Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4451] New: NEW FUNCTIONALITY: EXPORT OBJECT SMB (capture a

Date: Tue, 2 Feb 2010 05:06:41 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4451

           Summary: NEW FUNCTIONALITY: EXPORT OBJECT SMB (capture and
                    extract smb files)
           Product: Wireshark
           Version: SVN
          Platform: x86
        OS/Version: SuSE
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jose.pico@xxxxxxxxxxxxxx


Created an attachment (id=4247)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4247)
the patch itself

Build Information:
wireshark 1.3.3 (SVN Rev 31766 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.0, with GLib 2.14.1, with libpcap 0.9.7, with libz
1.2.3, without POSIX capabilities, with libpcre 7.2, without SMI, without
c-ares, without ADNS, without Lua, without Python, without GnuTLS, without
Gcrypt, without Kerberos, without GeoIP, without PortAudio, without AirPcap,
with new_packet_list.

Running on Linux 2.6.22.17-0.1-default, with libpcap version 0.9.7.

Built using gcc 4.2.1 (SUSE Linux).

--
DESCRIPTION: This functionality keeps track of all SMB objects contained in a
ca
pture, and is able to export to a file a full or partial captured file that has
been transfered through the SMB protocol. In a partial capture, the holes
produc
ed by the non-captured information are filled out with zeros.
It includes the needed modifications of the SMB dissector in the way it keeps
track of the opened SMB files and also to feed the eo_smb tap listener.

AUTHORS: David Perez & Jose Pico from Taddong S.L.

NOTES:
- I haven't removed the makefiles modifications from the patch, because these
modification have been made manually for the following files:
<wireshark_home>/gtk/CMakeLists.txt
<wireshark_home>/gtk/Makefile
<wireshark_home>/gtk/Makefile.common
<wireshark_home>/gtk/in
- All the modification made for existing files have been delimited between a
"/* TADDONG: */" and a "/* TADDONG. */" comments


Please find attached the following files:
- export_object_smb.diff : the patch itself
- : a sample capture of a file transfer
- : some screenshots of the funcionality on the sample transfer

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.