Smb2-protocol: Re: [Smb2-protocol] Re: a first look at SMB2

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Stefan (metze) Metzmacher" <metze@xxxxxxxxx>
Date: Thu, 24 Nov 2005 16:09:21 +0100
ronnie sahlberg schrieb:

I added some quick code to dissect the payload of 0x0b as DCE/RPC


please check it with current svn of ethereal.

the 0x0b request in 468 looks just as one might expect.


after the FID this follows:

4byte data_offset
4byte data_length
4byte unknown1
4byte unknown2 (maybe the length of what the server should repeat from the request?)




look at   frame 469.
Lets just say this one was a surprise.


here after the FID this follows:
4byte repeated_data_offset
4byte repeated_data_length (maybe controlled by unknown2 of the request?)
4byte reply_data_offset
4byte reply_data_length



--
metze

Stefan Metzmacher <metze at samba.org> www.samba.org