smb: log create empty filename as '<share_root>' like Bro does

pull/3281/head
Victor Julien 8 years ago
parent fcbeab70a4
commit d75ebdb981

@ -176,11 +176,16 @@ fn smb_common_header(state: &SMBState, tx: &SMBTransaction) -> Json
Some(SMBTransactionTypeData::CREATE(ref x)) => { Some(SMBTransactionTypeData::CREATE(ref x)) => {
let mut name_raw = x.filename.to_vec(); let mut name_raw = x.filename.to_vec();
name_raw.retain(|&i|i != 0x00); name_raw.retain(|&i|i != 0x00);
let name = String::from_utf8_lossy(&name_raw); if name_raw.len() > 0 {
if x.directory { let name = String::from_utf8_lossy(&name_raw);
js.set_string("directory", &name); if x.directory {
js.set_string("directory", &name);
} else {
js.set_string("filename", &name);
}
} else { } else {
js.set_string("filename", &name); // name suggestion from Bro
js.set_string("filename", "<share_root>");
} }
match x.disposition { match x.disposition {
1 => { js.set_string("disposition", "open"); }, 1 => { js.set_string("disposition", "open"); },

Loading…
Cancel
Save