tag:blogger.com,1999:blog-2773536350893785230.post5093010586746475725..comments2010-08-02T11:20:15.506+02:00Monica Salashttp://www.blogger.com/profile/14278327913222052048noreply@blogger.comBlogger8125tag:blogger.com,1999:blog-2773536350893785230.post-58498237358768112032010-08-02T11:20:15.506+02:002010-08-02T11:20:15.506+02:00Our functionality is included in the development version of Wireshark from revision 33229 on. Compilation has been tested by wireshark team, including windows compilation. <br />It is not included in an stable version of Wireshark yet, so no precompiled windows version of wireshark that includes the export-object-smb functionality is available to download from wireshark home page yet. <br /><br />At the moment, you can have this functionality for windows environments, by building wireshark in windows from source code.Jose Picohttp://www.blogger.com/profile/07792388506501969140noreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-48342225156441850792010-08-02T11:09:52.291+02:002010-08-02T11:09:52.291+02:00Andy,<br /><br />thank you very much for your comment.<br /><br />Most past and current SMB implementations don&#39;t support traffic encryption by themselves. As an alternative (if that is your case), you could use another layer to protect privacy of SMB messages:<br />- You can use a network layer protection, such IPSec<br />- You can also use SSL or TLS at transport layer to transport SMB protocol messages<br />- Or you could use an application that encrypts the traffic on a file before sending it over the network<br /><br />Depending on the environment, you should evaluate the best available option. One obvious thing to take care of is that the option you choose must be available for implementation at the client and the server side.<br /><br />Regards,<br /><br />JoseJose Picohttp://www.blogger.com/profile/07792388506501969140noreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-33088133031074036732010-07-09T05:06:02.027+02:002010-07-09T05:06:02.027+02:00The plug-in is very cool, I compiled wireshark with eo_smb_cb in BT4, and was able to capture the transfer files. it is really amazing. you guys are so great!<br />Just one question: how can we fix this vulnerability? thanks,<br /><br />AndyAndyhttp://andyinmatrix.blogspot.comnoreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-53469390585547450742010-07-07T18:46:21.010+02:002010-07-07T18:46:21.010+02:00Is it included in the windows version as well?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-20353842196213650102010-06-17T00:28:09.585+02:002010-06-17T00:28:09.585+02:00Additional note: the compilation for Windows have also been verified and fixed by Wireshark team.Jose Picohttp://www.blogger.com/profile/07792388506501969140noreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-82263125608464122052010-06-16T23:04:09.247+02:002010-06-16T23:04:09.247+02:00The SMB export object functionality has been included in Wireshark development trunk, so there is no need to apply the patch anymore. <br />That means that if you download and compile in linux the latest Wireshark svn trunk you will have the SMB plugin included in it.Jose Picohttp://www.blogger.com/profile/07792388506501969140noreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-77077650023380546082010-06-14T20:09:22.019+02:002010-06-14T20:09:22.019+02:00Hi Ceres,<br /><br />the last version of the patch has been compiled against version 1.5.0 (SVN Rev 33208 from /trunk) of Wireshark.<br /><br />The process of including this functionality in an stable version of Wireshark is in progress. You may follow this process through wireshark bug database bug id 4451: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4451<br /><br />There you will find the history of updates of this patch and from now on, we will also be including the revision number that we use to compile the patch.<br /><br />Regards,<br /><br />JoseJose Picohttp://www.blogger.com/profile/07792388506501969140noreply@blogger.comtag:blogger.com,1999:blog-2773536350893785230.post-26844303751790620792010-06-11T16:09:31.724+02:002010-06-11T16:09:31.724+02:00I cannot compile wireshark with eo_smb_cb<br /><br />My wireshark is wireshark-1.4.0rc1<br /><br />Linux is Mandriva 2008.1 with custom openssl and zlib<br /><br />I have en error<br /><br />gtk/libui.a(menus.o):(.data+0x14b8): undefined reference to `eo_smb_cb&#39;<br />collect2: ld returned 1 exit status<br />gmake[2]: *** [wireshark] Error 1<br />gmake[2]: *** Waiting for unfinished jobs....<br /><br />Many thanks<br /><br />ceresAnonymousnoreply@blogger.com