Hi Mahendran,

I can reproduce your issue when I disable "Allow subdissector to reassemble TCP 
streams". When I have that setting enabled, packet 47,51 and 55 show up fine.

Can you check that setting in the TCP protocol preferences and enable it if it 
was disabled (as I would expect, based on your findings).

Cheers,
     Sake
  ----- Original Message ----- 
  From: Mahendran 
  To: [email protected] 
  Sent: Tuesday, December 23, 2008 7:51 PM
  Subject: [Wireshark-dev] Parsing SMB Packet


  Hi,

  I am using Wire Shark 1.0.5. 

  I am trying to capture the SMB packets using Wire Shark. It parses the SMB 
Request correctly but unable to parse the SBM Response that is sent from our 
device. The content are shown under "Continuation Data". If it parses properly 
that will help me in analyzing the packets. Could you please help me?

  I have attached the capture for your analysis. Look at the packet no 47, 51 
and 55.

  Best Regards,
  Mahendran 


------------------------------------------------------------------------------


  ___________________________________________________________________________
  Sent via:    Wireshark-dev mailing list <[email protected]>
  Archives:    http://www.wireshark.org/lists/wireshark-dev
  Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
               mailto:[email protected]?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe

Reply via email to