Wireshark · Smb2-protocol: Re: [Smb2-protocol] negotiate protocol request

["Stefan (metze) Metzmacher" <metze@xxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ronnie sahlberg schrieb:
> the first two bytes after the buffer code in negotiate protocol
> requests   seems to always use the value 0x01 0x00
> 
> this might be the version field that the client tries to negotiate.
> 
> i.e.  request smb2 version 1  (or earlier)

yep, that's what I also thought! as in smb the string is SMB 2.001
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFENNUAm70gjA5TCD8RAqssAJ99mrzOnmEl2METKigguyjM2IwR8gCgxp1j
fkSak760vA9NTCzK5BRiUdw=
=xzTC
-----END PGP SIGNATURE-----