base/bif/plugins/Zeek_SMB.smb1_com_tree_disconnect.bif.zeek¶
-
GLOBAL
¶
Namespace: | GLOBAL |
---|
Summary¶
Events¶
smb1_tree_disconnect : event |
Generated for SMB/CIFS version 1 requests of type tree disconnect. |
Detailed Interface¶
Events¶
-
smb1_tree_disconnect
¶ Type: event
(c:connection
, hdr:SMB1::Header
, is_orig:bool
)Generated for SMB/CIFS version 1 requests of type tree disconnect. This is sent by the client to logically disconnect client access to a server resource.
For more information, see MS-CIFS:2.2.4.51
C: The connection. Hdr: The parsed header of the SMB version 1 message. Is_orig: True if the message was from the originator. See also:
smb1_message