Ethereal-users: Re: [Ethereal-users] SMB - lock request parsing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 29 Oct 2003 16:08:59 -0800

On Oct 28, 2003, at 3:36 PM, Dobes Vandermeer wrote:


The format of a 64-bit lock record in SMB is:

16-bit pid
16-bit reserved
32-bit offset high
32-bit offset low
32-bit length high
32-bit length low

Ethereal is parsing the offsets as one big 64-bit little endian number;


What version of Ethereal are you looking at?

It doesn't appear to be doing so in 0.9.15:

			val=tvb_get_letohl(tvb, offset);
			buf[3]=(val>>24)&0xff;
			buf[2]=(val>>16)&0xff;
			buf[1]=(val>> 8)&0xff;
			buf[0]=(val    )&0xff;
			val=tvb_get_letohl(tvb, offset+4);
			buf[7]=(val>>24)&0xff;
			buf[6]=(val>>16)&0xff;
			buf[5]=(val>> 8)&0xff;
			buf[4]=(val    )&0xff;

Are you looking at the 0.9.14 code?