snoop lies about SMB errors
snoop has some limited decoding of SMB packets. One relatively
interesting thing it can decode is the error code in responses.
Unfortunately, snoop decodes most error code incorrectly,
showing zero when there really was an error.
The main isssue is that snoop does not test the SMB "flags2"
word that indicates whether old-style (DOS) errors are used
or the new-stile (NT) status codes.
There are also several things that are poorly formatted.
These problems were also described in CR 4625421
A fix was published, but never integrated: