From: steve (steve@LogicallySecure.org)
Date: Wed Jul 20 2005 - 21:09:19 EDT
We currently have a task that requires us to perform a capture of emails
between an MS Exchange server and a MS Office Outlook (x400) client. I
recognise a dirth of SMTP and POP sniffing programs out there but nothing
seems to be able to decode the DCE RPC encoding/encryption of the exchange
client communications.
Is there anyone out there with knowledge of a product that will allow these
emails to to captured and monitored. Oh before anyone suggests any exchange
resident software, that option is out, we need to be external of the server
and not a member of the domain - just sniffing the stuff as it goes by.
Alternatively, does anyone know of a tool that will allow me to crack the
RPC encryption/encoding to see the email in clear before I replay it to a
server for keyword monitoring purposes?
Oh the architecture is a 200 server with exch 2003 and a XP client with
Office 2002 (incase that matters/helps)
All tips gratefully received.
Steve A
steve<at>logicallysecure.org
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:36 EDT