> Yes, except the dcerpc reassembly code as reassembled the packets so the > error really isn't relevant anymore.
That's why I put "error" in quotes - it's not a fatal error, it's just an indication to the DCE RPC transport code that it needs to do more work. > It also kind of bugs me that the > smb dissector can append text to the info field after the subdissector > has handled the packet. Yes, that's definitely wrong.
