Ethereal-dev: Re: [Ethereal-dev] packet-smb big patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <rsahlber@xxxxxxxxxxxxxx>
Date: Wed, 14 Nov 2001 00:50:48 +1100
From: "Guy Harris
Subject: Re: [Ethereal-dev] packet-smb big patch


> On Mon, Nov 12, 2001 at 08:10:32PM +1100, Ronnie Sahlberg wrote:
> > I will generate the last part of my smb patches to fix the transaction
call
> > based on current cvs.
>
> BTW, note that the stuff done by "do_transaction_hashing()", where it
> includes frame numbers as part of the hash key, really *is* necessary -
> and should probably be done for all SMB requests and replies; I have at
> least one capture with multiple Transaction2 SMB exchanges in a row, all
> with the *same* MID, PID, UID, adn TID, and all between the same
> machines on the same connection....

One last question.
These transaction2 exchanges you have seen with the identical MID, are these
really
different exchanges, as in separate commands? or could it be just one
fragmented transaction call?

Perhaps it just used the trancation mechanism of fragmentation?
Could you please check if for example data_displacement or
parameter_displacement differs
between the commands with identical MID's?

A transaction call resulting in large data transfer will be fragmented on
the transaction layer.
All such fragments corresponding to the same command will use the same MID,
PID, UID, TID .

best regards
    ronnie sahlberg