Wireshark-users: [Wireshark-users] Wireshark 1.5.1: Export SMB Objects
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "j.snelders" <j.snelders@xxxxxxxxxx>
Date: Thu, 5 May 2011 20:26:56 +0200
FYI

Wireshark 1.5.1 can export SMB objects:
http://www.wireshark.org/download.html

Jose Pico submitted a patch to add this feature to Wireshark:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4451

The white paper: A tool for capturing SMB files with Wireshark" by David
Perez & Jose Pico is freely available.
http://www.taddong.com/docs/WP_SMBPlugin.pdf

The white paper describes the plug-in they have created, the identifying
of the SMB streams and gives an explanation of the columns in the "Wireshark:
Export SMB object list"

Best regards,
Joke