Displaying 1 result from an estimated 1 matches for "nbt_tcp_print".
1998 Apr 21
0
Patching tcpdump-smb to deal with hyperlong packet reports
...gells patches are applied to the latest tcpdump (3.4a6,
the one on ftp.ee.lbl.gov) the results are the same.
The one reply to my letter about this problem (from Mr Borsenkow in
Denmark) suggested that this was a known problem with tcpdump-smb.
A dumb hack to stop these reports is
in the function nbt_tcp_print in print-smb.c (with this extract from
the patch file tcpdump-3.2.1-smb-diffs)
+ case 0:
+ data = fdata(data,"NBT Session
Packet\nFlags=[rw]\nLength=[rd]\n",data+4);
+ if (memcmp(data,"\377SMB",4)==0) {
+ if (nbt_len>PTR_DIFF(maxbuf,data))
+ printf("WA...