I noticed I dont see any 3 way handshakes when browsing local file shares on my server. Instead I see the SMB protocol being used. Look slike AndX request and AndX response takes the place of the 3 way handshake in this case?
I noticed I dont see any 3 way handshakes when browsing local file shares on my server. Instead I see the SMB protocol being used. Look slike AndX request and AndX response takes the place of the 3 way handshake in this case?
By three-way handshake you mean syn/ack TCP protocol? That's because smb like's to use it's own little thing called NetBUEI. I don't know much about it because it's a windows thing, but it does exist.
-Jack C
jack {at} crepinc.com
http://www.crepinc.com