(25/27)
Common Internet File System (CIFS)
Appel service
192.168.1.1 -> 192.168.1.6 DCERPC Bind: call_id: 1 UUID: LSA
192.168.1.6 -> 192.168.1.1 DCERPC Bind_ack: call_id: 1 accept
max_xmit: 4280 max_recv: 4280 192.168.1.1
-> 192.168.1.6 LSA LsarOpenPolicy
request 192.168.1.6 -> 192.168.1.1 LSA LsarOpenPolicy response 192.168.1.1 -> 192.168.1.6 LSA LsarQueryInformationPolicy request,
Account Domain Information 192.168.1.6
-> 192.168.1.1 LSA
LsarQueryInformationPolicy response 192.168.1.1 -> 192.168.1.6 LSA LsarClose request 192.168.1.6 -> 192.168.1.1 LSA LsarClose response 192.168.1.1 -> 192.168.1.6 SMB Close Request, FID: 0x76b2 192.168.1.6 -> 192.168.1.1 SMB Close Response 192.168.1.1 -> 192.168.1.6 TCP 58296 > microsoft-ds [ACK] ...
192.168.1.1 -> 192.168.1.6 SMB NT Create AndX Request, Path:
\lsarpc 192.168.1.6 -> 192.168.1.1 SMB NT Create AndX Response, FID:
0x76b3 192.168.1.1 -> 192.168.1.6 TCP 58296 > microsoft-ds [ACK]
...
Vous êtes ici :