I have some code that handles the Net logon protocol. I created it from NA
sniffer traces. You are welcome to look at it, I'm trying to validate the
code by comparing the ethereal output to the sniffer trace. I also have
some SMB Browser stuff but your email implies that it has already been done.
I'm surprised at how fast the dissectors are being added to ethereal.
Jeff Foster.
jfoste@xxxxxxxxxxxx
> -----Original Message-----
> From: Richard Sharpe [SMTP:sharpe@xxxxxxxxxx]
> Sent: Thursday, November 18, 1999 11:12 AM
> To: Hanchman@xxxxxxx
> Cc: ethereal-dev@xxxxxxxx
> Subject: Re: [ethereal-dev] Packet-smb patch
>
> Hi,
>
> At 04:53 PM 11/18/99 -0500, you wrote:
> > I patched Packet-smb.c to handle UNICODED data and UNICODE offset
> >padding, fixed a problem with the password length display in the hex
> >box, added ASCII text display fields for the PARAMETERS and DATA fields
> >and added a label to the SERVICE field identifying the type of service.
>
> Thanks for this ... I will look it over and fold the changes in. The code
> is undergoing lots of change at the moment. What version did you patch
> against?
> Some of them look very useful, and I have already seen that I have a
> problem with passwords from Win2000.
>
> [Gilbert, Guy, please don't apply these patches]
>
> > Can anyone provice me with a breakdown or documentation of the
> >PARAMETERS fields.
>
> Yes, Microsoft! Ha Ha :-)
>
> Seriously, I think that we already have an ascii display of them.
>
> If you look at the recent BROWSER stuff, you will see what some of them
> mean. Another source of information is Luke Leighton's book on MSRPC.
>
> My next target is the \MAILSLOT\NET stuff for all the NTLOGON and NETLOGON
> stuff, and then MSRPCs.
>
> Regards
> -------
> Richard Sharpe, sharpe@xxxxxxxxxx, Master Linux Administrator :-),
> Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
> Co-author, SAMS Teach Yourself Samba in 24 Hours
> Author: First Australian 5-day, intensive, hands-on Linux SysAdmin course