Wireshark-bugs: [Wireshark-bugs] [Bug 12472] New: SMB Open andX extended response decoded incorr
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 25 May 2016 22:55:03 +0000
Bug ID 12472
Summary SMB Open andX extended response decoded incorrectly
Product Wireshark
Version Git
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter gordon.w.ross@gmail.com 

Created attachment 14596 [details]
Snoop file showing an extended response.

Build Information:
as of commit 66417b17b3570b163a16ca81f71ce5bcb10548d2

--
When the client sends the 0x10 bit in the flag of the request, the server will
reply with a 19 word response instead of the usual 15 word response.
Details in [MS-SMB] 2.2.4.1.2 Server Response Extensions

See packets 222,223 of the attached snoop.

You are receiving this mail because:
  • You are watching all bug changes.