[Bro] SMB analyzer

Seth Hall seth at corelight.com
Tue May 23 06:31:15 PDT 2017

> On May 22, 2017, at 4:08 AM, Raj Kumar <rak at capmon.dk> wrote:
> I have enabled smb analyzer in my local.bro, how to test if  the smb scripts works,because I could see only the usual logs like conn.log,etc

Give it SMB traffic. :)

Sorry for the trite answer, but that's probably the best way as an initial step.


Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com

More information about the Bro mailing list