Filippo Carletti
2008-Feb-25 14:38 UTC
[Samba] Error accessing [homes] after 3.0.25b update (uppercase)
OS is smeserver, based on CentOS/RHEL 4.
After update to samba 3.0.25b (included in RHEL U6) users who had
"mapped" their home in Network places were unable to access the share.
All other shares worked.
On every attempt a line similar to the following was logged:
Feb 14 10:11:49 nethservice smbd[6258]:
'/home/e-smith/files/users/FRANCESCA/home' does not exist or
permission denied when connecting to [FRANCESCA] Error was No such
file or directory
The right path is "francesca" (lowercase), not FRANCESCA (uppercase).
If they used Start->Run->'\\ip.of.smb.server\home' it worked.
I tried upgrading to 3.0.28 (from here:
http://ftp.sernet.de/pub/samba/recent/rhel/4/i386) but nothing
changed.
I reverted to 3.0.10 from RHEL U4 and home access started to work again.
I'm looking for guidance to open a good bug report.
I collected a tcpdump of a failed connection (slightly edited to
remove real domain name):
10:11:49.338675 IP 192.168.193.50.1083 > 192.168.193.11.139: P
2886167783:2886168023(240) ack 1982778445 win 65311 NBT Packet
0x0000: 4500 0118 8f86 4000 8006 66ca c0a8 c132 E.....@...f....2
0x0010: c0a8 c10b 043b 008b ac07 6ce7 762e cc4d .....;....l.v..M
0x0020: 5018 ff1f 5af1 0000 0000 00ec ff53 4d42 P...Z........SMB
0x0030: 7300 0000 0018 07c8 0000 0000 0000 0000 s...............
0x0040: 0000 0000 0000 fffe 0000 c151 0cff 00ec ...........Q....
0x0050: 0004 4132 0001 0000 0000 004a 0000 0000 ..A2.......J....
0x0060: 00d4 0000 a0b1 0060 4806 062b 0601 0505 .......`H..+....
0x0070: 02a0 3e30 3ca0 0e30 0c06 0a2b 0601 0401 ..>0<..0...+....
0x0080: 8237 0202 0aa2 2a04 284e 544c 4d53 5350 .7....*.(NTLMSSP
0x0090: 0001 0000 0097 8208 e200 0000 0000 0000 ................
0x00a0: 0000 0000 0000 0000 0005 0128 0a00 0000 ...........(....
0x00b0: 0f00 5700 6900 6e00 6400 6f00 7700 7300 ..W.i.n.d.o.w.s.
0x00c0: 2000 3200 3000 3000 3200 2000 5300 6500 ..2.0.0.2...S.e.
0x00d0: 7200 7600 6900 6300 6500 2000 5000 6100 r.v.i.c.e...P.a.
0x00e0: 6300 6b00 2000 3200 2000 3200 3600 3000 c.k...2...2.6.0.
0x00f0: 3000 0000 5700 6900 6e00 6400 6f00 7700 0...W.i.n.d.o.w.
0x0100: 7300 2000 3200 3000 3000 3200 2000 3500 s...2.0.0.2...5.
0x0110: 2e00 3100 0000 0000 ..1.....
10:11:49.339522 IP 192.168.193.11.139 > 192.168.193.50.1083: P
1:345(344) ack 240 win 32767 NBT Packet
0x0000: 4500 0180 775a 4000 4006 be8e c0a8 c10b E...wZ@.@.......
0x0010: c0a8 c132 008b 043b 762e cc4d ac07 6dd7 ...2...;v..M..m.
0x0020: 5018 7fff 0502 0000 0000 0154 ff53 4d42 P..........T.SMB
0x0030: 7316 0000 c088 01c8 0000 0000 0000 0000 s...............
0x0040: 0000 0000 0000 fffe d200 c151 04ff 0000 ...........Q....
0x0050: 0000 00dd 0029 01a1 81da 3081 d7a0 030a .....)....0.....
0x0060: 0101 a10c 060a 2b06 0104 0182 3702 020a ......+.....7...
0x0070: a281 c104 81be 4e54 4c4d 5353 5000 0200 ......NTLMSSP...
0x0080: 0000 1600 1600 3000 0000 9582 8ae2 26e0 ......0.......&.
0x0090: 68f8 9d94 1adc 0000 0000 0000 0000 7800 h.............x.
0x00a0: 7800 4600 0000 4e00 4500 5400 4800 5300 x.F...N.E.T.H.S.
