Ethereal-dev: [Ethereal-dev] Re: [Ethereal-cvs] cvs commit: ethereal packet-smb.c smb.h

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Tim Potter <tpot@xxxxxxxxx>
Date: Sun, 13 Apr 2003 13:49:37 +1000
On Sat, Apr 12, 2003 at 03:14:04AM -0500, Ronnie Sahlberg wrote:

>   Log:
>   Rewrite the DCERPC over SMB reassembly completely.

Hooray!  That code was seriously confusing.

[...]

>   The DCERPC fragment reassembly in the dcerpc layer is still broken 
>   though, and i think it has been broken for quite some time.   That 
>   will be addressed shortly.

Yes it has been broken for a while.  The last time I looked at it there
were some serious issues with "middle" fragments among other things.
The fragments were making it to the DCERPC dissector but no information 
was appearing in the protocol tree.

Interestingly enough, I have developed a DCERPC testing tool for Samba
that generates arbitrarily large request and response fragments.  There
is client and server side code for Windows and Samba as well as an
Ethereal dissector which I haven't checked in yet.  Interested?  I was
using it to test Samba but it can just as easily be used to test
Ethereal.


Tim.