SMB Event Prototype Issue

Hello again,

You can ignore my last question; I found Seth’s topic github branch on SMB.



I’ve been interested in utilizing the SMB analyzer on Bro as well. Where did you find Seth’s github data on SMB?

And, are you interested in collaborating on the porting of the SMB scripts?


Unfortunately that branch is extremely broken.


How broken is it? I'm willing to start fixing it -- if it's a reasonably good starting point.

While I'm reasonably new to Bro, I have made quite a few mods to my FTP and HTTP scripts for local customization as well as a few minor mods in the analyzers for the same reasons (one of which is a bug that I've been negligent in supplying back to the community -- but I'm working on it).