No. Time Source Destination Protocol Info 1 0.000000 193.162.0.193 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 1: 46 bytes on wire (368 bits), 46 bytes captured (368 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 2 0.669127 10.0.0.0 224.0.0.1 IGMP V3 Membership Query, general Frame 2: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 10.0.0.0 (10.0.0.0), Dst: 224.0.0.1 (224.0.0.1) Internet Group Management Protocol No. Time Source Destination Protocol Info 3 0.955733 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 3: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 4 1.000045 193.162.0.193 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 4: 46 bytes on wire (368 bits), 46 bytes captured (368 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 5 2.499321 193.162.0.254 193.162.0.255 NBNS Name query NB SERVERINTERNET<20> Frame 5: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 6 2.499661 HewlettP_0a:1d:40 Broadcast ARP Who has 193.162.0.100? Tell 193.162.0.254 Frame 6: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 7 2.518164 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 7: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 8 2.598841 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: Frame 8: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1, Ack: 1, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 9 2.599290 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 9: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1, Ack: 81, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 10 2.599453 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 10: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 81, Ack: 105, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 11 2.599685 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 11: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 105, Ack: 155, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 12 2.734361 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=155 Ack=185 Win=65312 Len=0 Frame 12: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 155, Ack: 185, Len: 0 No. Time Source Destination Protocol Info 13 3.883573 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 13: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 155, Ack: 185, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 14 3.883851 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 14: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 185, Ack: 229, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 15 3.884177 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x8000, Path: \IT\New Text Document.txt Frame 15: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 229, Ack: 265, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 16 3.893342 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x8000 Frame 16: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 265, Ack: 369, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 17 3.893396 193.162.0.254 193.162.0.193 SMB NT Trans Response, Frame 17: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 404, Ack: 369, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 18 3.893437 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=369 Ack=480 Win=65017 Len=0 Frame 18: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 369, Ack: 480, Len: 0 No. Time Source Destination Protocol Info 19 3.893535 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x8000, Query File Internal Info Frame 19: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 369, Ack: 480, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 20 3.893640 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 20: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 445, Ack: 480, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 21 3.893682 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x8000, QUERY_FILE_INFO Frame 21: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 480, Ack: 445, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 22 3.893952 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Query FS Volume Info Frame 22: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 533, Ack: 552, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 23 3.894086 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=552 Ack=607 Win=64629 Len=0 Frame 23: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 552, Ack: 607, Len: 0 No. Time Source Destination Protocol Info 24 3.894116 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 24: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 552, Ack: 607, Len: 90 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 25 3.894261 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x8000, Query File Basic Info Frame 25: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 607, Ack: 642, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 26 3.894398 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x8000, QUERY_FILE_INFO Frame 26: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 642, Ack: 683, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 27 3.894708 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT Frame 27: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 683, Ack: 746, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 28 3.895010 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 28: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 746, Ack: 769, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 29 3.895161 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\New Text Document.txt Frame 29: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 769, Ack: 850, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 30 3.895479 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 30: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 850, Ack: 905, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 31 3.896142 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\New Text Document.txt Frame 31: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 905, Ack: 1062, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 32 3.896443 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 32: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1062, Ack: 1041, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 33 3.897003 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\New Text Document.txt Frame 33: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1041, Ack: 1274, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 34 3.897328 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 34: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1274, Ack: 1177, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 35 3.898055 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\New Text Document.txt Frame 35: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1177, Ack: 1486, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 36 3.898358 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 36: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1486, Ack: 1313, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 37 3.898599 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\New Text Document.txt Frame 37: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1313, Ack: 1698, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 38 3.898836 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 38: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1698, Ack: 1443, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 39 3.898956 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\New Text Document.txt Frame 39: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1443, Ack: 1802, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 40 3.899200 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 40: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1802, Ack: 1573, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 41 3.906815 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 41: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1573, Ack: 1906, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 42 3.906984 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 42: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1906, Ack: 1679, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 43 3.907226 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x8000 Frame 43: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1679, Ack: 1945, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 44 3.907416 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x8000 Frame 44: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1945, Ack: 1724, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 45 3.910415 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 45: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1724, Ack: 1984, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 46 3.910601 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 46: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 1984, Ack: 1830, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 47 3.957238 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 47: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 48 4.046886 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=1830 Ack=2023 Win=64998 Len=0 Frame 48: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1830, Ack: 2023, Len: 0 No. Time Source Destination Protocol Info 49 4.468892 193.162.0.193 193.162.0.254 SMB Logoff AndX Request Frame 49: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1830, Ack: 2023, Len: 43 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 50 4.469233 193.162.0.254 193.162.0.193 SMB Logoff AndX Response Frame 50: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2023, Ack: 1873, Len: 43 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 51 4.469300 193.162.0.193 193.162.0.254 SMB Tree Disconnect Request Frame 51: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1873, Ack: 2066, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 52 4.469453 193.162.0.254 193.162.0.193 SMB Tree Disconnect Response Frame 52: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2066, Ack: 1912, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 53 4.593771 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=1912 Ack=2105 Win=64916 Len=0 Frame 53: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1912, Ack: 2105, Len: 0 No. Time Source Destination Protocol Info 54 4.670625 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 54: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 55 4.715929 AsustekC_59:41:a0 Broadcast ARP Who has 193.162.0.93? Tell 193.162.0.12 Frame 55: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: AsustekC_59:41:a0 (00:17:31:59:41:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 56 5.463409 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 56: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1912, Ack: 2105, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 57 5.463655 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 57: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2105, Ack: 1986, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 58 5.464090 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\New Text Document.txt Frame 58: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 1986, Ack: 2185, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 59 5.464530 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: New Text Document.txt Frame 59: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2185, Ack: 2122, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 60 5.464828 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Query FS Attribute Info Frame 60: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2122, Ack: 2397, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 61 5.464975 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 61: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2397, Ack: 2196, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 62 5.465177 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x000c, Path: \IT\New Text Document.txt Frame 62: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2196, Ack: 2477, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 63 5.465472 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x000c Frame 63: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2477, Ack: 2336, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 64 5.465613 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x000c, Query File Basic Info Frame 64: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2336, Ack: 2616, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 65 5.465753 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x000c, QUERY_FILE_INFO Frame 65: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2616, Ack: 2412, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 66 5.465901 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x000c Frame 66: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2412, Ack: 2720, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 67 5.466081 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x000c Frame 67: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2720, Ack: 2457, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 68 5.466134 193.162.0.193 193.162.0.254 SMB Rename Request, Old Name: \IT\New Text Document.txt, New Name: \IT\test windows file.txt Frame 68: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2457, Ack: 2759, Len: 148 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 69 5.475434 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 69: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2759, Ack: 2605, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 70 5.475551 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 70: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2605, Ack: 2835, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 71 5.476211 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 71: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2835, Ack: 2693, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 72 5.476229 193.162.0.254 193.162.0.193 SMB Rename Response Frame 72: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2911, Ack: 2693, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 73 5.476260 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=2693 Ack=2950 Win=65535 Len=0 Frame 73: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2693, Ack: 2950, Len: 0 No. Time Source Destination Protocol Info 74 5.476815 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 74: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2693, Ack: 2950, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 75 5.477121 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 75: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2781, Ack: 2950, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 76 5.477264 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=2950 Ack=2917 Win=65311 Len=0 Frame 76: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2950, Ack: 2917, Len: 0 No. Time Source Destination Protocol Info 77 5.477486 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 77: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 2950, Ack: 2917, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 78 5.478247 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 78: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 2917, Ack: 3162, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 79 5.478571 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 79: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 3162, Ack: 3053, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 80 5.479325 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 80: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3053, Ack: 3374, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 81 5.479630 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 81: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 3374, Ack: 3189, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 82 5.485581 193.162.0.193 193.162.0.254 SMB Session Setup AndX Request, NTLMSSP_NEGOTIATE Frame 82: 260 bytes on wire (2080 bits), 260 bytes captured (2080 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3189, Ack: 3586, Len: 206 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 83 5.485939 193.162.0.254 193.162.0.193 SMB Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED Frame 83: 395 bytes on wire (3160 bits), 395 bytes captured (3160 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 3586, Ack: 3395, Len: 341 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 84 5.486085 193.162.0.193 193.162.0.254 SMB Session Setup AndX Request, NTLMSSP_AUTH, User: \ Frame 84: 316 bytes on wire (2528 bits), 316 bytes captured (2528 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3395, Ack: 3927, Len: 262 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 85 5.486606 193.162.0.254 193.162.0.193 SMB Session Setup AndX Response Frame 85: 229 bytes on wire (1832 bits), 229 bytes captured (1832 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 3927, Ack: 3657, Len: 175 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 86 5.486721 193.162.0.193 193.162.0.254 SMB Tree Connect AndX Request, Path: \\ORACLESRV\IPC$ Frame 86: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3657, Ack: 4102, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 87 5.486906 193.162.0.254 193.162.0.193 SMB Tree Connect AndX Response Frame 87: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4102, Ack: 3745, Len: 60 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 88 5.487051 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 88: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3745, Ack: 4162, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 89 5.487209 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 89: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4162, Ack: 3851, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 90 5.489399 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 90: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3851, Ack: 4201, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 91 5.489583 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 91: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4201, Ack: 3957, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 92 5.687481 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=3957 Ack=4240 Win=64245 Len=0 Frame 92: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3957, Ack: 4240, Len: 0 No. Time Source Destination Protocol Info 93 5.993676 193.162.0.100 193.162.0.255 BROWSER Local Master Announcement SERVERINTERNET, Workstation, Server, Domain Controller, Time Source, Dialin Server, NT Workstation, Master Browser, DFS server Frame 93: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: AsustekC_5c:9d:b6 (00:1d:60:5c:9d:b6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.100 (193.162.0.100), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 94 6.476614 AsustekC_ca:b1:4b Broadcast ARP Who has 193.162.0.93? Tell 193.162.0.35 Frame 94: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_ca:b1:4b (00:11:2f:ca:b1:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 95 6.647077 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 95: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 3957, Ack: 4240, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 96 6.647792 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 96: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4240, Ack: 4087, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 97 6.647911 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 97: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4087, Ack: 4344, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 98 6.648364 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 98: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4344, Ack: 4217, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 99 6.648594 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 99: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4217, Ack: 4448, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 100 6.648901 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 100: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4448, Ack: 4347, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 101 6.649016 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 101: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4347, Ack: 4552, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 102 6.649274 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 102: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4552, Ack: 4477, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 103 6.658736 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT Frame 103: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4477, Ack: 4656, Len: 92 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 