RE: SMB/NetBIOS Sniffing

["MARTIN Benoni" <benoni.martin () arcelor com>]

Hi !

Give a look at : 

- SMBspy : http://www.smbspy.com
- SMBsniff :  http://www.hsc.fr/ressources/outils/index.html.en

Never tried them, but they seem to worth it !

Regards.

NB: I can send you offline smbspy if needed, it's a simple Perl script.

-----Message d'origine-----
De : listbounce () securityfocus com [mailto:listbounce () securityfocus com] De la part de elluk () orange net
Envoyé : samedi 17 février 2007 15:49
À : security-basics () securityfocus com
Objet : SMB/NetBIOS Sniffing

Hi All,

Is anyone able to suggest a free/open source tool to sniff files transfered over SMB/NetBIOS?

Simillarly, are there any tools that are able to sniff the SMB authentication proccess?

Cain & Abel seems to work ok for capturing the NTLM Session Security.
DSniff makes a point of having some of this functionality, yet I haven't be able to make use of it. Any ideas?


I have been searching for some time now and had no luck.
I have heard of a tool called "smbspy" but have not been able to get hold of it.

Would an Ethereal decode have either of these capabilities?

Thanks in Advance.

E_L
M