apiVersion: "v1"
protocol: "tcp"
wireEncoding: "latin1"
framing:
  mode: "length-prefix"
  lengthOffset: 1
  lengthSize: 3
  headerSize: 4
  bigEndian: true
  lengthIncludesHeader: false
address: ":445"
description: "Windows SMB File Server"
banner: ""
commands:
  - regex: "\\xfeSMB"
    handler: "\xfeSMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00"
    name: "smb2_negotiate_response"
  - regex: "\\xffSMB"
    handler: "\xffSMB\x72\x00\x00\x00\x00"
    name: "smb1_negotiate_response"
  - regex: "^(.+)$"
    handler: ""
    name: "catch_all"
deadlineTimeoutSeconds: 20
serverName: "FILESERVER01"