Re: [cifs-protocol] [REG:111092854890403] RE: double send of command joined from a upstream windows Server

2011-10-28 Thread Matthieu Patou
Hello Hongwei, I made a screencast on a windows machine explaining how to decrypt FRS traffic, I'm sure that following the instruction in this demo you'll succeed. Here is the file: http://athena.matws.net/mat/pres/frs.avi Regards. Matthieu. On 21/10/2011 23:20, Hongwei Sun wrote:

Re: [cifs-protocol] [REG:111092854890403] RE: double send of command joined from a upstream windows Server

2011-10-28 Thread Hongwei Sun
Hi, Matthieu, Ahh, you used the 32bit version. I used 64bit version. It is surprising to find that the option for Try to decrypt Kerberos blobs only shows up in 32 bite version. I never expect that there is such a difference. Anyway, I can decrypt it now. Thanks! Hongwei