Re: [Ethereal-dev] Reassembly of security blob in SMB dissector

[Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>]

On Mon, 3 Feb 2003, Jean-Baptiste Marchand wrote:

> Hello,
> 
> the attached capture shows the establishment of an SMB session,
> authenticated with a Kerberos 5 token (extended security mode). 
> 
> Because of the token size, the SessionSetupAndX request is carried over
> two NBSS messages. Thus, it is not possible to decode the content of the
> security blob.

Works for me. Just specify TCP re-assembly and SMB re-assembly.
 
> Looking at the SMB dissector options, it seems that fragmentation
> reassembly is currently possible for DCE/RPC PDU (carried over SMB
> named pipes) and SMB Transact payload command. Does security blob
> reassembly would fit in the same category?
> 
> I can work on this if nobody else plans to implement it.
> 
> Thanks for your help,
> 
> Jean-Baptiste Marchand
> 

-- 
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com

Attachment: smb_ext_sec_krb5.cap.gz
Description: application/gunzip