Ethereal-dev: Re: [Ethereal-dev] Patch: NTLMSSP version 1 decryption

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Mon, 6 Jan 2003 22:49:37 +1100
Hi Devin,

I just checked in a patch to make the dcerpc dissector call the proper
subdissector
in case ntlmssp was able to decrypt the payload.

For your capture it now calls the SAMR dissector for the decrypted payload.
Unfortunately, these SAMR PDUs are not fully understood yet so there are
still unknown
fields in the dissected SAMR PDUs.
With your new dissector and support for decrypting NTLMSSPv1 I am certain
that
people will find out a lot more about these SAMR structures.

Looking forward to seeing the NTLMSSPv2 support.

best regards
    ronnie sahlberg


----- Original Message -----
From: "dheitmueller"
Sent: Monday, December 30, 2002 8:16 AM
Subject: [Ethereal-dev] Patch: NTLMSSP version 1 decryption


> * The ability to dissect the decrypted payload.  I need to be able to hand
the TVB with the decrypted buffer back to the calling dissector.  Not quite
sure what the best approach for this is this yet.