Listen Print

WinPcap Brings Unix Network Tools to

Ngrep Example 2

Back to Article


c:\> ngrep -q port 389

T 10.0.0.150:1920 -> 10.0.0.1:389 [AP]
  0....^..lc....U.1CN=Marianne Norberg,OU=hackers1,DC=norberg,DC=net....
  .............objectClass0.....

T 10.0.0.1:389 -> 10.0.0.150:1719 [AP]
  0.......5d......1CN=Marianne Norberg,OU=hackers1,DC=norberg,DC=net0...
  ..0....+..accountExpires1.......92233720368547758070....+..badPassword
  Time1.......1261377455775528320.......badPwdCount1.......00.......code
  Page1.......00.......cn1.......Marianne Norberg0.......countryCode1...
  ....00....%..displayName1.......Marianne Norberg0.......givenName1....
  ...Marianne0.......instanceType1.......40.......lastLogoff1.......00..
  ..%..lastLogon1.......1261445285032209440.......logonCount1.......620.
  ...L..distinguishedName1....3.1CN=Marianne Norberg,OU=hackers1,DC=norb
  erg,DC=net0....N..objectCategory1....8.6CN=Person,CN=Schema,CN=Configu
  ration,DC=norberg,DC=net0....<..objectClass1....)..top..person..organi
  zationalPerson..user0....$..objectGUID1..........F..wM......T.0..../..
  objectSid1....................@~..%y,.7.eV...0.......primaryGroupID1..
  .....5130....&..pwdLastSet1.......1260944080202366720.......name1.....
  ..Marianne Norberg0.... ..sAMAccountName1.......marianne0....!..sAMAcc
  ountType1.......8053063680.......sn1.......Norberg0....!..userAccountC
  ontrol1.......660480..../..userPrincipalName1.......marianne@norberg.n
  et0.......uSNChanged1.......29650.......uSNCreated1.......27460....&..
  whenChanged1.......20000730142642.0Z0....&..whenCreated1.......2000072
  9160150.0Z

Back to Article