104 6.659237 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: IT Frame 104: 230 bytes on wire (1840 bits), 230 bytes captured (1840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4656, Ack: 4569, Len: 176 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 105 6.660814 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \ORACLESRV\DATA Frame 105: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4569, Ack: 4832, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 106 6.661054 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 106: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4832, Ack: 4675, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 107 6.666905 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x4009, Path: \srvsvc Frame 107: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4675, Ack: 4871, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 108 6.667285 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x4009 Frame 108: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 4871, Ack: 4779, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 109 6.667788 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 109: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4779, Ack: 5010, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 110 6.667943 193.162.0.193 193.162.0.254 DCERPC Bind: call_id: 1 SRVSVC V3.0 Frame 110: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 4915, Ack: 5010, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) DCE RPC Bind, Fragment: Single, FragLen: 72, Call: 1 No. Time Source Destination Protocol Info 111 6.668124 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=5010 Ack=5055 Win=64697 Len=0 Frame 111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5010, Ack: 5055, Len: 0 No. Time Source Destination Protocol Info 112 6.668338 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 112: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5010, Ack: 5055, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 113 6.668370 193.162.0.254 193.162.0.193 SMB Write AndX Response, FID: 0x4009, 72 bytes Frame 113: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5222, Ack: 5055, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 114 6.668406 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=5055 Ack=5273 Win=64710 Len=0 Frame 114: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5055, Ack: 5273, Len: 0 No. Time Source Destination Protocol Info 115 6.668604 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0xc007, Path: \IT\test windows file.txt Frame 115: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5055, Ack: 5273, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 116 6.668731 193.162.0.193 193.162.0.254 SMB Read AndX Request, FID: 0x4009, 1024 bytes at offset 0 Frame 116: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5195, Ack: 5273, Len: 63 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 117 6.668899 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=5273 Ack=5258 Win=64494 Len=0 Frame 117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5273, Ack: 5258, Len: 0 No. Time Source Destination Protocol Info 118 6.668998 193.162.0.254 193.162.0.193 DCERPC Bind_ack: call_id: 1 accept max_xmit: 4280 max_recv: 4280 Frame 118: 186 bytes on wire (1488 bits), 186 bytes captured (1488 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5273, Ack: 5258, Len: 132 NetBIOS Session Service SMB (Server Message Block Protocol) DCE RPC Bind_ack, Fragment: Single, FragLen: 68, Call: 1 No. Time Source Destination Protocol Info 119 6.669091 193.162.0.193 193.162.0.254 SRVSVC NetShareGetInfo request Frame 119: 234 bytes on wire (1872 bits), 234 bytes captured (1872 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5258, Ack: 5405, Len: 180 NetBIOS Session Service SMB (Server Message Block Protocol) SMB Pipe Protocol DCE RPC Request, Fragment: Single, FragLen: 92, Call: 1 Ctx: 0, [Resp: #121] Server Service, NetShareGetInfo No. Time Source Destination Protocol Info 120 6.669432 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0xc007 Frame 120: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5405, Ack: 5438, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 121 6.669483 193.162.0.254 193.162.0.193 SRVSVC NetShareGetInfo response Frame 121: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5544, Ack: 5438, Len: 148 NetBIOS Session Service SMB (Server Message Block Protocol) SMB Pipe Protocol DCE RPC Response, Fragment: Single, FragLen: 88, Call: 1 Ctx: 0, [Req: #119] Server Service, NetShareGetInfo No. Time Source Destination Protocol Info 122 6.669511 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=5438 Ack=5692 Win=64291 Len=0 Frame 122: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5438, Ack: 5692, Len: 0 No. Time Source Destination Protocol Info 123 6.669571 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0xc007, Query File Internal Info Frame 123: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5438, Ack: 5692, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 124 6.669679 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x4009 Frame 124: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5514, Ack: 5692, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 125 6.669703 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0xc007, QUERY_FILE_INFO Frame 125: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5692, Ack: 5514, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 126 6.669840 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x4009 Frame 126: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5764, Ack: 5559, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 127 6.669874 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0xc007, Query File Basic Info Frame 127: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5559, Ack: 5764, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 128 6.670006 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0xc007, QUERY_FILE_INFO Frame 128: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5803, Ack: 5635, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 129 6.670038 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=5635 Ack=5907 Win=64076 Len=0 Frame 129: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5635, Ack: 5907, Len: 0 No. Time Source Destination Protocol Info 130 6.670601 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 130: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5635, Ack: 5907, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 131 6.671013 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 131: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 5907, Ack: 5765, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 132 6.671259 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 132: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5765, Ack: 6011, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 133 6.686685 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 133: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6011, Ack: 5895, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 134 6.686796 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 134: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 5895, Ack: 6115, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 135 6.686905 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 135: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6025, Ack: 6115, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 136 6.687105 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=6115 Ack=6155 Win=65145 Len=0 Frame 136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6115, Ack: 6155, Len: 0 No. Time Source Destination Protocol Info 137 6.687130 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 137: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6115, Ack: 6155, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 138 6.687216 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 138: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6219, Ack: 6155, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 139 6.687272 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=6155 Ack=6323 Win=65223 Len=0 Frame 139: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6155, Ack: 6323, Len: 0 No. Time Source Destination Protocol Info 140 6.687434 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File EA Info, Path: \IT\test windows file.txt Frame 140: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6155, Ack: 6323, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 141 6.687716 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 141: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6323, Ack: 6285, Len: 68 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 142 6.687989 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 142: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6285, Ack: 6391, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 143 6.688078 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x400e, Path: \IT\test windows file.txt Frame 143: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6421, Ack: 6391, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 144 6.688196 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=6391 Ack=6561 Win=64739 Len=0 Frame 144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6391, Ack: 6561, Len: 0 No. Time Source Destination Protocol Info 145 6.688369 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 145: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6391, Ack: 6561, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 146 6.688511 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x400e Frame 146: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6603, Ack: 6561, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 147 6.688582 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=6561 Ack=6742 Win=64804 Len=0 Frame 147: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6561, Ack: 6742, Len: 0 No. Time Source Destination Protocol Info 148 6.689604 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT IOCTL FILE_SYSTEM Function:0x0030, FID: 0x400e Frame 148: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6561, Ack: 6742, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 149 6.689864 193.162.0.254 193.162.0.193 SMB NT Trans Response, FID: 0x400e, NT IOCTL Frame 149: 198 bytes on wire (1584 bits), 198 bytes captured (1584 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6742, Ack: 6649, Len: 144 