SMB
From Protocolinfo
SMB is Server Message Block, Microsoft's protocol for file sharing. Besides being used by Windows, there is an open source server, samba. According to samba's man page, "This protocol is sometimes also referred to as the Common Internet File System (CIFS), LanManager or NetBIOS protocol." Actually, SMB is a higher level protocol than NetBIOS and can be completely independent from it. SMB can run on top of NetBIOS or "naked" on TCP/IP. Newer versions of Windows default to running naked. For a deeper understanding, see this extensive documentation.
Contents |
[edit] Identification
[edit] Ports
SMB either runs on top of NetBIOS (UDP ports 137 and 138 and TCP port 139) or "naked" on TCP port 445.
[edit] l7-filter
l7-filter uses the smb pattern. It is lightly tested.

