Improved SPNEGO dissector available in Wireshark soon

Matthieu Patou mat at
Wed Jun 4 23:06:14 MDT 2014

On 05/31/2014 12:33 PM, Richard Sharpe wrote:
> Hi folks,
> I fixed the SPNEGO dissector at long last and the fixes have been
> merged into the Wireshark git repository.
> They are two fold:
> 1. It now correctly handles the negHints field that MS added to a
> negTokenInit coming from a server in a NegotiateProtocol response.
> 2. It also correctly handles the mechListMIC now so that we don't
> double dissect it in some cases.
> These changes should turn up in a version of Wireshark in the near future.
> Thanks to Simo for providing a capture that showed the second problem.
Is it pidl generated ?


Matthieu Patou
Samba Team

More information about the samba-technical mailing list