Andrew Tridgell tridge at samba.anu.edu.au
Thu Oct 8 22:18:31 GMT 1998

> tcpdump traces are difficult to follow: they don't decode dce/rpc packets.

binary tcpdump traces (from the -w option) are very useful. They can be
converted to netmon format using capconvert. See the tcpdump-smb
directory on the samba ftp site.

More information about the samba-ntdom mailing list