[Bro] SMB analyzer

[Seth Hall]

> On May 22, 2017, at 4:08 AM, Raj Kumar <rak at capmon.dk> wrote:
> 
> I have enabled smb analyzer in my local.bro, how to test if  the smb scripts works,because I could see only the usual logs like conn.log,etc

Give it SMB traffic. :)

Sorry for the trite answer, but that's probably the best way as an initial step.

  .Seth

--
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com