Smb2 protocol encrypt.

chwd wayitech at
Tue May 24 01:28:22 UTC 2016

Hi all:
       I now write a ndis filter driver to parse smb2 protocol, both c/s are windows7 os.
but I find in receive routine , I can parse smb2 protocol. But in send routine , the network
payload seems to be encrypted. I think is there any ntlmssp authication. Can I get the sessionkey
to decrypt the network message. In Wrieshark the network packet is in corrent format. Can anyone
help me. Thanks.
                                                                                     chenwd  2016-05-24

At 2016-05-23 20:00:02, samba-technical-request at wrote:
>Send samba-technical mailing list submissions to
>	samba-technical at
>To subscribe or unsubscribe via the World Wide Web, visit
>or, via email, send a message with subject or body 'help' to
>	samba-technical-request at
>You can reach the person managing the list at
>	samba-technical-owner at
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of samba-technical digest..."

More information about the samba-technical mailing list