FreeTDS Development Group

[Nil Alexandrov <nil AT internet2.ru>]

Hello !

   TDS7.0 Login Packet
byte  var type  description
---------------------------
  0   INT16     total packet size
  2   INT8[5]?  00000
  7   INT8      TDS Version?    0x70
  8   INT8[7]?  0000000
 15   INT8[21]  magic   0x0682f2f8ff00000000e003000088ffffff36040000
 36   INT16     current_pos ?   86
                ^^^^^^^^^^^   Yes it's true - this is the seek of the hostname
                              or equal username seek if hostname is empty
 38   INT16     0
                ^ hostname_length, not always zero length :)
 40   INT16     current_pos     86
 42   INT16     username length
 44   INT16     current_pos
 46   INT16     password length
 48   INT16     current_pos
 50   INT16     app name length
 52   INT16     current_pos
 54   INT16     server name length
 56   INT16     0
 58   INT16     0
 60   INT16     current_pos
 62   INT16     library name length
 64   INT16     current_pos
 66   INT16     0
 68   INT16     current_pos
 70   INT16     0
 72   INT8[6]   magic    0x0040339a6b50
 78   INT16     partial packet size
 80   INT16     48 (0x30)
 82   INT16     total packet size
 84   INT16     0
-86   UTF16[n]  username
+86   UTF16[n]  hostname
      UTF16[n]  username
      UTF16[n]  encrypted password
      UTF16[n]  app name
      UTF16[n]  server name
      UTF16[n]  library name
      CHAR[7]   "NTLMSSP"
      INT8      0       /* version/patch level? */
      INT8      1       /* version/patch level?  NTLMSSP v01 ? */
      INT8[3]?  000
      INT8      6
      INT8      130 (0x82)
      INT8[22]? 0000000000000000000000
      INT8      48 (0x30)
      INT8[7]?  0000000
      INT8      48 (0x30)
      INT8[3]?  000



Here is the example:
hostname=FANTOM, domain=CENTRAL, login=sa, ...

Receiving header packet @ 2001-01-10 12:26:19
0000  10 01 00 e5 00 00 01 00                           |........|

Receiving packet @ 2001-01-10 12:26:19
0000  dd 00 00 00 00 00 00 70 00 10 00 00 00 00 00 06   |.......p........|
0010  b5 00 00 00 00 00 00 00 e0 03 10 00 4c ff ff ff   |............L...|
0020  19 04 00 00 56 00 06 00 62 00 02 00 66 00 04 00   |....V...b...f...|
0030  6e 00 14 00 96 00 08 00 00 00 00 00 a6 00 05 00   |n...............|
0040  b0 00 00 00 b0 00 00 00 00 60 08 0b 2f 70 b0 00   |.........`../p..|
0050  2d 00 dd 00 00 00 46 00 41 00 4e 00 54 00 4f 00   |-.....F.A.N.T.O.|
0060  4d 00 73 00 61 00 e2 a5 f3 a5 92 a5 e2 a5 4d 00   |M.s.a.........M.|
0070  69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00   |i.c.r.o.s.o.f.t.|
0080  20 00 53 00 51 00 4c 00 20 00 53 00 65 00 72 00   | .S.Q.L. .S.e.r.|
0090  76 00 65 00 72 00 4c 00 49 00 42 00 52 00 41 00   |v.e.r.L.I.B.R.A.|
00a0  52 00 59 00 32 00 4f 00 4c 00 45 00 44 00 42 00   |R.Y.2.O.L.E.D.B.|
00b0  4e 54 4c 4d 53 53 50 00 01 00 00 00 07 b2 00 00   |NTLMSSP.........|
00c0  07 00 07 00 26 00 00 00 06 00 06 00 20 00 00 00   |....&....... ...|
00d0  46 41 4e 54 4f 4d 43 45 4e 54 52 41 4c            |FANTOMCENTRAL|


Best regards, Nil.
E-Mail: nil AT internet2.ru