I have posted patches to the Wireshark developers list to handle NT TRANSACT requests better ...

Richard Sharpe realrichardsharpe at gmail.com
Sat Jun 9 21:14:23 MDT 2012

Hi folks,

Attached is a patch for those interested (against the current
Wireshark SVN repos) that corrects the handling of NT TRANSACT
requests. It properly reassembles them, both requests and responses,
as far as I can tell.

There is still one unsatisfactory aspect ... but I will get there.

Richard Sharpe
-------------- next part --------------
A non-text attachment was scrubbed...
Name: packet-smb.nttrans.patch
Type: application/octet-stream
Size: 7146 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120609/1e994a0d/attachment.obj>

More information about the samba-technical mailing list