[cifs-protocol] SMB_COM_NT_TRANSACT response with SetupCount != 0

Volker Lendecke Volker.Lendecke at SerNet.DE
Tue May 17 05:14:58 MDT 2011

Hi, Dochelp!

When querying previous version from Windows 2008 we have
encountered a broken display when run against Samba (see
snapproblem.jpg). This does not happen when run against
another Windows 2008 box. The only significant difference we
discovered is that Windows 2008 as a VSS server does fill

    UCHAR  SetupCount;
    USHORT Setup[SetupCount];

field as listed in


with something that looks like a copy of the data we've sent
it in the request according to


just offset by 2 bytes.

Please explain where it is documented that Windows 2008
responds with Setup filled with something, we could not find
it in the docs, 


does not list anything.

In the attached trace (win2008snap.cap), please see frames
285 and in particular 286 as reference.


Volker Lendecke

SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: snapproblem.jpg
Type: image/jpeg
Size: 49328 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20110517/4051c64c/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: win2008snap.pcap
Type: application/cap
Size: 105483 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20110517/4051c64c/attachment-0001.pcap>

More information about the cifs-protocol mailing list