On Thu, 10 Apr 2014 20:41:02 +0300 Nadezhda Ivanova <nivanova@xxxxxxxxx> wrote: > Hi Jeff, > Thank you for the detailed explanation! The stricter checking makes > sense to me now. > Can you tell me what is wrong with the Protocol Negotiation response > returned to the windows client (the win_cifs.cap)? I thought it was > correct, as it has indeed 18 bytes after bcc, and you can see that the > primary domain is WORKGROUP, obviously I am missing something... > > Regards, > Nadya > Yeah, the lengths in the windows capture look fine and it's NULL terminated properly. I'm not sure why wireshark is complaining, but I'd suspect that it's because the server has set the unicode bit in the capability bits, but isn't sending that string in unicode. If the server sent a response that looked like that to the cifs client, I suspect that it would accept it and move on. -- Jeff Layton <jlayton@xxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe linux-cifs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html