Are we aware of NEGOEX?

Richard Sharpe realrichardsharpe at
Sun Jul 1 22:31:46 MDT 2012

On Thu, Jun 28, 2012 at 6:44 AM, Richard Sharpe
<realrichardsharpe at> wrote:
> Hi folks,
> In an SMB2 packet capture at Sharkfest I saw a new OID in the SPNEGO stuff.
> It turned out to be this:
> The Windows client was only offering NEGOEX and NTLMSSP.
> More info here: and
> here
> If I get the time soon I might implement a dissector for NEGOEX ...
> which will help with the implementation.

There is now a NEGOEX dissector for Wireshark. It should turn up in
released versions in a while.

Richard Sharpe

More information about the samba-technical mailing list