mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
cf6945ef71
This makes a change to the record for smb1-negotiate-response as well. Times and dates are two 2-byte sections, not three. Switch the parsing to just use two uint16s, and pass those into the lanman time conversion function.
8 lines
872 B
Text
8 lines
872 B
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
smb1_negotiate_request
|
|
[command=114, status=0, flags=24, flags2=51283, tid=0, pid=4660, uid=0, mid=1]
|
|
[PC NETWORK PROGRAM 1.0, LANMAN1.0, LM1.2X002, LANMAN2.1]
|
|
smb1_negotiate_response
|
|
[command=114, status=0, flags=152, flags2=51283, tid=0, pid=4660, uid=0, mid=1]
|
|
[core=<uninitialized>, lanman=[word_count=13, dialect_index=3, security_mode=[user_level=T, challenge_response=T, signatures_enabled=<uninitialized>, signatures_required=<uninitialized>], max_buffer_size=4356, max_mpx_count=32, max_number_vcs=1, raw_mode=[read_raw=F, write_raw=F], session_key=0, server_time=1758862898.0, encryption_key=\x11"3DUfw\x88, primary_domain=\xe4\xbd\x97\xe4\xad\x92\xe5\x89\x87\xe5\x95\x8fP], ntlm=<uninitialized>]
|
|
Parsed Response Server Time: 2025-09-26-05:01:38T
|