Writing SMB parser

[Richard Sharpe]

On Wed, 25 Dec 2002, Ofer Gigi wrote:

> Hi,
> I would like to get SMB packets (for example- using
> libpcap) and parse them programatically.
> 
> How can I parse the packet programatically and get the
> SMB header out of the packet?

Well, there is code in Ethereal to do this. See www.ethereal.com.

Of course, separating it out might be a challenge for someone who cant 
seem to find the code in the first place :-)

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com