HOWTO: get familar with the Samba source code

Richard Sharpe sharpe at
Wed Sep 27 16:47:59 GMT 2000

At 11:51 PM 9/27/00 -0500, Gerald Carter wrote:
>  o get a copy of MS network monitor (legally).  Even the 
>        one with the NT server is ok.  We can convert 
>	tcpdump format to CAP format).  This is the best
>        network sniffer for decoding SMB/MS-RPC.
>        Ethereal ( has some code for
>        parsing SMB/NetBIOS and I think Andrew and Tim
>        are adding some MS-RPC support in it.

Hmmm, in what ways is NetMon better than Ethereal? I want to make Ethereal
the best available :-)

The version of NetMon I have does not do MSRPC ... Which version does?

Richard Sharpe, sharpe at
Samba (Team member,, Ethereal (Team member,
Contributing author, SAMS Teach Yourself Samba in 24 Hours
Author, Special Edition, Using Samba

More information about the samba-ntdom mailing list