[Samba] ignoring malformed3 datagram packet
Jeremy Allison
jra at samba.org
Mon May 5 15:01:58 MDT 2014
On Fri, Apr 25, 2014 at 09:52:29PM -0400, Thomas Schulz wrote:
> > On Fri, Apr 18, 2014 at 10:44:19AM +0200, samba.20.andwin at spamgourmet.com wrote:
> > > Just for the record: After some investigation I've found out that
> > > these malformed packages originate from a service called 'NuTCRACKER'
> > > on the Windows clients which seems to be installed along with products
> > > from PTC.
> >
> > Hmmm. Sounds like an infection trying to exploit an
> > old bug to me.
>
> NuTCRACKER is a product that we use here. It allows programs that were
> initally created on Unix to be more easily ported to Windows. It provides
> an environment that looks much like Unix on a Windows machine.
>
> Now that I look, I see those same messages here.
Can you get me a wireshark capture trace containing
these packets ? Once I've seen that I can fix nmbd
to treat them correctly.
Cheers,
Jeremy.
More information about the samba
mailing list