Attachment 601948 Details for Bug 843765 – tcpdump capture of problem

tcpdump capture of problem

file_843765.txt (text/plain), 19.95 KB, created by antti on 2012-08-02 13:30:04 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: antti

Created: 2012-08-02 13:30:04 UTC

Size: 19.95 KB

patch

obsolete

>16:10:00.048736 IP (tos 0x0, ttl 30, id 9, offset 0, flags [none], proto TCP (6), length 105)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x1c70 (correct), seq 563:628, ack 900017954, win 1450, length 65
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=61 (0x3d)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=VOLUME 
>smb_bcc=22
>Path=\FOO\????????.???
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>16:10:00.073805 IP (tos 0x0, ttl 64, id 63667, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xdfb8), seq 1:88, ack 65, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x8
>Mask=???????????
>Srv1=0x1
>DirIndex=0 (0x0)
>Srv2=0x0
>Res2=0x0
>Attrib=VOLUME 
>Time=NULL
>Size=0 (0x0)
>Name=MACHINE      
>
>
>
>16:10:00.075670 IP (tos 0x0, ttl 30, id 10, offset 0, flags [none], proto TCP (6), length 101)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x9a59 (correct), seq 65:126, ack 88, win 1450, length 61
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=57 (0x39)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=
>smb_bcc=18
>Path=\FOO\????????
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>16:10:00.075939 IP (tos 0x0, ttl 64, id 63668, offset 0, flags [DF], proto TCP (6), length 84)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x81e1 (incorrect -> 0x6f02), seq 88:132, ack 126, win 14600, length 44
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=40 (0x28)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=0 (0x0)
>smb_bcc=3
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>16:10:00.076202 IP (tos 0x0, ttl 30, id 11, offset 0, flags [none], proto TCP (6), length 105)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x1b61 (correct), seq 126:191, ack 132, win 1450, length 65
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=61 (0x3d)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM DIR 
>smb_bcc=22
>Path=\FOO\????????.???
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>16:10:00.076320 IP (tos 0x0, ttl 64, id 63669, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xb7a8), seq 132:219, ack 191, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x0
>Res2=0x0
>Attrib=DIR ARCHIVE 
>Time=Thu Aug  2 16:48:12 2012
>Size=0 (0x0)
>Name=.            
>
>
>
>16:10:00.079574 IP (tos 0x0, ttl 30, id 12, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x461f (correct), seq 191:260, ack 219, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x0
>Res2=0x105F200
>
>
>
>16:10:00.079651 IP (tos 0x0, ttl 64, id 63670, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0x53f8), seq 219:306, ack 260, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x8000
>Res2=0x105F200
>Attrib=DIR 
>Time=Thu Aug  2 16:47:44 2012
>Size=0 (0x0)
>Name=..           
>
>
>
>16:10:00.081589 IP (tos 0x0, ttl 30, id 13, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0xc582 (correct), seq 260:329, ack 306, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x8000
>Res2=0x105F200
>
>
>
>16:10:00.110928 IP (tos 0x0, ttl 64, id 63671, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xb0ae), seq 306:393, ack 329, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.112911 IP (tos 0x0, ttl 30, id 14, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x7130 (correct), seq 329:398, ack 393, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.113043 IP (tos 0x0, ttl 64, id 63672, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xb012), seq 393:480, ack 398, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.114988 IP (tos 0x0, ttl 30, id 15, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x7094 (correct), seq 398:467, ack 480, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.115110 IP (tos 0x0, ttl 64, id 63673, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xaf76), seq 480:567, ack 467, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.117036 IP (tos 0x0, ttl 30, id 16, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x6ff8 (correct), seq 467:536, ack 567, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.117158 IP (tos 0x0, ttl 64, id 63674, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xaeda), seq 567:654, ack 536, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.119139 IP (tos 0x0, ttl 30, id 17, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x6f5c (correct), seq 536:605, ack 654, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.119260 IP (tos 0x0, ttl 64, id 63675, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xae3e), seq 654:741, ack 605, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.121211 IP (tos 0x0, ttl 30, id 18, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x6ec0 (correct), seq 605:674, ack 741, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.121334 IP (tos 0x0, ttl 64, id 63676, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xada2), seq 741:828, ack 674, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.123184 IP (tos 0x0, ttl 30, id 19, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x6e24 (correct), seq 674:743, ack 828, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.123306 IP (tos 0x0, ttl 64, id 63677, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xad06), seq 828:915, ack 743, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.125267 IP (tos 0x0, ttl 30, id 20, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x6d88 (correct), seq 743:812, ack 915, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.125389 IP (tos 0x0, ttl 64, id 63678, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xac6a), seq 915:1002, ack 812, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>16:10:00.127333 IP (tos 0x0, ttl 30, id 21, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.45396 > 192.168.0.1.139: Flags [P.], cksum 0x6cec (correct), seq 812:881, ack 1002, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>
>
>
>16:10:00.127454 IP (tos 0x0, ttl 64, id 63679, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.45396: Flags [P.], cksum 0x820c (incorrect -> 0xabce), seq 1002:1089, ack 881, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=64368 (0xfb70)
>Srv2=0xD845
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>...

Actions: View

Attachments on bug 843765: 601948 | 601951 | 603041 | 603042