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 150 6.691076 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Object ID Information Frame 150: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6649, Ack: 6886, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 151 6.691274 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 151: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 6886, Ack: 6723, Len: 124 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 152 6.717521 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \ORACLESRV\DATA Frame 152: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6723, Ack: 7010, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 153 6.717754 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 153: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7010, Ack: 6829, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 154 6.718071 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x800a, Path: \srvsvc Frame 154: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6829, Ack: 7049, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 155 6.718372 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x800a Frame 155: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7049, Ack: 6933, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 156 6.718540 193.162.0.193 193.162.0.254 DCERPC Bind: call_id: 1 SRVSVC V3.0 Frame 156: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 6933, Ack: 7188, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) DCE RPC Bind, Fragment: Single, FragLen: 72, Call: 1 No. Time Source Destination Protocol Info 157 6.718757 193.162.0.254 193.162.0.193 SMB Write AndX Response, FID: 0x800a, 72 bytes Frame 157: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7188, Ack: 7073, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 158 6.718871 193.162.0.193 193.162.0.254 SMB Read AndX Request, FID: 0x800a, 1024 bytes at offset 0 Frame 158: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7073, Ack: 7239, Len: 63 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 159 6.719010 193.162.0.254 193.162.0.193 DCERPC Bind_ack: call_id: 1 accept max_xmit: 4280 max_recv: 4280 Frame 159: 186 bytes on wire (1488 bits), 186 bytes captured (1488 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7239, Ack: 7136, Len: 132 NetBIOS Session Service SMB (Server Message Block Protocol) DCE RPC Bind_ack, Fragment: Single, FragLen: 68, Call: 1 No. Time Source Destination Protocol Info 160 6.719120 193.162.0.193 193.162.0.254 SRVSVC NetShareGetInfo request Frame 160: 234 bytes on wire (1872 bits), 234 bytes captured (1872 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7136, Ack: 7371, Len: 180 NetBIOS Session Service SMB (Server Message Block Protocol) SMB Pipe Protocol DCE RPC Request, Fragment: Single, FragLen: 92, Call: 1 Ctx: 0, [Resp: #161] Server Service, NetShareGetInfo No. Time Source Destination Protocol Info 161 6.719436 193.162.0.254 193.162.0.193 SRVSVC NetShareGetInfo response Frame 161: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7371, Ack: 7316, Len: 148 NetBIOS Session Service SMB (Server Message Block Protocol) SMB Pipe Protocol DCE RPC Response, Fragment: Single, FragLen: 88, Call: 1 Ctx: 0, [Req: #160] Server Service, NetShareGetInfo No. Time Source Destination Protocol Info 162 6.719615 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x800a Frame 162: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7316, Ack: 7519, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 163 6.719777 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x800a Frame 163: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7519, Ack: 7361, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 164 6.720334 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Standard Info, Path: \IT Frame 164: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7361, Ack: 7558, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 165 6.720701 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 165: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7558, Ack: 7447, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 166 6.720852 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: \IT Frame 166: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7447, Ack: 7646, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 167 6.721484 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 167: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7646, Ack: 7533, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 168 6.721564 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File EA Info, Path: \IT Frame 168: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7533, Ack: 7718, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 169 6.721812 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 169: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7718, Ack: 7619, Len: 68 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 170 6.722023 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x8002, Path: \IT Frame 170: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7619, Ack: 7786, Len: 96 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 171 6.722276 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x8002 Frame 171: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7786, Ack: 7715, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 172 6.722451 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT IOCTL FILE_SYSTEM Function:0x0030, FID: 0x8002 Frame 172: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7715, Ack: 7925, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 173 6.772521 193.162.0.254 193.162.0.193 SMB NT Trans Response, FID: 0x8002, NT IOCTL Frame 173: 198 bytes on wire (1584 bits), 198 bytes captured (1584 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 7925, Ack: 7803, Len: 144 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 174 6.772615 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Object ID Information Frame 174: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7803, Ack: 8069, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 175 6.772787 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 175: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8069, Ack: 7877, Len: 124 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 176 6.773366 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x8002 Frame 176: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7877, Ack: 8193, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 177 6.773597 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x8002 Frame 177: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8193, Ack: 7922, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 178 6.776838 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \ORACLESRV\DATA Frame 178: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 7922, Ack: 8232, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 179 6.777081 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 179: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8232, Ack: 8028, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 180 6.777465 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x800d, Path: \srvsvc Frame 180: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8028, Ack: 8271, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 181 6.777835 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x800d Frame 181: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8271, Ack: 8132, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 182 6.778001 193.162.0.193 193.162.0.254 DCERPC Bind: call_id: 1 SRVSVC V3.0 Frame 182: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8132, Ack: 8410, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) DCE RPC Bind, Fragment: Single, FragLen: 72, Call: 1 No. Time Source Destination Protocol Info 183 6.778167 193.162.0.254 193.162.0.193 SMB Write AndX Response, FID: 0x800d, 72 bytes Frame 183: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8410, Ack: 8272, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 184 6.778371 193.162.0.193 193.162.0.254 SMB Read AndX Request, FID: 0x800d, 1024 bytes at offset 0 Frame 184: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8272, Ack: 8461, Len: 63 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 185 6.778521 193.162.0.254 193.162.0.193 DCERPC Bind_ack: call_id: 1 accept max_xmit: 4280 max_recv: 4280 Frame 185: 186 bytes on wire (1488 bits), 186 bytes captured (1488 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8461, Ack: 8335, Len: 132 NetBIOS Session Service SMB (Server Message Block Protocol) DCE RPC Bind_ack, Fragment: Single, FragLen: 68, Call: 1 No. Time Source Destination Protocol Info 186 6.778617 193.162.0.193 193.162.0.254 SRVSVC NetShareGetInfo request Frame 186: 234 bytes on wire (1872 bits), 234 bytes captured (1872 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8335, Ack: 8593, Len: 180 NetBIOS Session Service SMB (Server Message Block Protocol) SMB Pipe Protocol DCE RPC Request, Fragment: Single, FragLen: 92, Call: 1 Ctx: 0, [Resp: #187] Server Service, NetShareGetInfo No. Time Source Destination Protocol Info 187 6.778920 193.162.0.254 193.162.0.193 SRVSVC NetShareGetInfo response Frame 187: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8593, Ack: 8515, Len: 148 NetBIOS Session Service SMB (Server Message Block Protocol) SMB Pipe Protocol DCE RPC Response, Fragment: Single, FragLen: 88, Call: 1 Ctx: 0, [Req: #186] Server Service, NetShareGetInfo No. Time Source Destination Protocol Info 188 6.779027 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x800d Frame 188: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8515, Ack: 8741, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 189 6.779195 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x800d Frame 189: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8741, Ack: 8560, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 190 6.779816 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Standard Info, Path: Frame 190: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8560, Ack: 8780, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 191 6.780314 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 191: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8780, Ack: 8640, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 192 6.780427 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Internal Info, Path: Frame 192: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8640, Ack: 