Displaying 1 result from an estimated 1 matches for "nbt_len".
Did you mean:
bv_len
1998 Apr 21
0
Patching tcpdump-smb to deal with hyperlong packet reports
...k to stop these reports is
in the function nbt_tcp_print in print-smb.c (with this extract from
the patch file tcpdump-3.2.1-smb-diffs)
+ case 0:
+ data = fdata(data,"NBT Session
Packet\nFlags=[rw]\nLength=[rd]\n",data+4);
+ if (memcmp(data,"\377SMB",4)==0) {
+ if (nbt_len>PTR_DIFF(maxbuf,data))
+ printf("WARNING: Short packet. Try increasing the snap length
(%d)\n",
+ PTR_DIFF(maxbuf,data));
+ print_smb(data,maxbuf>data+nbt_len?data+nbt_len:maxbuf);
+ } else {
+ printf("Session packet:(raw data?)\n");
+ }...