13:59:52.943845 IP (tos 0x0, ttl 64, id 45791, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6064241:6064966(725) ack 53650 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0xC5 Data: (41 bytes) [000] F6 27 59 E6 36 9C EE F8 BC C6 0F DA F4 AF BB B8 \366'Y\3466\234\356\370 \274\306\017\332\364\257\273\270 [010] 05 DC 47 FF 38 97 07 87 1C F9 2A FF 04 7A 3B 70 \005\334G\3778\227\007\207 \034\371*\377\004z;p [020] F5 1B 47 77 ED AD 98 74 44 \365\033Gw\355\255\230t D 13:59:53.180601 IP (tos 0x0, ttl 64, id 45874, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 13:59:53.600582 IP (tos 0x0, ttl 64, id 45875, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 13:59:54.440543 IP (tos 0x0, ttl 64, id 45876, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 13:59:56.120475 IP (tos 0x0, ttl 64, id 45877, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 13:59:59.480315 IP (tos 0x0, ttl 64, id 45878, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 14:00:06.200006 IP (tos 0x0, ttl 64, id 45879, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 14:00:19.639370 IP (tos 0x0, ttl 64, id 45880, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 53998 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 14:00:37.469645 IP (tos 0x0, ttl 30, id 29939, offset 0, flags [none], proto: TCP (6), length: 95) winxp.olb.test.45080 > master.olb.test.netbios-ssn: P 53998:54053(55) ack 6120349 win 1450 >>> NBT Session Packet NBT Session Message Flags=0x0 Length=51 (0x33) WARNING: Short packet. Try increasing the snap length by 13 SMB PACKET: SMBreadbraw (REQUEST) SMB Command = 0x1A Error class = 0x0 Error code = 0 (0x0) Flags1 = 0x0 Flags2 = 0x0 Tree ID = 1 (0x1) Proc ID = 11118 (0x2b6e) UID = 100 (0x64) MID = 0 (0x0) Word Count = 8 (0x8) Handle=12969 (0x32a9) Offset= WARNING: Short packet. Try increasing the snap length [|SMB] 14:00:37.508523 IP (tos 0x0, ttl 64, id 45881, offset 0, flags [DF], proto: TCP (6), length: 40) master.olb.test.netbios-ssn > winxp.olb.test.45080: ., cksum 0xf92d (correct), 6121799:6121799(0) ack 54053 win 5840 14:00:46.518110 IP (tos 0x0, ttl 64, id 45882, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6120349:6121074(725) ack 54053 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x58 Data: (41 bytes) [000] C9 8F 6C 61 C7 63 0D C6 9C 46 1B BA 7D A3 6F BE \311\217la\307c\015\306 \234F\033\272}\243o\276 [010] 89 CA DC C1 93 BE 83 38 F8 74 8F 36 53 10 0C 32 \211\312\334\301\223\276\2038 \370t\2176S\020\0142 [020] 9F 7E E4 DE C3 27 B7 75 F1 \237~\344\336\303'\267u \361 14:00:46.518432 IP (tos 0x0, ttl 30, id 29940, offset 0, flags [none], proto: TCP (6), length: 40) winxp.olb.test.45080 > master.olb.test.netbios-ssn: ., cksum 0x0ffe (correct), 54053:54053(0) ack 6121799 win 0 14:00:46.518433 IP (tos 0x0, ttl 30, id 29941, offset 0, flags [none], proto: TCP (6), length: 40) winxp.olb.test.45080 > master.olb.test.netbios-ssn: ., cksum 0x0a54 (correct), 54053:54053(0) ack 6121799 win 1450 14:00:46.518461 IP (tos 0x0, ttl 64, id 45883, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: . 6121799:6122524(725) ack 54053 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0x5C Data: (41 bytes) [000] DE A8 6A 5B 97 92 97 2C E1 BD D5 F5 4A 78 C4 CD \336\250j[\227\222\227, \341\275\325\365Jx\304\315 [010] EA 80 8A C7 22 DE 4C 8B 36 62 25 B4 7E 9C 59 4A \352\200\212\307"\336L\213 6b%\264~\234YJ [020] 0B 82 DD 51 C1 CC 6E 02 01 \013\202\335Q\301\314n\002 \001 14:00:46.518465 IP (tos 0x0, ttl 64, id 45884, offset 0, flags [DF], proto: TCP (6), length: 765) master.olb.test.netbios-ssn > winxp.olb.test.45080: P 6122524:6123249(725) ack 54053 win 5840 >>> NBT Session Packet NBT - Unknown packet type Type=0xE4 Data: (41 bytes) [000] 0F 27 26 95 D1 44 05 F4 FA F1 12 84 11 02 5C B1 \017'&\225\321D\005\364 \372\361\022\204\021\002\\261 [010] D6 C7 19 23 33 D6 47 EC B6 62 46 99 0D 1F A0 83 \326\307\031#3\326G\354 \266bF\231\015\037\240\203 [020] ED A2 8E 14 DF 1A 5F F3 CE \355\242\216\024\337\032_\363 \316