Problems with tcpdump-smb

[Andrej Borsenkow]

Stanley.Hopcroft at ipaustralia.gov.au wrote:
> 
>      Dear Ladies and Gentlemen,
> 
>      I am writing to ask your help using Mr Tridgells tcpdump-smb
>      (ftp:samba.anu.ed.au/pub/samba/tcpdump-smb/tcpdump-3.2.1.tar.gz).
> 
>      My problem is that it appears to erroneosly report very long packets
>      that it identifies as SMBError = ERROR: Unknown error (32,37233) and
>      then displays a huge amount of data eg
> 

This version has problems with non-IP traffic, e.g. NetBEUI
or IPX. It incorrectly
determines start and length of data in such a package. Most
probably, you
hit this problem. Do you run protocols other than IP on your
network?

I once had a patch to it, but lost it after crash :-( Since
then, never had
time to debug it again ...

cheers