Ethereal-dev: Re: [Ethereal-dev] patch for packet-smb.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 19 Jun 2001 00:55:54 -0700
On Tue, Jun 19, 2001 at 03:57:31PM +1000, Tim Potter wrote:
> Hello.  Here's a patch to fix the decoding of a smb negprot
> response.  The domain name at the end of the packet is always in
> ascii format, regardless of whether unicode strings are
> negotiated beforehand.

Really?

I have a capture from one NT 4.0 machine to another, and the domain name
is Unicode in the negprot response, the fact that the current CIFS draft
on the SNIA Web site:

	http://www.snia.org/English/Work_Groups/NAS/CIFS/WG_CIFS_Docs.html

says

	UCHAR OemDomainName[];	The name of the domain (in OEM chars);
				Present Only for Non Extended Security i.e.,
				CAP_EXTENDED_SECURITY is on in the Capabilities

on page 46 (which is page 54 according to Acroread) nonwithstanding. 
(The "is on" presumably should be "is off" - CAP_EXTENDED_SECURITY is
off in the capture in question, and the previous item for EncryptionKey
says "Present only for Non Extended Security i.e., CAP_EXTENDED_SECURITY
is off in the Capabilities".)