base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro

GLOBAL
Namespace:GLOBAL
Source File:/scripts/base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro

Summary

Events

smb2_negotiate_request: event Generated for SMB/CIFS version 2 requests of type negotiate.
smb2_negotiate_response: event Generated for SMB/CIFS version 2 responses of type negotiate.

Detailed Interface

Events

smb2_negotiate_request
Type :event (c: connection, hdr: SMB2::Header, dialects: index_vec)

Generated for SMB/CIFS version 2 requests of type negotiate. This is used by the client to notify the server what dialects of the SMB2 Protocol the client understands.

For more information, see MS-SMB2:2.2.3

C :The connection.
Hdr :The parsed header of the SMB version 2 message.
Dialects :A vector of the client’s supported dialects.

See also: smb2_message, smb2_negotiate_response

smb2_negotiate_response
Type :event (c: connection, hdr: SMB2::Header, response: SMB2::NegotiateResponse)

Generated for SMB/CIFS version 2 responses of type negotiate. This is sent by the server to notify the client of the preferred common dialect.

For more information, see MS-SMB2:2.2.4

C :The connection.
Hdr :The parsed header of the SMB version 2 message.
Response :The negotiate response data structure.

See also: smb2_message, smb2_negotiate_request

Copyright 2016, The Bro Project. Last updated on October 01, 2017. Created using Sphinx 1.1.3.