0x00b0: 4500 5200 5600 4900 4300 4500 0200 1600 E.R.V.I.C.E.....
0x00c0: 4e00 4500 5400 4800 5300 4500 5200 5600 N.E.T.H.S.E.R.V.
0x00d0: 4900 4300 4500 0100 1600 4e00 4500 5400 I.C.E.....N.E.T.
0x00e0: 4800 5300 4500 5200 5600 4900 4300 4500 H.S.E.R.V.I.C.E.
0x00f0: 0400 1000 7300 6900 6700 6100 6d00 2e00 ....x.x.x.x.x...
0x0100: 6900 7400 0300 2800 6e00 6500 7400 6800 i.t...(.n.e.t.h.
0x0110: 7300 6500 7200 7600 6900 6300 6500 2e00 s.e.r.v.i.c.e...
0x0120: 7300 6900 6700 6100 6d00 2e00 6900 7400 x.x.x.x.x...i.t.
0x0130: 0000 0000 5500 6e00 6900 7800 0000 5300 ....U.n.i.x...S.
0x0140: 6100 6d00 6200 6100 2000 3300 2e00 3000 a.m.b.a...3...0.
0x0150: 2e00 3200 3800 2d00 5300 6500 7200 4e00 ..2.8.-.S.e.r.N.
0x0160: 6500 7400 2d00 5200 6500 6400 4800 6100 e.t.-.R.e.d.H.a.
0x0170: 7400 0000 5300 4900 4700 4100 4d00 0000 t...X.X.X.X.X...
10:11:49.340330 IP 192.168.193.50.1083 > 192.168.193.11.139: P
240:520(280) ack 345 win 64967 NBT Packet
0x0000: 4500 0140 8f87 4000 8006 66a1 c0a8 c132 E..@..@...f....2
0x0010: c0a8 c10b 043b 008b ac07 6dd7 762e cda5 .....;....m.v...
0x0020: 5018 fdc7 e814 0000 0000 0114 ff53 4d42 P............SMB
0x0030: 7300 0000 0018 07c8 0000 0000 0000 0000 s...............
0x0040: 0000 0000 0000 fffe d200 0152 0cff 0014 ...........R....
0x0050: 0104 4132 0001 0000 0000 0073 0000 0000 ..A2.......s....
0x0060: 00d4 0000 a0d9 00a1 7130 6fa2 6d04 6b4e ........q0o.m.kN
0x0070: 544c 4d53 5350 0003 0000 0001 0001 005a TLMSSP.........Z
0x0080: 0000 0000 0000 005b 0000 0000 0000 0048 .......[.......H
0x0090: 0000 0000 0000 0048 0000 0012 0012 0048 .......H.......H
0x00a0: 0000 0010 0010 005b 0000 0015 8a88 e205 .......[........
0x00b0: 0128 0a00 0000 0f50 0043 002d 0046 0052 .(.....P.C.-.F.R
0x00c0: 0041 004e 0043 0049 0000 edea 8b36 a5ec .A.N.C.I.....6..
0x00d0: 627c de1c 604b 8ccc 3294 5700 6900 6e00 b|..`K..2.W.i.n.
0x00e0: 6400 6f00 7700 7300 2000 3200 3000 3000 d.o.w.s...2.0.0.
0x00f0: 3200 2000 5300 6500 7200 7600 6900 6300 2...S.e.r.v.i.c.
0x0100: 6500 2000 5000 6100 6300 6b00 2000 3200 e...P.a.c.k...2.
0x0110: 2000 3200 3600 3000 3000 0000 5700 6900 ..2.6.0.0...W.i.
0x0120: 6e00 6400 6f00 7700 7300 2000 3200 3000 n.d.o.w.s...2.0.
0x0130: 3000 3200 2000 3500 2e00 3100 0000 0000 0.2...5...1.....
10:11:49.341400 IP 192.168.193.11.139 > 192.168.193.50.1083: P
345:477(132) ack 520 win 32767 NBT Packet
0x0000: 4500 00ac 775c 4000 4006 bf60 c0a8 c10b E...w\@.@..`....
0x0010: c0a8 c132 008b 043b 762e cda5 ac07 6eef ...2...;v.....n.
0x0020: 5018 7fff 042e 0000 0000 0080 ff53 4d42 P............SMB
0x0030: 7300 0000 0088 01c8 0000 0000 0000 0000 s...............
