From 286c054472e6253595a4e62aa2fd3a13cc09c463 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Tue, 13 Mar 2018 13:44:35 +0100
Subject: [PATCH] smb: improve nbss/smb record detection

---
 rust/src/smb/nbss_records.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rust/src/smb/nbss_records.rs b/rust/src/smb/nbss_records.rs
index fd062992ea..cd7d96f19c 100644
--- a/rust/src/smb/nbss_records.rs
+++ b/rust/src/smb/nbss_records.rs
@@ -43,7 +43,8 @@ impl<'a> NbssRecord<'a> {
             _ => false,
         };
         let smb = if self.data.len() >= 4 &&
-            self.data[1] == 'S' as u8 && self.data[2] == 'M' as u8 && self.data[3] == 'B' as u8
+            self.data[1] == 'S' as u8 && self.data[2] == 'M' as u8 && self.data[3] == 'B' as u8 &&
+            (self.data[0] == b'\xFE' || self.data[0] == b'\xFF' || self.data[0] == b'\xFD')
         {
             true
         } else {