Zeek_SMB.smb1_com_tree_disconnect.bif.zeek¶

GLOBAL¶

Namespace:	GLOBAL

Summary¶

Events¶

smb1_tree_disconnect: event Generated for SMB/CIFS version 1 requests of type tree disconnect.

Detailed Interface¶

Events¶

smb1_tree_disconnect¶

Type:	`event` (c: `connection`, hdr: `SMB1::Header`, is_orig: `bool`)

Generated for SMB/CIFS version 1 requests of type tree disconnect. This is sent by the client to logically disconnect client access to a server resource.

For more information, see MS-CIFS:2.2.4.51

C:	The connection.
Hdr:	The parsed header of the SMB version 1 message.
Is_orig:	True if the message was from the originator.