base/bif/plugins/Zeek_SMB.smb2_com_transform_header.bif.zeek

GLOBAL

Namespace

GLOBAL

Summary

Events

smb2_transform_header: event

Generated for SMB/CIFS version 3.x transform_header.

Detailed Interface

Events

smb2_transform_header

Type

event (c: connection, hdr: SMB2::Transform_header)

Generated for SMB/CIFS version 3.x transform_header. This is used by the client or server when sending encrypted messages.

For more information, see MS-SMB2:2.2.41

C

The connection.

Hdr

The parsed transformed header message, which is starting with xfdSMB and different from SMB1 and SMB2 headers.

See also: smb2_message