Here's a web page that explains how it works.
http://ntsecurity.nu/papers/port445/

I would imagine that the traffic would look like any other TCP session.
Session setup, data transfer, session teardown.

-Lucas


-----Original Message-----
From: Karma [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 05, 2002 1:05 AM
To: 'Security Basics'
Subject: Fw: port 445 typical traffic

Greetings folks,

Does anyone know what typical network traffic between a 2000/XP port 445
looks like ?

I have found suggestions that it is the replacement of port 139 in NT, but I
am not convinced.

I do not currently have access to a 'snoop' or similar

___________________________________________________________________________

for example, SMTP would have traffic like

HELO
RCPT TO: [EMAIL PROTECTED]
DATA
SUBJECT:  this example something
.


so what would a typical transaction between port 445 and a client look like
?

Thanks

Reply via email to