base/bif/plugins/Zeek_SMB.smb2_com_tree_connect.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Events

smb2_tree_connect_request: event

Generated for SMB/CIFS version 2 requests of type tree_connect.

smb2_tree_connect_response: event

Generated for SMB/CIFS version 2 responses of type tree_connect.

Detailed Interface

Events

smb2_tree_connect_request
Type

event (c: connection, hdr: SMB2::Header, path: string)

Generated for SMB/CIFS version 2 requests of type tree_connect. This is sent by a client to request access to a particular share on the server.

For more information, see MS-SMB2:2.2.9

Parameters
  • c – The connection.

  • hdr – The parsed header of the SMB version 2 message.

  • path – Path of the requested tree.

See also: smb2_message, smb2_tree_connect_response

smb2_tree_connect_response
Type

event (c: connection, hdr: SMB2::Header, response: SMB2::TreeConnectResponse)

Generated for SMB/CIFS version 2 responses of type tree_connect. This is sent by the server when a tree_connect request is successfully processed by the server.

For more information, see MS-SMB2:2.2.10

Parameters
  • c – The connection.

  • hdr – The parsed header of the SMB version 2 message.

  • response – A record with more information related to the response.

See also: smb2_message, smb2_tree_connect_request