I am attempting to decode the windows 2000 professional startup and logon to a Windows 2000 Active Directory.
it seems ethereal (v0.9.8) is reporting "Unknown command:17" in the info field of what i think to be the response from the server to a "SAM logon request". any info on how this can be more accurately decoded would be gladly received. GT
