Re: Wireshark 1.5.1: Export SMB Objects

["Mohan Radhakrishnan" <mohanr () fss co in>]

Hi,
     This is going to be very useful for us here because there is always
a tug of war between the infrastructure team and the application team
about the unavailability of the SMB shares. The SMB login through the
Windows domain controller could be rejected and we have no way of
knowing that.

Is there any recommendation to capture these traces from the Windows OS
for analysis by WireShark later ?

We are not allowed to run WireShark or any other capturing tool directly
on our production systems.

Thanks,
Mohan

-----Original Message-----
From: wireshark-users-bounces () wireshark org
[mailto:wireshark-users-bounces () wireshark org] On Behalf Of j.snelders
Sent: Sunday, May 08, 2011 12:14 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Wireshark 1.5.1: Export SMB Objects

On Sat, 7 May 2011 17:40:05 +0000 (UTC) Christopher Maynard wrote:
> j.snelders <j.snelders@...> writes:
>
> > The white paper: A tool for capturing SMB files with Wireshark" by
David
> > Perez & Jose Pico is freely available.
> > http://www.taddong.com/docs/WP_SMBPlugin.pdf
>
> Another good spot for this information?  http://wiki.wireshark.org/SMB

Yes!
And what about this spot?
http://wiki.wireshark.org/Presentations

My best
Joke



       


________________________________________________________________________
___
Sent via:    Wireshark-users mailing list
<wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
 
mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe