Re: ports in samba

2003-02-27 Thread Christopher R. Hertel
On Thu, Feb 27, 2003 at 12:47:59AM -0800, D Jemms wrote:
> 
> 
> > Port 445 is
> > Microsoft's direct SMB
> > over TCP (no NetBIOS in the middle) the preferred
> > method for
> > Windows 2000 and XP - should be a cleaner way to
> > work with, but I do not
> > know it well yet...
> According to http://support.microsoft.com/?kbid=204279
> if I disable NetBios over TCP/IP on windows2000,
> ideally it whould use port 445 and all SMBs should
> come directly over TCP.
> But in traces I can see TCP, NBT  and then SMB, for
> all the SMBs ???What is wrong here ? can it be
> possible to see TCP,SMB in traces without NBT in
> between ? If yes,What is the procedure?
> 
> Help on this will be highly appreciated.

You need to read http://ubiqx.org/cifs/

There is a four byte header between the TCP header and the SMB message.
The four byte header is used with both SMB over NBT and SMB over naked
TCP.  It is needed so that the length of the SMB message can be 
discovered.  Ethereal will call this the NBT header even if you are 
capturing port 445 (naked TCP transport).

Chris -)-

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]


Re: ports in samba

2003-02-27 Thread D Jemms


> Port 445 is
> Microsoft's direct SMB
> over TCP (no NetBIOS in the middle) the preferred
> method for
> Windows 2000 and XP - should be a cleaner way to
> work with, but I do not
> know it well yet...
According to http://support.microsoft.com/?kbid=204279
if I disable NetBios over TCP/IP on windows2000,
ideally it whould use port 445 and all SMBs should
come directly over TCP.
But in traces I can see TCP, NBT  and then SMB, for
all the SMBs ???What is wrong here ? can it be
possible to see TCP,SMB in traces without NBT in
between ? If yes,What is the procedure?

Help on this will be highly appreciated.



> 
> Correct me if I had any mistake here.
> 
>   -- Tom
> 
> -- 
>   Tom Alsberg - hacker (being the best description
> fitting this space)
>   Web page:   http://www.cs.huji.ac.il/~alsbergt/
> DISCLAIMER:  The above message does not even
> necessarily represent what
> my fingers have typed on the keyboard, save anything
further.


__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/


Re: ports in samba

2003-02-26 Thread Tom Alsberg
On Wed, Feb 26, 2003 at 04:23:45AM -0800, D Jemms wrote:
> 
> What is the difference between two ports on which 
> samba listens for TCP 139 and 445.

Ports 137-139 serve SMB over NetBIOS over TCP/IP.  This is the transport
used by LANMAN versions before Windows 2000 (Windows 3.x, NT 3.x,
NT 4.x, Windows 95/98/Me, etc.).  Port 445 is Microsoft's direct SMB
over TCP (no NetBIOS in the middle) the preferred method for
Windows 2000 and XP - should be a cleaner way to work with, but I do not
know it well yet...

Correct me if I had any mistake here.

  -- Tom

-- 
  Tom Alsberg - hacker (being the best description fitting this space)
  Web page: http://www.cs.huji.ac.il/~alsbergt/
DISCLAIMER:  The above message does not even necessarily represent what
my fingers have typed on the keyboard, save anything further.


ports in samba

2003-02-26 Thread D Jemms
Greetings,

What is the difference between two ports on which 
samba listens for TCP 139 and 445.

-DJ


__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/