Wireshark · Smb2-protocol: [Smb2-protocol] Break response

["Stefan (metze) Metzmacher" <metze@xxxxxxxxx>]

Hi Ronnie,

can you apply this patch please,
it adds dissecting of Oplock Breaks.

thanks!

=== epan/dissectors/packet-smb2.c
==================================================================
--- epan/dissectors/packet-smb2.c	(revision 2114)
+++ epan/dissectors/packet-smb2.c	(local)
@@ -3393,6 +3393,26 @@
 	return offset;
 }
 
+static int
+dissect_smb2_break_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, smb2_info_t *si)
+{
+	/* buffer code */
+	offset = dissect_smb2_buffercode(tree, tvb, offset, NULL);
+
+	/* some unknown bytes */
+	proto_tree_add_item(tree, hf_smb2_unknown, tvb, offset, 4, TRUE);
+	offset += 4;
+
+	/* fid */
+	offset = dissect_smb2_fid(tvb, pinfo, tree, offset, si, FID_MODE_USE);
+
+	/* some unknown bytes */
+	proto_tree_add_item(tree, hf_smb2_unknown, tvb, offset, 24, TRUE);
+	offset += 24;
+
+	return offset;
+}
+
 /* names here are just until we find better names for these functions */
 const value_string smb2_cmd_vals[] = {
   { 0x00, "NegotiateProtocol" },
@@ -3714,7 +3734,9 @@
   /* 0x11 SetInfo*/
 	{dissect_smb2_setinfo_request,
 	 dissect_smb2_setinfo_response},
-  /* 0x12 */  {NULL, NULL},
+  /* 0x12 Break */
+  	{NULL,
+	 dissect_smb2_break_response},
   /* 0x13 */  {NULL, NULL},
   /* 0x14 */  {NULL, NULL},
   /* 0x15 */  {NULL, NULL},

Attachment: smb2-break-02.cap
Description: Binary data

Attachment: signature.asc
Description: OpenPGP digital signature