[Bro] SMB files log
seth at corelight.com
Fri Nov 30 06:54:12 PST 2018
Are you sure that you have activity occurring that would result in the
smb_files.log being created?
On 29 Nov 2018, at 4:00, Luk Schoonaert wrote:
> Hey guys,
> I’m new to this mailing list - and I have a question about enabling
> the SMB analyser, I’m sure I’m missing something simple.
> I enabled /opt/bro/share/bro/site/local.bro -> @load
> Running BRO 2.5.1 - I never get the smb_file.log, I do get these:
> When I copy a file over SMB I;d expect ths smb_files.log to be
> populated - I’m sure I’m missing something very simple, anyone
> have an idea?
> Many Thanks,
> Bro mailing list
> bro at bro-ids.org
Seth Hall * Corelight, Inc * www.corelight.com
More information about the Bro