8868, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 193 6.780674 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 193: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8868, Ack: 8720, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 194 6.780751 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File EA Info, Path: Frame 194: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8720, Ack: 8940, Len: 80 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 195 6.780981 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 195: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 8940, Ack: 8800, Len: 68 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 196 6.781087 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x0006, Path: Frame 196: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8800, Ack: 9008, Len: 90 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 197 6.781358 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x0006 Frame 197: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9008, Ack: 8890, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 198 6.782152 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT IOCTL FILE_SYSTEM Function:0x0030, FID: 0x0006 Frame 198: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8890, Ack: 9147, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 199 6.782394 193.162.0.254 193.162.0.193 SMB NT Trans Response, FID: 0x0006, NT IOCTL Frame 199: 198 bytes on wire (1584 bits), 198 bytes captured (1584 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9147, Ack: 8978, Len: 144 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 200 6.782507 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Object ID Information Frame 200: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 8978, Ack: 9291, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 201 6.782680 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 201: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9291, Ack: 9052, Len: 124 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 202 6.782790 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x0006 Frame 202: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9052, Ack: 9415, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 203 6.782984 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x0006 Frame 203: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9415, Ack: 9097, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 204 6.963410 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 205 6.999981 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=9097 Ack=9454 Win=65089 Len=0 Frame 205: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9097, Ack: 9454, Len: 0 No. Time Source Destination Protocol Info 206 7.669129 10.0.0.0 224.0.0.1 IGMP V3 Membership Query, general Frame 206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 10.0.0.0 (10.0.0.0), Dst: 224.0.0.1 (224.0.0.1) Internet Group Management Protocol No. Time Source Destination Protocol Info 207 7.739445 Asiarock_75:f4:65 Broadcast ARP Who has 193.162.0.41? Tell 193.162.0.93 Frame 207: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Asiarock_75:f4:65 (00:19:66:75:f4:65), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 208 7.960546 Asiarock_75:f4:65 Broadcast ARP Who has 193.162.0.155? Tell 193.162.0.93 Frame 208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Asiarock_75:f4:65 (00:19:66:75:f4:65), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 209 7.999990 193.162.0.193 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 209: 46 bytes on wire (368 bits), 46 bytes captured (368 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 239.255.255.250 (239.255.255.250) Internet Group Management Protocol No. Time Source Destination Protocol Info 210 8.164384 Asiarock_75:f4:65 Broadcast ARP Who has 193.162.0.17? Tell 193.162.0.93 Frame 210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Asiarock_75:f4:65 (00:19:66:75:f4:65), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 211 8.254434 Ibm_53:4d:08 Broadcast ARP Who has 193.162.0.4? Tell 193.162.0.253 Frame 211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Ibm_53:4d:08 (00:21:5e:53:4d:08), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 212 8.455436 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 213 9.801286 Ibm_53:4d:08 Broadcast ARP Who has 193.162.0.6? Tell 193.162.0.253 Frame 213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Ibm_53:4d:08 (00:21:5e:53:4d:08), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 214 9.955245 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 215 10.985204 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0xc007 Frame 215: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9097, Ack: 9454, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 216 10.985473 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0xc007 Frame 216: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9454, Ack: 9142, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 217 10.985682 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x400e Frame 217: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9142, Ack: 9493, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 218 10.985946 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x400e Frame 218: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9493, Ack: 9187, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 219 10.986059 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x4004, Path: \IT\test windows file.txt Frame 219: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9187, Ack: 9532, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 220 10.998800 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x4004 Frame 220: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9532, Ack: 9327, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 221 10.998945 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Info Allocation Frame 221: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9327, Ack: 9671, Len: 84 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 222 10.999105 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 222: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9671, Ack: 9411, Len: 78 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 223 10.999159 193.162.0.193 193.162.0.254 SMB Write Request, FID: 0x4004, 0 bytes at offset 90 Frame 223: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9411, Ack: 9749, Len: 52 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 224 10.999419 193.162.0.254 193.162.0.193 SMB Write Response, FID: 0x4004, 0 bytes Frame 224: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9749, Ack: 9463, Len: 41 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 225 10.999440 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 225: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9790, Ack: 9463, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 226 10.999472 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=9463 Ack=9866 Win=64677 Len=0 Frame 226: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9463, Ack: 9866, Len: 0 No. Time Source Destination Protocol Info 227 10.999620 193.162.0.193 193.162.0.254 SMB Trans2 Request, SET_FILE_INFO, FID: 0x4004 Frame 227: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9463, Ack: 9866, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 228 10.999804 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x4004, SET_FILE_INFO Frame 228: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9866, Ack: 9551, Len: 64 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 229 10.999877 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 229: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9551, Ack: 9866, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 230 11.000029 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 230: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 9930, Ack: 9639, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 231 11.000060 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=9639 Ack=10006 Win=64537 Len=0 Frame 231: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9639, Ack: 10006, Len: 0 No. Time Source Destination Protocol Info 232 11.000261 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 232: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9639, Ack: 10006, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 233 11.000437 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 233: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9727, Ack: 10006, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 234 11.000585 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=10006 Ack=9857 Win=64478 Len=0 Frame 234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10006, Ack: 9857, Len: 0 No. Time Source Destination Protocol Info 235 11.000733 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 235: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10006, Ack: 9857, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 236 11.000870 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 236: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9857, Ack: 10110, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 237 11.001117 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 237: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10110, Ack: 9987, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 238 11.001276 193.162.0.193 193.162.0.254 SMB Write AndX Request, FID: 0x4004, 90 bytes at offset 0 Frame 238: 212 bytes on wire (1696 bits), 212 bytes captured (1696 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 9987, Ack: 10214, Len: 158 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 239 11.001482 193.162.0.254 193.162.0.193 SMB Write AndX Response, FID: 0x4004, 90 bytes Frame 239: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10214, Ack: 10145, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 240 11.001697 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT Frame 240: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10145, Ack: 10265, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 241 11.001938 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 241: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10265, Ack: 10231, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 242 11.002114 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 242: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10231, Ack: 10369, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 243 11.002404 