blob: c1f8b0a528f3cfac3d7ef40f37c0978fa19a82ac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
# Samba/SMB - Server Message Block - Microsoft Windows filesharing
# Pattern attributes: good fast notsofast
# Protocol groups: document_retrieval networking proprietary
# Wiki: http://www.protocolinfo.org/wiki/SMB
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
#
# "This protocol is sometimes also referred to as the Common Internet File
# System (CIFS), LanManager or NetBIOS protocol." -- "man samba"
#
# Actually, SMB is a higher level protocol than NetBIOS. However, the
# NetBIOS header is only 4 bytes: not much to match on.
#
# http://www.ubiqx.org/cifs/SMB.html
#
# This pattern is lightly tested.
smb
# matches a NEGOTIATE PROTOCOL or TRANSACTION REQUEST command
\xffsmb[\x72\x25]
|
