KFSensor

 

NBT Settings

The NBT Settings dialog box contains settings common to all four NBT services.
It is accessed via the NBT Settings button on the four NBT sim std server dialog boxes.

For more information on these settings and how to configure them see the Window networking / NetBIOS / SMB / CIFS section in the KFSensor Administration Guide.

NetBIOS Settings

  • Interface ID
    In response to a specific query NBT returns a six byte interface id, which is unique to the machine.
    If these fields are all blank then a random id will be generated by KFSensor when it starts up.
    To enter an id fill all six fields with a two digit hex number.
  • Emulation
    Each version of Windows has an NBT that behaves slightly differently.
    Choose the version you wish to emulate.
  • NetBIOS Names
    This is the list of NetBIOS Names that the sim servers will respond to.
    The order of the names is significant.
    For a detailed description of the columns in this list see the NetBIOS Name dialog box section.
  • Buttons
    • Move up
      Moves the selected NetBIOS Name up one place in the list
    • Move down
      Moves the selected NetBIOS Name down one place in the list
    • Default
      Removes all existing NetBIOS Names and replaces them with a default set for the current emulation
    • Add...
      Create a new NetBIOS Name
    • Edit...
      Change an existing NetBIOS Name
    • Delete
      Removes a NetBIOS Name

Shares

  • Shares
    This is the list of Shares that the sim servers will respond to.
    The order of the shares is significant.
    For a detailed description of the columns in this list see the NBT Share dialog box section.
  • Buttons
    • Move up
      Moves the selected Share up one place in the list
    • Move down
      Moves the selected Share down one place in the list
    • Default
      Removes all existing Shares and replaces them with a default set for the current emulation
    • Add...
      Create a new Share
    • Edit...
      Change an existing Share
    • Delete
      Removes a Share

File Transfer

The main purpose of NBT is to transfer files between two computers. Hackers and worms use this to read from the target system and to upload malware onto the target system.
As part of the emulation KFSensor allows files to be transferred in a very limited way, as specified by the following settings.

This is explained in more details in the KFSensor Windows networking emulation section of the Administration Guide.

  • Download Path
    The directory which KFSensor will read files requested by the visitor
  • Enable Download
    If checked then files will be read by KFSensor.
  • Upload Path
    The directory into which KFSensor will create files written by the visitor.
  • Enable Upload
    If checked then files will be created.
  • Name creation
    This option specifies how an uploaded file will be named in the upload path.

Related Topics


KFSensor On-Line Manual Contents