Ethereal-dev: [ethereal-dev] lanman falls victim to fragmentation

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Mon, 29 Nov 1999 21:49:35 -0600
I have a trace which has a lanman packet over NBSS over TCP, and because
the LANMAN is fragmented across various TCP packets, dissect_lanman()
gets really confused and thinks I have over 20,000 Server entries in the
packet, and starts allocating 20,000 proto_tree_items....

I've put in a simple patch to check for end-of-packet. I'll be glad when
we handle TCP re-assembly to the point that a reassembled TCP packet can
be sent through the protocol dissectors.

If you SMB'ers are interested, check out frame #298 in

http://ethereal.zing.org/~gram/ut1.snoop.gz

--gilbert