tcpdump - router cipcb0 IP 192.168.2.10

James Knott <[email protected]>
Newsgroups gmane.comp.encryption.cipe
Message-ID <[email protected]>
21:40:30.385991 192.168.2.20.32771 > 192.168.1.10.netbios-ns:  [udp sum ok]
 >>> NBT UDP PACKET(137): QUERY; REQUEST; UNICAST
TrnID=0x4524
OpCode=0
NmFlags=0x0
Rcode=0
QueryCount=1
AnswerCount=0
AuthorityCount=0
AddressRecCount=0
QuestionRecords:
Name=*               NameType=0x00 (Workstation)
QuestionType=0x21
QuestionClass=0x1

  (DF) (ttl 64, id 0, len 78)
21:40:30.386950 192.168.1.10.netbios-ns > 192.168.2.20.32771:
 >>> NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
TrnID=0x4524
OpCode=0
NmFlags=0x40
Rcode=0
QueryCount=0
AnswerCount=1
AuthorityCount=0
AddressRecCount=0

ResourceRecords:
Name=*               NameType=0x00 (Workstation)
ResType=0x21
ResClass=0x1
TTL=0 (0x0)
ResourceLength=173
ResourceData=
NumNames=0x7
Name=LINUX           NameType=0x00 (Workstation)	B
Name=                NameType=0x00 (Workstation)	B
Name=                NameType=0x00 (Workstation)	B
Name=                NameType=0x00 (Workstation)	B
Name=                NameType=0x00 (Workstation)	B
Name=                NameType=0x00 (Workstation)	B
Name=                NameType=0x00 (Workstation)	B
AdditionalData:
Data: (46 bytes)
[000] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
[010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
[020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00        ........ ......

  (DF) (ttl 63, id 0, len 257)
21:40:30.956831 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: S [tcp 
sum ok] 3294850949:3294850949(0) win 5608 <mss 1402,sackOK,timestamp 
123568 0,nop,wscale 0> (DF) (ttl 64, id 36149, len 60)
21:40:30.957198 192.168.1.10.netbios-ssn > 192.168.2.20.32775: S [tcp 
sum ok] 3286453376:3286453376(0) ack 3294850950 win 5792 <mss 
1460,sackOK,timestamp 26692381 123568,nop,wscale 0> (DF) (ttl 63, id 0, 
len 60)
21:40:31.255867 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: . [tcp 
sum ok] ack 1 win 5608 <nop,nop,timestamp 123597 26692381> (DF) (ttl 64, 
id 36150, len 52)
21:40:31.496653 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: P 
1:77(76) ack 1 win 5608 <nop,nop,timestamp 123619 26692381>
 >>> NBT Packet
NBT Session Request
Flags=0x81000048
Destination=LINUX           NameType=0x20 (Server)
Source=
WARNING: Short packet. Try increasing the snap length

  (DF) (ttl 64, id 36151, len 128)
21:40:31.496969 192.168.1.10.netbios-ssn > 192.168.2.20.32775: . [tcp 
sum ok] ack 77 win 5792 <nop,nop,timestamp 26692435 123619> (DF) (ttl 
63, id 1978, len 52)
21:40:31.508894 192.168.1.10.netbios-ssn > 192.168.2.20.32775: P [tcp 
sum ok] 1:5(4) ack 77 win 5792 <nop,nop,timestamp 26692436 123619>
 >>> NBT Packet
NBT Session Granted
Flags=0x82000000

  (DF) (ttl 63, id 1979, len 56)
21:40:31.826012 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: . [tcp 
sum ok] ack 5 win 5608 <nop,nop,timestamp 123653 26692436> (DF) (ttl 64, 
id 36152, len 52)
21:40:31.917001 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: P 
77:245(168) ack 5 win 5608 <nop,nop,timestamp 123653 26692436>
 >>> NBT Packet
NBT Session Packet
Flags=0x0
Length=164 (0xa4)

