Zeek_SMB.smb2_com_session_setup.bif.zeek¶

GLOBAL¶

Namespace:	GLOBAL

Summary¶

Events¶

`smb2_session_setup_request`: `event`	Generated for SMB/CIFS version 2 requests of type session_setup.
`smb2_session_setup_response`: `event`	Generated for SMB/CIFS version 2 responses of type session_setup.

Detailed Interface¶

Events¶

smb2_session_setup_request¶

Type:	`event` (c: `connection`, hdr: `SMB2::Header`, request: `SMB2::SessionSetupRequest`)

Generated for SMB/CIFS version 2 requests of type session_setup. This is sent by the client to request a new authenticated session within a new or existing SMB 2 Protocol transport connection to the server.

For more information, see MS-SMB2:2.2.5

C:	The connection.
Hdr:	The parsed header of the SMB version 2 message.
Request:	A record containing more information related to the request.

smb2_session_setup_response¶

Type:	`event` (c: `connection`, hdr: `SMB2::Header`, response: `SMB2::SessionSetupResponse`)

Generated for SMB/CIFS version 2 responses of type session_setup. This is sent by the server in response to a session_setup request.

For more information, see MS-SMB2:2.2.6

C:	The connection.
Hdr:	The parsed header of the SMB version 2 message.
Response:	A record containing more information related to the response.