[Bro] actions in smb_files.log

[anthony kasza]

Hi Izik,

Without an example pcap its difficult to troubleshoot your issue. Are you
using a custom Bro script?

-AK

On Jun 11, 2017 5:04 AM, "Izik Birka" <Izik.Birka at hot.net.il> wrote:

> Hi
>
> What is the reason that I don’t get action SMB::FILE_WRITE?
>
> I try to copy files \ create new files \ change files but still no
> SMB::FILE_WRITE
>
>
>
> I only have open,rename,delete
>
>
>
> Thanks
>
> Izik Birka
>
> This message (including any attachments) is intended only for the use of
> the individual or entity to which it is addressed and may contain materials
> protected by copyright or information that is non-public, proprietary,
> privileged, confidential, and exempt from disclosure under applicable law
> or agreement. If you are not the intended recipient, you are hereby
> notified that any use, dissemination, distribution, or copying of this
> communication is strictly prohibited. If you have received this
> communication by error, notify the sender immediately and delete this
> message immediately. Thank you.
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170611/350520d7/attachment.html