beats icon indicating copy to clipboard operation
beats copied to clipboard

New protocol support: SMB

Open discotroy opened this issue 10 years ago • 17 comments

It would be great to have SMB support within packetbeat, please. It's an extensive protocol, I know, but I can make a Christmas wish!

discotroy avatar Dec 21 '15 17:12 discotroy

I totally agree with this - especially with the ability to view message contents: searches, file transfer info, etc.

MikeKemmerer avatar May 26 '16 14:05 MikeKemmerer

This is really a needed feature.

digvijan avatar Mar 02 '17 08:03 digvijan

+1

omarix avatar Dec 27 '17 16:12 omarix

+1

Watching wireshark all day got me interested in this, as well.

magicmicah avatar Feb 01 '18 20:02 magicmicah

+1

kimoziiiii avatar Feb 06 '18 06:02 kimoziiiii

+1

kongkongruye avatar Apr 25 '18 06:04 kongkongruye

+1

seungyongshim avatar Nov 14 '19 09:11 seungyongshim

+1

star5o avatar Apr 21 '20 07:04 star5o

+1

SHolzhauer avatar Aug 14 '20 15:08 SHolzhauer

+1

groge avatar Apr 30 '21 13:04 groge

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

elasticmachine avatar Apr 05 '22 11:04 elasticmachine

Hi! We just realized that we haven't looked into this issue in a while. We're sorry!

We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

botelastic[bot] avatar Apr 05 '23 11:04 botelastic[bot]

👍

magicmicah avatar Apr 05 '23 11:04 magicmicah

Pinging @elastic/sec-linux-platform (Team:Security-Linux Platform)

elasticmachine avatar Jan 31 '24 19:01 elasticmachine

Hi! We just realized that we haven't looked into this issue in a while. We're sorry!

We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

botelastic[bot] avatar Jan 30 '25 19:01 botelastic[bot]

👍

magicmicah avatar Jun 11 '25 18:06 magicmicah

@nfritts is your team planning to work on this or should we close this issue to avoid users to have false expectations?

pierrehilbert avatar Dec 08 '25 08:12 pierrehilbert