Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

index="winevent_dc_index" source="wineventlog:directory service" EventCode="2889"
| rex field=_raw "(?ms)Binding\s+Type:\s+(?<typeBind>\d)"
| table _time, host, EventCode, ClientIdentity, ClientIPAddress, typeBind

 

Truth Tables

 Build notesBindSigningCertificateEncryptionResult

10.14.6
MacBook Air (Early 2013)

USB installer
SA by hand

     

10.15.2
MacBook Pro (2017)

USB installer
SA by hand

     
       
       
       

 

Wireshark - SASL bind behavior

...