Hi list.
(different mailaddress, Im traveling)
3 patches are attached :
the patches must be applied in the order listed below. they depend on
eachother.
smb.patch.1 (tiny): changes to packet_info structure and smb dissector so
the smb dissector can pass important data to subdissector instead of using
hundreds of call parameters.
smb.patch.2 (tiny): one more parameter smb dissector needs to tell
subdissectors.
patch.smb.pipe.diff (54kb): this is the tvbuffified dissector for lanman
protocol.
It is different to the original dissector in several ways.
The patch now correctly matches a response to the Correct request and doesnt
just assume every response matches the last read request.
The patch correctly handles when lanman inserts an extra pad byte between
the parameters and the list of servers/shares in netshareenum-response and
netserverenum2-response.
All implemented calls have all parameters with hf_* fields.
The only calls implemented are netshareenum,netserverenum2.
The other calls in the original implementation could not be converted to
tvbuff and were removed. As soon as I, or anyone else, gets capture files
with any other calls, the remaining calls can be implemented.
I am currently travelling so I have no access to create any interesting
captures at the moment.
The only captures I had on my laptop contained only these two calls.
If anyone mails the list a capturefile with other calls not implemented, I
can implement and test those calls.
Lots of functionality was removed (all calls except netshareenum
netserverenum2) but I think it was nessesary, the other calls could not be
converted in their current implementation.
Use your own judgement for this patch.
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
Attachment:
smb.patch.1
Description: Binary data
Attachment:
smb.patch.2
Description: Binary data
Attachment:
patch.smb.pipe.diff
Description: Binary data
