Ethereal-users: [Ethereal-users] SMB - lock request parsing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Dobes Vandermeer <dobes@xxxxxxxxxxxxx>
Date: Tue, 28 Oct 2003 15:36:38 -0800

The format of a 64-bit lock record in SMB is:

16-bit pid
16-bit reserved
32-bit offset high
32-bit offset low
32-bit length high
32-bit length low

Ethereal is parsing the offsets as one big 64-bit little endian number;
if this was a big-endian protocol that would work, but a little-endian
high-low has the first and second half of the number reversed.  Perhaps
this could/should be fixed?