# This file was automatically generated by bifcl from /opt/local/var/macports/build/zeek-devel-c10ab06c/work/zeek-8.0.4/src/analyzer/protocol/smb/events.bif (plugin mode).

export {
## Generated for :abbr:`SMB (Server Message Block)` connections when a
## named pipe has been detected heuristically.  The case when this comes
## up is when the drive mapping isn't seen so the analyzer is not able
## to determine whether to send the data to the files framework or to
## the DCE_RPC analyzer. This heuristic can be tuned by adding or
## removing "named pipe" names from the :zeek:see:`SMB::pipe_filenames`
## const.
##
## c: The connection.
global smb_pipe_connect_heuristic: event(c: connection );


## Generated for :abbr:`SMB (Server Message Block)` when the number of
## :abbr:`DCE-RPC (Distributed Computing Environment/Remote Procedure Calls)`
## analyzers exceeds :zeek:see:`SMB::max_dce_rpc_analyzers`.
## Occurrence of this event may indicate traffic loss, traffic load-balancing
## issues or abnormal SMB protocol usage.
##
## c: The connection.
##
global smb_discarded_dce_rpc_analyzers: event(c: connection );

} # end of export section
module GLOBAL;
