- ts: time &log
Timestamp of the command request.
- uid: string &log
Unique ID of the connection the request was sent over.
- id: conn_id &log
ID of the connection the request was sent over.
- command: string &log
The command sent by the client.
- sub_command: string &log &optional
The subcommand sent by the client, if present.
- argument: string &log &optional
Command argument sent by the client, if any.
- status: string &log &optional
Server reply to the client’s command.
- rtt: interval &log &optional
Round trip time from the request to the response.
- version: string &log
Version of SMB for the command.
- username: string &log &optional
Authenticated username, if available.
- tree: string &log &optional
If this is related to a tree, this is the tree
that was used for the current command.
- tree_service: string &log &optional
The type of tree (disk share, printer share, named pipe, etc.).
- referenced_file: SMB::FileInfo &log &optional
If the command referenced a file, store it here.
- referenced_tree: SMB::TreeInfo &optional
If the command referenced a tree, store it here.
- smb1_offered_dialects: string_vec &optional
(present if policy/protocols/smb/smb1-main.bro is loaded)
Dialects offered by the client.
- smb2_offered_dialects: index_vec &optional
(present if policy/protocols/smb/smb2-main.bro is loaded)
Dialects offered by the client.