Hi, I find it annoying that if ethereal is dissecting an andX command, only the last one in the chain appears in the COL_INFO field.
I would like to list them out as: SessionSetup ...; Tree Connect ... A quick way I can see to do it is to introduce an extra parameter to dissect_smb_command called first, set to true when dissect_smb_command is called by dissect_smb, and False when called on an andX. Then we can choose whether to col_add_fstr or col_append_fstr. Any objections? Regards ----- Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]