Ethereal-dev: Re: [Ethereal-dev] COL_INFO for andX commands

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 22 Jul 2002 13:23:10 -0700
On Tue, Jul 23, 2002 at 07:01:22AM +0930, Richard Sharpe wrote:
> Hmmm, because SMB is a request/response protocol, I cannot think of a case 
> where you are going to have two NBSS messages in a TCP segment in 
> practice?

Because SMB is a request/response protocol that is used by multi-tasking
OSes, and thus a request/response protocol in which there can be more
than one request in flight, I can not only think of cases where you are
going to see that in practice, I *have* seen it in practice in at least
one network trace.

See Mark Muhlestein's subsequent addition to the comment you put in
front of "dissect_nbss_packet()" in "packet-nbns.c"; trust me, this
*really does happen* (in fact, the fact that it *did* happen and Network
Monitor didn't dissect both requests in the TCP segment was one of the
things that got me interested in network analyzer programs in the first
place...).