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 243: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10369, Ack: 10367, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 244 11.002797 193.162.0.193 193.162.0.254 SMB Trans2 Request, SET_FILE_INFO, FID: 0x4004 Frame 244: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10367, Ack: 10581, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 245 11.009721 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x4004, SET_FILE_INFO Frame 245: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10581, Ack: 10455, Len: 64 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 246 11.009758 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 246: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10645, Ack: 10455, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 247 11.009824 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=10455 Ack=10721 Win=65395 Len=0 Frame 247: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10455, Ack: 10721, Len: 0 No. Time Source Destination Protocol Info 248 11.035968 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 248: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10455, Ack: 10721, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 249 11.248620 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=10721 Ack=10543 Win=65359 Len=0 Frame 249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10721, Ack: 10543, Len: 0 No. Time Source Destination Protocol Info 250 11.883287 Asiarock_17:c9:af Broadcast ARP Who has 193.162.0.41? Tell 193.162.0.155 Frame 250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Asiarock_17:c9:af (00:19:66:17:c9:af), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 251 11.883297 Asiarock_17:c9:af Broadcast ARP Who has 193.162.0.8? Tell 193.162.0.155 Frame 251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Asiarock_17:c9:af (00:19:66:17:c9:af), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 252 12.531674 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\* Frame 252: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10543, Ack: 10721, Len: 96 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 253 12.532286 193.162.0.254 193.162.0.193 TCP [TCP segment of a reassembled PDU] Frame 253: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 10721, Ack: 10639, Len: 1460 No. Time Source Destination Protocol Info 254 12.532313 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: . .. 10000000.tif 20000000 001.tif 20000000.tif AdbeRdr934_en_US.exe DATE RMC lista scurta.xls DATE RMC lista scurta.xlsx Doc1.doc Doc2.doc FURNIZORI IT.xls Ovidiu poze PRODUSE LA VANZARE Mobilier.xls readymix.jpg readymix2.jpg readymix3.jpg test windows file.txt Thumbs.db Frame 254: 1006 bytes on wire (8048 bits), 1006 bytes captured (8048 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 12181, Ack: 10639, Len: 952 [Reassembled TCP Segments (2412 bytes): #253(1460), #254(952)] NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 255 12.532344 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=10639 Ack=13133 Win=65535 Len=0 Frame 255: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10639, Ack: 13133, Len: 0 No. Time Source Destination Protocol Info 256 12.544080 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 256: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10639, Ack: 13133, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 257 12.544247 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 257: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13133, Ack: 10745, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 258 12.544510 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x4004 Frame 258: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10745, Ack: 13172, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 259 12.546393 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x4004 Frame 259: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13172, Ack: 10790, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 260 12.551638 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 260: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10790, Ack: 13211, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 261 12.551810 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 261: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13211, Ack: 10896, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 262 12.687480 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=10896 Ack=13250 Win=65418 Len=0 Frame 262: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10896, Ack: 13250, Len: 0 No. Time Source Destination Protocol Info 263 12.751007 IntelCor_2f:0e:e6 Vmware_24:87:e2 ARP Who has 193.162.0.193? Tell 193.162.0.222 Frame 263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_2f:0e:e6 (00:21:5d:2f:0e:e6), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 264 12.751022 Vmware_24:87:e2 IntelCor_2f:0e:e6 ARP 193.162.0.193 is at 00:0c:29:24:87:e2 Frame 264: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: IntelCor_2f:0e:e6 (00:21:5d:2f:0e:e6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Info 265 12.956848 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 266 13.190531 193.162.0.141 193.162.0.255 NBNS Name query NB WORKGROUP<1d> Frame 266: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 56366 (56366), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 267 13.545620 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 267: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 10896, Ack: 13250, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 268 13.546151 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 268: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13250, Ack: 11032, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 269 13.546457 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x0005, Path: \IT\test windows file.txt Frame 269: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11032, Ack: 13462, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 270 13.548293 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x0005 Frame 270: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13462, Ack: 11172, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 271 13.548428 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FS_INFO, Query FS Volume Info Frame 271: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11172, Ack: 13601, Len: 74 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 272 13.552768 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_FS_INFO Frame 272: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13601, Ack: 11246, Len: 90 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 273 13.552874 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x0005, Query File Basic Info Frame 273: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11246, Ack: 13691, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 274 13.553099 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x0005, QUERY_FILE_INFO Frame 274: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13691, Ack: 11322, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 275 13.553274 193.162.0.193 193.162.0.254 SMB Read AndX Request, FID: 0x0005, 90 bytes at offset 0 Frame 275: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11322, Ack: 13795, Len: 63 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 276 13.553475 193.162.0.254 193.162.0.193 SMB Read AndX Response, FID: 0x0005, 90 bytes Frame 276: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13795, Ack: 11385, Len: 154 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 277 13.553717 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 277: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11385, Ack: 13949, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 278 13.554169 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 278: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 13949, Ack: 11515, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 279 13.554772 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 279: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11515, Ack: 14053, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 280 13.555069 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 280: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14053, Ack: 11645, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 281 13.556472 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 281: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11645, Ack: 14157, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 282 13.556885 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 282: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14157, Ack: 11781, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 283 13.671854 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=11781 Ack=14369 Win=64299 Len=0 Frame 283: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11781, Ack: 14369, Len: 0 No. Time Source Destination Protocol Info 284 13.926379 193.162.0.141 193.162.0.255 NBNS Name query NB MISU<00> Frame 284: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 56192 (56192), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 285 13.926734 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.141? Tell 193.162.0.31 Frame 285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 286 13.927209 193.162.0.141 193.162.0.255 NBNS Name query NB SERVERINTERNET<00> Frame 286: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 59040 (59040), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 287 13.938969 193.162.0.141 193.162.0.255 NBNS Name query NB BMX-20E139E6C6B<00> Frame 287: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 52186 (52186), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 288 13.939531 193.162.0.141 193.162.0.255 NBNS Name query NB DIANA<00> Frame 288: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: 50516 (50516), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 289 13.939641 SunrichT_15:73:e1 Broadcast ARP Who has 193.162.0.141? Tell 193.162.0.161 Frame 289: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_15:73:e1 (00:0a:cd:15:73:e1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 290 13.951262 Azurewav_1a:cf:99 Broadcast ARP Who has 193.162.0.141? Tell 193.162.0.86 Frame 290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Azurewav_1a:cf:99 (00:22:43:1a:cf:99), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 291 14.305344 193.162.0.141 255.255.255.