["McNutt, Justin M." <McNuttJ@xxxxxxxxxxxx>]

I have found a bug in the SMB dissectors.  Attached is a pair of packets that crash ethereal and tethereal when both are read.  If you split them apart via editcap or some similar means, either can be dissected separately, but both together cause t/ethereal to seg fault.  Ethereal for Windows crashes as well.

 <<bbbbb.pcap>> 
Please let me know what other information I can provide that might help.

Oh, by the way, whatever event this is happens often enough on our network that long-term captures encounter this quite a bit.  If it turns out it's someone doing something nefarious (and not just a glitch in the code), I'd like to know so I can track down the source.  Please say so if it looks suspicious to you.

Thanks!

Justin McNutt
Network Systems Analyst
DNPS, Mizzou Telecom
(573) 882-5183

In personal conversations with technical people, I call myself a hacker. But
when I'm talking to journalists I just say "programmer" or something like that.
        -- Linus Torvalds

Attachment: bbbbb.pcap
Description: bbbbb.pcap