Reverse Engineering Techniques

Andrew Tridgell

It is a fact of life that many protocols and algorithms are less well documented than is needed for a progammer to implement in such a way that it is fully interoperable with existing implementations. While there are many reasons for this lack of documentation, the result is that a programmer is often called upon to dissect an existing protocol to work out how it works. In this talk I will discuss some of the more interesting network analysis techniques that myself and other members of the Samba Team have used over the years.