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 291: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time Source Destination Protocol Info 292 14.305914 193.162.0.141 193.162.0.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 292: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) Ethernet II, Src: Apple_df:17:bf (f8:1e:df:df:17:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.141 (193.162.0.141), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time Source Destination Protocol Info 293 14.455024 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 294 14.670401 MS-NLB-PhysServer-01_00:00:00:00 Broadcast MS NLB MS NLB heartbeat Frame 294: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: MS-NLB-PhysServer-01_00:00:00:00 (02:01:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff) MS Network Load Balancing No. Time Source Destination Protocol Info 295 15.810691 AsustekC_e3:8c:c8 Broadcast ARP Who has 193.162.0.253? Tell 193.162.0.11 Frame 295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_e3:8c:c8 (00:18:f3:e3:8c:c8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 296 15.970560 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 297 16.843987 193.162.0.193 193.162.0.254 SMB Logoff AndX Request Frame 297: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11781, Ack: 14369, Len: 43 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 298 16.844345 193.162.0.254 193.162.0.193 SMB Logoff AndX Response Frame 298: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14369, Ack: 11824, Len: 43 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 299 16.844477 193.162.0.193 193.162.0.254 SMB Tree Disconnect Request Frame 299: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11824, Ack: 14412, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 300 16.844658 193.162.0.254 193.162.0.193 SMB Tree Disconnect Response Frame 300: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14412, Ack: 11863, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 301 16.844901 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x0005 Frame 301: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11863, Ack: 14451, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 302 16.845130 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x0005 Frame 302: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14451, Ack: 11908, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 303 17.001971 SunrichT_15:73:e1 Broadcast ARP Who has 193.162.0.202? Tell 193.162.0.161 Frame 303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_15:73:e1 (00:0a:cd:15:73:e1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 304 17.062547 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=11908 Ack=14490 Win=64178 Len=0 Frame 304: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11908, Ack: 14490, Len: 0 No. Time Source Destination Protocol Info 305 17.211970 193.162.0.251 193.162.0.255 NBNS Name query NB SERVERINTERNET<20> Frame 305: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Trendnet_14:71:e6 (00:14:d1:14:71:e6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.251 (193.162.0.251), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 306 17.212244 AsustekC_5c:9d:b6 Broadcast ARP Who has 193.162.0.251? Tell 193.162.0.100 Frame 306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_5c:9d:b6 (00:1d:60:5c:9d:b6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 307 17.438428 193.162.0.193 193.162.0.254 SMB NT Create AndX Request, FID: 0x0008, Path: \IT\test windows file.txt Frame 307: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 11908, Ack: 14490, Len: 140 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 308 17.454994 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 309 17.455656 193.162.0.254 193.162.0.193 SMB NT Create AndX Response, FID: 0x0008 Frame 309: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14490, Ack: 12048, Len: 139 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 310 17.455751 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x0008, Query File Internal Info Frame 310: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12048, Ack: 14629, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 311 17.455962 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x0008, QUERY_FILE_INFO Frame 311: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14629, Ack: 12124, Len: 72 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 312 17.456209 193.162.0.193 193.162.0.254 SMB Write AndX Request, FID: 0x0008, 1 byte at offset 4199 Frame 312: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12124, Ack: 14701, Len: 69 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 313 17.456575 193.162.0.254 193.162.0.193 SMB Write AndX Response, FID: 0x0008, 1 byte Frame 313: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14701, Ack: 12193, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 314 17.456638 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_FILE_INFO, FID: 0x0008, Query File Standard Info Frame 314: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12193, Ack: 14752, Len: 84 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 315 17.456812 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x0008, QUERY_FILE_INFO Frame 315: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14752, Ack: 12277, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 316 17.457022 193.162.0.193 193.162.0.254 SMB Trans2 Request, SET_FILE_INFO, FID: 0x0008 Frame 316: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12277, Ack: 14840, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 317 17.457276 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x0008, SET_FILE_INFO Frame 317: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14840, Ack: 12365, Len: 64 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 318 17.457292 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 318: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14904, Ack: 12365, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 319 17.457325 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=12365 Ack=14980 Win=65184 Len=0 Frame 319: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12365, Ack: 14980, Len: 0 No. Time Source Destination Protocol Info 320 17.457479 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 320: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12365, Ack: 14980, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 321 17.457580 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 321: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12495, Ack: 14980, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 322 17.457699 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=14980 Ack=12583 Win=64815 Len=0 Frame 322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14980, Ack: 12583, Len: 0 No. Time Source Destination Protocol Info 323 17.457814 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 323: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 14980, Ack: 12583, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 324 17.458042 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT\test windows file.txt Frame 324: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12583, Ack: 15084, Len: 130 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 325 17.458303 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 325: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15084, Ack: 12713, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 326 17.458428 193.162.0.193 193.162.0.254 TCP [TCP segment of a reassembled PDU] Frame 326: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 12713, Ack: 15188, Len: 1460 No. Time Source Destination Protocol Info 327 17.458451 193.162.0.193 193.162.0.254 TCP [TCP segment of a reassembled PDU] Frame 327: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 14173, Ack: 15188, Len: 1460 No. Time Source Destination Protocol Info 328 17.458474 193.162.0.193 193.162.0.254 SMB Write AndX Request, FID: 0x0008, 4200 bytes at offset 0 Frame 328: 1402 bytes on wire (11216 bits), 1402 bytes captured (11216 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 15633, Ack: 15188, Len: 1348 [Reassembled TCP Segments (4268 bytes): #326(1460), #327(1460), #328(1348)] NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 329 17.458633 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=15188 Ack=15633 Win=65535 Len=0 Frame 329: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15188, Ack: 15633, Len: 0 No. Time Source Destination Protocol Info 330 17.458678 193.162.0.254 193.162.0.193 SMB Write AndX Response, FID: 0x0008, 4200 bytes Frame 330: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15188, Ack: 16981, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 331 17.458931 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\test windows file.txt Frame 331: 190 bytes on wire (1520 bits), 190 bytes captured (1520 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 16981, Ack: 15239, Len: 136 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 332 17.459250 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: test windows file.txt Frame 332: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15239, Ack: 17117, Len: 212 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 333 17.459649 193.162.0.193 193.162.0.254 SMB Trans2 Request, SET_FILE_INFO, FID: 0x0008 Frame 333: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17117, Ack: 15451, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 334 17.468527 193.162.0.254 193.162.0.193 SMB Trans2 Response, FID: 0x0008, SET_FILE_INFO Frame 334: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15451, Ack: 17205, Len: 64 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 335 17.468547 193.162.0.254 193.162.0.193 SMB NT Trans Response, NT NOTIFY Frame 335: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15515, Ack: 17205, Len: 76 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 336 17.468581 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=17205 Ack=15591 Win=64573 Len=0 Frame 336: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17205, Ack: 15591, Len: 0 No. Time Source Destination Protocol Info 337 17.484872 193.162.0.193 193.162.0.254 SMB NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 337: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17205, Ack: 15591, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 338 17.718722 193.162.0.193 193.162.0.254 SMB [TCP Retransmission] NT Trans Request, NT NOTIFY, FID: 0xc00f Frame 338: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17205, Ack: 