Attachment 601951 Details for Bug 843765 – tcpdump capture of working kernel

tcpdump capture of working kernel

file_843765.txt (text/plain), 13.38 KB, created by antti on 2012-08-02 13:33:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: antti

Created: 2012-08-02 13:33:42 UTC

Size: 13.38 KB

patch

obsolete

>15:58:29.315062 IP (tos 0x0, ttl 30, id 10, offset 0, flags [none], proto TCP (6), length 105)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0x422f (correct), seq 484:549, ack 3763244114, win 1450, length 65
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=61 (0x3d)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=VOLUME 
>smb_bcc=22
>Path=\FOO\????????.???
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>15:58:29.332232 IP (tos 0x0, ttl 64, id 57468, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x820c (incorrect -> 0x0578), seq 1:88, ack 65, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x8
>Mask=???????????
>Srv1=0x1
>DirIndex=0 (0x0)
>Srv2=0x0
>Res2=0x0
>Attrib=VOLUME 
>Time=NULL
>Size=0 (0x0)
>Name=MACHINE      
>
>
>
>15:58:29.334084 IP (tos 0x0, ttl 30, id 11, offset 0, flags [none], proto TCP (6), length 101)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0xc018 (correct), seq 65:126, ack 88, win 1450, length 61
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=57 (0x39)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=
>smb_bcc=18
>Path=\FOO\????????
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>15:58:29.334307 IP (tos 0x0, ttl 64, id 57469, offset 0, flags [DF], proto TCP (6), length 84)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x81e1 (incorrect -> 0x94c1), seq 88:132, ack 126, win 14600, length 44
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=40 (0x28)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=0 (0x0)
>smb_bcc=3
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>15:58:29.334566 IP (tos 0x0, ttl 30, id 12, offset 0, flags [none], proto TCP (6), length 105)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0x4120 (correct), seq 126:191, ack 132, win 1450, length 65
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=61 (0x3d)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM DIR 
>smb_bcc=22
>Path=\FOO\????????.???
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>15:58:29.334677 IP (tos 0x0, ttl 64, id 57470, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x820c (incorrect -> 0xdd67), seq 132:219, ack 191, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x0
>Res2=0x0
>Attrib=DIR ARCHIVE 
>Time=Thu Aug  2 16:48:12 2012
>Size=0 (0x0)
>Name=.            
>
>
>
>15:58:29.337995 IP (tos 0x0, ttl 30, id 13, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0x6bde (correct), seq 191:260, ack 219, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x0
>Res2=0x105F200
>
>
>
>15:58:29.338110 IP (tos 0x0, ttl 64, id 57471, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x820c (incorrect -> 0x79b7), seq 219:306, ack 260, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x8000
>Res2=0x105F200
>Attrib=DIR 
>Time=Thu Aug  2 16:47:44 2012
>Size=0 (0x0)
>Name=..           
>
>
>
>15:58:29.340045 IP (tos 0x0, ttl 30, id 14, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0xeb41 (correct), seq 260:329, ack 306, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=0 (0x0)
>Srv2=0x8000
>Res2=0x105F200
>
>
>
>15:58:29.340227 IP (tos 0x0, ttl 64, id 57472, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x820c (incorrect -> 0xcec8), seq 306:393, ack 329, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=39643 (0x9adb)
>Srv2=0x4080
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:10 2012
>Size=0 (0x0)
>Name=FILE3.TXT    
>
>
>
>15:58:29.342189 IP (tos 0x0, ttl 30, id 15, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0x8f4a (correct), seq 329:398, ack 393, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=39643 (0x9adb)
