Ethereal-users: Re: [Ethereal-users] SMB errors (DosErrors and NtStatus)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 31 Mar 2003 20:44:18 -0800
On Mon, Mar 31, 2003 at 01:35:18PM +0200, Heilmaier, Alois wrote:
> 1) I downloaded ethereal source code but I do not found the error listings
> which files contain that errors ?
>     ==> Ethereal decoded NT Status: STATUS_OBJECT_NAME_NOT_FOUND
> (0xc0000034) but I do not found any documentation on thist error.

Well, the list of NT status codes in Ethereal mainly came from

	http://www.wildpackets.com/elements/SMB_NT_Status_Codes.txt

but it just lists hex values and names, it doesn't give a description of
the meaning of the errors.

> 2) Can anyone provide documentations on SMB (SMB tutorial and error codes) ?

There isn't a single document that's *the* SMB spec.

If you search for "http:" and "ftp:" in the source to the Ethereal SMB
dissector, you will find:

	http://www.snia.org/English/Collaterals/Work_Group_Docs/NAS/CIFS/CIFS_Technical_Reference.pdf

which is an SMB specification from the Storage Network Industry
Association, which is the closest thing to an SMB specification that
there is, but it's not a complete specification.

You will also find:

	http://www.samba.org/samba/ftp/specs/brow_rev.txt
	ftp://ftp.microsoft.com/developr/drg/CIFS/cifsrap2.txt
	ftp://ftp.microsoft.com/developr/drg/CIFS/
	ftp://ftp.microsoft.com/developr/drg/CIFS/draft-leach-cifs-v1-spec-01.txt
	http://www.opengroup.org/products/publications/catalog/c209.htm
	http://www.opengroup.org/products/publications/catalog/c195.htm
	http://www.samba.org/samba/ftp/specs/smb-nt01.doc
	http://www.samba.org/samba/ftp/specs/
	ftp://ftp.microsoft.com/developr/drg/CIFS/dosextp.txt
	http://www.samba.org/samba/ftp/specs/smb-nt01.doc
	http://www.samba.org/samba/ftp/specs/smb-nt01.doc
	http://www.samba.org/samba/ftp/specs/smb-nt01.doc
	http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/windows_2000_windows_nt_access_mask_format.asp
	http://www.unicode.org/unicode/onlinedat/countries.html
	http://www.samba.org/samba/ftp/specs/smbpub.txt

Some of those URLs might not still be valid, however.