Ethereal-dev: [ethereal-dev] Handling SMB/NetBIOS continuations

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Fri, 13 Aug 1999 08:11:27 +0900
Hi,

Andrew Tridgell suggested a way of handling SMB continuations.

In the NetBT code, look for the combination of Message Type 00 (data) in
the first byte of the 4-byte NetBT header, and then look for 0xFFSMB as the
four bytes in the data field.

If that is present, call dissect_smb, otherwise record it as a continution
of a pervious packet.

About the only problems will be ReadRAW/WriteRaw etc responses, but it
seems that they are so hard to use most clients do not generate such calls.

Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx, NS Computer Software and Services P/L,
Samba (Team member www.samba.org), Ethereal (Team member www.zing.org)
Co-author, SAMS Teach Yourself Samba in 24 Hours
Author: First Australian 5-day, intensive, hands-on Linux SysAdmin course