Ethereal-dev: Re: [Ethereal-dev] SMB Transact response reassembly problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 20 Feb 2003 07:18:06 +1100
In your capture, UserID in the SMB header is different between Cal/Reply
That makes ethereal unable to match the reply to the call, which makes
the DCERPC in the replies fail to dissect.

----- Original Message ----- 
From: "Devin Heitmueller" 
Sent: Thursday, February 20, 2003 3:13 AM
Subject: [Ethereal-dev] SMB Transact response reassembly problem


> It would appear that problems with SMB reassembly seem to haunt me.
> 
> The attached trace was taken from Samba-tng, attempting to perform a
> password change over DCE/RPC on the SAMR pipe.  It would appear that
> even though I have all the normal reassembly options enabled in
> Ethereal, that none of the SMB transaction responses are dissected
> (although the transact requests are).
> 
> Any advice that can be offered would be GREATLY appreciated.
> 
> Thanks,
> -- 
> Devin Heitmueller
> Senior Software Engineer
> Netilla Networks Inc
>