Ethereal-users: Re: [Ethereal-users] Trying to find Windows logon in sniffer.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 23 Jun 2001 12:06:55 -0700
On Sat, Jun 23, 2001 at 05:42:18PM +0200, emu@xxxxxxxxxxxxx wrote:
> I'm monitoring a server at the moment. I am having som logon attemps.
> I have put up a sniffer to find out where they are trying to logon from,
> but what protocol shall I look for in ethereal?

That depends on what you mean by "logon attempt".

If you mean a logon attempt such as Telnet, you'd look for protocols
such as Telnet and RSH.

If you mean an attempt to log onto an SMB file/print server, you'd look
for the SMB protocol.