base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro

GLOBAL
Namespace:GLOBAL
Source File:/scripts/base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro

Summary

Events

smb1_logoff_andx: event Generated for SMB/CIFS version 1 requests of type logoff andx.

Detailed Interface

Events

smb1_logoff_andx
Type:event (c: connection, is_orig: bool)

Generated for SMB/CIFS version 1 requests of type logoff andx. This is used by the client to logoff the user connection represented by UID in the SMB Header. The server releases all locks and closes all files currently open by this user, disconnects all tree connects, cancels any outstanding requests for this UID, and invalidates the UID.

For more information, see MS-CIFS:2.2.4.54

C:The connection.
Is_orig:Indicates which host sent the logoff message.

See also: smb1_message

Copyright 2016, The Bro Project. Last updated on January 10, 2019. Created using Sphinx 1.7.5.