Zeek_SMB.smb1_com_close.bif.zeek¶

GLOBAL¶

Namespace: GLOBAL

Summary¶

Events¶

smb1_close_request: event

Generated for SMB/CIFS version 1 requests of type close.

Detailed Interface¶

Events¶

smb1_close_request¶

Type: event (c: connection, hdr: SMB1::Header, file_id: count)

Generated for SMB/CIFS version 1 requests of type close. This is used by the client to close an instance of an object associated with a valid file ID.

For more information, see MS-CIFS:2.2.4.5

C: The connection.
Hdr: The parsed header of the SMB version 1 message.
File_id: The file identifier being closed.