Wireshark-dev: Re: [Wireshark-dev] SMB2 Dissector requires update for FSCTL_QUERY_NETWORK_INTER

From: Abiodun Aremu <abiodunaremung@xxxxxxxxx>
Date: Wed, 6 Jul 2022 09:02:30 +0100
I have created an issue for this bug  SMB2 Dissector requires update for FSCTL_QUERY_NETWORK_INTERFACE_INFO field "RSS Queue Count" (#18177) · Issues · Wireshark Foundation / wireshark · GitLab
Looking forward to progress updates Richard.

Regards,
Abiodun Aremu

On Tue, Jul 5, 2022 at 7:52 PM Abiodun Aremu <abiodunaremung@xxxxxxxxx> wrote:
Alright Richard.

The capture is already attached to my original email.

Regards 

On Tue, Jul 5, 2022, 7:35 PM Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:
On Tue, Jul 5, 2022 at 11:27 AM Abiodun Aremu <abiodunaremung@xxxxxxxxx> wrote:
>
> Hello Wireshark Devs,
>
> Wireshark capture for FSCTL_QUERY_NETWORK_INTERFACE_INFO response includes field RSS Queue Count (a). This field is meant to be called Reserved.
> My investigation shows that NETWORK_INTERFACE_INFO Response was added to the MS-SMB2 technical document in 12/16/2011 38.0 release with the field RSS Queue Count. This field was updated to Reserved in the 7/12/2012 40.0 release. However, the Wireshark dissector has not been updated to have the new field name.
>
> This is an issue I would like to raise on the Wireshark repo for fixing.
>
> Looking forward to hearing from you.

Hi, please file a bug about this and assign it to me. If you have a
capture that would be useful.

--
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe