![]() |
|
Welcome to Vista Banter. You are currently viewing our boards as a guest which gives you limited access to view most discussions, articles and access our other FREE features. By joining our free community you will have access to ask questions and reply to others posts, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact contact support. |
|
|||||||
| Networking with Windows Vista Networking issues and questions with Windows Vista. (microsoft.public.windows.vista.networking_sharing) |
|
|
LinkBack | Thread Tools | Display Modes |
|
|||
|
How to contact a Linux Distro to Vista?
Normally I would contact a Linux machine by typing in smb://Ipaddress/sharename.(to vista machine) I have changed this registry setting on Vista HKLM\System\CurrentControlSet\Control\LSA\(REG_DWO RD)LmCompatibilityLevel to 2 and try. However, the Vista machine rejects user name and password. Any suggestions? thanks |
|
|||
|
Can you get a network capture and send it across ? What is the Linux distro you are using and the smbclient version ? Can you set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa\nolmhash =[dword] 00000000 on Vista and then see if it works ? If it doesnt then, can you also check- What is the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa\ForceGuest? Is guest account turned on? How did you grant access to the share? "David Sherman" wrote in message news ![]() How to contact a Linux Distro to Vista? Normally I would contact a Linux machine by typing in smb://Ipaddress/sharename.(to vista machine) I have changed this registry setting on Vista HKLM\System\CurrentControlSet\Control\LSA\(REG_DWO RD)LmCompatibilityLevel to 2 and try. However, the Vista machine rejects user name and password. Any suggestions? thanks |
|
|||
|
On Thu, 7 Sep 2006 15:28:55 -0700, "Prashanth Prahalad [MSFT]" wrote: Can you get a network capture and send it across ? What is the Linux distro you are using and the smbclient version ? Ubunto 6.10 LTS Samba client 3.0.2.2-1 Can you set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa\nolmhash =[dword] 00000000 on Vista and then see if it works ? I changed the value from to 0 If it doesnt then, can you also check- What is the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contr ol\Lsa\ForceGuest? Value is 0 Is guest account turned on? NO, default of 5600 has no guest How did you grant access to the share? Yes Capture No-- I have tried to use ethereal to capture the information but it shows nothing. Under fedora core 5, sue 10.1 amd ubunti, I type in url of share ( like smb://192.168.1.6/transfer) and get an authorization dialog box that askes me user name and password. I type that info and the dialog box is returned without the password. Thus the loop continues. even if I join a domain, I can't get connected "David Sherman" wrote in message news ![]() How to contact a Linux Distro to Vista? Normally I would contact a Linux machine by typing in smb://Ipaddress/sharename.(to vista machine) I have changed this registry setting on Vista HKLM\System\CurrentControlSet\Control\LSA\(REG_DWO RD)LmCompatibilityLevel to 2 and try. However, the Vista machine rejects user name and password. Any suggestions? thanks |
|
|||
|
A capture would be very useful. I'll try to see if I can get to reproduce the problem with our systems. Thanks ~ Prashanth "David Sherman" wrote in message ... On Thu, 7 Sep 2006 15:28:55 -0700, "Prashanth Prahalad [MSFT]" wrote: Can you get a network capture and send it across ? What is the Linux distro you are using and the smbclient version ? Ubunto 6.10 LTS Samba client 3.0.2.2-1 Can you set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Cont rol\Lsa\nolmhash =[dword] 00000000 on Vista and then see if it works ? I changed the value from to 0 If it doesnt then, can you also check- What is the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Cont rol\Lsa\ForceGuest? Value is 0 Is guest account turned on? NO, default of 5600 has no guest How did you grant access to the share? Yes Capture No-- I have tried to use ethereal to capture the information but it shows nothing. Under fedora core 5, sue 10.1 amd ubunti, I type in url of share ( like smb://192.168.1.6/transfer) and get an authorization dialog box that askes me user name and password. I type that info and the dialog box is returned without the password. Thus the loop continues. even if I join a domain, I can't get connected "David Sherman" wrote in message news ![]() How to contact a Linux Distro to Vista? Normally I would contact a Linux machine by typing in smb://Ipaddress/sharename.(to vista machine) I have changed this registry setting on Vista HKLM\System\CurrentControlSet\Control\LSA\(REG_DWO RD)LmCompatibilityLevel to 2 and try. However, the Vista machine rejects user name and password. Any suggestions? thanks |
|
|||
|
Here is the capture file:
