# This file was automatically generated by bifcl from /Users/jon/tmp/bro-2.5.5/src/analyzer/protocol/smb/smb2_events.bif (plugin mode). ## Generated for :abbr:`SMB (Server Message Block)`/:abbr:`CIFS (Common Internet File System)` ## version 2 messages. ## ## See `Wikipedia `__ for more information about the ## :abbr:`SMB (Server Message Block)`/:abbr:`CIFS (Common Internet File System)` protocol. Bro's ## :abbr:`SMB (Server Message Block)`/:abbr:`CIFS (Common Internet File System)` analyzer parses ## both :abbr:`SMB (Server Message Block)`-over-:abbr:`NetBIOS (Network Basic Input/Output System)` on ## ports 138/139 and :abbr:`SMB (Server Message Block)`-over-TCP on port 445. ## ## c: The connection. ## ## hdr: The parsed header of the :abbr:`SMB (Server Message Block)` version 2 message. ## ## is_orig: True if the message came from the originator side. ## ## .. bro:see:: smb1_message export { global smb2_message: event(c: connection , hdr: SMB2::Header , is_orig: bool ); } # end of export section module GLOBAL;