base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro

GLOBAL

Namespace:GLOBAL Source File:/scripts/base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro

Summary

Events

smb1_tree_disconnect: event

Generated for SMB/CIFS version 1 requests of type tree disconnect.

Detailed Interface

Events

smb1_tree_disconnect

Type:event (c: connection, hdr: SMB1::Header, is_orig: bool)

Generated for SMB/CIFS version 1 requests of type tree disconnect. This is sent by the client to logically disconnect client access to a server resource.

For more information, see MS-CIFS:2.2.4.51

C:The connection. Hdr:The parsed header of the SMB version 1 message. Is_orig:True if the message was from the originator.

See also: smb1_message