How to read this little-endian value properly?

0

I have following value table:

0x00000001  Negotiate Unicode
0x00000002  Negotiate OEM
0x00000004  Request Target
0x00000008  unknown
0x00000010  Negotiate Sign
0x00000020  Negotiate Seal
0x00000040  Negotiate Datagram Style
0x00000080  Negotiate Lan Manager Key
0x00000100  Negotiate Netware
0x00000200  Negotiate NTLM
0x00000400  unknown
0x00000800  Negotiate Anonymous
0x00001000  Negotiate Domain Supplied
0x00002000  Negotiate Workstation Supplied
0x00004000  Negotiate Local Call
0x00008000  Negotiate Always Sign
0x00010000  Target Type Domain
0x00020000  Target Type Server
0x00040000  Target Type Share
0x00080000  Negotiate NTLM2 Key
0x00100000  Request Init Response
0x00200000  Request Accept Response
0x00400000  Request Non-NT Session Key
0x00800000  Negotiate Target Info
0x01000000  unknown
0x02000000  unknown
0x04000000  unknown
0x08000000  unknown
0x10000000  unknown
0x20000000  Negotiate 128
0x40000000  Negotiate Key Exchange
0x80000000  Negotiate 56

I see this values on Wireshark:

Example 1: b7 82 08 e2

Example 2: 32 90 88 E2

Example 3: 35 82 89 e2

This should be read in little-endian. But I simply cannot get it to match the values shown on the table. How to calculate this thing?

hex
endianness
asked on Stack Overflow Sep 29, 2017 by user2864778

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0