[Bro] actions in smb_files.log

anthony kasza anthony.kasza at gmail.com
Sun Jun 11 05:23:55 PDT 2017

Hi Izik,

Without an example pcap its difficult to troubleshoot your issue. Are you
using a custom Bro script?


On Jun 11, 2017 5:04 AM, "Izik Birka" <Izik.Birka at hot.net.il> wrote:

> Hi
> What is the reason that I don’t get action SMB::FILE_WRITE?
> I try to copy files \ create new files \ change files but still no
> I only have open,rename,delete
> Thanks
> Izik Birka
> This message (including any attachments) is intended only for the use of
> the individual or entity to which it is addressed and may contain materials
> protected by copyright or information that is non-public, proprietary,
> privileged, confidential, and exempt from disclosure under applicable law
> or agreement. If you are not the intended recipient, you are hereby
> notified that any use, dissemination, distribution, or copying of this
> communication is strictly prohibited. If you have received this
> communication by error, notify the sender immediately and delete this
> message immediately. Thank you.
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170611/350520d7/attachment.html 

More information about the Bro mailing list