Re: [Ethereal-dev] Support SMBreadX in SAMR calls

["Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>]

From: "Devin Heitmueller"
Sent: Saturday, November 09, 2002 6:33 AM
Subject: Re: [Ethereal-dev] Support SMBreadX in SAMR calls


> The trace is attached.
>
> The problem starts at packet 103.  With the "Reassemble DCERPC over SMB"
> option disabled, the frame is shown as a LookupRIDs request (although it
> reports as a short frame).  If "Reassemble DCERPC over SMB" is enabled,
> it is only shown as a DCE Request.
>
> Any feedback you can provide would be greatly appreciated.

The PDU is fragmented at the NBSS layer.
When I enable :
   NBSS/Desegment all NBSS ...
   TCP/Allow subdissector ...

It reassembles fine.
Packets 103,104,106,107,108,110 and 110 makes up
one 8.8kb NBSS PDU that carries one SMB PDU.

The NBSS PDU is dissected in packet 111 and not 103 since 111 is the packet
that completes the reassembly of the PDU.
Reassembly of PDUs over TCP will always only dissect/display the PDU in the
packet holding the last segment of the PDU, the segment where the PDU is
completed.