base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro

GLOBAL
Namespace:GLOBAL
Source File:/scripts/base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro

Summary

Events

smb2_create_request: event Generated for SMB/CIFS version 2 requests of type create.
smb2_create_response: event Generated for SMB/CIFS version 2 responses of type create.

Detailed Interface

Events

smb2_create_request
Type :event (c: connection, hdr: SMB2::Header, file_name: string)

Generated for SMB/CIFS version 2 requests of type create. This is sent by the client to request either creation of or access to a file.

For more information, see MS-SMB2:2.2.13

C :The connection.
Hdr :The parsed header of the SMB version 2 message.
File_name :The name of the file being requested.

See also: smb2_message, smb2_create_response

smb2_create_response
Type :event (c: connection, hdr: SMB2::Header, file_id: SMB2::GUID, size: count, times: SMB::MACTimes, attrs: SMB2::FileAttrs)

Generated for SMB/CIFS version 2 responses of type create. This is sent by the server to notify the client of the status of its SMB2 CREATE request.

For more information, see MS-SMB2:2.2.14

C :The connection.
Hdr :The parsed header of the SMB version 2 message.
File_id :The SMB2 GUID for the file.
Size :Size of the file.
Times :Timestamps associated with the file in question.
Attrs :File attributes.

See also: smb2_message, smb2_create_request

Copyright 2016, The Bro Project. Last updated on October 01, 2017. Created using Sphinx 1.1.3.