(SMB) Protokoll - Sharkfest - Wireshark
(SMB) Protokoll - Sharkfest - Wireshark
(SMB) Protokoll - Sharkfest - Wireshark
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Server Message Block (<strong>SMB</strong>) <strong>Protokoll</strong><br />
<strong>SMB</strong> over TCP/UDP/IP<br />
<strong>SMB</strong> / NetBIOS was made routable by running<br />
over TCP/IP (NBT) using encapsulation over<br />
TCP/UDP-Ports 137–139<br />
<strong>SMB</strong> over NetBIOS over UDP/TCP<br />
Application<br />
.. .<br />
137/138 139<br />
Port 137 = NetBIOS Name Service (NS)<br />
Port 138 = NetBIOS Datagram Service (DGM)<br />
Port 139 = NetBIOS Session Service (SS)<br />
Data Link<br />
Ethernet, WLAN etc.<br />
Since Windows 2000, <strong>SMB</strong> runs, by default,<br />
with a thin layer, the NBT's Session Service, on<br />
top of TCP-Port 445.<br />
DNS and LLMNR (Link Local Multicast Name<br />
Resolution) is used for name resolution.<br />
Application<br />
<strong>SMB</strong> “naked” over TCP<br />
.<br />
445<br />
Port 445 = Microsoft Directory Services (DS)<br />
<strong>SMB</strong> File Sharing, Windows Shares,<br />
Printer Sharing, Active Directory<br />
Data Link<br />
Ethernet, WLAN etc.<br />
3<br />
© Leutert NetServices 2013 www.wireshark.ch
Change language