:22 -07:00
smb2-main.zeek scripts/smb2-main: Reset script-level state upon smb2_discarded_messages_state() 2023-05-03 11:22:01 +02:00

Support for SMB protocol analysis.