No. "Time" "Source" "Destination" "Protocol" "Info" 1 "0.000000" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 2 "0.000749" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 3 "0.001054" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70694 opnum: 8 ctx_id: 0" 4 "0.001377" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=0 Ack=2920 Win=65535 Len=0" 5 "0.002111" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 6 "0.002115" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 7 "0.002118" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=3028 Ack=2920 Win=65535 Len=0" 8 "0.002121" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70694 ctx_id: 0" 9 "0.126744" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=3028 Ack=2980 Win=65475 Len=0" 10 "6.742005" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 11 "6.742318" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 12 "6.742566" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70695 opnum: 8 ctx_id: 0" 13 "6.742920" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=2980 Ack=5948 Win=65535 Len=0" 14 "6.743136" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 15 "6.743140" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 16 "6.743143" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=6056 Ack=5900 Win=65535 Len=0" 17 "6.743146" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70695 ctx_id: 0" 18 "6.845244" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=6056 Ack=5960 Win=65475 Len=0" 19 "8.969661" "Vmware_a6:5a:62" "Broadcast" "ARP" "Who has 192.168.1.8? Tell 192.168.1.7" 20 "8.970107" "BelkinCo_6e:90:52" "Vmware_a6:5a:62" "ARP" "192.168.1.8 is at 00:30:bd:6e:90:52" 21 "8.970551" "192.168.1.7" "192.168.1.8" "TCP" "38492 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=101246 TSER=0 WS=7" 22 "8.971568" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38492 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34390838 TSER=101246" 23 "8.971738" "192.168.1.7" "192.168.1.8" "TCP" "38492 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=101248 TSER=34390838" 24 "8.981785" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to 192.168.1.820 from BOXKNOPIX00" 25 "8.982126" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 26 "8.982645" "192.168.1.7" "192.168.1.8" "TCP" "38492 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=101250 TSER=34390840" 27 "8.982894" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38492 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34390840 TSER=101250" 28 "8.983430" "192.168.1.7" "192.168.1.8" "TCP" "38493 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=101251 TSER=0 WS=7" 29 "8.985180" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38493 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34390840 TSER=101251" 30 "8.985350" "192.168.1.7" "192.168.1.8" "TCP" "38493 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=101251 TSER=34390840" 31 "9.001553" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to *SMBSERVER20 from BOXKNOPIX00" 32 "9.001912" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 33 "9.002085" "192.168.1.7" "192.168.1.8" "TCP" "38493 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=101255 TSER=34390843" 34 "9.002309" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38493 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34390843 TSER=101255" 35 "9.002871" "192.168.1.7" "192.168.1.8" "NBNS" "Name query NBSTAT *000000000000000000000000 000000" 36 "9.003400" "192.168.1.8" "192.168.1.7" "NBNS" "Name query response NBSTAT" 37 "9.003911" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=101256 TSER=0 WS=7" 38 "9.005527" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38494 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34390843 TSER=101256" 39 "9.005575" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=101256 TSER=34390843" 40 "9.021528" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to XPTEST20 from BOXKNOPIX00" 41 "9.021891" "192.168.1.8" "192.168.1.7" "NBSS" "Positive session response" 42 "9.021923" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [ACK] Seq=73 Ack=5 Win=5888 Len=0 TSV=101260 TSER=34390846" 43 "9.025664" "192.168.1.7" "192.168.1.8" "SMB" "Negotiate Protocol Request" 44 "9.026591" "192.168.1.8" "192.168.1.7" "SMB" "Negotiate Protocol Response" 45 "9.027190" "192.168.1.7" "192.168.1.8" "SMB" "Session Setup AndX Request User: anonymous" 46 "9.027657" "192.168.1.8" "192.168.1.7" "SMB" "Session Setup AndX Response" 47 "9.035717" "192.168.1.7" "192.168.1.8" "SMB" "Tree Connect AndX Request Path: \\192.168.1.8\IPC$" 48 "9.036197" "192.168.1.8" "192.168.1.7" "SMB" "Tree Connect AndX Response" 49 "9.053418" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 50 "9.053795" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 51 "9.054075" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 52 "9.054504" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 53 "9.093493" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [ACK] Seq=657 Ack=473 Win=8064 Len=0 TSV=101278 TSER=34390850" 54 "10.117260" "192.168.1.3" "63.208.197.213" "TCP" "2145 32976 [PSH ACK] Seq=0 Ack=0 Win=64742 Len=52" 55 "10.163361" "63.208.197.213" "192.168.1.3" "TCP" "32976 2145 [ACK] Seq=0 Ack=52 Win=6432 Len=0" 56 "13.327584" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 57 "13.327935" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 58 "13.328148" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70696 opnum: 8 ctx_id: 0" 59 "13.328407" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=5960 Ack=8976 Win=65535 Len=0" 60 "13.329141" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 61 "13.329146" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 62 "13.329150" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=9084 Ack=8880 Win=65535 Len=0" 63 "13.329153" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70696 ctx_id: 0" 64 "13.398490" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=9084 Ack=8940 Win=65475 Len=0" 65 "13.471567" "LinksysG_c0:d0:9b" "AsustekC_03:64:c7" "ARP" "Who