base/bif/plugins/Zeek_SMB.smb2_com_read.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Events

smb2_read_request: event

Generated for SMB/CIFS version 2 requests of type read.

Detailed Interface

Events

smb2_read_request
Type

event (c: connection, hdr: SMB2::Header, file_id: SMB2::GUID, offset: count, length: count)

Generated for SMB/CIFS version 2 requests of type read. This is sent by the client to request a read operation on the specified file.

For more information, see MS-SMB2:2.2.19

C

The connection.

Hdr

The parsed header of the SMB version 2 message.

File_id

The GUID being used for the file.

Offset

How far into the file this read should be taking place.

Length

The number of bytes of the file being read.

See also: smb2_message