[Snort-users] SMB RFC?

Martin Roesch roesch at ...421...
Mon Nov 20 01:26:03 EST 2000


Another good place to look: the Ethereal protocol decoders.  Check out
Ethereal at http://www.ethereal.com.

The Samba code would also be a good place to look. :)

    -Marty

Fyodor wrote:
> 
> On Sun, Nov 19, 2000 at 03:09:35PM -0500, jess at ...521... wrote:
> >       Hi, folks.
> >
> >       I've been trying to find a document describing the pkt structure
> > of the SMB (Server Message Block) protocol. I haven't suceeded in finding
> > an RFC for it (or any other good document, by the way...).
> >
> 
> As far as I know no RFC on SMB protocol were ever released, Samba
> has been developed by reversing it. I''ve got an excellent book on
> SMB protocol called 'DCE/RPC over SMB, Samba and Windows Domain Internals'
> by Luke Kenneth and Casson Leighton,  that's might be what you want. :)
> Anyway A few pointers from the book:
> 
> ftp://ftp.microsoft.com/devlopr/drg/CIFS/
> http://www.opengroup.org/dce/
> http://www.microsoft.com/com/dcom.asp
> 
> etc.. :)
> 
> --
> http://www.notlsd.net
> PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list