Skip to content

Commit

Permalink
Add Microsoft Network Monitor to README
Browse files Browse the repository at this point in the history
  • Loading branch information
sjanusz-r7 committed May 8, 2024
1 parent 82c5b53 commit 068eb89
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -286,6 +286,20 @@ Configure Wireshark in Debian-based systems to be able to capture traffic withou
- `sudo python setup.py install`
- `cd examples && python smbclient.py <USER>:<PASS>@<WINDOWS HOST IP>`

### Microsoft Network Monitor

In situations where WireShark reports some requests/responses as malformed (not parsed correctly),
[Microsoft Network Monitor](https://www.microsoft.com/en-us/download/details.aspx?id=4865) can be used instead.
For example, the `LookupSids` response is not parsed correctly by WireShark, whereas it is by this tool.

This software can be installed on a Windows machine:

- Download & install the software
- Open it
- Click the `Start` button (or press F5) present at the top bar

The SMB requests will be present under `All Traffic -> My Traffic -> System (4)`.

## License

`ruby_smb` is released under a 3-clause BSD license. See [LICENSE.txt](LICENSE.txt) for full text.
Expand Down

0 comments on commit 068eb89

Please sign in to comment.