has 192.168.1.3? Tell 192.168.1.1" 66 "13.471572" "AsustekC_03:64:c7" "LinksysG_c0:d0:9b" "ARP" "192.168.1.3 is at 00:11:2f:03:64:c7" 67 "14.605702" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70697 opnum: 69 ctx_id: 0" 68 "14.606790" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70697 ctx_id: 0" 69 "14.608121" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70698 opnum: 26 ctx_id: 0" 70 "14.608691" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70698 ctx_id: 0" 71 "14.610233" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70699 opnum: 29 ctx_id: 0" 72 "14.610834" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70699 ctx_id: 0" 73 "14.723656" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=9676 Ack=9260 Win=65155 Len=0" 74 "16.751179" "192.168.1.7" "192.168.1.8" "TCP" "38495 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=103192 TSER=0 WS=7" 75 "16.751707" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38495 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34392029 TSER=103192" 76 "16.751714" "192.168.1.7" "192.168.1.8" "TCP" "38495 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=103192 TSER=34392029" 77 "16.767903" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to 192.168.1.820 from BOXKNOPIX00" 78 "16.768265" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 79 "16.768448" "192.168.1.7" "192.168.1.8" "TCP" "38495 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=103197 TSER=34392033" 80 "16.768699" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38495 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34392033 TSER=103197" 81 "16.768945" "192.168.1.7" "192.168.1.8" "TCP" "38496 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=103197 TSER=0 WS=7" 82 "16.771585" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38496 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34392033 TSER=103197" 83 "16.771647" "192.168.1.7" "192.168.1.8" "TCP" "38496 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=103197 TSER=34392033" 84 "16.787697" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to *SMBSERVER20 from BOXKNOPIX00" 85 "16.787932" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 86 "16.788122" "192.168.1.7" "192.168.1.8" "TCP" "38496 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=103202 TSER=34392038" 87 "16.788414" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38496 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34392038 TSER=103202" 88 "16.788669" "192.168.1.7" "192.168.1.8" "NBNS" "Name query NBSTAT *000000000000000000000000 000000" 89 "16.789007" "192.168.1.8" "192.168.1.7" "NBNS" "Name query response NBSTAT" 90 "16.789541" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=103202 TSER=0 WS=7" 91 "16.791312" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38497 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34392039 TSER=103202" 92 "16.791508" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=103202 TSER=34392039" 93 "16.807665" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to XPTEST20 from BOXKNOPIX00" 94 "16.807946" "192.168.1.8" "192.168.1.7" "NBSS" "Positive session response" 95 "16.807979" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [ACK] Seq=73 Ack=5 Win=5888 Len=0 TSV=103207 TSER=34392043" 96 "16.808190" "192.168.1.7" "192.168.1.8" "SMB" "Negotiate Protocol Request" 97 "16.808873" "192.168.1.8" "192.168.1.7" "SMB" "Negotiate Protocol Response" 98 "16.809175" "192.168.1.7" "192.168.1.8" "SMB" "Session Setup AndX Request User: anonymous" 99 "16.809587" "192.168.1.8" "192.168.1.7" "SMB" "Session Setup AndX Response" 100 "16.809763" "192.168.1.7" "192.168.1.8" "SMB" "Tree Connect AndX Request Path: \\192.168.1.8\IPC$" 101 "16.810122" "192.168.1.8" "192.168.1.7" "SMB" "Tree Connect AndX Response" 102 "16.810259" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 103 "16.810551" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 104 "16.810667" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 105 "16.810955" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 106 "16.814181" "192.168.1.7" "192.168.1.8" "NBSS" "Session keep-alive" 107 "16.814533" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 108 "16.814814" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38497 [ACK] Seq=473 Ack=765 Win=65792 Len=0 TSV=34392044 TSER=103208" 109 "16.814817" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 110 "16.815127" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 111 "16.815446" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 112 "16.855578" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [ACK] Seq=878 Ack=551 Win=8064 Len=0 TSV=103218 TSER=34392044" 113 "19.745935" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 114 "19.746313" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 115 "19.746547" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70700 opnum: 8 ctx_id: 0" 116 "19.747071" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=9260 Ack=12596 Win=65535 Len=0" 117 "19.747586" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 118 "19.747591" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 119 "19.747594" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=12704 Ack=12180 Win=65535 Len=0" 120 "19.747597" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70700 ctx_id: 0" 121 "19.857047" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=12704 Ack=12240 Win=65475 Len=0" 122 "26.220394" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 123 "26.220724" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 124 "26.220965" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70701 opnum: 8 ctx_id: 0" 125 "26.221350" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=12240 Ack=15624 Win=65535 Len=0" 126 "26.222160" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 127 "26.222166" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 128 "26.222169" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=15732 Ack=15160 Win=65535 Len=0" 129 "26.222171" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70701 ctx_id: 0" 130 "26.305337" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=15732 Ack=15220 Win=65475 Len=0" 131 "27.939477" "192.168.1.7" "192.168.1.8" "TCP" "38498 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=105989 TSER=0 WS=7" 132 "27.939943" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38498 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34393762 TSER=105989" 133 "27.940070" "192.168.1.7" "192.168.1.8" "TCP" "38498 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=105989 TSER=34393762" 134 "27.953084" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to 192.168.1.820 from BOXKNOPIX00" 135 "27.954087" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 136 "27.954835" "192.168.1.7" "192.168.1.8" "TCP" "38498 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=105993 TSER=34393766" 137 "27.955099" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38498 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34393766 TSER=105993" 138 "27.955366" "192.168.1.7" "192.168.1.8" "TCP" "38499 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=105993 TSER=0 WS=7" 139 "27.956509" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38499 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34393766 TSER=105993" 140 "27.956580" "192.168.1.7" "192.168.1.8" "TCP" "38499 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=105994 TSER=34393766" 141 "27.958641" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [SYN] Seq=0 Len=0 MSS=1460" 142 "27.969077" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to *SMBSERVER20 from BOXKNOPIX00" 143 "27.969399" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 144 "27.969689" "192.168.1.7" "192.168.1.8" "TCP" "38499 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=105997 TSER=34393768" 145 "27.969922" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38499 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34393769 TSER=105997" 146 "27.970076" "192.168.1.7" "192.168.1.8" "NBNS" "Name query NBSTAT *000000000000000000000000 000000" 147 "27.970405" "192.168.1.8" "192.168.1.7" "NBNS" "Name query response NBSTAT" 148 "27.970774" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=105997 TSER=0 WS=7" 149 "27.972549" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38500 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34393769 TSER=105997" 150 "27.972606" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=105998 TSER=34393769" 151 "27.985013" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to XPTEST20 from BOXKNOPIX00" 152 "27.985316" "192.168.1.8" "192.168.1.7" "NBSS" "Positive session response" 153 "27.985355" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [ACK] Seq=73 Ack=5 Win=5888 Len=0 TSV=106001 TSER=34393771" 154 "27.985552" "192.168.1.7" "192.168.1.8" "SMB" "Negotiate Protocol Request" 155 "27.986211" "192.168.1.8" "192.168.1.7" "SMB" "Negotiate Protocol Response" 156 "27.986476" "192.168.1.7" "192.168.1.8" "SMB" "Session Setup AndX Request User: anonymous" 157 "27.986893" "192.168.1.8" "192.168.1.7" "SMB" "Session Setup AndX Response" 158 "27.987047" "192.168.1.7" "192.168.1.8" "SMB" "Tree Connect AndX Request Path: \\192.168.1.8\IPC$" 159 "27.987407" "192.168.1.8" "192.168.1.7" "SMB" "Tree Connect AndX Response" 160 "27.987545" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 161 "27.987843" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 162 "27.987957" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 163 "27.988261" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 164 "27.991385" "192.168.1.7" "192.168.1.8" "NBSS" "Session keep-alive" 165 "27.991740" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 166 "27.992023" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38500 [ACK] Seq=473 Ack=765 Win=65792 Len=0 TSV=34393771 TSER=106002" 167 "27.992027" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 168 "27.992203" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 169 "27.992444" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 170 "28.000466" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [SYN ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1452" 171 "28.000471" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [ACK] Seq=1 Ack=1 Win=65535 Len=0" 172 "28.024509" "192.168.1.3" "68.22.73.140" "HTTP" "GET /wxpsta/maps/wxp032/radar/d640x480/default.jpeg HTTP/1.0" 173 "28.032916" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [ACK] Seq=878 Ack=551 Win=8064 Len=0 TSV=106013 TSER=34393771" 174 "28.056920" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [ACK] Seq=1 Ack=239 Win=6432 Len=0" 175 "28.180479" "68.22.73.140" "192.168.1.3" "HTTP" "HTTP/1.0 304 Not Modified" 176 "28.180486" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [FIN ACK] Seq=186 Ack=239 Win=6432 Len=0" 177 "28.180488" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [ACK] Seq=239 Ack=187 Win=65350 Len=0" 178 "28.192524" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [FIN ACK] Seq=239 Ack=187 Win=65350 Len=0" 179 "28.208523" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [ACK] Seq=187 Ack=240 Win=6432 Len=0" 180 "31.680573" "192.168.1.2" "192.168.1.3" "NBSS" "NBSS Continuation Message" 181 "31.680578" "192.168.1.3" "192.168.1.2" "TCP" "kpop microsoft-ds [ACK] Seq=0 Ack=1 Win=64705 Len=0" 182 "32.762474" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 183 "32.762906" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 184 "32.763152" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70702 opnum: 8 ctx_id: 0" 185 "32.763484" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=15220 Ack=18652 Win=65535 Len=0" 186 "32.763802" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 187 "32.763825" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 188 "32.763829" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=18760 Ack=18140 Win=65535 Len=0" 189 "32.763831" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70702 ctx_id: 0" 190 "32.817856" "192.168.1.3" "192.168.1.8" "NBSS" "NBSS Continuation Message" 191 "32.818072" "192.168.1.8" "192.168.1.3" "TCP" "49215 netbios-ssn [ACK] Seq=0 Ack=1 Win=255 Len=0 SLE=0 SRE=1" 192 "32.888767" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=18760 Ack=18200 Win=65475 Len=0" 193 "34.052905" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70703 opnum: 69 ctx_id: 0" 194 "34.053838" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70703 ctx_id: 0" 195 "34.053844" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70704 opnum: 26 ctx_id: 0" 196 "34.054091" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70704 ctx_id: 0" 197 "34.054480" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70705 opnum: 29 ctx_id: 0" 198 "34.054958" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70705 ctx_id: 0" 199 "34.189968" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=19352 Ack=18520 Win=65155 Len=0" |
|
|||
|
David,
Looking at frame 49/50 among others, the server is failing with ERROR_ACCESS_DENIED implying that the server doesnt recognize the user credentials. Is the username/password you are using a member of the administrators group ? Can you try accessing the the vista machine with the administrator cred i.e try vistamachine\administrator and password Please followup with me offline if you are still experiencing problems. Thanks, Prashanth "David Sherman" wrote in message ... Here is the capture file: No. "Time" "Source" "Destination" "Protocol" "Info" 1 "0.000000" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 2 "0.000749" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 3 "0.001054" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70694 opnum: 8 ctx_id: 0" 4 "0.001377" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=0 Ack=2920 Win=65535 Len=0" 5 "0.002111" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 6 "0.002115" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 7 "0.002118" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=3028 Ack=2920 Win=65535 Len=0" 8 "0.002121" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70694 ctx_id: 0" 9 "0.126744" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=3028 Ack=2980 Win=65475 Len=0" 10 "6.742005" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 11 "6.742318" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 12 "6.742566" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70695 opnum: 8 ctx_id: 0" 13 "6.742920" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=2980 Ack=5948 Win=65535 Len=0" 14 "6.743136" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 15 "6.743140" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 16 "6.743143" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=6056 Ack=5900 Win=65535 Len=0" 17 "6.743146" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70695 ctx_id: 0" 18 "6.845244" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=6056 Ack=5960 Win=65475 Len=0" 19 "8.969661" "Vmware_a6:5a:62" "Broadcast" "ARP" "Who has 192.168.1.8? Tell 192.168.1.7" 20 "8.970107" "BelkinCo_6e:90:52" "Vmware_a6:5a:62" "ARP" "192.168.1.8 is at 00:30:bd:6e:90:52" 21 "8.970551" "192.168.1.7" "192.168.1.8" "TCP" "38492 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=101246 TSER=0 WS=7" 22 "8.971568" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38492 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34390838 TSER=101246" 23 "8.971738" "192.168.1.7" "192.168.1.8" "TCP" "38492 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=101248 TSER=34390838" 24 "8.981785" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to 192.168.1.820 from BOXKNOPIX00" 25 "8.982126" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 26 "8.982645" "192.168.1.7" "192.168.1.8" "TCP" "38492 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=101250 TSER=34390840" 27 "8.982894" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38492 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34390840 TSER=101250" 28 "8.983430" "192.168.1.7" "192.168.1.8" "TCP" "38493 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=101251 TSER=0 WS=7" 29 "8.985180" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38493 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34390840 TSER=101251" 30 "8.985350" "192.168.1.7" "192.168.1.8" "TCP" "38493 