Yes, I saw this on the blog last night, after I had made my post.
This procedure is not working for me. I have \"Enable User Objects\" checked in the Application Settings\General menu, and in the Access Point Manager I added the new TCP access point (port 445 to NB-SSN) as you described. In the Customize Plugins window the SMB \"Extract User Objects\" setting is True. I opened a new capture window after performing/verifying the configuration.
My experiment consists of selecting a file on a remote network share, copying it, and pasting it to a local folder. I see lots of SMB packets, between port 445 on the server and port 4979 on my machine, and lots of them SMB data blocks. Several seconds after the file appears to have transferred successfully, I stop the capture. But the capture window lists no User Objects, PDUs, or Sessions.
Please let me know if there is something additional I need to do to enable a valid User Objects capture from SMB. Thanks-
S. O'Hare
AVI