149 Commits (cf9b2b5fd1ea85290848630a4b1856fdb01d3de2)

Author	SHA1	Message	Date
Victor Julien	15978d4e85	smb: if filename is missing, use '<unknown>'	9 years ago
Victor Julien	71742ed52b	smb: share can't be <share_root>	9 years ago
Victor Julien	bc193242ad	smb1: add OPEN_ANDX command name for logging	9 years ago
Victor Julien	32b19fac99	smb2: don't log/track each READ/WRITE/etc	9 years ago
Victor Julien	fb986abe81	smb: log file FID/GUID as fuid	9 years ago
Victor Julien	816bd022a6	smb1: improve non nt-status handling ... Support SRV error, with a couple of codes. Rename statux field to status_code.	9 years ago
Victor Julien	0519807639	smb1: ignore tree_id in session setup	9 years ago
Victor Julien	286c054472	smb: improve nbss/smb record detection	9 years ago
Victor Julien	7ab071a58d	rust/smb: implement minimal record parsing in probing	9 years ago
Victor Julien	283be3cade	smb2: break out ioctl handling	9 years ago
Victor Julien	bf08285602	smb2: parse async records	9 years ago
Victor Julien	5c26020714	smb2: add ioctl transactions to log the funcs	9 years ago
Victor Julien	75265ec376	smb2: map ioctl funcs to names ... List is based on Wireshark's list.	9 years ago
Victor Julien	7cd66516f0	smb: use formal MS names for disposition	9 years ago
Victor Julien	f7ed749d4f	smb: disable debug output	9 years ago
Victor Julien	eed492547c	smb1: extract server guid from negotiate	9 years ago
Victor Julien	6d56edc3de	smb2: log client and server guid from negotiate	9 years ago
Victor Julien	c56f5e11ca	smb2: log share type	9 years ago
Victor Julien	d75ebdb981	smb: log create empty filename as '<share_root>' like Bro does	9 years ago
Victor Julien	fcbeab70a4	smb1: log create 'service' fields	9 years ago
Victor Julien	90e2abaac4	smb1: use generic string parsing for trans	9 years ago
Victor Julien	76917a8732	smb1: generic smb string parse func	9 years ago
Victor Julien	668c747aee	smb1: more exact tree connect record parsing	9 years ago
Victor Julien	0ed00cf104	smb: move common parsing funcs into own file	9 years ago
Victor Julien	1c701dc50e	smb: make string parsing functions public	9 years ago
Victor Julien	1d4aac1d4d	smb1: set event on empty/malformed dialect	9 years ago
Victor Julien	c91242e71c	smb: rename file to filename in output	9 years ago
Victor Julien	caf29e92b3	smb1: parse and log timestamps in CREATE	9 years ago
Victor Julien	0e05ef7369	smb2: parse and log timestamps in CREATE	9 years ago
Victor Julien	28f16e38ac	smb1: disable 'generic tx's for common commands ... Don't create a generic TX for each READ, WRITE, TRANS, TRANS2, except if they cause events to trigger.	9 years ago
Victor Julien	78cd92a933	smb: generic event per trans/read/write for tx events	9 years ago
Victor Julien	05992f1772	smb: fix event handling when no tx is available	9 years ago
Victor Julien	be615c9fbc	smb: small cleanups, fixes and optimizations	9 years ago
Victor Julien	dab055d8c8	smb: update to der-parser 0.5.1	9 years ago
Victor Julien	0d69e7b8c2	smb: remove unused dialects from state	9 years ago
Victor Julien	ad1bc7f473	smb1: minor debug improvment	9 years ago
Victor Julien	a44504a1bf	smb: redo gap catch up handling	9 years ago
Victor Julien	7114d5d25b	smb1: parser cleanups	9 years ago
Victor Julien	d9e43d3e63	smb: cleaner server component parsing	9 years ago
Victor Julien	ecbf10da70	smb2: improve write error handling	9 years ago
Victor Julien	b34392051d	smb3: parse transform records	9 years ago
Victor Julien	894a73ee06	smb2: add missing commands and improve ioctl err handling	9 years ago
Victor Julien	170edf7c44	smb1: improve error handling	9 years ago
Victor Julien	7ceb67138f	smb: add status	9 years ago
Victor Julien	98b926bf72	smb1: implement WRITE_AND_CLOSE	9 years ago
Victor Julien	595557eb8d	smb1: locking andx may have no response	9 years ago
Victor Julien	7dff9b9969	smb/nbss: work around bad traffic	9 years ago
Victor Julien	8bef120898	smb: session setup improvements ... Improve ntlmssp version extraction and logging, make its data structures optional. Extract native os/lm from smb1 ssn setup. Move session setup handling into their own files. Only log auth data for the session setup tx.	9 years ago
Victor Julien	75d7c9d64a	rust/smb: initial support ... Implement SMB app-layer parser for SMB1/2/3. Features: - file extraction - eve logging - existing dce keyword support - smb_share/smb_named_pipe keyword support (stickybuffers) - auth meta data extraction (ntlmssp, kerberos5)	9 years ago