mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
84ac362c67
b41a4bf06d removed a field from this record
because it had a duplicate name as another field. The field does need to
exist, but it needs the correct name.
11 lines
No EOL
300 B
Text
11 lines
No EOL
300 B
Text
# @TEST-EXEC: zeek -r $TRACES/smb/smb2_fscontrol.pcap %INPUT > out
|
|
# @TEST-EXEC: btest-diff out
|
|
|
|
@load base/protocols/smb
|
|
|
|
event smb2_file_fscontrol(c: connection, hdr: SMB2::Header, file_id: SMB2::GUID, fs_control: SMB2::Fscontrol)
|
|
{
|
|
print hdr;
|
|
print file_id;
|
|
print fs_control;
|
|
} |