Ethereal-users: Re: [Ethereal-users] SMB - lock request parsing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 29 Oct 2003 16:08:59 -0800

On Oct 28, 2003, at 3:36 PM, Dobes Vandermeer wrote:


The format of a 64-bit lock record in SMB is:

16-bit pid
16-bit reserved
32-bit offset high
32-bit offset low
32-bit length high
32-bit length low

Ethereal is parsing the offsets as one big 64-bit little endian number;


What version of Ethereal are you looking at?

It doesn't appear to be doing so in 0.9.15:

			val=tvb_get_letohl(tvb, offset);
			buf[3]=(val>>24)&0xff;
			buf[2]=(val>>16)&0xff;
			buf[1]=(val>> 8)&0xff;
			buf[0]=(val    )&0xff;
			val=tvb_get_letohl(tvb, offset+4);
			buf[7]=(val>>24)&0xff;
			buf[6]=(val>>16)&0xff;
			buf[5]=(val>> 8)&0xff;
			buf[4]=(val    )&0xff;

Are you looking at the 0.9.14 code?