base/bif/plugins/Zeek_NetBIOS.functions.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Functions

decode_netbios_name: function

Decode a NetBIOS name.

decode_netbios_name_type: function

Converts a NetBIOS name type to its corresponding numeric value.

Detailed Interface

Functions

decode_netbios_name
Type

function (name: string) : string

Decode a NetBIOS name. See https://jeffpar.github.io/kbarchive/kb/194/Q194203/.

Name

The encoded NetBIOS name, e.g., "FEEIEFCAEOEFFEECEJEPFDCAEOEBENEF".

Returns

The decoded NetBIOS name, e.g., "THE NETBIOS NAME".

See also: decode_netbios_name_type

decode_netbios_name_type
Type

function (name: string) : count

Converts a NetBIOS name type to its corresponding numeric value. See https://en.wikipedia.org/wiki/NetBIOS#NetBIOS_Suffixes.

Name

The NetBIOS name type.

Returns

The numeric value of name.

See also: decode_netbios_name