15591, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 339 17.718910 193.162.0.254 193.162.0.193 TCP netbios-ssn > optima-vnet [ACK] Seq=15591 Ack=17293 Win=65359 Len=0 Frame 339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15591, Ack: 17293, Len: 0 No. Time Source Destination Protocol Info 340 17.797836 Foxconn_8d:6e:0d Broadcast ARP Who has 193.162.0.38? Tell 193.162.0.7 Frame 340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Foxconn_8d:6e:0d (00:15:58:8d:6e:0d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 341 18.956354 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 342 18.984771 193.162.0.193 193.162.0.254 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \IT Frame 342: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17293, Ack: 15591, Len: 86 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 343 18.985177 193.162.0.254 193.162.0.193 SMB Trans2 Response, QUERY_PATH_INFO Frame 343: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15591, Ack: 17379, Len: 104 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 344 18.985473 193.162.0.193 193.162.0.254 SMB Trans2 Request, FIND_FIRST2, Pattern: \IT\* Frame 344: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17379, Ack: 15695, Len: 96 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 345 18.985894 193.162.0.254 193.162.0.193 TCP [TCP segment of a reassembled PDU] Frame 345: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 15695, Ack: 17475, Len: 1460 No. Time Source Destination Protocol Info 346 18.985921 193.162.0.254 193.162.0.193 SMB Trans2 Response, FIND_FIRST2, Files: . .. 10000000.tif 20000000 001.tif 20000000.tif AdbeRdr934_en_US.exe DATE RMC lista scurta.xls DATE RMC lista scurta.xlsx Doc1.doc Doc2.doc FURNIZORI IT.xls Ovidiu poze PRODUSE LA VANZARE Mobilier.xls readymix.jpg readymix2.jpg readymix3.jpg test windows file.txt Thumbs.db Frame 346: 1006 bytes on wire (8048 bits), 1006 bytes captured (8048 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 17155, Ack: 17475, Len: 952 [Reassembled TCP Segments (2412 bytes): #345(1460), #346(952)] NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 347 18.985951 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=17475 Ack=18107 Win=65535 Len=0 Frame 347: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17475, Ack: 18107, Len: 0 No. Time Source Destination Protocol Info 348 18.992318 193.162.0.193 193.162.0.254 SMB Session Setup AndX Request, NTLMSSP_NEGOTIATE Frame 348: 260 bytes on wire (2080 bits), 260 bytes captured (2080 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17475, Ack: 18107, Len: 206 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 349 18.992662 193.162.0.254 193.162.0.193 SMB Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED Frame 349: 395 bytes on wire (3160 bits), 395 bytes captured (3160 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18107, Ack: 17681, Len: 341 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 350 18.992903 193.162.0.193 193.162.0.254 SMB Session Setup AndX Request, NTLMSSP_AUTH, User: \ Frame 350: 316 bytes on wire (2528 bits), 316 bytes captured (2528 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17681, Ack: 18448, Len: 262 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 351 18.993395 193.162.0.254 193.162.0.193 SMB Session Setup AndX Response Frame 351: 229 bytes on wire (1832 bits), 229 bytes captured (1832 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18448, Ack: 17943, Len: 175 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 352 18.993511 193.162.0.193 193.162.0.254 SMB Tree Connect AndX Request, Path: \\ORACLESRV\IPC$ Frame 352: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 17943, Ack: 18623, Len: 88 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 353 18.993700 193.162.0.254 193.162.0.193 SMB Tree Connect AndX Response Frame 353: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18623, Ack: 18031, Len: 60 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 354 18.993854 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 354: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18031, Ack: 18683, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 355 18.994008 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 355: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18683, Ack: 18137, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 356 18.994261 193.162.0.193 193.162.0.254 SMB Close Request, FID: 0x0008 Frame 356: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18137, Ack: 18722, Len: 45 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 357 18.995668 193.162.0.254 193.162.0.193 SMB Close Response, FID: 0x0008 Frame 357: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18722, Ack: 18182, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 358 19.000095 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 358: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18182, Ack: 18761, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 359 19.000308 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 359: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18761, Ack: 18288, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 360 19.140597 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=18288 Ack=18800 Win=64842 Len=0 Frame 360: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18288, Ack: 18800, Len: 0 No. Time Source Destination Protocol Info 361 19.168978 Foxconn_8d:6e:0b Broadcast ARP Who has 193.162.0.209? Tell 193.162.0.8 Frame 361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Foxconn_8d:6e:0b (00:15:58:8d:6e:0b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 362 19.513068 HonHaiPr_37:c9:19 Broadcast ARP Who has 193.162.0.93? Tell 193.162.0.10 Frame 362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_37:c9:19 (00:1c:25:37:c9:19), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 363 20.529103 193.162.0.86 193.162.0.255 BROWSER Local Master Announcement BMX-20E139E6C6B, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 363: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Azurewav_1a:cf:99 (00:22:43:1a:cf:99), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.86 (193.162.0.86), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 364 20.529266 00000000.0022431acf99 00000000.ffffffffffff NBIPX Find name NO1<1e> Frame 364: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange NetBIOS over IPX No. Time Source Destination Protocol Info 365 21.124215 Dell_86:9d:11 Broadcast ARP Who has 193.162.0.208? Tell 193.162.0.127 Frame 365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_86:9d:11 (00:15:c5:86:9d:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 366 21.129664 Dell_86:9d:11 Broadcast ARP Who has 193.162.0.209? Tell 193.162.0.127 Frame 366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_86:9d:11 (00:15:c5:86:9d:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 367 21.200299 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 367: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18288, Ack: 18800, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 368 21.200597 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 368: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18800, Ack: 18394, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 369 21.203913 193.162.0.193 193.162.0.254 SMB Trans2 Request, GET_DFS_REFERRAL, File: \oraclesrv\DATA Frame 369: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18394, Ack: 18839, Len: 106 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 370 21.204099 193.162.0.254 193.162.0.193 SMB Trans2 Response, GET_DFS_REFERRAL, Error: STATUS_NO_SUCH_DEVICE Frame 370: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: HewlettP_0a:1d:40 (00:15:60:0a:1d:40), Dst: Vmware_24:87:e2 (00:0c:29:24:87:e2) Internet Protocol, Src: 193.162.0.254 (193.162.0.254), Dst: 193.162.0.193 (193.162.0.193) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: optima-vnet (1051), Seq: 18839, Ack: 18500, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) No. Time Source Destination Protocol Info 371 21.307719 00000000.0022431acf99 00000000.ffffffffffff NBIPX Find name NO1<1e> Frame 371: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange NetBIOS over IPX No. Time Source Destination Protocol Info 372 21.328101 193.162.0.193 193.162.0.254 TCP optima-vnet > netbios-ssn [ACK] Seq=18500 Ack=18878 Win=64764 Len=0 Frame 372: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Vmware_24:87:e2 (00:0c:29:24:87:e2), Dst: HewlettP_0a:1d:40 (00:15:60:0a:1d:40) Internet Protocol, Src: 193.162.0.193 (193.162.0.193), Dst: 193.162.0.254 (193.162.0.254) Transmission Control Protocol, Src Port: optima-vnet (1051), Dst Port: netbios-ssn (139), Seq: 18500, Ack: 18878, Len: 0 No. Time Source Destination Protocol Info 373 21.985874 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 374 22.091962 00000000.0022431acf99 00000000.ffffffffffff NBIPX Find name NO1<1e> Frame 374: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange NetBIOS over IPX No. Time Source Destination Protocol Info 375 22.118339 193.162.0.13 193.162.0.255 NBNS Name query NB DORA2<20> Frame 375: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: AsustekC_9a:48:ce (00:1b:fc:9a:48:ce), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.13 (193.162.0.13), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 376 22.122038 193.162.0.13 193.162.0.255 NBNS Name query NB DORA2<00> Frame 376: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: AsustekC_9a:48:ce (00:1b:fc:9a:48:ce), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 193.162.0.13 (193.162.0.13), Dst: 193.162.0.255 (193.162.0.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 377 22.172639 AsustekC_e3:8c:c8 Broadcast ARP Who has 193.162.0.201? Tell 193.162.0.11 Frame 377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: AsustekC_e3:8c:c8 (00:18:f3:e3:8c:c8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 378 22.871544 00000000.0022431acf99 00000000.ffffffffffff BROWSER Host Announcement BMX-20E139E6C6B, Workstation, Server, NT Workstation, Potential Browser Frame 378: 234 bytes on wire (1872 bits), 234 bytes captured (1872 bits) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange Name Management Protocol over IPX SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 379 23.454680 00:a1:b0:a2:5f:be Broadcast ARP Who has 193.162.0.102? Tell 193.162.0.31 Frame 379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:a1:b0:a2:5f:be (00:a1:b0:a2:5f:be), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request)