Wireshark SMB file extraction plug-in

Published: 2010-05-28
Last Updated: 2010-05-28 22:44:29 UTC
by Jim Clausing (Version: 1)
0 comment(s)

Ever on the search for useful tools, especially those for pulling files from pcaps, fellow handler, Raul Siles, e-mailed me today to let me know about this cool plug-in.  I've just started playing with it, but it looks pretty cool.

Tool: http://www.taddong.com/tools/eo_smb.patch
Whitepaper: http://www.taddong.com/docs/WP_SMBPlugin.pdf

Jim Clausing, jclausing --at-- isc [dot] sans (dot) org
FOR 408 coming to central OH beginning 30 Sep, http://www.sans.org/mentor/details.php?nid=22353

Keywords: SMB tools wireshark
0 comment(s)


Diary Archives