0x0040: 0000 0000 0000 fffe d300 0152 04ff 0000 ...........R....
0x0050: 0000 0009 0055 00a1 0730 05a0 030a 0100 .....U...0......
0x0060: 5500 6e00 6900 7800 0000 5300 6100 6d00 U.n.i.x...S.a.m.
0x0070: 6200 6100 2000 3300 2e00 3000 2e00 3200 b.a...3...0...2.
0x0080: 3800 2d00 5300 6500 7200 4e00 6500 7400 8.-.S.e.r.N.e.t.
0x0090: 2d00 5200 6500 6400 4800 6100 7400 0000 -.R.e.d.H.a.t...
0x00a0: 5300 4900 4700 4100 4d00 0000 S.I.G.A.M...
10:11:49.342002 IP 192.168.193.50.1083 > 192.168.193.11.139: P
520:612(92) ack 477 win 64835 NBT Packet
0x0000: 4500 0084 8f88 4000 8006 675c c0a8 c132 E.....@...g\...2
0x0010: c0a8 c10b 043b 008b ac07 6eef 762e ce29 .....;....n.v..)
0x0020: 5018 fd43 5556 0000 0000 0058 ff53 4d42 P..CUV.....X.SMB
0x0030: 7500 0000 0018 07c8 0000 0000 0000 0000 u...............
0x0040: 0000 0000 0000 fffe d300 4152 04ff 0058 ..........AR...X
0x0050: 0008 0001 002d 0000 5c00 5c00 4e00 4500 .....-..\.\.N.E.
0x0060: 5400 4800 5300 4500 5200 5600 4900 4300 T.H.S.E.R.V.I.C.
0x0070: 4500 5c00 4900 5000 4300 2400 0000 3f3f E.\.I.P.C.$...??
0x0080: 3f3f 3f00 ???.
10:11:49.342438 IP 192.168.193.11.139 > 192.168.193.50.1083: P
477:537(60) ack 612 win 32767 NBT Packet
0x0000: 4500 0064 775e 4000 4006 bfa6 c0a8 c10b E..dw^@.@.......
0x0010: c0a8 c132 008b 043b 762e ce29 ac07 6f4b ...2...;v..)..oK
0x0020: 5018 7fff 03e6 0000 0000 0038 ff53 4d42 P..........8.SMB
0x0030: 7500 0000 0088 01c8 0000 0000 0000 0000 u...............
0x0040: 0000 0000 0300 fffe d300 4152 07ff 0000 ..........AR....
0x0050: 0001 00ff 0100 00ff 0100 0007 0049 5043 .............IPC
0x0060: 0000 0000 ....
10:11:49.342960 IP 192.168.193.50.1083 > 192.168.193.11.139: P
612:732(120) ack 537 win 64775 NBT Packet
0x0000: 4500 00a0 8f89 4000 8006 673f c0a8 c132 E.....@...g?...2
0x0010: c0a8 c10b 043b 008b ac07 6f4b 762e ce65 .....;....oKv..e
0x0020: 5018 fd07 66e1 0000 0000 0074 ff53 4d42 P...f......t.SMB
0x0030: 3200 0000 0018 07c8 0000 0000 0000 0000 2...............
0x0040: 0000 0000 0300 0400 d300 8152 0f30 0000 ...........R.0..
0x0050: 0000 0000 1000 0000 0000 0000 0000 0030 ...............0
0x0060: 0044 0000 0000 0001 0010 0033 0000 0000 .D.........3....
0x0070: 0300 5c00 4e00 6500 7400 6800 7300 6500 ..\.N.e.t.h.s.e.
0x0080: 7200 7600 6900 6300 6500 5c00 6600 7200 r.v.i.c.e.\.f.r.
0x0090: 6100 6e00 6300 6500 7300 6300 6100 0000 a.n.c.e.s.c.a...
10:11:49.343181 IP 192.168.193.11.139 > 192.168.193.50.1083: P
537:576(39) ack 732 win 32767 NBT Packet
0x0000: 4500 004f 7760 4000 4006 bfb9 c0a8 c10b E..Ow`@.@.......
0x0010: c0a8 c132 008b 043b 762e ce65 ac07 6fc3 ...2...;v..e..o.
0x0020: 5018 7fff 03d1 0000 0000 0023 ff53 4d42 P..........#.SMB
0x0030: 3225 0200 c088 41c8 0000 0000 0000 0000 2%....A.........