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=101251 TSER=34390840" 31 "9.001553" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to *SMBSERVER20 from BOXKNOPIX00" 32 "9.001912" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 33 "9.002085" "192.168.1.7" "192.168.1.8" "TCP" "38493 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=101255 TSER=34390843" 34 "9.002309" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38493 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34390843 TSER=101255" 35 "9.002871" "192.168.1.7" "192.168.1.8" "NBNS" "Name query NBSTAT *000000000000000000000000 000000" 36 "9.003400" "192.168.1.8" "192.168.1.7" "NBNS" "Name query response NBSTAT" 37 "9.003911" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=101256 TSER=0 WS=7" 38 "9.005527" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38494 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34390843 TSER=101256" 39 "9.005575" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=101256 TSER=34390843" 40 "9.021528" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to XPTEST20 from BOXKNOPIX00" 41 "9.021891" "192.168.1.8" "192.168.1.7" "NBSS" "Positive session response" 42 "9.021923" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [ACK] Seq=73 Ack=5 Win=5888 Len=0 TSV=101260 TSER=34390846" 43 "9.025664" "192.168.1.7" "192.168.1.8" "SMB" "Negotiate Protocol Request" 44 "9.026591" "192.168.1.8" "192.168.1.7" "SMB" "Negotiate Protocol Response" 45 "9.027190" "192.168.1.7" "192.168.1.8" "SMB" "Session Setup AndX Request User: anonymous" 46 "9.027657" "192.168.1.8" "192.168.1.7" "SMB" "Session Setup AndX Response" 47 "9.035717" "192.168.1.7" "192.168.1.8" "SMB" "Tree Connect AndX Request Path: \\192.168.1.8\IPC$" 48 "9.036197" "192.168.1.8" "192.168.1.7" "SMB" "Tree Connect AndX Response" 49 "9.053418" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 50 "9.053795" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 51 "9.054075" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 52 "9.054504" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 53 "9.093493" "192.168.1.7" "192.168.1.8" "TCP" "38494 netbios-ssn [ACK] Seq=657 Ack=473 Win=8064 Len=0 TSV=101278 TSER=34390850" 54 "10.117260" "192.168.1.3" "63.208.197.213" "TCP" "2145 32976 [PSH ACK] Seq=0 Ack=0 Win=64742 Len=52" 55 "10.163361" "63.208.197.213" "192.168.1.3" "TCP" "32976 2145 [ACK] Seq=0 Ack=52 Win=6432 Len=0" 56 "13.327584" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 57 "13.327935" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 58 "13.328148" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70696 opnum: 8 ctx_id: 0" 59 "13.328407" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=5960 Ack=8976 Win=65535 Len=0" 60 "13.329141" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 61 "13.329146" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 62 "13.329150" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=9084 Ack=8880 Win=65535 Len=0" 63 "13.329153" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70696 ctx_id: 0" 64 "13.398490" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=9084 Ack=8940 Win=65475 Len=0" 65 "13.471567" "LinksysG_c0:d0:9b" "AsustekC_03:64:c7" "ARP" "Who has 192.168.1.3? Tell 192.168.1.1" 66 "13.471572" "AsustekC_03:64:c7" "LinksysG_c0:d0:9b" "ARP" "192.168.1.3 is at 00:11:2f:03:64:c7" 67 "14.605702" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70697 opnum: 69 ctx_id: 0" 68 "14.606790" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70697 ctx_id: 0" 69 "14.608121" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70698 opnum: 26 ctx_id: 0" 70 "14.608691" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70698 ctx_id: 0" 71 "14.610233" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70699 opnum: 29 ctx_id: 0" 72 "14.610834" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70699 ctx_id: 0" 73 "14.723656" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=9676 Ack=9260 Win=65155 Len=0" 74 "16.751179" "192.168.1.7" "192.168.1.8" "TCP" "38495 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=103192 TSER=0 WS=7" 75 "16.751707" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38495 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34392029 TSER=103192" 76 "16.751714" "192.168.1.7" "192.168.1.8" "TCP" "38495 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=103192 TSER=34392029" 77 "16.767903" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to 192.168.1.820 from BOXKNOPIX00" 78 "16.768265" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 79 "16.768448" "192.168.1.7" "192.168.1.8" "TCP" "38495 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=103197 TSER=34392033" 80 "16.768699" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38495 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34392033 TSER=103197" 81 "16.768945" "192.168.1.7" "192.168.1.8" "TCP" "38496 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=103197 TSER=0 WS=7" 82 "16.771585" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38496 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34392033 TSER=103197" 83 "16.771647" "192.168.1.7" "192.168.1.8" "TCP" "38496 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=103197 TSER=34392033" 84 "16.787697" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to *SMBSERVER20 from BOXKNOPIX00" 85 "16.787932" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 86 "16.788122" "192.168.1.7" "192.168.1.8" "TCP" "38496 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=103202 TSER=34392038" 87 "16.788414" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38496 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34392038 TSER=103202" 88 "16.788669" "192.168.1.7" "192.168.1.8" "NBNS" "Name query NBSTAT *000000000000000000000000 000000" 89 "16.789007" "192.168.1.8" "192.168.1.7" "NBNS" "Name query response NBSTAT" 90 "16.789541" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=103202 TSER=0 WS=7" 91 "16.791312" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38497 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34392039 TSER=103202" 92 "16.791508" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=103202 TSER=34392039" 93 "16.807665" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to XPTEST20 from BOXKNOPIX00" 94 "16.807946" "192.168.1.8" "192.168.1.7" "NBSS" "Positive session response" 95 "16.807979" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [ACK] Seq=73 Ack=5 Win=5888 Len=0 TSV=103207 TSER=34392043" 96 "16.808190" "192.168.1.7" "192.168.1.8" "SMB" "Negotiate Protocol Request" 97 "16.808873" "192.168.1.8" "192.168.1.7" "SMB" "Negotiate Protocol Response" 98 "16.809175" "192.168.1.7" "192.168.1.8" "SMB" "Session Setup AndX Request User: anonymous" 99 "16.809587" "192.168.1.8" "192.168.1.7" "SMB" "Session Setup AndX Response" 100 "16.809763" "192.168.1.7" "192.168.1.8" "SMB" "Tree Connect AndX Request Path: \\192.168.1.8\IPC$" 101 "16.810122" "192.168.1.8" "192.168.1.7" "SMB" "Tree Connect AndX Response" 102 "16.810259" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 103 "16.810551" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 104 "16.810667" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 105 "16.810955" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 106 "16.814181" "192.168.1.7" "192.168.1.8" "NBSS" "Session keep-alive" 107 "16.814533" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 108 "16.814814" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38497 [ACK] Seq=473 Ack=765 Win=65792 Len=0 TSV=34392044 TSER=103208" 109 "16.814817" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 110 "16.815127" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 111 "16.815446" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 112 "16.855578" "192.168.1.7" "192.168.1.8" "TCP" "38497 netbios-ssn [ACK] Seq=878 Ack=551 Win=8064 Len=0 TSV=103218 TSER=34392044" 113 "19.745935" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 114 "19.746313" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 115 "19.746547" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70700 opnum: 8 ctx_id: 0" 116 "19.747071" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=9260 Ack=12596 Win=65535 Len=0" 117 "19.747586" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 118 "19.747591" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 119 "19.747594" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=12704 Ack=12180 Win=65535 Len=0" 120 "19.747597" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70700 ctx_id: 0" 121 "19.857047" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=12704 Ack=12240 Win=65475 Len=0" 122 "26.220394" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 123 "26.220724" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 124 "26.220965" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70701 opnum: 8 ctx_id: 0" 125 "26.221350" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=12240 Ack=15624 Win=65535 Len=0" 126 "26.222160" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 127 "26.222166" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 128 "26.222169" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=15732 Ack=15160 Win=65535 Len=0" 129 "26.222171" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70701 ctx_id: 0" 130 "26.305337" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=15732 Ack=15220 Win=65475 Len=0" 131 "27.939477" "192.168.1.7" "192.168.1.8" "TCP" "38498 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=105989 TSER=0 WS=7" 132 "27.939943" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38498 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34393762 TSER=105989" 133 "27.940070" "192.168.1.7" "192.168.1.8" "TCP" "38498 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=105989 TSER=34393762" 134 "27.953084" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to 192.168.1.820 from BOXKNOPIX00" 135 "27.954087" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 136 "27.954835" "192.168.1.7" "192.168.1.8" "TCP" "38498 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=105993 TSER=34393766" 137 "27.955099" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38498 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34393766 TSER=105993" 138 "27.955366" "192.168.1.7" "192.168.1.8" "TCP" "38499 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=105993 TSER=0 WS=7" 139 "27.956509" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38499 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34393766 TSER=105993" 140 "27.956580" "192.168.1.7" "192.168.1.8" "TCP" "38499 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=105994 TSER=34393766" 141 "27.958641" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [SYN] Seq=0 Len=0 MSS=1460" 142 "27.969077" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to *SMBSERVER20 from BOXKNOPIX00" 143 "27.969399" "192.168.1.8" "192.168.1.7" "NBSS" "Negative