## Summary Using the [LAN Drive app](https://play.google.com/store/apps/details?id=fr.webrox.landrive) on my Android phone, I've tried to capture the traffic produced when refreshing a directory listing in Windows Explorer. For some reason, the traffic from my phone back to my computer only shows up as NBSS Continuation Messages. ## Sample capture file [LAN_Drive_SMB__2.pcapng](/uploads/ead2202902b2666a4a08287c8fda54c0/LAN_Drive_SMB__2.pcapng) ## Steps to reproduce 1. [Enable SMB1 on Windows again](https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server) if it's currently disabled. 2. Run the LAN Drive app on a rooted phone (a rooted phone is needed so the app can open a port <= 1023, because Windows only understands the default SMB port 445). Disable SMB2 in LAN Drive's settings in order to force usage of SMB1. 2. Access a file share provided by LAN Drive in Windows Explorer and look at some folder with a few files and other sub-folders. 3. Start the Wireshark Trace. 4. Hit refresh in Windows Explorer. 5. Stop the trace once the SMB traffic has died down again. ## What is the current bug behavior? Traffic from my computer (172.19.169.20) to my phone (172.19.169.34) is correctly detected as SMB traffic, however in the other direction, all responses from LAN Drive on my phone only show up as NBSS Continuation messages. Windows Explorer on the other hand apparently has no difficulties browsing the file share. ## What is the expected correct behavior? Traffic from my phone should be correctly detected as SMB and dissected accordingly. Note that when capturing traffic for a different SMB server app on my phone, this does actually work as expected, i.e. Wireshark displays and dissects the SMB traffic in both directions. ## Build information ``` Version 4.2.2 (v4.2.2-0-g404592842786). Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.37, build 32822), with GLib 2.78.0, with Qt 6.5.3, with libpcap, with zlib 1.3.0, with PCRE2, with Lua 5.2.4 (with UfW patches), with GnuTLS 3.8.2 and PKCS #11 support, with Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with nghttp2 1.57.0, with nghttp3 1.0.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.11.5, with libsmi 0.5.0, with QtMultimedia, with automatic updates using WinSparkle 0.8.0, with AirPcap, with Minizip, with binary plugins. Running on 64-bit Windows 10 (22H2), build 19045, with Intel(R) Core(TM) i3-10105F CPU @ 3.70GHz (with SSE4.2), with 16233 MB of physical memory, with GLib 2.78.0, with Qt 6.5.3, with Npcap version 1.78, based on libpcap version 1.10.4, with PCRE2 10.42 2022-12-11, with c-ares 1.19.0, with GnuTLS 3.8.2, with Gcrypt 1.10.2-unknown, with nghttp2 1.57.0, with nghttp3 1.0.0, with brotli 1.0.9, with LZ4 1.9.3, with Zstandard 1.5.2, without AirPcap, with light display mode, without HiDPI, with QPA plugin "windows", with LC_TYPE=German_Germany.utf8, binary plugins supported. ```