Hi,
I'm using windows xp home, and I want to capture the smb packets where the NTLMv2 encrypted password is stored in using ethereal (I know it's maybe easier with cain, which gives directly the pass, but I still want to use ethereal).
I have only one computer, so I want to send AND receive the packets on the same computer.
What is the easiest way to do this ??
I tried it with a "net use \\myip\shared folder /user pass" with which I could connect to myself, but there where no smb packets cptured

Any help is very appreciated...

no packets would be sent via the network card as you are using the internal stuff to do it, you will only be able to capture packets if you are sending the data to a different machine

Thanks for your replie. I have however still some questions:
1)And isn't there a way how I can send my packets (if it has to through my router) to myself ???
2)Is it correct that a "net use" uses NTLMv2 (under windows xp home)
3)I have a win 98 computer (but Windows 98 doesn't uses NTLMv2), can I use that to capture NTLMv2 passes ??

plinius

before we start talking about ur problem please install a better OS ... like win2k please..........

Thanks for your advice....
But it are my brother's computers, so installing another OS isn't an option (btw, I thought that +- everything which is possible with w2k is also possible with win xp home)
Do you happen to know the answer on one of the questions ??

i don't know exactly if theres any way to send the smb packets to your self, when using a router ...
Maybe add a line to lmhosts? saying that a localhost2 for example is also 127.0.0.1 - after that send those packets to adress localhost2?
really don't know ...

Otherwise try to install a virtual pc (using VMware or something like that) which will act as you want him to! So you solve the problem sending files to yourself when using the Virtual Network provided by Vmware.

Or am i just talking straight away from your problem ? doh - early in the morning and my english is not the best - sorry

No, It's a good idea to use VMware...
I'll do it like that. Thanks a lot !!!