session response Called name not present" 144 "27.969689" "192.168.1.7" "192.168.1.8" "TCP" "38499 netbios-ssn [FIN ACK] Seq=73 Ack=7 Win=5888 Len=0 TSV=105997 TSER=34393768" 145 "27.969922" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38499 [ACK] Seq=7 Ack=74 Win=66560 Len=0 TSV=34393769 TSER=105997" 146 "27.970076" "192.168.1.7" "192.168.1.8" "NBNS" "Name query NBSTAT *000000000000000000000000 000000" 147 "27.970405" "192.168.1.8" "192.168.1.7" "NBNS" "Name query response NBSTAT" 148 "27.970774" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [SYN] Seq=0 Len=0 MSS=1460 TSV=105997 TSER=0 WS=7" 149 "27.972549" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38500 [SYN ACK] Seq=0 Ack=1 Win=2097152 Len=0 MSS=1460 WS=8 TSV=34393769 TSER=105997" 150 "27.972606" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=105998 TSER=34393769" 151 "27.985013" "192.168.1.7" "192.168.1.8" "NBSS" "Session request to XPTEST20 from BOXKNOPIX00" 152 "27.985316" "192.168.1.8" "192.168.1.7" "NBSS" "Positive session response" 153 "27.985355" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [ACK] Seq=73 Ack=5 Win=5888 Len=0 TSV=106001 TSER=34393771" 154 "27.985552" "192.168.1.7" "192.168.1.8" "SMB" "Negotiate Protocol Request" 155 "27.986211" "192.168.1.8" "192.168.1.7" "SMB" "Negotiate Protocol Response" 156 "27.986476" "192.168.1.7" "192.168.1.8" "SMB" "Session Setup AndX Request User: anonymous" 157 "27.986893" "192.168.1.8" "192.168.1.7" "SMB" "Session Setup AndX Response" 158 "27.987047" "192.168.1.7" "192.168.1.8" "SMB" "Tree Connect AndX Request Path: \\192.168.1.8\IPC$" 159 "27.987407" "192.168.1.8" "192.168.1.7" "SMB" "Tree Connect AndX Response" 160 "27.987545" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 161 "27.987843" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 162 "27.987957" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 163 "27.988261" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 164 "27.991385" "192.168.1.7" "192.168.1.8" "NBSS" "Session keep-alive" 165 "27.991740" "192.168.1.7" "192.168.1.8" "SMB" "NT Create AndX Request Path: \srvsvc" 166 "27.992023" "192.168.1.8" "192.168.1.7" "TCP" "netbios-ssn 38500 [ACK] Seq=473 Ack=765 Win=65792 Len=0 TSV=34393771 TSER=106002" 167 "27.992027" "192.168.1.8" "192.168.1.7" "SMB" "NT Create AndX Response Error: STATUS_ACCESS_DENIED" 168 "27.992203" "192.168.1.7" "192.168.1.8" "LANMAN" "NetShareEnum Request" 169 "27.992444" "192.168.1.8" "192.168.1.7" "SMB" "Trans Response Error: STATUS_ACCESS_DENIED" 170 "28.000466" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [SYN ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1452" 171 "28.000471" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [ACK] Seq=1 Ack=1 Win=65535 Len=0" 172 "28.024509" "192.168.1.3" "68.22.73.140" "HTTP" "GET /wxpsta/maps/wxp032/radar/d640x480/default.jpeg HTTP/1.0" 173 "28.032916" "192.168.1.7" "192.168.1.8" "TCP" "38500 netbios-ssn [ACK] Seq=878 Ack=551 Win=8064 Len=0 TSV=106013 TSER=34393771" 174 "28.056920" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [ACK] Seq=1 Ack=239 Win=6432 Len=0" 175 "28.180479" "68.22.73.140" "192.168.1.3" "HTTP" "HTTP/1.0 304 Not Modified" 176 "28.180486" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [FIN ACK] Seq=186 Ack=239 Win=6432 Len=0" 177 "28.180488" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [ACK] Seq=239 Ack=187 Win=65350 Len=0" 178 "28.192524" "192.168.1.3" "68.22.73.140" "TCP" "4500 www [FIN ACK] Seq=239 Ack=187 Win=65350 Len=0" 179 "28.208523" "68.22.73.140" "192.168.1.3" "TCP" "www 4500 [ACK] Seq=187 Ack=240 Win=6432 Len=0" 180 "31.680573" "192.168.1.2" "192.168.1.3" "NBSS" "NBSS Continuation Message" 181 "31.680578" "192.168.1.3" "192.168.1.2" "TCP" "kpop microsoft-ds [ACK] Seq=0 Ack=1 Win=64705 Len=0" 182 "32.762474" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 183 "32.762906" "192.168.1.3" "192.168.1.2" "TCP" "[TCP segment of a reassembled PDU]" 184 "32.763152" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70702 opnum: 8 ctx_id: 0" 185 "32.763484" "192.168.1.2" "192.168.1.3" "TCP" "microsoft-ds 2207 [ACK] Seq=15220 Ack=18652 Win=65535 Len=0" 186 "32.763802" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 187 "32.763825" "192.168.1.2" "192.168.1.3" "TCP" "[TCP segment of a reassembled PDU]" 188 "32.763829" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=18760 Ack=18140 Win=65535 Len=0" 189 "32.763831" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70702 ctx_id: 0" 190 "32.817856" "192.168.1.3" "192.168.1.8" "NBSS" "NBSS Continuation Message" 191 "32.818072" "192.168.1.8" "192.168.1.3" "TCP" "49215 netbios-ssn [ACK] Seq=0 Ack=1 Win=255 Len=0 SLE=0 SRE=1" 192 "32.888767" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=18760 Ack=18200 Win=65475 Len=0" 193 "34.052905" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70703 opnum: 69 ctx_id: 0" 194 "34.053838" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70703 ctx_id: 0" 195 "34.053844" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70704 opnum: 26 ctx_id: 0" 196 "34.054091" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70704 ctx_id: 0" 197 "34.054480" "192.168.1.3" "192.168.1.2" "DCERPC" "Request: call_id: 70705 opnum: 29 ctx_id: 0" 198 "34.054958" "192.168.1.2" "192.168.1.3" "DCERPC" "Response: call_id: 70705 ctx_id: 0" 199 "34.189968" "192.168.1.3" "192.168.1.2" "TCP" "2207 microsoft-ds [ACK] Seq=19352 Ack=18520 Win=65155 Len=0" |