Class: Dap::Filter::FilterDecodeSMBClient

Inherits:
Object
  • Object
show all
Includes:
BaseDecoder
Defined in:
lib/dap/filter/smbclient.rb

Instance Attribute Summary

Attributes included from Base

#name, #opts

Instance Method Summary collapse

Methods included from BaseDecoder

#process

Methods included from Base

#initialize, #process

Instance Method Details

#decode(data) ⇒ Object 



9
10
11
12
13
14
15
16
17
18
19
20
21
22
 
# File 'lib/dap/filter/smbclient.rb', line 9

def decode(data)
  save  = {}

  data.split(/\n/).each do |line|
    case line.strip
    when /^Domain=\[([^\]]+)\] OS=\[([^\]]+)\] Server=\[([^\]]+)\]/
      save['smb_domain'] = $1
      save['smb_native_os'] = $2
      save['smb_native_lm'] = $3
    end
  end

  save
end