0x0040: 0000 0000 0300 0400 d300 8152 0000 00 ...........R...
10:11:49.345405 IP 192.168.193.50.1083 > 192.168.193.11.139: P
732:834(102) ack 576 win 64736 NBT Packet
0x0000: 4500 008e 8f8a 4000 8006 6750 c0a8 c132 E.....@...gP...2
0x0010: c0a8 c10b 043b 008b ac07 6fc3 762e ce8c .....;....o.v...
0x0020: 5018 fce0 b658 0000 0000 0062 ff53 4d42 P....X.....b.SMB
0x0030: 7500 0000 0018 07c8 0000 0000 0000 0000 u...............
0x0040: 0000 0000 0000 fffe 6b00 c152 04ff 0062 ........k..R...b
0x0050: 0008 0001 0037 0000 5c00 5c00 4e00 4500 .....7..\.\.N.E.
0x0060: 5400 4800 5300 4500 5200 5600 4900 4300 T.H.S.E.R.V.I.C.
0x0070: 4500 5c00 4600 5200 4100 4e00 4300 4500 E.\.F.R.A.N.C.E.
0x0080: 5300 4300 4100 0000 3f3f 3f3f 3f00 S.C.A...?????.
10:11:49.346253 IP 192.168.193.11.139 > 192.168.193.50.1083: P
576:615(39) ack 834 win 32767 NBT Packet
0x0000: 4500 004f 7762 4000 4006 bfb7 c0a8 c10b E..Owb@.@.......
0x0010: c0a8 c132 008b 043b 762e ce8c ac07 7029 ...2...;v.....p)
0x0020: 5018 7fff 03d1 0000 0000 0023 ff53 4d42 P..........#.SMB
0x0030: 75cc 0000 c088 01c8 0000 0000 0000 0000 u...............
0x0040: 0000 0000 0000 fffe 6b00 c152 0000 00 ........k..R...
--
Ciao,
Filippo
Adam Williams
2008-Feb-25 19:54 UTC
[Samba] Error accessing [homes] after 3.0.25b update (uppercase)
i had the same problem, adding msdfs root = yes to the global section in smb.conf fixed it for me. Filippo Carletti wrote:> OS is smeserver, based on CentOS/RHEL 4. > After update to samba 3.0.25b (included in RHEL U6) users who had > "mapped" their home in Network places were unable to access the share. > All other shares worked. > > On every attempt a line similar to the following was logged: > Feb 14 10:11:49 nethservice smbd[6258]: > '/home/e-smith/files/users/FRANCESCA/home' does not exist or > permission denied when connecting to [FRANCESCA] Error was No such > file or directory > > The right path is "francesca" (lowercase), not FRANCESCA (uppercase). > > If they used Start->Run->'\\ip.of.smb.server\home' it worked. > > I tried upgrading to 3.0.28 (from here: > http://ftp.sernet.de/pub/samba/recent/rhel/4/i386) but nothing > changed. > > I reverted to 3.0.10 from RHEL U4 and home access started to work again. > > I'm looking for guidance to open a good bug report. > > I collected a tcpdump of a failed connection (slightly edited to > remove real domain name): > > 10:11:49.338675 IP 192.168.193.50.1083 > 192.168.193.11.139: P > 2886167783:2886168023(240) ack 1982778445 win 65311 NBT Packet > 0x0000: 4500 0118 8f86 4000 8006 66ca c0a8 c132 E.....@...f....2 > 0x0010: c0a8 c10b 043b 008b ac07 6ce7 762e cc4d .....;....l.v..M > 0x0020: 5018 ff1f 5af1 0000 0000 00ec ff53 4d42 P...Z........SMB > 0x0030: 7300 0000 0018 07c8 0000 0000 0000 0000 s............... > 0x0040: 0000 0000 0000 fffe 0000 c151 0cff 00ec ...........Q.... > 0x0050: 0004 4132 0001 0000 0000 004a 0000 0000 ..A2.......J.... > 0x0060: 00d4 0000 a0b1 0060 4806 062b 0601 0505 .......