mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
789cb376fd
This also installs symlinks from "zeek" and "bro-config" to a wrapper script that prints a deprecation warning. The btests pass, but this is still WIP. broctl renaming is still missing. #239
12 lines
485 B
Text
12 lines
485 B
Text
#@TEST-EXEC: zeek -b -C -r $TRACES/smb/smb1_transaction_request.pcap %INPUT
|
|
#@TEST-EXEC: btest-diff .stdout
|
|
|
|
@load base/protocols/smb
|
|
@load base/protocols/smb
|
|
|
|
# Check that smb1_transaction requests are parsed correctly
|
|
|
|
event smb1_transaction_request(c: connection, hdr: SMB1::Header, name: string, sub_cmd: count, parameters: string, data: string)
|
|
{
|
|
print fmt("smb1_transaction_request hdr: %s, name: %s, sub_cmd: %x, params: %s, data: %s", hdr, name, sub_cmd, parameters, data);
|
|
}
|