Zeek_SMB.smb2_com_read.bif.zeek¶

Namespace:	GLOBAL

Summary¶

smb2_read_request: event Generated for SMB/CIFS version 2 requests of type read.

smb2_read_request¶

Type:	`event` (c: `connection`, hdr: `SMB2::Header`, file_id: `SMB2::GUID`, offset: `count`, length: `count`)

Generated for SMB/CIFS version 2 requests of type read. This is sent by the client to request a read operation on the specified file.

For more information, see MS-SMB2:2.2.19

C:	The connection.
Hdr:	The parsed header of the SMB version 2 message.
File_id:	The GUID being used for the file.
Offset:	How far into the file this read should be taking place.
Length:	The number of bytes of the file being read.