SMB PACKET: SMBnegprot (REQUEST)
SMB Command   =  0x72
Error class   =  0x0
Error code    =  0 (0x0)
Flags1        =  0x8
Flags2        =  0x1
Tree ID       =  0 (0x0)
Proc ID       =  5709 (0x164d)
UID           =  0 (0x0)
MID           =  1 (0x1)
Word Count    =  0 (0x0)
Dialect=PC N
Dialect=Error! ASCIIZ buffer of type 0 (safety=123)

Dialect=Error! ASCIIZ buffer of type 0 (safety=121)

Dialect=Error! ASCIIZ buffer of type 0 (safety=119)

Dialect=Error! ASCIIZ buffer of type 0 (safety=117)

Dialect=Error! ASCIIZ buffer of type 0 (safety=115)

Dialect=Error! ASCIIZ buffer of type 0 (safety=113)

Dialect=Error! ASCIIZ buffer of type 0 (safety=111)

Dialect=Error! ASCIIZ buffer of type 0 (safety=109)

Dialect=Error! ASCIIZ buffer of type 0 (safety=107)

Dialect=Error! ASCIIZ buffer of type 0 (safety=105)

Dialect=Error! ASCIIZ buffer of type 0 (safety=103)

Dialect=Error! ASCIIZ buffer of type 0 (safety=101)

Dialect=Error! ASCIIZ buffer of type 0 (safety=99)

Dialect=Error! ASCIIZ buffer of type 0 (safety=97)

Dialect=Error! ASCIIZ buffer of type 0 (safety=95)

Dialect=Error! ASCIIZ buffer of type 0 (safety=93)

Dialect=Error! ASCIIZ buffer of type 0 (safety=91)

Dialect=Error! ASCIIZ buffer of type 0 (safety=89)

Dialect=Error! ASCIIZ buffer of type 0 (safety=87)

Dialect=Error! ASCIIZ buffer of type 0 (safety=85)

Dialect=Error! ASCIIZ buffer of type 0 (safety=83)

Dialect=Error! ASCIIZ buffer of type 0 (safety=81)

Dialect=Error! ASCIIZ buffer of type 0 (safety=79)

Dialect=Error! ASCIIZ buffer of type 0 (safety=77)

Dialect=Error! ASCIIZ buffer of type 0 (safety=75)

Dialect=Error! ASCIIZ buffer of type 0 (safety=73)

Dialect=Error! ASCIIZ buffer of type 0 (safety=71)

Dialect=Error! ASCIIZ buffer of type 0 (safety=69)

Dialect=Error! ASCIIZ buffer of type 0 (safety=67)

Dialect=Error! ASCIIZ buffer of type 0 (safety=65)

Dialect=Error! ASCIIZ buffer of type 0 (safety=63)

Dialect=Error! ASCIIZ buffer of type 0 (safety=61)

Dialect=Error! ASCIIZ buffer of type 0 (safety=59)

Dialect=Error! ASCIIZ buffer of type 0 (safety=57)

Dialect=Error! ASCIIZ buffer of type 0 (safety=55)

Dialect=Error! ASCIIZ buffer of type 0 (safety=53)

Dialect=Error! ASCIIZ buffer of type 0 (safety=51)

Dialect=Error! ASCIIZ buffer of type 0 (safety=49)

Dialect=Error! ASCIIZ buffer of type 0 (safety=47)

Dialect=Error! ASCIIZ buffer of type 0 (safety=45)

Dialect=Error! ASCIIZ buffer of type 0 (safety=43)

Dialect=Error! ASCIIZ buffer of type 0 (safety=41)

Dialect=Error! ASCIIZ buffer of type 0 (safety=39)

Dialect=Error! ASCIIZ buffer of type 0 (safety=37)

Dialect=Error! ASCIIZ buffer of type 0 (safety=35)

Dialect=Error! ASCIIZ buffer of type 0 (safety=33)

Dialect=Error! ASCIIZ buffer of type 0 (safety=31)

Dialect=Error! ASCIIZ buffer of type 0 (safety=29)

Dialect=Error! ASCIIZ buffer of type 0 (safety=27)

Dialect=Error! ASCIIZ buffer of type 0 (safety=25)

Dialect=Error! ASCIIZ buffer of type 0 (safety=23)

Dialect=Error! ASCIIZ buffer of type 0 (safety=21)

