[jcifs] Re: eventlog.patch issues

Marasim marasim at gmail.com
Wed Aug 20 20:02:39 GMT 2008

> If you can see some event log records and not others, my guess would
> be that it's either some kind of "access mask" or permissions issue.
> The best way to debug this sort of thing is to get a packet capture of
> the Event Log Viewer looking at the target records and then compare
> that to a capture of JCIFS doing the same thing using WireShark. Then
> you'll see definitively if the target information is even in the
> server response.
> Mike

Thanks a lot for your quick response. How do we do a packet capture of the event
log viewer?

Also, when you say using Wireshark to do capture of JCIFS you mean connecting to
the server using JCIFS and running Wireshark to get the tcpdump, correct?


More information about the jcifs mailing list