base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro

GLOBAL

Namespace:GLOBAL Source File:/scripts/base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro

Summary

Events

smb2_read_request: event

Generated for SMB/CIFS version 2 requests of type read.

Detailed Interface

Events

smb2_read_request

Type:event (c: connection, hdr: SMB2::Header, file_id: SMB2::GUID, offset: count, length: count)

Generated for SMB/CIFS version 2 requests of type read. This is sent by the client to request a read operation on the specified file.

For more information, see MS-SMB2:2.2.19

C:The connection. Hdr:The parsed header of the SMB version 2 message. File_id:The GUID being used for the file. Offset:How far into the file this read should be taking place. Length:The number of bytes of the file being read.

See also: smb2_message