Wireshark-users: Re: [Wireshark-users] export SMB Object
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "j.snelders" <j.snelders@xxxxxxxxxx>
Date: Sun, 15 May 2011 08:34:34 +0200
Hi,

This feature is not implemented yet in the Stable Release 1.4.6.
You have to download the latest Development Release Wireshark 1.5.1. 
http://www.wireshark.org/download.html

Jose Pico submitted a patch to add this feature to Wireshark:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4451

The white paper: A tool for capturing SMB files with Wireshark" by David
Perez & Jose Pico is freely available.
http://www.taddong.com/docs/WP_SMBPlugin.pdf

The white paper describes the plug-in they have created, the identifying
of the SMB streams and gives an explanation of the columns in the "Wireshark:
Export SMB object list"

Best regards,
Joke
On: Sat, 14 May 2011 22:20:03 -0700 (PDT) vincent paul wrote:
>I install the latest wireshark 1.4.6 64 bits and open the smbtorture.cap
>downloaded from wireshark org.? I tried to export SMB objects but the pull
>down menu didn't show selection for SMB (export-->object---> (HTTP/DICOM).?
>Any idea.
>
>I greatly appreciated your help.