No subject


Thu Nov 23 16:36:19 EST 2017


I've been wrong before, tho.

Mike Diehl. 

-----Original Message-----
From: Fyodor
To: jess at ...521...
Cc: snort-users at lists.sourceforge.net
Sent: 11/19/00 2:25 PM
Subject: Re: [Snort-users] SMB RFC?

On Sun, Nov 19, 2000 at 03:09:35PM -0500, jess at ...521... wrote:
> 	Hi, folks.
> 
> 	I've been trying to find a document describing the pkt structure
> of the SMB (Server Message Block) protocol. I haven't suceeded in
finding
> an RFC for it (or any other good document, by the way...). 
> 

As far as I know no RFC on SMB protocol were ever released, Samba
has been developed by reversing it. I''ve got an excellent book on
SMB protocol called 'DCE/RPC over SMB, Samba and Windows Domain
Internals'
by Luke Kenneth and Casson Leighton,  that's might be what you want. :)
Anyway A few pointers from the book: 

ftp://ftp.microsoft.com/devlopr/drg/CIFS/
http://www.opengroup.org/dce/
http://www.microsoft.com/com/dcom.asp

etc.. :)


-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
http://lists.sourceforge.net/mailman/listinfo/snort-users




More information about the Snort-users mailing list