It would appear that problems with SMB reassembly seem to haunt me. The attached trace was taken from Samba-tng, attempting to perform a password change over DCE/RPC on the SAMR pipe. It would appear that even though I have all the normal reassembly options enabled in Ethereal, that none of the SMB transaction responses are dissected (although the transact requests are).
Any advice that can be offered would be GREATLY appreciated. Thanks, -- Devin Heitmueller Senior Software Engineer Netilla Networks Inc
samba_tng_passchange_to_win2k_pass_defg_to_abcd.eth.gz
Description: GNU Zip compressed data
