Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-commits: [Wireshark-commits] rev 19112: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-gssapi.c

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: sahlberg@xxxxxxxxxxxxx
Date: Sat, 02 Sep 2006 00:43:20 GMT

http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=19112

User: sahlberg
Date: 2006/09/02 12:43 AM

Log:
 resolve the oid to a variable before we check it in the conditional so that
 we can add code to check that it looks sane (for better heuristics) when
 we start adding GSS-KRB reassembly.
 
 we need this for some transports such as SMB/SessionSetup that will transport GSS-KRB blobs inside multiple PDUs (multiple different SMB/SessionSetups) so we can reassemble the blobs before decoding them.
 
 
 this probably only happens for SMB/SessionSetup   but the design of that command is so "nice" that you can not tell whether the blob is fragmented or not or how big it is supposed to be by looking at the SMB layer itself, one needs to know the BER length field for the BER APPLICATION tag. :-(
 
 to make things worse, the only way match multiple such fragments together one will need not just the fragments from the SessionSetup requests  but also the UID that is returned in the response to the initial request.
 perverse design.
 
 
 lets assume that there will almost never be multiple sessionsetups on the same tcp session in real traces    so to make things easier just ignore the UID for now when reassembling. (well reassembly is not added yet but will be)

Directory: /trunk/epan/dissectors/
  Changes    Path               Action
  +2 -1      packet-gssapi.c    Modified


  • Prev by Date: [Wireshark-commits] rev 19111: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-gssapi.c
  • Next by Date: [Wireshark-commits] rev 19113: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-gssapi.c
  • Previous by thread: [Wireshark-commits] rev 19111: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-gssapi.c
  • Next by thread: [Wireshark-commits] rev 19113: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-gssapi.c
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation