15:05:28.449191 192.168.1.15.33209 > 192.168.1.11.139: P 3053335745:3053335789(44) ack 1720576199 win 26136 >>> NBT Packet NBT Session Packet Flags=0x0 Length=40 (0x28) SMB PACKET: SMBchkpth (REQUEST) (DF) 15:05:28.449923 192.168.1.11.139 > 192.168.1.15.33209: P 1:40(39) ack 44 win 8059 >>> NBT Packet NBT Session Packet Flags=0x0 Length=35 (0x23) SMB PACKET: SMBchkpth (REPLY) (DF) 15:05:28.549592 192.168.1.15.33209 > 192.168.1.11.139: . ack 40 win 26136 (DF) 15:05:29.291640 192.168.1.15.33209 > 192.168.1.11.139: P 44:146(102) ack 40 win 26136 >>> NBT Packet NBT Session Packet Flags=0x0 Length=98 (0x62) SMB PACKET: SMBtrans2 (REQUEST) (DF) 15:05:29.294880 192.168.1.11.139 > 192.168.1.15.33209: . 40:1492(1452) ack 146 win 7957 >>> NBT Packet NBT Session Packet Flags=0x0 Length=4336 (0x10f0) WARNING: Short packet. Try increasing the snap length (1448) SMB PACKET: SMBtrans2 (REPLY) (DF) 15:05:29.295059 192.168.1.11.139 > 192.168.1.15.33209: . 1492:2944(1452) ack 146 win 7957 >>> NBT Packet flags=0x69 NBT - Unknown packet type Type=0x69006D00 Data: (1448 bytes) [000] 39 00 35 00 70 00 00 00 00 00 00 00 80 FA 2E 50 9.5.p... .......P [010] 77 6F BE 01 F4 E1 53 11 54 77 C4 01 00 EC 92 7D wo....S. Tw.....} [020] F9 56 C0 01 F0 46 3D B4 96 86 C4 01 18 00 00 00 .V...F=. ........ [030] 00 00 00 00 18 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [040] 0E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 41 00 4F 00 43 00 2E 00 49 00 4E 00 49 00 ..A.O.C. ..I.N.I. [070] 00 00 00 00 70 00 00 00 00 00 00 00 14 15 11 F0 ....p... ........ [080] 05 95 C3 01 5A A0 F2 82 55 2E C5 01 14 15 11 F0 ....Z... U....... [090] 05 95 C3 01 14 15 11 F0 05 95 C3 01 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 ........ ........ [0B0] 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 41 00 70 00 70 00 50 00 61 00 74 00 63 00 ..A.p.p. P.a.t.c. [0E0] 68 00 00 00 78 00 00 00 00 00 00 00 80 3B E4 C3 h...x... .....;.. [0F0] 1A 5D BE 01 2E A0 61 11 54 77 C4 01 00 28 A7 C3 .]....a. Tw...(.. [100] 7E 76 BC 01 40 F9 47 B4 96 86 C4 01 50 2F 07 00 ~v..@.G. ....P/.. [110] 00 00 00 00 00 30 07 00 00 00 00 00 80 00 00 00 .....0.. ........ [120] 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 41 00 50 00 53 00 4C 00 5F 00 53 00 2E 00 ..A.P.S. L._.S... [150] 45 00 58 00 45 00 00 00 00 00 00 00 78 00 00 00 E.X.E... ....x... [160] 00 00 00 00 00 18 5E 0C C8 8D BC 01 00 18 5E 0C ......^. ......^. [170] C8 8D BC 01 00 18 5E 0C C8 8D BC 01 70 80 49 B4 ......^. ....p.I. [180] 96 86 C4 01 02 00 00 00 00 00 00 00 08 00 00 00 ........ ........ [190] 00 00 00 00 80 00 00 00 18 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 41 00 52 00 54 00 ........ ..A.R.T. [1C0] 47 00 41 00 4C 00 52 00 59 00 2E 00 43 00 41 00 G.A.L.R. Y...C.A. [1D0] 47 00 00 00 70 00 00 00 00 00 00 00 80 84 7E 3F G...p... ......~? [1E0] 77 6F BE 01 74 12 0F 07 F9 2E C5 01 00 68 04 00 wo..t... .....h.. [1F0] 78 6F BE 01 A0 07 4B B4 96 86 C4 01 2B 00 00 00 xo....K. ....+... [200] 00 00 00 00 30 00 00 00 00 00 00 00 80 00 00 00 ....0... ........ [210] 0E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [230] 00 00 41 00 54 00 4D 00 2E 00 49 00 4E 00 49 00 ..A.T.M. ..I.N.I. [240] 00 00 00 00 78 00 00 00 00 00 00 00 00 47 2E F3 ....x... .....G.. [250] 6C 6F BE 01 18 27 63 11 54 77 C4 01 00 BB E7 13 lo...'c. Tw...... [260] 40 D6 C2 01 FA 4C 79 EF 54 2E C5 01 5F A6 00 00 @....Ly. T..._... [270] 00 00 00 00 00 B0 00 00 00 00 00 00 80 00 00 00 ........ ........ [280] 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2A0] 00 00 41 00 54 00 4D 00 52 00 45 00 47 00 2E 00 ..A.T.M. R.E.G... [2B0] 41 00 54 00 4D 00 00 00 00 00 00 00 78 00 00 00 A.T.M... ....x... [2C0] 00 00 00 00 80 D2 D5 26 1B 5D BE 01 02 AE 64 11 .......& .]....d. [2D0] 54 77 C4 01 88 7A FC 3F 53 1C C4 01 E3 D3 7A EF Tw...z.? S.....z. [2E0] 54 2E C5 01 38 04 00 00 00 00 00 00 38 04 00 00 T...8... ....8... [2F0] 00 00 00 00 80 00 00 00 18 00 00 00 00 00 00 00 ........ ........ [300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [310] 00 00 00 00 00 00 00 00 00 00 41 00 55 00 54 00 ........ ..A.U.T. [320] 4F 00 4C 00 4E 00 43 00 48 00 2E 00 52 00 45 00 O.L.N.C. H...R.E. [330] 47 00 00 00 80 00 00 00 00 00 00 00 80 86 98 E8 G....... ........ [340] A5 7C BD 01 AA C9 6A 11 54 77 C4 01 00 F0 9E 60 .|....j. Tw.....` [350] 27 F1 BE 01 30 9D 4F B4 96 86 C4 01 8C 33 00 00 '...0.O. .....3.. [360] 00 00 00 00 00 40 00 00 00 00 00 00 80 00 00 00 .....@.. ........ [370] 22 00 00 00 00 00 00 00 18 00 42 00 49 00 4E 00 "....... ..B.I.N. [380] 44 00 4C 00 49 00 7E 00 31 00 2E 00 54 00 58 00 D.L.I.~. 1...T.X. [390] 54 00 42 00 69 00 6E 00 64 00 20 00 4C 00 69 00 T.B.i.n. d. .L.i. [3A0] 73 00 74 00 20 00 4C 00 6F 00 67 00 2E 00 74 00 s.t. .L. o.g...t. [3B0] 78 00 74 00 78 00 00 00 00 00 00 00 00 AD A2 27 x.t.x... .......' [3C0] F1 D4 BB 01 18 7D 38 AE 60 7F C4 01 00 AD A2 27 .....}8. `......' [3D0] F1 D4 BB 01 90 AB 52 B4 96 86 C4 01 D0 14 00 00 ......R. ........ [3E0] 00 00 00 00 00 20 00 00 00 00 00 00 80 00 00 00 ..... .. ........ [3F0] 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [410] 00 00 62 00 6C 00 61 00 63 00 6B 00 31 00 36 00 ..b.l.a. c.k.1.6. [420] 2E 00 73 00 63 00 72 00 00 00 00 00 80 00 00 00 ..s.c.r. ........ [430] 00 00 00 00 80 A5 1B 4F A2 7C BD 01 94 50 6C 11 .......O .|...Pl. [440] 54 77 C4 01 00 85 01 D4 2B D5 BB 01 F0 B9 55 B4 Tw...... +.....U. [450] 96 86 C4 01 F8 04 00 00 00 00 00 00 F8 04 00 00 ........ ........ [460] 00 00 00 00 80 00 00 00 20 00 00 00 00 00 00 00 ........ ....... [470] 18 00 42 00 4C 00 55 00 45 00 4C 00 41 00 7E 00 ..B.L.U. E.L.A.~. [480] 31 00 2E 00 42 00 4D 00 50 00 42 00 6C 00 75 00 1...B.M. P.B.l.u. [490] 65 00 20 00 4C 00 61 00 63 00 65 00 20 00 31 00 e. .L.a. c.e. .1. [4A0] 36 00 2E 00 62 00 6D 00 70 00 00 00 88 00 00 00 6...b.m. p....... [4B0] 00 00 00 00 80 A5 1B 4F A2 7C BD 01 7E D7 6D 11 .......O .