`H..+.... > 0x0070: 02a0 3e30 3ca0 0e30 0c06 0a2b 0601 0401 ..>0<..0...+.... > 0x0080: 8237 0202 0aa2 2a04 284e 544c 4d53 5350 .7....*.(NTLMSSP > 0x0090: 0001 0000 0097 8208 e200 0000 0000 0000 ................ > 0x00a0: 0000 0000 0000 0000 0005 0128 0a00 0000 ...........(.... > 0x00b0: 0f00 5700 6900 6e00 6400 6f00 7700 7300 ..W.i.n.d.o.w.s. > 0x00c0: 2000 3200 3000 3000 3200 2000 5300 6500 ..2.0.0.2...S.e. > 0x00d0: 7200 7600 6900 6300 6500 2000 5000 6100 r.v.i.c.e...P.a. > 0x00e0: 6300 6b00 2000 3200 2000 3200 3600 3000 c.k...2...2.6.0. > 0x00f0: 3000 0000 5700 6900 6e00 6400 6f00 7700 0...W.i.n.d.o.w. > 0x0100: 7300 2000 3200 3000 3000 3200 2000 3500 s...2.0.0.2...5. > 0x0110: 2e00 3100 0000 0000 ..1..... > 10:11:49.339522 IP 192.168.193.11.139 > 192.168.193.50.1083: P > 1:345(344) ack 240 win 32767 NBT Packet > 0x0000: 4500 0180 775a 4000 4006 be8e c0a8 c10b E...wZ@.@....... > 0x0010: c0a8 c132 008b 043b 762e cc4d ac07 6dd7 ...2...;v..M..m. > 0x0020: 5018 7fff 0502 0000 0000 0154 ff53 4d42 P..........T.SMB > 0x0030: 7316 0000 c088 01c8 0000 0000 0000 0000 s............... > 0x0040: 0000 0000 0000 fffe d200 c151 04ff 0000 ...........Q.... > 0x0050: 0000 00dd 0029 01a1 81da 3081 d7a0 030a .....)....0..... > 0x0060: 0101 a10c 060a 2b06 0104 0182 3702 020a ......+.....7... > 0x0070: a281 c104 81be 4e54 4c4d 5353 5000 0200 ......NTLMSSP... > 0x0080: 0000 1600 1600 3000 0000 9582 8ae2 26e0 ......0.......&. > 0x0090: 68f8 9d94 1adc 0000 0000 0000 0000 7800 h.............x. > 0x00a0: 7800 4600 0000 4e00 4500 5400 4800 5300 x.F...N.E.T.H.S. > 0x00b0: 4500 5200 5600 4900 4300 4500 0200 1600 E.R.V.I.C.E..... > 0x00c0: 4e00 4500 5400 4800 5300 4500 5200 5600 N.E.T.H.S.E.R.V. > 0x00d0: 4900 4300 4500 0100 1600 4e00 4500 5400 I.C.E.....N.E.T. > 0x00e0: 4800 5300 4500 5200 5600 4900 4300 4500 H.S.E.R.V.I.C.E. > 0x00f0: 0400 1000 7300 6900 6700 6100 6d00 2e00 ....x.x.x.x.x... > 0x0100: 6900 7400 0300 2800 6e00 6500 7400 6800 i.t...(.n.e.t.h. > 0x0110: 7300 6500 7200 7600 6900 6300 6500 2e00 s.e.r.v.i.c.e... > 0x0120: 7300 6900 6700 6100 6d00 2e00 6900 7400 x.x.x.x.x...i.t. > 0x0130: 0000 0000 5500 6e00 6900 7800 0000 5300 ....U.n.i.x...S. > 0x0140: 6100 6d00 6200 6100 2000 3300 2e00 3000 a.m.b.a...3...0. > 0x0150: 2e00 3200 3800 2d00 5300 6500 7200 4e00 ..2.8.-.S.e.r.N. > 0x0160: 6500 7400 2d00 5200 6500 6400 4800 6100 e.t.-.R.e.d.H.a. > 0x0170: 7400 0000 5300 4900 4700 4100 4d00 0000 t...X.X.X.X.X... > 10:11:49.340330 IP 192.168.193.50.1083 > 192.168.193.11.139: P > 240:520(280) ack 345 win 64967 NBT Packet > 0x0000: 4500 0140 8f87 4000 8006 66a1 c0a8 c132 E..@..@...f....2 > 0x0010: c0a8 c10b 043b 008b ac07 6dd7 762e cda5 .....;....m.v... > 0x0020: 5018 fdc7 e814 0000 0000 0114 ff53 4d42 P............SMB > 0x0030: 7300 0000 0018 07c8 0000 0000 0000 0000 s............... > 0x0040: 0000 0000 0000 fffe d200 0152 0cff 0014 ...........R.... > 0x0050: 0104 4132 0001 0000 0000 0073 0000 0000 ..A2.......s.... > 0x0060: 00d4 0000 a0d9 00a1 7130 6fa2 6d04 6b4e ........q0o.m.kN > 0x0070: 544c 4d53 5350 0003 0000 0001 0001 005a TLMSSP.........Z > 0x0080: 0000 0000 0000 005b 0000 0000 0000 0048 .......[.......H > 0x0090: 0000 0000 0000 0048 0000 0012 0012 0048 .......H.......H > 0x00a0: 0000 0010 0010 005b 0000 0015 8a88 e205 .......[........ > 0x00b0: 0128 0a00 0000 0f50 0043 002d 0046 0052 .(.....P.C.-.F.R > 0x00c0: 0041 004e 0043 0049 0000 edea 8b36 a5ec .A.N.C.I.....6.. > 0x00d0: 627c de1c 604b 8ccc 3294 5700 6900 6e00 b|..`K..2.W.i.n. > 0x00e0: 6400 6f00 7700 7300 2000 3200 3000 3000 d.o.w.s...2.0.0. > 0x00f0: 3200 2000 5300 6500 7200 7600 6900 6300 2...S.e.r.v.i.c. > 0x0100: 6500 2000 5000 6100 6300 6b00 2000 3200 e...P.a.c.k...2. > 0x0110: 2000 3200 3600 3000 3000 0000 5700 6900 ..2.6.0.0...W.i. > 0x0120: 6e00 6400 6f00 7700 7300 2000 3200 3000 n.d.o.w.s...2.0. > 0x0130: 3000 3200 2000 3500 2e00 3100 0000 0000 0.2...5...1..... > 10:11:49.341400 IP 192.168.193.11.139 > 192.168.193.50.1083: P > 345:477(132) ack 520 win 32767 NBT Packet > 0x0000: 4500 00ac 775c 4000 4006 bf60 c0a8 c10b E...w\@.@..`.... > 0x0010: c0a8 c132 008b 043b 762e cda5 ac07 6eef ...2...;v.....n. > 0x0020: 5018 7fff 042e 0000 0000 0080 ff53 4d42 P............SMB > 0x0030: 7300 0000 0088 01c8 0000 0000 0000 0000 s............... > 0x0040: 0000 0000 0000 fffe d300 0152 04ff 0000 ...........R.... > 0x0050: 0000 0009 0055 00a1 0730 05a0 030a 0100 .....U...0...... > 0x0060: 5500 6e00 6900 7800 0000 5300 6100 6d00 U.n.i.x...S.a.m. > 0x0070: 6200 6100 2000 3300 2e00 3000 2e00 3200 b.a...3...0...2. > 0x0080: 3800 2d00 5300 6500 7200 4e00 6500 7400 8.-.S.e.r.N.e.t. > 0x0090: 2d00 5200 6500 6400 4800 6100 7400 0000 -.R.e.d.H.a.t... > 0x00a0: 5300 4900 4700 4100 4d00 0000 S.I.G.A.M... > 10:11:49.342002 IP 192.168.193.50.1083 > 192.168.193.11.139: P > 520:612(92) ack 477 win 64835 NBT Packet > 0x0000: 4500 0084 8f88 4000 8006 675c c0a8 c132 E.....@...g\...2 > 0x0010: c0a8 c10b 043b 008b ac07 6eef 762e ce29 .....;....n.v..) > 0x0020: 5018 fd43 5556 0000 0000 0058 ff53 4d42 P..CUV.....X.SMB > 0x0030: 7500 0000 0018 07c8 0000 0000 0000 0000 u............... > 0x0040: 0000 0000 0000 fffe d300 4152 04ff 0058 ..........AR...X > 0x0050: 0008 0001 002d 0000 5c00 5c00 4e00 4500 .....-..\.\.N.E. > 0x0060: 5400 4800 5300 4500 5200 5600 4900 4300 T.H.S.E.R.V.I.C. > 0x0070: 4500 5c00 4900 5000 4300 2400 0000 3f3f E.\.I.P.C.$...?? > 0x0080: 3f3f 3f00 ???. > 10:11:49.342438 IP 192.168.193.11.139 > 192.168.193.50.1083: P > 477:537(60) ack 612 win 32767 NBT Packet > 0x0000: 4500 0064 775e 4000 4006 bfa6 c0a8 c10b E..dw^@.