[Samba] Bad SMB2 (sign_algo_id=1) signature for message

Michael Tokarev mjt at tls.msk.ru
Thu Mar 28 09:35:15 UTC 2024


01.03.2024 16:03, Michael Tokarev via samba:
> Hi!
> 
> I'm seeing quite some messages in log.smbd like this:
> 
> [2024/03/01 15:59:00.612141,  0, pid=1778617] libcli/smb/smb2_signing.c:639(smb2_signing_check_pdu)
>    Bad SMB2 (sign_algo_id=1) signature for message
> [2024/03/01 15:59:00.612146,  0, pid=1778616] lib/util/util.c:578(dump_data)
>    [0000] 7E 8D E3 FE A9 44 E8 E3   A6 76 22 6A B2 A4 27 CF   ~....D.. .v"j..'.
> [2024/03/01 15:59:00.612166,  0, pid=1778617] lib/util/util.c:578(dump_data)
>    [0000] 2D 99 5B 40 BA B0 66 BA   12 18 38 1D B0 98 DA F4   -.[@..f. ..8.....
> [2024/03/01 15:59:00.612194,  0, pid=1778616] lib/util/util.c:578(dump_data)
>    [0000] C7 20 D2 A3 8F 8E 5B A4   88 A2 46 A1 C6 FA 86 3F   . ....[. ..F....?
> [2024/03/01 15:59:00.612204,  0, pid=1778617] lib/util/util.c:578(dump_data)
>    [0000] 1A 87 8B ED C2 24 9E 4A   BD 15 15 F2 B0 DD 24 D8   .....$.J ......$.
> [2024/03/01 15:59:00.612268,  0, pid=1778616] libcli/smb/smb2_signing.c:639(smb2_signing_check_pdu)
>    Bad SMB2 (sign_algo_id=1) signature for message
> [2024/03/01 15:59:00.612270,  0, pid=1778617] libcli/smb/smb2_signing.c:639(smb2_signing_check_pdu)
>    Bad SMB2 (sign_algo_id=1) signature for message

Any guess for all this?

Seeing *massive* amount of these messages in logs.

Thanks,

/mjt



More information about the samba mailing list