Re: ports in samba

2003-02-27 Thread D Jemms


 Port 445 is
 Microsoft's direct SMB
 over TCP (no NetBIOS in the middle) the preferred
 method for
 Windows 2000 and XP - should be a cleaner way to
 work with, but I do not
 know it well yet...
According to http://support.microsoft.com/?kbid=204279
if I disable NetBios over TCP/IP on windows2000,
ideally it whould use port 445 and all SMBs should
come directly over TCP.
But in traces I can see TCP, NBT  and then SMB, for
all the SMBs ???What is wrong here ? can it be
possible to see TCP,SMB in traces without NBT in
between ? If yes,What is the procedure?

Help on this will be highly appreciated.



 
 Correct me if I had any mistake here.
 
   -- Tom
 
 -- 
   Tom Alsberg - hacker (being the best description
 fitting this space)
   Web page:   http://www.cs.huji.ac.il/~alsbergt/
 DISCLAIMER:  The above message does not even
 necessarily represent what
 my fingers have typed on the keyboard, save anything
further.


__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/


Re: ports in samba

2003-02-27 Thread Christopher R. Hertel
On Thu, Feb 27, 2003 at 12:47:59AM -0800, D Jemms wrote:
 
 
  Port 445 is
  Microsoft's direct SMB
  over TCP (no NetBIOS in the middle) the preferred
  method for
  Windows 2000 and XP - should be a cleaner way to
  work with, but I do not
  know it well yet...
 According to http://support.microsoft.com/?kbid=204279
 if I disable NetBios over TCP/IP on windows2000,
 ideally it whould use port 445 and all SMBs should
 come directly over TCP.
 But in traces I can see TCP, NBT  and then SMB, for
 all the SMBs ???What is wrong here ? can it be
 possible to see TCP,SMB in traces without NBT in
 between ? If yes,What is the procedure?
 
 Help on this will be highly appreciated.

You need to read http://ubiqx.org/cifs/

There is a four byte header between the TCP header and the SMB message.
The four byte header is used with both SMB over NBT and SMB over naked
TCP.  It is needed so that the length of the SMB message can be 
discovered.  Ethereal will call this the NBT header even if you are 
capturing port 445 (naked TCP transport).

Chris -)-

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]


Re: ports in samba

2003-02-26 Thread Tom Alsberg
On Wed, Feb 26, 2003 at 04:23:45AM -0800, D Jemms wrote:
 snip /
 What is the difference between two ports on which 
 samba listens for TCP 139 and 445.

Ports 137-139 serve SMB over NetBIOS over TCP/IP.  This is the transport
used by LANMAN versions before Windows 2000 (Windows 3.x, NT 3.x,
NT 4.x, Windows 95/98/Me, etc.).  Port 445 is Microsoft's direct SMB
over TCP (no NetBIOS in the middle) the preferred method for
Windows 2000 and XP - should be a cleaner way to work with, but I do not
know it well yet...

Correct me if I had any mistake here.

  -- Tom

-- 
  Tom Alsberg - hacker (being the best description fitting this space)
  Web page: http://www.cs.huji.ac.il/~alsbergt/
DISCLAIMER:  The above message does not even necessarily represent what
my fingers have typed on the keyboard, save anything further.