Dialect=Error! ASCIIZ buffer of type 0 (safety=19)

Dialect=Error! ASCIIZ buffer of type 0 (safety=17)

Dialect=Error! ASCIIZ buffer of type 0 (safety=15)

Dialect=Error! ASCIIZ buffer of type 0 (safety=13)

Dialect=Error! ASCIIZ buffer of type 0 (safety=11)

Dialect=Error! ASCIIZ buffer of type 0 (safety=9)

Dialect=Error! ASCIIZ buffer of type 0 (safety=7)

Dialect=Error! ASCIIZ buffer of type 0 (safety=5)

Dialect=Error! ASCIIZ buffer of type 0 (safety=3)

Dialect=Error! ASCIIZ buffer of type 0 (safety=1)



  (DF) (ttl 64, id 36153, len 220)
21:40:31.941259 192.168.1.10.netbios-ssn > 192.168.2.20.32775: P 
5:83(78) ack 245 win 6432 <nop,nop,timestamp 26692479 123653>
 >>> NBT Packet
NBT Session Packet
Flags=0x0
Length=74 (0x4a)

SMB PACKET: SMBnegprot (REPLY)
SMB Command   =  0x72
Error class   =  0x0
Error code    =  0 (0x0)
Flags1        =  0x88
Flags2        =  0x1
Tree ID       =  0 (0x0)
Proc ID       =  5709 (0x164d)
UID           =  0 (0x0)
MID           =  1 (0x1)
Word Count    =  17 (0x11)
NT1 Protocol
DialectIndex=6 (0x6)
SecMode=0x1
MaxMux=50 (0x32)
NumVcs=1 (0x1)
MaxBuffer=0 (0x0)
RawSize=0 (0x0)
SessionKey=0x0
Capabilities=0x0
ServerTime=NULL
TimeZone=0 (0x0)
CryptKey=Data: (1 bytes)
[000] 00                                                .


  (DF) (ttl 63, id 1980, len 130)
21:40:32.305805 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: . [tcp 
sum ok] ack 83 win 5608 <nop,nop,timestamp 123703 26692479> (DF) (ttl 
64, id 36154, len 52)
21:41:30.383395 192.168.1.10.netbios-dgm > 192.168.2.20.netbios-dgm:
 >>> NBT UDP PACKET(138) Res=0x110A ID=0x70F9 IP=192 (0xc0).168 (0xa8).1 
(0x1).10 (0xa) Port=138 (0x8a) Length=213 (0xd5) Res2=0x0
SourceName=LINUX           NameType=0x00 (Workstation)
DestName=
WARNING: Short packet. Try increasing the snap length

  (DF) (ttl 63, id 0, len 241)
21:41:30.986055 192.168.2.20 > 192.168.1.10: icmp: 192.168.2.20 udp port 
netbios-dgm unreachable [tos 0xc0]  (ttl 255, id 55713, len 269)
21:42:31.969484 192.168.1.10.netbios-ssn > 192.168.2.20.32775: F [tcp 
sum ok] 83:83(0) ack 245 win 6432 <nop,nop,timestamp 26704482 123703> 
(DF) (ttl 63, id 1981, len 52)
21:42:32.453591 192.168.2.20.32775 > 192.168.1.10.netbios-ssn: . [tcp 
sum ok] ack 84 win 5608 <nop,nop,timestamp 135719 26704482> (DF) (ttl 
64, id 36155, len 52)
21:44:30.379313 192.168.1.10.netbios-dgm > 192.168.2.20.netbios-dgm:
 >>> NBT UDP PACKET(138) Res=0x110A ID=0x70FF IP=192 (0xc0).168 (0xa8).1 
(0x1).10 (0xa) Port=138 (0x8a) Length=213 (0xd5) Res2=0x0
SourceName=LINUX           NameType=0x00 (Workstation)
DestName=
WARNING: Short packet. Try increasing the snap length

  (DF) (ttl 63, id 0, len 241)
21:44:30.962037 192.168.2.20 > 192.168.1.10: icmp: 192.168.2.20 udp port 
netbios-dgm unreachable [tos 0xc0]  (ttl 255, id 55714, len 269)


--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.