determining Samba version

Richard Sharpe realrichardsharpe at
Thu Apr 4 12:00:59 MDT 2013

On Thu, Apr 4, 2013 at 10:33 AM, Chris Smith <smb_77 at> wrote:
> Is there a way to determine (or at least get close) what version of
> Samba an embedded client may be running (or based on) via packet
> sniffing (tcpdump, wireshark)?

If they have not changed the version string to obscure the version,
then the following will work:

cc1# smbclient //some-node/some-share -U[some-dom/]some-user%some-password
Failed to load upcase.dat, will use lame ASCII-only case sensitivity rules
Failed to load lowcase.dat, will use lame ASCII-only case sensitivity rules
Domain=[some-dom] OS=[Unix] Server=[Samba 3.6.12]

You can also look at the Session Setup &X Responses for SMB1 only and
will see something like:

Samba 3.6.6

in something like the Native Lanmanager Version field.

However, if the version of Samba supports SMB2, you will have to force
the connection to SMB1.

Richard Sharpe

More information about the samba-technical mailing list