Ethereal-dev: Re: [Ethereal-dev] smb vs dcerpc error handling

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Tim Potter <tpot@xxxxxxxxx>
Date: Wed, 30 Jan 2002 14:08:35 +1100
On Tue, Jan 29, 2002 at 06:49:05PM -0800, Guy Harris wrote:

> > Hi everyone.  I have noticed that error handling in smb and dcerpc seems
> > to fall over itself when there is an error value set in both the smb
> > packet and the dcerpc packet encapsulated within.
> 
> I.e., the cases where the SMB "error" just means "you didn't give me a
> big enough buffer to send back the RPC reply, so go read some more stuff
> from the named pipe in order get the rest of the reply"?

Yes, except the dcerpc reassembly code as reassembled the packets so the
error really isn't relevant anymore.  It also kind of bugs me that the
smb dissector can append text to the info field after the subdissector
has handled the packet.


Tim.