>Srv2=0x4080
>Res2=0x105F200
>
>
>
>15:58:29.342311 IP (tos 0x0, ttl 64, id 57473, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x820c (incorrect -> 0x908c), seq 393:480, ack 398, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=47910 (0xbb26)
>Srv2=0x63D5
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:48:00 2012
>Size=0 (0x0)
>Name=FILE2.TXT    
>
>
>
>15:58:29.344228 IP (tos 0x0, ttl 30, id 16, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0x4b0e (correct), seq 398:467, ack 480, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=47910 (0xbb26)
>Srv2=0x63D5
>Res2=0x105F200
>
>
>
>15:58:29.344348 IP (tos 0x0, ttl 64, id 57474, offset 0, flags [DF], proto TCP (6), length 127)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x820c (incorrect -> 0x36ed), seq 480:567, ack 467, win 14600, length 87
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=83 (0x53)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=1 (0x1)
>smb_bcc=46
>BlkType=0x5
>BlkLen=43 (0x2b)
>
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=65535 (0xffff)
>Srv2=0x7FFF
>Res2=0x105F200
>Attrib=ARCHIVE 
>Time=Thu Aug  2 16:47:50 2012
>Size=0 (0x0)
>Name=FILE1.TXT    
>
>
>
>15:58:29.346204 IP (tos 0x0, ttl 30, id 17, offset 0, flags [none], proto TCP (6), length 109)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0xe96e (correct), seq 467:536, ack 567, win 1450, length 69
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=65 (0x41)
>
>SMB PACKET: SMBsearch (REQUEST)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  2 (0x2)
>Count=1 (0x1)
>Attrib=HIDDEN SYSTEM VOLUME ARCHIVE 
>smb_bcc=26
>Path=
>BlkType=0x5
>BlkLen=21 (0x15)
>Res1=0x16
>Mask=???????????
>Srv1=0x2
>DirIndex=65535 (0xffff)
>Srv2=0x7FFF
>Res2=0x105F200
>
>
>
>15:58:29.346288 IP (tos 0x0, ttl 64, id 57475, offset 0, flags [DF], proto TCP (6), length 84)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x81e1 (incorrect -> 0x9148), seq 567:611, ack 536, win 14600, length 44
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=40 (0x28)
>
>SMB PACKET: SMBsearch (REPLY)
>SMB Command   =  0x81
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x2
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  1 (0x1)
>Count=0 (0x0)
>smb_bcc=3
>BlkType=0x5
>BlkLen=0 (0x0)
>
>
>
>15:58:29.349248 IP (tos 0x0, ttl 30, id 18, offset 0, flags [none], proto TCP (6), length 79)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [P.], cksum 0xc90c (correct), seq 536:575, ack 611, win 1450, length 39
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=35 (0x23)
>
>SMB PACKET: SMBdskattr (REQUEST)
>SMB Command   =  0x80
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x0
>Flags2        =  0x0
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  0 (0x0)
>smb_bcc=0
>
>
>
>15:58:29.349677 IP (tos 0x0, ttl 64, id 57476, offset 0, flags [DF], proto TCP (6), length 89)
>    192.168.0.1.139 > 192.168.0.73.33802: Flags [P.], cksum 0x81e6 (incorrect -> 0x8ab3), seq 611:660, ack 575, win 14600, length 49
>>>> NBT Session Packet
>NBT Session Message
>Flags=0x0
>Length=45 (0x2d)
>
>SMB PACKET: SMBdskattr (REPLY)
>SMB Command   =  0x80
>Error class   =  0x0
>Error code    =  0 (0x0)
>Flags1        =  0x80
>Flags2        =  0x3
>Tree ID       =  1 (0x1)
>Proc ID       =  1334 (0x536)
>UID           =  100 (0x64)
>MID           =  0 (0x0)
>Word Count    =  5 (0x5)
>TotalUnits=65535 (0xffff)
>BlocksPerUnit=64 (0x40)
>BlockSize=512 (0x200)
>FreeUnits=65535 (0xffff)
>Media=0x0
>smb_bcc=0
>
>
>
>15:58:29.441026 IP (tos 0x0, ttl 30, id 19, offset 0, flags [none], proto TCP (6), length 40)
>    192.168.0.73.33802 > 192.168.0.1.139: Flags [.], cksum 0x30a3 (correct), seq 575, ack 660, win 1450, length 0
>

Actions: View

Attachments on bug 843765: 601948 | 601951 | 603041 | 603042