https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16563

            Bug ID: 16563
           Summary: SMB2_CREATE_APP_INSTANCE_VERSION structure in SMB2
                    Create Request is not parsed
           Product: Wireshark
           Version: 3.2.3
          Hardware: x86-64
                OS: Windows 10
            Status: UNCONFIRMED
          Severity: Minor
          Priority: Low
         Component: Dissection engine (libwireshark)
          Assignee: bugzilla-ad...@wireshark.org
          Reporter: jinh...@gmail.com
  Target Milestone: ---

Created attachment 17756
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17756&action=edit
SMB2_CREATE_APP_INSTANCE_VERSION is not parsed in Create request.

Build Information:
3.2.3 (v3.2.3-0-gf39b50865a13)

Compiled (64-bit) with Qt 5.12.6, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.

Running on 64-bit Windows 10 (1909), build 18363, with Intel(R) Core(TM)
i7-6600U CPU @ 2.60GHz (with SSE4.2), with 16205 MB of physical memory, with
locale English_United States.936, with light display mode, with mixed DPI, with
Npcap version 0.9989, based on libpcap version 1.9.1, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported (19
loaded).

Built using Microsoft Visual Studio 2019 (VC++ 14.24, build 28316).

--
SMB2_CREATE_APP_INSTANCE_VERSION structure in SMB2 Create Request context is
not parsed in Wireshark. 
The structure is in MS-SMB2 document:
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/dff54760-c485-41e0-978d-e4b2ccad2707.

In Wireshark, it is shows as 'invalid'.

Chain Element: <invalid> "b7d082b9-563b-4f07-a07b-524a8116a010"
    Chain Offset: 0x00000000
    Tag: b7d082b9-563b-4f07-a07b-524a8116a010
    Blob Offset: 0x00000020
    Blob Length: 24
    Data

See first frame in the network trace file.

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to