[Samba] determining Samba version

[Richard Sharpe]

On Thu, Apr 4, 2013 at 10:33 AM, Chris Smith <smb_77 at chrissmith.org> wrote:
> Is there a way to determine (or at least get close) what version of
> Samba an embedded client may be running (or based on) via packet
> sniffing (tcpdump, wireshark)?

If they have not changed the version string to obscure the version,
then the following will work:

cc1# smbclient //some-node/some-share -U[some-dom/]some-user%some-password
Failed to load upcase.dat, will use lame ASCII-only case sensitivity rules
Failed to load lowcase.dat, will use lame ASCII-only case sensitivity rules
Domain=[some-dom] OS=[Unix] Server=[Samba 3.6.12]

You can also look at the Session Setup &X Responses for SMB1 only and
will see something like:

Samba 3.6.6

in something like the Native Lanmanager Version field.

However, if the version of Samba supports SMB2, you will have to force
the connection to SMB1.

--
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)