在NTLM响应message3中为什么LM响应全为0且NTLM响应有138个字节 [英] In NTLM response message3 why LM response is all 0 and NTLM response have 138 bytes

问题描述

握手过程中，消息2标志为A2898205，然后客户端主机向服务器发送消息3，通过捕获的包到IE，消息3 LM响应为3字节0，NTLM响应有138字节包括域，加密字节和
等，我发现它不是NTLM或NTLMv2响应，究竟是什么ntlm响应类型？

During the handshake, message 2 flags is A2898205, then client host send message3 to the server, through  the captured package to IE, the message 3 LM response is 3 bytes 0, NTLM response has 138 bytes including domain, cryptographic bytes and so on, I find it is not NTLM or NTLMv2 response, what on earth is the ntlm response type?

谢谢

推荐答案

您好Kentontsui，

Hi Kentontsui,

感谢您的提问。 协议团队的工程师将与您联系。 与此同时，可能是博客文章

http://blogs.msdn.com/b/openspecification/archive/2010/05/03/ntlm关于NTLM版本的-v1-no-excuse-me-ntlm-v2-oh-no-you-right-it-s-v1.aspx 可能有所帮助。 如果有，请告诉我。 此外，在此期间，您能否将我们的跟踪信息发送到
地址"dochelp（at）Microsoft（dot）com"。

Thank you for your question.  An engineer from the protocols team will contact you.  In the meantime, perhaps the blog post at http://blogs.msdn.com/b/openspecification/archive/2010/05/03/ntlm-v1-no-excuse-me-ntlm-v2-oh-no-you-were-right-it-s-v1.aspx regarding NTLM versions may help.  Please let me know if it does.  Also, in the meantime, could you send us traces to the address "dochelp (at) Microsoft (dot) com".

这篇关于在NTLM响应message3中为什么LM响应全为0且NTLM响应有138个字节的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！