Hi Ronnie,
can you apply this patch please,
it adds dissecting of Oplock Breaks.
thanks!
=== epan/dissectors/packet-smb2.c
==================================================================
--- epan/dissectors/packet-smb2.c (revision 2114)
+++ epan/dissectors/packet-smb2.c (local)
@@ -3393,6 +3393,26 @@
return offset;
}
+static int
+dissect_smb2_break_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, smb2_info_t *si)
+{
+ /* buffer code */
+ offset = dissect_smb2_buffercode(tree, tvb, offset, NULL);
+
+ /* some unknown bytes */
+ proto_tree_add_item(tree, hf_smb2_unknown, tvb, offset, 4, TRUE);
+ offset += 4;
+
+ /* fid */
+ offset = dissect_smb2_fid(tvb, pinfo, tree, offset, si, FID_MODE_USE);
+
+ /* some unknown bytes */
+ proto_tree_add_item(tree, hf_smb2_unknown, tvb, offset, 24, TRUE);
+ offset += 24;
+
+ return offset;
+}
+
/* names here are just until we find better names for these functions */
const value_string smb2_cmd_vals[] = {
{ 0x00, "NegotiateProtocol" },
@@ -3714,7 +3734,9 @@
/* 0x11 SetInfo*/
{dissect_smb2_setinfo_request,
dissect_smb2_setinfo_response},
- /* 0x12 */ {NULL, NULL},
+ /* 0x12 Break */
+ {NULL,
+ dissect_smb2_break_response},
/* 0x13 */ {NULL, NULL},
/* 0x14 */ {NULL, NULL},
/* 0x15 */ {NULL, NULL},
Attachment:
smb2-break-02.cap
Description: Binary data
Attachment:
signature.asc
Description: OpenPGP digital signature
