Wireshark-dev: Re: [Wireshark-dev] SMB2 Dissector requires update for FSCTL_QUERY_NETWORK_INTER

From: Abiodun Aremu <abiodunaremung@xxxxxxxxx>
Date: Tue, 5 Jul 2022 19:52:55 +0100
Alright Richard.

The capture is already attached to my original email.

Regards 

On Tue, Jul 5, 2022, 7:35 PM Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:
On Tue, Jul 5, 2022 at 11:27 AM Abiodun Aremu <abiodunaremung@xxxxxxxxx> wrote:
>
> Hello Wireshark Devs,
>
> Wireshark capture for FSCTL_QUERY_NETWORK_INTERFACE_INFO response includes field RSS Queue Count (a). This field is meant to be called Reserved.
> My investigation shows that NETWORK_INTERFACE_INFO Response was added to the MS-SMB2 technical document in 12/16/2011 38.0 release with the field RSS Queue Count. This field was updated to Reserved in the 7/12/2012 40.0 release. However, the Wireshark dissector has not been updated to have the new field name.
>
> This is an issue I would like to raise on the Wireshark repo for fixing.
>
> Looking forward to hearing from you.

Hi, please file a bug about this and assign it to me. If you have a
capture that would be useful.

--
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe