Skip to Content.
Sympa Menu

freetds - TDS 7.0 Login packet - my comments

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Nil Alexandrov <nil AT internet2.ru>
  • To: freetds AT franklin.oit.unc.edu
  • Subject: TDS 7.0 Login packet - my comments
  • Date: Thu, 11 Jan 2001 22:58:35 +0300 (MSK)


Hello !

TDS7.0 Login Packet
byte var type description
---------------------------
0 INT16 total packet size
2 INT8[5]? 00000
7 INT8 TDS Version? 0x70
8 INT8[7]? 0000000
15 INT8[21] magic 0x0682f2f8ff00000000e003000088ffffff36040000
36 INT16 current_pos ? 86
^^^^^^^^^^^ Yes it's true - this is the seek of the hostname
or equal username seek if hostname is empty
38 INT16 0
^ hostname_length, not always zero length :)
40 INT16 current_pos 86
42 INT16 username length
44 INT16 current_pos
46 INT16 password length
48 INT16 current_pos
50 INT16 app name length
52 INT16 current_pos
54 INT16 server name length
56 INT16 0
58 INT16 0
60 INT16 current_pos
62 INT16 library name length
64 INT16 current_pos
66 INT16 0
68 INT16 current_pos
70 INT16 0
72 INT8[6] magic 0x0040339a6b50
78 INT16 partial packet size
80 INT16 48 (0x30)
82 INT16 total packet size
84 INT16 0
-86 UTF16[n] username
+86 UTF16[n] hostname
UTF16[n] username
UTF16[n] encrypted password
UTF16[n] app name
UTF16[n] server name
UTF16[n] library name
CHAR[7] "NTLMSSP"
INT8 0 /* version/patch level? */
INT8 1 /* version/patch level? NTLMSSP v01 ? */
INT8[3]? 000
INT8 6
INT8 130 (0x82)
INT8[22]? 0000000000000000000000
INT8 48 (0x30)
INT8[7]? 0000000
INT8 48 (0x30)
INT8[3]? 000



Here is the example:
hostname=FANTOM, domain=CENTRAL, login=sa, ...

Receiving header packet @ 2001-01-10 12:26:19
0000 10 01 00 e5 00 00 01 00 |........|

Receiving packet @ 2001-01-10 12:26:19
0000 dd 00 00 00 00 00 00 70 00 10 00 00 00 00 00 06 |.......p........|
0010 b5 00 00 00 00 00 00 00 e0 03 10 00 4c ff ff ff |............L...|
0020 19 04 00 00 56 00 06 00 62 00 02 00 66 00 04 00 |....V...b...f...|
0030 6e 00 14 00 96 00 08 00 00 00 00 00 a6 00 05 00 |n...............|
0040 b0 00 00 00 b0 00 00 00 00 60 08 0b 2f 70 b0 00 |.........`../p..|
0050 2d 00 dd 00 00 00 46 00 41 00 4e 00 54 00 4f 00 |-.....F.A.N.T.O.|
0060 4d 00 73 00 61 00 e2 a5 f3 a5 92 a5 e2 a5 4d 00 |M.s.a.........M.|
0070 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 |i.c.r.o.s.o.f.t.|
0080 20 00 53 00 51 00 4c 00 20 00 53 00 65 00 72 00 | .S.Q.L. .S.e.r.|
0090 76 00 65 00 72 00 4c 00 49 00 42 00 52 00 41 00 |v.e.r.L.I.B.R.A.|
00a0 52 00 59 00 32 00 4f 00 4c 00 45 00 44 00 42 00 |R.Y.2.O.L.E.D.B.|
00b0 4e 54 4c 4d 53 53 50 00 01 00 00 00 07 b2 00 00 |NTLMSSP.........|
00c0 07 00 07 00 26 00 00 00 06 00 06 00 20 00 00 00 |....&....... ...|
00d0 46 41 4e 54 4f 4d 43 45 4e 54 52 41 4c |FANTOMCENTRAL|


Best regards, Nil.
E-Mail: nil AT internet2.ru




  • TDS 7.0 Login packet - my comments, Nil Alexandrov, 01/11/2001

Archive powered by MHonArc 2.6.24.

Top of Page