|..~.m. [4C0] 54 77 C4 01 00 85 01 D4 2B D5 BB 01 20 41 57 B4 Tw...... +... AW. [4D0] 96 86 C4 01 76 20 00 00 00 00 00 00 00 30 00 00 ....v .. .....0.. [4E0] 00 00 00 00 80 00 00 00 24 00 00 00 00 00 00 00 ........ $....... [4F0] 18 00 42 00 4C 00 55 00 45 00 4D 00 4F 00 7E 00 ..B.L.U. E.M.O.~. [500] 31 00 2E 00 42 00 4D 00 50 00 42 00 6C 00 75 00 1...B.M. P.B.l.u. [510] 65 00 20 00 4D 00 6F 00 6E 00 64 00 61 00 79 00 e. .M.o. n.d.a.y. [520] 20 00 31 00 36 00 2E 00 62 00 6D 00 70 00 00 00 .1.6... b.m.p... [530] 00 00 00 00 80 00 00 00 00 00 00 00 80 A5 1B 4F ........ .......O [540] A2 7C BD 01 7E D7 6D 11 54 77 C4 01 00 85 01 D4 .|..~.m. Tw...... [550] 2B D5 BB 01 50 C8 58 B4 96 86 C4 01 34 94 00 00 +...P.X. ....4... [560] 00 00 00 00 00 A0 00 00 00 00 00 00 80 00 00 00 ........ ........ [570] 1E 00 00 00 00 00 00 00 18 00 42 00 4C 00 55 00 ........ ..B.L.U. [580] 45 00 4D 00 4F 00 7E 00 32 00 2E 00 42 00 4D 00 E.M.O.~. 2...B.M. [590] 50 00 42 00 6C 00 75 00 65 00 20 00 4D 00 6F 00 P.B.l.u. e. .M.o. [5A0] 6E 00 64 00 61 00 79 00 n.d.a.y. (DF) 15:05:29.295101 192.168.1.15.33209 > 192.168.1.11.139: . ack 1492 win 26136 (DF) 15:05:29.295262 192.168.1.11.139 > 192.168.1.15.33209: P 2944:4380(1436) ack 146 win 7957 >>> NBT Packet flags=0x2e NBT - Unknown packet type Type=0x2E006200 Data: (1432 bytes) [000] 6D 00 70 00 00 00 00 00 78 00 00 00 00 00 00 00 m.p..... x....... [010] 00 01 AF 84 28 F1 BE 01 3C 6C 72 11 54 77 C4 01 ....(... 192.168.1.11.139: P 146:250(104) ack 4380 win 26136 >>> NBT Packet NBT Session Packet Flags=0x0 Length=100 (0x64) SMB PACKET: SMBtrans2 (REQUEST) (DF) 15:05:29.311965 192.168.1.11.139 > 192.168.1.15.33209: P 4380:4419(39) ack 250 win 7853 >>> NBT Packet NBT Session Packet Flags=0x0 Length=35 (0x23) SMB PACKET: SMBtrans2 (REPLY) (DF) 15:05:29.314234 192.168.1.15.33209 > 192.168.1.11.139: P 250:289(39) ack 4419 win 26136 >>> NBT Packet NBT Session Packet Flags=0x0 Length=35 (0x23) SMB PACKET: SMBdskattr (REQUEST) (DF) 15:05:29.314628 192.168.1.11.139 > 192.168.1.15.33209: P 4419:4468(49) ack 289 win 7814 >>> NBT Packet NBT Session Packet Flags=0x0 Length=45 (0x2d) SMB PACKET: SMBdskattr (REPLY) (DF) 15:05:29.414575 192.168.1.15.33209 > 192.168.1.11.139: . ack 4468 win 26136 (DF) 15:05:34.020192 192.168.1.15.33209 > 192.168.1.11.139: P 289:328(39) ack 4468 win 26136 >>> NBT Packet NBT Session Packet Flags=0x0 Length=35 (0x23) SMB PACKET: SMBtdis (REQUEST) (DF) 15:05:34.037256 192.168.1.11.139 > 192.168.1.15.33209: P 4468:4507(39) ack 328 win 7775 >>> NBT Packet NBT Session Packet Flags=0x0 Length=35 (0x23) SMB PACKET: SMBtdis (REPLY) (DF) 15:05:34.037552 192.168.1.15.33209 > 192.168.1.11.139: F 328:328(0) ack 4507 win 26136 (DF) 15:05:34.037901 192.168.1.11.139 > 192.168.1.15.33209: F 4507:4507(0) ack 329 win 7775 (DF) 15:05:34.037939 192.168.1.15.33209 > 192.168.1.11.139: . ack 4508 win 26136 (DF)