Commit Graph
8 Commits
Author SHA1 Message Date
Olaf Barthel 0cce69b02b Only build this when needed 2016-04-09 11:01:33 +02:00
Olaf Barthel 3c836b5998 NT status codes are now decoded properly 2016-04-02 12:33:01 +02:00
Olaf Barthel 7671abcb86 NetBIOS session and SMB packets are decoded separately
SMB packet decoder now ignores empty parameter/data and will not try to decode and display these.

SMB_COM_SEARCH decoding had the sources mixed up, decoding client->server traffic as server->client traffic and the other way round.

Decoding of the status field now works properly again in the non-"status32" case.
2016-04-01 16:38:44 +02:00
Olaf Barthel 12adae4398 Small fixes for embarrassing bugs
The 'struct tm tm' declaration in convert_smb_date_time_to_tm() must be static, not auto.

Seek mode decoding was off by one.
2016-03-30 13:40:07 +02:00
Olaf Barthel 450006bb4d Added more debugging information
Signed quantities are now used as such, e.g. the server time zone.

The SMB_COM_READ/WRITE/READ_RAW/WRITE_RAW data is now printed in the scope it was intended for, e.g. the SMB_COM_WRITE_RAW data output begins at the indicated offset rather than at the padding bytes which may precede it.

Added server/client capability flags covered by "Implementing CIFS", but not by the Microsoft reference documentation.

The NetBIOS session header contents are now printed along with the SMB header information.

Added GPLv2 header text.
2016-03-29 13:58:42 +02:00
Olaf Barthel 7a85bd1a23 Date/time/size conversion fixes
The SMB date/time, filetime and utime information is now converted into display format instead of just showing up as hexadecimal format numbers.

The end-of-file and allocation size values are now printed in decimal format in addition to hexadecimal format.
2016-03-28 12:12:09 +02:00
Olaf Barthel ef4f02546e Error codes and decoded message output reworked
Time is now printed uniformly in hexadecimal format.
dword data is now printed as unsigned integer values.
Decoded error messages should be a bit more readable.
2016-03-27 18:09:59 +02:00
Olaf Barthel d59fc688bb Refactored SMB message decoder
The decoder now handles all SMB commands which the smbfs file system uses, including the two subcommands of the SMB_COM_TRANSACTION2 command which are used (TRANS2_FIND_FIRST2 and TRANS2_FIND_NEXT2).

This is still very ugly and very complex code, but hopefully the next version will only be ugly...
2016-03-27 12:33:03 +02:00