[cifs-protocol] [MS-SAMR] SamrSetInformationUser2 over an authenticated DCERPC connection [119040819792364]

Andreas Schneider asn at samba.org
Thu Apr 11 20:01:51 UTC 2019

On Thursday, 11 April 2019 21:31:13 CEST Obaid Farooqi wrote:
> Hi Andreas:

Hello Obaid,

> The two network traces you sent, both use RPC over SMB i.e. named pipe. I
> was thinking that systemLibraryDTC one will be using TCP instead of named
> pipe.

it is the same with TCP/IP, SystemLibraryDTC is used as the session key or a 
sealed connectoin. Should I send you traces for that? I can do that tomorrow 
morning (CEST time) ...

Best regards,


More information about the cifs-protocol mailing list