Commit Graph

114 Commits (f250b921808b397f2fb5779c4c486f7245707401)

Author SHA1 Message Date
Victor Julien 5c26020714 smb2: add ioctl transactions to log the funcs 9 years ago
Victor Julien 6d56edc3de smb2: log client and server guid from negotiate 9 years ago
Victor Julien c56f5e11ca smb2: log share type 9 years ago
Victor Julien fcbeab70a4 smb1: log create 'service' fields 9 years ago
Victor Julien 0e05ef7369 smb2: parse and log timestamps in CREATE 9 years ago
Victor Julien 28f16e38ac smb1: disable 'generic tx's for common commands
Don't create a generic TX for each READ, WRITE, TRANS, TRANS2,
except if they cause events to trigger.
9 years ago
Victor Julien be615c9fbc smb: small cleanups, fixes and optimizations 9 years ago
Victor Julien 0d69e7b8c2 smb: remove unused dialects from state 9 years ago
Victor Julien a44504a1bf smb: redo gap catch up handling 9 years ago
Victor Julien b34392051d smb3: parse transform records 9 years ago
Victor Julien 7ceb67138f smb: add status 9 years ago
Victor Julien 7dff9b9969 smb/nbss: work around bad traffic 9 years ago
Victor Julien 8bef120898 smb: session setup improvements
Improve ntlmssp version extraction and logging, make its data structures
optional. Extract native os/lm from smb1 ssn setup.

Move session setup handling into their own files.

Only log auth data for the session setup tx.
9 years ago
Victor Julien 75d7c9d64a rust/smb: initial support
Implement SMB app-layer parser for SMB1/2/3. Features:
- file extraction
- eve logging
- existing dce keyword support
- smb_share/smb_named_pipe keyword support (stickybuffers)
- auth meta data extraction (ntlmssp, kerberos5)
9 years ago