@....... > 0x0010: c0a8 c132 008b 043b 762e ce29 ac07 6f4b ...2...;v..)..oK > 0x0020: 5018 7fff 03e6 0000 0000 0038 ff53 4d42 P..........8.SMB > 0x0030: 7500 0000 0088 01c8 0000 0000 0000 0000 u............... > 0x0040: 0000 0000 0300 fffe d300 4152 07ff 0000 ..........AR.... > 0x0050: 0001 00ff 0100 00ff 0100 0007 0049 5043 .............IPC > 0x0060: 0000 0000 .... > 10:11:49.342960 IP 192.168.193.50.1083 > 192.168.193.11.139: P > 612:732(120) ack 537 win 64775 NBT Packet > 0x0000: 4500 00a0 8f89 4000 8006 673f c0a8 c132 E.....@...g?...2 > 0x0010: c0a8 c10b 043b 008b ac07 6f4b 762e ce65 .....;....oKv..e > 0x0020: 5018 fd07 66e1 0000 0000 0074 ff53 4d42 P...f......t.SMB > 0x0030: 3200 0000 0018 07c8 0000 0000 0000 0000 2............... > 0x0040: 0000 0000 0300 0400 d300 8152 0f30 0000 ...........R.0.. > 0x0050: 0000 0000 1000 0000 0000 0000 0000 0030 ...............0 > 0x0060: 0044 0000 0000 0001 0010 0033 0000 0000 .D.........3.... > 0x0070: 0300 5c00 4e00 6500 7400 6800 7300 6500 ..\.N.e.t.h.s.e. > 0x0080: 7200 7600 6900 6300 6500 5c00 6600 7200 r.v.i.c.e.\.f.r. > 0x0090: 6100 6e00 6300 6500 7300 6300 6100 0000 a.n.c.e.s.c.a... > 10:11:49.343181 IP 192.168.193.11.139 > 192.168.193.50.1083: P > 537:576(39) ack 732 win 32767 NBT Packet > 0x0000: 4500 004f 7760 4000 4006 bfb9 c0a8 c10b E..Ow`@.@....... > 0x0010: c0a8 c132 008b 043b 762e ce65 ac07 6fc3 ...2...;v..e..o. > 0x0020: 5018 7fff 03d1 0000 0000 0023 ff53 4d42 P..........#.SMB > 0x0030: 3225 0200 c088 41c8 0000 0000 0000 0000 2%....A......... > 0x0040: 0000 0000 0300 0400 d300 8152 0000 00 ...........R... > 10:11:49.345405 IP 192.168.193.50.1083 > 192.168.193.11.139: P > 732:834(102) ack 576 win 64736 NBT Packet > 0x0000: 4500 008e 8f8a 4000 8006 6750 c0a8 c132 E.....@...gP...2 > 0x0010: c0a8 c10b 043b 008b ac07 6fc3 762e ce8c .....;....o.v... > 0x0020: 5018 fce0 b658 0000 0000 0062 ff53 4d42 P....X.....b.SMB > 0x0030: 7500 0000 0018 07c8 0000 0000 0000 0000 u............... > 0x0040: 0000 0000 0000 fffe 6b00 c152 04ff 0062 ........k..R...b > 0x0050: 0008 0001 0037 0000 5c00 5c00 4e00 4500 .....7..\.\.N.E. > 0x0060: 5400 4800 5300 4500 5200 5600 4900 4300 T.H.S.E.R.V.I.C. > 0x0070: 4500 5c00 4600 5200 4100 4e00 4300 4500 E.\.F.R.A.N.C.E. > 0x0080: 5300 4300 4100 0000 3f3f 3f3f 3f00 S.C.A...?????. > 10:11:49.346253 IP 192.168.193.11.139 > 192.168.193.50.1083: P > 576:615(39) ack 834 win 32767 NBT Packet > 0x0000: 4500 004f 7762 4000 4006 bfb7 c0a8 c10b E..Owb@.@....... > 0x0010: c0a8 c132 008b 043b 762e ce8c ac07 7029 ...2...;v.....p) > 0x0020: 5018 7fff 03d1 0000 0000 0023 ff53 4d42 P..........#.SMB > 0x0030: 75cc 0000 c088 01c8 0000 0000 0000 0000 u............... > 0x0040: 0000 0000 0000 fffe 6b00 c152 0000 00 ........k..R... > > >