Smb2 protocol encrypt.

[chwd]

Hi all:
 
       I now write a ndis filter driver to parse smb2 protocol, both c/s are windows7 os.
but I find in receive routine , I can parse smb2 protocol. But in send routine , the network
payload seems to be encrypted. I think is there any ntlmssp authication. Can I get the sessionkey
to decrypt the network message. In Wrieshark the network packet is in corrent format. Can anyone
help me. Thanks.
 
Sincerely
 
                                                                                     chenwd  2016-05-24
 







At 2016-05-23 20:00:02, samba-technical-request at lists.samba.org wrote:
>Send samba-technical mailing list submissions to
>	samba-technical at lists.samba.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>	https://lists.samba.org/mailman/listinfo/samba-technical
>or, via email, send a message with subject or body 'help' to
>	samba-technical-request at lists.samba.org
>
>You can reach the person managing the list at
>	samba-technical-owner at lists.samba.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of samba-technical digest..."