Ethereal-users: Re: [Ethereal-users] ms rpc

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 8 Dec 2003 11:53:25 -0800
On Dec 8, 2003, at 8:25 AM, Rufoo wrote:


The NTLM negotiate packet is shown in ethereal as a
bind and challenge as a bind ack, can somebody tell me
why is that?

It is because the packet containing the NTLM negotiate information is a 
DCE RPC Bind PDU and the packet containing the NTLM challenge is a DCE 
RPC Bind Ack PDU.